Skip to main content
tgold
New Member
November 19, 2019
Question

Password expiration and reset for VPN portal complexity requirements message

  • November 19, 2019
  • 1 reply
  • 5372 views

We are using LDAPS with Active Directory to allow users to sign in to the SSL VPN web portal. If a user's password has expired and they try to login it does prompt them to change their password. However, if the user enters something that does not meet AD's password complexity requirements the page just says "Error - Permission Denied" without any indication as to what the problem is. Is there any way to indicate to the user that their password does not meet the complexity policy?

    1 reply

    breyes
    New Member
    July 8, 2020

    Was there ever an answer to this?   I have the same problem.

    Alivo__FTNT
    Staff
    Staff
    July 10, 2020

    Hello breyes,

     

    Although ldap returns exact message about password not meeting complexity, length etc,

    FortiGate and FortiClient does not have this implemented to let user know the reason.

    This is a New Feature Request (NFR) and I would therefore suggest Fortinet Sales Representative

    responsible for your territory who can raise NFR with our developers. Sales can be contacted here:

    https://www.fortinet.com/corporate/about-us/global-offices.html#EMEA

     

    Best Regards,

    Pavel