Troubleshooting Tip: Unable to login to admin UI using LDAP credentials

[khoffman]

Description	This article describes troubleshooting steps to take when admin users who authenticate using LDAP are not able to access the FortiNAC GUI.
Scope	FortiNAC-F. v7.2,v7.4 and v7.6.
Solution	GUI method:  Login to the FortiNAC GUI using a local administrator account. Navigate to Network -> Settings -> Authentication -> LDAP. Alt: System -> Settings -> Authentication -> LDAP. Select the applicable LDAP server and select modify. Select Validate Credentials. CLI method:  Log in to FortiNAC-F as 'admin'. Enter the shell with the following command: execute enter-shell Validate connection to LDAP server from the CLI, type:  directorytest -conn Print existing LDAP settings, type:  directorytest -dump If credentials fail to validate work with the server team to determine if the password for the LDAP login account has been changed or if the account has been locked. This account is used by FortiNAC to authenticate and look up users.  Related Debug commands:  nacdebug -name DirectoryManager true nacdebug -name DirectoryAuthentication true Note: In firmware release 7.6.2, there is a known issue with LDAP Admin user authentication when 'Additional Configuration' is set up under LDAP settings as shown below: This issue will be fixed in a later release.  Workaround: Clear the values for 'Domain Name' and 'Secondary Server'. Related articles:  Directories Technical Tip: How to get a debug log report from FortiNAC