Technical Tip: How to configure a Remote LDAP Server and troubleshooting LDAP test connection

[Pedro_FTNT]

Description	This article describes how to configure a Remote LDAP Server and test the connection. To check, it is possible to use PCAP capture.
Scope	FortiWeb.
Solution	To configure the Remote LDAP Server: Go to User -> Remote Server -> LDAP Server and select 'Create New'. Complete with LDAP information: Remote LDAP IP, LDAP port, Domain, Administrator user information Use any User with an Admin Domain Profile: Configure via FortiWeb CLI: config user ldap-user     edit "LDAP" <----- Any LDAP name.         set server 172.16.16.100 <----- LDAP Server.         set common-name-id sAMAccountName         set distinguished-name dc=tac,dc=local <----- Domain.         set bind-type regular         set username "TAC\\Administrator" <----- Domain user Administrator.         set password <your_ldap_admin_password>     next end To do a PCAP Capture: Go to Network -> Packet Capture and select 'Create New': Interface: Any. Filter: host 172.16.16.100 <----- LDAP Sever. Select: 'Not Running' to start capture: While capture is running: Go to User -> Remote Server and select 'LDAP Server'. Select: Test LDAP. Configure 'username' and 'user password' to test the connection to LDAP. Select: 'OK'.  Later to Stop PCAP Capture: Go to Network -> Packet Capture. Select: Stop Capturing. Donwload the PCAP Capture. Use Wireshark to filter user connection and to check what is happening with the Test User connection. In this example, the connection was 'succesfully' so in Wireshark, this log appears:   To know about FortiWeb network sniffer captures refer to: Packet capture network sniffer To know about LDAP options refer to: Introduction user ldap-user