Technical Tip: Unable to find user DN that matches mail address When use LDAP profile

[edgar1]

Description	This article describes why an LDAP query receives the error 'Unable to find user DN that matches mail address.
Scope	FortiMail.
Solution	When configuring an LDAP profile for authentication, attempting an LDAP query using an email account may return the error 'Unable to find user DN that matches mail address'. The most common error is that the account in LDAP does not have the e-mail attribute defined. Open User LDAP properties in the Domain controller or LDAP server. Add the correct info about the user. For example, test@domain.com. Once e-mail information is complete on LDAP, try testing the query. Successful results will appear. After the query passes the test, it will be possible to use this profile for authentication, Webmail Quarantine access, or any purpose that requires LDAP authentication. Note: Confirm that the schema in the LDAP profile has Active Directory selected, as shown in the following image: