Page 1 of 3 123 LastLast
Results 1 to 10 of 25

Thread: Zimbra + LDAP + Posix + Samba

  1. #1
    fruitlounge is offline Junior Member
    Join Date
    Mar 2007
    Posts
    5
    Rep Power
    8

    Default Zimbra + LDAP + Posix + Samba

    Using the wiki guide from Greg I'm trying to get this all setup on a 4.5.7 NE box, but I cannot get it to fully work

    First problem I had was after adding
    index memberUID eq
    I got the following error while starting LDAP:
    /opt/zimbra/conf/slapd.conf: line 189: index attribute "memberUID" undefined
    (repeated about 8 times, and stalling the startup script)

    All the other indexes (uidNumber/gidNumber/sambaSID/sambaPrimaryGroupSID and sambaDomainName) work without any problems.

    I simply commented out the line and all the services started (hurray!)

    Then I configured my Samba server, all went well, and I ended up with the domain "FRUITLOUNGE" in the Zimbra Admin, so far everything is looking great.

    However when I now try to create a new posix group I get the following error (when I hit the "save" button):
    Code:
    <soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope">
    <soap:Header>
    <context xmlns="urn:zimbra">
    <userAgent name="ZimbraWebClient - FF2.0 (Win)" version="undefined"/>
    <sessionId id="319"/>
    <authToken>
    0_746aca4048a8d47654b91a8cd2717cbf10f9d3a8_69643d33363a63626639666364662d393739302d346166342d623061362d3630393837373437356138353b6578703d31333a313139323537383631333136373b61646d696e3d313a313b
    </authToken>
    <format type="js"/>
    </context>
    </soap:Header>
    <soap:Body>
    <CreateLDAPEntryRequest xmlns="urn:zimbraAdmin">
    <dn>
    cn=domainadmins,ou=groups,dc=fruitlounge,dc=com
    </dn>
    <a n="objectClass">
    posixGroup
    </a>
    <a n="objectClass">
    sambaGroupMapping
    </a>
    <a n="gidNumber">
    10001
    </a>
    <a n="cn">
    domainadmins
    </a>
    <a n="sambaSID">
    S-1-5-21-585104946-545877157-2381664453-512
    </a>
    </CreateLDAPEntryRequest>
    </soap:Body>
    </soap:Envelope>
    Code:
    Body: {
      Fault: {
        Code: {
          Value: "soap:Sender"
         },
        Detail: {
          Error: {
            Code: "account.INVALID_ATTR_VALUE",
            Trace: "com.zimbra.cs.account.AccountServiceException: createLDAPEntry invalid attr value: [LDAP: error code 21 - objectClass: value #0 invalid per syntax]
    	at com.zimbra.cs.account.AccountServiceException.INVALID_ATTR_VALUE(AccountServiceException.java:119)
    	at com.zimbra.ldaputils.CreateLDAPEntry.createSubcontext(CreateLDAPEntry.java:95)
    	at com.zimbra.ldaputils.CreateLDAPEntry.createLDAPEntry(CreateLDAPEntry.java:69)
    	at com.zimbra.ldaputils.CreateLDAPEntry.handle(CreateLDAPEntry.java:45)
    	at com.zimbra.soap.SoapEngine.dispatchRequest(SoapEngine.java:276)
    	at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.java:173)
    	at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.java:95)
    	at com.zimbra.soap.SoapServlet.doPost(SoapServlet.java:221)
    	at javax.servlet.http.HttpServlet.service(HttpServlet.java:709)
    	at com.zimbra.cs.servlet.ZimbraServlet.service(ZimbraServlet.java:162)
    	at javax.servlet.http.HttpServlet.service(HttpServlet.java:802)
    	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:252)
    	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:173)
    	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:213)
    	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:178)
    	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:126)
    	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:105)
    	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:107)
    	at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:541)
    	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:148)
    	at org.apache.coyote.http11.Http11Processor.process(Http11Processor.java:869)
    	at org.apache.coyote.http11.Http11BaseProtocol$Http11ConnectionHandler.processConnection(Http11BaseProtocol.java:667)
    	at org.apache.tomcat.util.net.PoolTcpEndpoint.processSocket(PoolTcpEndpoint.java:527)
    	at org.apache.tomcat.util.net.LeaderFollowerWorkerThread.runIt(LeaderFollowerWorkerThread.java:80)
    	at org.apache.tomcat.util.threads.ThreadPool$ControlRunnable.run(ThreadPool.java:684)
    	at java.lang.Thread.run(Thread.java:619)
    Caused by: javax.naming.directory.InvalidAttributeValueException: [LDAP: error code 21 - objectClass: value #0 invalid per syntax]; remaining name 'cn=domainadmins,ou=groups,dc=fruitlounge,dc=com'
    	at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3018)
    	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2951)
    	at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2758)
    	at com.sun.jndi.ldap.LdapCtx.c_createSubcontext(LdapCtx.java:774)
    	at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_createSubcontext(ComponentDirContext.java:319)
    	at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:248)
    	at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:236)
    	at javax.naming.directory.InitialDirContext.createSubcontext(InitialDirContext.java:178)
    	at com.zimbra.ldaputils.CreateLDAPEntry.createSubcontext(CreateLDAPEntry.java:89)
    	... 24 more
    ",
            _jsns: "urn:zimbra"
           }
         },
        Reason: {
          Text: "createLDAPEntry invalid attr value: [LDAP: error code 21 - objectClass: value #0 invalid per syntax]"
         }
       }
     },
    Header: {
      context: {
        _jsns: "urn:zimbra",
        change: {
          token: 1300
         },
        sessionId: [
          0: {
            _content: "319",
            id: "319",
            type: "admin"
           }
         ]
       }
     },
    _jsns: "urn:zimbraSoap"

