Linux 连接kerio和openldap

Linux 连接kerio和openldap,linux,openldap,Linux,Openldap,我正在调查kerio connect电子邮件服务器。我正在努力让kerio和openldap一起工作。LDAP用户和组未出现在kerio中 我已经用Kerio ObjectClass和属性扩展了OpenLDAP数据库(参见此)。当我浏览LDAP目录时,这些对象类和属性是可见和可用的 kerio和ldap服务器位于不同的机器上。kerio服务器可以连接到LDAP服务器(kerio admin网站上有一个测试按钮)。在运行kerio server的机器上,我可以运行ldap搜索查询 问题 给定测试L

我正在调查kerio connect电子邮件服务器。我正在努力让kerio和openldap一起工作。LDAP用户和组未出现在kerio中

我已经用Kerio ObjectClass和属性扩展了OpenLDAP数据库(参见此)。当我浏览LDAP目录时,这些对象类和属性是可见和可用的

kerio和ldap服务器位于不同的机器上。kerio服务器可以连接到LDAP服务器(kerio admin网站上有一个测试按钮)。在运行kerio server的机器上,我可以运行ldap搜索查询

问题 给定测试LDAP用户和组,kerio openldap.map是否有效? (我也在kerio论坛上问过:)

LDAP服务器详细信息:

  • 操作系统:Linux 3.11.0-15-generic#23 Ubuntu SMP周一至十二月9日18:16:27 UTC 2013 i686 i686 i686 GNU/Linux
  • OpenLDAP:2.4.31 slapd(Ubuntu)(2013年10月8日20:51:43) buildd@akateko:/build/buildd/openldap-2.4.31/debian/build/servers/slapd
电子邮件服务器详细信息:

  • 操作系统:Debian GNU/Linux 7.4,x86_64
  • Kerio Connect 8.2.4(2550)
openldap.map:

<mapfile>
<map table="User">
<filter>objectclass=kerio-Mail-User</filter>
<active-attribute>kerio-Mail-Active</active-attribute>
<variable>
<name>Name</name>
<value><attribute>uid</attribute></value>
</variable>
<variable>
<name>Account_enabled</name>
<value><attribute>kerio-Mail-AccountEnabled</attribute></value >
</variable>
<variable>
<name>Auth_type</name>
<value>5</value>
</variable>
<variable>
<name>PIN</name>
<value><attribute>kerio-User-AuthPIN</attribute></value>
</variable>
<variable>
<name>Rights</name>
<value><attribute>kerio-Mail-AdminRights</attribute></value >
</variable>
<variable>
<name>Authorization</name>
<value><attribute>kerio-Mail-Authorization</attribute></value >
</variable>
<variable>
<name>Groups</name>
<value><attribute>groupMemberShip</attribute></value>
</variable>
<variable>
<name>MailAddress</name>
<value><attribute>kerio-Mail-Address</attribute></value>
</variable>
<variable>
<name>ForwardMode</name>
<value><attribute>kerio-Mail-ForwardMode</attribute></value >
</variable>
<variable>
<name>ForwardAddress</name>
<value><attribute>kerio-Mail-ForwardAddress</attribute></value >
</variable>
<variable>
<name>HomeServer</name>
<value><attribute>kerio-Mail-HomeServer</attribute></value >
</variable>
<variable>
<name>Qstorage</name>
<value><attribute>kerio-Mail-QuotaStorage</attribute></value >
</variable>
<variable>
<name>Qmessage</name>
<value><attribute>kerio-Mail-QuotaMessage</attribute></value >
</variable>
<variable>
<name>MaxOutgoingMessageSize</name>
<value><attribute>kerio-Mail-MaxOutgoingMessageSize</attribute ></value>
</variable>
<variable>
<name>ReplyToAddress</name>
<value><attribute>kerio-Mail-WebReplyToAddress</attribute ></value>
</variable>
<variable>
<name>Fullname</name>
<value><attribute>cn</attribute></value>
</variable>
<variable>
<name>Description</name>
<value><attribute>description</attribute></value>
</variable>
<variable>
<name>Guid</name>
<value><attribute type="string">apple-generateduid</attribute></value>
</variable>
<variable>
<name>LdapDN</name>
<value><dn /></value>
</variable> 
</map>  
<map table="Group">
<filter>objectclass=kerio-Mail-Group</filter>
<active-attribute>kerio-Mail-Active</active-attribute>
<variable>
<name>Name</name>
<value><attribute>cn</attribute></value>
</variable>
<variable>
<name>MailAddress</name>
<value><attribute>kerio-Mail-Address</attribute></value>
</variable>
<variable>
<name>Rights</name>
<value><attribute>kerio-Mail-AdminRights</attribute></value >
</variable>
<variable>
<name>Authorization</name>
<value><attribute>kerio-Mail-Authorization</attribute></value >
</variable>
<variable>
<name>Description</name>
<value><attribute>description</attribute></value>
</variable>
<variable>
<name>Guid</name>
<value><attribute type="string">apple-generateduid</attribute></value>
</variable>
</map>
</mapfile>
这是LDAP组

