FortiGate
FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
ggolubovic
Staff & Editor
Staff & Editor
Article Id 416960
Description This article describes the steps to check if the service account used for the Single Sign-on Service has enough rights for Lthe DAP query. 
Scope FSSO.
Solution

To be sure that the service account has enough rights and the correct password, run the attached PowerShell script ldap_service_acc_check.ps1.


Download attached ldap_service_acc_check.zip to the target folder, extract it there, and run it from PowerShell prompt:


.\ldap_service_acc_check.ps

 

PS_enter_cred.png

 

Enter username and password. Select OK.

In case if user has enough privileges, output will be printed in green color.

 

PS_success_green.png

When a user account does not have proper privileges, a wrong username or password, the output will be printed in red color.

 

ps_error_red.png