Skip to main content
timbim
timbim
New Member
April 7, 2021
Question

Ldap login vdom

  • April 7, 2021
  • 1 reply
  • 4235 views

Hello,

i would like to set up an admin ldap login. So far it works but how is it in vdom mode? In which vdom do the LDAP settings have to be stored? I thought the Ldap server had to be in the management vdom. I want to do the whole thing with the manager but it always wants to create the ldap server in root. We just often don't use the root vdom and that's why it doesn't work. The management vdom is often different. Is the manager making a mistake or can this be adjusted? I have tried 6.0 and 6.2.

 

Thank you for your help

Tim

1 reply

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
April 7, 2021

Nothing is wrong with it. They added split-task vdom mode from 6.2 as well. We almost always use a separate management vdom in multi-vdom environment since root vdom is used for aggregation toward the internet for all other vdoms. And, yes, you need to move admin user remote auth config like LDAP to the management vdom when you enable muti-vdom mode. Before that, everything is in root vdom, which is hidden most of the part. But you would see some, like interfaces belonging to "root", in CLI.

 

timbim
timbimAuthor
New Member
April 7, 2021

thanks for the answer but the problem is the fortimanager. How can I tell him where the ldap server should be? 

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
April 7, 2021

For FMG config managing/moving management vdom function, you need to somebody else. I have near-zero experience for that environment. You might want to repost this at FortiManager forum.

Terms & ConditionsAccessibility statement