Cisco Cisco Email Security Appliance X1050 Guía Del Usuario
3-209
Cisco IronPort AsyncOS 7.1 for Email Advanced Configuration Guide
OL-22164-02
Chapter 3 LDAP Queries
Configuring an SMTP Authentication Query
When configuring an SMTP Authentication query, you specify the following
information:
information:
Table 3-6
SMTP Auth LDAP Query Fields
Name
A name for the query.
Query String
You can select whether to authenticate via LDAP bind or by fetching the
password as an attribute.
password as an attribute.
Bind: Attempt to log into the LDAP server using the credentials supplied by
the client (this is called an LDAP bind).
the client (this is called an LDAP bind).
Specify the maximum number of concurrent connections to be used by the
SMTP Auth query. This number should not exceed the number specified in
the LDAP server attributes above. Note, to avoid large number of session
time-outs for bind authentication, increase the maximum number of
concurrent connections here (typically nearly all of the connections can be
assigned to SMTP Auth). A new connection is used for each bind
authentication. The remainder of the connections are shared by the other
LDAP query types.
SMTP Auth query. This number should not exceed the number specified in
the LDAP server attributes above. Note, to avoid large number of session
time-outs for bind authentication, increase the maximum number of
concurrent connections here (typically nearly all of the connections can be
assigned to SMTP Auth). A new connection is used for each bind
authentication. The remainder of the connections are shared by the other
LDAP query types.
Password as Attribute: To authenticate by fetching passwords, specify the
password in the SMTP Auth password attribute field below.
password in the SMTP Auth password attribute field below.
Specify the LDAP query to use for either kind of authentication.
Active Directory example query:
(&(samaccountname={u})(objectCategory=person)
(objectClass=user))
SMTP Auth Password
Attribute
Attribute
If you have selected “Authenticate by fetching the password as an attribute,”
you can specify the password attribute here.
you can specify the password attribute here.