Skip to main content
aligator666
New Member
August 1, 2018
Question

OPEN LDAP SERVER on CENTOS

  • August 1, 2018
  • 2 replies
  • 5172 views

Hi, i had a OpenLdap Server.  And i configure all the LDAP policy but I can reach the groups. Somebody know if Fortigate can do LDAP Auth with an OpenLDAP Server?. Im really  desperate. Best Regards

2 replies

emnoc
New Member
August 1, 2018

Yes that should work. What do you mean can't reach the groups?

 

Are the DC component correct? Did you use a ldap-lite client or curl to search the  LDAPserver using the simple bind authentication creds.

 

e.g use the ldapsearch/curl  syntax in this blog posts

 

http://socpuppet.blogspot...ortigate-for-user.html

http://socpuppet.blogspot.com/2017/03/fortimail-recipient-verification-using.html

 

Jumpcloud for example , is based off openldap

 

 

Ken

 

xsilver_FTNT
Staff
Staff
August 2, 2018

Hi,

maybe have a look into Knowledge Base http://kb.fortinet.com and search for OpenLDAP .. 

http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&externalId=13141

 

Regardless it is KB for a bit old FortiOS, the OpenLDAP in this matter seems to me pretty same.

FortiOS LDAP auth was mainly built around requests from Microsoft Active Directory and LDAP.

Therefore membership is checked against user object property called MemberOf which is not the case in default/unchanged OpenLDAP. Object classes are also different on AD and OpenLDAP.

So member checking rules need to be tweaked on FortiOS side.