Global Address List. Zimbra 8.6 Network Edition

Zimbra LDAP Service

When users log in with an email password and the domain,

zimbraAuthMech

is set to kerberos5, the server constructs the Kerberos5 principal by

{localpart-of-the-email}@{value-ofzimbraAuthKerberos5Realm}

and uses that to authenticate to the kerberos5 server.

To specify Kerberos5 for an individual account set the account’s

zimbraForeignPrincipal

as

kerberos5:{kerberos5-principal}

. For example: kerberos5:[email protected].

Global Address List

The Global Address List (GAL) is a company directory of users, usually within the organization itself, that is available to all users of the email system. Zimbra

Collaboration uses the company directory to look up user addresses from within the company.

For each Zimbra Collaboration domain you can configure GAL to use:







External LDAP server

Zimbra Collaboration internal LDAP server

Both external LDAP server and OpenLDAP in GAL searches

The Zimbra Collaboration Web Client can search the GAL. When the user searches for a name, that name is turned into an LDAP search filter similar to the following example, where the string %s is the name the user is searching for.

(|(cn = %s*)(sn=%s*)(gn=%s*)(mail=%s*))

(zimbraMailDeliveryAddress = %s*)

(zimbraMailAlias=%s*)

(zimbraMailAddress = %s*)

GAL Attributes in Zimbra Collaboration

The

Attributes Mapped to Zimbra Collaboration Contact table maps generic

GAL search attributes to their Zimbra Collaboration contact fields.

LDAP attributes are mapped to GAL entry fields. For example, the LDAP attribute

displayName

and cn can be mapped to GAL entry field

fullName

. The mapping is configured in the

zimbraGalLdapAttrMap

attribute.

Table 1: Attributes Mapped to Zimbra Collaboration Contact

Standard LDAP Attribute

co company

Zimbra Collaboration Contact

Field

workCountry

Company

Zimbra Collaboration 8.6 Network Edition 43