Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using Zimbra Collaboration Suite 5.0.11 and it's been working pretty well until yesterday. I've added a new mail account using the administration console with no errors. But when I try to login with the newly created account, I get the following error (beign ACCOUNTNAME and DOMAIN the new account domain and name):

[btpool0-634] [;oip=;
ua=zclient/5.0.11_GA_2695.DEBIAN4.0;] security - cmd=Auth;; protocol=soap; error=authentication failed 
for, external LDAP auth failed, [LDAP: error code 
49 - 80090308: LdapErr: DSID-0C090334, comment: AcceptSecurityContext error, data 525, 

I've searched a bit and read that it's like the new account does not exist in the ldap server, but using zmprov ga I can find and check the new account.

Old users have no problem login in, just new ones.

Of course I'm using openldap (the one bundled with ZCS) as LDAP server.

Any clue about what's going on or what can I check?

share|improve this question

Have you thought to ask this question on Zimbra forums they have very active forums.

share|improve this answer

LDAP 49 errors are the bad password, bad DN sort of problem.

data: 525 means bad bind DN.

Look at LDAP 49 error code for some more info.

Can you bind with the FQDN of the user in more LDAP like syntax, instead of user@domain?

share|improve this answer

It looks like it is checking the account's password based on an external LDAP call. If that's the case, the account would need to be created in both the LDAP server and Zimbra. In my system, I create an Active Directory account then a Zimbra account with the same name.

Hope that helps

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.