Kupanga akaunti yokha kuchokera ku AD mu Zimbra Collaboration Suite

Mu imodzi mwa nkhani zathu zam'mbuyo tinauza za momwe mungapangire "abwenzi" pakati pa Zimbra ndi MS Active Directory, yomwe imagwiritsidwa ntchito ndi mabizinesi ambiri aku Russia kuyang'anira maakaunti a ogwiritsa ntchito. M'menemo, tidalangiza kuti ogwiritsa ntchito a Zimbra agwiritse ntchito njira yosavuta komanso yotetezeka kwambiri yopangira mabokosi a makalata ku Zimbra potengera deta ya AD yotchedwa LAZY Mode. Njira iyi yogwirira ntchito imakupatsani mwayi wopanga wogwiritsa ntchito watsopano wa Zimbra wokhala ndi dzina lolowera ndi mawu achinsinsi kuchokera ku AD mukangolowa muakasitomala a Zimbra koyamba. Komabe, chifukwa cha zokambirana zomwe zidachitika mu ndemanga, zidawonekeratu kuti si olamulira onse omwe ali oyenerera njira iyi yosinthira ogwiritsa ntchito a Zimbra kuchokera ku AD. Chifukwa chake, tsopano tikambirana za njira ina yosinthira ma akaunti ogwiritsira ntchito potengera deta ya AD yotchedwa EAGER Mode.

LAZY and EAGER Mode amasiyana m'njira zawo zopangira maakaunti atsopano. Ngati pa nkhani ya LAZY dongosolo likudikirira kuti wogwiritsa ntchito alowe mu kasitomala wa intaneti wa Zimbra kuti apange wogwiritsa ntchito watsopano, ndiye pankhani ya EAGER dongosolo nthawi ndi nthawi limasankha seva ndi AD kuti awonekere kwa ogwiritsa ntchito atsopano, ndipo, ngati yankho liri lovomerezeka, limapanga akaunti yatsopano paokha kutengera zomwe zaperekedwa ndi Active Directory. Kusiyana kowoneka ngati kocheperako kungapangitse kugwiritsa ntchito LAZY Mode kukhala kosavomerezeka kwathunthu kwa angapo oyang'anira IT.

Mlandu umodzi wotere ukhoza kukhala kuletsa mwachindunji kugwiritsa ntchito kasitomala wa tsamba la Zimbra. Chifukwa cha izi chikhoza kukhala kupulumutsa mphamvu ya makompyuta a seva (pogwiritsa ntchito kasitomala wa intaneti, seva yokhala ndi Zimbra ikhoza kupereka chithandizo chapamwamba kwambiri kwa ogwiritsa ntchito 2500, komanso pogwiritsira ntchito makompyuta ndi makasitomala apakompyuta mpaka 5-6 zikwi), kapena bizinesi. ndondomeko yachitetezo yomwe imaletsa mwachindunji kugwiritsa ntchito intaneti - kasitomala wogwira ntchito ndi makalata. Kusowa kwa kasitomala wapaintaneti kumapangitsa kukhala kosatheka kugwiritsa ntchito LAZY Mode, yomwe imangogwira ntchito momwemo, zomwe zikutanthauza kuti oyang'anira IT amakampani otere alibe chochita koma kugwiritsa ntchito EAGER Mode.

Choyamba, tidzafunika kulumikiza AD ngati LDAP yakunja ku Zimbra. Kuti muchite izi, pitani ku console console, yomwe ili pa mail.company.ru:7071/zimbraAdmin/, kenako sankhani chinthucho m'mbali yakumanzere sintha, ndiyeno ndime yaing’ono madambwe. Zolembedwa madera Tsopano tifunika kusankha yomwe tidzagwiritsa ntchito limodzi ndi AD, ndipo podina kumanja pa domain yosankhidwa, sankhani chinthucho "Konzani Kutsimikizika". Pambuyo pake, kukambirana kwakunja kwa LDAP kudzawonekera pazenera, momwe tidzalowetsamo zonse zofunika kuti tiphatikize Zimbra ndi AD.

Mukalowetsa zonse zofunika, muyenera kupanga fayilo yosinthira, mwachitsanzo touch ~/Documents/autorov.cfg, momwe tidzalowetsamo mndandanda wa malamulo omwe akuyenera kulowetsedwa kuti ayambitse makonzedwe a akaunti kuchokera ku AD mu EAGER Mode. Mosiyana ndi LAZY Mode, pomwe njira yokhazikitsira ndiyosavuta kwambiri ndipo zosintha zonse zitha kulowetsedwa ngati malamulo mu CLI, pankhani ya EAGER Mode ndikwabwino kuyisewera bwino ndikusunga zoikamo zonse mufayilo yosiyana. Izi zipangitsa kukhala kosavuta kusintha kwa iwo ngati chinachake chalakwika mwadzidzidzi.

