LDAPS (can't contact LDAP server)

[MohammedBahjat]

Hello everybody,

I am facing an issue with my FortiGate firewall i have activated LDAP there is no problem the test of connectivity is successful, but whenever i tick the secure connection and activate the LDAPS the test of connectivity replies with can't contact LDAP server what is the problem ? (am not using any certificate as the option is untick)

regards

[ozkanaltas]

Hello @MohammedBahjat ,

For LDAPS you need to install your domain CA certificate to FortiGate. After installing the certificate, you need to select that certificate on the LDAP configuration page.

You can follow below document for LDAPS integration on FortiGate.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-LDAP-over-SSL-LDAPS/ta-p/18997...

[hbac]

Hi @MohammedBahjat,

You can also refer to this article for troubleshooting: https://community.fortinet.com/t5/FortiGate/Technical-Tip-Cannot-contact-LDAP-server-message-when-en...

Regards, 

[Sheikh]

Hello @MohammedBahjat 

Please refer to this technical document; a section explains how to add a certificate to FortiGate first and then use it in LDAPs configuration. This KB is basically to allow LDAP users to change password at first logon but it contains the process for LDAPs

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-allow-LDAP-user-to-change-password-...

regards,

Sheikh

[MohammedBahjat · Accepted solution]

Dears 

The issue has been solved following this solution 

https://www.reddit.com/r/fortinet/comments/1ccyxi9/ldaps_issue_cant_contact_ldap_server/

regards