Technical Tip: LDAP error when trying to verify password

[ekrishnan]

Description	This article describes the possible cause for the LDAP error: 'Password verification failed(80090308: LdapErr: DSID-0C090598, comment: AcceptSecurityContext error, data 52e, v4f7c).'.
Scope	FortiPAM.
Solution	It is observed when trying to verify a password for a target that the following error is encountered: The above can be seen when navigating to Secrets -> Select the secret with issue -> Logs. Reason: This is because the 'domain' parameter is not defined for the secret, and this can be checked on the CLI. Debug commands: diagnose wad debug enable category secret diagnose wad debug enable category pwdchg diagnose debug enable Example: Solution: Once the 'domain' parameter is defined, the issue will be resolved. LDAP configuration: (User management -> LDAP Servers). The domain, as per the configuration, is 'kj.ftnt'. config secret target     edit "10.47.1.41" ----------> Name given to the target.         set class "Other"         set template "Testing-RDP-cust"         set address "10.47.1.41"         set domain "kj.ftnt"     next end Debug exhibiting successful password verification and domain name binding: