FortiAuthenticator
FortiAuthenticator provides centralized authentication services for the Fortinet Security Fabric including multi-factor authentication, single sign-on services, certificate management, and guest management.
js2
Staff
Staff
Article Id 367385
Description This article describes how to perform a self password reset for LDAP users.
Scope FortiAuthenticator.
Solution

In this use case, a password reset works fine for local users and does not work only for LDAP users.

 

Error observed during reset:

 

Unable to send password reset email. Please contact your site administrator.

 

Event log:

 

Unable to send password reset email: 'RemoteLdapUser' object has no attribute 'get_email_field_name'.

 

error1.PNG

 

Solution:

 

  1. Verify if the mail attribute field is set in the attribute editor of the AD server.
  2. Ensure LDAPS is configured. It does not work with LDAP 389 port as it requires a secure connection.