IronPort - advanced configuration guide

Chapter 3 LDAP Queries
Sample Acceptance Queries
OL-25137-01
Table 3-2 shows sample acceptance queries.
Table 3-2 Example LDAP Query Strings for Common LDAP Implementations: Acceptance
Query for: Recipient validation
OpenLDAP (mailLocalAddress={a})
Microsoft Active Directory Address Book
Microsoft Exchange
(mail={a})
SunONE Directory Server (mail={a})
Lotus Notes
Lotus Domino
You can also validate on the username (Left Hand Side). This is useful if your directory does not contain
all the domains you accept mail for. Set the Accept query to (uid={u}).
Configuring Acceptance Queries for Lotus Notes
(mailAlternateAddress={a})
Note that there is a potential complication with LDAPACCEPT and Lotus Notes. If Notes LDAP
contains a person with attributes like these:
mail=juser@example.com
cn=Joe User
uid=juser
cn=123456
location=New Jersey
(|(mail={a})(proxyAddresses=smtp:{a}))
(mailAlternateAddress={a})
(mailEquivalentAddress={a})
(mailForwardingAddress={a})
(mailRoutingAddress={a})
(|(|(mail={a})(uid={u}))(cn={u}))
(|(ShortName={u})(InternetAddress={a})(FullNa
me={u}))
Lotus accepts email for this person for various different forms of email addresses, other than what is
specified, such as “Joe_User@example.com” — which do not exist in the LDAP directory. So AsyncOS
may not be able to find all of the valid user email addresses for that user.
One possible solution is to try to publish the other forms of addresses. Please contact your Lotus Notes
administrator for more details.
Cisco IronPort AsyncOS 7.6 for Email Advanced Configuration Guide
3-19