Results 1 to 7 of 7

Thread: Moving LDAP

  1. #1
    Join Date
    Aug 2009
    Posts
    19
    Rep Power
    6

    Default Moving LDAP

    I recently installed Zimbra and have been asked to provide an LDAP server that we can authenticate against.

    I'm using Ubuntu 10.04 for my LDAP server and would like to import the LDAP database from Zimbra (zmslapcat) and import it into the Ubuntu LDAP. I haven't spent that much time with the new LDAP configuration and want to know how to create the appropriate schema from my Zimbra data.

    Code:
    slapadd -v -d 6 -l ldap.bak 
    send_ldap_result: err=0 matched="" text=""
    hdb_db_open: "dc=example,dc=com"
    slapadd: line 1: database #1 (dc=example,dc=com) not configured to hold "cn=zimbra"; no database configured for that naming context
    Code:
    dn: cn=zimbra
    objectClass: organizationalRole
    description: Zimbra Systems Application Data
    cn: zimbra
    structuralObjectClass: organizationalRole
    entryUUID: 
    creatorsName: cn=config
    createTimestamp: 20100513184745Z
    entryCSN: 
    modifiersName: cn=config
    modifyTimestamp: 20100513184745Z
    Or can I get some pointer to somewhere else that may be able to help? Then I'll come back and figure out how to get a production server to use the remote LDAP (ahhh!).

  2. #2
    Join Date
    Sep 2006
    Location
    477 Congress Street | Portland, ME 04101
    Posts
    1,374
    Rep Power
    11

    Default

    Quote Originally Posted by supradave View Post
    I recently installed Zimbra and have been asked to provide an LDAP server that we can authenticate against.

    I'm using Ubuntu 10.04 for my LDAP server and would like to import the LDAP database from Zimbra (zmslapcat) and import it into the Ubuntu LDAP. I haven't spent that much time with the new LDAP configuration and want to know how to create the appropriate schema from my Zimbra data.

    Code:
    slapadd -v -d 6 -l ldap.bak 
    send_ldap_result: err=0 matched="" text=""
    hdb_db_open: "dc=example,dc=com"
    slapadd: line 1: database #1 (dc=example,dc=com) not configured to hold "cn=zimbra"; no database configured for that naming context
    Code:
    dn: cn=zimbra
    objectClass: organizationalRole
    description: Zimbra Systems Application Data
    cn: zimbra
    structuralObjectClass: organizationalRole
    entryUUID: 
    creatorsName: cn=config
    createTimestamp: 20100513184745Z
    entryCSN: 
    modifiersName: cn=config
    modifyTimestamp: 20100513184745Z
    Or can I get some pointer to somewhere else that may be able to help? Then I'll come back and figure out how to get a production server to use the remote LDAP (ahhh!).
    There is a wiki article: LDAP Authentication - Zimbra :: Wiki

    Hope that helps,
    Mark

  3. #3
    Join Date
    Aug 2009
    Posts
    19
    Rep Power
    6

    Default

    Thanks for that. I'll keep that in mind when I get to that step. I need to know how to import in the current Zimbra LDAP db into the remote LDAP db.

  4. #4
    Join Date
    Sep 2006
    Location
    477 Congress Street | Portland, ME 04101
    Posts
    1,374
    Rep Power
    11

    Default

    Quote Originally Posted by supradave View Post
    Thanks for that. I'll keep that in mind when I get to that step. I need to know how to import in the current Zimbra LDAP db into the remote LDAP db.
    Zimbra adds their own schema file to LDAP. I don't believe you can use their schema legally except within Zimbra itself. You'll therefore need to strip out from the dumped ldif all of the Zimbra schema-specific items before importing the remainder of the ldif file into your separate LDAP server.

    Again, why not just start with an external LDAP server and have Zimbra auth against it?

    I guess I'm not clearly understanding the use case here...

    All the best,
    Mark

  5. #5
    Join Date
    Aug 2009
    Posts
    19
    Rep Power
    6

    Default

    I would like to take my user base in Zimbra, allow authentication from other servers from the non-Zimbra LDAP.

    So my dn's are
    Code:
    dn: uid=supradave,ou=people,dc=example,dc=com
    It shouldn't be too hard to import just that and the userPassword?

  6. #6
    Join Date
    Sep 2006
    Location
    477 Congress Street | Portland, ME 04101
    Posts
    1,374
    Rep Power
    11

    Default

    If I understand what you are trying to do correctly, I think you might be making things harder on yourself than they need to be.

    Why not just have users auth against Zimbra's LDAP directly? You can always set up a Zimbra LDAP replica to lighten the load if needed on your main Zimbra LDAP server.

    Search the forums for "Samba" and you'll see how others have used a Zimbra server to create a competitor to Microsoft Small Business Server. In that case, Zimbra;s LDAP becomes the backend for an entire Active Directory replacement.

    In your proposed use case, wouldn't you have to re-export the Zimbra LDAP every time a user changed a password or you added/deleted/changed an a mailbox user (and then re-import it into the other LDAP server)?

    Please let me know if I am missing anything!

    Hope that helps,
    Mark

  7. #7
    Join Date
    Sep 2005
    Location
    Sydney, Australia
    Posts
    291
    Rep Power
    10

    Default

    yeah I tried this recently and gave up after ldap refused to start once enabling the nis schema. Interested to see how you go. I only gave up after 20mins of trying though - I am sure it is possible.
    http://www.solutionsfirst.com.au/hosting/zimbra/
    Australia's premier Zimbra Hosting Partner
    Resellers wanted!

Similar Threads

  1. Moving 'promoting' LDAP - a bit lost
    By fruitwerks in forum Administrators
    Replies: 4
    Last Post: 04-05-2010, 08:34 AM
  2. Moving to new external LDAP server
    By Mark Daniel in forum Administrators
    Replies: 1
    Last Post: 03-30-2009, 01:41 PM
  3. LDAP Cannot bind on migration to new server
    By neekster in forum Migration
    Replies: 23
    Last Post: 03-09-2009, 03:08 AM
  4. Replies: 8
    Last Post: 08-07-2008, 06:18 AM
  5. 3 testing: LDAP: 389 Failed when restore zimbra
    By victorLeong in forum Administrators
    Replies: 15
    Last Post: 05-24-2007, 07:45 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •