Good morning all,
I hope I can find some help here because I don't know what to do.

In the last 2 days, some users' password change every 5 minutes. Of course are not the users to change the password, neither me.
From audit.log I see this :
2012-11-22 11:45:06,121 INFO [btpool0-37032://localhost:7071/service/admin/soap/SetPasswordRequest] [name=zimbra;ip=127.0.0.1;ua=zmprov/7.2.0_GA_2669;] security - cmd=SetPassword; name=xxx@xxxx.xx;
Every 5 minutes, precise like a cronjob (and of course I don't have any cronjob that could change the password)
I have, in order : changed admin password, made my account not ad admin account, added a password to user zimbra, closed up the firewall (even the port 80), but with no luck. Still changing every 5 minutes.
One thing I may try is rebooting the server.

Like I said, I don't know what to do now, because I don't have any idea where this thing is from.
Thank you all