[Solved]Multiple admin accounts for one vdom with wildcard password via Radius?

Question

I have five vdoms on 1500D unit and I need to add different administrators into each vdom for management via radius and wildcard password. Is this possible with FortiOS 5.2?

I added radius server as the authentication server and then created user group to include that server.

I then go to Global->Admin->Administrators to create new administrator. On the page,

1. I entered administrator username, which matches the radius record

2. I Selected Remote as the Type

3. I checked Wildcard

4. I selected profile as prof_admin

5. I selected corresponding VDOM and User group.

All good, right? Then I go ahead to create a second administrator for the same vdom, I cannot check the Wildcard box...

Is this a bug OR it is the limitation?

syu · Accepted Answer

I was confused by the Wildcard option when creating administrator accounts for each vdom via Radius. I think the documents should clearly say “Administrator field on Web UI when creating the administrator does not need to match the username when using Remote Radius server and wildcard enabled”. Also I thought that Wildcard option is only there so I do not have to specify the radius password when adding to Fortigate…

jodros · Answer

Did you find a way to select the wildcard field for multiple administrator groups? I have it selected for my super_admin group, but I need to create a tier 1 admin group with limited privileges and I cannot figure out how to enable the wildcard.

Thanks

Sign up

Login with SSO

Login to the community

Login with SSO

Scanning file for viruses.

This file cannot be downloaded