I have multiple groups on my FAC that contain LDAP users, I have the filter turned on on Radius Policies Under Groups, and selected all the groups, this works fine as they have a Radius Attribute for the SSLVPN portal that looks for remote user groups,
The FAC is limited to 10 groups, so I have now turned this filter off, so it shouldnt filter at all, and let users and groups in? but it has stopped allowing eveything when I toggle this off? why is that? I am going to have to create remote users instead of groups because of this limit.
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
"Remote LDAP user authentication from X.X.X.X with chained radius auth failed: user not filtered by groups"
I cant filter the user, as he is not in a group, i dont want to filter anything.. how annoyinh
FAC doesn't have a hard limit at 10 groups. The limit is calculated based on the licensing (Users / 10) as it's shown in the Release Notes, basically one group for 10 users. It seems that this FAC has license only for 100 users.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1720 | |
1094 | |
752 | |
447 | |
234 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.