[SOLVED] OpenLDAP Migration to Zimbra's LDAP Version

[hoahongdenH]

@phoenix : Thask You ! I has been repaired problem! But GAL search don't result . i think problem by fliter of GAL. My fliter "(|(cn=%s*)(sn=%s*)(givenName=%s*)(mail=%s*))" . can You help me more !

i'm form vietnames !

[phoenix]

What happens if you try an ldapsearch on your external LDAP with those settings?

[hoahongdenH]

--------------------------------------------------------------------------------------

my system : server1 (externalLDAP) <-----------> server2(zimbra suite)                
      * DOMAIN        "asianux.com"        ;        asianux.com IN A 192.168.1.40          
      * MAIL SERVER "mail.asianux.com"     ;        mail.asianux.com IN A 192.168.1.41

--------------------------------------------------------------------------------------
server1# ldapsearch -x -b "dc=asianux,dc=com" "(objectclass=*)"

........................................
# root, Users, asianux.com
dn: uid=root,ou=Users,dc=asianux,dc=com
cn: root
sn: root
objectClass: top
objectClass: person
objectClass: organizationalPerson
objectClass: inetOrgPerson
objectClass: sambaSamAccount
objectClass: posixAccount
objectClass: shadowAccount
gidNumber: 0
uid: root
uidNumber: 0
homeDirectory: /home/root
sambaLogonTime: 0
sambaLogoffTime: 2147483647
sambaKickoffTime: 2147483647
sambaPwdCanChange: 0
sambaHomePath: \\linuxpc\root
sambaHomeDrive: H:
sambaProfilePath: \\linuxpc\Profiles\root
sambaPrimaryGroupSID: S-1-5-21-2475993415-691327342-2526492752-512
....................................

this is detail
http://i229.photobucket.com/albums/e...gdenH/add2.png
http://i229.photobucket.com/albums/e...gdenH/add3.png
http://i229.photobucket.com/albums/e...gdenH/add5.png
http://i229.photobucket.com/albums/e...gdenH/add6.png
http://i229.photobucket.com/albums/e...gdenH/add7.png
http://i229.photobucket.com/albums/e...gdenH/add8.png

[hoahongdenH]

@phoenix: sorry if i maked noise!
I went to the Authentication Configuration Wizard to configure for external LDAP. I've entered search base, filter, and bind DN, and the Test at the end of the wizard succeeds.
But, when I go to log in as the same user that I used for the test, login fails. Also, should the internal admin still be able to login. If not, how is the administrator determined? The internal admin cannot login in either when external authentication is enabled.
I use to googling And step-by-step but i can't sucess!
sorry for poor English ! sorry!

[tribear]

Bill,

I set the external ldap server up and the "test" was sucessful - however when using the Web Client and searching the Global Contact List - I get no results and auto complete is failing to find local accounts nor contacts listed in the external ldap. Suggestions on a debug of this ?

Steven

[hoahongdenH]

Originally Posted by tribear

I set the external ldap server up and the "test" was sucessful - however when using the Web Client and searching the Global Contact List - I get no results and auto complete is failing to find local accounts nor contacts listed in the external ldap. Suggestions on a debug of this ?

hi tribear ! I'm too do ! i guess this ploblem is filter LDAP and zimbra (wizard config external LDAP) But I unknow the solutions.

[ArcaneMagus]

Originally Posted by hoahongdenH

when I go to log in as the same user that I used for the test, login fails. Also, should the internal admin still be able to login. If not, how is the administrator determined? The internal admin cannot login in either when external authentication is enabled.

Simply setting your server to external authentication does not magically configure accounts on the Zimbra server, it merely allows them to authenticate against an external server.

If you can still log into the admin console you need to provision the accounts locally on the Zimbra server before they will be able to authenticate against the external server. For your admin account to login (to the web mail client?) it too would need to exist in the external authentication source.

Since you are trying to do something entirely different from what tribear is doing, you might want to start your own thread.

Originally Posted by tribear

when using the Web Client and searching the Global Contact List - I get no results and auto complete is failing to find local accounts nor contacts listed in the external ldap.

Tribear do you see anything in /var/log/mailbox.log that might relate to this?

[hoahongdenH]

Thask all! I has a better Day ! I fixed pb ! I love everybody !