Technical Note: How to enable password renewal of remote LDAP user through FortiGate

[krajaa]

Description

This article explains how to enable password renewal of a remote LDAP user through FortiGate.

Solution
It is possible to renew the password of a remote LDAP user through the FortiGate.

# config user ldap
    edit <server_name>
        set password-renewal enable
        set secure ldaps
        set port 636       

When the password of the remote user expires, this configuration will give an option to a user to renew their password through a FortiGate login (VPN etc.)  

Note.
This feature will work only with LDAPS and not with LDAP.

Related Articles

Technical Tip: Configuring LDAP over SSL (LDAPS)