Technical Tip: How to verify DC agent FSSO is sending user authentication information to FortiGate

[tpatel]

Description	This article describes how to verify user authentication information on FortiGate, which the DC agent sends.
Scope	FortiGate.
Solution	FSSO is configured on FortiGate. Refer to the article below to configure FSSO in DC Agent mode. Technical Tip: Configure FSSO in DC Agent mode. Run the debug command below to verify that user information is sent by the DC Agent to FortiGate diagnose debug application authd 8256 diagnose debug enable <----- To enable debugging. Example output. [_process_logon:1082]: TEST (192.168.30.2, 0) logged on from Local FSSO Agent.  <----- TEST is a user. [_process_logon:1082]: TEST (192.168.30.2, 0) logged on from FSSO-test.ca.    <----- FSSO external  collector name.                                                                                                                                                          The two debug outputs above show that auth information is sent from the DC Agent to FortiGate. FortiGate will add the user information to the FSSO auth list. [_process_logoff:1179]: TEST (192.168.30.2, 0) logged off from Local FSSO Agent. The log above shows that the DC Agent is sending log off information to the FortiGate. Related articles: Troubleshooting Tip: FSSO Complete troubleshooting for TAC tickets Technical Tip: FSSO choose between DC Agent mode or Polling mode