Unable to add a LDAP Server (FOS 5.6 to Windows Server 2003)

Forum|Forum|9 years ago
September 4, 2017
8 replies
33545 views

I can not configure an LDAP Server on an FG-60E with FortiOS 5.6 I am trying to set up an FSSO from an FG-60E and a Windows Server 2003, but I can not add the LDAP server. After placing the IP of the Windows 2003 Server, as well as the user and password of the domain administrator, when doing Browser to identify the Distinguished Name, the system indicates: "Invalid LDAP server" If I put the Distinguished Name manually, and try to test the connection, it says "Invalid credentials" All this despite the IP of the server is correct, as well as the user and password, which I am placing flat: User = Administrator Key = ##### Waiting for your comments

Best answer by alaurent

Hello

The domain\username solve the problem.

Final conf:

Name: Local_LDAP Server IP/Name 192.168.1.29 Server Port: 389 Common Name Identifier: sAMAccountName Distinguished Name: DC=comapny1,DC=company,DC=com Bind Type: Regular Username: domain\username Password: ••••••••

Thanks

Allan_Lago

New Member

Hi alaurent,

If you use Distinguished Name as your Common Name Identifier you have to change your user to DN Format which is something like this: CN=User Name, OU=Users, DC=contoso, DC=com

If you want to use the user account name your have to change the common name identifier to sAMAccountName.

Hope it helps.

alaurentAuthor

New Member

The Windows Server and the FG are in the same network, so there are no comunication limitations

My FG configurations is:

Name: Local_LDAP Server IP/Name 192.168.1.29 Server Port: 389 Common Name Identifier: cn Distinguished Name: DC=comapny1,DC=company,DC=com

Bind Type: Regular

Username: Administrator Password: ••••••••

From de Windows Server

C:\Documents and Settings\>dsquery user "CN=Administrator,CN=Users,DC=company1,DC=company,DC=com"

Allan_Lago

New Member

Did You tried change the Common name identifier as i suggested? Change It from CN to sAMAccountName and you'll be just fine.

Sign up

Login with SSO

Login to the community

Login with SSO