    After much thinking what might went wrong I even tried to build my own LDIF file:
    Code:
    dn:cn=domainadmins,ou=groups,dc=fruitlounge,dc=com
    objectClass:posixGroup
    gidNumber:10001
    cn:domainadmins
    (a simplistic version of the request made from the Zimlet (without the Samba parts)) but it didn't work, gave me the same: [LDAP: error code 21 - objectClass: value #0 invalid per syntax];
    [/code]

    To me it looks like the NIS schema doesn't load properly but I have the lines in the slapd.conf.in file so it should load properly...

  2. #2
    fruitlounge is offline Junior Member
    Join Date
    Mar 2007
    Posts
    5
    Rep Power
    8

    Default

    Anybody with tips on what I can try to get this working?

    Thanks!

  3. #3
    ppearl's Avatar
    ppearl is offline Zimbra Employee
    Join Date
    Jul 2007
    Location
    US
    Posts
    63
    Rep Power
    8

    Default

    Quote Originally Posted by fruitlounge View Post
    Using the wiki guide from Greg I'm trying to get this all setup on a 4.5.7 NE box, but I cannot get it to fully work

    First problem I had was after adding
    index memberUID eq
    I got the following error while starting LDAP:
    /opt/zimbra/conf/slapd.conf: line 189: index attribute "memberUID" undefined
    (repeated about 8 times, and stalling the startup script)

    All the other indexes (uidNumber/gidNumber/sambaSID/sambaPrimaryGroupSID and sambaDomainName) work without any problems.
    ...
    I believe you are dealing with two issues...

    #1 Slow startup due to slapd not running (chicken/egg problem).
    #2 Potentially invalid config/extra white space tripping up slapd conf parser.

    ISSUE #1 Slow startup due to slapd not running (chicken/egg problem).
    Do you see messages like these in /var/log/messages when trying to start "slapd"?

    Code:
    Oct 28 13:39:01 myhost slapd[28571]: nss_ldap: reconnecting to LDAP server (sleeping 4 seconds)...
    Oct 28 13:39:05 myhost slapd[28571]: nss_ldap: reconnecting to LDAP server (sleeping 8 seconds)...
    If so, consider changing /etc/nsswitch.conf so that group lookups do not hit LDAP (annoying but perhaps better than the alternative behavior). The following is an example of the change along with some comments so you'll remember why you did it:

    Code:
    #NOTE: group lookups when slapd isn't running are TOO SLOW!
    #OFF group:      files ldap
    group:      files
    ISSUE #2 Potentially invalid config/extra white space tripping up slapd conf parser.

