[SOLVED] want tzimbra to use my own openldap

[andreika]

Hi all.
I have got openLDAP+samba installed on ubuntu 8.10. I have a lot my own modules etc, so I dont want to use zimbra's openldap, - I want zimbra to use my openLDAP.
to start with, I have installed zimbra on zimbra.local (ubuntu 8.04 machine), and my server server.local (with openLDAP+samba installed).
on my server.local openLDAP is using slapd.d. I have imported zimbra.scheme there, but I cannot import anything more. zimbra needs cn=zimbra, but I cannot add cn=zimbra on my sever:

root@server:/etc/ldap# ldapadd -W -x -D cn=admin,cn=config -f /home/user/zimbra.ldif
Enter LDAP Password:
adding new entry "cn=zimbra"
ldap_add: Server is unwilling to perform (53)
additional info: no global superior knowledge

can you advise anynthing? thanks.

[uxbod]

Welcome to the forums

I would check your LDAP logs as your local install is complaining about something.

[andreika]

I have to add "loglevel -1" in my slapd.conf but I don't have one..

[phoenix]

Originally Posted by andreika

Hi all.
I have got openLDAP+samba installed on ubuntu 8.10. I have a lot my own modules etc, so I dont want to use zimbra's openldap, - I want zimbra to use my openLDAP.
to start with, I have installed zimbra on zimbra.local (ubuntu 8.04 machine), and my server server.local (with openLDAP+samba installed).
on my server.local openLDAP is using slapd.d. I have imported zimbra.scheme there, but I cannot import anything more. zimbra needs cn=zimbra, but I cannot add cn=zimbra on my sever:

root@server:/etc/ldap# ldapadd -W -x -D cn=admin,cn=config -f /home/user/zimbra.ldif
Enter LDAP Password:
adding new entry "cn=zimbra"
ldap_add: Server is unwilling to perform (53)
additional info: no global superior knowledge

can you advise anynthing? thanks.

You cant do that, you have to use the Zimbra openLDAP to provision the users. You can use an external LDAP for authentication but they still have to be provisioned in Zimbra. Am I misunderstanding what you're asking?

[andreika]

directory /opt/zimbra/conf contains ldap-*.cf files. they show zimbra where should it look for openLDAP:

server_host = ldap://zimbra.local:389
server_port = 389

so, I think it is possible to make zimbra use another ldap server, not it's own. for example:

server_host = ldap://server.local:389
server_port = 389

[phoenix]

Originally Posted by andreika

so, I think it is possible to make zimbra use another ldap server, not it's own. for example:

No, it's not. The Zimbra instance of openLDAP is tuned and installed specifically for use in Zimbra, you can't use another instance. Do you think I'd tell you that you can't if it was possible? Trying to use another instance instead of the inbuilt LDAP will not work, believe me.

[andreika]

Originally Posted by phoenix

No, it's not. The Zimbra instance of openLDAP is tuned and installed specifically for use in Zimbra, you can't use another instance. Do you think I'd tell you that you can't if it was possible? Trying to use another instance instead of the inbuilt LDAP will not work, believe me.

Ok, thanks. but could you please explain - why is it impossible?

[uxbod]

Due to modifications to support Zimbra. Try and hack it if you want but no support will be provided. Schema can also change across upgrades so keeping everything up to date would be a knightmare. Trust us it really is not worth your while attempting such a thing.

[phoenix]

Zimbra is a tightly integrated set of components, the LDAP instance is used by many parts of Zimbra especially for provisioning users. Just pointing the url to your own instance will not work, this has been asked before on the forums.

[andreika]

on installing, zimbra asks whether install zimbra-ldap package or no.
I choose no. after that, everythin went okay, i can see this:
Main menu
==============================
1) Common Configuration:
+Hostname: zimbra.local
******* +Ldap master host: UNSET
+Ldap port: 389
******* +Ldap Admin password: UNSET
+LDAP Base DN: cn=zimbra
+Require secure interprocess communications: yes
+TimeZone: (GMT-08.00) Pacific Time (US & Canada)
==============

i don't understand this is it possible to set my own openLDAP host IP? if no, then I dont understand why zimbra asked me about it..?