{"id":42097,"date":"2019-03-17T00:00:00","date_gmt":"2019-03-16T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-integrirovat-zimbra-collaboration-suite-c-active-directory"},"modified":"2020-02-18T13:44:53","modified_gmt":"2020-02-18T10:44:53","slug":"kak-integrirovat-zimbra-collaboration-suite-c-active-directory","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-integrirovat-zimbra-collaboration-suite-c-active-directory","title":{"rendered":"Cum s\u0103 integrezi Zimbra Collaboration Suite cu Active Directory","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Multe companii, \u00een special \u00een spa\u021biul CSI, au deja o infrastructur\u0103 IT bine stabilit\u0103, \u00een care gestionarea \u0219i autentificarea utilizatorilor se realizeaz\u0103 adesea cu ajutorul unui instrument precum Active Directory de la Microsoft. De multe ori, aceste companii, atunci c\u00e2nd \u00eencep s\u0103 planifice implementarea Zimbra Collaboration Suite, se \u00eentreab\u0103 dac\u0103 ZCS se va integra bine \u00een infrastructura lor \u0219i dac\u0103 va putea utiliza Microsoft AD pentru autentificarea utilizatorilor. Ei bine, Zimbra poate func\u021biona \u00een tandem cu Active Directory \u0219i acum v\u0103 vom explica cum s\u0103 realiza\u021bi acest lucru.<\/p>\n

\"Cum<\/a><\/noindex><\/p>\n

A\u0219adar, s\u0103 presupunem c\u0103 \u00een infrastructura companiei dvs. Active Directory se afl\u0103 pe domeniul domain.local<\/b>, iar Zimbra se preconizeaz\u0103 a fi instalat\u0103 pe domeniul mail.domain.com<\/b>. \u00cen procesul de integrare a Zimbra \u0219i Active Directory, vom conecta AD ca LDAP extern pentru ZCS, a\u0219a c\u0103 v\u0103 recomand\u0103m s\u0103 interzice\u021bi utilizatorilor schimbarea parolei de unul singur. De asemenea, re\u021bine\u021bi c\u0103 pentru a verifica succesul integr\u0103rii Zimbra cu Active Directory, pe server<\/a> cu AD ar trebui s\u0103 ave\u021bi m\u0103car un cont cu un nume de utilizator\/parol\u0103 cunoscut pentru a verifica conectivitatea celor dou\u0103 sisteme informa\u021bionale.<\/p>\n

Conectarea AD la ZCS se face \u00een consola de administrare Zimbra la adresa mail.domain.com<\/b>. Aici va trebui s\u0103 selecta\u021bi elementul Configure din panoul lateral st\u00e2ng, iar apoi subelementul Domains. \u00cen lista de domenii, acum trebuie s\u0103 selecta\u021bi acel domeniu pe care \u00eel vom folosi \u00eempreun\u0103 cu AD \u0219i, f\u0103c\u00e2nd clic dreapta pe domeniul selectat, s\u0103 alege\u021bi op\u021biunea \u201eConfigure Authentication\u201d. Dup\u0103 aceasta, pe ecran va ap\u0103rea un dialog de configurare pentru LDAP extern, \u00een care vom \"completa\" Zimbra cu AD.<\/p>\n

Pe pagina Modului de Autentificare, trebuie s\u0103 selecta\u021bi op\u021biunea \u201eExternal Active Directory\u201d, dup\u0103 care pe pagina Set\u0103rilor de Autentificare s\u0103 introduce\u021bi datele despre server<\/a> cu AD. De la dvs. se va solicita s\u0103 introduce\u021bi numele domeniului, adresa IP a serverului \u0219i portul prin care se accede la AD, iar pagina urm\u0103toare numit\u0103 LDAP Bind v\u0103 suger\u0103m s\u0103 o l\u0103sa\u021bi necompletat\u0103.<\/p>\n

\"Cum
\n
\n\u00cen fereastra Rezumat Configurare Autentificare, pute\u021bi verifica succesul conexiunii Zimbra la AD introduc\u00e2nd un nume de utilizator\/parol\u0103 corect pentru orice utilizator. Dac\u0103 conexiunea este reu\u0219it\u0103, Zimbra va calcula automat Bind DN pentru acest utilizator. Dup\u0103 aceasta, pute\u021bi l\u0103sa paginile Set\u0103ri Grupuri Externe \u0219i Configurare Domeniu Final f\u0103r\u0103 modific\u0103ri. Aceasta finalizeaz\u0103 integrarea Zimbra cu AD \u0219i r\u0103m\u00e2ne doar s\u0103 crea\u021bi \u00een Zimbra utilizatorii existen\u021bi din AD pentru a realiza cu succes sincronizarea \u00eentre sistemele informa\u021bionale.<\/p>\n

Pentru un num\u0103r mic de conturi, acest lucru poate fi realizat manual, dar \u00een cazul \u00een care exist\u0103 cu adev\u0103rat multe conturi, cel mai bine ar fi s\u0103 automatiz\u0103m acest proces folosind func\u021bia Auto-provisioning. Pentru aceasta, va trebui s\u0103 ne conect\u0103m la serverul Zimbra \u0219i s\u0103 efectu\u0103m o serie de manipul\u0103ri \u00een linia de comand\u0103:<\/p>\n

su zimbra\nzmprov md domain.com zimbraAutoProvMode LAZY\nzmprov md domain.com zimbraAutoProvLdapURL \"ldap:\/\/domain.local:389\"\nzmprov md domain.com zimbraAutoProvLdapStartTlsEnabled FALSE\nzmprov md domain.com zimbraAutoProvLdapAdminBindDn \"zimbra@domain.local\"\nzmprov md domain.com zimbraAutoProvLdapAdminBindPassword PassworD\nzmprov md domain.com zimbraAutoProvLdapSearchBase \"ou=User,dc=domain,dc=local)\"\nzmprov md domain.com zimbraAutoProvLdapSearchFilter \"(samAccountName=%u)\"\nzmprov md domain.com zimbraAutoProvLdapBindDn \"%u@%d\"\nzmprov md domain.com zimbraAutoProvAccountNameMap sAMAccountName\nzmprov md domain.com +zimbraAutoProvAttrMap \"sn=sn\" +zimbraAutoProvAttrMap \"description=description\" +zimbraAutoProvAttrMap \"cn=displayName\" +zimbraAutoProvAttrMap \"givenName=givenName\" +zimbraAutoProvAttrMap \"zimbraMailAlias=mail\"\nzmprov md domain.com zimbraAutoProvNotificationFromAddress admin@domain.com\nzmprov md domain.com zimbraAutoProvNotificationSubject \"Suntem bucuro\u0219i s\u0103 v\u0103 avem la bordul serverului nostru de email\"\nzmprov md domain.com zimbraAutoProvNotificationBody \"Contul dumneavoastr\u0103 a fost creat automat. V\u0103 rug\u0103m s\u0103 consulta\u021bi instruc\u021biunile de utilizare a emailului acces\u00e2nd acest link\"\nzmprov md domain.com zimbraAutoProvBatchSize 20\nzmprov md domain.com zimbraAutoProvAuthMech LDAP\nzmcontrol restart<\/code><\/pre>\n
\nCu aceast\u0103 configura\u021bie, contul utilizatorului va fi creat automat pe serverul Zimbra la prima tentativ\u0103 de autentificare \u00een web-client folosind perechea de nume de utilizator\/parol\u0103 existent\u0103. Men\u021bion\u0103m c\u0103 \u00een unele cazuri, pentru func\u021bionarea corect\u0103 a auto-configur\u0103rii, este posibil s\u0103 fie necesar s\u0103 schimba\u021bi num\u0103rul portului de la 389 la 3268.<\/p>\n
Dup\u0103 finalizarea tuturor acestor ac\u021biuni, utilizatorii dumneavoastr\u0103 vor putea accesa emailul pe serverul cu Zimbra folosind perechea de nume de utilizator\/parol\u0103 din AD, ceea ce va simplifica semnificativ gestionarea infrastructurii IT a companiei.<\/p>\n
Sursa: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0421\u041d\u0413, \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0442 \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0442\u0430\u043a\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0430\u043a Active Directory \u043e\u0442 Microsoft. \u0418 \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0443 \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 Zimbra Collaboration Suite, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441 \u043e \u0442\u043e\u043c, \u0441\u043c\u043e\u0436\u0435\u0442 \u043b\u0438 ZCS \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u0432\u043f\u0438\u0441\u0430\u0442\u044c\u0441\u044f \u0432 \u0438\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Microsoft AD […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-42097","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Cum s\u0103 integra\u021bi Zimbra Collaboration Suite cu Active Directory | ProHoster","description":"Multe \u00eentreprinderi, \u00een special \u00een spa\u021biul CSI, au deja o infrastructur\u0103 IT bine stabilit\u0103, \u00een care pentru gestionarea \u0219i autentificarea utilizatorilor se folose\u0219te adesea un instrument precum Active Directory de la Microsoft.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-integrirovat-zimbra-collaboration-suite-c-active-directory","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c Zimbra Collaboration Suite c Active Directory | ProHoster","og:description":"\u041c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0421\u041d\u0413, \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0442 \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0442\u0430\u043a\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0430\u043a Active Directory \u043e\u0442 Microsoft.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/kak-integrirovat-zimbra-collaboration-suite-c-active-directory","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-03-16T21:00:00+00:00","article:modified_time":"2020-02-18T10:44:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42097","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:54:08","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:06:38","updated":"2026-02-09 21:54:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/42097","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=42097"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/42097\/revisions"}],"predecessor-version":[{"id":159931,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/42097\/revisions\/159931"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=42097"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=42097"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=42097"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}