Setting LDAP Routing Information

  • Article

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1

This topic describes how to enable Lightweight Directory Access Protocol (LDAP) routing, and set options for LDAP routing.

Important

You must be a member of the Administrators group on the local computer to perform the following procedure or procedures. As a security best practice, log on to your computer by using an account that is not in the Administrators group, and then use the runas command to run IIS Manager as an administrator. At a command prompt, type runas /User:Administrative_AccountName "mmc systemroot\system32\inetsrv\iis.msc".

Procedures

To set LDAP routing information

  1. In IIS Manager, right-click the SMTP virtual server, and then click Properties.

  2. Click the LDAP Routing tab.

  3. Select the Enable LDAP routing check box.

  4. Set options as described in the following table.

Option Description

Server

Type the name of the computer running the LDAP directory. The field is not applicable when you use the Exchange LDAP Service schema type, because the service will find a nearby server and use it automatically.

Schema

Select a schema type.

Binding

Select the authentication method to use when binding to the LDAP server. Plain text transmits passwords in plaintext. To use the strongest authentication method available for the SMTP virtual server, select Windows SSPI. For no authentication, use Anonymous, which is the default. Service accounts will use the account information of whom ever is trying to bind to the LDAP server.

Domain

Type the domain of the account you want to use to bind to the LDAP directory. This option applies if you select the Plaintext or Windows SSPI binding types.

User name

Type the distinguished name of the account that you want to use to bind to the LDAP directory. For example, cn=user1, ou=users, o=company. This option applies if you select the Plain text or Windows SSPI binding types.

Password

Type the password used for logging on to the directory service. This option applies if you select the Plain text or Windows SSPI binding types.

Base

Type the distinguished name of a container in the directory service you're accessing. This setting specifies where you want the SMTP service to start searching in the LDAP directory. The search will begin in the container and will continue to subcontainers if necessary.