Configure authentication with Active Directory: Difference between revisions

(9 intermediate revisions by 2 users not shown)
Line 1: Line 1:
{{WIP}}{{Article Infobox|{{admin}}|{{ZCS 8.6}}|{{ZCS 8.5}}|{{ZCS 8.0}}}}
{{BC|Certified}}
__FORCETOC__
<div class="col-md-12 ibox-content">
=Configure authentication with Active Directory=
{{KB|{{ZC}}|{{ZCS 8.6}}|{{ZCS 8.5}}|{{ZCS 8.0}}|}}
 
=Configure authentication with Active Directory=
=Configure authentication with Active Directory=
==Purpose==
==Purpose==
In this article we will explore the steps that needs to be taken in order to configure authentication with Active Directory and Zimbra Collaboration.
In this article we will explore the steps that needs to be taken in order to configure authentication with Active Directory and Zimbra Collaboration.


The scope of this article is not covering configuring of AD. Check the Additional Content section at the bottom for instructions on AD installation.  
The scope of this article does not cover the configuration of AD. Check the Additional Content section at the bottom for instructions on AD installation.  


==Resolution==
==Resolution==
Line 12: Line 17:
2. Active Directory configured with couple of users which we will use to test the configuration (see below).
2. Active Directory configured with couple of users which we will use to test the configuration (see below).


[[File:Kb-zimbra-activedirectory-001.png]]
[[File:Kb-zimbra-activedirectory-001.png|800px]]


3. Right click on each user and select '''Properties'''. Make sure that each user has '''User Logon Name''' configured under the '''Account''' tab.
3. Right click on each user and select '''Properties'''. Make sure that each user has '''User Logon Name''' configured under the '''Account''' tab.


[[File:Kb-zimbra-activedirectory-002.png]]  
[[File:Kb-zimbra-activedirectory-002.png|800px]]  


===Part 1===
===Part 1===
'''Login''' to the AdminUI and navigate to the '''Configuration''' section.  
'''Login''' to the AdminUI and navigate to the '''Configuration''' section.  


[[File:Kb-zimbra-activedirectory-003.png]]
[[File:Kb-zimbra-activedirectory-003.png|800px]]


Click on the '''Domains''' on the left side to show the available domains on the right side. Right click the domain you would like to configure, and select '''Configure Authentication''' option.
Click on the '''Domains''' on the left side to show the available domains on the right side. Right click the domain you would like to configure, and select '''Configure Authentication''' option.


[[File:Kb-zimbra-activedirectory-004.png]]
[[File:Kb-zimbra-activedirectory-004.png|800px]]


On the following window select '''External Active Directory'''.
On the following window select '''External Active Directory'''.


[[File:Kb-zimbra-activedirectory-006.png]]
[[File:Kb-zimbra-activedirectory-006.png|800px]]


Enter the AD domain name and its name/IP.  
Enter the AD domain name and its name/IP.  


[[File:Kb-zimbra-activedirectory-007.png]]
[[File:ad12345.JPG|800px]]


Leave the next window as it is.
Leave the next window as it is.


[[File:Kb-zimbra-activedirectory-008.png]]
[[File:Kb-zimbra-activedirectory-008.png|800px]]


After completing the configuration, you can test if the authentication works on the next window.  
After completing the configuration, you can test if the authentication works on the next window.  


[[File:Kb-zimbra-activedirectory-009.png]]
[[File:Kb-zimbra-activedirectory-009.png|800px]]


Leave the next two windows unchanged.  
Leave the next two windows unchanged.  


[[File:Kb-zimbra-activedirectory-010.png]]
[[File:Kb-zimbra-activedirectory-010.png|800px]]
 
[[File:Kb-zimbra-activedirectory-011.png|800px]]


===Part 2===
===Part 2===
Line 52: Line 59:
Click on the '''Home button''' to get back to the '''Manage''' option.  
Click on the '''Home button''' to get back to the '''Manage''' option.  


[[File:Kb-zimbra-activedirectory-010.png]]
[[File:Kb-zimbra-activedirectory-012.png|800px]]


Click on the '''Manage''' button to access the user section.
Click on the '''Manage''' button to access the user section.


[[File:Kb-zimbra-activedirectory-011.png]]
[[File:Kb-zimbra-activedirectory-013.png|800px]]


Click on the button top-right and select '''New''', to create new user.  
Click on the button top-right and select '''New''', to create new user.  


[[File:Kb-zimbra-activedirectory-012.png]]
[[File:Kb-zimbra-activedirectory-014.png|800px]]


'''The user''' that we will create must have the same name as the AD user for which we are creating login. The domain name should be the one used for zimbra, not the AD.  
'''The user''' that we will create must have the same name as the AD user for which we are creating login. The domain name should be the one used for zimbra, not the AD.  


[[File:Kb-zimbra-activedirectory-013.png]]
[[File:Kb-zimbra-activedirectory-015.png|800px]]


If we scroll down at the same user creation window, notice that there is no password section. That is because it is taken from AD.  
If we scroll down at the same user creation window, notice that there is no password section. That is because it is taken from AD.  


[[File:Kb-zimbra-activedirectory-014.png]]
[[File:Kb-zimbra-activedirectory-016.png|800px]]
 
 
===Part 3===
===Part 3===
Test the configuration.
Test the configuration.
Line 75: Line 82:
To test the configuration, we will try to login with the newly created user.  
To test the configuration, we will try to login with the newly created user.  


[[File:Kb-zimbra-activedirectory-015.png]]
[[File:Kb-zimbra-activedirectory-017.png]]


If you can log in, then the configuration has been successful.  
If you can log in, then the configuration has been successful.  


[[File:Kb-zimbra-activedirectory-016.png]]
[[File:Kb-zimbra-activedirectory-018.png|800px]]


==Additional Content==
==Additional Content==

Revision as of 09:46, 8 January 2019

Configure authentication with Active Directory

   KB 21796        Last updated on 2019-01-8  




0.00
(0 votes)

Configure authentication with Active Directory

Purpose

In this article we will explore the steps that needs to be taken in order to configure authentication with Active Directory and Zimbra Collaboration.

The scope of this article does not cover the configuration of AD. Check the Additional Content section at the bottom for instructions on AD installation.

Resolution

Prerequisites:

1. For this article we will be using Windows Server 2012. 2. Active Directory configured with couple of users which we will use to test the configuration (see below).

Kb-zimbra-activedirectory-001.png

3. Right click on each user and select Properties. Make sure that each user has User Logon Name configured under the Account tab.

Kb-zimbra-activedirectory-002.png

Part 1

Login to the AdminUI and navigate to the Configuration section.

Kb-zimbra-activedirectory-003.png

Click on the Domains on the left side to show the available domains on the right side. Right click the domain you would like to configure, and select Configure Authentication option.

Kb-zimbra-activedirectory-004.png

On the following window select External Active Directory.

Kb-zimbra-activedirectory-006.png

Enter the AD domain name and its name/IP.

Ad12345.JPG

Leave the next window as it is.

Kb-zimbra-activedirectory-008.png

After completing the configuration, you can test if the authentication works on the next window.

Kb-zimbra-activedirectory-009.png

Leave the next two windows unchanged.

Kb-zimbra-activedirectory-010.png

Kb-zimbra-activedirectory-011.png

Part 2

To synchronize Zimbra with Active Directory, we need to create the same account names in Zimbra.

Click on the Home button to get back to the Manage option.

Kb-zimbra-activedirectory-012.png

Click on the Manage button to access the user section.

Kb-zimbra-activedirectory-013.png

Click on the button top-right and select New, to create new user.

Kb-zimbra-activedirectory-014.png

The user that we will create must have the same name as the AD user for which we are creating login. The domain name should be the one used for zimbra, not the AD.

Kb-zimbra-activedirectory-015.png

If we scroll down at the same user creation window, notice that there is no password section. That is because it is taken from AD.

Kb-zimbra-activedirectory-016.png

Part 3

Test the configuration.

To test the configuration, we will try to login with the newly created user.

Kb-zimbra-activedirectory-017.png

If you can log in, then the configuration has been successful.

Kb-zimbra-activedirectory-018.png

Additional Content


Verified Against: Zimbra Collaboration 8.6, 8.5, 8.0 Date Created: 03/24/2015
Article ID: https://wiki.zimbra.com/index.php?title=Configure_authentication_with_Active_Directory Date Modified: 2019-01-08



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Wiki/KB reviewed by SME1 SME2 Copyeditor Last edit by Phoenix
Jump to: navigation, search