ADPassword
A server extension to change Active Directory passwords from the Zimbra web client.
Requirements
- Zimbra Collaboration Suite 7.0 or later
- Windows 2008 Active Directory
Installation
- As root, create the /opt/zimbra/lib/ext/adpassword directory
- As root, copy adPassword.jar into /opt/zimbra/lib/ext/adpassword/
- As root, import the DER domain controller certificate into the trusted keystore /opt/zimbra/java/jre/lib/security/cacerts
- Restart Zimbra
Configure authentication settings for your domain
- Open the Zimbra Administration console
- Select External LDAP as authentication mechanism
- Type the LDAP URL and check Use SSL
- Type samaccountname=%u in the LDAP filter field
- Specify cn=users,dc=SERVER,dc=EXT in the LDAP search base field
- Check Use DN/Password to bind to external server
- Enter the Bind DN cn=Administrator,cn=users,dc=SERVER,dc=EXT and its password
- If Test past, click Finish
- Assign the new change password listener ADPassword
Useful Links
- How to enable LDAPS on Windows 2008 Active Directory Domain
- Zimbra GAL lookups against Active Directory
- Source code
- Bug report
| Downloads: | 386 |
|---|---|
| Latest Version: | 1.0 |
| Categories: | Developer Tools, Utilities |
| Compatibility: | ZCS 7.0 or later |
| License: | AL |
| Created: | November 05, 2012 |
| Updated: | November 09, 2012 |
Reviews
Really awesome extension!
thanks!
For you users of this extension:
- Let me know how it works
- Signal every bug/issue
- Suggest improvements
Thank you all,
Antonio.
I have test your extension, and it's does his job great, but if you have all cobnfigured/prepared as you think would be.
This is my issues/suggestion/improvements:
I have zimbra with n domains that have their corresponding active directory user, but this "ADUser" has their account with different name from zimbra account. For ex.: jperez@ayuncordoba.es and in Active Directory this user is JOPD.
I have provisioned on all user accounts in Zimbra "zimbraAuthLdapExternalDn" of distinguishedName of corresponding Active Directory account, and when i login it's works, but when i try to change user password, zimbra reports on logs that it can't find user in ldap of active directory.
I have review your code, and I think that this field it's not supported.
And also all my users are in differents "Organization Units" that depends from one master unit, and your ADPassword don't support this (all users in one OU or it does not work).
Thanks in advance.
Add a Review
Please log in to post review/comments.