Cisco Cisco Email Security Appliance X1050 Referencia técnica
102
C I S C O I R O N P O R T A S Y N C O S 7 . 3 C L I R E F E R E N C E G U I D E
L DA P
This section contains the following CLI commands:
• ldaptest
ldapconfig
Description
Configure LDAP servers
Usage
Commit: This command requires a ‘commit’.
Cluster Management: This command can be used in all three machine modes (cluster, group,
machine).
machine).
Batch Command: This command does not support a batch format.
Example - Creating a New LDAP Server Profile
In the following example, the
ldapconfig
command is used to define an LDAP server for the
appliance to bind to, and queries for recipient acceptance (
ldapaccept
subcommand),
routing (
ldaprouting
subcommand), masquerading (
masquerade
subcommand), end-user
authentication for the IronPort Spam Quarantine (
isqauth
subcommand), and alias
consolidation for spam notifications (
isqalias
subcommand) are configured.
First, the nickname of “PublicLDAP” is given for the
mldapserver.example.com
LDAP
server. Queries are directed to port 3268 (the default). The search base of
example.com
is
defined (
dc=example,dc=com
), and queries for recipient acceptance, mail re-routing, and
masquerading are defined. The queries in this example are similar to an OpenLDAP directory
configuration which uses the inetLocalMailRecipient auxiliary object class defined in the
expired Internet Draft draft-lachman-laser-ldap-mail-routing-xx.txt, also sometimes known as
“the Laser spec.” (A version of this draft is included with the OpenLDAP source distribution.)
Note that in this example, the alternate mailhost to use for queried recipients in the mail re-
routing query is
configuration which uses the inetLocalMailRecipient auxiliary object class defined in the
expired Internet Draft draft-lachman-laser-ldap-mail-routing-xx.txt, also sometimes known as
“the Laser spec.” (A version of this draft is included with the OpenLDAP source distribution.)
Note that in this example, the alternate mailhost to use for queried recipients in the mail re-
routing query is
mailForwardingAddress
. Remember that query names are case-sensitive
and must match exactly in order to return the proper results.
Code Example 3-64
ldapconfig - New Server Profile
mail3.example.com> ldapconfig
No LDAP server configurations.
Choose the operation you want to perform:
- NEW - Create a new server configuration.
- SETUP - Configure LDAP options.