Koozali.org: home of the SME Server

[solved] zimbra with ldap authentication

Offline pelli

  • ***
  • 66
  • +0/-0
[solved] zimbra with ldap authentication
« on: December 16, 2015, 12:13:00 PM »
hello,

i have problem with ldap authentication and zimbra. For all user i receive auth error. com.zimbra.cs.ldap.LdapException: LDAP error:  - unable to ldap authenticate: invalid credentials

log of ldap on sme:

@40000000567143cc1f528ff4 567143c2 conn=1411 op=43 SRCH base="dc=***,dc=org" scope=2 deref=3 filter="(uid=g*****)"
@40000000567143cc1f63a30c 567143c2 conn=1411 op=43 SEARCH RESULT tag=101 err=0 nentries=1 text=
@40000000567143cc1fa2e274 567143c2 conn=1423 fd=26 ACCEPT from IP=192.168.10.65:43634 (IP=0.0.0.0:389)
@40000000567143cc1fb7973c 567143c2 conn=1423 op=0 BIND dn="uid=g*****,ou=Users,dc=***,dc=org" method=128
@40000000567143cc1fb7a6dc 567143c2 conn=1423 op=0 RESULT tag=97 err=49 text=
@40000000567143cc1fcb752c 567143c2 conn=1423 op=1 UNBIND
@40000000567143cc1fccec2c 567143c2 conn=1423 fd=26 closed

I'm sure that the password is correct. you have any suggestion?

Thanks
« Last Edit: March 03, 2016, 10:59:16 AM by Stefano »

Offline Stefano

  • *
  • 10,894
  • +3/-0
Re: zimbra with ldap authentication
« Reply #1 on: December 16, 2015, 12:53:55 PM »
oh, yes, my friend..

since zimbra is not a SME service nor a contrib, I guess you have another server with it..

you'd tell us how you configured ldap authentication and give us as much details as you can, if you want us to understand whot's going wrong and help you :-)

Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: zimbra with ldap authentication
« Reply #2 on: December 16, 2015, 12:56:13 PM »
Most likely Zimbra is not using any security to bind to LDAP, so it just rejects any password. You have to use SSL (port 636) or TLS (port 389)
C'est la fin du monde !!! :lol:

Offline pelli

  • ***
  • 66
  • +0/-0
Re: zimbra with ldap authentication
« Reply #3 on: December 16, 2015, 02:08:54 PM »
i have configured zimbra in other server (centos 6)

in zimbra i configure LDAP filter uid=%u and LDAP search base "dc=***,dc=org" , Use DN/Password to bind to external server:    No

i use port 389 (no ssl) . if i use ssl i have invalid certificate error

Offline Daniel B.

  • *
  • 1,700
  • +0/-0
    • Firewall Services, la sécurité des réseaux
Re: zimbra with ldap authentication
« Reply #4 on: December 16, 2015, 02:13:03 PM »
i use port 389 (no ssl) . if i use ssl i have invalid certificate error
It won't work. You have to use SSL or TLS. If you can't make Zimbra accept your self signed cert, then you should buy a trusted one (or try the LetsEncrypt how-to)
C'est la fin du monde !!! :lol:

Offline pelli

  • ***
  • 66
  • +0/-0
Re: zimbra with ldap authentication
« Reply #5 on: March 03, 2016, 10:13:31 AM »
Thanks.. i buy ssl certificate and all work  :-)

guest22

Re: zimbra with ldap authentication
« Reply #6 on: March 03, 2016, 10:44:15 AM »
Please add [Solved] to the subject.


@admin, please move to general discussion.