Setting LDAP Routing Information
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1
This topic describes how to enable Lightweight Directory Access Protocol (LDAP) routing, and set options for LDAP routing.
Important
You must be a member of the Administrators group on the local computer to perform the following procedure or procedures. As a security best practice, log on to your computer by using an account that is not in the Administrators group, and then use the runas command to run IIS Manager as an administrator. At a command prompt, type runas /User:Administrative_AccountName "mmc systemroot\system32\inetsrv\iis.msc".
Procedures
To set LDAP routing information
In IIS Manager, right-click the SMTP virtual server, and then click Properties.
Click the LDAP Routing tab.
Select the Enable LDAP routing check box.
Set options as described in the following table.
| Option | Description |
|---|---|
Server |
Type the name of the computer running the LDAP directory. The field is not applicable when you use the Exchange LDAP Service schema type, because the service will find a nearby server and use it automatically. |
Schema |
Select a schema type. |
Binding |
Select the authentication method to use when binding to the LDAP server. Plain text transmits passwords in plaintext. To use the strongest authentication method available for the SMTP virtual server, select Windows SSPI. For no authentication, use Anonymous, which is the default. Service accounts will use the account information of whom ever is trying to bind to the LDAP server. |
Domain |
Type the domain of the account you want to use to bind to the LDAP directory. This option applies if you select the Plaintext or Windows SSPI binding types. |
User name |
Type the distinguished name of the account that you want to use to bind to the LDAP directory. For example, cn=user1, ou=users, o=company. This option applies if you select the Plain text or Windows SSPI binding types. |
Password |
Type the password used for logging on to the directory service. This option applies if you select the Plain text or Windows SSPI binding types. |
Base |
Type the distinguished name of a container in the directory service you're accessing. This setting specifies where you want the SMTP service to start searching in the LDAP directory. The search will begin in the container and will continue to subcontainers if necessary. |
Related Information
For information about selecting a schema type, see Selecting Schema Types.
For information about selecting the authentication method, see Determining Authentication Levels.