Rocky 8.x Zimbra Connect to Zimbra internal LDAP externally

Home > Rocky Linux or CentOS > Rocky Linux 8.x > Email servers > Zimbra > Connect to Zimbra internal LDAP externally

To connect to Zimbra LDAP externally:

1. Enable access to server via network firewall (OR Cloud firewall)
2. Enable access to port 389 of Zimbra server via firewalld:

   firewall-cmd --zone=public --add-port=389/tcp --permanent
   firewall-cmd --reload

3. Then test connectivity to Zimbra LDAP via:

   ldapsearch -x -h <email-server-fqdn-or-ip>:389 -b 'dc=example,dc=com' -D 'uid=saurabh,ou=people,dc=example,dc=com' -W dn,mail

   In above replace username saurabh and domain example.com appropriately. Zimbra LDAP will require authentication for the DN specified with -D, without which it does not responds to ldap queries

   1. In case of confusion on Zimbra LDAP structure we can use:

      su - zimbra
      /opt/zimbra/libexec/zmslapcat -c /tmp
      vim /tmp/ldap.bak

      See CentOS 7.x Zimbra backup and restore

   2. For filters while connecting to Zimbra. See
      • CentOS 7.x Zimbra GALsync between two Zimbra servers
      • CentOS 7.x Use LDAP address-book in thunderbird

Various fields while connecting to Zimbra LDAP externally

Host

mail.example:389

Base DN

dc=example,dc=com

Auth DN

uid=saurabh,ou=people,dc=example,dc=com

Password

secret

User Object Class

zimbraAccount

Username

mail OR uid

User Filter

(&(uid=*)(mail=*))

To search for specific user we can use uid=saurabh or mail=saurabh@example.com etc. filters

There are no user groups in Zimbra by default. For grouping use custom groups in application and manually add users to specific groups.

Home > Rocky Linux or CentOS > Rocky Linux 8.x > Email servers > Zimbra > Connect to Zimbra internal LDAP externally