FSSO Organization Unit Support

[AtiT]

Hello,

Maybe a stupid question but FortiOS 5.2.3 offers me to select Organization Unit (OU) for user authentication.

When I add the OU into a user group and the user logs in into the Windows machine I can see the User - Monitor - Firewall that the User Group is empty.  And the user is blocked.

Is there any way to get it work. If not, why the OU is offered to me?

I know that some time ago I tested it on 5.0.x and the OU is not working. But a week ago one Fortinet representative told me that there is no problem and it works also with the OU on 5.0 and 5.2.

Anyone has experience with it?

We always use CN groups but one customer asked us to use the OU-s as they have a lot of users and the Admins are not willing to create CNs.

Thanks.

[AtiT]

My colleague found a solution, some other steps needs to be done according to:

http://kb.fortinet.com/kb/documentLink.do?externalID=FD36270

Thanks.