5 Zimbra LDAP Service

LDAP directory services provide a centralized repository for information about users and devices that are authorized to use your Zimbra service. The central repository used for Zimbra’s LDAP data is the OpenLDAP directory server.

Topics in this chapter:













LDAP Traffic Flow

, next.

Zimbra Collaboration LDAP Schema, on page 43 .

Account Authentication, on page 46

.

Zimbra Collaboration Objects, on page 44

.

Global Address List, on page 49 .

Flushing LDAP Cache, on page 51

.

Note: Zimbra Collaboration supports integration with Microsoft’s Active

Directory Server. Contact support for information on specific directory implementation scenarios.

The LDAP server is installed when ZCS is installed. Each server has its own

LDAP entry that includes attributes specifying operating parameters. In addition, a global configuration object sets defaults for any server whose entry does not specify every attribute.

A subset of these attributes can be modified through the Zimbra administration console and others through the zmprov commands.

LDAP Traffic Flow

The LDAP Directory Traffic figure shows traffic between the Zimbra-LDAP directory server and the other servers in the Zimbra Collaboration system. The

Zimbra MTA and the Zimbra Collaboration mailbox server read from, or write to, the LDAP database on the directory server.

The Zimbra clients connect through the Zimbra server, which connects to

LDAP.

Zimbra Collaboration Network Edition 41