Troubleshooting Tip: Using the CLI tool 'ssotool' to view FSSO and Security Fabric connections in FortiNAC

khoffman · ‎05-21-2024

Description

This article describes how to use the CLI tool "ssotool" in the FortiNAC-F. "ssotool" is a command line tool to assist with quickly deterring the type of connector has been configured from the FortiNAC CLI.

Scope

ForitNAC-F 7.2 & 7.4.

Solution

Login to the FortiNAC-F CLI.
Enter the shell.

execute enter-shell

Use the following syntax to print established connector agents from the CLI:

ssotool -listAgents

Example output for Security Fabric Connection (Dynamic Address Tags):

Example output for Connector-Based FSSO:

When no connector has been established with FortiNAC, the following output is seen:

execute enter-shell
ssotool -listAgents
Exception in thread "main" java.rmi.ServerException: RemoteException occurred in server thread; nested exception is:
java.rmi.RemoteException
at com.sun.corba.se.impl.javax.rmi.CORBA.Util.mapSystemException(Util.java:191)
at com.bsc.api.CORBAUtil.mapSystemException(CORBAUtil.java:26)
at javax.rmi.CORBA.Util.mapSystemException(Util.java:95)
at com.bsc.api.sso._SSOManagerInterface_Stub.dumpSSOAgents(Unknown Source)
at SSOTool.<init>(SSOTool.java:119)
at SSOTool.main(SSOTool.java:315)
Caused by: java.rmi.RemoteException
at com.bsc.plugin.manager.SSOManager.dumpSSOAgents(SSOManager.java:5057)
at com.bsc.plugin.manager._SSOManager_Tie._invoke(Unknown Source)
at com.sun.corba.se.impl.protocol.CorbaServerRequestDispatcherImpl.dispatchToServant(CorbaServerRequestDispatcherImpl.java:654)
at com.sun.corba.se.impl.protocol.CorbaServerRequestDispatcherImpl.dispatch(CorbaServerRequestDispatcherImpl.java:205)
at com.sun.corba.se.impl.protocol.CorbaMessageMediatorImpl.handleRequestRequest(CorbaMessageMediatorImpl.java:1700)
at com.sun.corba.se.impl.protocol.CorbaMessageMediatorImpl.handleRequest(CorbaMessageMediatorImpl.java:1558)
at com.sun.corba.se.impl.protocol.CorbaMessageMediatorImpl.handleInput(CorbaMessageMediatorImpl.java:940)
at com.sun.corba.se.impl.protocol.giopmsgheaders.RequestMessage_1_2.callback(RequestMessage_1_2.java:198)
at com.sun.corba.se.impl.protocol.CorbaMessageMediatorImpl.handleRequest(CorbaMessageMediatorImpl.java:712)
at com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.dispatch(SocketOrChannelConnectionImpl.java:474)
at com.sun.corba.se.impl.transport.SocketOrChannelConnectionImpl.read(SocketOrChannelConnectionImpl.java:311)
at com.sun.corba.se.impl.transport.ReaderThreadImpl.doWork(ReaderThreadImpl.java:98)
at com.sun.corba.se.impl.orbutil.threadpool.ThreadPoolImpl$WorkerThread.performWork(ThreadPoolImpl.java:490)
at com.sun.corba.se.impl.orbutil.threadpool.ThreadPoolImpl$WorkerThread.run(ThreadPoolImpl.java:519)
SSOTool found no agents

Possible causes:

Traffic is not allowed between FortiNAC and the FortiGate firewall.
Protocol (FSSO) has not be enabled on the FortiNAC management interface.

Related articles: