IronPort - advanced configuration guide

Overview
OL-25137-01
LDAP Queries
CHAPTER
3
If you store user information within LDAP directories in your network infrastructure — for example, in
Microsoft Active Directory, SunONE Directory Server, or OpenLDAP directories — you can configure
the Cisco IronPort appliance to query your LDAP servers to accept, route, and authenticate messages.
You can configure the Cisco IronPort appliance to work with one or multiple LDAP servers.
This chapter covers the following topics:
Overview, page 3-1
Creating LDAP Server Profiles, page 3-4
Working with LDAP Queries, page 3-12
Acceptance (Recipient Validation) Queries, page 3-18
Routing: Alias Expansion, page 3-20
Masquerading, page 3-20
Group LDAP Queries, page 3-22
Domain-based Queries, page 3-26
Chain Queries, page 3-27
Using LDAP For Directory Harvest Attack Prevention, page 3-28
Configuring AsyncOS for SMTP Authentication, page 3-31
Configuring External Authentication for Users, page 3-40
Spam Quarantine End-User Authentication Queries, page 3-43
Spam Quarantine Alias Consolidation Queries, page 3-44
User Distinguished Name Queries, page 3-45
Configuring AsyncOS To Work With Multiple LDAP Servers, page 3-46
The following section provides an overview on the types of LDAP queries you can perform; how LDAP
works with the Cisco IronPort appliance to authenticate, accept, and route messages; and how to
configure your Cisco IronPort appliance to work with LDAP.
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
3-1