{"id":42097,"date":"2019-03-17T00:00:00","date_gmt":"2019-03-16T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/kak-integrirovat-zimbra-collaboration-suite-c-active-directory"},"modified":"2020-02-18T13:44:53","modified_gmt":"2020-02-18T10:44:53","slug":"kak-integrirovat-zimbra-collaboration-suite-c-active-directory","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/kak-integrirovat-zimbra-collaboration-suite-c-active-directory","title":{"rendered":"Kako integrirati Zimbra Collaboration Suite z Active Directory","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Mnoge tvrtke, osobito na podru\u010dju biv\u0161eg Sovjetskog Saveza, ve\u0107 imaju uspostavljenu IT infrastrukturu u kojoj se za upravljanje i autentifikaciju korisnika \u010desto koristi alat poput Active Directory od Microsofta. \u010cesto se postavlja pitanje ho\u0107e li se Zimbra Collaboration Suite mo\u0107i integrirati u njihovu infrastrukturu i iskoristiti Microsoft AD za autentifikaciju korisnika. Dakle, Zimbra mo\u017ee raditi u suradnji s Active Directory, a sada \u0107emo objasniti kako to posti\u0107i.<\/p>\n

\"Kako<\/a><\/noindex><\/p>\n

Pretpostavimo da se Active Directory u infrastrukturi va\u0161e tvrtke nalazi na domeni domain.local<\/b>, a Zimbra se planira instalirati na domenu mail.domain.com<\/b>. Tijekom integracije Zimbre i Active Directory, povezat \u0107emo AD kao vanjski LDAP za ZCS, pa preporu\u010dujemo da odmah zabranite korisnicima samostalnu promjenu lozinke. Tako\u0111er, napominjemo da za provjeru uspje\u0161nosti integracije Zimbre i Active Directory, na stre\u017enikom<\/a> AD bi trebao imati barem jedan ra\u010dun s poznatom kombinacijom korisni\u010dkog imena i lozinke radi provjere uspje\u0161ne veze dviju informacijskih sustava.<\/p>\n

Povezivanje AD s ZCS obavlja se u administratorskoj konzoli Zimbre na adresi mail.domain.com<\/b>. Ovdje trebate u lijevom bo\u010dnom izborniku odabrati opciju Configure, a zatim i podopciju Domains. U popisu domena sada odaberite onu koju \u0107emo koristiti u suradnji s AD i desnim klikom na odabranu domenu odaberite opciju \u201eConfigure Authentication\u201c. Nakon toga na ekranu \u0107e se pojaviti dijalog za postavljanje vanjskog LDAP-a, u kojem \u0107emo \u201epovezati\u201c Zimbu s AD.<\/p>\n

Na stranici Authentification Mode odaberite opciju \u201eExternal Active Directory\u201c, a zatim na stranici Authentification Settings unesite podatke o stre\u017enikom<\/a> AD. Od vas \u0107e se zatra\u017eiti da unesete naziv domene, IP adresu poslu\u017eitelja i port preko kojeg se vr\u0161i pristup AD-u, a sljede\u0107u stranicu pod nazivom LDAP Bind preporu\u010dujemo da ostavite praznom.<\/p>\n

\"Kako
\n
\nV oknu Povzetek konfiguracije za overjanje lahko preverite uspe\u0161nost povezave Zimbra z AD tako, da vnesete pravilno kombinacijo uporabni\u0161kega imena\/gesla katerega koli uporabnika. \u010ce bo povezava uspe\u0161na, bo Zimbra samodejno izra\u010dunala Bind DN za tega uporabnika. Po tem lahko strani Nastavitve zunanje skupine in Dokon\u010daj konfiguracijo domene pustite brez sprememb. Na tem mestu se integracija Zimbre z AD zaklju\u010duje in ostane nam le \u0161e, da v Zimbri ustvarimo obstoje\u010de uporabnike iz AD za uspe\u0161no izvedbo sinhronizacije med informacijskimi sistemi.<\/p>\n

Pri manj\u0161em \u0161tevilu ra\u010dunov lahko to storite ro\u010dno, vendar v primeru, da je ra\u010dunov res veliko, je najbolje, da ta postopek avtomatizirate z uporabo funkcije Samodejno dodeljevanje. Za to se moramo prijaviti na stre\u017enik Zimbra in tam izvesti vrsto manipulacij v ukazni vrstici:<\/p>\n

su zimbra\nzmprov md domain.com zimbraAutoProvMode LAZY\nzmprov md domain.com zimbraAutoProvLdapURL \"ldap:\/\/domain.local:389\"\nzmprov md domain.com zimbraAutoProvLdapStartTlsEnabled FALSE\nzmprov md domain.com zimbraAutoProvLdapAdminBindDn \"zimbra@domain.local\"\nzmprov md domain.com zimbraAutoProvLdapAdminBindPassword PassworD\nzmprov md domain.com zimbraAutoProvLdapSearchBase \"ou=User,dc=domain,dc=local)\"\nzmprov md domain.com zimbraAutoProvLdapSearchFilter \"(samAccountName=%u)\"\nzmprov md domain.com zimbraAutoProvLdapBindDn \"%u@%d\"\nzmprov md domain.com zimbraAutoProvAccountNameMap sAMAccountName\nzmprov md domain.com +zimbraAutoProvAttrMap \"sn=sn\" +zimbraAutoProvAttrMap \"description=description\" +zimbraAutoProvAttrMap \"cn=displayName\" +zimbraAutoProvAttrMap \"givenName=givenName\" +zimbraAutoProvAttrMap \"zimbraMailAlias=mail\"\nzmprov md domain.com zimbraAutoProvNotificationFromAddress admin@domain.com\nzmprov md domain.com zimbraAutoProvNotificationSubject \"Veseli smo, da vas lahko pozdravimo na na\u0161em po\u0161tnem stre\u017eniku\"\nzmprov md domain.com zimbraAutoProvNotificationBody \"Va\u0161 ra\u010dun je bil ustvarjen samodejno. Seznanite se z navodili za uporabo elektronske po\u0161te tako, da kliknete na to povezavo\"\nzmprov md domain.com zimbraAutoProvBatchSize 20\nzmprov md domain.com zimbraAutoProvAuthMech LDAP\nzmcontrol restart<\/code><\/pre>\n
\nPri tej konfiguraciji se bo ra\u010dun uporabnika samodejno ustvaril na stre\u017eniku Zimbra ob prvi poskusni prijavi v spletnega odjemalca z obstoje\u010do kombinacijo uporabni\u0161kega imena\/gesla. Opozarjamo, da lahko v nekaterih primerih za pravilno delovanje samodejne nastavitve potrebujete spremeniti \u0161tevilko porta z 389 na 3268.<\/p>\n
Po izvedbi vseh teh dejanj bodo va\u0161i uporabniki lahko dostopali do svoje po\u0161te na stre\u017eniku Zimbra z uporabo kombinacije uporabni\u0161kega imena\/gesla iz AD, kar mo\u010dno poenostavi upravljanje IT infrastrukture podjetja.<\/p>\n
Izvor: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u041c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0421\u041d\u0413, \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0442 \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0442\u0430\u043a\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0430\u043a Active Directory \u043e\u0442 Microsoft. \u0418 \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0443 \u0442\u0430\u043a\u0438\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439, \u043a\u043e\u0433\u0434\u0430 \u043e\u043d\u0438 \u043d\u0430\u0447\u0438\u043d\u0430\u044e\u0442 \u043f\u043b\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 Zimbra Collaboration Suite, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0432\u043e\u043f\u0440\u043e\u0441 \u043e \u0442\u043e\u043c, \u0441\u043c\u043e\u0436\u0435\u0442 \u043b\u0438 ZCS \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e \u0432\u043f\u0438\u0441\u0430\u0442\u044c\u0441\u044f \u0432 \u0438\u0445 \u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443 \u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c Microsoft AD […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-42097","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kako integrirati Zimbra Collaboration Suite z Active Directory | ProHoster","description":"Mnoge podjetja, zlasti na obmo\u010dju CIS, \u017ee imajo vzpostavljeno IT-infrastrukturo, kjer se za upravljanje in avtentifikacijo uporabnikov pogosto uporablja orodje, kot je Active Directory od Microsofta.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/kak-integrirovat-zimbra-collaboration-suite-c-active-directory","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u0438\u043d\u0442\u0435\u0433\u0440\u0438\u0440\u043e\u0432\u0430\u0442\u044c Zimbra Collaboration Suite c Active Directory | ProHoster","og:description":"\u041c\u043d\u043e\u0433\u0438\u0435 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u044f, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e \u043d\u0430 \u0442\u0435\u0440\u0440\u0438\u0442\u043e\u0440\u0438\u0438 \u0421\u041d\u0413, \u0443\u0436\u0435 \u0438\u043c\u0435\u044e\u0442 \u0441\u043b\u043e\u0436\u0438\u0432\u0448\u0443\u044e\u0441\u044f \u0418\u0422-\u0438\u043d\u0444\u0440\u0430\u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0443, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u043b\u044f \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0435\u0439 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 \u0437\u0430\u0447\u0430\u0441\u0442\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0442\u0430\u043a\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u0430\u043a Active Directory \u043e\u0442 Microsoft.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/kak-integrirovat-zimbra-collaboration-suite-c-active-directory","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-03-16T21:00:00+00:00","article:modified_time":"2020-02-18T10:44:53+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"42097","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:54:08","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 00:06:38","updated":"2026-02-09 21:54:08","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/42097","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=42097"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/42097\/revisions"}],"predecessor-version":[{"id":159931,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/42097\/revisions\/159931"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=42097"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=42097"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=42097"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}