Administrator's Guide - Kerio Software Archive

24.1 Kerio MailServer on WindowsFigure 24.1Setting the Active Directory domain in Kerio MailServerSpecify the domain name in the Advanced dialog (see figure 24.1) and ensure that:1. Kerio MailServer is a member of the domain to be authenticated against. If KerioMailServer is not the domain member, the Kerberos system will not be working and theusers will have to use a local password, i.e. different from the password for the domain.2. Kerio MailServer uses Active Directory Controller as the primary DNS server — this shouldbe done automatically by adding the host in the domain (see item 1).If the network configuration requires authentication against multiple domain controllersat a time, add all domain controllers where Kerio MailServer will be authenticated as DNSservers. In this case, however, a special configuration of DNS servers is required. Either itis necessary to set DNS servers to forward queries to each other (if the query is not foundin the proper database, it is forwarded to the domain controller) or all DNS servers mustshare the same primary parent DNS server.3. time of Kerio MailServer and Active Directory is synchronized — this should be doneautomatically by adding a host to the domain (see item 1).Authentication against Open DirectoryFor authentication with Open Directory, Kerio MailServer’s Kerberos realm must be specified(e.g. COMPANY.COM).265