Results 1 to 3 of 3

Thread: trouble getting ldap to work

  1. #1
    Join Date
    Jan 2006
    Posts
    16
    Rep Power
    9

    Default trouble getting ldap to work

    Hi all,

    I have troubles to get ldap to work on my FC4 box with zcs-3.0.0_M3_436 installed. The automated install process installed the RPMs and config files properly, but then ldap could not be initialized. After adding the IP address parameter to the starting line (slapd may only listen on one interface) and adding a -d4 switch to the slapd start command I saw that that ca and cert were missing. Then I did a bin/createca and bin/createcert manually. Now "bin/ldap start" succeeds, my box now listens on ports 389 and 636.

    But now when I do a bin/zmcontrol status I get the following error:
    ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])

    Obviously something is not yet initialized or my entered passwords were not stored properly (either in the LDAP directory or in localconfig.xml). Is there an easy way to get these password/certificate issues fixed, perhaps by reinitializing all passwords?

    Any help would very much be appreciated.
    Regards
    --Marcel

  2. #2
    Join Date
    Sep 2005
    Posts
    2,103
    Rep Power
    14

    Default ldap init failed

    ldap init failed during the install, so your system's not correcly set up.

    You can try setting the ldap password (zmldappasswd --root new_pass) but I suspect you'll just find that it's still broken. I'd re-install, that way you'll get the init stuff done correctly.

  3. #3
    Join Date
    Jan 2006
    Posts
    16
    Rep Power
    9

    Default

    My /tmp/zmsetup.log file said that the ldap initialization failed, but in effect it's the certificate stuff that did not work properly. My log says "done" for the certificate stuff but there are no certificate files (.pem etc.).

    Doing a "zmcreateca" manually writes the key but gives an error "unable to write 'random state' ", perhaps this is the cause of the problem. And the resulting key file is in /opt/zimbra/ssl/ssl/ca/ca.key, however the zmsetup.pl looks for it at /opt/zimbra/conf/ca.key .

    I think something goes wrong with this certificate stuff. Also, I see that the zmsetup.pl does not have the full path to /opt/zimbra/bin in several places (see my diff below). I will try to make zmsetup.pl work tomorrow.

    Best regards
    --Marcel

    diff zmsetup.pl.1 zmsetup.pl
    25c25,26
    < #
    ---
    > #
    > # modified by marcel.gsteiger (at) milprog.ch [missing /opt/zimbra/bin path]
    1612c1613
    < runAsZimbra("cd /opt/zimbra; zmcreateca");
    ---
    > runAsZimbra("cd /opt/zimbra; /opt/zimbra/bin/zmcreateca");
    1647,1648c1648,1649
    < runAsZimbra ("ldap start");
    < runAsZimbra ("zmldapapplyldif");
    ---
    > runAsZimbra ("/opt/zimbra/bin/ldap start");
    > runAsZimbra ("/opt/zimbra/bin/zmldapapplyldif");
    1675,1676c1676,1677
    < runAsZimbra("zmprov mcf zimbraCertAuthorityCertSelfSigned \\\"$cert\\\"");
    < runAsZimbra("zmprov mcf zimbraCertAuthorityKeySelfSigned \\\"$key\\\"");
    ---
    > runAsZimbra("/opt/zimbra/bin/zmprov mcf zimbraCertAuthorityCertSelfSigned \\\"$cert\\\"");
    > runAsZimbra("/opt/zimbra/bin/zmprov mcf zimbraCertAuthorityKeySelfSigned \\\"$key\\\"");
    1714c1715
    < runAsZimbra("cd /opt/zimbra; zmcreatecert");
    ---
    > runAsZimbra("cd /opt/zimbra; /opt/zimbra/bin/zmcreatecert");
    1734c1735
    < runAsZimbra("cd /opt/zimbra; zmcertinstall mailbox");
    ---
    > runAsZimbra("cd /opt/zimbra; /opt/zimbra/bin/zmcertinstall mailbox");
    1736c1737
    < runAsZimbra("cd /opt/zimbra; zmtlsctl $config{MODE}");
    ---
    > runAsZimbra("cd /opt/zimbra; /opt/zimbra/bin/zmtlsctl $config{MODE}");
    1741c1742
    < runAsZimbra("cd /opt/zimbra; zmcertinstall mta ".
    ---
    > runAsZimbra("cd /opt/zimbra; /opt/zimbra/bin/zmcertinstall mta ".
    2197,2198c2198,2199
    < runAsZimbra ("ldap start");
    < runAsZimbra ("zmldapapplyldif");
    ---
    > runAsZimbra ("/opt/zimbra/bin/ldap start");
    > runAsZimbra ("/opt/zimbra/bin/zmldapapplyldif");

Similar Threads

  1. LDAP Replication Experiences
    By technikolor in forum Administrators
    Replies: 4
    Last Post: 11-11-2008, 11:52 PM
  2. Zimbra Install Problem - getDirectContext
    By bsimzer in forum Installation
    Replies: 27
    Last Post: 07-19-2007, 10:12 AM
  3. 3 testing: LDAP: 389 Failed when restore zimbra
    By victorLeong in forum Administrators
    Replies: 15
    Last Post: 05-24-2007, 06:45 AM
  4. Mac OSX install: Java errors & LDAP CA error
    By jefbear in forum Installation
    Replies: 9
    Last Post: 12-16-2006, 02:39 PM
  5. Replies: 4
    Last Post: 11-15-2006, 11:16 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •