OPEN LDAP SERVER on CENTOS

Yes that should work. What do you mean can't reach the groups?

Are the DC component correct? Did you use a ldap-lite client or curl to search the  LDAPserver using the simple bind authentication creds.

e.g use the ldapsearch/curl  syntax in this blog posts

http://socpuppet.blogspot...ortigate-for-user.html

http://socpuppet.blogspot.com/2017/03/fortimail-recipient-verification-using.html

Jumpcloud for example , is based off openldap

Ken

Hi,

maybe have a look into Knowledge Base http://kb.fortinet.com and search for OpenLDAP .. 

http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&externalId=13141

Regardless it is KB for a bit old FortiOS, the OpenLDAP in this matter seems to me pretty same.

FortiOS LDAP auth was mainly built around requests from Microsoft Active Directory and LDAP.

Therefore membership is checked against user object property called MemberOf which is not the case in default/unchanged OpenLDAP. Object classes are also different on AD and OpenLDAP.

So member checking rules need to be tweaked on FortiOS side.