Connect. Communicate. Collaborate. Securely.

Home » Kerio User Forums » Kerio Connect » Different Kerio username and Active Directory UPN

Messages: 6
Karma: 0
Send a private message to this user

i searched long time via google, but didn't found a answer for my problem.
After try around with many settings including Active Directory mapping via "" (See Knowledge Base Article from Kerio "Mapping different name from Active Directory"), finally i found a solution and would like to share the solution.

The Problem:

Our mail-address are different from the Active Directory UPN (Login Name) and if you create a local account on kerio connect with kerberos authentication, you have to use the UPN as kerio username. If you don't do so, you are not able to login.
But the problem is, if you create the kerio account with the UPN, kerio creates automatically a default-mail-address with the UPN.
You're able to change the sender-mail-address in the kerio webmail but this doesn't affect mail-filter or calender invitations.

Example User:

Full Name: John Doe
Mail-Address: john.doe<_at_>
UPN: jodo<_at_>
samAccountName: jodo

The Solution:

1. Create local kerio account with mail-address (without domain) as username (john.doe) and with Kerberos authentication method.
Kerio Connect autmatically creates the default-mail-address john.doe<_at_>

2. Stop the Kerio Connect Server

3. Edit "user.cfg" in the install-path of Kerio Connect Server
(Under Mac OS X: /usr/local/kerio/mailserver/user.cfg)

4. Find your user and add the Active Directory samAccountName to follow variable
Original: <variable name="KrbUserPrincipalName"></variable>

Changed: <variable name="KrbUserPrincipalName">jodo</variable>

5. Save the "user.cfg" and start Kerio Connect Server

6. Now you should be able to login with "john.doe<_at_>" in Kerio Connect

Thats all
Previous Topic: Error setting up outlook account
Next Topic: Kerio Connect 8 upgrade from 7.4.3
Goto Forum:

Kerio discussion forums are intended for open communication between forum members and may contain information and material posted by members which may be useful in learning about Kerio products. The discussion forums are not intended to provide technical support for any specific product. Any information implied or expressed in the discussion forums is that of the posting member. Kerio is in no way responsible for the information posted in the forums, or its accuracy. Kerio employees may participate in the discussions, but their postings do not represent an offical position of the company on any issues raised or discussed. Kerio reserves the right to monitor and maintain the forums to promote free and accurate exchange of information.

Current Time: Tue Oct 17 01:59:51 CEST 2017

Total time taken to generate the page: 0.00312 seconds
.:: Contact :: Home ::.
Powered by: FUDforum 3.0.4.