[Solved] LDAP User Authentication Outside the Template

Hi there,

For reference I followed this: How to Set Up an External LDAP Authentication in Carbonio

I copied and pasted the commands into a notepad++ document and made my edits, which mostly worked great. I had to add some quotes around the LDAP items:

carbonio prov modifyDomain mydomain.net zimbraAuthMech ad
carbonio prov modifyDomain mydomain.net zimbraAuthLdapBindDn uid=%u,DC=underground,DC=local
carbonio prov modifyDomain mydomain.net zimbraAuthLdapSearchBindDn "CN=vmail,OU=Service Accounts,OU=Users,OU=Underground,DC=underground,DC=local"
carbonio prov modifyDomain mydomain.net zimbraAuthLdapSearchBindPassword [mygeneratedrandomizedpassword]
carbonio prov modifyDomain mydomain.net zimbraAuthLdapSearchBase "OU=Users,OU=MyDomain,DC=underground,DC=local"
carbonio prov modifyDomain mydomain.net zimbraAuthLdapSearchFilter sAMAccountName=%u
carbonio prov modifyDomain mydomain.net zimbraAuthLdapURL ldap://10.20.30.5:3268
carbonio prov modifyDomain mydomain.net zimbraAuthFallbackToLocal TRUE
carbonio prov modifyAccount anomaly0617@mydomain.net zimbraAuthLdapBindDn "uid=mydomain_anomaly0617,OU=Users,OU=MyDomain,DC=underground,DC=local"

Everything worked great until the last command:

carbonio prov modifyAccount anomaly0617@mydomain.net zimbraAuthLdapBindDn "uid=mydomain_anomaly0617,OU=Users,OU=MyDomain,DC=underground,DC=local"

When it threw the following error:

ERROR: service.FAILURE (system failure: unable to modify attrs: object class violation - unable to modify attributes: ldap host=carbonio.underground.local:389: attribute 'zimbraAuthLdapBindDn' not allowed)

The goal here is to link the AD account "mydomain_anomaly0617" to the email account "anomaly0617@mydomain.net", so that person can use their email address or username and password to log in to their mailbox.

What did I do wrong?