At P&G, email is critical to our employee’s productivity. Migrating our 130,000+ users across 180 countries globally from Notes to Exchange was an enormous undertaking. With Transend’s software, we made the transition smoothly with minimal user impact! Kerio Connect to Kerio Cloud Migration Service For Kerio Connect 8.x and 9.x Migrates: User account, email, calendars, contacts, notes, task, subfolders, shared and public folders to Kerio Cloud. Kerio Outlook Connector (Oine Edition) supports Outlook 2010. Outlook 2010 is not supported by the online version of KOC. Support for iPhone 4 Kerio Connect provides over-the-air synchronization of contacts and calendars between the iPhone 4 (iOS4) and Kerio Connect 7.1 using the new CardDAV and CalDAV protocols.
Note folders in Kerio WebMail can be used to record simple notes. In non-digital world, these notes are represented by loads of colourful stickers used as reminders. One of the great advantages of electronic notes is their central storage and the impossibility of losing them.
Individual notes are organized in a table where users can mark them as completed. Each row contains one note, as well as available information about it (see figure 1.71 Notes).
Figure 1.71. Notes
Note folders are equivalent to other folders. They can be shared, set as public or attached. For more information on shared and public folders, see chapter 1.12 Folder Administration.
In Kerio WebMail, notes are shown in a list including note names, date of creation and specific colours. Colours can be important. Each colour stands for a value. Colours can represent for example topics and areas or levels of importance.
By default, up to 20 notes are listed on one page. To change number of notes displayed on a single page, use the Settings section in Kerio WebMail (see chapter 1.13.1 User Settings).
The detailed information on individual notes is displayed in the columns. Each column enables sorting notes by information. Click the column heading to sort notes in the ascending or descending order (see the arrow next to the column name) by alphabet, time or colour (depending on the column contents).
For listing by subject, items are sorted by the alphabet of the language set in Settings as preferred (the General tab) — for details, see chapter 1.13.1 User Settings. In result, if for example English is set as preferred and subjects are in German, subjects will be ordered by English alphabet and some specific national characters may also cause problems in sorting.
Users can customize the appearance of the table and the information shown. The columns can be added or deleted. Right-click the table header and specify the column settings in the Select fields window. The pop-up menu contains the Change columns option. Checked columns will be shown in the dialog box, unchecked columns will be hidden.
The width of the note list can be adjusted. To change the column width, click between two columns in the table header and drag the cursor right or left as needed.
To create a new note, click on the New note option on the toolbar. A simple yellow window is opened. Any text can be written in the note area. The text of the first line is automatically used as the note's subject. To separate this line from others, use Enter. The other lines are not displayed in the list.
Figure 1.72. Note
The note dialog also includes date and time of the creation and a colour pallet which can be used to select a colour for the current note (yellow is used by default).
The note window can be resized. The parameters set will be kept for future. This means that the window's size and position will be kept for the next time the note is opened.
When finished, save the note by the button (see figure 1.72 Note).
Kerio WebMail allows forwarding of notes in such a format so that it is possible to save them to notes folders. Thanks to this feature we can avoid copying of the note data to an email message and to a new note edit dialog box on the addressee's side.
Kerio WebMail also supports another option. When a message with an note in the attachment is received, the recipient can simply click on the attachment to open the note in the standard note edit dialog box. Click on to confirm settings and save the note to the default personal Notes folder.
To save a contact or open it as an attachment, right-click on it and use one of the options available, Open or Save.
The attachment with the note is sent in a special proprietary format which can be used only in Kerio WebMail or MS Outlook extended by the Kerio Outlook Connector. In other types of email clients the note is displayed only in HTML.
To forward a note, select it by the mouse pointer and click on the icon on the note folder's toolbar (it is also possible to use the corresponding option in the pop-up context menu).
Select a note and click on a corresponding icon to open a message editor where the note is included as an attachment. At this point, simply send the email message.
Let me start with a big disclaimer: I don't fully grok Kerberos and I definitely do not grok how Kerio interfaces with it to get directory service authentication. These notes are therefore somewhat in the realm of 'magic', which is something I really detest in troubleshooting: incant the magic words (or type them correctly, more likely) and things will work. I hate that, but I have neither sufficient time nor a sufficient test environment to dig deeply into the mysteries of Kerberos and Kerio's interaction with it.
Kerio does have a Knowledge Base article: How do I join Kerio Connect running on Linux to Open Directory or Active Directory? that covers the basics and some troubleshooting. That's where you should start, and it may be all you need. If you follow those instructions and don't mistype anything, things are very likely to just work and you can happily move on to the remainder of your configuration.
The Connect user guide also has useful information on Kerberos, including some troubleshooting tips not included in that Knowledge Base article. Microsoft also has tools that can help check from that side of things:.
If things do NOT work, pay attention to the section of those articles that has the heading 'Troubleshooting'. Those are basic tests you can do at the Linux command line to validate your configuration. Until those work, there's no chance Kerio is going to have any luck either.
You might be forgiven for thinking that should actually mean that your configuration is correct if it tests correctly, but it doesn't. Apparently 'The tests checks only AD server availability over LDAP. It does not check Kerberos client configuration'. You need to drop to the command line and run the kinit tool as suggested in that Knowledge Base article to actually test the Kerberos config.
Note: it has been suggested that this 'test' should include a kinit lookup. I suspect this will be added in some future version.
However, even that may not be enough. For example, I had a customer who had entered the correct server address in the Kerio configuration pane, but had referenced the backup domain controller in the Kerberos as though it were the primary. This caused authentication to ALWAYS use the backup domain controller, which led to a very confusing time when he tried shutting down that backup for an upgrade! As he had also accidentally mistyped the IP of the primary (the backup as far as Kerberos knew), that caused an error log full of 'Cannot contact any KDC for requested realm, error code 0x96c73a9c' messages - quite baffling until he noticed the Kerberos configuration error.
Speaking of logs, turning on User Authentication and Directory Service Lookup in the Kerio Debug log can also help you track down odd authentication problems. Without those, Kerio logs won't help you much.
As implied by the title of that KB article, Kerio assumes Microsoft Active Directory or Apple Open Directory. However, because Apple Open Directory is an LDAP configuration, you can use other LDAP servers. Kerio does warn against this:
This is an area where I do have the infrastructure needed to test, but have simply lacked the time and sufficient motivation to set it up.
I'll therefore just note these articles for now and wish you luck:
Another option for directory service authentication is Kerio's own Unity Directory server. This doesn't use Kerberos, which eliminates that part of troubleshooting. Kerio Unity is presently in beta but is probably coming out soon.
I'd really like to set up some test servers here as virtual machines, but I don't presently own any Microsoft server products. If anyone wants to donate a LEGAL non-OEM cd and license, that would help.
On the Apple side, I have Mountain Lion and could upgrade it to Server for $19.99; my only hesitation is not knowing how much and for how long that upgrade is likely to affect my daily work. If anyone reading this has actually done that upgrade, please let me know.
With that infrastructure, I could deploy a 'break it on purpose' campaign and perhaps have more to offer here.
Next: Mountain Lion Server in Parallels Desktop.
Got something to add? Send me email.