I have an AD server I'm trying to auto-provision users for. I had issues with EAGER where it would only pull users once, then never pull any new users, so I decided to try lazy provisioning, but that's not working either.

The error I'm seeing in the Zimbra log is:

com.zimbra.cs.account.AccountServiceException: no such external entry: testuser
ExceptionId:qtp1326809171-3186:http://127.0.0.1:80/service/soap/Aut...dfbcdbd1cf6160
Code:account.NO_SUCH_EXTERNAL_ENTRY
at com.zimbra.cs.account.AccountServiceException.NO_S UCH_EXTERNAL_ENTRY(AccountServiceException.java:27 5)
at com.zimbra.cs.account.ldap.AutoProvision.getExtern alAttrsByName(AutoProvision.java:385)

My guess is the zimbraAutoProvLdapSearchFilter is not set correctly, currently it's "CN=Users,DC=mydomain,DC=com"

Does anyone know the correct values I should use in the zimbraAutoProvLdapSearchFilter or zimbraAutoProvLdapBindDn attributes to make this work?