|
When it comes to firewall local users, the main reason will be enabling the admin-restrict in the global setting.
config system global
set admin-restrict-local {enable | disable} <----- Default is set to disable.
end
If it is enabled, then the user credential check request will not check with respect to the local database and it will be blocked. Instead, it will be querying the remoter servers always.
It is possible to confirm the same by running the below command in the CLI:
diagnose debug reset
diagnose debug application fnbamd -1
diagnose debug application authd -1
diagnose debug enable
After that, disable the log by 'diagnose debug disable'.
In the debug, it is possible to see that the request is only forwarding to the remote server and not the local database.
|
