Results 1 to 2 of 2

Thread: delegated authentication, can it be done?

  1. #1
    Join Date
    Dec 2008
    Rep Power

    Default delegated authentication, can it be done?

    We are working on an Exchange=>Zimbra pilot project, and Activesync is one of the big requirements for our environment.

    However, with the tight security policy we require that the password a user enters on the handheld be totally different from the one they use to access their other accounts. (We tie Zimbra to Active Directory for auth).

    In Exchange world, we use kerberos constrained delegation with a secondary auth source to accomplish this.

    Is there any way to do something like this in Zimbra, out of the box or with creativity?

    I was wondering if you could leverage the proxy role in this. But how does the authentication take place? Thinking...could we setup a password for each user that is local to Zimbra, and then use a ACL to block access from the proxy server to AD? This way the proxy would never be able to authenticate against the AD would time out. However, if the proxy passes through the authentication to the mailbox server, this would not work.

    Any thoughts?


  2. #2
    Join Date
    Jul 2007
    Rep Power


    zimbra does have fallback authentication support, thats about all the info i can give you.

Similar Threads

  1. Does Zimbra support IMAP Secure Authentication?
    By zzzzsg in forum Administrators
    Replies: 6
    Last Post: 11-06-2009, 06:19 PM
  2. [SOLVED] Zimbra logwatch.
    By nishith in forum Administrators
    Replies: 5
    Last Post: 06-10-2009, 04:42 PM
  3. SMTP Authentication
    By ferra in forum Installation
    Replies: 13
    Last Post: 06-26-2008, 07:25 AM
  4. AD GAL and Authentication
    By briansrapier in forum Installation
    Replies: 1
    Last Post: 04-23-2007, 01:43 PM
  5. Authentication to external ldap stop working.
    By jahaj in forum Installation
    Replies: 3
    Last Post: 12-05-2006, 02:17 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts