I se tasi oa tatou tala muamua e uiga i le auala e mafai ai ona e "faauo" Zimbra ma MS Active Directory, lea e faʻaaogaina i le tele o pisinisi a Rusia e pulea ai faʻamatalaga tagata faʻaoga. I totonu, matou te fautua atu e faʻaoga e tagata faʻaoga Zimbra le auala sili ona faigofie ma sili ona saogalemu e fai ai pusameli i Zimbra e faʻavae i luga o faʻamaumauga mai le AD e taʻua o LAZY Mode. O lenei faiga fa'agaioiga e mafai ai e oe ona otometi le fatuina o se tagata fa'aoga Zimbra fou ma se igoa fa'aoga ma se fa'aupuga mai le AD i le taimi tonu o lana saini muamua i le Zimbra Web Client. Ae ui i lea, faʻafetai i le talanoaga na faʻaalia i faʻamatalaga, na manino ai e le o pule uma e talafeagai mo lenei metotia o le autoconfiguring Zimbra tagata faʻaoga mai AD. O lea la, o lenei o le a tatou talanoa e uiga i se isi auala e otometi ai le fatuina o tala faʻaoga e faʻavae i luga o faʻamaumauga mai le AD e taʻua o le EAGER Mode.
Lazy ma le EAGER Mode e eseese i latou auala e fai ai tala fou. Afai i le tulaga o LAZY o loʻo faʻatali le faiga mo le tagata faʻaoga e ulufale i le Zimbra web client e fatu ai se tagata fou, ona i ai lea i le tulaga o le EAGER o le faiga e palota i lea taimi ma lea taimi le server ma AD mo tagata fou, ma, afai o le tali ioe, na te fatuina se mea fou i luga o lana lava tala faʻavae i luga o faʻamaumauga na tuʻuina mai e Active Directory. O se eseesega e foliga mai e le taua e mafai ona faʻaaogaina le LAZY Mode e matua le taliaina mo le tele o pule IT.
O se tasi o nei mataupu atonu o se faʻasa saʻo i le faʻaogaina o le Zimbra web client. O le mafuaʻaga o lenei mea e mafai ona faʻapolopoloina le eletise (pe a faʻaaogaina se tagata faʻatau i luga ole laiga, e mafai e le server ma Zimbra ona tuʻuina atu se auaunaga lelei mo le 2500 tagata faʻaoga, ma pe a faʻaogaina le komepiuta ma le telefoni feaveaʻi e oʻo atu i le 5-6 afe tagata faʻaoga), poʻo se puipuiga tau pisinisi. faiga fa'avae e fa'asa sa'o ai le fa'aogaina o le upegatafa'ilagi -client mo le galue i meli. O le leai o se 'upega tafaʻilagi e mafua ai le le mafai ona faʻaogaina le LAZY Mode, lea e galue ai naʻo totonu, o lona uiga e leai se filifiliga a le IT pule o ia atinaʻe ae faʻaaoga le EAGER Mode.
Muamua lava, e tatau ona tatou faʻafesoʻotaʻi le AD o se LDAP fafo i Zimbra. Ina ia faia lenei mea, alu i le pulega faʻamafanafanaga, lea e tu i mail.company.ru:7071/zimbraAdmin/, ona filifili lea o le mea i le itu tauagavale Configure, ona sosoo ai lea ma le parakalafa Domains. Lisi доменов O lea la e tatau ona tatou filifilia le mea o le a tatou faʻaaogaina faʻatasi ma le AD ma, e ala i le kiliki-taumatau i luga o le vaega ua filifilia, filifili le aitema "Fa'atonu le fa'amaoni". A maeʻa lena, o le a faʻaalia le faʻasalalauga faʻasalalauga LDAP fafo i luga o le lau, lea o le a matou faʻaogaina uma ai faʻamatalaga talafeagai mo le tuʻufaʻatasia o Zimbra ma AD.
A maeʻa ona tuʻuina uma faʻamatalaga talafeagai, e tatau ona e fatuina se faila faila, mo se faʻataʻitaʻiga pa'i ~/Documents/autoprover.cfg, lea o le a tatou ulufale ai i se faasologa o poloaiga e tatau ona tuʻuina atu e faʻagaoioia ai le auto-configuration o tala mai AD i le EAGER Mode. E le pei o le LAZY Mode, lea e matua faigofie lava le faʻatulagaina o faʻatulagaga ma e mafai ona tuʻuina atu faʻatonuga uma i le CLI, i le tulaga o le EAGER Mode e sili atu le taʻalo saogalemu ma teu uma tulaga i se faila ese. O le a fa'afaigofie ai ona fai suiga ia i latou ina ne'i fa'afuase'i ona fa'aletonu.
O lea ina ua uma ona faia le faila ~/Documents/autoprover.cfg, e tatau ona e ulufale i laina nei i totonu, ina ua uma ona fetuunai i latou i au atinaʻe:
md company.ru zimbraAutoProvAccountNameMap "samAccountName"
md company.ru +zimbraAutoProvAttrMap description=description
md company.ru +zimbraAutoProvAttrMap displayName=displayName
md company.ru +zimbraAutoProvAttrMap givenName=givenName
md company.ru +zimbraAutoProvAttrMap cn=cn
md company.ru +zimbraAutoProvAttrMap sn=sn
md company.ru zimbraAutoProvAuthMech LDAP
md company.ru zimbraAutoProvBatchSize 40
md company.ru zimbraAutoProvLdapAdminBindDn "CN=Administrator,CN=Users,DC=company,DC=ru"
md company.ru zimbraAutoProvLdapAdminBindPassword *********
md company.ru zimbraAutoProvLdapBindDn "Administrator@company.ru"
md company.ru zimbraAutoProvLdapSearchBase "CN=Users,dc=company,dc=ru"
md company.ru zimbraAutoProvLdapSearchFilter "(cn=%u)"
md company.ru zimbraAutoProvLdapURL "ldap://192.168.0.1:389"
md company.ru zimbraAutoProvMode EAGER
md company.ru zimbraAutoProvNotificationBody "Ваша учетная запись была создана автоматически. Адрес вашей электронной почты ${ACCOUNT_ADDRESS}."
md company.ru zimbraAutoProvNotificationFromAddress Administrator@company.ru
md company.ru zimbraAutoProvNotificationSubject "Новая учетная запись была создана автоматически"
ms mail.company.ru zimbraAutoProvPollingInterval "1m"
ms mail.company.ru +zimbraAutoProvScheduledDomains "company.ru"Faʻafetai i nei faʻatulagaga, matou te faʻamalosia le Zimbra server e faʻafesoʻotaʻi le AD i minute uma ma maua faʻamatalaga e uiga i foliga o tagata fou i totonu o le database, ma afai e maua, fai se tala mo i latou ma auina atu se feʻau faʻafeiloaʻi.
A maeʻa ona faʻasaoina suiga uma i le faila, e manaʻomia le faʻaogaina o tulaga faʻamaonia i totonu e faʻaaoga ai le poloaiga zmprov < ~/Documents/autoprov.cfg. O suiga uma e faia o le a galue vave, e le tatau ona toe faʻafouina le server.
A fa'apea e fa'aoga le fa'atulagaina o fa'amatalaga mai le AD i le EAGER Mode, i le faila /opt/zimbra/log/mailbox.log o le a faʻaalia le alualu i luma o le faʻapipiʻiina o faʻamatalaga i le fomu nei:
[AutoProvision] [] autoprov - Auto provisioning accounts on domain company.ru
[AutoProvision] [] autoprov - 1 external LDAP entries returned as search result
[AutoProvision] [] autoprov - auto creating account in EAGER mode: example@company.ru, dn="CN=example,OU=zimbrausers,DC=company,DC=ru"Afai e le aoga le auto-configuration o faʻamatalaga, o le faʻafitauli e foliga mai i le itu o le AD server. I lenei tulaga, e tatau ona e vaʻai i le faʻailoga sese e tupu. Matou te tuʻuina atu le sili ona taatele o latou:
525 - Le fa'aoga le maua
52e - Fa'ailoga le aoga
530 - Leai se faatagaga e ulufale ai i le taimi nei
531 - Leai se fa'atagaga e saini i totonu mai lenei komepiuta
532 - Ua mae'a le fa'amatalaga
533 - Ua taofia le tala
534 - E le lava aia tatau a le tagata fa'aoga e saini ai mai lenei komepiuta
701 - Ua mae'a le aoga
773 - E tatau i le tagata fa'aoga ona toe setiina le uputatala
775 - Fa'atapula'aina mo se taimi le tumau
8350 - fa'aleaga Igoa Fa'ailoga
puna: www.habr.com
