LDAP Auth to Zimbra?

[Xevian]

I'm trying to get my Proxmox setup to auth against Zimbra's LDAP server. I've put the details in but it always returns msg=no entries returned.

How is Proxmox binding? I've always had to bind with with uid=<userid>,ou=people,dc=domain,dc=com . I don't see a way to specify that, a tcpdump seems to show it trying to bind as just ou=people,dc=domain,dc=com

Also, is TLS supported?

 

[dietmar]

I'm trying to get my Proxmox setup to auth against Zimbra's LDAP server. I've put the details in but it always returns msg=no entries returned.

How is Proxmox binding? I've always had to bind with with uid=<userid>,ou=people,dc=domain,dc=com . I don't see a way to specify that, a tcpdump seems to show it trying to bind as just ou=people,dc=domain,dc=com

Also, is TLS supported?

TLS is supported, yes. I have no zimbra server here, so I guess it is best you debug that yourself. You can find the current code in:

https://git.proxmox.com/?p=pve-acce...25d5e178cde7624f5cef275e13f79689e91d2;hb=HEAD

Function name is authenticate_user_ldap()

 

[Xevian]

Ahh, That was pretty quick.. Zimbra isn't setup for anonymous binds, I'd rather not enable it either. Should have thought of it!

It should be pretty trivial to add user to bind as for the search. Also, a filter would be handy on the search too, check if the account is locked before the bind attempt.

 

[Xevian]

and I just noticed, there isn't a start_tls() in there, so it's not using it.. I may have a hack at adding this all this week.

 

[dietmar]

and I just noticed, there isn't a start_tls() in there, so it's not using it.. I may have a hack at adding this all this week.

I am not sure If we want to add all those things. Instead you can write some kind of import script which runs from cron.