FortiManager LDAPS server identity check enable/disable

[RogerioF]

Hello,

In FMG integration with LDAPS server there is any configuration to disable server identity check, as it possible in FG.

Under LDAP configuration I couldn't find.

Thanks,

Rogério Ferreira.

[pminarik]

If the CLI documentation is to be trusted (yes), there's no such option available in FortiManager - https://docs.fortinet.com/document/fortimanager/7.4.0/cli-reference/845251/admin#admin_ldap

There is one thing you could perhaps try: See how the FMG behaves if you leave the ca-cert unset, if it even allows you to save the configuration without it. FortiGates used to behave like with server-identity-check=disable when the CA was not defined. Maybe FMG will behave like this as well. (I don't know)