Results 1 to 2 of 2

Thread: [SOLVED] New Cert install - LDAP "Unable to determine enabled services from ldap

  1. #1
    Join Date
    Sep 2008
    Location
    Georgia, USA
    Posts
    28
    Rep Power
    7

    Default [SOLVED] New Cert install - LDAP "Unable to determine enabled services from ldap

    5.0.18_GA_3011.UBUNTU8_64 FOSS edition

    Our commercial cert expires today, so I created a new cert, but didn't provide a CSR. The CSR was provided by the CA. I placed the CSR into the /opt/zimbra/ssl/zimbra/commercial/ directory.

    After verifying the files with:
    /opt/zimbra/bin/zmcertmgr verifycrt comm ./commercial.key ./commercial.crt ./commercial_ca.crt

    I deployed them with:
    /opt/zimbra/bin/zmcertmgr deploycrt comm ./commercial.crt ./commercial_ca.crt
    Did it twice, to be certain.

    Everything seemed fine, no warnings or errors reported either time. Restarted zimbra and see this

    Host mail.domain.com
    Starting ldap...Done.
    Unable to determine enabled services from ldap.
    Enabled services read from cache. Service list may be inaccurate.
    Starting logger...Done.
    Starting mailbox...Done.
    Starting antispam...Done.
    Starting antivirus...Done.
    Starting snmp...Done.
    Starting spell...Done.
    Starting mta...Done.
    Starting stats...Done.


    I am able to login with webmail, remote IMAPS or to the admin console without issues, but the LDAP warning is concerning.
    The output from
    /opt/zimbra/bin/zmcertmgr viewdeployedcrt all
    Seems ok and shows the new cert expiration date, even for LDAP.

    A full reboot didn't help clear the startup messages. grep'in for errors in the log directory didn't find anything after the new cert was installed.

    Is there something else I need/should have done to clear the LDAP cache? Any log files needed? Thanks for any help!
    OSS Zimbra 7.2.7 64-bit ... er ... now.

  2. #2
    Join Date
    Sep 2008
    Location
    Georgia, USA
    Posts
    28
    Rep Power
    7

    Default

    The solution for us was to clean out older cert files from the
    /opt/zimbra/conf/ca directory.
    Basically, delete these (yours will be different) files

    rm 0ef90221.0 0fae25b0.0 16687ed5.0 1d1c32fa.0 1f167f52.0 4d70f561.0 6fe6f9b8.0 81af5811.0 bead18a7.0

    But be careful to leave ca.key, ca.pem, commercial_ca.pem and the 2 softlinks that point to them alone. stop and start zimbra - the "Unable to determine enabled services from ldap." message is gone.
    OSS Zimbra 7.2.7 64-bit ... er ... now.

Similar Threads

  1. Unable to determine enabled services from ldap.
    By tsch in forum Installation
    Replies: 13
    Last Post: 05-18-2011, 04:49 AM
  2. Cannot start Zimbra services after install
    By Ian Forbes in forum Installation
    Replies: 0
    Last Post: 11-24-2008, 11:13 PM
  3. Installation with a configuration file problems...
    By smurraysb in forum Installation
    Replies: 4
    Last Post: 04-16-2008, 11:22 PM
  4. Fedora Core 3, Clean Install - Not working!
    By pcjackson in forum Installation
    Replies: 17
    Last Post: 03-05-2006, 06:38 PM
  5. SuSE 10 Install - Cannot Determine Services
    By drogers in forum Installation
    Replies: 9
    Last Post: 01-30-2006, 03:29 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •