IronPort - advanced configuration guide

3-8
Figure 3-4 Configuring an LDAP Server Profile (1 of 2)
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
Chapter 3 LDAP Queries
First, the nickname of “PublicLDAP” is given for the myldapserver.example.com LDAP server. The
number of connections is set to 10 (the default), and the multiple LDAP server (hosts) load balance
option is left as the default. You can specify multiple hosts here by providing a comma separated list of
names. Queries are directed to port 3268 (the default). SSL is not enabled as the connection protocol for
this host. The base DN of example.com is defined (dc=example,dc=com). The cache time-to-live is set to
900 seconds, the maximum number of cache entries is 10000, and the authentication method is set to
password.
Queries for recipient acceptance, mail routing, and masquerading are defined. Remember that query
names are case-sensitive and must match exactly in order to return the proper results.
Figure 3-5 Configuring an LDAP Server Profile (2 of 2)
Enabling LDAP Queries on a Public Listener
In this example, the public listener “InboundMail” is updated to use LDAP queries for recipient
acceptance. Further, recipient acceptance is configured to happen during the SMTP conversation (for
more information, see Acceptance (Recipient Validation) Queries, page 3-18 for more information).
OL-25137-01