We were having many issues with a FortiClient VPN 7.0.1.0060 (free
version) not being able to connect to our SSL VPN which uses username,
password, and client certificate. The logs showed it connects then
immediately disconnected. The paid FortiClien...
Example 1 works fine. Example 2 fails with a 403 status code. RestAPI
Admin account is a super_admin with access to Global. debug cli on
Fortigate shows no communication for 2 but full communication with 1.
Scratching my head on this for a few days n...
For anyone doing this with Ansible, this workaround is valid until
Fortinet Dev's fix: tasks:- name: Delete existing local user uri: url:
https://:443/api/v2/cmdb/..em/admin/?access_token= user: "" password: ""
method: DELETE body: force_basic_auth: ...
I confirmed you can indeed delete the admin account via curl to the REST
API: curl -k -X DELETE
"https://FW-FQDN-GOES-HERE:443/api/v2/cmdb/system/admin/admin?access_token=ACCESS-TOKEN-GOES-HERE"
-H "accept: application/json"
Thanks Ken, I will raise a feature request. In our production
environment we have compliance requirements to rotate local admin
passwords on a regular basis hence my need to automate this. We do this
for all vender equipment, but Fortinet Fortigate i...
What is a 403? 403Forbidden: Request is missing CSRF token or
administrator is missing access profile permissions. What brought me to
testing these CURLs was failures of an Ansible module that also exhibits
the same failure. My Rest API user config.
