Password expiration and reset for VPN portal complexity requirements message

[tgold]

We are using LDAPS with Active Directory to allow users to sign in to the SSL VPN web portal. If a user's password has expired and they try to login it does prompt them to change their password. However, if the user enters something that does not meet AD's password complexity requirements the page just says "Error - Permission Denied" without any indication as to what the problem is. Is there any way to indicate to the user that their password does not meet the complexity policy?

[breyes]

Was there ever an answer to this?   I have the same problem.

[Alivo__FTNT]

Hello breyes,

Although ldap returns exact message about password not meeting complexity, length etc,

FortiGate and FortiClient does not have this implemented to let user know the reason.

This is a New Feature Request (NFR) and I would therefore suggest Fortinet Sales Representative

responsible for your territory who can raise NFR with our developers. Sales can be contacted here:

https://www.fortinet.com/corporate/about-us/global-offices.html#EMEA

Best Regards,

Pavel