Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
aligator666
New Contributor

OPEN LDAP SERVER on CENTOS

Hi, i had a OpenLdap Server.  And i configure all the LDAP policy but I can reach the groups. Somebody know if Fortigate can do LDAP Auth with an OpenLDAP Server?. Im really  desperate. Best Regards

2 REPLIES 2
emnoc
Esteemed Contributor III

Yes that should work. What do you mean can't reach the groups?

 

Are the DC component correct? Did you use a ldap-lite client or curl to search the  LDAPserver using the simple bind authentication creds.

 

e.g use the ldapsearch/curl  syntax in this blog posts

 

http://socpuppet.blogspot...ortigate-for-user.html

http://socpuppet.blogspot.com/2017/03/fortimail-recipient-verification-using.html

 

Jumpcloud for example , is based off openldap

 

 

Ken

 

PCNSE 

NSE 

StrongSwan  

PCNSE NSE StrongSwan
xsilver_FTNT
Staff
Staff

Hi,

maybe have a look into Knowledge Base http://kb.fortinet.com and search for OpenLDAP .. 

http://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&externalId=13141

 

Regardless it is KB for a bit old FortiOS, the OpenLDAP in this matter seems to me pretty same.

FortiOS LDAP auth was mainly built around requests from Microsoft Active Directory and LDAP.

Therefore membership is checked against user object property called MemberOf which is not the case in default/unchanged OpenLDAP. Object classes are also different on AD and OpenLDAP.

So member checking rules need to be tweaked on FortiOS side.

Tomas Stribrny - NASDAQ:FTNT - Fortinet Inc. - TAC Staff Engineer
AAA, MFA, VoIP and other Fortinet stuff

Labels
Top Kudoed Authors