[SOLVED] LDAP Attribute / Users with Forwarding enabled

[TrinityEMS]

Hello all,
One of our users belonging to the All@ group has enabled mail forwarding. Senders receive a non-delivery message when sending for an address that someone setup as a forwarding address.

The address doesn't provide any detail for who the user is but we need to ensure they are receiving mail.

I was unable to find any way within the zimbra administration to search by forwarding address.

I know I can use "zmprov sa" to run an LDAP query, but I can not find a list of LDAP attributes, specifically the Forwarding address attribute.

Thanks,
Tony

[ArcaneMagus]

zimbraPrefMailForwardingAddress is the attribute name.

[ArcaneMagus]

This gives some error about not being able to convert * to ASCII...but it works:

zmprov sa -v zimbraPrefMailForwardingAddress=* | grep -e "uid" -e "zimbraPrefMailForwardingAddress"

[alexkelly]

As mentioned, the zimbraPrefMailForwardingAddress is where the forwards live. However, It is also possible to set up a mail filter that forwards to an external account. Those live in the zimbraMailSieveScript attribute, but they are part of a script rather than a single key=value, so they are harder to deal with. But you can figure out who has those set by doing a query like:
zmprov sa "(zimbraMailSieveScript=\*redirect\*)"

[TrinityEMS]

Thank you both.

ArcaneMagus - That query worked perfectly.

Is there a listing of the LDAP Attributes that I've missed? where are YOU finding the answers to my questions? Thanks.

[alexkelly]

I get the information from doing

zmprov ga account@domain.com

Then I make the changes that users can make from the client, redo the zmprov command above and figure out what changed.

[TrinityEMS]

alexkelly,
Thanks for the excellent idea.

I assume you've also looked for a list of attributes. Does one not exist?

[ArcaneMagus]

There is no list of LDAP attributes for an account since it changes depending on what has been done on that account or what is enabled. For instance the zimbraPasswordMustChange attribute is only created in LDAP when you click that box in the admin UI...before then it doesn't exist.

I personally use an LDAP browser to actually view the LDAP on the itself...you will need the root LDAP password as well as modifying your Zimbra LDAP configuration to even allow connections if you wanted to do this, however unless you have a specific need to do this it is not recommended.

zmprov ga account@domain.tld

actually gives you all options stored for that user, about half of which don't reside in the LDAP directory, so if all you are doing is reading account attributes the zmprov command is probably a better program to use.

[bwalrave]

FYI, if you're scripting this somehow and need to get results without the error ArcaneMagus talked about earlier, you can use:

zmprov sa "(zimbraPrefMailForwardingAddress=*@*)"

HTH.

[ArcaneMagus]

Cool thanks for the tip