Active Directory and LDAP alias

[gotuiva]

Hi, Does anyone has working configuration for Fortimail and LDAP aliases? We have FML 400 with build495-120418 firmware in server mode. AD is 2008 R2. User authentication is working properly. We have several groups (security and distribution), and our idea is to put alias email in group properties, and mail sent to alias email should be sent to members of that group. Our ldap query is according post on this forum. Schema - User Defined - Base DN - DC=company,DC=com - Bind DN - Same as in User Query Options - Bind Password - Same as in User Query Options - Alias Member Attribute - mail - Alias Memeber Query String - (&(|(objectClass=User)(objectClass=Group)(objectClass=publicFolder)) (|(proxyAddresses=smtp:$m)(mail=$m))) - User Group Expansion In Advanced - No checkbox - Group Member Attribute - Didnt use, but should work with this one, member - Group Memeber Query String - Didnt use, but should work with this one, (&(objectClass=group) (proxyAddresses=smtp:$m)) - Scope - Subtree - Derefer - Never - Max Alias Expansion Level - 0 Alias is succesfuly found when I make Test LDAP query. Unfortunately, mail delivery doesnt work this way. Mail gets through (there is no 550 error RCPT required) but it is not delivered to members of alias group. If I put checkmark on User Group Expansion or change query options, I get 550 error. Does anyone knows how to make it work?

[ehlo]

Hi Glad it works for you. Actually (&(objectClass=Group) (|(proxyAddresses=smtp:$m)(mail=$m)) should be working, it is due to you are missing one rgiht bracket ' )' at the end. (&(objectClass=Group) (|(proxyAddresses=smtp:$m)(mail=$m))) Thanks ehlo