11.1  LDAP searching settings

11.1.1  Mac OS X 10.2 Jaguar
11.1.2  Mac OS X 10.3 Panther and higher

11.1.1  Mac OS X 10.2 Jaguar

In this version, Kerio Connect supports search in the Kerio Connect LDAP database. The option of search in LDAP database allows automatic check for email addresses during message composition in Apple Mail. All addresses included in the LDAP database (addresses of all Kerio Connect accounts) are checked.

Apple Address Book parameters can be set under Address Book → Preferences:

  1. Switch to the LDAP tab

  2. Specify the Server item with theDNS name or the IP address of the host where Kerio Connect is running and the LDAP port for the server.

SSL-secured LDAP can be used for the traffic. However, in such a case it is necessary to authenticate by a trustworthy certificate (for details, refer to chapter 8.9  Secure communication of Kerio Connect with MS Entourage). Apple Address Book connects to Kerio Connect by encrypted connection using the LDAP Start TLS extension. It is necessary to follow these steps when setting the encrypted communication on the Address Book → Preferences → LDAP tab:

  1. enable the Use SSL option,

  2. change the default port 636 to the port used in Kerio Connect for the non-secured LDAP service (typically port 389). In case that you want to use SSL-secured connection to the server (Use SSL), a trustworthy certificate installed is required.

Warning

In this version, searching is available only for public contact folders with anonymous read access (the anyone user).

11.1.2  Mac OS X 10.3 Panther and higher

Search in the Kerio Connect's LDAP database allows automatic check for email addresses during message composition in Apple Mail. All addresses included in the LDAP database (addresses of all Kerio Connect accounts) are checked.

Apple Address Book parameters can be set under Address Book → Preferences. This option opens a dialog providing several tabs (refer to figure 11.2  Enabling synchronization). Specification of the LDAP tab is required (see figure 11.1  Apple Address Book settings).

Apple Address Book settings

Figure 11.1. Apple Address Book settings


Name

Name of Kerio Connect is required in this entry.

Server

IP address or DNS name of the computer where the Kerio Connect is running.

Search Base

Specify a location of contacts in the LDAP database (see above). If the entry is not specified, all subscribed contact folders will be searched through.

If you want to access all private and subscribed shared and public folders, leave the entry blank or enter

fn=ContactRoot

More precise specification of searched section of the LDAP database enables to access only some types of contacts. To better understand various alternatives, read the following examples:

  • cn=wsmith@company.com,fn=ContactRoot

    (the look-up will be performed only in folders of the jsmith@company.com user)

  • fn=personal,fn=ContactRoot (only folders of the user currently connected to the LDAP server will be searched through. This option is identical with the previous one, however, it is not necessary to specify username (or email address) of the user. This option may be helpful for example when configuring multiple clients, etc.)

  • fn=public,fn=ContactRoot

    (only public contact folders will be searched through)

  • fn=Contacts,cn=wsmith@company.com,fn=ContactRoot

    (only the Contacts folder of the jsmith@company.com user will be searched through)

  • fn=PublicContacts,fn=public,fn=ContactRoot

    (only the public PublicContacts folder will be searched through)

Port

Port of the LDAP service. The same port as in Kerio Connect must be set.

If you want to use the encrypted connection to the server (Use SSL), it is necessary that a trustworthy certificate is set (for details, see chapter 8.9  Secure communication of Kerio Connect with MS Entourage).

Apple Address Book connects to Kerio Connect by encrypted connection using the LDAP Start TLS extension. It is necessary to follow these steps when setting the encrypted communication on the Address Book → Preferences → LDAP tab:

  1. enable the Use SSL option,

  2. change the default port 636 to the port used in Kerio Connect for the non-secured LDAP service (typically port 389). In case that you want to use SSL-secured connection to the server (Use SSL), a trustworthy certificate installed is required.

Scope

This item defines which folders will be searched through. It is recommended to use the Subtree option where the system searches through all contact folders and subfolders.

Authentication

Authentication to Kerio Connect. Set the Simple option for the authentication type to make it possible to specify username and password to the corresponding user account.