[SOLVED] Zimbra's LDAP server

[tiger2000]

Dear All,

try to use "ldapsearch" command to get user's ldap information, and i found there's no "userPassword" attribute ??

does anyone know why, or where does zimbra store user's passwd?
Thanks.


e.g.
ldapsearch -h 192.168.1.17 -p 389 -b "ou=people,dc=example,dc=com" -x -a never -D "uid=admin,ou=people,dc=example,dc=com" -W

command returns:

dn: uid=kevin.hsu,ou=people,dc=example,dc=com
zimbraMailTransport: lmtp:mailz.example.com:7025
zimbraMailDeliveryAddress: kevin.hsu@example.com
sn: kevin.hsu
zimbraMailStatus: enabled
zimbraId: 48273705-03eb-4f19-a315-e25bb295a514
mail: kevin.hsu@example.com
displayName: kevin.hsu
uid: kevin.hsu
objectClass: organizationalPerson
objectClass: zimbraAccount
objectClass: amavisAccount
cn: kevin.hsu
zimbraMailHost: mailz.example.com

[ArcaneMagus]

The user's password (and many other attributes) are hidden from binds of all users but the root LDAP user. General users or anonymous binds do not see this information.

[tiger2000]

Thanks for your reply.

So, what's the User DN for "LDAP root user" ?

running zmlocalconfig, i found there's one : zimbra_ldap_userdn = uid=zimbra,cn=admins,cn=zimbra , is this one the LDAP root UserDN?

Thanks.

[ArcaneMagus]

Yep that's the one I use at least.

[tiger2000]

i'm sorry, but i can't have this work :

ldapsearch -h 192.168.1.19 -p 389 -D "uid=zimbra,cn=admins,cn=zimbra" -b "ou=people,dc=example,dc=com" -x -a never -W

still returned: ldap_bind: Invalid credentials (49)

i'm sure my ldap root passwd is correct, i even also tried to reset it by : zmldappasswd -r new_password

any advice ? Thanks in advance.

[ArcaneMagus]

Hmmm only suggestion that I have is to try using -H instead of -h and -p. The following works perfectly for me:

ldapsearch -H "ldap://email.domain.com:389" -D "uid=zimbra,cn=admins,cn=zimbra" -b "ou=people,dc=domain,dc=com" -x -a never -W

[tiger2000]

Thanks so much.

and i found my problem is that i entered the wrong password.

originally i thought i should enter the passwd of "ldap_root_password" and this is not correct. People should use the passwd of "zimbra_ldap_password".

mark it as solved. Thanks.

[ArcaneMagus]

Interesting, good to know. On my system they are the same which is probably why it has always worked for me