Purpose
This article explains how to collect the FSSO collector, DC agent logs and export the FSSO collector agent configuration.
Expectations, Requirements
This article explains how to collect the FSSO collector, DC agent logs and export the FSSO collector agent configuration.
Expectations, Requirements
When FSSO collector agent is installed on any member server or domain controller, the Logging level needs to be changed to 'Debug' and the size needs to be increased 100MB (or more if the number of users are more).
Wait for some time or till the user authentication problem happens and then click on View Logs.
It will open with notepad. Save this file and attach the FortiCare ticket.
OR
After changing the log level and set the required size, the log file will be available at C:\>Program files or Program(x64) \fortinet\FSAE\CollectorAgent.txt
If the log size if reached (100MB) then share the CollectorAgent.log.bak file.Note: After resolving the FSSO authentication problem, reset the log size back to default value 10MBTo Enable the DC agent logs and share the same logs for further investigation:To enable the DC agent logs and working mode should be configured in DC agent mode.It's possible to verify the same under Show Monitored DCs -> Select DC to Monitor -> Working Mode -> DC Agent Mode
If the mode is configured in DC agent mode, then from following registry, it's possible to enable the DC agent logsHKEY_LOCAL_MACHINE\SOFTWARE\Fortinet\FSAE\DCAgent -> edit -> enable LogSet the value to 1 from 0
Also, the location of the dcagent log file is visible from that location and the logs can be attached to the support ticket.Note: Once FSSO authentication issue resolves, disable the DC agent logging by changing the 'enable_log' option to 0Exporting the FSSO configuration backup:
Config backup will be saved under C:\Program Files (x86)\Fortinet\FSAE -> saved_configThese logs will help TAC engineer for further investigation on FSSO authentication problems.
