ADProvision

by amessina

AutoProvisioning in LAZY or EAGER mode of Active Directory users for ZCS 7.x FOSS.

It includes ADPassword, to change Active Directory passwords from the Zimbra web client.

 

Note: ZCS 8.x FOSS already HAS a similar (better) feature.

 

Requirements

• Zimbra Collaboration Suite 7.x FOSS
• Windows 2008 Active Directory

 

Installation

1. As root, create the /opt/zimbra/lib/ext/adpassword directory
2. As root, copy adPassword.jar into /opt/zimbra/lib/ext/adpassword/
3. As root, import the DER domain controller certificate into the trusted keystore /opt/zimbra/java/jre/lib/security/cacerts
4. Restart Zimbra

 

Configure authentication settings for your domain

1. Open the Zimbra Administration console
2. Select External LDAP as authentication mechanism
3. Type the LDAP URL and check Use SSL
4. Type samaccountname=%u in the LDAP filter field
5. Specify cn=users,dc=SERVER,dc=EXT in the LDAP search base field
6. Check Use DN/Password to bind to external server
7. Enter the Bind DN cn=Administrator,cn=users,dc=SERVER,dc=EXT and its password
8. If Test past, click Finish
9. Assign the new change password listener ADPassword

 

Configure autoprovisioning settings for your domain

As zimbra user:

 

• Common setting

1. zmlocalconfig -e adprovision_domain_name=example.com
2. zmlocalconfig -e adprovision_initial_sleep=2
3. zmlocalconfig -e adprovision_sleep_interval=15

 

• Eager mode

1. zmlocalconfig -e adprovision_sync_mode=eager
2. zmlocalconfig -e adprovision_batch_size=10

 

• Lazy mode

1. zmlocalconfig -e adprovision_sync_mode=lazy
2. zmlocalconfig -e zimbra_class_provisioning=it.iknowconsulting.adprovision.ADProvisioning

 

Then reload local configuration with: zmlocalconfig -l

Note: adprovision_initial_sleep and adprovision_sleep_interval are expressed in minutes

The use of local configuration allows us to change every parameter while Zimbra is running. Do a zmlocalconfig -l to apply the changes.

 

Useful Links

• Zimbra GAL lookups against Active Directory
• How to enable LDAPS on Windows 2008 Active Directory Domain
• Source code
• Bug report

Downloads:	151
Latest Version:	1.0
Categories:	Utilities
Compatibility:	ZCS 7.1.0, ZCS 7.1.3
License:	AL
Created:	November 17, 2012
Updated:	November 17, 2012