Authentication mapping to Active Directory

[Rubão]

We have a public domain wich receives e-mails: foo.org.br
And a internal Active Directory domain: intranet.foo

In AD users have account name "user@intranet.foo", and an attribute mail containing first.surname@foo.org.br.

We need to make auth works using their mails, and not their account names on AD. How can we be able to make it possible?

[uxbod]

Unfortunately I have not done this myself, but looking at LDAP Authentication - Zimbra :: Wiki I believe it is just a case of setting the correct filter against the email attribute in AD.

Also, http://www.zimbra.com/forums/announc...r-profile.html please

[mjp]

Did you/somebody find a proper solution?

Letting the filter search for the "mail" attribute in AD would work, but is not the best solution because the "mail" attribute is not unique in AD.
My current solution is to use the AD samaccountname as zimbra uid and let zimbraMailCanonicalAddress do the mapping to the first.surname@domain.com address.
But seems like a dead end, because it limits you in the use of aliases and may cause other troubles...

regards