LDAP_Remote server selected even after that i have to give password

[ss198939]

Hi Team,

Thanks in advance. i have a doubt.

In fortimanager i am creating administrator. but i am really surprised why it is asking for password even in ldap admin account.

and what is the benifit of LDAP if i have to type manually user name and password. and what is the benifit of user group here.

attached is the screen shot

[chall_FTNT]

A common confusion.  That password is only for use in the event the remote server is not reachable.  Otherwise, it is never used.

[ss198939]

Is there no one who could give answer to this question. ?

[ede_pfau]

@chall_FTNT has already answered your question: you are only asked to input credentials if the LDAP query fails, mainly because the server is not reachable. It's a fallback option. Imagine what you would do if you only had a LDAP admin account and for some reason your LDAP server was down.

HTH.

[chall_FTNT]

In our online guide, see Creating administrators

"If the Admin Type is RADIUS, LDAP, or TACACS+, the password is only used when the remote server is unreachable."