Installing ZCS 5 with external OpenLdap Database

[phoenix]

Yes, you will have two passwords as we don't have any facility to synchronise the two LDAP databases. I believe there's an RFE in bugzilla if you'd care to search and vote.

If you really want to have the same password in both locations then you should be able to extract the passwords from your external LDAP and modify the Zimbra passwords via zmprov.

[Grejao]

Ok, thanks .

i change password for all users at ZCS internal database and disable change password. All users can use only access from external database, that are my database for domain controller too.

[mmorse]

Originally Posted by Grejao

Ok, i do all steps and now my ZCS can authenticate at my external ldap database .

The problem now are that all users can login with 2 passwords, from zimbra internal database and password from external database.

Some things to try:
zmprov gd domain.com | grep zimbraAuth

What's zimbraAuthMech set to - zimbra or external?
zmprov md domain.com zimbraAuthMech external

This value comes into play when you don't get a response from external:
zmprov md domain.com zimbraAuthFallbackToLocal FALSE
(Admin will always have a 'fallback' incase you don't have connectivity to your external auth Bug 5106 - always fall back to local auth for admin UI?)

Perhaps null out the passwords:
zmprov ma user@domain.com ‘’

You can also go to admin console > COS and disable the ability to change passwords in the advanced tab.

[mmorse]

Originally Posted by Grejao

Ok, thanks .
i change password for all users at ZCS internal database and disable change password. All users can use only access from external database, that are my database for domain controller too.

lol - I had a bunch of tabs open to reply to, and when I did just saw that you already answered like 30min ago.