zmprov checking encrypted passwords?

[useopenid]

I'm moving some mail accounts from another type of mail server into zimbra; the old server uses standard "{ssha}" hashed passwords, which zimbra imports with:

zmprov ca user@domain '{ssha}alskdjflkjaalsdkfjlkjasdflkjasdlfjalskdfjaj '

Three of the accounts fail with this error however:
ERROR: account.INVALID_PASSWORD (invalid password: not enough numeric characters)

I'm not sure what's going on here --- I don't believe zmprov is really cracking them in a split second unless it's doing a short dictionary attack and they're really simple passwords.

I just realized all three of the affected accounts have pw hashes that don't have numbers in them: it looks like the validity check is treating them as plaintext even though they're not...

[tiger2000]

It seems that "zmprov ca" doesn't accept encrypted string as passwd, but
"zmprov ma" does.

so, have you tried to :

zmprov ca account@domain 111111
(111111 is tmp passwd)

and then use "ma" to set passwd :

zmprov ma account@domain userPassword '{crypt}xxxxxxxx'

not sure if this helps.

[useopenid]

Yes, in fact that's what I discovered last night and that approach in fact worked...