Configuring an LDAP profile and domain
- Go to Profile > LDAP > LDAP and click New.
- Enter a Profile name, and set Server name/IP to either the FQDN or IP address of the LDAP server.
- Set Port to the default port that the LDAP server listens on. Note that setting Use secure connection to None sets Port to 389 (typically used for non-secure connections), while SSL sets Port to 636 (typically used for SSL-secure LDAPS connections).
- Under Default Bind Options, enter the required information. Set Base DN to the location of the LDAP directory tree that the FortiMail unit will search for user objects (child nodes of this location. Set Bind DN to an LDAP user with permissions to query the Base DN.
- Enter a Bind password.
- Under User Query Options, set the appropriate User query schema. For example, the default
(mail=$m)
looks for the mail attribute of users as a distinguishing characteristic, where$m
is the FortiMail variable for a user's email address. - Click Create.
- Go to Domain & User > Domain > Domain and click New.
- Enter a Domain name
For more information, see "Configuring user query options" in the FortiMail Administration Guide.