Used for creating and MDaemon XML API Service Account, this page is opened from the Edit User Verification Source page when you have the Type set to "MDaemon (XML API)" and click the Create MDaemon XML API Service Account button. The MDaemon XML API supports service accounts with limited permissions. Rather than have you supply a full administrator's credentials for SecurityGateway to use permanently, this screen uses the API to create a separate account whose permission is limited to the single "XMINGER" operation used for verifying and authenticating user accounts.
Creating the account requires the credentials of an MDaemon global administrator, but SecurityGateway does not retain those administrator credentials once the process completes; only the newly created service account's credentials are kept, and those are what get used for the User Verification Source going forward. This is a best practice that reduces the risk of a compromised verification source being used to attack your mail server, since the credentials it holds can do nothing but verify and authenticate users. Note: This feature requires MDaemon version 23.0.2 or later.
Properties
MDaemon XML API URL
The URL of the MDaemon server's XML API. This is pre-filled from the URL already entered on the parent Edit User Verification Source screen, and any change you make here is copied back to that screen when the service account is created. MDaemon's default XML API URL is in the form: http://servername:RemoteAdminPort/MdMgmtWS/. It is strongly recommended to configure HTTPS in MDaemon and use a secure "https://" URL here instead, since the administrator credentials below are submitted to this URL.
MDaemon Global Administrator Username
The username of an MDaemon global administrator account. This account is used only once, to authenticate the request that creates the service account. It is not saved by SecurityGateway.
MDaemon Global Administrator Password
The password for the MDaemon global administrator account entered above. Like the username, this is used only to create the service account and is not retained afterward.
HTTPS Options (requires https:// in the URL above)
These two checkboxes are only meaningful when the URL above uses https://; they are pre-filled from the same options on the parent Edit User Verification Source screen and, like the URL, are copied back to that screen once the service account is created.
Verify SSL certificate
When checked, SecurityGateway verifies that the MDaemon server's SSL certificate is valid and trusted before submitting the administrator credentials to it.
Check certificate hostname
When checked, SecurityGateway also verifies that the hostname in the SSL certificate matches the hostname used in the URL above.
Create MDaemon XML API Service Account
Click this button to submit the request. If the URL does not begin with https://, you will first see a warning that credentials will be sent in clear text, and be asked to confirm before continuing. If the administrator credentials are accepted, MDaemon returns a new service account's username and password, and this screen automatically fills those values into the MDaemon Global Administrator Username and MDaemon Global Administrator Password fields on the parent Edit User Verification Source screen (replacing the global administrator credentials you entered here) before closing itself. If account creation fails — for example, because of invalid administrator credentials, an unreachable URL, or an MDaemon version that doesn't support service accounts — an error message is displayed and the screen remains open so you can correct the problem and try again.
