Technical Tip: NTLM Authentication with an alterna...

FortiProxy

FortiProxy provides enterprise-class protection against internet-borne threats and Advanced Web Content Caching

Article Id 252093

Description

This article describes how to configure LDAP Setting on FortiProxy when LDAP has an alternative UPN suffix.

Scope

FortiProxy.

Solution

If there is an alternative UPN configured on the LDAP Server, the existing user that uses the new suffix is not able to authenticate successfully.

Before:

After:

Log Output:

Add the following on the existing LDAP settings:

config user ldap
    edit "LDAP"
set account-key-processing strip
        set account-key-name "sAMAccountName"
    next
end

Result:

For these changes, FortiProxy will strip the domain string from the UPN.

393

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Technical Tip: NTLM Authentication with an alternative UPN suffix