Skip to content

Active Directory synchronisation

Synchronise users and groups from Active Directory to Zimbra accounts and distribution lists in one direction. Changes are previewed before they are applied; missing mailboxes are created selectively or automatically.

Global administratorAdmin console › Tools and Migration › Profelis LDAP Sync

The screen

Open Profelis LDAP Sync. The table lists past sync jobs; the toolbar leads to settings, preview, sync and account opening.

Profelis LDAP Sync toolbar

1 Settings, 2 Preview, 3 Sync now, 4 Open accounts

First connection and preview

  1. Settings (1). On the Connection tab fill in the directory server address, bind DN, bind password, user base DN and group base DN; tick StartTLS if needed. The user, group and account-opening filters come preset for Active Directory. Save with OK. The bind password is stored on the server in a file readable only by the administrator.
  2. Preview (2): the plan of objects to be created, updated and deleted is listed. Do not apply if there is an unexpected deletion.
  3. If it looks right, Sync now (3). The job is added to the table; follow it with Refresh and stop it with Cancel job if needed.

Settings window, Connection tab

Settings window, Connection tab

Preview first

Do not sync large units without a preview. After changing the filter, use Reset delta so the next run is a full one, and preview again first.

Creating missing mailboxes

  1. Under Settings › Accounts turn on Create missing accounts and enter the initial password.
  2. Open accounts (4): choose a unit (OU) in the tree and a Scope (this unit only, a given depth, the whole subtree), then List.
  3. People are listed; those with a mailbox are ticked. Filter the list and open only those, or tick rows one by one and open the selected ones (up to 2000 at a time).

Until an initial password is set, the window reminds you with a red warning. This path does not update or delete existing mailboxes.

Automatic creation

  1. Open Settings › Schedule & Safety.
  2. Tick Open accounts automatically; Opening interval (minutes) is 15 by default.
  3. Optionally turn on Close mailboxes disabled in AD; only mailboxes created by this sync are closed.
  4. OK.

Schedule & Safety tab

Schedule & Safety tab

Address attribute

The Zimbra address can be built from mail, userPrincipalName or sAMAccountName (Settings › Connection › Address attribute).

Changing the attribute can rename addresses

On an existing installation, always check the accounts to be renamed with Preview after changing the attribute.