GAL Bind DN permission problem with AD

[rjpaw]

Server OS: RHEL 4
Zimbra Ver: 3.2B2

AD info:
Windows Server 2003 SP1


I'm hoping someone can point me in the right direction here. I've got ZCS up and running, and to save time during my test phase here, I used the Domain Admin account as the Bind DN in the GAL setup wizard. Worked great. Now I'm locking everything down as the final part of my test, and created a new account to be used as the Bind DN, but get an error ever time I try to use the new account.
To test, I've even made the new account a memeber of Domain Admins (even went so far as to make it the Ent Admin) thinking it may be a permissions issue, but so far, I can't get it work with that new account.

LDAPseach doesn't work from the command line either (only with the new account), so I'm pretty sure this is an AD problem. The error I get returned is:
ldap_bind: Invalid credentials (49)
additional info: 80090308: Ldaperr: DSID-0C090334, Comment: AcceptSecurityContext eror, data 525, vece

Finally, I did research the problem in AD before I posted this and found that there's special permissions that need to be set to allow an account to be used for LDAP searches in AD as per this article http://www.petri.co.il/anonymous_lda...ws_2003_ad.htm. While that deals with anon. access to LDAP searches in AD, I applied the same procedures to the account that I created, and still no luck.

Any help anyone can offer would be appreciated.

Thanks in advance

[KevinH]

"Invalid credentials (49)" can also mean wrong password. Are you sure the password is right?

[schemers]

You are getting "data 525", which seems to imply invalid user, per:

http://forum.java.sun.com/thread.jspa?messageID=4227692

525 - user not found
52e - invalid credentials
530 - not permitted to logon at this time
532 - password expired
533 - account disabled
701 - account expired
773 - user must reset password