Cisco Cisco Email Security Appliance C160 Mode D'Emploi

Masquerading queries. For more information, see 

.

Group queries. For more information, see 

Domain-based queries. For more information, see 

Chain queries. For more information, see 

You can also configure queries for the following purposes:

Directory harvest prevention. For more information, see 

.

SMTP authentication. For more information, see 

External authentication. For more information, 

Spam quarantine end-user authentication query. For more information, see 

Spam quarantine alias consolidation query. For more information, see 

.

The search queries you specify are available to all listeners you configure on the system. 

The root level of the directory is called the base. The name of the base is the DN (distinguishing name). 
The base DN format for Active Directory (and the standard as per RFC 2247) has the DNS domain 
translated into domain components (dc=). For example, example.com's base DN would be: dc=example, 
dc=com. Note that each portion of the DNS name is represented in order. This may or may not reflect 
the LDAP settings for your configuration.

If your directory contains multiple domains you may find it inconvenient to enter a single BASE for your 
queries. In this case, when configuring the LDAP server settings, set the base to NONE. This will, 
however, make your searches inefficient.

Spaces are allowed in LDAP paths, and they do not need to be quoted. The CN and DC syntax is not 
case-sensitive.

Cn=First Last,oU=user,dc=domain,DC=COM

The variable names you enter for queries are case-sensitive and must match your LDAP implementation 
in order to work correctly. For example, entering 

 at a prompt performs a different 

query than entering 

.

You can use the following tokens in your LDAP queries:

{a} username@domainname

{d} domainname