Cisco Cisco Email Security Appliance C160 Mode D'Emploi

If your directory contains multiple domains you may find it inconvenient to enter 
a single BASE for your queries. In this case, when configuring the LDAP server 
settings, set the base to NONE. This will, however, make your searches 
inefficient.

Spaces are allowed in LDAP paths, and they do not need to be quoted. The CN 
and DC syntax is not case-sensitive.

Cn=First Last,oU=user,dc=domain,DC=COM

The variable names you enter for queries are case-sensitive and must match your 
LDAP implementation in order to work correctly. For example, entering 

 at a prompt performs a different query than entering 

.

You can use the following tokens in your LDAP queries:

{a} username@domainname

{d} domainname

{dn} distinguished name

{g} groupname

{u} username

{f} MAIL FROM: address

The {f} token is valid in acceptance queries only.

For example, you might use the following query to accept mail for an Active 
Directory LDAP server:

(|(mail={a})(proxyAddresses=smtp:{a}))