How-To: Configure ModusGate with Specific OpenLDAP Server Attributes

 

Product: ModusGate

Version & Build: All

 

 

LDAP Routes with Customized Attributes

 

In a ModusGate route configured with OpenLDAP, by default, the mail mailbox attribute is ‘mail’ and the mail alias attribute is ‘uid’.

You can create OpenLDAP mailbox validation schemes in ModusGate for any OpenLDAP server.

 

Information regarding the LDAP server mail attributes:

  • LDAP attribute used to identify a main mailbox
    • The default attribute is ‘mail’
      • ModusGate always issues mailbox validation requests as a whole email address, including the domain name
  • LDAP attribute used to identify a mailbox alias
    • The default attribute is ‘uid’
      • By default, ModusGate issues alias validation requests without the domain name (this can be modified, as explained later)
  • If unavailable from the LDAP server supplier, such attributes can be easily read with standard LDAP browsers or tested with the default ModusGate attributes
    • Simply verify whether a test message to a mailbox or alias is accepted by ModusGate using the default OpenLDAP settings found in the Console at Connection – Properties – General

  

 

ModusGate with a Single OpenLDAP Route Scheme

 

  • In the Console, go to Connection- Properties – General
  • Create a domain route with both Automatically populate user list and Authentication request set to OpenLDAP and pointing to the OpenLDAP server IP address
  • Click  on Apply and exit the Console
  • Open the Registry Editor (regedit or regedt32)
  • Go to HKEY_LOCAL_MACHINE\SOFTWARE\Vircom\VopMail\LDAPServers
    • The Registry branch is as follows:

[HKEY_LOCAL_MACHINE\SOFTWARE\Vircom\VopMail\LDAPServers\1

@=""

"Alias_AttributeName"="uid"

"AliasedObject_AttributeName"="aliasedObjectName"

"AliasedObject_UIDTag"="uid"

"Mailbox_AttributeName"="mail"

"Name"="OpenLDAP"

"StripDomainFromAliasQuery"=dword:00000001

 

  • Modify Alias_AttributeName to match your OpenLDAP server alias attribute
  • Modify Mailbox_AttributeName to match your OpenLDAP server mailbox attribute
  • Modify StripDomainFromAliasQuery to:
    • Hexadecimal 1 to exclude the domain name from alias validation
    • Hexadecimal 0 to include the domain name to alias validation requests
  • Exit the Registry Editor (changes are saved automatically)
  • Go to System – Properties – Services and stop and start the following:
    • SMTPRS
    • MODUSCAN
    • MODUSADM
  • Send a test message to a mailbox and alias on the Open LDAP validated server

 

 

ModusGate with Multiple OpenLDAP Route Schemes

 

  • In the Console, go to Connection- Properties – General
  • Create a domain route with both Automatically populate user list and Authentication request set to OpenLDAP and pointing to the OpenLDAP server IP address
  • Click  on Apply and exit the Console
  • Open the Registry Editor (regedit or regedt32)
  • Go to HKEY_LOCAL_MACHINE\SOFTWARE\Vircom\VopMail\LDAPServers
    • The Registry branch is as follows:

[HKEY_LOCAL_MACHINE\SOFTWARE\Vircom\VopMail\LDAPServers\1

@=""

"Alias_AttributeName"="uid"

"AliasedObject_AttributeName"="aliasedObjectName"

"AliasedObject_UIDTag"="uid"

"Mailbox_AttributeName"="mail"

"Name"="OpenLDAP"

"StripDomainFromAliasQuery"=dword:00000001

 

  • Click on   HKEY_LOCAL_MACHINE\SOFTWARE\Vircom\VopMail\LDAPServers\1 to select the branch
  • Click on File > Export, select the file location and save the file with a .reg extension
  • Exit the Registry Editor
  • Copy the file using different filenames to create new OpenLDAP schemes (e.g. QmailLDAP, PostfixLDAP, etc.)
  • Use a text editor to modify each file’s attributes according to your OpenLDAP server’s requirements:
    • At the end of the first line, modify the number to assign a unique sequence number to your scheme
      • 1 is the default OpenLDAP and Vircom uses 2 for Sun One Directory servers as illustrated above
      • Do not assign the same number twice
    • Modify Alias_AttributeName to match your OpenLDAP server alias attribute
    • Modify Mailbox_AttributeName to match your OpenLDAP server mailbox attribute
    • Assign a unique and clear name to Name
      • This name is propagated to the Console in Connection – Properties – General (e.g. QmailLDAP, PostfixLDAP, etc.)
  • Modify StripDomainFromAliasQuery to:
    • Hexadecimal 1 to exclude the domain name from alias validation
    • Hexadecimal 0 to include the domain name to alias validation requests
  • Save the .reg file after modifying it
  • Repeat the above steps for each OpenLDAP scheme, using a new sequence number and file name
  • Import the newly created .reg files by double clicking on each of them
  • Go to the Registry Editor to ensure that the new registry branches have been imported properly
  • In the Console, go to Connection – Properties – General and assign your newly created OpenLDAP schemes to the appropriate domains
  • Go to System – Properties – Services and stop and start the following:
    • SMTPRS
    • MODUSCAN
    • MODUSADM
  • Send test messages to mailboxes and aliases on the OpenLDAP validated servers

 

Consult How-To: Configure ModusGate with Sun One Open Directory for Sun Email Servers for complimentary information.