Recipient Verification Active Directory

Question

Hello, 
 
 we are Using Sophos XG 230 on SFOS 18.04 MR-4 
 If i try to set up Recipient Verification to AD nothing happens. 
 Every Mail is redirected to the Exchange 2016. 
 It does not Check against additional smtp Addresses or anything. 
 Does anybody here get woring solution to this? 
 
 With kind regards alex

FormerMember · Answer

Hi Alexander Liebert1 , 
 Thanks for reaching out to the Community! 
 If you configured "In Active Directory" recipient verification, the firewall verifies the recipient of inbound emails with AD server over simple, SSL, and STARTTLS protocols. 
 Have you integrated your AD server with the firewall? 
 For recipient verification with "In Active Directory" to work, you would have to specify the AD server, bind DN, and base DN. 
 The bind DN is the full distinguished name (DN), including the common name (CN) of the administrator user configured in the AD server that you&rsquo;ve specified. 
 CN=Administrator,CN=Users,DC=example,DC=com 
 Base DN is the base distinguished name (DN), which is the starting point of searches in the AD server. 
 DC=example,DC=com 
 Reference document: Add an SMTP route and scan policy . 
 Thanks,

Christian Biere · Answer

I would not recommend using an administrative account for this purpose because it is completely unnecessary. I'm using an unprivileged pseudo account "ldap" for read access to active directory (aka LDAP). A misspelled Bind DN is the most-likely reason. You can double check in CMD with this: dsquery user -name ldap 
 The same applies to the Authentication menu where you configure the active directory server(s). You can also use SSH to login into the firewall and check /var/tslog/smtpd_main.log.