Switching from Internal Auth to External Active Directory

[MindexAdmin]

I initially configured authentication via Internal for the domain. How do I go about changing this to use external Active Directory authentication. I see a lot of posts but no answers here so I am asking the question again for all those who may also have similar issues.

Thanks,
MindexAdmin

[phoenix]

What is the problem with just running through the wizard for external authentication in the Admin UI? There's plenty of information on these forums & the wiki on how to get it working.

[MindexAdmin]

Originally Posted by phoenix

What is the problem with just running through the wizard for external authentication in the Admin UI? There's plenty of information on these forums & the wiki on how to get it working.

Glad you think so, but I haven't found what I need yet. Particulary in the wiki. How about a link to one of those answers?

[phoenix]

Well, how about describing what your problem is and what you've tried so far?

[mmorse]

Admin console> domains> select a domain> configure authentication button
info here: http://www.zimbra.com/docs/ne/latest/administration_guide/5_Zimbra_LDAP.5.1.html#1036410

I would suggest making your personal account/an account that's already in the AD as an administrator before you are fully on external auth-
If you can't login to the admin console after that:
1) is there a corresponding user for 'admin@domain.com' in the AD?
2) if desired, enable fallback authentication
zmprov md zimbraAuthFallbackToLocal TRUE (or zmprov md yourdomain.com zimbraAuthFallbackToLocal TRUE)

[MindexAdmin]

Originally Posted by mmorse

Admin console> domains> select a domain> configure authentication button
info here: http://www.zimbra.com/docs/ne/latest/administration_guide/5_Zimbra_LDAP.5.1.html#1036410

I would suggest making your personal account/an account that's already in the AD as an administrator before you are fully on external auth-
If you can't login to the admin console after that:
1) is there a corresponding user for 'admin@domain.com' in the AD?
2) if desired, enable fallback authentication
zmprov md zimbraAuthFallbackToLocal TRUE (or zmprov md yourdomain.com zimbraAuthFallbackToLocal TRUE)

So the part I am confused about is that I have a different email domain for example "maildomain.com" and my authentication for these users is in a different domain "office.domain.com". Is it possible to authenticate mail users against the internal domain without creating a new AD sub domain? I appreciate your feedback.