Fortiproxy Connects to LDAP via FQDN that contain Multiple IP

[youmustbecrazy]

Hi All,

Anyone have experience or know how to configure LDAP connection with FQDN instead of IP address?

The FQDN here are mapping to 5 LDAP servers IP (binded by F5 GTM).

When I configured with FQDN the connection to LDAP is unstable because every I ping the FQDN it was resolved to different IP randomly. 

I know if it possible to use more than one IP on LDAP setting, but we have to use FQDN to connect LDAP server.

Example: ldap FQDN: my.ldapserver.com and this domain contain IP 10.20.30.10, 10.20.30.11, 10.20.30.13, 10.20.30.14 .10.20.30.15 for backup IP.

Appreciate for the help.

#Fortigate #fortiproxy

[hbac · Accepted solution]

Hi @youmustbecrazy,

You should be able to specify FQDN. Under User & Authentication > LDAP Servers > Server IP/Name. It works with IP address or FQDN. Please refer to https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-FortiGate-to-use-an-LDAP-...

Regards,