FortiNAC
NOTE: FortiNAC is now named FortiNAC-F. For post-9.4 articles, see FortiNAC-F. FortiNAC is a zero-trust network access solution that provides users with enhanced visibility into the Internet of Things (IoT) devices on their enterprise networks.
FortiKoala
Staff
Staff
Article Id 191933

Description


Certain LDAP user accounts are not listed in the User View or Admin User View even though the applicable groups are selected for import.

 

selected groups.PNG


Scope


Version: All.


Solution


LDAP user accounts will not be imported to the database until one of the following occurs:

- Something is authenticated against that user.

 

One case would be portal authentication for LDAP users:

 

yams.DirectoryManager FINER :: 2023-06-11 12:07:02:082 :: #470 :: DirectoryManager::getDirectoryUser liria@eb.eu
.
yams INFO :: 2023-06-11 12:07:02:282 :: #470 :: Requested Attributes = [distinguishedName, msDS-PrincipalName, givenName, sn, sAMAccountName, streetAddress, l, st, postalCode, homePhone, mobile, mobileProvider, mail, title, userAccountControl]
yams INFO :: 2023-06-11 12:07:02:311 :: #470 :: PRINTING ATTRIBUTES FOR CN=liria,OU=Usr,DC=eb,DC=eu
yams INFO :: 2023-06-11 12:07:02:311 :: #470 :: =>userAccountControl: 66048
yams INFO :: 2023-06-11 12:07:02:311 :: #470 :: =>msDS-PrincipalName: EB\liria
yams INFO :: 2023-06-11 12:07:02:311 :: #470 :: =>givenName: liria
yams INFO :: 2023-06-11 12:07:02:311 :: #470 :: =>homePhone: 70009
yams INFO :: 2023-06-11 12:07:02:311 :: #470 :: =>sAMAccountName: liria
yams INFO :: 2023-06-11 12:07:02:311 :: #470 :: =>distinguishedName: CN=liria,OU=Usr,DC=eb,DC=eu
yams INFO :: 2023-06-11 12:07:02:311 :: #470 :: DONE
yams INFO :: 2023-06-11 12:07:02:358 :: #470 :: found = 1 users for search branch DC=eb,DC=eu
...
Successful Registration of , liria - Win10-Guest 10.5.11.58 00:11:2F:00:00:01
yams INFO :: 2023-06-11 12:07:03:088 :: #884 :: liria,,liria,,gw.eb.eu:root:S108EP5918010897:port3,10.5.11.58,00:11:2F:00:00:01,,,,,,,70009,Win10-Guest,,,06.11.202 3 12:07:03 PM
yams.DirectoryAuthentication INFO :: 2023-06-11 12:07:03:090 :: #885 :: DirectoryAuthentication::logIn for machine 00:11:2F:00:00:01 and user liria

 

synce.PNG

 

- The user record is manually added in the User View.

 

userid.PNG

 

- The result will be the same as above, the user is automatically synced and created with the AD attributes