Ho e 'ngoe ea lihlooho tsa rona tse fetileng mabapi le hore na u ka "etsa metsoalle" joang Zimbra le MS Active Directory, e sebelisoang likhoebong tse ngata tsa Russia ho laola li-account tsa basebelisi. Ho eona, re khothalelitse basebelisi ba Zimbra ho nka monyetla ka mokhoa o bonolo le o sireletsehileng oa ho etsa mabokose a poso ho Zimbra ho latela data e tsoang ho AD e bitsoang LAZY Mode. Mokhoa ona oa ts'ebetso o u lumella hore u iketsetse mosebelisi e mocha oa Zimbra ka lebitso la mosebelisi le password ho tsoa ho AD hantle ka nako ea ha a qala ho kena ho Zimbra Web Client. Leha ho le joalo, ka lebaka la puisano e ileng ea hlaha litlhalosong, ho ile ha hlaka hore hase batsamaisi bohle ba loketseng mokhoa ona oa ho iketsetsa basebelisi ba Zimbra ho tloha AD. Ka hona, joale re tla bua ka mokhoa o mong oa ho iketsetsa li-account tsa basebelisi ho latela data e tsoang ho AD e bitsoang EAGER Mode.
Mokhoa oa LAZY le EAGER o fapana ka mekhoa ea bona ea ho theha li-account tse ncha. Haeba tabeng ea LAZY tsamaiso e emetse hore mosebedisi a kene ho mofani oa websaete oa Zimbra ho theha mosebedisi e mocha, joale tabeng ea EAGER tsamaiso nako le nako e khetha seva ka AD bakeng sa basebelisi ba bacha, 'me, haeba karabo ke e, e theha e ncha akhaonteng ea eona e thehiloeng ho data e fanoeng ke Active Directory. Phapang e bonahalang eka ha e na thuso e ka etsa hore tšebeliso ea LAZY Mode e se ke ea amoheloa ka ho feletseng bakeng sa batsamaisi ba bangata ba IT.
E 'ngoe ea linyeoe tsena e ka ba thibelo e tobileng ea tšebeliso ea moreki oa marang-rang oa Zimbra. Lebaka la sena e ka 'na ea e-ba ho boloka matla a komporo ea seva (ha o sebelisa moreki oa marang-rang, seva e nang le Zimbra e ka fana ka ts'ebeletso ea boleng bakeng sa basebelisi ba 2500, mme ha e sebelisa bareki ba desktop le ba mehala ho fihlela ho basebelisi ba likete tse 5-6), kapa ts'ireletso ea khoebo. leano le thibelang ka kotloloho tšebeliso ea moreki oa marang-rang bakeng sa ho sebetsa ka mangolo. Ho haella ha mofani oa marang-rang ho fella ka ho se khone ho sebelisa LAZY Mode, e sebetsang ho eona feela, e bolelang hore batsamaisi ba IT ba likhoebo tse joalo ha ba na boikhethelo haese ho sebelisa Mokhoa oa EAGER.
Pele ho tsohle, re hloka ho hokela AD joalo ka LDAP ea kantle ho Zimbra. Ho etsa sena, e ea ho tsamaiso ea tsamaiso, e leng teng mail.company.ru:7071/zimbraAdmin/, ebe u khetha ntho e ka lehlakoreng le letšehali configure, ebe ho latela serapana domains. E thathamisitsoe доменов Jwale re hloka ho kgetha eo re tla e sebedisa mmoho le AD mme, ka ho tobetsa ka ho le letona ho domain e kgethilweng, re kgethe ntho eo. "Lokisa netefatso". Ka mor'a moo, lebokose le ka ntle la LDAP le tla hlaha skrineng, moo re tla kenya lintlha tsohle tse hlokahalang bakeng sa ho kopanya Zimbra le AD.
Ka mor'a ho kenya lintlha tsohle tse hlokahalang, u lokela ho etsa faele ea tlhophiso, mohlala touch ~/Documents/autoprover.cfg, moo re tla kenya letoto la litaelo tse tlamehang ho kenngoa ho kenya ts'ebetso ea auto-configuration ea li-account ho tloha AD ho EAGER Mode. Ho fapana le Mokhoa oa LAZY, moo ts'ebetso ea ho seta e leng bonolo haholo 'me litlhophiso tsohle li ka kenngoa joalo ka litaelo ho CLI, molemong oa EAGER Mode ho molemo ho e bapala e bolokehile le ho boloka litlhophiso tsohle faeleng e fapaneng. Sena se tla etsa hore ho be bonolo ho etsa liphetoho ho bona haeba ho ka etsahala ntho e sa tsamaeeng hantle ka tšohanyetso.
