SSL_Login_Unknown_Username

[lavallee]

Hey all,

I'm taking over the administration of a Fortigate 100D from a meth user (no joking) and the user's are complaining that they can't get logged into the VPN. 

I created a new local user and it was able to log in, however, I suddenly cannot log into the SSL VPN with my local admin account.

I removed the account from the VPN Group and re-added it, but that didn't help. The user told me that when this has happened in the past, the old admin would reboot the firewall.

I'd like to fix the root issue though. The user and i are getting the exact same error upon login.

On the client side we get "Permission Denied -455"

In the logs I see Action: ssl-login-fail

Reason: sslvpn_login_unknown_user

I've found troubleshooting tips online but they all are for LDAP issues, not local user issues.

I did test the connection to the LDAP server and came back successful. 

The Firmware of the firewall is v5.4.4,build1117 (GA). 

Thank you for your assistance!

EDIT: More infos

Log Debugging:

4/26/2017 5:10:28 PM Notice VPN id=96573 user=* local logged in user* msg="VPN before logon was disabled" vpntype=ipsec 4/26/2017 5:10:28 PM Notice ESNAC id=96951 user=* local logged in user* msg="Endpoint control policy synchronization was enabled" 4/26/2017 5:10:28 PM Notice Console id=96880 user=* local logged in user* msg="User disabled WAN Acceleration" 4/26/2017 5:10:28 PM Warning SSOMA id=96982 user=* local logged in user* msg="Single Sign-On Mobility Agent was disabled" 4/26/2017 5:10:28 PM Warning Console id=96840 user=*local logged in user* msg="Fortiproxy is disabled" 4/26/2017 5:10:32 PM Debug Scheduler GUI change event 4/26/2017 5:10:32 PM Debug Update Update task is called with dwSession=-1 4/26/2017 5:10:32 PM Debug Update forticlient.fortinet.net 4/26/2017 5:10:32 PM Debug Update start_update_thread() called 4/26/2017 5:10:32 PM Debug Update Impersonated=0 4/26/2017 5:10:32 PM Debug Update update started... 4/26/2017 5:10:32 PM Debug Update update process sending request: 00000000FSCI00000000000000000000 4/26/2017 5:10:32 PM Debug Update update process sending request: 00000000FDNI00000000000000000000 4/26/2017 5:10:32 PM Debug Update update process sending request: 01000000FECT00000000000000000000 4/26/2017 5:10:32 PM Debug Update update process sending request: 05004000FVEN00800000009999999999 4/26/2017 5:10:32 PM Debug Update update process sending request: 05004000FCBN00000000009999999999 4/26/2017 5:10:34 PM Debug Update scheduler called us 4/26/2017 5:10:34 PM Debug Scheduler GUI change event 4/26/2017 5:10:36 PM Debug Update scheduler called us 4/26/2017 5:10:36 PM Debug Scheduler handle_processtermination() called 4/26/2017 5:10:36 PM Debug Scheduler child process terminates normally 4/26/2017 5:10:36 PM Debug ESNAC dwMiniSecondaryKATout = 20, dwSecondaryKATout = 1800 4/26/2017 5:10:36 PM Debug ESNAC min = 20 4/26/2017 5:10:37 PM Debug ESNAC dwSilentReg false 4/26/2017 5:10:37 PM Debug ESNAC bFirstKA true 4/26/2017 5:10:37 PM Debug ESNAC Start searching for FGT 4/26/2017 5:10:37 PM Debug ESNAC Searching Default GW 4/26/2017 5:10:38 PM Debug ESNAC Timeout in select in SocketConnect 4/26/2017 5:10:38 PM Debug ESNAC Socket connect failed 4/26/2017 5:10:38 PM Debug ESNAC *client IP address*:8013, Secondary - 0 4/26/2017 5:10:38 PM Debug ESNAC CKeepAlive::SetState 4/26/2017 5:10:38 PM Debug ESNAC Offline 4/26/2017 5:10:38 PM Debug ESNAC m_dwAutoconnectWhenOffnet false 4/26/2017 5:10:38 PM Debug ESNAC End searching for FGT 4/26/2017 5:10:41 PM Debug Update updatetask get virus info file failed 4/26/2017 5:10:41 PM Debug Update update process received object(1 of 3): FCPR 4/26/2017 5:10:41 PM Debug Update update process received object(2 of 3): FDNI 4/26/2017 5:10:41 PM Debug Update update process received object(3 of 3): FECT 4/26/2017 5:10:41 PM Debug Update update done 4/26/2017 5:10:41 PM Debug Scheduler FortiTrayApp : Received WM_USER_UPDATE_SUCCESS message, lParam=0x1 4/26/2017 5:10:41 PM Debug Update update thread exit 4/26/2017 5:10:41 PM Debug Update No update is available. 4/26/2017 5:10:41 PM Debug Scheduler GUI change event 4/26/2017 5:10:44 PM Debug Scheduler handle_processtermination() called 4/26/2017 5:10:44 PM Debug Scheduler child process terminates normally 4/26/2017 5:10:45 PM Debug VPN FortiSslvpn: SSL VPN Tunnel is Disconnected ********* 4/26/2017 5:10:45 PM Debug VPN FortiSslvpn: Client is exited (1) 4/26/2017 5:10:45 PM Debug VPN FortiSslvpn: Init:ConnectNamedPipe(): Wait(hEventOverLapped) OK. 4/26/2017 5:10:45 PM Debug VPN FortiSslvpn: before ConnectNamedPipe 4/26/2017 5:10:45 PM Debug VPN FortiSslvpn: Init:ConnectNamedPipe(): rc=0, err=997 4/26/2017 5:10:45 PM Debug VPN FortiSslvpn: _ReceiveMessage: (0000040C) 4/26/2017 5:10:46 PM Error VPN id=96603 msg="SSLVPN tunnel connection failed (Error=-455)." remotegw=*Remote GW IP* vpnstate=connected vpntunnel=*vpnname* vpntype=ssl vpnuser=*username* 4/26/2017 5:10:56 PM Debug ESNAC dwMiniSecondaryKATout = 20, dwSecondaryKATout = 1800 4/26/2017 5:10:56 PM Debug ESNAC min = 20 4/26/2017 5:10:56 PM Debug ESNAC dwSilentReg false 4/26/2017 5:10:56 PM Debug ESNAC bFirstKA true 4/26/2017 5:10:56 PM Debug ESNAC Start searching for FGT 4/26/2017 5:10:56 PM Debug ESNAC Searching Default GW 4/26/2017 5:10:58 PM Debug ESNAC Timeout in select in SocketConnect 4/26/2017 5:10:58 PM Debug ESNAC Socket connect failed 4/26/2017 5:10:58 PM Debug ESNAC *local client ip*:8013, Secondary - 0 4/26/2017 5:10:58 PM Debug ESNAC CKeepAlive::SetState 4/26/2017 5:10:58 PM Debug ESNAC Offline 4/26/2017 5:10:58 PM Debug ESNAC m_dwAutoconnectWhenOffnet false 4/26/2017 5:10:58 PM Debug ESNAC End searching for FGT