Fortinet 100A Router User Manual


 
Users and authentication LDAP server list
FortiGate-100A Administration Guide 01-28007-0068-20041203 237
The FortiGate unit supports LDAP protocol functionality defined in RFC2251 for
looking up and validating user names and passwords. FortiGate LDAP supports all
LDAP servers compliant with LDAP v3.
FortiGate LDAP support does not extend to proprietary functionality, such as
notification of password expiration, that is available from some LDAP servers.
FortiGate LDAP support does not supply information to the user about why
authentication failed.
LDAP server list
Figure 116:LDAP server list
LDAP server options
Figure 117:LDAP server configuration
Create New Add a new LDAP server.
Server Name/IP The domain name or IP address of the LDAP server.
Port The port used to communicate with the LDAP server.
Common Name
Identifier
The common name identifier for the LDAP server. 20 characters maximum.
The common name identifier for most LDAP servers is cn. However some
servers use other common name identifiers such as uid.
Distinguished
Name
The distinguished name used to look up entries on the LDAP server. It
reflects the hierarchy of LDAP database object classes above the Common
Name Identifier.
The Delete and Edit icons.
Name Enter a name to identify the LDAP server.
Server Name/IP Enter the domain name or IP address of the LDAP server.
Server Port Enter the port used to communicate with the LDAP server.
By default LDAP uses port 389.