Results 1 to 3 of 3

Thread: LDAP Problems

  1. #1
    Join Date
    Dec 2005
    Rep Power

    Default LDAP Problems

    OK, ran into a little problem - Sever is Centos 4.4 running zcs-4.0.4_GA_457.RHEL4.

    Installation went fine but the hardware was weak so I brought up new hardware with a RAID10 and dualcore to help things out.
    Installed zcs on the new server.
    Shutdown zcs services on new server.
    Shutdown zcs services on old server.
    Ran an rsync from the old server to the backup location (I do this daily anyways)
    Ran an rsync from the backup location to the new server.
    Duplicated the IP addresses and host info from the old server to the new server.
    Reran the installation process and allowed it to upgrade on the new server.
    Started services on the new server.
    Bingo! Everything works, or so I thought. Everything user related works fine.
    However, I can't create anything new in the admin area.

    Attempting to create a new user results in the error at the bottom. Adding aliases, new domains, etc results in similar errors. zmprov also errors out although not so verbose.

    Shutdown the services and ran zmfixperms - no difference.
    Shutdown the services and re-ran the installation - got this the first time:

    The system will be modified. Continue? [N] y

    Shutting down zimbra mail

    Backing up ldap

    bdb(): DB_ENV->log_flush: LSN of 1/3692191 past current end-of-log of 1/3641691
    bdb(): Database environment corrupt; the wrong log files may have been removed or incompatible database files imported from another environment
    The last part repeated with variations for a few hundred lines.

    And then the installation completed. No difference - Everything user related works fine (new mails, new documents, new folders) - anything related to creating new things in admin gives the error at the bottom.

    Message: system failure: unable to create alias: [LDAP: error code 80 - index generation failed]
    com.zimbra.cs.service.ServiceException: system failure: unable to create alias: [LDAP: error code 80 - index generation failed]
    at com.zimbra.cs.service.ServiceException.FAILURE(Ser
    at com.zimbra.cs.account.ldap.LdapProvisioning.addAli asInternal(
    at com.zimbra.cs.account.ldap.LdapProvisioning.addAli as(
    at com.zimbra.cs.service.admin.AddAccountAlias.handle (
    at com.zimbra.soap.SoapEngine.dispatchRequest(SoapEng
    at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.jav a:162)
    at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.jav a:84)
    at com.zimbra.soap.SoapServlet.doPost(SoapServlet.jav a:223)
    at javax.servlet.http.HttpServlet.service(HttpServlet .java:709)
    at com.zimbra.cs.servlet.ZimbraServlet.service(Zimbra
    at javax.servlet.http.HttpServlet.service(HttpServlet .java:802)
    at ternalDoFilter(
    at Filter(
    at org.apache.catalina.core.StandardWrapperValve.invo ke(
    at org.apache.catalina.core.StandardContextValve.invo ke(
    at org.apache.catalina.core.StandardHostValve.invoke(
    at org.apache.catalina.valves.ErrorReportValve.invoke (
    at org.apache.catalina.core.StandardEngineValve.invok e(
    at org.apache.catalina.valves.AccessLogValve.invoke(A
    at org.apache.catalina.connector.CoyoteAdapter.servic e(
    at org.apache.coyote.http11.Http11Processor.process(H
    at org.apache.coyote.http11.Http11BaseProtocol$Http11 ConnectionHandler.processConnection(Http11BaseProt
    at Socket(
    at ead.runIt(
    at org.apache.tomcat.util.threads.ThreadPool$ControlR
    Caused by: javax.naming.NamingException: [LDAP: error code 80 - index generation failed]; remaining name 'uid=shouldnotseeme,ou=people,dc=clean-wire,dc=net'
    at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.jav a:3029)
    at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCt
    at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCt
    at com.sun.jndi.ldap.LdapCtx.c_createSubcontext(LdapC
    at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_cre ateSubcontext(
    at com.sun.jndi.toolkit.ctx.PartialCompositeDirContex t.createSubcontext( :248)
    at com.sun.jndi.toolkit.ctx.PartialCompositeDirContex t.createSubcontext( :236)
    at context(
    at com.zimbra.cs.account.ldap.LdapUtil.simpleCreate(L
    at com.zimbra.cs.account.ldap.LdapProvisioning.addAli asInternal(
    ... 24 more

    Error code: service.FAILURE
    Method: ZmCsfeCommand.prototype.invoke

  2. #2
    Join Date
    Oct 2005
    Thatcher, AZ
    Rep Power


    It looks like a permissions issue to me. Try
    su root
    chown -R zimbra:zimbra /opt/zimbra/*
    cd /opt/zimbra/libexec

    Then try to reinstall again.

  3. #3
    Join Date
    Dec 2005
    Rep Power

    Default Resolved

    Quote Originally Posted by wannabetenor View Post
    It looks like a permissions issue to me. Try
    su root
    chown -R zimbra:zimbra /opt/zimbra/*
    cd /opt/zimbra/libexec

    Then try to reinstall again.
    Thanks wannbetenor, that unto itself was not the full resolution but I did use that as part of it.

    A few hours of googling revealed that the BerkDB was probably corrupted.

    Must have not had a clean shutdown just before I ran the backup off of the old server. Rsyncing that backup over to the new server carried the corruption with it.

    So I went to the last backup just before the old server was shutdown, copied all of the openldap folders out of /opt/zimbra/ and dropped them onto the new server. Then I ran wannbetnors advice (fixperms and reinstall/upgrade) and everything is happiness now.

    LVM, rsnapshot, rsync, google, and Zimbra forums are your best friends!

Similar Threads

  1. LDAP Replication Experiences
    By technikolor in forum Administrators
    Replies: 4
    Last Post: 11-11-2008, 11:52 PM
  2. 3 testing: LDAP: 389 Failed when restore zimbra
    By victorLeong in forum Administrators
    Replies: 15
    Last Post: 05-24-2007, 06:45 AM
  3. LDAP problems
    By TaskMaster in forum Installation
    Replies: 1
    Last Post: 05-02-2007, 08:29 AM
  4. Mac OSX install: Java errors & LDAP CA error
    By jefbear in forum Installation
    Replies: 9
    Last Post: 12-16-2006, 02:39 PM
  5. Replies: 4
    Last Post: 11-15-2006, 11:16 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts