PLEASE HELP ME -LDAP-FORTIMAIL

[lethinhlk]

I am doing lab with Fortimail in GW mode. I would like to config the LDAP profile after configurate I can Browse to see all user but when I use User Query Options or Test LDAP Query I can't find the user. The result is Unable to find user DN matches mail address.

So anyone can helpme or give me the example configuration.

Thanks alot.

[bhh]

Ensure you have the correct Schema selected in the LDAP profile and save the profile. It's in a drop down list. Then try to test the LDAP query again.

[RobertReynolds]

Here is what i have set under Profile -> LDAP (5.4.2 fw)

Name : RR-LAB-LDAP

ServerIP: 123.123.123.123 port 389 non-secure

BaseDN: DC=RR-LAB,DC=co,DC=uk

Bind DN: CN=fortimail service,OU=Service Account,DC=RR-LAB,DC=co,DC=uk

Bind Password: ********

Then when you press Browse, should show your AD structure.

Under "User Query Options" ensure you choose the correct schema for your directory service, eg MS Active Directory

Under "User Authentication Options" I have "Search user and try bind DN" selected

Under "Advanced Options" Ive set LDAPv3 and password schema Active Directory

These settings work for both recipient verification and webmail authentication.

[emnoc]

I think schema  depends on what your doing  Ive use InetOrg  in most of my FML-LDAP integrations

Ken

[dkraljevich]

excellent referral link

https://kb.fortinet.com/k....do?externalID=FD38647