Koozali.org: home of the SME Server

Legacy Forums => Experienced User Forum => Topic started by: thomas_chan on April 29, 2005, 04:11:24 PM

Title: LDAP Access Control
Post by: thomas_chan on April 29, 2005, 04:11:24 PM

Anyone can advise how to force the user to login into SMEServer (valid login id & password) prior to connect LDAP directory ?

I have been created a global address book in LDAP directory but anyone can access it with anonymous login.

I have been tested OK just keyin the proper base name by using MS Outlook, Thunderbird without any required to login into the system.

I need this global address book access by Horde Web mail as well so that I cannot restrict the network mask to access this LDAP global address book.

Pls advise or any other hints recommended ?

Title: LDAP Access Control
Post by: hmuhammad on April 29, 2005, 09:47:41 PM

The following configuration will...
a) allow webmail access to the global directory  either from the internal or public internet (restricted to valid users--who have to first provide a valid userid/password to logon to access webmail)
b) allow Thunderbird and Outlook access to the global directory for local users (who are on the internal network--with or without a validated logon)
c) disallow external access from the public internet

...the configuration is: from the server-manager->Configuration->Directory panel, set LDAP directory access to 'Allow access only from local network'

Additionally, if you want to allow Thunderbird and Outlook access from the internet--but only to valid users, then one solution is for users to access the internal network using a VPN connection (and don't change the above configuration)

Title: LDAP Access Control
Post by: thomas_chan on April 30, 2005, 05:05:21 AM

Thank you very much for your advise !!

On the other hand, may I know how to config if I wish to allow the Local Network plus another office network (i.e to specify another IP address range) ? Is it possible to edit the config file directly ? Do you know which config file involved ? Pls advise ?

Title: LDAP Access Control
Post by: thomas_chan on April 30, 2005, 05:19:48 AM

Thank you very much for your advise !!

On the other hand, may I know how to config if I wish to allow the Local Network plus another office network (i.e to specify another IP address range) ? Is it possible to edit the config file directly ? Do you know which config file involved ? Pls advise ?

Title: LDAP Access Control
Post by: hmuhammad on April 30, 2005, 12:14:11 PM

from server-manager->Security->Local networks: Add Network