Fortinet FortiGate 4000 User Manual download pdf (Page 232)

232 Fortinet Inc.

Configuring user groups Users and authentication

7 Enter the distinguished name used to look up entries on the LDAP server.

Enter the base distinguished name for the server using the correct X.500 or LDAP

format. The FortiGate unit passes this distinguished name unchanged to the server.

For example, you could use the following base distinguished name:

ou=marketing,dc=fortinet,dc=com

where ou is organization unit and dc is domain component

You can also specify multiple instances of the same field in the distinguished name,

for example, to specify multiple organization units:

ou=accounts,ou=marketing,dc=fortinet,dc=com

8 Select OK.

Figure 67: Example LDAP configuration

Deleting LDAP servers

You cannot delete an LDAP server that has been added to a user group.

To delete an LDAP server

1 Go to User > LDAP.

2 Select Delete beside the LDAP server name that you want to delete.

3 Select OK.

Configuring user groups

To enable authentication, you must add user names, RADIUS servers, and LDAP

servers to one or more user groups. You can then select a user group when you

require authentication. You can select a user group to configure authentication for:

• Policies that require authentication. Only users in the selected user group or users

that can authenticate with the RADIUS servers added to the user group can

authenticate with these policies.

1 2 ... 227 228 229 230 231 232 233 234 235 236 237 ... 331 332

No comments

Fortinet FortiGate 4000 User Manual Page 232