Administrator's Guide - Kerio Software Archive

Chapter 19LDAP serverThe built-in LDAP server enables access to public and private contacts (you can use eitherthe secured or the unencrypted access — for detail see chapter 6) stored in KMS for emailclient programs supporting the LDAP protocol (Lightweight Directory Access Protocol). Thisprotocol is supported by all commonly used email clients. This protocol is supported by allmost common email clients.These clients can enable users to search for users’ data (typically email addresses) and automaticcompletion of email addresses when they are inserted.19.1 LDAP server configurationUsage of the LDAP service in Kerio MailServer is easy. Simply, the following two conditionsmust be met:• At least one LDAP service or Secure LDAP must be run in Kerio MailServer.• The user must have his/her contacts defined in the contacts folder or must have subscribedat least one public or shared contact. No contacts will be found unless this condition is met.Note: If Kerio MailServer is protected by a firewall and the LDAP service is intended to beavailable, the appropriate ports must be open (389 for the LDAP service and 636 for SecureLDAP). You should use the encrypted LDAP version.19.2 Configuring Email ClientsThe following information should be considered to enable a mail client to access contactsstored in Kerio MailServer by the LDAP protocol.LDAP serverDNS name (e.g. mail.company.com) or IP address (e.g.) of the host that Kerio MailServeris running on.User name and passwordThis data is used by users to log into the LDAP server (equal to the name and passwordfor user login to mailboxes). The LDAP server in Kerio MailServer does not supportanonymous logins — the user login is always required.Security, PortSelect, whether the secure or non-secure version of LDAP protocol should be used. If youdo not use standard port insert a corresponding port number.Note: TLS is not supported.215