ldap browsing with Zimbra Authentication (not anonymous/zimbra admin)?

Is there a way to allow Zimbra users (i.e. who have accounts in the Zimbra mail servers), to browse the LDAP tree?

I can browse the LDAP tree using zimbra admin e.g.:

ldapsearch -D "uid=zimbra,cn=admins,cn=zimbra" -w ##### -x -H ldap://zimbraserver:389 "uid=test"

I can also enable anonymous browsing by enabling anonymous (running as zimbra: libexec/zmldapanon -e)

But I've tried "ldapsearch -D "uid=test,dc=people,dc=mydomain,dc=com" -w ##### -x -H ldap://zimbraserver:389 "uid=test" (mydomain.com is sanitised and not my real base DN of course)
ldap_bind: Invalid credentials (49)

So it looks like normal Zimbra users are unable to connect to the Zimbra LDAP tree? I just feel that having anonymous bind is not a good idea.

have you got this sorted out?
i wanted to know how since i need to get owncloud to use zimbra ldap's user logins

The error clearly indicates either the DN you bound as is wrong, or the password was wrong. Zimbra definitely allows browsing for authenticated users by default, or authenticated + anonymous if you enable anonymous access.

I've the same problem here, what is the correct DN for a normal user ?

Quote:

---

Originally Posted by flavio.tv

I've the same problem here, what is the correct DN for a normal user ?

---

Ok, I've found it ! "uid=username,ou=people,dc=mydomain,dc=com"