hope I've got the right subforum, and am not repeating someone elses posts, but I couldn't find quite this collection of problems.

Zimbra network edition trial, just figured out how to pass off authentication to the active directory server, but have not yet been able to query the domain controller to use it as a global address list.

the error that the GAL test gives mentions there being no route to host, but it's the same hosts I've configured zimbra to use for authentication.

No, scratch that; I can also get this error

Code:
javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C09030B, comment: AcceptSecurityContext error, data 525, v893
by changing the bind DN from user@domain to simply user.
Yes, I'm sure I got the password correct