[SOLVED] External LDAP Authentication

[otisthegbs]

I'm using an external LDAP for authentication for my domain but my LDAP's SSL certificate is self-assigned. As a result Zimbra will not accept it, how can I force this?

[bdial]

you need to import it into zimbra so it trusts it. i forget the exact syntax but search these forums and the wiki and you should find it

[otisthegbs]

Yep I found a couple of pages from the forum that gave me a push in the right direction. Thanks for the keywords to search for. I also found though that this applies slightly different if you're running a Mac Open Directory server and and a Mac Zimbra server.
You need to copy the Mac's OD ssl cert which is located in /etc/certificates/Default.crt to the Zimbra /tmp directory, then issue this command
sudo keytool -import -keystore /System/Library/Frameworks/JavaVM.framework/Versions/1.5/Home/lib/security/cacerts -storepass changeit -alias LDAPAUTH -file /tmp/Default.crt
That's it.
Cheers