zimbradomainadmins in 6.0

[mrjohnsen]

Hi,
We just upgraded to 6.0 and are having some problems defining new domain admins. In the help section I found out that I just should choose Administrator and admin role: zimbradomainadmins. The only zimbradomainadmin i can use is zimbradomainadmin@serverFQDN but then the account will be domain admin of serverFQDN, not the accounts domain. What to do?

[jbsolutios]

We are having the same problem. Did you find a solution please?

[Klug]

I looked at the zmsetup.log to know how it's done.

So, for domain pwait.com, here's what I did :

/opt/zimbra/bin/zmprov -m -l cdl zimbraDomainAdmins@pwait.com zimbraIsAdminGroup TRUE zimbraMailStatus disabled zimbraAdminConsoleUIComponents accountListView zimbraAdminConsoleUIComponents aliasListView zimbraAdminConsoleUIComponents DLListViewzimbraAdminConsoleUIComponents resourceListView zimbraAdminConsoleUIComponents saveSearch
/opt/zimbra/bin/zmprov -m -l grr domain pwait.com grp zimbraDomainAdmins@pwait.com +domainAdminConsoleRights
/opt/zimbra/bin/zmprov -m -l grr global grp zimbraDomainAdmins@pwait.com +domainAdminZimletRights

This is supposed to create a zimbraDomainAdmins Distribution List in which I'll be able to put my domain admins for this domain.

When I do so (checking the user as "administrator" and giving him the "Administrator Role" zimbraDomainAdmins@pwait.com), the user is able to log in the admin UI.

But...
Everything is empty.

Exactly like this bug that is supposed to be fixed/verified: Bug 38588 : zimbradomainadmins group isn't assigning any views to an admin

[dave_kempe]

I had to configure some direct grants for the domainadmin for him to be useful.
for each domain admin, you need to add these grants in the grants tab:
adminconsoleresourcerights
domainadminaccountrights
adminconsoledlrights
createaccount
and set the target name to the domain you want to grant the user access too.

[Klug]

I'll try that, Dave, thank you.

I posted a comment in the bug but can not re-open it 8-(

[rotorboy]

Oh this is proving rather messy. I just setup a client on here after months of trying to convince them how good this setup is. Now I have had to tell them the admin function doesn't work correctly right now.