Carbonio CE 23.2.0 Active Directory authentication - Install & Setup

RE: Carbonio CE 23.2.0 Active Directory authentication

regul8or — Mon, 13 May 2024 10:51:22 +0000

@zmctl_restart Thanks for the commands. I checked with my current Zimbra OSE configuration and come with the following:

carbonio prov md gbustroi.ru zimbraAuthLdapBindDn %u@ad.domain
carbonio prov md gbustroi.ru zimbraAuthLdapSearchBase 'dc=ad,dc=domain'
carbonio prov md gbustroi.ru zimbraAuthLdapSearchBindDn 'CN=zextras,dc=ad,dc=domain'
carbonio prov md gbustroi.ru zimbraAuthLdapSearchBindPassword 'secret'
carbonio prov md gbustroi.ru zimbraAuthLdapSearchFilter '(&(memberOf=CN=Carbonio Users,dc=ad,dc=domain)(sAMAccountName=%u))'
carbonio prov md gbustroi.ru zimbraAuthLdapURL ldap://ldap.ad.domain:389
carbonio prov md gbustroi.ru zimbraAuthMech ad
carbonio prov md gbustroi.ru zimbraAuthFallbackToLocal FALSE

This is also allows to authenticate only those users who are members of the certain group

RE: Carbonio CE 23.2.0 Active Directory authentication

john_doe — Tue, 06 Feb 2024 13:37:03 +0000

@zmctl_restart Thanks for that - safed me some time.

Someone from Zextras should adopt the UI to allow %u@AD-domain.tld as it is currently not allowed to be stored that way.

RE: Carbonio CE 23.2.0 Active Directory authentication

zmctl_restart — Tue, 05 Sep 2023 10:55:14 +0000

Hello all,

For those who want to authenticate users from Active Directory

Modify your domain config as follows, Carbonio admin interface is buggy. You can query global catalog for user auth.

As user zextras run the following commands for your domain

carbonio prov md your.domain.tld zimbraAuthMech ad
carbonio prov md your.domain.tld zimbraAuthLdapStartTlsEnabled FALSE
carbonio prov md your.domain.tld zimbraAuthFallbackToLocal TRUE
carbonio prov md your.domain.tld zimbraAuthLdapBindDn %u@your.domain.tld
carbonio prov md your.domain.tld ldaps://your.global.catalog:3269

Now domain user blabla@your.domain.tld can login using AD credentials if there is a corresponding mailbox already created .

RE: Carbonio CE 23.2.0 Active Directory authentication

ikd — Sun, 09 Apr 2023 18:37:04 +0000

The same problem. Is there a complete manual how to use carbonio server version 23 with Active Directory users?

RE: Carbonio CE 23.2.0 Active Directory authentication

layer.five — Wed, 22 Mar 2023 15:17:14 +0000

I also had the same difficulty and I didn't find any technical reference to solve it.

Carbonio CE 23.2.0 Active Directory authentication

regul8or — Wed, 15 Mar 2023 07:55:59 +0000

Is there a guide somewhere on how to integrate Carbonio CE 23.2.0 with Active Directory, like this one? I understand basic commands like zmprov are now changed.