LDAP service

LDAP is an Internet protocol used to maintain authentication data that may include departments, people, groups of people, passwords, email addresses, and printers. LDAP consists of a data-representation scheme, a set of defined operations, and a request/response network.

In the LDAP protocol there are a number of operations a client can request such as search, compare, and add or delete an entry. Binding is the operation where the LDAP server authenticates the user. If the user is successfully authenticated, binding allows the user access to the LDAP server based on the user’s permissions.

This section contains the following topics:

• General
• Directory tree overview
• Creating the directory tree
• Configuring a FortiGate unit for FortiAuthenticator LDAP

rfc822MailMember attribute For users, the rfc822MailMember attribute lists the alternative email addresses configured for the local user. For user groups, the rfc822MailMember attribute records the values of all unique email addresses (not including alternative email addresses) associated with users belonging to that group. In Windows AD, this is mapped by the memberOf attribute. Email addresses and alternative email addresses can be configured for the local user settings in Authentication > User Management > Local Users.