ldap auth and nested OUs

[Chris_Colantonio]

Hello, I' m configuring ldap (active directory) authentication for VPN access. I have users in different OU' s, so I can' t set the location for " distinguished name" to be exactly where all the users are contained. If I set that attribute as the OU above , will it search/authenticate all OU' s within for the users, or do I need to specify the exact OU where users are sitting (forcing me to move all VPN users into one OU)? If it matters, I will be using group authentication as well. Thank you, Chris C.

[rlord]

It’s been awhile but if I remember right you have to place the AD Forti user you created in the root OU. It will search all OU’s within from wherever that user is.