Skip to main content
AMINE-GHEZALI
New Member
March 27, 2025
Solved

How te configure auto changing password In FORTIPAM LDAP servers

  • March 27, 2025
  • 2 replies
  • 1192 views

Hello 

How te configure auto changing password In FORTIPAM LDAP servers .

 

BR

 

Best answer by Anthony_E

Hello Amine,

 

  1. Access Secrets:  Navigate to `Secrets` in the FortiPAM interface.
  2.  Create a Target: Go to `Targets` and select `Create`, Specify the `Name` and `Classification Tag`.
  3. Select Template: Choose the `Default Template` as `Windows Domain Account`.
  4. Domain Configuration: In the `Domain-Controller` field, specify the Domain IP. In the `Domain` section, specify the `Domain FQDN`.
  5. Advanced Domain Settings: Ensure the `Common Name` is set to `sAMAccountName`. Use the LDAPs Port `636`.
  6. Automatic Password Changing: Configure the secret settings to enable automatic password changing based on the specified parameters.

 

Note:
Ensure that FortiPAM is connected through the LDAP server using port 636 for the password change to work.

2 replies

Anthony_E
Staff
Anthony_EAnswer
Staff
March 31, 2025

Hello Amine,

 

  1. Access Secrets:  Navigate to `Secrets` in the FortiPAM interface.
  2.  Create a Target: Go to `Targets` and select `Create`, Specify the `Name` and `Classification Tag`.
  3. Select Template: Choose the `Default Template` as `Windows Domain Account`.
  4. Domain Configuration: In the `Domain-Controller` field, specify the Domain IP. In the `Domain` section, specify the `Domain FQDN`.
  5. Advanced Domain Settings: Ensure the `Common Name` is set to `sAMAccountName`. Use the LDAPs Port `636`.
  6. Automatic Password Changing: Configure the secret settings to enable automatic password changing based on the specified parameters.

 

Note:
Ensure that FortiPAM is connected through the LDAP server using port 636 for the password change to work.

Best Regards
Amir_ST
New Member
July 17, 2025

Hi,

I didn't manage to work with "Password Changer"

I did the setup you have wrote and I'm getting "Password change failed" when testing it via the "secret" also the "Verify" failed.

Do you have any idea?

shikhakolekar
Staff
Staff
April 27, 2026

Hi,

Updating the thread as this can help others, the "Password Changer” is explained clearly on article https://community.fortinet.com/t5/FortiPAM/Technical-Tip-Password-change-for-Windows-Domain-Users-through/ta-p/376067

Running the debugs below will help further and point to errors,

diagnose debug console timestamp enable

diagnose wad debug enable category secret

diagnose wad debug enable category pwdchg

diagnose wad debug enable level verbose

diagnose debug enable

If following this does not help, consider opening technical ticket with Fortinet.

Thanks