|
When it comes to firewall local users, the main reason will be enabling the admin-restrict in the global setting.
config system global
set admin-restrict-local {enable | disable} <- Default is set to disable.
end
If it is enabled, then the user credential check request will not check with respect to the local database and it will be blocked. Instead, it will be querying the remoter servers always.
It is possible to confirm the same by running the below command in the CLI:
diag de reset
diag de application fnbamd -1
diag de application authd -1
dia de enable
After that, disable the log by 'diag de disable'.
In the debug, it is possible to see that the request is only forwarding to the remote server and not the local database.
Perform the initial troubleshooting by following the below article:
|
