Zarafa WebAccess Single Sign On configuration - Revision history

Msartor at 12:56, 29 September 2011

2011-09-29T12:56:27Z

← Older revision		Revision as of 12:56, 29 September 2011
Line 147:		Line 147:

	Restart your browser and open the Webaccess via the FQDN (<tt>http://zarafa.testdomain.com/webaccess</tt>). If the configuration is done correctly, the user will be logged in to the Webaccess without typing the username and password.		Restart your browser and open the Webaccess via the FQDN (<tt>http://zarafa.testdomain.com/webaccess</tt>). If the configuration is done correctly, the user will be logged in to the Webaccess without typing the username and password.
		+
		+
		+	== Apache and Zarafa on different servers ==
		+	When you have Zarafa and Apache on different servers it is NOT possible to connect the webaccess to the unix socket of Zarafa.
		+
		+	In this case you'll need to setup SSL to create a trust between Apache and Zarafa. Please check our Administrator manual (the paragraph about SSL Certificates in the Multiserver chapter) how to get this done. You can find our administrator manual on the community page or on the official portal.

John: /* Apache configuration */

2011-07-19T13:52:37Z

Apache configuration

← Older revision		Revision as of 13:52, 19 July 2011
Line 55:		Line 55:

	<code>		<code>
-	yum install mod_auth_kerb	+	yum install mod_auth_kerb
	</code>		</code>
	or		or
	<code>		<code>
-	apt-get install libapache2-mod-auth-kerb	+	apt-get install libapache2-mod-auth-kerb
	</code>		</code>

John: /* Apache configuration */

2011-07-19T13:52:08Z

Apache configuration

← Older revision		Revision as of 13:52, 19 July 2011
Line 56:		Line 56:
	<code>		<code>
	yum install mod_auth_kerb		yum install mod_auth_kerb
		+	</code>
		+	or
		+	<code>
		+	apt-get install libapache2-mod-auth-kerb
	</code>		</code>

Line 106:		Line 110:

	<code>service httpd restart</code>		<code>service httpd restart</code>
-

	== Zarafa configuration ==		== Zarafa configuration ==

Ddebyttere: Reverted edits by Ekifehi (talk) to last revision by Admin

2010-11-24T09:16:56Z

Reverted edits by Ekifehi (talk) to last revision by Admin

Show changes

Ekifehi at 04:03, 24 November 2010

2010-11-24T04:03:20Z

Show changes

Admin at 12:59, 29 September 2010

2010-09-29T12:59:21Z

← Older revision		Revision as of 12:59, 29 September 2010
Line 43:		Line 43:
	ktpass -princ HTTP/zarafa.testdomain.com@EXAMPLE.COM		ktpass -princ HTTP/zarafa.testdomain.com@EXAMPLE.COM
	-mapuser EXAMPLE\httpd-linux -crypto DES-CBC-MD5 -ptype KRB5_NT_PRINCIPAL		-mapuser EXAMPLE\httpd-linux -crypto DES-CBC-MD5 -ptype KRB5_NT_PRINCIPAL
-	-mapop set +desonly -pass a -out c:\keytab	+	-mapop set +desonly -pass secret -out c:\keytab
	</code>		</code>

Msartor at 08:35, 24 June 2010

2010-06-24T08:35:15Z

← Older revision		Revision as of 08:35, 24 June 2010
Line 140:		Line 140:
	* Go to Tools -> Internet options -> Advanced		* Go to Tools -> Internet options -> Advanced
	* Make sure the option "Enable integrated Windows authentication" is enabled		* Make sure the option "Enable integrated Windows authentication" is enabled
-	* Add the url of the Zarafa server (<tt>http://zarafa.~~example~~.com</tt>) to your "Local Intranet" sites	+	* Add the url of the Zarafa server (<tt>http://zarafa.testdomain.com</tt>) to your "Local Intranet" sites
		+

	Restart your browser and open the Webaccess via the FQDN (<tt>http://zarafa.testdomain.com/webaccess</tt>). If the configuration is done correctly, the user will be logged in to the Webaccess without typing the username and password.		Restart your browser and open the Webaccess via the FQDN (<tt>http://zarafa.testdomain.com/webaccess</tt>). If the configuration is done correctly, the user will be logged in to the Webaccess without typing the username and password.

