FSSO Agent on Windows AD not connect to dc.

[M-Polo-n]

Good morning,

I'm having trouble connecting to the Fortinet Single sign on agent on Domain Controller.

The firewall fails to connect correctly with the SSOA on the domain controller.

On DC the firewall (windows) it's off, port 8000/8002 are ok.

Collector Agent status on DC is RUNNING,

but when I click on the "show log on user" the system respond: "Time out when getting logon user list"

Password require from Fortigate it's ok.

Ldap server on port 389 it's ok.

When click on "Show Monitored DCs" ---> Time out when getting DC agent status.

The log application error:

ldaplib::ldap_connect failed to connect to DC:3268 with error code 0x51.

can anyone help me ?

Tnx

[M-Polo-n · Accepted solution]

I solved by reinstalling the collector on the domain controller.

probably the collector was corrupted during a maintenance reboot of the DC

[Markus_M]

Hello Marco,

no issue or fixed issue is good. Just to add on this:

ldaplib::ldap_connect failed to connect to DC:3268 with error code 0x51.

This is an LDAP response code. Could really be a library problem or there was some underlying other issue that has fixed itself.

The Collector Agent uses Windows libraries to do the LDAP lookup and that as failed.

As per:

https://docs.microsoft.com/en-us/answers/questions/823917/an-active-directory-error-0x51-occurred34-...

[Time_Point_1] [2] [ERROR] An Active Directory error 0x51 occurred when trying to check the suitability of server 'domain_controller_name'. Error: 'Active directory response: The LDAP server is unavailable.'

[Time_Point_2] [2] [ERROR] The LDAP server is unavailable.

Best regards

Markus