Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Switch to AD authentication (from internal database)

Messages: 348

Karma: 10
Send a private message to this user
We have about 100 users in our Kerio installation. We have been using Kerio longer than we have Active Directory (AD). Now that AD is on our network, I'd like to convert the existing users so that their Kerio authentication is through AD.

Ive got the AD extensions installed, and figured out how to configure the AD domain settings in the Kerio mail domain tab. Now I see a few of our the newer users in the user list twice -- once using the internal database, and another instance using kerberos. When I look at these users in the AD users & computers console, they have a "kerio Connect Account" tab.

Some users were migrated into AD from our previous network, and their AD user objects were created before I installed the Kerio AD extensions. These users still only appear once in the Kerio admin user list, and in the AD user manager, there is no "Kerio Connect Account" tab.

I can't seem to find a definitive answer in the knowledge base or in the manual about how to go about making this conversion. Any help appreciated.

Good is better than evil because it's nicer
--Mammy Yokum

Messages: 119
Karma: 2
Send a private message to this user
Check o=65122&S=a8f4dfd8dabaa9274a02f4d9044cfaed#msg_65122 to see if it answers part of your question.

I don't know if it will make the "Kerio Connect Account" tab appear since we are running 6.7.3 Patch 1.

Messages: 28
Karma: 0
Send a private message to this user
Technically the user data is just in a folder with that user's shortname like "jsmith". If that short name is the same in AD, then you would delete the local Kerio account and tell it to leave the data where it is and not touch it, then create a new user mapping that user from AD. Stop and restart Kerio. Since the short names are the same, the data folder will already be there and will "inherit" that users data store.

If you have to migrate the user, AND change their shortname because its different in AD, user this KB article: iewarticle&kbarticleid=513&nav=0,1

The steps in this article are effectively the same.
Previous Topic: Bounce Message Edit
Next Topic: 6.7.3 p1 -> 7.1?
Goto Forum:

Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Oct 24 07:40:26 CEST 2017

Total time taken to generate the page: 0.00394 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.