Remote authentication issue (RADIUS)

Forum|Forum|11 years ago
October 8, 2014
3 replies
15762 views

Hi. I' m trying to set the administrator type as remote, so that if I telnet to the FW it will authenticate using RADIUS server. I have encountered errors while editing admin users: 1. Setting administrator type in GUI as remote, the error shows: Entry not found. 2. Using CLI: It seems that ' remote-group' is missing somewhere, but I couldn' t find any reference to it in the documentation. This is what happens: # config system admin # edit admin # set remote-auth enable # set remote-group name set user group name ---VDOM:root--- # set remote-group root The remote-group:' ' is not in admin user' s vdom node_check_object fail! for remote-group root value parse error before ' root' Command fail. Return code -3 Machine: FortiGate 100D Firmware: v5.0,build4429 (GA) Regards

Christopher_McMullan

Staff

You need to have at least one user group with a RADIUS server as a member. How is the group and server set up? Obviously strip out passwords or any sensitive information, then post the output from: config user radius edit radius_server_name get end config user group edit group_containing_radius_server get end

forti_userAuthor

New Member

Hi, sorry for the late reply. Here is the output of the commands: firewall (RADIUS_set) # get name : RADIUS_set server : 10.1.243.130 secret : * all-usergroup : enable use-management-vdom : disable nas-ip : 10.1.243.98 radius-port : 1812 h3c-compatibility : disable auth-type : auto source-ip : 0.0.0.0 rsso : disable secondary-server : 10.1.243.132 secondary-secret : * tertiary-server : tertiary-secret : * accounting-server: firewall (radadmin) # get name : radadmin group-type : firewall authtimeout : 0 auth-concurrent-override: disable http-digest-realm : member: == [ RADIUS_set ] name: RADIUS_set match: