Connect to ldapserver with Privileged Account

[korablikovas]

Hello,

i'm doing some synchronization tests with my AD Server and Zimbra. Read about syncing scripts, and the common usage is to extract data from AD via ldapsearch, and insert into zimbra with zmprov.
If possible, i'd like to sync users with ldap command-lines. But the only way i can connect to zimbra ldapserver is anonymous. I tried to make a ldapmodify but i need an user to authenticate:

ldapmodify -x -h 192.168.5.91 -f file.ldif
modifying entry "uid=testuser,ou=people,dc=domain,dc=com"
ldapmodify: Strong(er) authentication required (8)
additional info: modifications require authentication

I tried to authenticate as many ways, '-D uid=admin', '-D uid=admin,ou=people,dc=domain,dc=com', '-D admin@domain' etc...

There's a way to authenticate with the admin user? Or to create an user to connect directly to the ldapserver with write permissions?

[phoenix]

Originally Posted by korablikovas

There's a way to authenticate with the admin user? Or to create an user to connect directly to the ldapserver with write permissions?

You don't say which version of Zimbra you're using (nor if it's a new install or update), if it's 6.x then read the Release Notes about anonymous bind.

[korablikovas]

Ah sorry about that..
I'm running a new install of the zcs-5.0.16_GA_2921.UBUNTU8_64 version.

Cheers,

[ArcaneMagus]

You can authenticate as the root ldap user using "uid=zimbra,cn=admins,cn=zimbra" and the root password which can be found from `zmlocalconfig -s zimbra_ldap_password`.

Be warned though that this user has write access to the entire LDAP database...