Okay, so I solved this... I was getting errors about globalgrant everywhere, creating new CoSs, stats, certs, etc... so I poked around in LDAP and saw that I had no cn=globalgrant,cn=zimbra. So on a whim I tried creating a blank one, and it works!
You should be somewhat familiar with LDAP. TAKE A BACKUP BEFORE YOU DO THIS! If you destroy LDAP tree and all your data, don't complain!
First, Take a look at the LDAP source ldif (
http://zimbra.imladris.sk/download/s...ap/zimbra.ldif), specifically the bottom where it references globalgrant.
Next, figure out your ldap username and password. This can be done many ways, but i used:
source ~/bin/zmshutil; zmsetvars; echo $zimbra_ldap_userdn $zimbra_ldap_password
Then, fire up your favorite LDAP browser (if you are on Windows try Softerra LDAP administrator; free trial). Connect to your zimbra server using the credentials above and a base dn of 'cn=zimbra'.
If cn=globalgrant,cn=zimbra does not exist, create it. Use the ldif above as a template, but the most important part is making sure objectclass is set to zimbraAclTarget. If you use Softerra, there's a wizard to help you out. The only other field you need is the description (don't know if it's critical, but I put it in).
Everything should start working immediately. Good luck!
BTW, I started getting these errors after an upgrade from 5.0.19 to 6.0.5. I don't know why but somewhere in the upgrade process this cn wasn't created or was removed. I'm running CentOS 5.4 x64 on vmware.