LDAP Wildfire: Difference between revisions

No edit summary
No edit summary
Line 11: Line 11:
         <emailField>mail</emailField>
         <emailField>mail</emailField>
         <baseDN>BASE_OF_THE_USERS_FOR_THE_DOMAIN</baseDN> #check bellow
         <baseDN>BASE_OF_THE_USERS_FOR_THE_DOMAIN</baseDN> #check bellow
         <adminDN>uid=zimbra,cn=admins,cn=zimbra</adminDN>
         <adminDN></adminDN>
         <adminPassword>PASSWORD_GIVEN_IN_THE_SETUP_OF_LDAP_SERVER</adminPassword>
         <adminPassword></adminPassword>
</ldap>
</ldap>
------------------------------------------------------------------------------------
------------------------------------------------------------------------------------
Since the Zimbra OpenLDAP is configured to allow for anonymous searches, its not necessary
to give the Wildfire config your admin DN or password.  This will keep that password from being
sent in plaintext over your network.


BASE_OF_THE_USERS_FOR_THE_DOMAIN : If you have only one domain, like me, you should put your domain in the form:
BASE_OF_THE_USERS_FOR_THE_DOMAIN : If you have only one domain, like me, you should put your domain in the form:

Revision as of 03:41, 7 April 2006

Its really easy to setup Wildfire for auth with Zimbra Ldap database. When you had finished the instalation of Wildfire go to the /opt/wildfire/conf directory and edit the wildfire.xml file. Here you found the options to connect to OpenLDAP:


<ldap>

       <host>IP_OR_HOSTNAME_OF_LDAP_SERVER</host>
       <port>PORT_OF_LDAP</port>
       <usernameField>uid</usernameField>
       <nameField>displayName</nameField>
       <emailField>mail</emailField>
       <baseDN>BASE_OF_THE_USERS_FOR_THE_DOMAIN</baseDN> #check bellow
       <adminDN></adminDN>
       <adminPassword></adminPassword>

</ldap>


Since the Zimbra OpenLDAP is configured to allow for anonymous searches, its not necessary to give the Wildfire config your admin DN or password. This will keep that password from being sent in plaintext over your network.

BASE_OF_THE_USERS_FOR_THE_DOMAIN : If you have only one domain, like me, you should put your domain in the form: dc=domain,dc=com

questions to pbruna@it-linux.cl

Jump to: navigation, search