Mokhoa oa ho kopanya Zimbra Collaboration Suite le Active Directory

Likhoebo tse ngata, haholo-holo ho CIS, li se li ntse li e-na le lisebelisoa tsa IT tse thehiloeng, tse atisang ho sebelisa sesebelisoa se kang Active Directory ho tsoa ho Microsoft ho laola le ho netefatsa basebelisi. 'Me hangata likhoebo tse joalo, ha li qala ho rala ts'ebetsong ea Zimbra Collaboration Suite, li na le potso mabapi le hore na ZCS e ka kena meahong ea bona ea motheo le ho sebelisa Microsoft AD bakeng sa netefatso ea basebelisi? Che, Zimbra e khona ho sebetsa mmoho le Active Directory mme joale re tla u joetsa hore na u ka fihlela sena joang.

Kahoo, ha re nke hore setsing sa hau sa marang-rang sa Active Directory se sebakeng sa marang-rang domain.sebakeng, 'me Zimbra e tlameha ho kenngoa sebakeng sa marang-rang mail.domain.comNakong ea ts'ebetso ea kopanyo ea Zimbra le Active Directory, re tla hokela AD joalo ka LDAP ea kantle bakeng sa ZCS, kahoo re khothaletsa ho tima basebelisi hang-hang ho fetola li-password tsa bona ka bobona. Hape hlokomela hore ho netefatsa kopanyo e atlehileng ea Zimbra le Active Directory, seva Ka AD, ho kgothaletswa ho ba le bonyane ak'haonte e le 'ngoe e nang le para e tsebahalang ea ho kena/phasewete ho hlahloba khokahano e atlehileng ea litsamaiso tse peli tsa tlhahisoleseling.

Ho hokela AD ho ZCS ho etsoa ka har'a tsamaiso ea tsamaiso ea Zimbra ho mail.domain.com. Mona re tlameha ho khetha Configure aetheme ka lehlakoreng le letšehali, ebe ntho e nyane ea Domains. Lethathamong la libaka, joale re hloka ho khetha eo re tla e sebelisa hammoho le AD mme, ka ho tobetsa ka ho le letona sebakeng se khethiloeng, khetha ntho ea "Configure Authentification". Ka mor'a sena, puisano ea ho theha LDAP ea kantle e tla hlaha skrineng, moo re tla "etsa metsoalle" ea Zimbra ka AD.

Leqepheng la Mokhoa oa Netefatso, khetha khetho ea "External Active Directory", ebe leqepheng la Litlhophiso tsa Netefatso, kenya data e mabapi le seva Ka AD. O tla kopuoa ho kenya lebitso la domain, aterese ea IP ea seva, le koung e sebelisoang ho fihlella AD. Re khothaletsa ho siea leqephe le latelang, le nang le sehlooho se reng LDAP Bind, le se na letho.

Fensetereng ea Authentification Config Summary, u ka hlahloba katleho ea khokahanyo ea Zimbra ho AD ka ho kenya phasewete e nepahetseng bakeng sa mosebelisi ofe kapa ofe. Haeba khokahano e atlehile, Zimbra e tla bala Bind DN e ikemetseng bakeng sa mosebelisi enoa. Ka mor'a sena, u ka siea Litlhophiso tsa Sehlopha sa Kantle le maqephe a Felletseng a Tlhophiso ea Domain a sa fetoha. Sena se phethela kopanyo ea Zimbra le AD mme sohle seo re tlamehang ho se etsa ke ho theha basebelisi ba seng ba ntse ba le teng ho tloha AD ho Zimbra ho amahanya ka katleho lipakeng tsa litsamaiso tsa tlhahisoleseling.

Haeba u na le palo e nyane ea li-account, u ka etsa sena ka letsoho, empa haeba ho na le liakhaonto tse ngata haholo, ho ka ba molemo ho iketsetsa ts'ebetso ena u sebelisa ts'ebetso ea Auto-provisioning. Ho etsa sena, re hloka ho ea ho seva sa Zimbra mme re etse mekhoa e mengata moo molaong oa taelo:

su zimbra
zmprov md domain.com zimbraAutoProvMode LAZY
zmprov md domain.com zimbraAutoProvLdapURL "ldap://domain.local:389"
zmprov md domain.com zimbraAutoProvLdapStartTlsEnabled FALSE
zmprov md domain.com zimbraAutoProvLdapAdminBindDn "zimbra@domain.local"
zmprov md domain.com zimbraAutoProvLdapAdminBindPassword PassworD
zmprov md domain.com zimbraAutoProvLdapSearchBase "ou=User,dc=domain,dc=local)"
zmprov md domain.com zimbraAutoProvLdapSearchFilter "(samAccountName=%u)"
zmprov md domain.com zimbraAutoProvLdapBindDn "%u@%d"
zmprov md domain.com zimbraAutoProvAccountNameMap sAMAccountName
zmprov md domain.com +zimbraAutoProvAttrMap "sn=sn" +zimbraAutoProvAttrMap "description=description" +zimbraAutoProvAttrMap "cn=displayName" +zimbraAutoProvAttrMap "givenName=givenName" +zimbraAutoProvAttrMap "zimbraMailAlias=mail"
zmprov md domain.com zimbraAutoProvNotificationFromAddress admin@domain.com
zmprov md domain.com zimbraAutoProvNotificationSubject "Мы рады приветствовать вас на борту нашего почтового сервера"
zmprov md domain.com zimbraAutoProvNotificationBody "Ваш аккаунт был создан автоматически. Ознакомьтесь с инструкцией по работе с электронной почтой, перейдя по данной ссылке"
zmprov md domain.com zimbraAutoProvBatchSize 20
zmprov md domain.com zimbraAutoProvAuthMech LDAP
zmcontrol restart

Ka tlhophiso ena, ak'haonte ea mosebelisi e tla iketsetsa ka har'a seva ea Zimbra lekhetlo la pele ha u leka ho kena ho sebatli sa marang-rang u sebelisa li-login/password tse teng. Hlokomela hore maemong a mang, hore tokiso ea othomathike e sebetse ka nepo, o kanna oa hloka ho fetola nomoro ea boema-kepe ho tloha ho 389 ho isa ho 3268.

Ka mor'a ho qeta mehato ena kaofela, basebelisi ba hau ba tla khona ho kena mangolong a bona ho seva ka Zimbra ba sebelisa marang-rang / password ho tloha AD, e leng se tla nolofatsa haholo tsamaiso ea mekhoa ea mekhoa ea khoebo ea IT.

Source: www.habr.com