Results 1 to 2 of 2

Thread: AD integration questions

  1. #1
    Join Date
    Jan 2007
    Posts
    30
    Rep Power
    8

    Default AD integration questions

    Hey folks,
    Just getting started here but already very impressed!

    I'm thinking about moving away from MS entirely, however before I do, I want to live in an integrated environment for a while.

    I've done quite a bit of searching and reading and I have to say everyone is very helpful!

    Here's my current setup:
    2 windows 2003 boxes (A and B) where BoxA (aspen.nsnet.local in the example below) is the master (all roles) and is the Exchange 2003 server. Currently BoxB isn't doing much besides serving some web pages and file serves as well as acting as a backup DNS (trying to phase it out so I can migrate it to Linux).

    I have installed Zimbra on my main Linux server for testing purposes, call it BoxZ. (like I said, plan is for BoxB to become a Linux sever).

    Internally I use a domain name of nsnet.local and externally I have 10 different domain names (only about 4 of which have email users). Exchange is setup to handle each of the external domains and I have policies that assign the email addresses based on a windows group...but most users have multiple addresses. For instance, user John Doe is jdoe@nsnet.local in AD, however his email address is john@externaldomain.com and jdoe@otherdomain.com and maybe even webmaster@thirddomain.net

    What I'd like to do is migrate SOME of the external domains to Zimbra, again mostly for testing. So in my example above I might move jdoe@otherdomain.com to Zimbra. Changing the external DNS's MX record was easy enough....and I could manually create a new jdoe@otherdomain.com account in Zimbra, however (and here's the kicker, right?) I want John Doe to be able to log into Zimbra using his nsnet.local credentials.

    So, the questions are:
    a) is this possible?
    b) how do I go about it?
    I know the later is a bit of a blanket question, however I think I have a start.
    In Zimbra I created the domain otherdomain.com and set the GAL as follows:
    Code:
    GAL mode: 	
    Both
    Most results returned by GAL search: 	
    100
    Server type: 	
    Active Directory
    LDAP filter:* 	
    Autocomplete filter: 	
    LDAP search base: 	
    dc=nsnet,dc=com
    LDAP URL: 	
    ldap://aspen.nsnet.local:389
    Bind DN: 	
    administrator@nsnet.com
    While I'm on this, is it safe to use the domain admin for the bind DN?

    For authentication I have:
    Code:
    Authentication mechanism: 	
    External Active Directory
    LDAP bind DN template: 	
    %u@nsnet.com
    LDAP URL: 	
    ldap://aspen.nsnet.local:389
    Again, for testing using the domain admin account- please advise if thats a huge security risk, even during testing.

    BUT...when jdoe ties to log in it doesnt work.
    So I created an account in Zimbra called jdoe@otherdomain.com and then tried to log in as jdoe@otherdomain.com and jdoe@nsnet.local however neither worked. So I tried to overide the @otherdomain.com in Jdoe's account and make it @nsnet.local ... but it doesnt appear to have saved the change.

    Of course, I'd prefer Zimbra to import all my AD users, or at some based on their group (is that the search term?), but I'd settle for having to manually add accounts in Zimbra that match the AD accounts.

    Any suggestions or hints would be GREATLY appericated.

    Thanks in advance
    -N

    p.s. if I want to go totally FLOSS, could I use Zimbra (with its fancy LDAP) as an AD replacement? Can I authenticate XP and OS X (more of the later) and Linux clients against Zimbra?

  2. #2
    Join Date
    Jan 2007
    Location
    Perth
    Posts
    1
    Rep Power
    8

    Default

    *bump*

    Hi SpaceBass,
    Thanks for the code, that alone answered afew questions I had. But I am also interested in the AD questions you asked, I would prefer it if Zimbra could import AD users, or even just do an LDAP lookup for group membership and use that to match accounts between AD and zimbra.

    As far as your "p.s" note, i dont see any reason why you couldnt. You might want to look at Novells offerings in that regard, since last time i checked they offered a pretty good platform for controlling multiple OS environments (their email system is horrible though).

    Regards,
    Guer

Similar Threads

  1. Tight samba integration with zimbra
    By daniellawson in forum Administrators
    Replies: 21
    Last Post: 06-14-2007, 05:06 PM
  2. Zimbra Pre-Install Questions
    By dczanik in forum Installation
    Replies: 1
    Last Post: 06-13-2007, 01:10 PM
  3. I am lost (products, integration with CRM etc)
    By Tmanagement in forum Installation
    Replies: 2
    Last Post: 05-01-2007, 10:32 AM
  4. A few other questions
    By dcm in forum Installation
    Replies: 0
    Last Post: 08-29-2006, 04:33 PM
  5. Commercial CA questions
    By cdyer in forum Administrators
    Replies: 3
    Last Post: 07-17-2006, 04:48 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •