Skip to main content
devinacosta
New Member
August 10, 2017
Question

FortiManager and LDAP (Limit to Group)

  • August 10, 2017
  • 0 replies
  • 2961 views

We are trying to get FortiManager and trying to get it to limit to a group however it doesn't work correctly. We tried to follow the one article we found for AD but we are unable to get it to work correctly.

 

config system admin ldap
    edit "IPA_1"
        set server "<ip>"
        set cnid "uid"
        set dn "dc=example,dc=com"
        set type regular
        set username "uid=ldapconnect,cn=users,cn=accounts,dc=example,dc=com"
        set password ENC <encrypted_password here>
        set group "cn=allowedgroup1,cn=groups,cn=accounts,dc=example,dc=com"
        set filter "&(objectCategory=user)(memberOf=cn=allowedgroup1,cn=groups,cn=accounts,dc=example,dc=com))"
        set secure starttls
            set adom "all_adoms"
    next
end

 

Can anyone help me figure out what may be wrong with either my filter or group statement? This is against LDAP/389 Directory Server.