Skip to main content
lubyou
lubyou
New Member
November 3, 2014
Solved

LDAP Authentication against Windows AD allow both sAMAccountName and userPrincipalName

  • November 3, 2014
  • 1 reply
  • 14310 views

Hi,

 

Is it possible to modify LDAP authentication in way that would allow users to authenticate with either their sAMAccountName or their userPrincipalName?

 

Thank you

Best answer by Jeff_FTNT

One LDAP server setting on FGT only use one "cnid".

You may try to set up two LDAP server with different "cnid" on FGT and add those two LDAP server into one "User Group". Both should be works.

####

config user ldap     edit "xxx"         set server "x.x.x.x"         set cnid "userPrincipalName" end config user ldap     edit "yyy"         set server "y.y.y.y"         set cnid "sAMAccountName" end config user group

edit zzz

set member xxx yyy

end

1 reply

Jeff_FTNT
Staff
Jeff_FTNTAnswer
Staff
November 3, 2014

One LDAP server setting on FGT only use one "cnid".

You may try to set up two LDAP server with different "cnid" on FGT and add those two LDAP server into one "User Group". Both should be works.

####

config user ldap     edit "xxx"         set server "x.x.x.x"         set cnid "userPrincipalName" end config user ldap     edit "yyy"         set server "y.y.y.y"         set cnid "sAMAccountName" end config user group

edit zzz

set member xxx yyy

end

lubyou
lubyouAuthor
New Member
November 4, 2014

Jeff_FTNT wrote:

One LDAP server setting on FGT only use one "cnid".

You may try to set up two LDAP server with different "cnid" on FGT and add those two LDAP server into one "User Group". Both should be works.

####

config user ldap    edit "xxx"        set server "x.x.x.x"        set cnid "userPrincipalName" end config user ldap    edit "yyy"        set server "y.y.y.y"        set cnid "sAMAccountName" end config user group

edit zzz

set member xxx yyy

end

A bit of a workaround, but should work. Still a bit unfortunate that one cannot just write a custom filter.

 

Thank you!

Terms & ConditionsAccessibility statement