Active Directory Auth but no Accounts visible

[mmrc-mike]

Dear all,

I installed a new ZCS 8 on Ubuntu 12.04. I set up the GAL after a posting I found here with some special LDAP Query instead of the native AD mode, it's working fine. But for the User Authentification I used the native AD mode and if I test the connection in the admin interface it's working fine, but in the Accounts overview, I don't see any accounts and cannot log in as a domain user.

Do I have to change the Authentification to native LDAP as well and build the query for that, or is there something else I am missing?


THanks in advance
Michael

Edit: the logfile just tells me that the account which is working fine when I set it up is not found

==> /opt/zimbra/log/mailbox.log <==
2013-02-15 17:41:59,068 INFO [qtp1761849498-1946:http://127.0.0.1:80/service/soap/AuthRequest] [oip=10.10.10.121;ua=zclient/8.0.2_GA_5569;] SoapEngine - handler exception: authentication failed for [micha], account not found
2013-02-15 17:41:59,068 INFO [qtp1761849498-1946:http://127.0.0.1:80/service/soap/AuthRequest] [oip=10.10.10.121;ua=zclient/8.0.2_GA_5569;] soap - AuthRequest elapsed=4

[phoenix]

I used the native AD mode and if I test the connection in the admin interface it's working fine, but in the Accounts overview, I don't see any accounts and cannot log in as a domain user.

Have you actually provisioned any users on the Zimbra server (you must)?

[mmrc-mike]

Yeah thanks bill!

On the weekend I took a look into autoprovisioning and now it works. I can authentificate my users on the windows domain, using kerberos and mail accounts are create automatically.

Just one more questions, how does it work with the forced password change? Our users need to change the passwords at least every 3 month, does the zimbra AD integration, ldap integration support these things? I guess that KRB5 cannot support it anyway.


best regards