version: 1 
dn: cn=Group1,dc=flavia,dc=local
objectClass: kerio-Mail-Group
objectClass: groupOfNames
objectClass: top
cn: Group1
member: cn=keriotestuser,dc=flavia,dc=local
apple-generateduid: a6b5c5d5-7121-4092-9f77-87fefdfebaf4
kerio-Mail-Active: 1
其他可能有用的文件

gal_openldap.map

<mapfile>
<map table="User">
<filter> &amp;(objectclass=kerio-Mail-User)(kerio-Mail-Active=*)( !(kerio-
Mail-Authorization=kms.global.address.list.disabled) ) </filter>
<variable>
<name>Name</name>
<value><attribute>uid</attribute></value>
</variable>
<variable>
<name>Account_enabled</name>
<value><attribute>kerio-Mail-AccountEnabled</attribute></value >
</variable>
<variable>
<name>Fullname</name>
<value><attribute>cn</attribute></value>
</variable>
<variable>
<name>Title</name>
<value><attribute>title</attribute></value>
</variable>
<variable>
<name>TitleBefore</name>
<value><attribute>personalTitle</attribute></value>
</variable>
<variable>
<name>TitleAfter</name>
<value><attribute>generationQualifier</attribute></value >
</variable>
<variable>
<name>GivenName</name>
<value><attribute>givenName</attribute></value>
</variable>
<variable>
<name>MiddleName</name>
<value><attribute></attribute></value>
</variable>
<variable>
<name>Surname</name>
<value><attribute>sn</attribute></value>
</variable>
<variable>
<name>Company</name>
<value><attribute>o</attribute></value>
</variable>
<variable>
<name>Department</name>
<value><attribute>ou</attribute></value>
</variable>
<variable>
<name>HomeAddress</name>
<value><attribute>homePostalAddress</attribute></value>
</variable>
<variable>
<name>BA_pobox</name>
<value><attribute>postOfficeBox</attribute></value>
</variable>
<variable>
<name>BA_room</name>
<value><attribute>roomNumber</attribute></value>
</variable>
<variable>
<name>BA_street</name>
<value><attribute>street</attribute></value>
</variable>
<variable>
<name>BA_city</name>
<value><attribute>l</attribute></value>
</variable>
<variable>
<name>BA_zip</name>
<value><attribute>postalCode</attribute></value>
</variable>
<variable>
<name>BA_state</name>
<value><attribute>st</attribute></value>
</variable>
<variable>
<name>BA_country</name>
<value><attribute>c</attribute></value>
</variable>
<variable>
<name>PN_business</name>
<value><attribute>telephoneNumber</attribute></value>
</variable>
<variable>
<name>PN_home</name>
<value><attribute>homePhone</attribute></value>
</variable>
<variable>
<name>PN_mobile</name>
<value><attribute>mobile</attribute></value>
</variable>
<variable>
<name>PN_isdn</name>
<value><attribute>internationalISDNNumber</attribute></value >
</variable>
<variable>
<name>PN_fax</name>
<value><attribute>facsimileTelephoneNumber</attribute></value >
</variable>
<variable>
<name>PN_pager</name>
<value><attribute>pager</attribute></value>
</variable>
<variable>
<name>PN_telex</name>
<value><attribute>telexNumber</attribute></value>
</variable>
<variable>
<name>PN_ip</name>
<value><attribute>ipPhone</attribute></value>
</variable>
<variable>
<name>PN_other</name>
<value><attribute>otherTelephone</attribute></value>
</variable>
<variable>
<name>PN_otherfax</name>
<value><attribute>otherFacsimileTelephoneNumber</attribute ></value>
</variable>
<variable>
<name>Email</name>
<value><attribute>kerio-Mail-Address</attribute><attribute >mail</attribute></value>
</variable>    
<variable>
<name>Image</name>
<value><attribute>jpegPhoto</attribute></value>
</variable>
<variable>
<name>UrlWork</name>
<value><attribute>labeledURI</attribute></value>
</variable>
<variable>
<name>UrlOther</name>
<value><attribute>apple-webloguri</attribute></value>
</variable>
<variable>
<name>IM_msn</name>
<value><attribute>apple-imhandle ~ MSN:([^\s]+)</attribute></value>
</variable>
<variable>
<name>IM_icq</name>
<value><attribute>apple-imhandle ~ ICQ:([^\s]+)</attribute></value>
</variable>
<variable>
<name>IM_aim</name>
<value><attribute>apple-imhandle ~ AIM:([^\s]+)</attribute></value>
</variable>
<variable>
<name>IM_yahoo</name>
<value><attribute>apple-imhandle ~ Yahoo:([^\s]+)</attribute></value>
</variable>
<variable>
<name>IM_jabber</name>
<value><attribute>apple-imhandle ~ JABBER:([^\s]+)</attribute></value>
</variable>
<variable>
<name>Description</name>
<value><attribute>description</attribute></value>
</variable>
</map>
<map table="Group">
<filter> &amp;(objectclass=kerio-Mail-Group)(kerio-Mail-Address=* )(!(kerio-
Mail-Authorization=kms.global.address.list.disable d)) </filter>
<active-attribute>kerio-Mail-Active</active-attribute>
<variable>
<name>GroupName</name>
<value><attribute>cn</attribute></value>
</variable>
<variable>
<name>Account_enabled</name>
<value><attribute>1</attribute></value>
</variable>
<variable>
<name>Email</name>
<value><attribute>kerio-Mail-Address</attribute></value>
</variable>
<variable>
<name>Description</name>
<value><attribute>description</attribute></value>
</variable>
</map>
</mapfile>
kerio-mailserver.schema

