management using domain credentials

Forum|Forum|6 years ago
January 2, 2020
1 reply
1877 views

Hi i know there is LDAP authentication for forticlient VPN and single sign on but is it possible to manage the firewall itself using a domain account ? or does it Have to be a local account ?

thanks,

emnoc

New Member

Yes you can use LDAP to autenticate admin.Defined your ldap server and a admin account for remote wildcards login and have at it. it's quite userful and works

e.g ( jumpcloud but this would be yoru MS-AD )

config user ldap edit "jumpcloud" set server "52.23.54.171" set server-identity-check disable set cnid "uid" set dn "ou=Users,o=ffffffff,dc=jumpcloud,dc=com" set type regular set username "uid=ldap,ou=Users,o=ffffffff,dc=jumpcloud,dc=com" set password ENC MTAwNKmn03+4Pgekv6+UTNfl9ISOH4bEPq4DzweqTkzcIwnzy6ZZMoYUtvQQHdLrwrwFTyua+eEJRr3EmC3cdnxD89X3tC5WXWNGj8okGZMWHL9kiK8D0PQo49UC96aNU+EbHRJSXrA2u5QAAlfumOGDSNvoYTmeA0gp2te3jkqdwo3VBUugRAgb/9p0Tl7IIa4HNw== set secure ldaps set port 636 next end

config sys admin edit "wildcards" set remote-auth enable set accprofile "super_admin" set vdom "root" set remote-group "ldap-jc" end LDAP sever is a member if group ldap-jc Ken Felix

Sign up

Login with SSO

Login to the community

Login with SSO