Can't contact LDAP server Fortigate60F

Hi Acxelsus, 

You may verify the connection to LDAP server with the following command:

# diagnose sniffer packet any "host x.x.x.x and port yy" 4 

Replace x.x.x.x to the LDAP server IP and yy to the LDAP port .

- verify the outbound interface

- verify if any response from the LDAP server

Please check if the following article relevant to your scenario:

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Status-of-LDAP-server-connected-via-IPsec/ta-p/195558

This is the response

Hi Acxelsus, 

What is firewall firmware version?

You may try to run httpsd debug to check the LDAPS negotiation or you may try disable server-identity-check

config user ldap
edit xxx>>> Server Name
set server-identity-check disable
end

For httpsd debug:

# diagnose debug application httpsd -1

# diagnose debug enable

Test the connection again. To stop debug:

# diagnose debug disable

# diagnose debug reset

For your reference:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-LDAP-over-SSL-LDAPS/ta-p/189972

https://community.fortinet.com/t5/Fortinet-Forum/Cannot-contact-LDAP-server/td-p/90065

Please ensure the CA certificate is correct.

You may perform packet capture for the LDAP connection to get more detail.