Zimbra 8 Auto Provisioning not work

breno.sobral · Post by **breno.sobral** » Thu May 09, 2013 4:12 pm

Hello,
I'm trying to setup Eager Mode Auto-Provisioning to AD, but no account has been created. What's wrong in my configuration ?
--> My AutoProvision settings:
zimbra@zimbrasrv:~/log$ zmprov gd zimbrateste.com.br |grep AutoProv

zimbraAutoProvAccountNameMap: samAccountName

zimbraAutoProvAttrMap: sn=sn

zimbraAutoProvAttrMap: description=description

zimbraAutoProvBatchSize: 20

zimbraAutoProvLastPolledTimestamp: 20130509184543Z

zimbraAutoProvLdapAdminBindDn: cn=administrator,cn=users,dc=techlead,dc=local

zimbraAutoProvLdapAdminBindPassword: xxxxxxxx

zimbraAutoProvLdapBindDn: %u@%d

zimbraAutoProvLdapSearchBase: cn=users,dc=techlead,dc=local

zimbraAutoProvLdapSearchFilter: (&(objectClass=user)(mail=*zimbrateste.com.br))

zimbraAutoProvLdapStartTlsEnabled: FALSE

zimbraAutoProvLdapURL: ldap://tldsv01.techlead.local:3268

zimbraAutoProvMode: EAGER

zimbraAutoProvNotificationBody: Your account has been auto provisioned. Your email address is ${ACCOUNT_ADDRESS}.

zimbraAutoProvNotificationSubject: New account auto provisioned

zimbra@zimbrasrv:~/log$ zmprov gs zimbrasrv.zimbrateste.com.br |grep AutoProv

zimbraAutoProvPollingInterval: 1m

zimbraAutoProvScheduledDomains: zimbrateste.com.br

--> I created a new user account "teste.email" in AD:
zimbra@zimbrasrv:~/log$ ldapsearch -h tldsv01.techlead.local -D "cn=administrator,cn=users,dc=techlead,dc=local" -b "cn=users,dc=techlead,dc=local" -W -x "(&(objectClass=user)(mail=*zimbrateste.com.br))"

Enter LDAP Password:

# extended LDIF

#

# LDAPv3

# base with scope subtree

# filter: (&(objectClass=user)(mail=*zimbrateste.com.br))

# requesting: ALL

#

# Teste U. Email, Users, techlead.local

dn: CN=Teste U. Email,CN=Users,DC=techlead,DC=local

objectClass: top

objectClass: person

objectClass: organizationalPerson

objectClass: user

cn: Teste U. Email

sn: Email

description: Usuario teste de email

givenName: Teste

initials: U

distinguishedName: CN=Teste U. Email,CN=Users,DC=techlead,DC=local

instanceType: 4

whenCreated: 20130509170225.0Z

whenChanged: 20130509181404.0Z

displayName: Teste U. Email

uSNCreated: 183975

uSNChanged: 184029

name: Teste U. Email

objectGUID:: DO7ED8HQTUWzUEUKCgBy+A==

userAccountControl: 512

badPwdCount: 0

codePage: 0

countryCode: 0

badPasswordTime: 0

lastLogoff: 0

lastLogon: 0

pwdLastSet: 0

primaryGroupID: 513

objectSid:: AQUAAAAAAAUVAAAADv5JqYJJOLlcQlq3YgQAAA==

accountExpires: 9223372036854775807

logonCount: 0

sAMAccountName: teste.email

sAMAccountType: 805306368

userPrincipalName: teste.email@techlead.local

objectCategory: CN=Person,CN=Schema,CN=Configuration,DC=techlead,DC=local

dSCorePropagationData: 16010101000000.0Z

mail: teste@zimbrateste.com.br

--> Out mailbox.log:

2013-05-09 15:56:43,123 INFO [AutoProvision] [] autoprov - 0 external LDAP entries returned as search result

2013-05-09 15:56:43,123 INFO [AutoProvision] [] autoprov - Auto Provisioning has finished for now, setting last polled timestamp: 20130509185643Z

2013-05-09 15:56:43,127 INFO [AutoProvision] [] autoprov - Sleeping for 60000 milliseconds.

2013-05-09 15:57:43,129 INFO [AutoProvision] [] autoprov - Auto provisioning accounts on domain zimbrateste.com.br

2013-05-09 15:57:43,132 INFO [AutoProvision] [] autoprov - 0 external LDAP entries returned as search result

2013-05-09 15:57:43,132 INFO [AutoProvision] [] autoprov - Auto Provisioning has finished for now, setting last polled timestamp: 20130509185743Z

2013-05-09 15:57:43,136 INFO [AutoProvision] [] autoprov - Sleeping for 60000 milliseconds.

2013-05-09 15:58:43,138 INFO [AutoProvision] [] autoprov - Auto provisioning accounts on domain zimbrateste.com.br

2013-05-09 15:58:43,141 INFO [AutoProvision] [] autoprov - 0 external LDAP entries returned as search result

2013-05-09 15:58:43,147 INFO [AutoProvision] [] autoprov - Auto Provisioning has finished for now, setting last polled timestamp: 20130509185843Z

2013-05-09 15:58:43,151 INFO [AutoProvision] [] autoprov - Sleeping for 60000 milliseconds.

bdial · Post by **bdial** » Fri May 10, 2013 6:46 am

one thing. try changing your search base to CN=Users,DC=techlead,DC=local
Might not be the issue but I seem to remember encountering a time once where for some reason not using caps for CN, DC caused problems

breno.sobral · Post by **breno.sobral** » Fri May 10, 2013 7:27 am

bdial,
I changed, but the problem continues:
zimbra@zimbrasrv:~/log$ zmprov gd zimbrateste.com.br |grep AutoProv

zimbraAutoProvAccountNameMap: samAccountName

zimbraAutoProvAttrMap: sn=sn

zimbraAutoProvAttrMap: description=description

zimbraAutoProvBatchSize: 20

zimbraAutoProvLastPolledTimestamp: 20130510101751Z

zimbraAutoProvLdapAdminBindDn: cn=administrator,cn=users,dc=techlead,dc=local

zimbraAutoProvLdapAdminBindPassword: Dqm90vnc

zimbraAutoProvLdapBindDn: %u@zimbrateste.com.br

zimbraAutoProvLdapSearchBase: CN=Users,DC=techlead,DC=local

zimbraAutoProvLdapSearchFilter: (&(objectClass=user)(mail=*zimbrateste.com.br))

zimbraAutoProvLdapStartTlsEnabled: FALSE

zimbraAutoProvLdapURL: ldap://tldsv01.techlead.local:3268

zimbraAutoProvMode: EAGER

zimbraAutoProvNotificationBody: Your account has been auto provisioned. Your email address is ${ACCOUNT_ADDRESS}.

zimbraAutoProvNotificationSubject: New account auto provisioned

zimbra@zimbrasrv:~/log$ tail -f mailbox.log|grep AutoProvision

2013-05-10 07:17:51,414 INFO [AutoProvision] [] autoprov - Auto provisioning accounts on domain zimbrateste.com.br

2013-05-10 07:17:51,417 INFO [AutoProvision] [] autoprov - 0 external LDAP entries returned as search result

2013-05-10 07:17:51,417 INFO [AutoProvision] [] autoprov - Auto Provisioning has finished for now, setting last polled timestamp: 20130510101751Z

2013-05-10 07:17:51,420 INFO [AutoProvision] [] autoprov - Sleeping for 60000 milliseconds.

2013-05-10 07:18:51,422 INFO [AutoProvision] [] autoprov - Auto provisioning accounts on domain zimbrateste.com.br

2013-05-10 07:18:51,425 INFO [AutoProvision] [] autoprov - 0 external LDAP entries returned as search result

2013-05-10 07:18:51,425 INFO [AutoProvision] [] autoprov - Auto Provisioning has finished for now, setting last polled timestamp: 20130510101851Z

2013-05-10 07:18:51,430 INFO [AutoProvision] [] autoprov - Sleeping for 60000 milliseconds.

2013-05-10 07:19:51,432 INFO [AutoProvision] [] autoprov - Auto provisioning accounts on domain zimbrateste.com.br

2013-05-10 07:19:51,435 INFO [AutoProvision] [] autoprov - 0 external LDAP entries returned as search result

2013-05-10 07:19:51,435 INFO [AutoProvision] [] autoprov - Auto Provisioning has finished for now, setting last polled timestamp: 20130510101951Z

2013-05-10 07:19:51,440 INFO [AutoProvision] [] autoprov - Sleeping for 60000 milliseconds.

Thanks,
Breno

bdial · Post by **bdial** » Fri May 10, 2013 9:48 am

have you treid using the standard ldap port instead of the global catalog port?