Kahoo ka mor'a ho theha faele ~/Documents/autoprover.cfg, o lokela ho kenya mela e latelang ho eona, ha o se o e fetiselitse ho mekhoa ea hau ea motheo:
md company.ru zimbraAutoProvAccountNameMap "samAccountName"
md company.ru +zimbraAutoProvAttrMap description=description
md company.ru +zimbraAutoProvAttrMap displayName=displayName
md company.ru +zimbraAutoProvAttrMap givenName=givenName
md company.ru +zimbraAutoProvAttrMap cn=cn
md company.ru +zimbraAutoProvAttrMap sn=sn
md company.ru zimbraAutoProvAuthMech LDAP
md company.ru zimbraAutoProvBatchSize 40
md company.ru zimbraAutoProvLdapAdminBindDn "CN=Administrator,CN=Users,DC=company,DC=ru"
md company.ru zimbraAutoProvLdapAdminBindPassword *********
md company.ru zimbraAutoProvLdapBindDn "Administrator@company.ru"
md company.ru zimbraAutoProvLdapSearchBase "CN=Users,dc=company,dc=ru"
md company.ru zimbraAutoProvLdapSearchFilter "(cn=%u)"
md company.ru zimbraAutoProvLdapURL "ldap://192.168.0.1:389"
md company.ru zimbraAutoProvMode EAGER
md company.ru zimbraAutoProvNotificationBody "Ваша учетная запись была создана автоматически. Адрес вашей электронной почты ${ACCOUNT_ADDRESS}."
md company.ru zimbraAutoProvNotificationFromAddress Administrator@company.ru
md company.ru zimbraAutoProvNotificationSubject "Новая учетная запись была создана автоматически"
ms mail.company.ru zimbraAutoProvPollingInterval "1m"
ms mail.company.ru +zimbraAutoProvScheduledDomains "company.ru"Ka lebaka la litlhophiso tsena, re qobella seva sa Zimbra ho ikopanya le AD motsotso o mong le o mong le ho fumana tlhahisoleseding mabapi le ponahalo ea basebelisi ba bacha ka har'a database, 'me haeba ba fumanoa, ba bōpe akhaonto mme u romelle molaetsa o amohelehang.
Kamora hore liphetoho tsohle faeleng li bolokiloe, ho tla hlokahala ho sebelisa litlhophiso tse boletsoeng ho eona u sebelisa taelo zmprov < ~/Documents/autorov.cfg. Liphetoho tsohle tse entsoeng li tla sebetsa hang-hang, ha hoa lokela ho ba le tlhokahalo ea ho qala seva hape.
Haeba ho ka etsahala hore ho iketsetsa li-account ho tloha ho AD ho ea ho EAGER Mode ho sebetsa, faeleng /opt/zimbra/log/mailbox.log tsoelo-pele ea akhaonto ea autoconfiguration e tla hlahisoa ka mokhoa o latelang:
[AutoProvision] [] autoprov - Auto provisioning accounts on domain company.ru
[AutoProvision] [] autoprov - 1 external LDAP entries returned as search result
[AutoProvision] [] autoprov - auto creating account in EAGER mode: example@company.ru, dn="CN=example,OU=zimbrausers,DC=company,DC=ru"Haeba auto-configuration ea li-account e sa sebetse, joale bothata bo ka etsahala ka lehlakoreng la seva sa AD. Tabeng ena, o hloka ho sheba khoutu ea phoso e hlahang. Re hlahisa tse atileng haholo ho tsona:
525 - Mosebelisi ha a fumanehe
52e - Lintlha tse fosahetseng
530 - Ha ho tumello ea ho kena ka nako ena
531 - Ha ho tumello ea ho kena ho tsoa komporong ena
532 - Lekunutu le feletsoe ke nako
533 - Akhaonto e emisitsoe
534 - Mosebelisi ha a na litokelo tse lekaneng tsa ho kena ho tsoa komporong ena
701 - Akhaonto e felile
773 - Mosebelisi o tlameha ho seta password bocha
775 - Akhaonto e thibetsoe ka nakoana
8350 - sebopeho se sa sebetseng sa Lebitso le Khethehileng
Source: www.habr.com
