Configure an LDAP Address Book in Thunderbird: A Practical Setup Guide

Thunderbird can query an LDAP directory to find people while you browse the Address Book or address an email. The phrase “LDAP sync” can be misleading: this setup connects Thunderbird to a shared directory for searches; it does not create a two-way, offline copy of contacts. If you need contact changes to synchronize across devices, ask your administrator whether the service offers CardDAV or another supported synchronization method.

Before you begin, get the connection details from the directory administrator. Do not guess the search base or turn off encryption to make a connection work. LDAP access may expose employee names, email addresses, and other organization data, so use only an approved server and account.

What to get from your directory administrator

The examples are placeholders. A Base DN that is valid for one organization may return no results in another. The administrator should also confirm that your account is allowed to search the directory and that the server certificate is trusted by your device.

Add the LDAP directory

1. Open Thunderbird’s Address Book. Depending on your operating system and layout, use the Address Book button, the Tools menu, or the keyboard shortcut shown in Thunderbird.
2. In the Address Book window, choose the command to add a new address book or directory, then select the LDAP directory option. In some versions, the command is under File > New > LDAP Directory. Menu names can vary by Thunderbird version.
3. Enter a recognizable name, such as “Company Directory,” so you can distinguish this server from local address books.
4. Enter the LDAP server’s hostname and Base DN exactly as supplied by the administrator. Do not enter an email address in the Hostname field.
5. Set the port and secure-connection option to match the server. The Mozilla help page describes port 389 as the default and port 636 when its SSL secure-connection option is selected. Your organization may use a different port or security arrangement, so its instructions take precedence.
6. Enter the Bind DN or username if required. If anonymous search is explicitly allowed, leave authentication fields empty. Save the directory settings.

Thunderbird may prompt for a password when it first searches. Enter the credential for the LDAP bind identity, not automatically the password for your email account. Store it only if your device is protected and your organization permits saved credentials.

Choose the directory for address lookup

Adding a directory makes it available to Thunderbird; it may not automatically enable it for every email account. To use it while composing a message, open Account Settings, select the account, and open Composition & Addressing. Under the address-lookup setting, choose the global LDAP preferences or select the directory for that account. Thunderbird’s current account help documents this setting and the link to Global Addressing Preferences. If your version uses a different label, look in the account’s Composition & Addressing panel and the global Composition or Addressing preferences.

For the global setting, open Thunderbird’s Settings or Preferences and find the Composition/Addressing controls. Enable address lookup through a directory server if that option is available, then select the LDAP directory you added. If the account offers its own directory selector, check each account that should use LDAP. This matters when you have multiple email identities: one account can use a company directory while another uses only local address books.

Test the connection before relying on autocomplete

1. Open the Address Book and select the LDAP directory.
2. Search for a colleague using a name or email fragment that the administrator confirms should match.
3. Check that the result shows the expected person and address. Do not assume a blank result means the server is down; the search base, permissions, or directory’s search rules may be responsible.
4. Open a new message and type a known name or address in the recipient field. Wait briefly for suggestions, then select the intended entry.
5. Confirm the completed address before sending. Autocomplete is a lookup aid, not a guarantee that an old or ambiguous directory entry is still correct.

Common problems and what to check

Know what this connection does—and does not do

LDAP is a protocol for accessing directory information. Thunderbird’s LDAP address-book connection is intended for looking up directory entries; it should not be treated as an editor or a full contact-synchronization client. In many organizations, users can search contacts but cannot create or change directory records. Contact edits must go through the organization’s approved directory-management process.

If your goal is to keep a personal address book synchronized between Thunderbird and a phone or another computer, ask whether your provider supports CardDAV. CardDAV and LDAP are different services, even though both can provide contact information. Choose the protocol the server actually supports rather than entering CardDAV details into LDAP settings.

Setup checklist

• You have the administrator-approved hostname, Base DN, port, security mode, and authentication details.
• The LDAP directory appears in Thunderbird’s Address Book.
• A test search returns the expected contact.
• The correct email account is configured to use the directory for address lookup.
• A test recipient suggestion appears, and you can verify the selected address before sending.

Mozilla’s LDAP address-book documentation describes the directory fields and an Active Directory example; it notes that the documentation is incomplete, and its menu labels may reflect an older interface. For current account-level address lookup options, see Thunderbird’s Configuration Options for Accounts. The protocol and authentication background is defined in the IETF’s LDAP protocol specification and LDAP authentication and security specification.