Руководство Пользователя для Cisco Cisco Email Security Appliance C170

Set Active Directory Permissions

Open ADSIEdit form the Windows 2000 Support Tools.

Locate the Domain Naming Context folder. This folder has the LDAP path of your domain.

Right click the Domain Naming Context folder, and then click Properties.

Click Security.

Click Advanced.

Click Add.

Click the User Object Everyone, and then click OK.

Click the Permission Type tab.

Click Inheritance from the Apply onto box.

Click to select the Allow check box for the Permission permission.

Configure the Cisco IronPort Messaging Gateway

Use 

ldapconfig

 on the Command Line Interface (CLI) to create an LDAP server entry with the 

following information.

Hostname of an Active Directory or Exchange server

Port 3268

Base DN matching the root naming context of the domain

Authentication type Anonymous

The following setup instructions allow you to make specific data available to anonymous bind queries 
of Active Directory and Exchange 2000 servers in the Microsoft Windows Active Directory. Anonymous 
bind of an Active Directory server will send the username 

anonymous

 with a blank password.

If a password is sent to an Active Directory server while attempting anonymous bind, authentication may 
fail.

Determine required Active Directory permissions.

Using the ADSI Edit snap-in or the LDP utility, you must modify the permissions to the attributes 
of the following Active Directory objects.

The root of the domain naming context for the domain against which you want to make queries.

All OU and CN objects that contain users against which you wish to query email information.

Everyone

Read Public Information

User Objects

Property

Everyone

Read Phone and Mail 
Options

User Objects

Property