external OpenLDAP server vs ZSC standard-installation ?

[john99]

Hello,

in the near feature we need to setup an LDAP server and therefore
contemplating if we should deploy a standard Zimbra installation
(with internal LDAP-server) or if it would be wiser to use an external
OpenLDAP-server....


Every feedback is appreciated very much. Thank you!

John

[Bevan Bennett]

When I asked about something similar, they recommended that you extend the Zimbra LDAP server to meet your extended needs rather than trying to Zimbra-fy an external server.

I agree that it looks like it would be easier to deploy a Zimbra LDAP server and add additional schemas then to try and get Zimbra to work using an independant LDAP server.

That being said, I currently have Zimbra using it's own internal LDAP but authenticating users from our existing OpenLDAP and it's working perfectly.

[phoenix]

If this is a single server install then you can't install without LDAP, you also need to provision users in the Zimbra LDAP. You can use an external LDAP server for external authentication without problems.

[john99]

Thank's a lot for the helfpul informations. Should there be done some special configuaration during the installation of a single ZCS server, if lather on(some month) an standalone LDAP server is installed for the authentication of external users ?

Thank you!

John

[Bevan Bennett]

I didn't have to do anything special.

[john99]

Thank you for the feedback! Unfortunatley I do not yet understand LDAP-servers very well..
but if you add an external LDAP-server for the authentication of remote users, i am wondering
if there is really no need to autenticate against Zimbra's integrated LDAP
server anymore?

Thank's for additional feedback!

John