External Ldap user attributes

[jherington]

Hello,

I have been reading through the ldap wikis also various forum posts. I am tring to understand what I "should" find in the external ldap when I add a new zimbra mail user from the admin console. I have successfully configured and tested authentication against the external ldap.

1) Going forward will I need to manually add new zimbra users to both my external ldap and zimbra?
2) Do I need to set the zimbraAuthMech attribute or was this set within the admin console when I ran the External Ldap config?
3) Do I need to set the password in both External Ldap and zimbra or can I leave zimbra blank...or something?
4) Right now both zimbra and the external ldap passwords will work...I think I would prefer to not have passwords for regular (non-admin) users on the internal ldap...is this possible?

Thanks!