Msartor at 08:34, 24 June 2010

2010-06-24T08:34:25Z

← Older revision		Revision as of 08:34, 24 June 2010
Line 3:		Line 3:
	The article describes how you can setup a Single Sign On Zarafa WebAccess with Active Directory domain controller.<BR>		The article describes how you can setup a Single Sign On Zarafa WebAccess with Active Directory domain controller.<BR>
	This article has been tested on Red Hat Enterprise Linux server 5, but can also be used as basis for other distributions.		This article has been tested on Red Hat Enterprise Linux server 5, but can also be used as basis for other distributions.
		+

	== Prerequisites ==		== Prerequisites ==
Line 26:		Line 27:
	* Added <tt>zarafa.testdomain.com</tt> to the forward lookup zone (including PTR record).		* Added <tt>zarafa.testdomain.com</tt> to the forward lookup zone (including PTR record).
	* Setup NTP on the Linux machine (<tt>zarafa.testdomain.com</tt>) to sync it's time with the ADS machine.		* Setup NTP on the Linux machine (<tt>zarafa.testdomain.com</tt>) to sync it's time with the ADS machine.
		+

	== Active Directory configuration ==		== Active Directory configuration ==
Line 46:		Line 48:
	Copy the keytab file to the directory <tt>/etc/httpd/conf/</tt> on your Linux server.<BR>		Copy the keytab file to the directory <tt>/etc/httpd/conf/</tt> on your Linux server.<BR>
	You can use a SCP client for this, like [http://winscp.net/eng/index.php WinSCP].		You can use a SCP client for this, like [http://winscp.net/eng/index.php WinSCP].
		+

	== Apache configuration ==		== Apache configuration ==
Line 103:		Line 106:

	<code>service httpd restart</code>		<code>service httpd restart</code>
		+

	== Zarafa configuration ==		== Zarafa configuration ==
Line 122:		Line 126:

	<code>service zarafa-server restart</code>		<code>service zarafa-server restart</code>
		+

	== Web browser configuration ==		== Web browser configuration ==

Msartor at 08:33, 24 June 2010

2010-06-24T08:33:43Z

← Older revision		Revision as of 08:33, 24 June 2010
Line 130:		Line 130:
	* Type in the addressbar <tt>about:config</tt>		* Type in the addressbar <tt>about:config</tt>
	* Filter on <tt>auth</tt>		* Filter on <tt>auth</tt>
-	* Change the options: <tt>network.negotiate-auth.trusted-uris</tt> and <tt>network.negotiate-auth.delegation-uris</tt> to <tt>.~~example~~.com</tt>	+	* Change the options: <tt>network.negotiate-auth.trusted-uris</tt> and <tt>network.negotiate-auth.delegation-uris</tt> to <tt>.testdomain.com</tt>

	'''Internet Explorer'''		'''Internet Explorer'''
Line 137:		Line 137:
	* Add the url of the Zarafa server (<tt>http://zarafa.example.com</tt>) to your "Local Intranet" sites		* Add the url of the Zarafa server (<tt>http://zarafa.example.com</tt>) to your "Local Intranet" sites

-	Restart your browser and open the Webaccess via the FQDN (<tt>http://zarafa.~~example~~.com/webaccess</tt>). If the configuration is done correctly, the user will be logged in to the Webaccess without typing the username and password.	+	Restart your browser and open the Webaccess via the FQDN (<tt>http://zarafa.testdomain.com/webaccess</tt>). If the configuration is done correctly, the user will be logged in to the Webaccess without typing the username and password.

Gertvdijk: markup and some small rewrites

2010-06-24T08:33:11Z

markup and some small rewrites

Show changes