Active Directory Bind Account Permission

Forum|Forum|10 years ago
November 6, 2015
5 replies
15126 views

Hi all,

I was looking through the forum and couldn't find any similar discussion. Please let me know if this has been addressed elsewhere.

I am working with a customer who is very particular when it comes to Active Directory permissions for service accounts. When using Regular binding for LDAP servers (using FSSO in polling mode), what are the minimum permissions I can assign to the bind account for the solution to function properly?

I have tried using regular users before and it didn't work so since then I have always used Domain Admin privileges. Unfortunately this won't fly with these guys.

Thanks!

Xavier

5.4

Best answer by Admin_FTNT

Hi,

Article is at http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD36039

Regards,

Admin.

xsilver_FTNT

Staff

Hi, I would recommend to check KB articles , namely start with this one:

Technical Note: Restricting FSSO service account

http://kb.fortinet.com/kb...amp;externalId=FD36039

kind regards,Tomas

xlloydAuthor

New Member

Thanks so much! I was searching the kb too but apparently I was using the wrong search strings!

xlloydAuthor

New Member

[strike]Actually after reading through, I realised that this is with regards to the Collector Agent. I am doing only Polling Mode. Are the restrictions the same with both methods?[/strike]

EDIT: Sorry just reread it and it had all necessary info. Thanks again!

Sign up

Login with SSO

Login to the community

Login with SSO