|
|
| Line 16: |
Line 16: |
| | | | |
| | [[File:Kerio_sync_01.png|center|450px]] | | [[File:Kerio_sync_01.png|center|450px]] |
| − |
| |
| − | == Specifying Connection Settings ==
| |
| | | | |
| − | Before the synchronization feature can be used, MailStore Server needs information on how the Kerio Connect server can be reached:
| + | == Connection to the Kerio Connect == |
| − | * '''Server Name''' - The Name or the IP address of the Kerio Connect server. If you are using a self-signed SSL certificate on the Kerio Connect server, please check the checkbox ''Ignore SSL Security Warnings''.
| |
| − | * '''User Name''' – The name of a user with administrative privileges.
| |
| − | * '''Password''' – The password of the user with administrative privileges.
| |
| − |
| |
| − | == Specifying Standard Privileges ==
| |
| | | | |
| − | By default, users who were synchronized to MailStore from a directory service can log on to MailStore Server and have access to their own user archive.
| + | For synchronization MailStore Server requires information on how to connect to the Kerio Connect. |
| − | Before synchronization, you can modify these standard privileges to give all new users the ''Archive Emails'' privilege, for example. To do so, click on the ''Standard Privileges…'' button.
| |
| | | | |
| − | Additional information about managing user privileges and their effects is available in chapter [[Users, Folders and Settings]]. There you can also find tips on how to customize existing privileges.
| + | *'''Server Name'''<br/>DNS name or IP address of the Kerio Connect. If you use a self-signed or non-public SSL certificate on the Kerio Connect, please set a checkmark next to ''Ignore SSL Security Warnings''. |
| | + | *'''User Name'''<br/>Name of a user with administrative privileges on the Kerio Connect. |
| | + | *'''Password'''<br/>Password of that user. |
| | | | |
| − | == Performing the Synchronization == | + | == Synchronize == |
| | | | |
| − | Once the connection settings have been specified (as described above), you can synchronize the MailStore user list with the Kerio Connect user database.
| + | After configuring the connection settings as described above, you can specify filter criteria for the Kerio Connect user database synchronization in this section. |
| | | | |
| − | To limit synchronization to one or more domains and groups, click on the button next to the domains and groups field and put a checkmark in front of the groups to be synchronized. If no domain or group is selected, all users will be synchronized.
| + | *'''Domains and Groups'''<br/>Choose one or more domains or groups to let only their members be created as MailStore Server Users. If no domains or groups are selected, all users will be synchronized. |
| | | | |
| − | Click on ''Verify Settings'' to see what happens when clicking ''Synchronize Now''. Click on ''Synchronize Now'' to start.
| + | {{:Includes:Directory_Services_Options|Kerio Connect}} |
| | + | {{:Includes:Assign_Default_Privileges|a Kerio Connect}} |
| | + | {{:Includes:Run_Directory_Services_Synchronization|Kerio Connect}} |
| | | | |
| | + | [[File:Icewarp_sync_02.png|center|450px]] |
| | | | |
| − | [[File:Kerio_sync_02.png|center|450px]] | + | {{:Includes:Login_with_Directory_Services_Credentials|Kerio Connect|[[Kerio_Connect_Integration#Synchronizing_User_Accounts_with_a_Kerio_Connect_User_Database|Synchronizing User Accounts with a Kerio Connect User Database]]|[[File:Kerio_sync_03.png|center|400px]]|{{:Includes:Login_with_Directory_Services_Credentials_Kerio_Options}}|a}} |
| | | | |
| − | = Login with Kerio Connect Access Data =
| |
| − |
| |
| − | By default, each MailStore user has a password exclusively for MailStore. The MailStore administrator specifies the password upon creation of the user account while the user can later change it via MailStore Client’s ''Administrative Tools''. Alternatively, you can configure MailStore to allow users to log in to MailStore Server using their Kerio Connect passwords.
| |
| − |
| |
| − | Before users can log in to MailStore Server using their Kerio Connect access data, the following settings must be specified under ''Authentication'':
| |
| − |
| |
| − | * '''Kerio IMAP Server''' – Enter the IP address or the host name of the Kerio Connect server against which authentication is to be performed.
| |
| − | * '''IMAP Server Access''' – Specify if the connection to the IMAP server is to be unencrypted or IMAP-TLS/IMAP-SSL encrypted.
| |
| − | *: '''Only when using IMAP-TLS and IMAP-SSL:''' Activate the option to ''Ignore SSL Security Warnings'' if an unofficial certificate is used on the Email server. Otherwise, authentication will permanently fail.
| |
| − |
| |
| − | <p class="msnote" style="color: red">'''Important Notice:''' If Kerio Connect is configured to authenticate users against an Active Directory or if the passwords are stored as SHA hashes, you must disable ''CRAM-MD5'' and ''DIGEST-MD5'' under ''Configuration'' > ''Advanced Options'' > ''Security Policy'' to make the above configuration work. Otherwise users will not be able to log in to MailStore.</p>
| |
| − |
| |
| − | == Procedure for Users Who Were Added Via Synchronization with the Kerio Connect User Database ==
| |
| − |
| |
| − | If MailStore users were added via Kerio Connect directory service synchronization as described in the previous section, no further action is required. MailStore has already specified all necessary settings automatically.
| |
| − |
| |
| − | == Procedure for Manually Added Users ==
| |
| − |
| |
| − | If MailStore users were added manually, and if these users are to be able to log in using their Kerio Connect password, please proceed as follows:
| |
| − | * Configure the Kerio Connect Integration as described in chapter [[Kerio Connect Integration#Synchronizing_User_Accounts_with_a_Kerio_Connect_User_Database|
| |
| − | Synchronizing User Accounts with a Kerio Connect User Database]]
| |
| − | * Make sure that the MailStore users have the same name as the corresponding users in the Kerio Connect user database.
| |
| − | * In the user properties under ''Authentication'', choose ''Directory Services''.
| |
| − |
| |
| − | [[File:Kerio_sync_03.png|center|400px]]
| |
| | [[de:Kerio_Connect-Integration]] | | [[de:Kerio_Connect-Integration]] |
This article is currently under revision.
Synchronizing User Accounts with a Kerio Connect User Database
In addition to adding users manually (which is described in chapter User Management), MailStore Server can synchronize its internal user database with a Kerio Connect user database.
During synchronization user information such as user names and email addresses are read from the Kerio Connect user database and recorded in MailStore Server's user database. MailStore Server makes no changes to the Kerio Connect user database itself. Synchronization can be limited to individual or multiple domains and groups.
Accessing the Directory Service Integration
- Log on to MailStore Client as a MailStore Server administrator.
- Click on Administrative Tools > Users and Privileges and then on Directory Services.
- In the Integration section, change the directory service type to Kerio Connect.
Connection to the Kerio Connect
For synchronization MailStore Server requires information on how to connect to the Kerio Connect.
- Server Name
DNS name or IP address of the Kerio Connect. If you use a self-signed or non-public SSL certificate on the Kerio Connect, please set a checkmark next to Ignore SSL Security Warnings.
- User Name
Name of a user with administrative privileges on the Kerio Connect.
- Password
Password of that user.
Synchronize
After configuring the connection settings as described above, you can specify filter criteria for the Kerio Connect user database synchronization in this section.
- Domains and Groups
Choose one or more domains or groups to let only their members be created as MailStore Server Users. If no domains or groups are selected, all users will be synchronized.
Includes:Directory Services Options
Includes:Assign Default Privileges
Includes:Run Directory Services Synchronization
Includes:Login with Directory Services Credentials
