Category Archives: Authentication

10 November, 2026

OpenSSH *sshole (CVE-2026-123158): Find, Patch and Lock Down Alpine sshd

OpenSSH *sshole (CVE-2026-123158) lets a long password unlock Alpine accounts. Check exposure, patch sshd, disable passwords and hunt logs.

2 November, 2026

OpenLDAP Server on Ubuntu 24.04: Deploy, Configure and Use It

Deploy an OpenLDAP server on Ubuntu 24.04: install slapd, add users and groups, enforce TLS and ACLs, then connect SSSD and FortiGate.

7 October, 2026

RADIUS Deep Dive: What Actually Happens After You Click Connect

Decode RADIUS packet anatomy to debug FortiGate auth. Learn how shared secrets, authenticators, and VSAs work. Includes Blast-RADIUS hardening tips.

29 September, 2026

Linux Permissions Deep Dive: rwx, Octal, Special Bits, ACLs, and Capabilities

Master Linux permissions with this deep dive. Configure rwx, octal modes, POSIX ACLs, and capabilities to harden shared directories and stop permission denied errors.

24 August, 2026

Deploying SCIM Clients on FortiOS: Automated User and Group Provisioning for SAML-Backed Access

Configure FortiOS SCIM clients to automate user and group provisioning. Bind SCIM data to SAML objects for identity-aware firewall policies without LDAP.

16 May, 2026

FortiGate Authentication Settings: A Comprehensive Guide

Configure FortiGate authentication settings for LDAP, RADIUS, and SSO. Learn how to set up user groups, firewall policies, and admin access securely.

16 May, 2026

FortiGate Authentication Rules and Authentication Schemes: A Practical Guide

Configure FortiGate authentication rules and schemes. Learn how to pair methods like Kerberos or SAML with traffic triggers for reliable active auth.

9 February, 2026

Installing OpenSource SAML in Your Lab Environment

Install Authentik using Docker Compose on Ubuntu. Configure an open source SAML server for your FortiGate lab environment with this step-by-step guide.

23 February, 2021

Querying Nested LDAP Groups on the FortiGate

Fix FortiGate nested LDAP groups by enabling recursive search. Add the set search-type recursive command to your FortiOS config for Active Directory.

3 May, 2020

Binding to LDAP with Minimum Access

Configure a FortiGate LDAP bind user with minimum access rights. Avoid Domain Admin privileges for secure LDAP authentication and SSL-VPN setup.

19 September, 2019

Login Banner on Fortigate Firewalls

Configure a FortiGate login banner using CLI and GUI steps. Add a pre-logon disclaimer message to meet regulatory requirements and improve security hygiene.

13 September, 2019

Installing and Configuring FSSO

Learn how to install the FSSO agent and configure FortiGate FSSO to enforce firewall policies based on Active Directory groups.

9 September, 2019

Using Active Directory Groups to Control Web Content Policies

Configure FortiGate Active Directory groups to control web content policies. Learn to set up LDAP direct polling and apply user-based security profiles.

27 August, 2019

Single Sign On with Fortigate VPN

Configure FortiGate VPN single sign-on to eliminate double authentication for RDP sessions using the web portal or client-less VPN.

25 July, 2019

Managing Guest Users in Fortigate Firewalls

Learn Fortigate guest user management by creating user groups and restricted administrators. Configure wireless and wired captive portals for secure guest access.

22 May, 2019

Fortigate DHCP and Microsoft Dynamic DNS

Configure Fortigate DHCP to update Microsoft DNS records. Set Windows Server dynamic updates, client TCP/IPv4 properties, and GPO settings for automatic registration.

21 May, 2019

Administering the Fortigate Firewall with LDAP Credentials

Configure Fortigate LDAP admin authentication using Active Directory. Learn to create remote user groups and bind admin accounts for centralized management.

15 May, 2019

UPDATED – Certificate Pinning you SSL VPN with Microsoft CA and Fortigate Forticlient Using ‘user’ certificates

Configure FortiGate SSL VPN certificate pinning using Microsoft CA and OCSP. Secure access with user certificates and FortiClient for trusted devices.