Fortinet black logo

Administration Guide

Starting a TCP Protocol LDAP test

Copy Link
Copy Doc ID 9217125a-7eda-11ec-a0d0-fa163e15d75b:168131
Download PDF

Starting a TCP Protocol LDAP test

This FortiTester test establishes a TCP connection (three-way handshake), searches entries by LDAP, and then closes the TCP connection.

To start an LDAP test:
  1. Go to Cases > Performance Testing > Protocol > TCP > LDAP to display the test case summary page.
  2. Click + Create New to display the Select case options dialog box.
  3. In the popup dialog, for the Network Config option, select the network template you have created in Cases > Security Testing > Objects > Networks. Then the network related options will automatically be filled. See Using network configuration templates for how to create a network template.
  4. Select a Certificate Group if applicable.
  5. Click OK to continue.
  6. Configure the test case options described below.
  7. Click Start to run the test case.

FortiTester saves the configuration automatically so you can run the test again later. You can also click Save to save the test case without running it.

Tip 1: You can also copy an existing case, and change its settings to create a new case. In the case list, click Clone to clone the configuration. Only the case name is different from the original case.

Tip 2: You can add or edit a comment when the test is running. This comment can be used to search for the test result in the Results page. This is useful especially when the test runs for a long time.

Protocol Test Case common options

Protocol Test Case configuration specific to LDAP Test

Settings Guidelines
Client Profile
Search Type Choose either Single level or Base object. A single level search will search one level below the base object, while a Base object search will only search the base object.
Login Type Choose either Anonymous bind or Simple authentication.
Base DN Enter the base distinguished name (DN) of the LDAP forest.
User DN Enter the user DN subtree that is used when searching for user entries on the LDAP server. Only when the Login Type is Simple authentication.
Password Enter the password of the bind account on the LDAP server. Only when the Login Type is Simple authentication.

Starting a TCP Protocol LDAP test

This FortiTester test establishes a TCP connection (three-way handshake), searches entries by LDAP, and then closes the TCP connection.

To start an LDAP test:
  1. Go to Cases > Performance Testing > Protocol > TCP > LDAP to display the test case summary page.
  2. Click + Create New to display the Select case options dialog box.
  3. In the popup dialog, for the Network Config option, select the network template you have created in Cases > Security Testing > Objects > Networks. Then the network related options will automatically be filled. See Using network configuration templates for how to create a network template.
  4. Select a Certificate Group if applicable.
  5. Click OK to continue.
  6. Configure the test case options described below.
  7. Click Start to run the test case.

FortiTester saves the configuration automatically so you can run the test again later. You can also click Save to save the test case without running it.

Tip 1: You can also copy an existing case, and change its settings to create a new case. In the case list, click Clone to clone the configuration. Only the case name is different from the original case.

Tip 2: You can add or edit a comment when the test is running. This comment can be used to search for the test result in the Results page. This is useful especially when the test runs for a long time.

Protocol Test Case common options

Protocol Test Case configuration specific to LDAP Test

Settings Guidelines
Client Profile
Search Type Choose either Single level or Base object. A single level search will search one level below the base object, while a Base object search will only search the base object.
Login Type Choose either Anonymous bind or Simple authentication.
Base DN Enter the base distinguished name (DN) of the LDAP forest.
User DN Enter the user DN subtree that is used when searching for user entries on the LDAP server. Only when the Login Type is Simple authentication.
Password Enter the password of the bind account on the LDAP server. Only when the Login Type is Simple authentication.