Technical Tip: NTLM Authentication with Cisco UCS LDAP Server

[darisandy]

Description	This article describe how to configure LDAP Setting on FortiProxy when integrating with Cisco UCS LDAP Server
Scope	FortiProxy v7.0.8.
Solution	Based on the article below, in some cases, it is required to strip a domain string from the UPN to successfully authenticate the user: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Strip-domain-strings-from-a-UPN-in-Kerbero... Using default configuration on Windows LDAP Server may work most of the time, but in cases with Cisco UCS LDAP Server, sometimes it is not working. Try to make this change : # config user ldap     edit "ldap"         set account-key-processing strip       <-----         set account-key-name ""  <-----     next end