I have the following questions about setting an active directory, that already has users and a domain, (i.e. internaldomain.edu) and real domain (i.e mydomain.edu.), and I have seeing many examples of the integration of AD with linux and usually they have a domain like intranet.mydomain.edu. Should I change "internaldomain.edu" to intranet.mydomain.edu or to mydomain.edu, or I can leave that internaldomain.edu like it is and create another domain. I am a littlebit confused with these, I know one is the windows domain but I dont know if that affects my email users.
So to answer my own question it doesnt matter if you have different domains, in the ldap search base you select the domain of the Active Directory to look for your users. I still have problems with AD and Zimbra, but these answers my question.
Even though this is really late, its probably worth answering for someone else.
I have 5 domains hosted on my Zimbra server. Each and everyone of them authenticate back to an AD Server with one domain, abc.internal.
In each domain configuration for the authentication mechanism is as followd:
Authentication mechanism: External Active Directory
LDAP bind DN template:
The important thing is, your email user name has to be the same as the user name on the Active Directory server - the template appends abc.internal to that user name. So email@example.com actually authenticates as firstname.lastname@example.org.
We had several users that didn't have email logins that were the same as their Active Directory login. I just added their Active Directory login as the email address and aliased their old address to it. The can login with either the user name or the alias name (which redirects to the user name) without a problem.