Created on 09-08-2010 05:54 AM Edited on 10-01-2023 09:35 PM By Anthony_E
Description
This article provides some technical tips for troubleshooting FortiOS authentication issues.
Scope
All FortiOS users
Solution
Here are all of the options:
FGT # show user
adgrp Configure FSSO groups.
certificate Configure certificate users.
domain-controller Configure domain controller entries.
exchange Configure MS Exchange server entries.
fortitoken Configure FortiToken.
fsso Configure Fortinet Single Sign On (FSSO) agents.
fsso-polling Configure FSSO active directory servers for polling mode.
group Configure user groups.
krb-keytab Configure Kerberos keytab entries.
ldap Configure LDAP server entries.
local Configure local users.
nac-policy Configure NAC policy matching pattern to identify matching NAC devices.
password-policy Configure user password policy.
peer Configure peer users.
peergrp Configure peer groups.
pop3 POP3 server entry configuration.
quarantine Configure quarantine support.
radius Configure RADIUS server entries.
saml SAML server entry configuration.
security-exempt-list Configure security exemption list.
setting Configure user authentication setting.
tacacs+ Configure TACACS+ server entries.
diag test authserver <type-of-server> <server-name> <authentication-protocol> <username> <password>
FGT # diag test authserver
radius Test RADIUS server. [Take 0-4 arg(s)]
tacacs+ test TACACS+ server. [Take 0-3 arg(s)]
radius-direct Test RADIUS server directly. [Take 0-7 arg(s)]
ldap-direct Test LDAP server directly. [Take 0-2 arg(s)]
tacacs+-direct Test TACACS+ server directly. [Take 0-3 arg(s)]
ldap Test LDAP server. [Take 0-3 arg(s)]
ldap-digest Test LDAP HA1 password query. [Take 0-2 arg(s)]
ldap-search Search LDAP server. [Take 0-10 arg(s)]
cert Test certificate authentication. [Take 0-255 arg(s)]
pop3 Test POP3 server. [Take 0-3 arg(s)]
local Test local user. [Take 0-3 arg(s)]
user Test user with group/user ID/name(s). [Take 0-255 arg(s)]
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.