Technical Tip: How to diagnose RADIUS authentication for administrators

[gcortes1]

Description	This article describes how to diagnose remote authentication for RADIUS administrators.
Scope	FortiMail.
Solution	The RADIUS configuration for administrator login is described in the following document: Technical Tip: FortiMail remote wildcard domain admin  Enable the following debug processes: diagnose debug application authd set diagnose debug application authd 255 diagnose debug application authd get diagnose debug enable Starting from v7.6.3 and above, use the following commands to enable debugging: diagnose debug application authd level V diagnose debug application authd 7 diagnose debug application authd enable diagnose debug application authd display To disable debug mode, execute the following command: diagnose debug disable Starting from v7.6.3 and above, use the following commands to disable the debugging: diagnose debug application authd level 0 diagnose debug application authd disable The debug output indicates the connection attributes and the response from the RADIUS server. Examples: For valid authentication, 2 – Access-Accept indicates that the authentication was successful and the user is authorized. For failed authentication, 3 – Access-Reject indicates that the authentication failed (invalid credentials or policy violation).