Closed Bug 503074 Opened 15 years ago Closed 15 years ago

Cannot access LDAP Outlook Global Addressbook

Categories

(Thunderbird :: Address Book, defect)

x86
Windows XP
defect
Not set
normal

Tracking

(Not tracked)

RESOLVED DUPLICATE of bug 308118

People

(Reporter: miloofr, Unassigned)

Details

User-Agent:       Mozilla/5.0 (Windows; U; Windows NT 5.1; fr; rv:1.9.1) Gecko/20090624 Firefox/3.5
Build Identifier: version 2.0.0.22 (20090605)

Normally, it is possible to access the GAL (global addressbook list) of Outlook by creating an LDAP addressbook inside Thunderbird. However, there is no option to force thunderbird addressbook to use SPA (secure password authentication) to access the Outlook addressbook. 
It appears that in my enterprise, in order to access the Outlook addressbooks, I need to activate an option in Outlook (2003) addressbook LDAP access : "connect with SPA". If it is not switched on, the access fails inside Outlook, proving that it is necessary to have it activated.
This option is non-existent in the LDAP addressbook configuration in thunderbird, so that it is not possible to connect to the Outlook LDAP. 

Reproducible: Always

Steps to Reproduce:
1.Create an LDAP addressbook 
2. fill all the fields
3. access LDAP in a new email for ex.
Actual Results:  
Thunderbird asks for a password, you give him the right password (the "windows" one), nothing happens.

Expected Results:  
When searching in the LDAP addressbook, it should ask for the password once, then propose different names according to the 1st letters you typed.
This was fixed in current TB3 trunk, by introducing GSSAPI (Kerberos) authentication. See bug 308118
Version: unspecified → 2.0
Thank you for the information. However I tried Thunderbird 3 beta 2, I did the same as described above, but it gives exactly the same symptoms, so that it is not possible to access Outlook Global contact list through LDAP connection.
It was landed after beta 2 freeze, will be included in beta 3. Also this is not same as SPA authentication, but can give you working solution if you are joined windows domain.
Ok, I was just realising it should be in beta 3. However, about SPA authentication, can you precise please ? What do you mean by "can give you working solution if you are joined windows domain" ?
SPA is just NTLM authentication if I'm not mistaken. For SMTP/POP3/IMAP TB can get NTLM authetication via SSPI (which is same GSSAPI for windows). I doubt if it working for LDAP, because it was intended to give only Kerberos authentication(could be wrong). If your workstation joined into windows domain, this will give you seamless access to LDAP address book no need for login password. But if you are not, there no Kerberos tickets and no way to get access to ldap address book.
Duping to bug 308118 then.
Try ftp://ftp.mozilla.org/pub/mozilla.org/thunderbird/nightly/latest-comm-1.9.1/
Status: UNCONFIRMED → RESOLVED
Closed: 15 years ago
Resolution: --- → DUPLICATE
You need to log in before you can comment on or make changes to this bug.