LDAPS authentication on Enterprise WPA2 WIFI issues

[kindydevgun]

We have a hit and miss issue accross multiple sites.  We are using WPA 2 Enterprise authentication via LDAPS on Fortigate 60F and 80F firewalls.

When I test the connectivity under User Authentication, the accounts are authenticating without issue, but when used to connect to the wireless network, it fails with a message stating "unable to connect to network"

On some Fortigates it works without issue and on others it does not.  The firmware is more or less the same but the issue is across multiple firmware tracks.

The firmwares I am using is the latest version under 7.0,7.2,7.4 and 7.6

I noted that on the firewalls where it works, under Log>WiFi Events, the authentication session shows the username of the person attempting to log in.  

On the firewalls where wireless authentication does not work it shows the user as N/A under WiFi Events.

[AEK]

• Is it the same LDAP for all?
• Is it Windows AD or other?
• Can the same laptop connect from one FGT but not from the other? I ask this question is because sometimes the issue can be related to how client transmits his credentials (can be tuned in client's SSID connection properties).

Also please run the following and share the output while trying connect the the SSID.

diagnose debug console timestamp enable
diagnose debug application fnbamd -1
diagnose debug enable