Poll Active Directory Server

I just tried FSSO polling mode on V5.0.1,it works fine.Have you created the user group and select the group members?And you should create the identity based policy and select the user group in the policy.Pls check your config,especially the policy config.Thanks.

Nope.. does not work for me. Fortinet tech support is having a hell of a time with it as well. I can get the groups in and all the and all of the necessary config, but all users show up as guest. The LDAP tests ok from the ' edit LDAP server' , but when i test the authentication via the command line ' diagnose test authserver ldap <LDAP server_name> <username> <password>' and it fails...

Update: Just fixed the command line fail issue, but all users still show up as guest. I am going to bounce the firewall tonight to see if that fixes anything.

It seems that the internal collector does not support NTLM authentication (for instance, computers not joined to domain and non-windows workstations). If you take a look at: # config system fsso-polling # get status : enable listening-port : 8000 authentication : disable There' s no option to enable NTLM authentication like there' s in the Windows based collector. I' ve done a packet trace and the Fortigate does not send a NTLM_CHALLENGE response to the client, it justs reset the connection. Take a look at the traces i' ve attached. fgt_ntlm_broken - Using internal Fortigate Collector fgt_ntlm_ok - Using Windows based Fortigate Collector When using the Windows collector, Fortigate sends a NTLM_CHALLENGE to the user' s browser. This does not happen when the internal Collector is used.

@msaraiva NTLM support is actually a new feature request. This has been requested to be implemented in a future release.