cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4327
Views
0
Helpful
1
Replies

LDAP Group Query

Security Team
Level 1
Level 1

Hello All,

 

If someone could enlighten me what the hack, I am doing wrong:

 

 

ESA Group Query:

Query String: (&(memberOf={g})(proxyAddresses=smtp:{a}))

 

Created a Group X

 

AD tells me this:

 

C:\Users\Administrator>dsquery group -name X

"CN=X,CN=Builtin,DC=mylab,DC=com"

 

And the verification that user test3 is in the group

 

C:\Users\Administrator>dsget group CN=X,CN=Builtin,DC=mylab,DC=com -members -expand

"CN=test3,CN=Users,DC=mylab,DC=com"

 

User has an email address assigned to his Profile named: test3@mylab.com

 

 

When I do a Group query on the ESA with the following:

 

Email address: test3@mylab.com

Group name: CN=X,CN=Builtin,DC=mylab,DC=com

 

I get this:

 

Query results for host:10.10.10.101

Query

 

(&(memberOf=CN\3dX,CN\3dBuiltin,DC\3dmylab,DC\3dcom)(proxyAddresses=smtp:test3@mylab.com)) to server AD-Mylab (10.10.10.101:3268)

Query

 

(&(memberOf=CN\3dX,CN\3dBuiltin,DC\3dmylab,DC\3dcom)(proxyAddresses=smtp:test3@mylab.com)) lookup success, (10.10.10.101:3268) returned 0 results

Failure: Action: match negative.

Reason: unknown error (assumed not a member of the group).

 

But what the Hack, accept query and Spam authentication query works so it not the AD

 

evry comment helpp is appreciated

1 Accepted Solution

Accepted Solutions

Security Team
Level 1
Level 1

issue is resolved : wrong string:

 

correct string is/was : (&(memberOf={g})(mail={a}))

 

wosk

View solution in original post

1 Reply 1

Security Team
Level 1
Level 1

issue is resolved : wrong string:

 

correct string is/was : (&(memberOf={g})(mail={a}))

 

wosk