Administrator's Guide - Kerio Software Archive

7.6 Setting of Directory ServicesFigure 7.7Domain settings — Apple Open DirectoryUp to 6.1.3, Kerio MailServer used authentication against the password server by default.Since Kerio MailServer 6.1.4 it is possible to choose an authentication method.It should be also remembered that in the domain settings on the Advanced tab underConfiguration → Domains in the Kerio MailServer’s administration console, nameof the Kerberos area must be specified against which the mailserver will be authenticated.It is necessary that the name matches the name of Kerberos area specified in the/Library/Preferences/edu.mit.Kerberos file, otherwise the settings will not functionproperly. For detailed description on authentication against the Kerberos server onMac OS X operating systems, see chapter 24.3).HostnameDNS name or IP address of the server where the LDAP database is runningFor communication, the LDAP service uses port 389 as default (port 636 is used as defaultfor the secured version). If a non-standard port is used for communication of KerioMailServer with the LDAP database, it is necessary to add it to the DNS name or the IPaddress of the server (e.g. mail1.company.com:12345 or 212.100.12.5:12345).Note: If the secured version of LDAP service is used for connection, it is necessary toenter also the DNS name to enable the SSL certificate’s verification.73