Thanks Sebastian....I had tried your suggestion..still no luck...please see the log entry....i had crated an new user in AD named as "boat"...but that not able to authenticate to mail server using auto provision.Log says authentication failed for [
boat@kimshisnet.com], account not found...!
new auto provision script.
md kimshisnet.com zimbraAutoProvMode LAZY
md kimshisnet.com zimbraAutoProvAccountNameMap "samAccountName"
md kimshisnet.com +zimbraAutoProvAttrMap description=description
md kimshisnet.com +zimbraAutoProvAttrMap displayName=displayName
md kimshisnet.com +zimbraAutoProvAttrMap givenName=givenName
md kimshisnet.com +zimbraAutoProvAttrMap cn=cn
md kimshisnet.com +zimbraAutoProvAttrMap sn=sn
md kimshisnet.com zimbraAutoProvAuthMech LDAP
md kimshisnet.com zimbraAutoProvBatchSize 40
md kimshisnet.com zimbraAutoProvLdapAdminBindDn "CN=doveldap,OU=GLOBAL,DC=kimshisnet,DC=com"
md kimshisnet.com zimbraAutoProvLdapAdminBindPassword "xxxxx"
md kimshisnet.com zimbraAutoProvLdapBindDn "CN=doveldap,OU=GLOBAL,DC=kimshisnet,DC=com"
md kimshisnet.com zimbraAutoProvLdapSearchBase "dc=kimshisnet,dc=com"
md kimshisnet.com zimbraAutoProvLdapSearchFilter "(cn=%u)"
md kimshisnet.com zimbraAutoProvLdapURL "ldap://192.168.x.xx:389"
md kimshisnet.com zimbraAutoProvNotificationBody "Your account has been auto provisioned. Your email address is ${ACCOUNT_ADDRESS}. Password will be same as your windows password"
md kimshisnet.com zimbraAutoProvNotificationFromAddress
prov-admin@kimshisnet.com
md kimshisnet.com zimbraAutoProvNotificationSubject "New account auto provisioned"
ms mailnew.kimshisnet.com zimbraAutoProvPollingInterval "1m"
ms mailnew.kimshisnet.com +zimbraAutoProvScheduledDomains "kimshisnet.com"
MAIL LOG ENTRY
2019-03-05 10:51:43,631 INFO [MailboxPurge] [name=
ham.a2oidgww@mailnew.kimshisnet.com;mid=7;] purge - Purging messages.
2019-03-05 10:51:53,421 INFO [qtp509886383-67968:
http://127.0.0.1:80/service/soap/AuthRequest] [oip=192.168.1.7;ua=zclient/8.6.0_GA_1153;] account - unable to auto provisioing acct
boat@kimshisnet.com
com.zimbra.cs.ldap.LdapException: LDAP error: - unable to search ldap: referral
ExceptionId:qtp509886383-67968:
http://127.0.0.1:80/service/soap/AuthRe ... 7638371840
Code:ldap.LDAP_ERROR
at com.zimbra.cs.ldap.LdapException.LDAP_ERROR(LdapException.java:90)
at com.zimbra.cs.ldap.unboundid.UBIDLdapException.mapToLdapException(UBIDLdapException.java:74)
at com.zimbra.cs.ldap.unboundid.UBIDLdapException.mapToExternalLdapException(UBIDLdapException.java:84)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.mapToLdapException(UBIDLdapContext.java:225)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.searchDir(UBIDLdapContext.java:568)
at com.zimbra.cs.account.ldap.ZLdapHelper.searchForEntry(ZLdapHelper.java:207)
at com.zimbra.cs.account.ldap.LdapHelper.searchForEntry(LdapHelper.java:155)
at com.zimbra.cs.account.ldap.AutoProvision.getExternalAttrsByName(AutoProvision.java:382)
at com.zimbra.cs.account.ldap.AutoProvisionLazy.createAccount(AutoProvisionLazy.java:83)
at com.zimbra.cs.account.ldap.AutoProvisionLazy.handle(AutoProvisionLazy.java:73)
at com.zimbra.cs.account.ldap.LdapProvisioning.autoProvAccountLazy(LdapProvisioning.java:1017)
at com.zimbra.cs.service.account.Auth.handle(Auth.java:164)
at com.zimbra.soap.SoapEngine.dispatchRequest(SoapEngine.java:569)
at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.java:432)
at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.java:266)
at com.zimbra.soap.SoapServlet.doWork(SoapServlet.java:303)
at com.zimbra.soap.SoapServlet.doPost(SoapServlet.java:213)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)
at com.zimbra.cs.servlet.ZimbraServlet.service(ZimbraServlet.java:209)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:790)
at org.eclipse.jetty.servlet.ServletHolder.handle(ServletHolder.java:738)
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1651)
at com.zimbra.cs.servlet.CsrfFilter.doFilter(CsrfFilter.java:168)
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1622)
at com.zimbra.cs.servlet.RequestStringFilter.doFilter(RequestStringFilter.java:54)
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1622)
at com.zimbra.cs.servlet.SetHeaderFilter.doFilter(SetHeaderFilter.java:59)
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1622)
at org.eclipse.jetty.servlets.UserAgentFilter.doFilter(UserAgentFilter.java:83)
at org.eclipse.jetty.servlets.GzipFilter.doFilter(GzipFilter.java:351)
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1622)
at com.zimbra.cs.servlet.ETagHeaderFilter.doFilter(ETagHeaderFilter.java:47)
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1622)
at com.zimbra.cs.servlet.ContextPathBasedThreadPoolBalancerFilter.doFilter(ContextPathBasedThreadPoolBalancerFilter.java:107)
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1622)
at com.zimbra.cs.servlet.ZimbraQoSFilter.doFilter(ZimbraQoSFilter.java:107)
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1622)
at com.zimbra.cs.servlet.ZimbraInvalidLoginFilter.doFilter(ZimbraInvalidLoginFilter.java:131)
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1622)
at org.eclipse.jetty.servlets.DoSFilter.doFilterChain(DoSFilter.java:457)
at org.eclipse.jetty.servlets.DoSFilter.doFilter(DoSFilter.java:326)
at org.eclipse.jetty.servlets.DoSFilter.doFilter(DoSFilter.java:299)
at org.eclipse.jetty.servlet.ServletHandler$CachedChain.doFilter(ServletHandler.java:1622)
at org.eclipse.jetty.servlet.ServletHandler.doHandle(ServletHandler.java:549)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:143)
at org.eclipse.jetty.security.SecurityHandler.handle(SecurityHandler.java:544)
at org.eclipse.jetty.server.session.SessionHandler.doHandle(SessionHandler.java:221)
at org.eclipse.jetty.server.handler.ContextHandler.doHandle(ContextHandler.java:1111)
at org.eclipse.jetty.servlet.ServletHandler.doScope(ServletHandler.java:478)
at org.eclipse.jetty.server.session.SessionHandler.doScope(SessionHandler.java:183)
at org.eclipse.jetty.server.handler.ContextHandler.doScope(ContextHandler.java:1045)
at org.eclipse.jetty.server.handler.ScopedHandler.handle(ScopedHandler.java:141)
at org.eclipse.jetty.server.handler.ContextHandlerCollection.handle(ContextHandlerCollection.java:199)
at org.eclipse.jetty.server.handler.HandlerCollection.handle(HandlerCollection.java:109)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)
at org.eclipse.jetty.rewrite.handler.RewriteHandler.handle(RewriteHandler.java:309)
at org.eclipse.jetty.server.handler.DebugHandler.handle(DebugHandler.java:81)
at org.eclipse.jetty.server.handler.HandlerWrapper.handle(HandlerWrapper.java:97)
at org.eclipse.jetty.server.Server.handle(Server.java:462)
at org.eclipse.jetty.server.HttpChannel.handle(HttpChannel.java:279)
at org.eclipse.jetty.server.HttpConnection.onFillable(HttpConnection.java:232)
at org.eclipse.jetty.io.AbstractConnection$2.run(AbstractConnection.java:534)
at org.eclipse.jetty.util.thread.QueuedThreadPool.runJob(QueuedThreadPool.java:607)
at org.eclipse.jetty.util.thread.QueuedThreadPool$3.run(QueuedThreadPool.java:536)
at java.lang.Thread.run(Thread.java:745)
Caused by: LDAPSearchException(resultCode=10 (referral), numEntries=2040, numReferences=1, errorMessage='referral')
at com.unboundid.ldap.sdk.LDAPConnection.search(LDAPConnection.java:3310)
at com.zimbra.cs.ldap.unboundid.UBIDLdapOperation$Search.execute(UBIDLdapOperation.java:284)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.searchDir(UBIDLdapContext.java:564)
... 60 more
2019-03-05 10:51:53,426 INFO [qtp509886383-67968:
http://127.0.0.1:80/service/soap/AuthRequest] [oip=192.168.1.7;ua=zclient/8.6.0_GA_1153;] SoapEngine - handler exception: authentication failed for [
boat@kimshisnet.com], account not found
2019-03-05 10:51:53,427 INFO [qtp509886383-67968:
http://127.0.0.1:80/service/soap/AuthRequest] [oip=192.168.1.7;ua=zclient/8.6.0_GA_1153;] soap - AuthRequest elapsed=3372
2019-03-05 10:51:53,427 INFO [qtp509886383-67968:
http://127.0.0.1:80/service/soap/AuthRequest] [] misc - Invalid login filter, checking if this was an auth req and authentication failed.
2019-03-05 10:51:53,492 INFO [qtp509886383-67969:
https://127.0.0.1:7071/service/admin/so ... nfoRequest] [ip=127.0.0.1;ua=ZCS/8.6.0_GA_1153;] soap - GetDomainInfoRequest elapsed=1
2019-03-05 10:52:43,662 INFO [MailboxPurge] [name=
galsync.ygwzgijo@mailnew.kimshisnet.com;mid=1;] purge - Purging messages.