Technical Tip: LDAP server SSL and TLS connections require trusted name
Description
This article describes how to troubleshoot an issue where Credential validation fails for a directory under System -> Settings -> Authentication -> LDAP when the Security Protocol option is set to either SSL or STARTTLS. The LDAP server has a valid SSL certificate installed.
Scope
FortiNAC,
Version: 8.x.
Solution
Ensure the appliance is authenticating the connection using the name of the server and not the IP address. Unless the LDAP server's certificate includes the IP address as an alternate name, the connection will not be trusted.
- Navigate to System -> Settings -> Authentication -> LDAP.
- In the Directory model, verify the name matches the name on the certificate used by the LDAP server (example: dc.mycompany.com).
- Select the Additional Configuration checkbox.
- Select the Connect by name checkbox.
- Select Validate Credentials to confirm changes are correct.
- Select OK to save.
Related articles: