Trustwave and Cybereason Merge to Form Global MDR Powerhouse for Unparalleled Cybersecurity Value. Learn More

Trustwave and Cybereason Merge to Form Global MDR Powerhouse for Unparalleled Cybersecurity Value. Learn More

Services
Managed Detection & Response

Eliminate active threats with 24/7 threat detection, investigation, and response.

Co-Managed SOC (SIEM)

Maximize your SIEM investment, stop alert fatigue, and enhance your team with hybrid security operations support.

Advisory & Diagnostics

Advance your cybersecurity program and get expert guidance where you need it most.

Penetration Testing

Test your physical locations and IT infrastructure to shore up weaknesses before exploitation.

Database Security

Prevent unauthorized access and exceed compliance requirements.

Email Security

Stop email threats others miss and secure your organization against the #1 ransomware attack vector.

Digital Forensics & Incident Response

Prepare for the inevitable with 24/7 global breach response in-region and available on-site.

Firewall & Technology Management

Mitigate risk of a cyberattack with 24/7 incident and health monitoring and the latest threat intelligence.

Solutions
BY TOPIC
Microsoft Security
Unlock the full power of Microsoft Security
Offensive Security
Solutions to maximize your security ROI
Rapidly Secure New Environments
Security for rapid response situations
Securing the Cloud
Safely navigate and stay protected
Securing the IoT Landscape
Test, monitor and secure network objects
Why Trustwave
About Us
Awards and Accolades
Trustwave SpiderLabs Team
Trustwave Fusion Security Operations Platform
Trustwave Security Colony
Partners
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Trustwave PartnerOne Program
Join forces with Trustwave to protect against the most advance cybersecurity threats
Loading...
Loading...

HOWTO: Retrieving all email addresses from LDAP

Expand / Collapse


This article applies to:

  • Trustwave MailMarshal (SEG) 6.4 and above
  • Trustwave ECM/MailMarshal Exchange 7.X
  • Trustwave SPE Connector Agent

Question:

  • How can I get a full list of every email address in a LDAP directory?
  • Scraping the LDAP directory
  • Need to list all email addresses in the company for DHA
  • Want to use the "scrape" method from MailMarshal 6.1

Procedure:

The following tips can be useful if you want to get a list of all email addresses in a LDAP directory when you are using a Connector or the Connector Agent.

  • You can set up the LDAP connection to "scrape" all addresses in any group you retrieve from the directory.
    1. In the LDAP Connection properties window > LDAP server tab, click Advanced.
      • For MailMarshal (SEG) 10, simply edit the connector to see the User Attributes tab.
      • For Connector Agent, select a Connector > Server Info tab, and then click Advanced.
    2. On the User Attributes tab of the Advanced LDAP properties window, in the User Class Names field enter top
  • You can create a user group that includes all items in a container.
    1. In the New User Group wizard, choose to import groups from a LDAP connection.
    2. Click Browse and select any group.
    3. On the Import LDAP User Groups page, replace the group name. Type the name of a container, preceded by *.
      • For instance, to retrieve all email addresses from the example.com domain, enter *,DC=Example,DC=Com

When you set up the connector and group as above, every email address in every attribute of each item in the group is retrieved.

Notes:

MailMarshal SMTP versions 6.1 through 6.3 do not require or recognize the class name "top". These versions do not allow filtering by class name.

If you want to maintain the version 6.1 behavior in later versions, you can use the User Class Name "top", as above.

If you find that this setting does not work as expected, you can revert to the version 6.1 code by setting a Registry value:

  1. On the Array Manager, open Regedit
  2. Navigate to the MailMarshal Array Manager registry key. In MailMarshal SMTP version 6.8 32 bit:
    HKEY_LOCAL_MACHINE\Software\Marshal\MailMarshal\Components\Manager
    • For details of the locations for each MailMarshal version, see the following Trustwave Knowledgebase articles:
      • Q14003 (MailMarshal Exchange)
  3. Create a DWORD value UseAlternateScraping
  4. Set the value to 1

As always, take due care when editing the Registry.


To contact Trustwave about this article or to request support:


Rate this Article:
     
Tags:

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.