FSSO-polling mode, invalid LDAP Sv issue

Hi,

I'd try CLI .. 

1. enable debug

diag debug reset

diag debug app fnbamd 7

diag debug enable

2. then test

diag test auth ldap <SERVER> <username> <password>

.. and fnbamd should let you know if first regular bind failed or haven't found user or so.

I gues sit's failing on first bind, so account used for regular bind has no sufficient rights, or correct password, or FGT has no access to LDAP (some firewall on the way).

Alternatively .. diag sniff packet any 'host <LDAP-IP> and port <LDAP PORT  389>' 6 0 a or sniff LDAP traffic from gui to see directly in packets what LDAP server said, if anything.