Results 1 to 5 of 5

Thread: LDAP Errors during Install

  1. #1
    Join Date
    Apr 2008
    Posts
    2
    Rep Power
    7

    Default LDAP Errors during Install

    Hi, I have tried several times to install Zimbra 5.0.4 on both Centos 5.1 and Fedora 7 and keep getting the same error LDAP Errors, can some one please help me with this I would like to move from Scalix to Zimbra. Both the centos and fedora installs have been on fresh builds and the Zimbra install goes through without fault until I get to the final config, see bellow.

    *** Running as root user: /opt/zimbra/bin/zmcertmgr createca
    ** Creating directory /opt/zimbra/ssl/zimbra
    ** Creating directory /opt/zimbra/ssl/zimbra/ca
    ** Creating directory /opt/zimbra/ssl/zimbra/server
    ** Creating directory /opt/zimbra/ssl/zimbra/commercial
    ** Creating directory /opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp
    ** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
    ** Retrieving CA private key from ldap...failed.
    ** Retrieving CA cert from ldap...failed.

    ** Creating CA private key /opt/zimbra/ssl/zimbra/ca/ca.key...done.
    ** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...done.
    done.
    Deploying CA to /opt/zimbra/conf/ca ...
    *** Running as root user: /opt/zimbra/bin/zmcertmgr deployca -localonly
    ** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
    ** Copying CA to /opt/zimbra/conf/ca...done.
    done.
    Creating SSL certificate...
    *** Running as root user: /opt/zimbra/bin/zmcertmgr createcrt self
    ** Creating /opt/zimbra/conf/zmssl.cnf...done
    ** Backup /opt/zimbra/ssl/zimbra to /opt/zimbra/ssl/zimbra.20080410114022
    ** Generating a server csr for download
    ** Backup /opt/zimbra/ssl/zimbra to /opt/zimbra/ssl/zimbra.20080410114022
    ** Creating server cert request /opt/zimbra/ssl/zimbra/server/server.csr...done.
    ** Signing cert request /opt/zimbra/ssl/zimbra/server/server.csr...done.
    done.
    checking isEnabled zimbra-store
    zimbra-store is enabled
    Installing SSL certificates...
    *** Running as root user: /opt/zimbra/bin/zmcertmgr deploycrt self
    ** Installing mta certificate and key...done.
    ** Installing slapd certificate and key...done.
    ** Installing proxy certificate and key...done.
    ** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
    ** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
    ** Installing CA to /opt/zimbra/conf/ca...done.
    done.
    checking isEnabled zimbra-mta
    zimbra-mta is enabled
    checking isEnabled zimbra-ldap
    zimbra-ldap is enabled
    checking isEnabled zimbra-proxy
    zimbra-proxy not in enabled cache
    enabled packages zimbra-logger zimbra-store zimbra-mta zimbra-core zimbra-archiving zimbra-apache zimbra-cluster zimbra-snmp zimbra-ldap zimbra-spell
    Newinstall enabling all installed packages
    Enabling zimbra-core
    Enabling zimbra-ldap
    Enabling zimbra-store
    Enabling zimbra-mta
    Enabling zimbra-snmp
    Enabling zimbra-logger
    Enabling zimbra-apache
    Enabling zimbra-spell
    checking isEnabled zimbra-ldap
    zimbra-ldap is enabled
    Initializing ldap...
    *** Running as zimbra user: /opt/zimbra/libexec/zmldapinit
    IO::Socket::INET: connect: Connection refused at /opt/zimbra/libexec/zmldapinit line 160.
    failed. (28416)



    ERROR



    Configuration failed

  2. #2
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    21

    Default

    Welcome to the forums,

    Is that from your CentOS box or Fedora box?
    If it's the CentOS 5 box you should be using a RHEL 5 build.
    -If you're using NE while CentOS is 99% like RHEL we generally ask that you use RHEL as an operating system platform for support reasons
    If it's the Fedora 7 box you should be using the Fedora 7 FOSS build.

    Compare ZCS Editions
    http://www.zimbra.com/forums/announc...html#post62754

    Ok so, if that output is from your your Fedora box, examine your log files in /tmp (install.log.# & zmsetup.log.#) do you see sections like:
    ** Saving CA in ldap...ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])
    ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])
    done.
    -snip-
    Initializing ldap...
    *** Running as zimbra user: /opt/zimbra/libexec/zmldapinit
    IO::Socket::INET: connect: Connection refused at /opt/zimbra/libexec/zmldapinit line 160.
    failed. (28416)
    ERROR
    -snip-
    Starting ldap...Done.
    FAILED
    /opt/zimbra/bin/ldap: line 57: kill: (16016) - No such process
    sudo: sorry, you must have a tty to run sudo
    If that's the case:
    visudo
    comment out:
    #Defaults requiretty

    ie: Type visudo to edit /etc/sudoers rather than another text editor (vi, nano, nedit, gedit, etc). Visudo provides basic sanity checks, looks for parse errors, and locks the sudoers file against multiple simultaneous edits (say you we're in a multi-admin environment).

    If requiretty is set sudo will only run when the user is logged in to a real tty. Requiring it disallows things like 'rsh somehost sudo ls' since rsh does not allocate a tty, etc, etc. Here we're turning it off because it's saying "you must have a tty to run sudo".

  3. #3
    Join Date
    Apr 2008
    Posts
    2
    Rep Power
    7

    Default

    HI mmorse,

    Thanks for your reply,
    1) both installs are community edition,
    2) the output in my first post is from my centos box but both the Fedora and centos install logs are almost identical, they show the same three errors.
    3) I didn't get the TTY error you discribe because I made the alteration to /etc/sudoers before I installed zimbra on my fedora box.

    Thanks again.

  4. #4
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    Is your server sat behind a firewall ? Could we just check to ensure your DNS is setup correctly, so please run the following and post the results
    Code:
    cat /etc/hosts
    cat /etc/resolv.conf
    dig domain.com mx
    dig domain.com ns
    host `hostname` <- note backticks

  5. #5
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    Quote Originally Posted by mmorse View Post
    examine your log files in /tmp (install.log.# & zmsetup.log.#)
    Would you please provide the logfiles that Mike has indicated aswell please.

Similar Threads

  1. LDAP Cannot bind on migration to new server
    By neekster in forum Migration
    Replies: 23
    Last Post: 03-09-2009, 02:08 AM
  2. Multi Server Installation
    By rsharpe in forum Installation
    Replies: 6
    Last Post: 07-11-2007, 09:53 PM
  3. 3 testing: LDAP: 389 Failed when restore zimbra
    By victorLeong in forum Administrators
    Replies: 15
    Last Post: 05-24-2007, 06:45 AM
  4. Mac OSX install: Java errors & LDAP CA error
    By jefbear in forum Installation
    Replies: 9
    Last Post: 12-16-2006, 02:39 PM
  5. Fedora Core 3, Clean Install - Not working!
    By pcjackson in forum Installation
    Replies: 17
    Last Post: 03-05-2006, 06:38 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •