Technical Tip: Self password reset with FortiAuthenticator not working for LDAP users

In this use case, a password reset works fine for local users and does not work only for LDAP users.

Error observed during reset:

Unable to send password reset email. Please contact your site administrator.

Event log:

Unable to send password reset email: 'RemoteLdapUser' object has no attribute 'get_email_field_name'.

Solution:

1. Verify if the mail attribute field is set in the attribute editor of the AD server.
2. Ensure LDAPS is configured. It does not work with LDAP 389 port as it requires a secure connection.