[SOLVED] ldap browser

[manOfmoods]

I have some problem to edit ldap using extra LDAP browsers. It's all good using anonymous mode. But i need to pass authorization to see the whole information, and to be able to edit information.

1) What login and password should I use?

I tried to get password using zmldappasswd, but it didn't passed. I've read common instructions here (Zimbra Directory Service) and understand that it is not recommended to use ldap browsers.

2) How to edit slapd.conf?
This file (/opt/zimbra/conf/slapd.conf) is rewrited to original everytime ldap is restarted.

Thanks in advance

[phoenix]

Do not edit the Zimbra LDAP, you will most likely break your server. Any modifications will get overwritten during an upgrade.

[manOfmoods]

Thanks for reply, but

Originally Posted by manOfmoods

I've read common instructions here (Zimbra Directory Service) and understand that it is not recommended to use ldap browsers.

In this post Migrating from Postfix + LDAP to Zimbra is a decision how to pass authorization in ldap browser:

su - zimbra
zmlocalconfig -s | grep -i password

What pair of login/password is correct to this case? I tried user: zimbra; password: zimbra_ldap_password with no success.

Originally Posted by manOfmoods

2) How to edit ldap restrictions? Is slapd.conf correct place?
This file (/opt/zimbra/conf/slapd.conf) is rewrited to original everytime ldap is restarted.
Thanks in advance

What file should I edit to manage ldap directly without zmprov and web interface?

Thanks for attention.

[manOfmoods]

I found answer on the second question. As far as I understand one can modify slapd.conf.in to prevent rewriting to the original file on ldap restart. I'm a new zimbra user and now testing what features Zimbra can provide. I understand that it's quit dangerous to edit ldap manually but If some day it will be necessary to do, i want to know how

I still can't pass authorization in ldap browser. Now i can enter in anonymous mode. But in this mode not all attributes are shown and edit mode is disabled (according to the restrictions in slapd.conf).

I read some posts on this forum and learn that it is possible to connect to zimbra ldap with ldap browser. What login/pass will pass using default zimbra installation? Any ideas how to do that are welcome

[bdial]

you want ot auth as uid=zimbra,cn=admins,cn=zimbra

you should be able to retrieve the password wtih the command

su - zimbra
zmlocalconfig -s | grep zimbra_ldap_password

[manOfmoods]

Thank you, bdial.

I tried to auth, using: login: uid=zimbra,cn=admins,cn=zimbra; password: zimbra_ldap_password. And it's work.
The problem was in wrong login. I tried to auth with login: zimbra, password: zimbra_ldap_password.

The problem is solved. Thanks for replies.

[eethore]

wow, this thread is solving my problems...

so the user DN will be:
uid=zimbra,cn=admins,cn=zimbra

and we can retrieve the ldap password by console:
zmlocalconfig -s | grep zimbra_ldap_password

thanks!

i will try this config using external application that i need by using ldap from zimbra.