Results 1 to 8 of 8

Thread: Is this possible with AD authentication

  1. #1
    dlochart is offline Advanced Member
    Join Date
    Nov 2006
    Posts
    177
    Rep Power
    8

    Default Is this possible with AD authentication

    Multiple email addresses to 1 AD account

    I have 3 email addresses app1@test.com, app2@test.com,app3@test.com. I would like to authenticate them against just 1 AD account like application_auth@testad.com

    Or 1 email address to 1 AD account with a different name

    I have an email acocunt joejohn@test.com. His AD account is jdoe@testad.com. Without phyiscally changing the email address or the account name can you create or add to the email/AD mapping filter to match these up?

    Basic Overview Question:

    How does Zimbra (what fields are used) go about looking up an account in Active Directory?

    thanks

    Doug

  2. #2
    James Brinkerhoff is offline Intermediate Member
    Join Date
    May 2006
    Location
    New York, NY US
    Posts
    23
    Rep Power
    8

    Default I have a similar issue

    In my case the AD users all have spaces in there names... "FirstName LastName" as an example. the mail attribute on all these accounts have proper email addresses that would be perfect to match on for the user portion, however I don't think this is how Zimbra works.

  3. #3
    dlochart is offline Advanced Member
    Join Date
    Nov 2006
    Posts
    177
    Rep Power
    8

    Default

    Quote Originally Posted by James Brinkerhoff View Post
    In my case the AD users all have spaces in there names... "FirstName LastName" as an example. the mail attribute on all these accounts have proper email addresses that would be perfect to match on for the user portion, however I don't think this is how Zimbra works.
    Have you figured out how to map the accounts to AD yet? I believe what you want to match is possible although you will have to have access to the AD server (only to figure out exactly what AD has for each persons distinguished name. I can post what I tomorrow when I get in to work if you need it still

  4. #4
    James Brinkerhoff is offline Intermediate Member
    Join Date
    May 2006
    Location
    New York, NY US
    Posts
    23
    Rep Power
    8

    Default

    No, this is a current issue I'm encountering... If you have something workable, that would be great! Just in case I wasn't clear tho.. this is for authentication, not GAL.

  5. #5
    dlochart is offline Advanced Member
    Join Date
    Nov 2006
    Posts
    177
    Rep Power
    8

    Default

    That is fine ... the approach is for authentication. I will post it in the morning.

  6. #6
    James Brinkerhoff is offline Intermediate Member
    Join Date
    May 2006
    Location
    New York, NY US
    Posts
    23
    Rep Power
    8

    Default

    dlochart, any luck with the authentication config you mentioned?

  7. #7
    dlochart is offline Advanced Member
    Join Date
    Nov 2006
    Posts
    177
    Rep Power
    8

    Default

    yes, sorry I got slammed with a lot of things to do this morning including installing and setting up nagios for zimbra monitoring.

    for each zimbra account that needs authentication values in AD do this:

    Note:
    I used these values in the zmprov statment below.
    zimbra account=somemail@zimbra.com
    ad server domain=adserver.yourdomain.com
    The CN of the account to authenticate against=authname

    Code:
    zmprov ma somemail@zimbra.com zimbraAuthLdapExternalDn  dc=adserver,dc=yourdomain, dc=com,cn=authname
    Get on the AD controller machine.

    You will need to gain access to the AD controller and run this in a DOS window

    ldifde -f c:\user_export.txt

    This will list all users and groups in the domain and give you the DN (distinguished name) for each.

    Let me know if you need a more detailed explanation. I will have more time tonight.

    good luck

  8. #8
    James Brinkerhoff is offline Intermediate Member
    Join Date
    May 2006
    Location
    New York, NY US
    Posts
    23
    Rep Power
    8

    Default

    This worked PERFECTLY! Thank you so much! I wish I had been able to find this documented somewhere.. Where did you originally come up with it?

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Does Zimbra support IMAP Secure Authentication?
    By zzzzsg in forum Administrators
    Replies: 6
    Last Post: 11-06-2009, 07:19 PM
  2. External Authentication with Active Directory via LDAPS
    By merrill in forum Administrators
    Replies: 1
    Last Post: 10-21-2007, 01:13 PM
  3. External LDAP Authentication Issue
    By xtreme-one in forum Installation
    Replies: 10
    Last Post: 02-16-2007, 07:52 PM
  4. Authentication to external ldap stop working.
    By jahaj in forum Installation
    Replies: 3
    Last Post: 12-05-2006, 03:17 PM
  5. SMTP SASL authentication failure
    By igeorg in forum Developers
    Replies: 5
    Last Post: 10-10-2005, 01:23 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •