migrating / using an openldap external server for zimbra

[sevilla]

Im using right now an openldap server with all my users with their passwords. I want migrate from maildir/openldap to zimbra.

What could i did? use my exist openldap server to auth my users on zimbra or import that users to the zimbra LDAP?

[bdial]

you could do either.

i'd advise keeping yoru existing ldap server in case you want to use it for other means as well. it can be very hazardous messing with the zimbra ldap server trying to extend it for other purposes and those changes will often be wiped out upon upgrade. so i'd recommend keeping your existing ldap and just authing zimbra against it.

[sevilla]

could you show me the steps do i need to auth zimbra with my actual ldap?

[bdial]

once you have zimbra installed just go to the web admin under domains, then click on the authentication tab and choose external ldap. then you just need your standard stuff like base dn, filter, etc..

[sevilla]

thanks.. i'll try it. So, which will be the use of the internal ldap?

[sevilla]

i sucess use my external ldap to auth.. but, do i need create all the same accounts on the zimbra server?

[bdial]

yeah, search teh wiki i think there might be info about batch importing accounts from ldap

[sevilla]

I check some batchs to do that, but, i need an automatic tool to import automatly users from my external ldap. I have a webtool to add/delete users from my external ldap. Exist any tool to update the new users to zimbra ldap and add automatic the new users?

[bdial]

no there is no built in tool to do that. one way I have always thought of doing it would be to run a cron job on the zimbra server that queries the ldap server for accounts created within the past x minutes and if it finds any run zmprov to provision the account. you could also try to modify your web tool to create users in zimbra as well if you're programming savvy. there are a few php soap examples in the forum here to do it if you search around.

[sevilla]

thanks for your help...
All apear to be running well. I have another question..

If the user want change their password, the new password isnt changed on the external ldap. why isnt changed if the auth metod is using an external LDAP?