#
# kerio-User attributes and class
#
attributetype ( 1.3.6.1.4.1.10311.1.2.2.1
NAME 'kerio-Mail-Active'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.2
NAME 'kerio-Mail-AccountEnabled'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.0.2.1
NAME 'kerio-User-AuthPIN'
EQUALITY caseExactMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.10311.1.2.2.5
NAME 'kerio-Mail-AdminRights'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.6
NAME 'kerio-Mail-Address'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )  
attributetype ( 1.3.6.1.4.1.10311.1.2.2.7
NAME 'kerio-Mail-ForwardMode'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.8
NAME 'kerio-Mail-ForwardAddress'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.9
NAME 'kerio-Mail-QuotaStorage'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.10
NAME 'kerio-Mail-QuotaMessage'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )  
attributetype ( 1.3.6.1.4.1.10311.1.2.2.24
NAME 'kerio-Mail-Authorization'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )   
attributetype ( 1.3.6.1.4.1.10311.1.2.2.25
NAME 'kerio-Mail-HomeServer'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.10311.1.2.2.26
NAME 'kerio-Mail-MaxOutgoingMessageSize'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.10311.1.2.2.22
NAME 'kerio-Mail-WebReplyToAddress'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.10311.1.2.2.27
NAME 'kerio-Mail-Preferred-Address'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.28 NAME 'groupMemberShip'
EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.10311.1.2.2.29
NAME ( 'apple-generateduid' )
DESC 'generated unique ID'
EQUALITY caseExactMatch
SUBSTR caseExactSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ) 
objectclass ( 1.3.6.1.4.1.10311.2.2.2.1
NAME 'kerio-Mail-User'
AUXILIARY
SUP top
MAY (
kerio-Mail-Active $
kerio-Mail-AccountEnabled $
kerio-User-AuthPIN $
kerio-Mail-AdminRights $
kerio-Mail-Authorization $
kerio-Mail-Address $
kerio-Mail-ForwardMode $
kerio-Mail-ForwardAddress $
kerio-Mail-QuotaStorage $
kerio-Mail-QuotaMessage $
kerio-Mail-HomeServer $
kerio-Mail-MaxOutgoingMessageSize $
kerio-Mail-WebReplyToAddress $
groupMemberShip $
apple-generateduid $
kerio-Mail-Preferred-Address ) )  
objectclass ( 1.3.6.1.4.1.10311.2.2.2.2
NAME 'kerio-Mail-Group'
AUXILIARY
SUP top
MAY (
kerio-Mail-Active $
kerio-Mail-AdminRights $
kerio-Mail-Authorization $
apple-generateduid $
kerio-Mail-Address ) )
cn={4}kerio.ldif

# AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
# CRC32 84e834c7
dn: cn={4}kerio
objectClass: olcSchemaConfig
cn: {4}kerio
olcAttributeTypes: {0}( 1.3.6.1.4.1.10311.1.2.2.1 NAME 'kerio-Mail-Active' EQU
ALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {1}( 1.3.6.1.4.1.10311.1.2.2.2 NAME 'kerio-Mail-AccountEnab
led' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE
)
olcAttributeTypes: {2}( 1.3.6.1.4.1.10311.1.0.2.1 NAME 'kerio-User-AuthPIN' EQ
UALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {3}( 1.3.6.1.4.1.10311.1.2.2.5 NAME 'kerio-Mail-AdminRights
' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
)
olcAttributeTypes: {4}( 1.3.6.1.4.1.10311.1.2.2.6 NAME 'kerio-Mail-Address' EQ
UALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {5}( 1.3.6.1.4.1.10311.1.2.2.7 NAME 'kerio-Mail-ForwardMode
' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {6}( 1.3.6.1.4.1.10311.1.2.2.8 NAME 'kerio-Mail-ForwardAddr
ess' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {7}( 1.3.6.1.4.1.10311.1.2.2.9 NAME 'kerio-Mail-QuotaStorag
e' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
)
olcAttributeTypes: {8}( 1.3.6.1.4.1.10311.1.2.2.10 NAME 'kerio-Mail-QuotaMessa
ge' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALU
E )
olcAttributeTypes: {9}( 1.3.6.1.4.1.10311.1.2.2.24 NAME 'kerio-Mail-Authorizat
ion' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {10}( 1.3.6.1.4.1.10311.1.2.2.25 NAME 'kerio-Mail-HomeServe
r' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
)
olcAttributeTypes: {11}( 1.3.6.1.4.1.10311.1.2.2.26 NAME 'kerio-Mail-MaxOutgoi
ngMessageSize' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
olcAttributeTypes: {12}( 1.3.6.1.4.1.10311.1.2.2.22 NAME 'kerio-Mail-WebReplyT
oAddress' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGL
E-VALUE )
olcAttributeTypes: {13}( 1.3.6.1.4.1.10311.1.2.2.27 NAME 'kerio-Mail-Preferred
-Address' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGL
E-VALUE )
olcAttributeTypes: {14}( 1.3.6.1.4.1.10311.1.2.2.28 NAME 'groupMemberShip' EQU
ALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {15}( 1.3.6.1.4.1.10311.1.2.2.29 NAME 'apple-generateduid'
DESC 'generated unique ID' EQUALITY caseExactMatch SUBSTR caseExactSubstrings
Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcObjectClasses: {0}( 1.3.6.1.4.1.10311.2.2.2.1 NAME 'kerio-Mail-User' SUP to
p AUXILIARY MAY ( kerio-Mail-Active $ kerio-Mail-AccountEnabled $ kerio-User-
AuthPIN $ kerio-Mail-AdminRights $ kerio-Mail-Authorization $ kerio-Mail-Addr
ess $ kerio-Mail-ForwardMode $ kerio-Mail-ForwardAddress $ kerio-Mail-QuotaSt
orage $ kerio-Mail-QuotaMessage $ kerio-Mail-HomeServer $ kerio-Mail-MaxOutgo
ingMessageSize $ kerio-Mail-WebReplyToAddress $ groupMemberShip $ apple-gener
ateduid $ kerio-Mail-Preferred-Address ) )
olcObjectClasses: {1}( 1.3.6.1.4.1.10311.2.2.2.2 NAME 'kerio-Mail-Group' SUP t
op AUXILIARY MAY ( kerio-Mail-Active $ kerio-Mail-AdminRights $ kerio-Mail-Au
thorization $ apple-generateduid $ kerio-Mail-Address ) )
structuralObjectClass: olcSchemaConfig
entryUUID: 4d5c04ba-7616-1033-95f3-55880fae5256
creatorsName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
createTimestamp: 20140522160304Z
entryCSN: 20140522160304.647760Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
modifyTimestamp: 20140522160304Z

openldap的kerio步骤终于奏效了。我只需要像律师一样仔细阅读文件:


