[SOLVED] Zimbra / Samba / LDAP - RHEL 5.5

[todd_dsm]

Hey all, I'm doing the zimbra/samba integration on zcs6.x. Did it on zcs5.x - works like a charm. There are a few bits that are hanging me up where my education lacks: ldap.

So, per the instructions, I login to the Admin UI and remove the root alias. Then:
$ smbpasswd -a root
(results in...)
ldapsam_add_sam_account: failed to modify/add user with uid = root (dn = uid=root,ou=people,dc=ptest,dc=us)
Failed to add entry for user root.
Failed to modify password entry for user root


Then I stumbled on to this while verifying some other accounts:
$ pdbedit -Lv root
smbldap_search_domain_info: Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=OFFICE ))]
smbldap_open_connection: connection opened
ldap_connect_system: successful connection to the LDAP server
smbldap_search_domain_info: Searching for:[(&(objectClass=sambaDomain)(sambaDomainName=OFFICE ))]
smbldap_open_connection: connection opened
ldap_connect_system: successful connection to the LDAP server
init_sam_from_ldap: Entry found for user: root
Unix username: root
NT username: root
Account Flags: [U ]
User SID: S-1-5-21-4271799304-169516444-1328410124-1000
Primary Group SID: S-1-5-21-4271799304-169516444-1328410124-513
Full Name: root
Home Directory:
HomeDir Drive: H:
Logon Script: root.vbs
Profile Path:
Domain: OFFICE
Account desc:
Workstations:
Munged dial:
Logon time: 0
Logoff time: never
Kickoff time: never
Password last set: Sun, 12 Sep 2010 19:40:56 CDT
Password can change: Sun, 12 Sep 2010 19:40:56 CDT
Password must change: never
Last bad password : 0
Bad password count : 0
Logon hours : FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF

I'm not really sure what I'm doing wrong. Or why it seems to be working anyway but it's got a mid-level creep factor.

If anyone has some insights I would sure appreciate the input in this area.

Thanks in advance,

TT

[todd_dsm]

Quanah helped me figure this one out. The ACLs needed to be opened up a bit to allow userPassword to be written by zmposixroot. It's tested and the documentation has been updated. You can find it here:

UNIX and Windows Accounts in Zimbra LDAP and Zimbra Admin UI 6.0 - Zimbra :: Wiki