Results 1 to 6 of 6

Thread: DN to use for ldap bind?

  1. #1
    gwjones is offline Member
    Join Date
    Jan 2008
    Location
    Louisiana
    Posts
    13
    Rep Power
    7

    Default DN to use for ldap bind?

    I was not able to find a definitive answer by searching, so I thought I would ask here. With version 5, we have a perl script that gets a list of all aliases in use that does an anonymous bind with ldap. Since the version 6 release notes point out that anonymous binds are no longer allowed, what would be the proper DN to bind with? I found reference to using uid=zimbra,cn=admins,cn=zimbra in the wiki article on merging two servers (which I used recently and it worked well, btw). Would this still be an appropriate DN to use for this purpose with version 6.0.7.1?

    Thanks.

    Wendell

  2. #2
    quanah is offline Zimbra Employee
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,265
    Rep Power
    10

    Default

    Two things:

    1) anonymous binds are disabled by default if it is a new install. They remain enabled if it is an upgrade, and you can always enable them if you want.

    2) Yes, the zimbra admin dn is a perfectly good dn to use for this type of search. If you want to use one with fewer permissions, you might try the postfix user or the replication user. The zimbra admin DN can do pretty much anything in the main db, so just be aware of that.
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  3. #3
    gwjones is offline Member
    Join Date
    Jan 2008
    Location
    Louisiana
    Posts
    13
    Rep Power
    7

    Default

    Quote Originally Posted by quanah View Post
    Two things:

    1) anonymous binds are disabled by default if it is a new install. They remain enabled if it is an upgrade, and you can always enable them if you want.

    2) Yes, the zimbra admin dn is a perfectly good dn to use for this type of search. If you want to use one with fewer permissions, you might try the postfix user or the replication user. The zimbra admin DN can do pretty much anything in the main db, so just be aware of that.
    Thanks for the response.

    It seems like requiring authenticated binds is a good thing. Will that affect anything other than external access to the ldap information?

    Since all we need to do with this is read the mail and zimbraMailAlias attributes, would the postfix user have the necessary privileges? I assume that the DN would be uid=postfix,cn=admins,cn=zimbra?

    Thanks again.

    Wendell

  4. #4
    quanah is offline Zimbra Employee
    Join Date
    May 2007
    Location
    Zimbra
    Posts
    1,265
    Rep Power
    10

    Default

    Hm, no postfix won't work for you in that case, because it doesn't have access to the mail attribute.
    Quanah Gibson-Mount
    Server Architect
    Zimbra, Inc
    --------------------
    Zimbra :: the leader in open source messaging and collaboration

  5. #5
    gwjones is offline Member
    Join Date
    Jan 2008
    Location
    Louisiana
    Posts
    13
    Rep Power
    7

    Default

    OK thanks. I guess we'll just use uid=zimbra then. Since we're only reading, there shouldn't be much risk.

    Wendell

  6. #6
    krolen is offline Special Member
    Join Date
    Sep 2007
    Location
    Stockport
    Posts
    106
    Rep Power
    7

    Default

    Hi there, is is possible to allow groups of users to search ldap ? or could a user be created for searches. Apple address book for instance?

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Mail deferred with Connection timed out
    By Miklos Kalman in forum Administrators
    Replies: 7
    Last Post: 11-17-2012, 06:11 AM
  2. Bind 9.3 on CentOS 5 Split DNS
    By cyberslugg in forum Installation
    Replies: 6
    Last Post: 05-12-2010, 06:20 AM
  3. Replies: 15
    Last Post: 11-24-2009, 08:46 AM
  4. LDAP Cannot bind on migration to new server
    By neekster in forum Migration
    Replies: 23
    Last Post: 03-09-2009, 02:08 AM
  5. Replies: 4
    Last Post: 07-29-2008, 12:14 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •