Fortinet black logo

Administration Guide

LDAP Servers

Copy Link
Copy Doc ID 5e5f427d-b811-11eb-92d0-00505692583a:242816
Download PDF

LDAP Servers

FortiDeceptor supports remote authentication of administrators using LDAP servers. To use this feature, configure the server entries in FortiDeceptor for each authentication server in your network.

If you have configured LDAP support and require users to authenticate using an LDAP server, FortiDeceptor contacts the LDAP server for authentication. To authenticate with FortiDeceptor, the user enters a user name and password. FortiDeceptor sends this user name and password to the LDAP server. If the LDAP server can authenticate the user, FortiDeceptor authenticates the user. If the LDAP server cannot authenticate the user, FortiDeceptor refuses the connection.

The following options are available:

Create New

Add an LDAP server.

Edit

Edit the selected LDAP server.

Delete

Delete the selected LDAP server.

The following information is displayed:

Name

LDAP server name.

Address

LDAP server address.

Common Name

LDAP common name.

Distinguished Name

LDAP distinguished name.

Bind Type

LDAP bind type.

Connection Type

LDAP connection type.

To create a new LDAP server:
  1. Go to System > LDAP Servers.
  2. Click Create New.
  3. Configure the following settings:

    Name

    A unique name to identify the LDAP server.

    Server Name/IP

    IP address or FQDN of the LDAP server.

    Port

    The port for LDAP traffic.

    The default port is 389.

    Common Name

    Common name identifier of the LDAP server.

    Most LDAP servers use cn. Some servers use other common name identifiers such as uid.

    Distinguished Name

    Distinguished name used to look up entries on LDAP servers. The distinguished name reflects the hierarchy of LDAP database object classes above the common name identifier.

    Bind Type

    The type of binding for LDAP authentication:

    • Simple
    • Anonymous
    • Regular

    Username

    When the Bind Type is set to Regular, enter the user name.

    Password

    When the Bind Type is set to Regular, enter the password.

    Enable Secure Connection

    Use a secure LDAP server connection for authentication.

    Protocol

    When Enable Secure Connection is selected, select LDAPS or STARTTLS.

    CA Certificate

    When Enable Secure Connection is selected, select a CA Certificate.

  4. Click OK.

LDAP Servers

FortiDeceptor supports remote authentication of administrators using LDAP servers. To use this feature, configure the server entries in FortiDeceptor for each authentication server in your network.

If you have configured LDAP support and require users to authenticate using an LDAP server, FortiDeceptor contacts the LDAP server for authentication. To authenticate with FortiDeceptor, the user enters a user name and password. FortiDeceptor sends this user name and password to the LDAP server. If the LDAP server can authenticate the user, FortiDeceptor authenticates the user. If the LDAP server cannot authenticate the user, FortiDeceptor refuses the connection.

The following options are available:

Create New

Add an LDAP server.

Edit

Edit the selected LDAP server.

Delete

Delete the selected LDAP server.

The following information is displayed:

Name

LDAP server name.

Address

LDAP server address.

Common Name

LDAP common name.

Distinguished Name

LDAP distinguished name.

Bind Type

LDAP bind type.

Connection Type

LDAP connection type.

To create a new LDAP server:
  1. Go to System > LDAP Servers.
  2. Click Create New.
  3. Configure the following settings:

    Name

    A unique name to identify the LDAP server.

    Server Name/IP

    IP address or FQDN of the LDAP server.

    Port

    The port for LDAP traffic.

    The default port is 389.

    Common Name

    Common name identifier of the LDAP server.

    Most LDAP servers use cn. Some servers use other common name identifiers such as uid.

    Distinguished Name

    Distinguished name used to look up entries on LDAP servers. The distinguished name reflects the hierarchy of LDAP database object classes above the common name identifier.

    Bind Type

    The type of binding for LDAP authentication:

    • Simple
    • Anonymous
    • Regular

    Username

    When the Bind Type is set to Regular, enter the user name.

    Password

    When the Bind Type is set to Regular, enter the password.

    Enable Secure Connection

    Use a secure LDAP server connection for authentication.

    Protocol

    When Enable Secure Connection is selected, select LDAPS or STARTTLS.

    CA Certificate

    When Enable Secure Connection is selected, select a CA Certificate.

  4. Click OK.