Chifukwa chake mutatha kupanga fayilo ~/Documents/autorov.cfg, muyenera kulowamo mizere yotsatirayi, mutayisintha kale kuti ikhale yokhazikika:

md company.ru zimbraAutoProvAccountNameMap "samAccountName"
md company.ru +zimbraAutoProvAttrMap description=description
md company.ru +zimbraAutoProvAttrMap displayName=displayName
md company.ru +zimbraAutoProvAttrMap givenName=givenName
md company.ru +zimbraAutoProvAttrMap cn=cn
md company.ru +zimbraAutoProvAttrMap sn=sn
md company.ru zimbraAutoProvAuthMech LDAP
md company.ru zimbraAutoProvBatchSize 40
md company.ru zimbraAutoProvLdapAdminBindDn "CN=Administrator,CN=Users,DC=company,DC=ru"
md company.ru zimbraAutoProvLdapAdminBindPassword *********
md company.ru zimbraAutoProvLdapBindDn "Administrator@company.ru"
md company.ru zimbraAutoProvLdapSearchBase "CN=Users,dc=company,dc=ru"
md company.ru zimbraAutoProvLdapSearchFilter "(cn=%u)"
md company.ru zimbraAutoProvLdapURL "ldap://192.168.0.1:389"
md company.ru zimbraAutoProvMode EAGER
md company.ru zimbraAutoProvNotificationBody "Ваша учетная запись была создана автоматически. Адрес вашей электронной почты ${ACCOUNT_ADDRESS}."
md company.ru zimbraAutoProvNotificationFromAddress Administrator@company.ru
md company.ru zimbraAutoProvNotificationSubject "Новая учетная запись была создана автоматически"
ms mail.company.ru zimbraAutoProvPollingInterval "1m"
ms mail.company.ru +zimbraAutoProvScheduledDomains "company.ru"

Chifukwa cha zosinthazi, timakakamiza seva ya Zimbra kuti ilumikizane ndi AD mphindi iliyonse ndikulandila zambiri zokhudzana ndi mawonekedwe a ogwiritsa ntchito atsopano mu database, ndipo ngati apezeka, pangani akaunti ndikutumiza uthenga wolandila.

Zosintha zonse mu fayilo zitasungidwa, muyenera kugwiritsa ntchito zosintha zomwe zafotokozedwamo pogwiritsa ntchito lamulo zmprov <~/Documents/autorov.cfg. Zosintha zonse zidzagwira ntchito nthawi yomweyo; sipayenera kukhala chifukwa choyambitsanso seva.

Ngati kasinthidwe kaakaunti kuchokera ku AD mu EAGER Mode ikugwira ntchito, mufayilo /opt/zimbra/log/mailbox.log Kupita patsogolo kwa kasinthidwe kaakaunti kawonekedwe motsatira:

[AutoProvision] [] autoprov - Auto provisioning accounts on domain company.ru
[AutoProvision] [] autoprov - 1 external LDAP entries returned as search result
[AutoProvision] [] autoprov - auto creating account in EAGER mode: example@company.ru, dn="CN=example,OU=zimbrausers,DC=company,DC=ru"

Ngati kasinthidwe kaakaunti sikamagwira ntchito, ndiye kuti vuto limakhala lodziwika bwino pa seva ya AD. Pankhaniyi, muyenera kuyang'ana zolakwika zomwe zimachitika. Tikuwonetsa zodziwika kwambiri mwa iwo:

525 - Wogwiritsa sanapezeke
52e - Zidziwitso zosavomerezeka
530 - Palibe chilolezo cholowa panthawiyi
531 - Mulibe chilolezo cholowera pakompyutayi
532 - Mawu achinsinsi atha
533 - Akaunti yayimitsidwa
534 - Wogwiritsa ntchito alibe ufulu wokwanira kuti alowe pakompyuta iyi
701 - Akaunti yatha
773 - Wogwiritsa ayenera kukonzanso mawu achinsinsi
775 - Kutsimikizika kwa akaunti ndikochepa kwakanthawi
8350 - mtundu wa dzina losavomerezeka

Source: www.habr.com