zimbraSambaPassword Extension - LDAP Atribute Name

[ropana]

Hello,

I'm trying sync up Zimbra user passwords with ActiveDirectory 2003. User authentication against AD works just fine, but I'm trying to get password updates from Zimbra's Admin or Web UI to sync up with Zimbra (similar to OWA).

I have installed zimbraSambaPassword v0.1 and based on the installation documentation, it looks like it's installed correctly. However, when trying to change a password, the UI returns an attribute error, specifically,

Invlaid Attribute Name.

2010-01-06 10:00:33,896 INFO  [btpool0-0://localhost/service/soap/ChangePasswordRequest] [ip=127.0.0.1;ua=zclient/6.0.4_GA_2038.RHEL5_64;] security - cmd=SambaChangePasswordListener.preModify; ntPassword=5D58034FEF6ACE60A2BBBF89AFEC5A85;

mailbox.log outputs the following:

2010-01-06 10:07:54,531 INFO  [btpool0-0://localhost/service/soap/ChangePasswordRequest] [ip=127.0.0.1;ua=zclient/6.0.4_GA_2038.RHEL5_64;] soap - ChangePasswordRequest
2010-01-06 10:07:54,655 WARN  [btpool0-0://localhost/service/soap/ChangePasswordRequest] [ip=127.0.0.1;ua=zclient/6.0.4_GA_2038.RHEL5_64;] misc - checkValue: no attribute info for: sambaNTPassword
2010-01-06 10:07:54,655 WARN  [btpool0-0://localhost/service/soap/ChangePasswordRequest] [ip=127.0.0.1;ua=zclient/6.0.4_GA_2038.RHEL5_64;] misc - checkValue: no attribute info for: sambaLMPassword
2010-01-06 10:07:54,700 INFO  [btpool0-0://localhost/service/soap/ChangePasswordRequest] [ip=127.0.0.1;ua=zclient/6.0.4_GA_2038.RHEL5_64;] 

	
	

			
				SoapEngine - handler exception
com.zimbra.cs.account.AccountServiceException: invalid attr name: [LDAP: error code 17 - sambaNTPassword: attribute type undefined]
			
		

ExceptionId:btpool0-0://localhost/service/soap/ChangePasswordRequest:1262790474700:aa1bc9897b2878f4

	
	

			
				Code:account.INVALID_ATTR_NAME
			
		

	at com.zimbra.cs.account.AccountServiceException.INVALID_ATTR_NAME(AccountServiceException.java:169)
	at com.zimbra.cs.account.ldap.LdapProvisioning.modifyAttrsInternal(LdapProvisioning.java:329)
	at com.zimbra.cs.account.ldap.LdapProvisioning.modifyAttrs(LdapProvisioning.java:304)
	at com.zimbra.cs.account.ldap.LdapProvisioning.modifyAttrs(LdapProvisioning.java:285)
	at com.zimbra.cs.account.Provisioning.modifyAttrs(Provisioning.java:302)
	at com.zimbra.cs.account.ldap.LdapProvisioning.setPassword(LdapProvisioning.java:3774)
	at com.zimbra.cs.account.ldap.LdapProvisioning.changePassword(LdapProvisioning.java:3546)
	at com.zimbra.cs.service.account.ChangePassword.handle(ChangePassword.java:66)
	at com.zimbra.soap.SoapEngine.dispatchRequest(SoapEngine.java:418)
	at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.java:272)
	at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.java:156)
	at com.zimbra.soap.SoapServlet.doWork(SoapServlet.java:291)
	at com.zimbra.soap.SoapServlet.doPost(SoapServlet.java:212)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:727)
	at com.zimbra.cs.servlet.ZimbraServlet.service(ZimbraServlet.java:181)
	at javax.servlet.http.HttpServlet.service(HttpServlet.java:820)
	at org.mortbay.jetty.servlet.ServletHolder.handle(ServletHolder.java:511)
	at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1166)
	at org.mortbay.servlet.UserAgentFilter.doFilter(UserAgentFilter.java:81)
	at org.mortbay.servlet.GzipFilter.doFilter(GzipFilter.java:155)
	at org.mortbay.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1157)
	at org.mortbay.jetty.servlet.ServletHandler.handle(ServletHandler.java:388)
	at org.mortbay.jetty.security.SecurityHandler.handle(SecurityHandler.java:216)
	at org.mortbay.jetty.servlet.SessionHandler.handle(SessionHandler.java:182)
	at org.mortbay.jetty.handler.ContextHandler.handle(ContextHandler.java:765)
	at org.mortbay.jetty.webapp.WebAppContext.handle(WebAppContext.java:418)
	at org.mortbay.jetty.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:230)
	at org.mortbay.jetty.handler.HandlerCollection.handle(HandlerCollection.java:114)
	at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
	at org.mortbay.jetty.handler.rewrite.RewriteHandler.handle(RewriteHandler.java:230)
	at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
	at org.mortbay.jetty.handler.DebugHandler.handle(DebugHandler.java:77)
	at org.mortbay.jetty.handler.HandlerWrapper.handle(HandlerWrapper.java:152)
	at org.mortbay.jetty.Server.handle(Server.java:326)
	at org.mortbay.jetty.HttpConnection.handleRequest(HttpConnection.java:543)
	at org.mortbay.jetty.HttpConnection$RequestHandler.content(HttpConnection.java:939)
	at org.mortbay.jetty.HttpParser.parseNext(HttpParser.java:755)
	at org.mortbay.jetty.HttpParser.parseAvailable(HttpParser.java:218)
	at org.mortbay.jetty.HttpConnection.handle(HttpConnection.java:405)
	at org.mortbay.io.nio.SelectChannelEndPoint.run(SelectChannelEndPoint.java:409)
	at org.mortbay.thread.BoundedThreadPool$PoolThread.run(BoundedThreadPool.java:451)
Caused by: javax.naming.directory.InvalidAttributeIdentifierException: [LDAP: error code 17 - sambaNTPassword: attribute type undefined]; remaining name 'uid=anapor,ou=people,dc=test,dc=tecore,dc=com'
	at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3110)
	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2987)
	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2794)
	at com.sun.jndi.ldap.LdapCtx.c_modifyAttributes(LdapCtx.java:1455)
	at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_modifyAttributes(ComponentDirContext.java:255)
	at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.modifyAttributes(PartialCompositeDirContext.java:172)
	at javax.naming.directory.InitialDirContext.modifyAttributes(InitialDirContext.java:153)
	at com.zimbra.cs.account.ldap.ZimbraLdapContext.modifyAttributes(ZimbraLdapContext.java:626)
	at com.zimbra.cs.account.ldap.LdapUtil.modifyAttrs(LdapUtil.java:421)
	at com.zimbra.cs.account.ldap.LdapProvisioning.modifyAttrsInternal(LdapProvisioning.java:326)
	... 39 more

Any ideas?

[maumar]

zimbraSambaPassword regards Zimbra and Samba integration, as you can find here, there is no external authentication

In your scenario, you have Zimbra and external authentication, and zimbraSambaPassword is useless, at all

[ropana]

Thanks for the information.

Is there any way to have users update their passwords through the UI when using external authentication?

[maumar]

Search on bugzilla, there is an RFE related to your requirement.