Binddn Option

From MsgServerDocWiki

Distinguished Name used by the MMP to authenticate to the Directory Server. For schema 1, the binddn must have privileges to access the domain tree as specified by the ldapurl option as well as any users referenced from that domain tree. For schema 2, the binddn must have privileges to access the usergroupdn tree.

The Messaging Server default directory ACIs require a bind to authenticate users against the Directory Server.