Findings OK after mucking around and creating a new domain and testing I found it worked for the new domain but not the original domains so something was up with the domain configuration. Using zmprov gad -v and looking at the domain settings I found the only differences have come from a change made earlier in the setup when we wanted to search both domain GALs. I followed mmorse's post where we set an external GAL search to the second domain on the same Zimbra server (here's part of the post):
You could use both internal & 'external' GAL lookups against yourself so that A<>B and B<>A (use the GAL wizard):
DomainA:
GAL: both
Server type: LDAP
LDAP url: ldap://serverwithldapservice.domain.com:389
LDAP filter: (uid=%u) parenthesis included
Autocomplete filter: It should autofill with externalLdapAutoComplete, but doesn't always do so the first round of setting up; though it will show up after you apply. (but you could add it now if wanted/if it requires you to in an error at the end)
LDAP search base: dc=domainB,dc=com ("" might coax search across all domains)
Bind DN: shouldn't need to bother - but you could always do something like cn=admin,dc=domain,dc=com
DomainB:
GAL: both
Server type: LDAP
LDAP url: ldap://serverwithldapservice.domain.com:389 ssl 636 if desired
LDAP filter: (uid=%n) parenthesis included
Autocomplete filter: ignore unless you can't click finish/test gives error/error in mailbox.log then enter externalLdapAutoComplete
LDAP search base: dc=domainA,dc=com
Bind DN: ignore
LDAP Filter notes:
(uid=%u) - The user has a uid attribute value in the external directory equal to the user portion of the Zimbra user account.
(uid=%n) - Entire Zimbra user account is used to identify user in the external directory.
or even (&(|(cn=*%s*)(sn=*%s*)(gn=*%s*)(mail=*%s*)(zimbr aM ailDeliveryAddress=*%s*) (zimbraMailAlias=*%s*)(zimbraMailAddress=*%s*))(|( objectclass=zimbraAccount)(objectclass=zimbraDistr ibutionList)))
I then changed this to use ROOT for the zimbraGalLdapSearchBase & zimbraGalInternalSearchBase even though I was no longer using an external GAL lookup the settings remained in the domain config. This is the only thing I can see that might have caused the issue.
All working now (I renamed the original domains and created a new domains and then moved all the accounts to the fresh domain). |