[GH-ISSUE #1154] [INTEGRATION] Fortiauthenticator #410

Open
opened 2026-02-27 08:17:09 +03:00 by kerem · 4 comments
Owner

Originally created by @khtaree on GitHub (Apr 16, 2025).
Original GitHub issue: https://github.com/lldap/lldap/issues/1154

Hi,
I need to integrate LLDAP solution with Fortiauthenticator
There is a guide on Fortinet web page to intergrate with regular LDAP server.
https://docs.fortinet.com/document/fortiauthenticator/6.5.0/cookbook/855114/provision-the-remote-ldap-server-on-fortiauthenticator

But i was unable to integrate it.
Error: "Query failed: ldap_simple_bind_s failed: Naming violation Missing DN value"

Service is working
Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.902122860+00:00 INFO set_up_server [ 2.42ms | 100.00% ]
Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.902177483+00:00 INFO ┝━ i [info]: Starting LLDAP version 0.6.1
Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911000252+00:00 INFO ┝━ i [info]: Starting the LDAP server on port 3890
Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911408687+00:00 INFO ┕━ i [info]: Starting the API/web server on port 17170
Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911539992+00:00 INFO i [info]: starting 1 workers
Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911546456+00:00 INFO i [info]: Actix runtime found; starting in Actix runtime
Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911553450+00:00 INFO i [info]: starting service: "ldap", workers: 1, listening on: 0.0.0.0:3890
Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911557993+00:00 INFO i [info]: starting service: "http", workers: 1, listening on: 0.0.0.0:17170
Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.912905784+00:00 INFO i [info]: DB Cleanup Cron started

Communication is ok because these systems are on the same network

Image

Thank you!

Originally created by @khtaree on GitHub (Apr 16, 2025). Original GitHub issue: https://github.com/lldap/lldap/issues/1154 Hi, I need to integrate LLDAP solution with Fortiauthenticator There is a guide on Fortinet web page to intergrate with regular LDAP server. https://docs.fortinet.com/document/fortiauthenticator/6.5.0/cookbook/855114/provision-the-remote-ldap-server-on-fortiauthenticator But i was unable to integrate it. Error: "Query failed: ldap_simple_bind_s failed: Naming violation Missing DN value" Service is working Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.902122860+00:00 INFO set_up_server [ 2.42ms | 100.00% ] Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.902177483+00:00 INFO ┝━ i [info]: Starting LLDAP version 0.6.1 Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911000252+00:00 INFO ┝━ i [info]: Starting the LDAP server on port 3890 Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911408687+00:00 INFO ┕━ i [info]: Starting the API/web server on port 17170 Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911539992+00:00 INFO i [info]: starting 1 workers Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911546456+00:00 INFO i [info]: Actix runtime found; starting in Actix runtime Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911553450+00:00 INFO i [info]: starting service: "ldap", workers: 1, listening on: 0.0.0.0:3890 Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.911557993+00:00 INFO i [info]: starting service: "http", workers: 1, listening on: 0.0.0.0:17170 Apr 16 13:57:41 czs-lldap lldap[5908]: 2025-04-16T13:57:41.912905784+00:00 INFO i [info]: DB Cleanup Cron started Communication is ok because these systems are on the same network ![Image](https://github.com/user-attachments/assets/6252dc96-2dc8-4b4e-a34e-06b41965ec6c) Thank you!
Author
Owner

@khtaree commented on GitHub (Apr 16, 2025):

Session log does not show anything unusual

Apr 16 14:03:16 czs-lldap lldap[5908]: 2025-04-16T14:03:16.585033899+00:00 INFO i [info]: LDAP session start: 071a35b4-6cb4-432e-b0e4-ab2201aa7f2c
Apr 16 14:03:16 czs-lldap lldap[5908]: 2025-04-16T14:03:16.585195722+00:00 INFO LDAP request [ 137µs | 100.00% ] session_id: 071a35b4-6cb4-432e-b0e4-ab2201aa7f2c
Apr 16 14:03:16 czs-lldap lldap[5908]: 2025-04-16T14:03:16.585528658+00:00 INFO LDAP request [ 2.90µs | 100.00% ] session_id: 071a35b4-6cb4-432e-b0e4-ab2201aa7f2c
Apr 16 14:03:16 czs-lldap lldap[5908]: 2025-04-16T14:03:16.585549911+00:00 INFO i [info]: LDAP session end: 071a35b4-6cb4-432e-b0e4-ab2201aa7f2c

<!-- gh-comment-id:2809699531 --> @khtaree commented on GitHub (Apr 16, 2025): Session log does not show anything unusual Apr 16 14:03:16 czs-lldap lldap[5908]: 2025-04-16T14:03:16.585033899+00:00 INFO i [info]: LDAP session start: 071a35b4-6cb4-432e-b0e4-ab2201aa7f2c Apr 16 14:03:16 czs-lldap lldap[5908]: 2025-04-16T14:03:16.585195722+00:00 INFO LDAP request [ 137µs | 100.00% ] session_id: 071a35b4-6cb4-432e-b0e4-ab2201aa7f2c Apr 16 14:03:16 czs-lldap lldap[5908]: 2025-04-16T14:03:16.585528658+00:00 INFO LDAP request [ 2.90µs | 100.00% ] session_id: 071a35b4-6cb4-432e-b0e4-ab2201aa7f2c Apr 16 14:03:16 czs-lldap lldap[5908]: 2025-04-16T14:03:16.585549911+00:00 INFO i [info]: LDAP session end: 071a35b4-6cb4-432e-b0e4-ab2201aa7f2c
Author
Owner

@khtaree commented on GitHub (Apr 16, 2025):

It seems that username or password is not recognized :/
I changed it and error is the same.

<!-- gh-comment-id:2809843061 --> @khtaree commented on GitHub (Apr 16, 2025): It seems that username or password is not recognized :/ I changed it and error is the same.
Author
Owner

@nitnelave commented on GitHub (Apr 16, 2025):

Can you turn on verbose logging in LLDAP and capture the session logs again?

<!-- gh-comment-id:2811060375 --> @nitnelave commented on GitHub (Apr 16, 2025): Can you turn on verbose logging in LLDAP and capture the session logs again?
Author
Owner

@nitnelave commented on GitHub (Apr 17, 2025):

Shot in the dark, but did you specify a short username like "admin"? You might instead have to provide the full DN: "uid=admin,ou=people,dc=..."

<!-- gh-comment-id:2811255063 --> @nitnelave commented on GitHub (Apr 17, 2025): Shot in the dark, but did you specify a short username like "admin"? You might instead have to provide the full DN: "uid=admin,ou=people,dc=..."
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/lldap-lldap#410
No description provided.