External LDAP

[jaguado]

Hi, just a couple of days ago I downloaded the Network Edition of ZCS 4.0 to analyze and test for a posible purchase in the incoming months. We already have an OpenLDAP authentication server so I really need to integrate Zimbra with this one. After reading the wiki and the forums I managed to provide a working filter string. The test run without problems but when I am trying to use the same user/password I got user/pass incorrect. Any ideas on what is going on?

LDAP Details

Authentication mechanism: External LDAP
AD domain name:
LDAP URL: ldap://trueno.fresh-it.com:389
LDAP filter: (mail=%n@fresh-it.com)
LDAP search base: ou=people,dc=fresh-it,dc=com
Use DN/Password to bind to external server: No

Regards.

[phoenix]

Surely you want the ldap filter without the @....., shouldn't it be: LDAP filter: (mail=%n). When the user types his name+domain it will get authenticated against that.

[jaguado]

Thank you very much for your quick answer. I think the problem is that the account must be provisioned to Zimbra prior to authentication. I have tried all this filters successfully:

uid=%u
mail=%n

[phoenix]

Originally Posted by jaguado

Thank you very much for your quick answer. I think the problem is that the account must be provisioned to Zimbra prior to authentication.

Ah sorry, I'd assumed you had done that. Yes the accounts will need to be provisioned first. If you have a lot of users then you can add them with a script, I think there's something in the wiki about it.