GAL not working with Active Directory

[ardiederich]

Ok, now I have the pattern. If I'm logged in on the webclient and update the Active Directory with a new email address, say, even new searches will not find the data until I've logged out and back in to the webclient.

The debug window for firefox didn't show much, just "NEW RUN" nad a timestamp. For grins I clicked "mark", and got an error:
AjxDebug is not defined (Ajax_all.js.zgz (line 3222)
if(!AjxDebug._timestampFormatter({

But that doesn't have anything to do with my issues.

Short version: It works! Thanks for all the help.

[shouvik]

Hello,

I am new to Zimbra, hence my question may sound a bit novice-like. I want Zimbra to use Active Directory for authenctication(AD on another server in the same domain). Exchange is hosted externally and not in house. When i configure authentication, it completes the test succesfully. But GAL configuration with Active Direcrtory test fails with the following error:

javax.naming.AuthenticationException: [LDAP: error code 49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, vece

I know I have to create the users separately on zimbra as they is there is no user account sync. But how do I create a mechanism where Active Directory password changes will be reflected in Zimbra.

Speedy response will be appreciated as Im in the process of evaluating Zimbra.

Regards,

Shouvik

[schemers]

According to these threads (via a google search of "AcceptSecurityContext error, data 525,"), it means a bad/unknown username:

http://forum.java.sun.com/thread.jspa?threadID=552621

http://forum.java.sun.com/thread.jspa?messageID=4227692

If you are using AD for authentication then there is no need to sync passwords to Zimbra, as it just uses AD for auth.

[carnold]

Using 5.0.1 OSS on sles10. Trying to get GAL working with AD. We have auth working with AD. When configuring the GAL, here is the summary:
GAL mode:
External
Most results returned by GAL search:
100
Server type:
Active Directory
LDAP URL:
ldap://dc0.domain.tld:389
LDAP filter:*
LDAP search base:
OU=Personal,ou=Contacts,dc=electrichendrix,dc=com
Use DN/Password to bind to external server:
Yes
Bind DN:
@domain.tld
Please provide a search term*

The test succeeds but does not return any results. These contacts in AD are not zimbra users. I have tried "both", LDAP and a search term i know is in the contacts in AD; still nothing. What am i doing wrong?