On and off SSLVPN configuration is wrong (-7200) at 48%

[atravel]

We get this message 
"Message Remote LDAP user authentication(chap) with FortiToken failed: invalid password" 

We also get intermittent
"Cannot add user from LDAP server because of this error: Failed to import user "" (rule: AD Sync), The username attribute cannot be retrieved" 

[akanibek]

@atravel, could you tell us if your FAC is added to the Active directory as machine entity? And, if the option 'Use Windows AD Domain Auth' is enabled in the appropriate radius policy? 

Below you can find article about these, and doc link.

https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-Joining-FortiAuthenticator-in-the...

https://docs.fortinet.com/document/fortiauthenticator/6.0.3/administration-guide/641286/remote-authe...

[atravel]

Use Windows AD Domain Auth is not enabled. 

[akanibek]

What device is acting as radius Client? Could you adjust on Radius Client auth. method to PAP, and test it? If it works, you can keep working with PAP method, otherwise you should configure options above.

[atravel]

Our FortiGate is radius Client. 

[atravel]

Is this ok?

[akanibek]

Could you share the screen from Radius server configuration on Fortigate? 

[atravel]

[akanibek]

Change please 'Authentication method' to Specify > PAP, and try to reproduce the issue.

[atravel]

I made the change and Im monitoring the logs to see if the error will reappear.