Skip to main content
Somashekara_Hanumant
Staff & Editor
Staff & Editor
April 7, 2025

Technical Tip: Unable to add/select remote LDAP users, all the users are greyed out

Description This article describes why the FortiGate administrator is unable to select/add Remote LDAP users.
Scope FortiGate, LDAP.
Solution

When the LDAP server is configured as below on FortiGate, then it is unable to select/add Remote LDAP users.

 

ldap_1.JPG

 

Try to add a Remote user under User & Authentication -> User Definition -> Create New ->  Remote LDAP User -> select 'LDAP' -> Next -> All users are greyed out.

 

ldap-2.JPG

 

 To resolve this, modify the CNID to 'sAMAccountName' in the LDAP configuration instead of 'Administrator'.

 

ldap_4.JPG

 

ldap_3.JPG

 

Note: The users cannot be re-added if already listed on the firewall, under USER Definition.


Related document: 

Users

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT