Yawancin kamfanoni, musamman a cikin CIS, sun riga sun sami ingantaccen kayan aikin IT, waɗanda galibi ke amfani da kayan aiki kamar Active Directory daga Microsoft don sarrafawa da tantance masu amfani. Kuma sau da yawa irin waɗannan kamfanoni, lokacin da suka fara shirin aiwatar da Zimbra Collaboration Suite, suna da tambaya game da ko ZCS na iya dacewa da kayan aikin su kuma suyi amfani da Microsoft AD don tantance mai amfani? Da kyau, Zimbra yana da ikon yin aiki tare da Active Directory kuma yanzu za mu gaya muku yadda ake cimma wannan.
Don haka, bari mu ɗauka cewa a cikin kayan aikin ku na Active Directory yana kan yanki yankin.local, kuma ya kamata a sanya Zimbra akan yankin mail.domain.comA yayin tsarin haɗa Zimbra da Active Directory, za mu haɗa AD a matsayin LDAP na waje don ZCS, don haka muna ba da shawarar nan take a kashe masu amfani daga canza kalmomin shiga da kansu. Hakanan a lura cewa don tabbatar da nasarar haɗin Zimbra da Active Directory, uwar garke Tare da AD, ana ba da shawarar a sami aƙalla asusu ɗaya tare da lambar shiga/kalmar sirri da aka sani don duba nasarar haɗin tsarin bayanai guda biyu.
Ana haɗa AD zuwa ZCS a cikin na'ura mai ba da hanya tsakanin hanyoyin sadarwa na Zimbra a mail.domain.com. Anan dole ne mu zaɓi Sanya abu a mashigin gefen hagu, sannan ƙaramin abu na Domains. A cikin jerin wuraren, yanzu muna buƙatar zaɓar wanda za mu yi amfani da shi tare da AD kuma, ta danna dama a kan yankin da aka zaɓa, zaɓi abu "Configure Authentification" abu. Bayan wannan, magana don saita LDAP na waje zai bayyana akan allon, inda zamu "yi abokai" na Zimbra tare da AD.
A shafin Yanayin Tabbatarwa, zaɓi zaɓin "External Active Directory", sannan a shafin Saitunan Tabbatarwa, shigar da bayanai game da uwar garke Tare da AD. Za a umarce ka da ka shigar da sunan yankin, adireshin IP na uwar garken, da tashar jiragen ruwa da aka yi amfani da ita don samun damar AD. Muna ba da shawarar barin shafi na gaba, mai taken LDAP Bind, babu komai.
A cikin Takaitaccen Tasirin Saitin Tabbatarwa, zaku iya bincika nasarar haɗin Zimbra zuwa AD ta shigar da madaidaicin hanyar shiga/kalmar shiga ga kowane mai amfani. Idan haɗin ya yi nasara, Zimbra zai ƙididdige Bind DN da kansa don wannan mai amfani. Bayan wannan, zaku iya barin Saitunan Rukuni na Waje da Cikakkun shafukan Kanfigareshan ba su canza ba. Wannan yana kammala haɗin Zimbra tare da AD kuma duk abin da za mu yi shine ƙirƙirar masu amfani daga AD a Zimbra don samun nasarar aiki tare tsakanin tsarin bayanai.
Idan kuna da ƙananan asusu, zaku iya yin wannan da hannu, amma idan da gaske akwai asusu da yawa, zai fi kyau ku sarrafa wannan tsari ta amfani da aikin samar da atomatik. Don yin wannan, muna buƙatar zuwa uwar garken Zimbra kuma mu aiwatar da magudi da yawa a can akan layin umarni:
su zimbra
zmprov md domain.com zimbraAutoProvMode LAZY
zmprov md domain.com zimbraAutoProvLdapURL "ldap://domain.local:389"
zmprov md domain.com zimbraAutoProvLdapStartTlsEnabled FALSE
zmprov md domain.com zimbraAutoProvLdapAdminBindDn "zimbra@domain.local"
zmprov md domain.com zimbraAutoProvLdapAdminBindPassword PassworD
zmprov md domain.com zimbraAutoProvLdapSearchBase "ou=User,dc=domain,dc=local)"
zmprov md domain.com zimbraAutoProvLdapSearchFilter "(samAccountName=%u)"
zmprov md domain.com zimbraAutoProvLdapBindDn "%u@%d"
zmprov md domain.com zimbraAutoProvAccountNameMap sAMAccountName
zmprov md domain.com +zimbraAutoProvAttrMap "sn=sn" +zimbraAutoProvAttrMap "description=description" +zimbraAutoProvAttrMap "cn=displayName" +zimbraAutoProvAttrMap "givenName=givenName" +zimbraAutoProvAttrMap "zimbraMailAlias=mail"
zmprov md domain.com zimbraAutoProvNotificationFromAddress admin@domain.com
zmprov md domain.com zimbraAutoProvNotificationSubject "Мы рады приветствовать вас на борту нашего почтового сервера"
zmprov md domain.com zimbraAutoProvNotificationBody "Ваш аккаунт был создан автоматически. Ознакомьтесь с инструкцией по работе с электронной почтой, перейдя по данной ссылке"
zmprov md domain.com zimbraAutoProvBatchSize 20
zmprov md domain.com zimbraAutoProvAuthMech LDAP
zmcontrol restartTare da wannan saitin, za a ƙirƙiri asusun mai amfani ta atomatik akan sabar Zimbra a karon farko da kuka yi ƙoƙarin shiga cikin abokin ciniki ta yanar gizo ta amfani da biyun shiga/kalmar shiga da ke akwai. Lura cewa a wasu lokuta, don daidaitawa ta atomatik don yin aiki daidai, kuna iya buƙatar canza lambar tashar jiragen ruwa daga 389 zuwa 3268.
Bayan kammala duk waɗannan matakan, masu amfani da ku za su iya shiga cikin wasiƙun su akan sabar tare da Zimbra ta amfani da hanyar shiga / kalmar sirri daga AD, wanda zai sauƙaƙa sarrafa kayan aikin IT na kasuwanci.
source: www.habr.com
