722234 FSSO AD polling mode connector does not work with LDAPS.

[Nikolasss]

Hi!

We use Fortigate 6.4.6 and we didn't upgrade to 6.4.7 and 6.4.8 because we use a collector fsso agent in ldaps.  It seem strange to me that it cannot work for the last 4-5 month, and I see almost nothing on internet around this problem.  Is it under other specific condition?

Thanks

[Somashekara_Hanumant]

Hi Nikolasss,

Please let us know how 'the LDAP server is configured under 'config user ldap'

If it is configured with IP address, please configure with FQDN, and then check (also please check whether FQDN is resolving or not)

Regards,

Somu

[Nikolasss]

Hi,
Just to be clear, we don't have any problem right now, but we are worried to upgrade and not be able to use the ldaps again.

After your message, I changed our DNS server to use our internal and after changed our ip of our LDAPS server to the fqdn.  I was able to activate the server identity check and everything seems good.

My question it more about, if I upgrade to the last firmware, do you think it will broke our ldaps connectivity?

Thanks for your help!

[Somashekara_Hanumant]

Hi Nickloasss,

As per the internal ticket 722234, issue is resolved with 6.4.7 patch.

If you upgrade to 6.4.7 it should not brake the LDAPS connectivity.

Hope this answers your query.

Regards,

Somu

[Nikolasss]

But it is in your know issue of the release note of 6.4.8:
https://docs.fortinet.com/document/fortigate/6.4.8/fortios-release-notes/236526/known-issues

722234

FSSO AD polling mode connector does not work with LDAPS.

I'm not sure where I will put my faith, in you or in the release note :face_savoring_food:

[Somashekara_Hanumant · Accepted solution]

Hello Nikolasss,

This is a documentation error, We have already informed our documentation team to remove this from the release notes, as this is fixed with 6.4.7

Hope this answers your query.

Regards,

Somu