Apparently zmprov copies the behaviour of ldapsearch and doesnt't show the attribute userPassword without authentication (for good reasons).
Easieest way to get it anyway is to use ldapsearch from the cli:
Code:
ldapsearch -H ldap://hostname:389 -x -w <yourldappassword> -D "uid=zimbra,cn=admins,cn=zimbra" uid=<domainuser> | grep userPassword
Get your ldappassword by running:
Code:
zmlocalconfig -s | grep zimbra_ldap_password
Run all commands as user Zimbra.