Technical Tip: Setup a LDAP profile on FortiMail for Windows Active Directory Group Query for Group based Recipient Policy matching

[ahsanali_FTNT]

Description

This article describes the changes required to configure FortiMail LDAP profile to support Group Query against a Windows Active Directory LDAP server.

Scope

This has been tested against Windows Server 2008 R2, and Windows Server 2012 R2.

Solution

Section A - Configure the LDAP Profile:

1. Refer to Configuring LDAP profiles  for complete steps on how to setup the Default Bind Options and User Query Options for Windows Active Directory.
2. Configure the Group Query Options. 

• Group membership attribute - For Windows Active Directory this is memberOf.
• Select Use group name with base DN as group DN
• Group base DN - Enter the DN of the Group Container in your Active Directory. In this example, the Groups are all configured in the User container.
• Group name attribute: For Windows Active Directory, this is CN. Eensure the check mark beside Group Query Options is selected.
• Save the configuration. Scroll down to the bottom of the page and select Apply.
• Test the configuration. select [Test LDAP Query...].