    Check your slapd.conf.in, does your include for "nis.schema" come after an include statement that is on a line with leading whitespace? If so, remove the leading whitespace:

    Change this:
    Code:
                   include "/opt/zimbra/lib/conf/zimbra-ext.schema"
    To this (leading whitespace removed):
    Code:
    include               "/opt/zimbra/lib/conf/zimbra-ext.schema"
    Then you can put your index directive back in:
    Code:
    index memberUid                 eq
    Hope this helps!

  4. #4
    fruitlounge is offline Junior Member
    Join Date
    Mar 2007
    Posts
    5
    Rep Power
    8

    Default

    Sorry for the late reply but I've been traveling for about two weeks.

    I've just tried your hints, I'm not sure why you though I had a slow start issue so I didn't do anything about it, but the second hint about removing the whitespace before the include line did the trick. I can now create groups using Zimbra.

    Thank you very much.

  5. #5
    olgo is offline New Member
    Join Date
    Nov 2007
    Posts
    3
    Rep Power
    7

    Exclamation creating posix group fail

    hi... to all.. first post... i wish luck....

    with many dificuls ... I have sucsesfull install on vmware vm with ubuntu 6.06 server a zcs open source 4.5.9_GA_1454... and work ok
    I also the zimlet to admin posix & samba... and updated the samba schema for ldap and all etc....

    BUT... the diference of my case and the video posted... is that I have not created any group of user on posix...
    AND ... if i try to create one ... via Zimbra Admin... I get this error...

    on screen:
    Message: system failure: createLDAPEntry
    Error code: service.FAILURE
    Method: ZmCsfeCommand.prototype.invoke
    Details:soap:Receiver

    on log:
    Caused by: javax.naming.NameNotFoundException: [LDAP: error code 32 - No Such Object]; remaining name 'cn=AD admin,ou=groups,dc=zimbra,dc=local'
    at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.jav a:3030)
    etc...
    ... 24 more

    help....I pay the beer...
    thz... pd: what is trackback??

  6. #6
    adewhurst is offline Starter Member
    Join Date
    Feb 2008
    Posts
    2
    Rep Power
    7

    Unhappy Same problem.

    I'm having the same issue.

    Any help or advice would be much appreciated.

    Thanks,

    Adam

  7. #7
    timwiel is offline Active Member
    Join Date
    Mar 2007
    Posts
    39
    Rep Power
    8

    Default ditto to last two posts

    Any help - followed the gregzimbra1 install to the "T"

  8. #8
    timwiel is offline Active Member
    Join Date
    Mar 2007
    Posts
    39
    Rep Power
    8

    Default

    perhaps I should clarify - I have followed the gregzimbra1 wiki on installing samba and zimbra

    • zimbra works
    • new install of both
    • admin extensions for samba and posix are displaying
    • domain is showing up in samba extension
    • adding new posix group creates the error mentioned in last two posts

  9. #9
    timwiel is offline Active Member
    Join Date
    Mar 2007
    Posts
    39
    Rep Power
    8

    Default

    FYI - Running Ubuntu 6.60LTS, Zimbra zcs-5.0.2_GA_1975.UBUNTU6

  10. #10
    timwiel is offline Active Member
    Join Date
    Mar 2007
    Posts
    39
    Rep Power
    8

    Default

    bump bump bump

Page 1 of 3 123 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 9
    Last Post: 03-01-2008, 08:21 PM
  2. 3 testing: LDAP: 389 Failed when restore zimbra
    By victorLeong in forum Administrators
    Replies: 15
    Last Post: 05-24-2007, 06:45 AM
  3. Unable to start tomcat
    By chanck in forum Administrators
    Replies: 11
    Last Post: 06-11-2006, 12:58 AM
  4. Seeming variety of problems on suse-9.1
    By Crexis in forum Installation
    Replies: 52
    Last Post: 03-04-2006, 12:19 AM
  5. Monitoring : Data not yet avalaible
    By s3nz3x in forum Installation
    Replies: 7
    Last Post: 11-30-2005, 07:18 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •