How to configure auto-provisioning with AD

Revision as of 15:41, 16 September 2015 by Teodor Vizirov (talk | contribs) (Created page with "<!-- Please enter the name of your article, and the Zimbra Collaboration versions where you tested it. Add the Tag {{WIP}} after the Header if you want to indicate that the W...")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

How to configure auto-provisioning (autoprov) with AD

   KB 22329        Last updated on 2015-09-16  

(one vote)

Zimbra auto-provisioining

This article explains how to configure automatic user provisioning, if Zimbra is configured to use external LDAP (Active Directory).  
For more information on how to configure Zimbra with AD, please check the following link: [link]


1. Create a file with the following entries:

$ vim /tmp/autoprov.txt

md zimbraAutoProvAccountNameMap "samAccountName"
md zimbraAutoProvAttrMap description=description
md zimbraAutoProvAttrMap cn=displayName
md zimbraAutoProvAttrMap givenName=givenName
md zimbraAutoProvAttrMap sn=displayName
md zimbraAutoProvAuthMech LDAP
md zimbraAutoProvBatchSize 40
md zimbraAutoProvLdapAdminBindDn "CN=Administrator,CN=Users,DC=azmo,DC=com"
md zimbraAutoProvLdapAdminBindPassword secret
md zimbraAutoProvLdapBindDn ""
md zimbraAutoProvLdapSearchBase "OU=zimbrausers,dc=azmo,dc=com"
md zimbraAutoProvLdapSearchFilter "(cn=%u)"
md zimbraAutoProvLdapURL "ldap://"
md zimbraAutoProvMode EAGER
md zimbraAutoProvNotificationBody "Your account has been auto provisioned. Your email address is ${ACCOUNT_ADDRESS}."
md zimbraAutoProvNotificationFromAddress
md zimbraAutoProvNotificationSubject "New account auto provisioned"
ms zimbraAutoProvPollingInterval "1m"
ms +zimbraAutoProvScheduledDomains ""

The options are self-explanatory. The ones that you might want to change according to your environment are:


For the last two entries starting with ms, you have to use your server's fqdn.

2. To execute the file run:

$ zmprov < /tmp/autoprov.txt

To double check that the configuration is working, create a user in AD, and then follow the entries in /opt/zimbra/log/mailbox.log file. To be able to see more, enable [debug]. Ideally you have to see the following output in normal logging mode:

  • before adding entries in AD
2015-07-09 03:22:00,484 INFO [AutoProvision] [] autoprov - Auto provisioning accounts on domain
2015-07-09 03:22:00,490 INFO [AutoProvision] [] autoprov - 0 external LDAP entries returned as search result
2015-07-09 03:22:00,490 INFO [AutoProvision] [] autoprov - Auto Provisioning has finished for now, setting last polled timestamp: 20150709022200.488Z
  • after adding new entries
2015-07-09 03:26:00,546 INFO [AutoProvision] [] autoprov - Auto provisioning accounts on domain
2015-07-09 03:26:00,553 INFO [AutoProvision] [] autoprov - 1 external LDAP entries returned as search result
2015-07-09 03:26:00,553 INFO [AutoProvision] [] autoprov - auto creating account in EAGER mode:, dn="CN=test,OU=zimbrausers,DC=azmo,DC=com"
2015-07-09 03:26:00,558 INFO [AutoProvision] [] autoprov - Auto Provisioning has finished for now, setting last polled timestamp: 20150709022600.550Z
2015-07-09 03:26:00,565 INFO [AutoProvision] [] autoprov - Sleeping for 60000 milliseconds.����������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������


More information


Verified Against: Zimbra Collaboration XXX, XXX Date Created: 04/16/2014
Article ID: Date Modified: 2015-09-16

Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Jump to: navigation, search