Hello everyone
I am using RADIUS server on my FG-200F to login into web gui. I create a test account and link it to radius profile. I give special admin profile, like creating VLAN, policies etc, to the test account.
The test account can be logged in into FG via RADIUS but its profile is shown as read_only after I login. I can't use the special admin profile with RADIUS, can't change anything on FG. Am I doing something wrong?
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Hi,
Under the admin profile, do : set accprofile-override enable
Done that but still read_only :(
Can you post the config of the Admin Profile and the User ? Also, what are you using as a RADIUS server ?
Sure. Here is the admin profile config:
config system accprofile
edit "test_profile"
set secfabgrp read
set ftviewgrp read
set authgrp read-write
set sysgrp read-write
set netgrp custom
set loggrp read-write
set fwgrp custom
set vpngrp read
set utmgrp read-write
set wifi read-write
config netgrp-permission
set cfg read
set packet-capture read
set route-cfg read
end
config fwgrp-permission
set policy read-write
set address read-write
set service read-write
set schedule read-write
set others read-write
end
next
end
----- this is the admin profile
config system admin
edit "test.radius"
set remote-auth enable
set accprofile "test_profile"
set vdom "root"
set wildcard enable
set remote-group "hrgrp"
set accprofile-override enable
next
end
For RADIUS, I am using Synology. For cisco switches and unifi, it works as expected
Maybe this will get you closer to solve your problem.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1692 | |
1087 | |
752 | |
446 | |
228 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.