ldap start error but cert still valid

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
fbzimblet
Advanced member
Advanced member
Posts: 116
Joined: Sun Apr 17, 2016 4:15 pm

ldap start error but cert still valid

Postby fbzimblet » Fri Dec 08, 2017 2:27 am

ZCS NE 8.7.11
Centos 7

I checked host file and mx record and both valid
SSL certs also is not expired yet.
What else could cause this?

Code: Select all

Host mta1.domain.com
   Starting ldap...Done.
Search error: Unable to determine enabled services from ldap.
Enabled services read from cache. Service list may be inaccurate.
   Starting zmconfigd...Failed.
Starting zmconfigd...failed.


   Starting memcached...Done.
   Starting proxy...Done.
   Starting amavis...Done.
   Starting antispam...Done.
   Starting opendkim...Failed.
opendkim: /opt/zimbra/conf/opendkim.conf: ldap://mta1.domain.com:389/?DKIMSelector?sub?(DKIMIdentity=$d): dkimf_db_open(): Invalid credentials
Failed to start opendkim: 0


   Starting snmp...Done.
   Starting mta...Done.
   Starting stats...Done.
   Starting vmware-ha...Done.
   
[zimbra@mta1 ~]$ /opt/zimbra/bin/zmcertmgr viewdeployedcrt
- ldap: /opt/zimbra/conf/slapd.crt
notBefore=Nov 17 04:32:00 2017 GMT
notAfter=Dec  2 03:23:00 2020 GMT
subject= /OU=Domain Control Validated/CN=*.domain.com
issuer= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
SubjectAltName=*.domain.com, domain.com
- mta: /opt/zimbra/conf/smtpd.crt
notBefore=Nov 17 04:32:00 2017 GMT
notAfter=Dec  2 03:23:00 2020 GMT
subject= /OU=Domain Control Validated/CN=*.domain.com
issuer= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
SubjectAltName=*.domain.com, domain.com
- proxy: /opt/zimbra/conf/nginx.crt
notBefore=Nov 17 04:32:00 2017 GMT
notAfter=Dec  2 03:23:00 2020 GMT
subject= /OU=Domain Control Validated/CN=*.domain.com
issuer= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
SubjectAltName=*.domain.com, domain.com


Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 12 guests