问题中的文件应该是正确的。kerio论坛也提供了帮助:

openldap的kerio步骤终于成功了。我只需要像律师一样仔细阅读文档:[从OpenLDAP或通用LDAP服务器映射用户/组][1]问题中的文件应该是正确的。此外,论坛有助于1。[OpenLdap与Kerio邮件服务器的集成][2][1]:[2]:
#
# kerio-User attributes and class
#
attributetype ( 1.3.6.1.4.1.10311.1.2.2.1
NAME 'kerio-Mail-Active'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.2
NAME 'kerio-Mail-AccountEnabled'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.0.2.1
NAME 'kerio-User-AuthPIN'
EQUALITY caseExactMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.10311.1.2.2.5
NAME 'kerio-Mail-AdminRights'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.6
NAME 'kerio-Mail-Address'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )  
attributetype ( 1.3.6.1.4.1.10311.1.2.2.7
NAME 'kerio-Mail-ForwardMode'
EQUALITY integerMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.27
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.8
NAME 'kerio-Mail-ForwardAddress'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.9
NAME 'kerio-Mail-QuotaStorage'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.10
NAME 'kerio-Mail-QuotaMessage'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )  
attributetype ( 1.3.6.1.4.1.10311.1.2.2.24
NAME 'kerio-Mail-Authorization'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )   
attributetype ( 1.3.6.1.4.1.10311.1.2.2.25
NAME 'kerio-Mail-HomeServer'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.10311.1.2.2.26
NAME 'kerio-Mail-MaxOutgoingMessageSize'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.10311.1.2.2.22
NAME 'kerio-Mail-WebReplyToAddress'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
attributetype ( 1.3.6.1.4.1.10311.1.2.2.27
NAME 'kerio-Mail-Preferred-Address'
EQUALITY caseIgnoreMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE ) 
attributetype ( 1.3.6.1.4.1.10311.1.2.2.28 NAME 'groupMemberShip'
EQUALITY caseExactIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
attributetype ( 1.3.6.1.4.1.10311.1.2.2.29
NAME ( 'apple-generateduid' )
DESC 'generated unique ID'
EQUALITY caseExactMatch
SUBSTR caseExactSubstringsMatch
SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE ) 
objectclass ( 1.3.6.1.4.1.10311.2.2.2.1
NAME 'kerio-Mail-User'
AUXILIARY
SUP top
MAY (
kerio-Mail-Active $
kerio-Mail-AccountEnabled $
kerio-User-AuthPIN $
kerio-Mail-AdminRights $
kerio-Mail-Authorization $
kerio-Mail-Address $
kerio-Mail-ForwardMode $
kerio-Mail-ForwardAddress $
kerio-Mail-QuotaStorage $
kerio-Mail-QuotaMessage $
kerio-Mail-HomeServer $
kerio-Mail-MaxOutgoingMessageSize $
kerio-Mail-WebReplyToAddress $
groupMemberShip $
apple-generateduid $
kerio-Mail-Preferred-Address ) )  
objectclass ( 1.3.6.1.4.1.10311.2.2.2.2
NAME 'kerio-Mail-Group'
AUXILIARY
SUP top
MAY (
kerio-Mail-Active $
kerio-Mail-AdminRights $
kerio-Mail-Authorization $
apple-generateduid $
kerio-Mail-Address ) )
# AUTO-GENERATED FILE - DO NOT EDIT!! Use ldapmodify.
# CRC32 84e834c7
dn: cn={4}kerio
objectClass: olcSchemaConfig
cn: {4}kerio
olcAttributeTypes: {0}( 1.3.6.1.4.1.10311.1.2.2.1 NAME 'kerio-Mail-Active' EQU
ALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {1}( 1.3.6.1.4.1.10311.1.2.2.2 NAME 'kerio-Mail-AccountEnab
led' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE
)
olcAttributeTypes: {2}( 1.3.6.1.4.1.10311.1.0.2.1 NAME 'kerio-User-AuthPIN' EQ
UALITY caseExactMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcAttributeTypes: {3}( 1.3.6.1.4.1.10311.1.2.2.5 NAME 'kerio-Mail-AdminRights
' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
)
olcAttributeTypes: {4}( 1.3.6.1.4.1.10311.1.2.2.6 NAME 'kerio-Mail-Address' EQ
UALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {5}( 1.3.6.1.4.1.10311.1.2.2.7 NAME 'kerio-Mail-ForwardMode
' EQUALITY integerMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.27 SINGLE-VALUE )
olcAttributeTypes: {6}( 1.3.6.1.4.1.10311.1.2.2.8 NAME 'kerio-Mail-ForwardAddr
ess' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {7}( 1.3.6.1.4.1.10311.1.2.2.9 NAME 'kerio-Mail-QuotaStorag
e' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
)
olcAttributeTypes: {8}( 1.3.6.1.4.1.10311.1.2.2.10 NAME 'kerio-Mail-QuotaMessa
ge' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALU
E )
olcAttributeTypes: {9}( 1.3.6.1.4.1.10311.1.2.2.24 NAME 'kerio-Mail-Authorizat
ion' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 )
olcAttributeTypes: {10}( 1.3.6.1.4.1.10311.1.2.2.25 NAME 'kerio-Mail-HomeServe
r' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE
)
olcAttributeTypes: {11}( 1.3.6.1.4.1.10311.1.2.2.26 NAME 'kerio-Mail-MaxOutgoi
ngMessageSize' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15
SINGLE-VALUE )
olcAttributeTypes: {12}( 1.3.6.1.4.1.10311.1.2.2.22 NAME 'kerio-Mail-WebReplyT
oAddress' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGL
E-VALUE )
olcAttributeTypes: {13}( 1.3.6.1.4.1.10311.1.2.2.27 NAME 'kerio-Mail-Preferred
-Address' EQUALITY caseIgnoreMatch SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGL
E-VALUE )
olcAttributeTypes: {14}( 1.3.6.1.4.1.10311.1.2.2.28 NAME 'groupMemberShip' EQU
ALITY caseExactIA5Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )
olcAttributeTypes: {15}( 1.3.6.1.4.1.10311.1.2.2.29 NAME 'apple-generateduid'
DESC 'generated unique ID' EQUALITY caseExactMatch SUBSTR caseExactSubstrings
Match SYNTAX 1.3.6.1.4.1.1466.115.121.1.15 SINGLE-VALUE )
olcObjectClasses: {0}( 1.3.6.1.4.1.10311.2.2.2.1 NAME 'kerio-Mail-User' SUP to
p AUXILIARY MAY ( kerio-Mail-Active $ kerio-Mail-AccountEnabled $ kerio-User-
AuthPIN $ kerio-Mail-AdminRights $ kerio-Mail-Authorization $ kerio-Mail-Addr
ess $ kerio-Mail-ForwardMode $ kerio-Mail-ForwardAddress $ kerio-Mail-QuotaSt
orage $ kerio-Mail-QuotaMessage $ kerio-Mail-HomeServer $ kerio-Mail-MaxOutgo
ingMessageSize $ kerio-Mail-WebReplyToAddress $ groupMemberShip $ apple-gener
ateduid $ kerio-Mail-Preferred-Address ) )
olcObjectClasses: {1}( 1.3.6.1.4.1.10311.2.2.2.2 NAME 'kerio-Mail-Group' SUP t
op AUXILIARY MAY ( kerio-Mail-Active $ kerio-Mail-AdminRights $ kerio-Mail-Au
thorization $ apple-generateduid $ kerio-Mail-Address ) )
structuralObjectClass: olcSchemaConfig
entryUUID: 4d5c04ba-7616-1033-95f3-55880fae5256
creatorsName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
createTimestamp: 20140522160304Z
entryCSN: 20140522160304.647760Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
modifyTimestamp: 20140522160304Z