system encryption ibe-auth

When recipients of email from the IBE domains receive a secure mail notification:

• recipients without LDAP authentication profiles must register to view the email.
• recipients with LDAP authentication profiles do not need to register. They can simply log in because the FortiMail unit can query the LDAP servers for authentication.

In both cases, the FortiMail unit will record the domain names of the recipients who register or authenticate with it on User > IBE User > IBE Domain.

Use this command to bind domains with LDAP authentication profiles with which the FortiMail unit can query the LDAP servers for authentication, email address mappings, and more. For more information about LDAP profiles, see profile ldap.

Syntax

config system encryption ibe-auth

edit <profile_index>

set status {enable | disable}

set ldap-profile <profile_name>

set domain-pattern <domain_pattern>

end

Variable	Description	Default
<profile_index>	Enter a table ID.
domain-pattern <domain_pattern>	Enter a domain name that you want to bind to an LDAP authentication profile. If you want all IBE users to authenticate through an LDAP profile and do not want other users to be able to register on FortiMail, you can use a wildcard * for the domain name and then bind it to an LDAP profile.
ldap-profile <profile_name>	Enter a profile name from the available LDAP profile list, which you want to use to authenticate the domain users.
status {enable | disable}	Enable or disable the rule.	disable

Related topics

profile ldap

system encryption ibe