The following information is displayed:
Name The name of the server.
Type The server type. One of LDAP, RADIUS, or TACACS+.
ADOM The administrative domain(s) which are linked to the remote authentication server.
Details Details about the server, such as the IP address.
The following options are available:
Delete Select the checkbox next to the server entry and then select Delete to remove the selected server. Select OK in the confirmation dialog box to proceed with delete action.
Edit Select the checkbox next to the profile, right-click, and select Edit in the right-click menu to edit the entry. Alternatively, you can double-click the entry to open the Edit Server page.
Create New Create a new server. Select one of LDAP, RADIUS, or TACACS+ from the drop-down list.
LDAP
Lightweight Directory Access Protocol (LDAP) is an Internet protocol used to maintain authentication data that may include departments, people, groups of people, passwords, email addresses, and printers. An LDAP consists of a data-representation scheme, a set of defined operations, and a request/response network.
If you have configured LDAP support and require a user to authenticate using an LDAP server, the FortiManager unit contacts the LDAP server for authentication. To authenticate with the FortiManager unit, the user enters a user name and password. The FortiManager unit sends this user name and password to the LDAP server. If the LDAP server can authenticate the user, the FortiManager unit successfully authenticates the user. If the LDAP server cannot authenticate the user, the FortiManager unit refuses the connection.
For information on configuring a TACACS+ server for remote administrator authentication, see Configuring LDAP authentication for administrators.
To add an LDAP server:
1. Go to System Settings > Admin > Remote Auth Server. The list of servers is shown.
2. Select the Create New toolbar icon, then select LDAP from the drop-down list. The New LDAP Server window opens.
New LDAP server dialog box