Problem Browsing LDAP Tree if Alternative Email address is present on user

[torgnyw]

Hi,

I'm unable to browse som user objects in LDAP Tree if the user object has alternative email addresses specified in local user object. I was expecting to see rfc822MailMember attributes for the alternative email addresses, but the query fails. I Can use an LDAP browser tool and list all user objects, im able to see all attributes on user without alternative email addresses.

Any suggestions?

Im running firmware: v4.00-build0081-20160601-patch00

\\

Torgny

[xsilver_FTNT]

any errors / screenshots ?

any details where do you have the issue (are you browsing LDAP from remote user sync , or from user import .. there is more than one place where to start LDAP search and filter) ?

[torgnyw]

I have local users that i have placed in LDAP Tree.

Then I have FortiMail connect via LDAP to FortiAuthenticator to get mail aliases.

I couldn't get it to work, so I used an LDAP browser (from my computer) to look at the attributes on the user objects (on Authenticator). I can only browse the objects without additional email addresses. If I try to browse attributes on a user object with alternative email addresses the Browser software throws a Error (COM Error) or No Connection.

[xsilver_FTNT]

interesting discovery.

I would suggest to open a ticket on Fortinet support site (through FortiCare or better through Fortinet Partner who has access).

And attach your :

- FAC (FortiAuthenticator) config backup

- debug reports (all) from FAC

- log from FAC

- any error screenshots from LDAP browser you have used, info which user you have used to access LDAP (authenticated connection to FAC LDAP)

- if it's not obvious from screenshots, please, mention date & time when it happened so we (TAC) can correlate error appearence with logs and reports from FAC

So far I'm not sure if it's a misconfiguration or a bug in the system.