FortiAnalyzer 5.6.2 - LDAP groups problem

Hi,

I tried to configure two LDAP groups to authenticate to the FortiAnalyzer.

I succeed to configure the first group (admins) include the wildcard flag.

I want to add the second group with view-only privileges but I can't set the wildcard flag again.

when I try to add the wildcard to the second group I get the following error:

A wildcard administrator already exists object set operator error, -15 discard the setting

Also, I came across with the following article http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD37328&sliceId=1&docTypeID=DT_KCARTICLE_1_1&dialogID=8412764&stateId=0

 but it does not help to my issue.

Configuration Below:

config system admin ldap edit "Ldap_Admins" set server "x.x.x.x" set cnid "sAMAccountname" set dn "DC=ceragon,DC=com" set type regular set username "networkldap@ceragon.com" set password ENC  set group "CN=IT-MANAGEMENT,...,DC=ceragon,DC=com" set filter "(&(objectcategory=group)(member=*))" set adom "all_adoms" next edit "Ldap_Viewer" set server "x.x.x.x" set cnid "sAMAccountname" set dn "DC=ceragon,DC=com" set type regular set username "networkldap@ceragon.com" set password ENC  set group "CN=IT-VIEWER,...,DC=ceragon,DC=com" set filter "(&(objectcategory=group)(member=*))" set adom "all_adoms" next end

!

config system admin user

edit "LDAP_Admin_Users"

set profileid "Super_User" set adom "all_adoms" set policy-package "all_policy_packages" set user_type ldap set ldap-server "Ldap_Admins"

set wildcard enable

next

edit "LDAP_Viewer_Users"

set profileid "Read_Only" set adom "all_adoms" set policy-package "all_policy_packages" set user_type ldap set ldap-server "LDAP_Viewers"

next

end

!

Thank you in advance.