zmperditionctl start asking for password

[k7sle]

I upgraded from ZCS FOSS 4.5.9 on Ubuntu 6.06.1 LTS (fully patched) to ZCS FOSS 5.0.2 and all seems like it is ok, except that IMAP doesn't seem to be working correctly.

When I try to connect, it asks me to verify and accept my self-signed certificate for IMAP4-SSL, Port 993. So far so good, but from now on, Thunderbird will not see any changes to the mailbox or messages. If I go to the web interface, all my mail is there, including test messages I sent after this problem began. After doing MUCH searching and troubleshooting, I traced part of the problem to the fact that zmperditionctl is asking for a password that I don't have a clue of. Any suggestions? I am not sure what other information you might need.

Chris

zimbra@giskard:~$ zmcontrol -v


Release 5.0.2_GA_1975.UBUNTU6 UBUNTU6 FOSS edition

zimbra@giskard:~$ zmperditionctl status
imap4 is not running
imap4s is not running
pop3 is not running
pop3s is not running
zimbra@giskard:~$ zmperditionctl start
Starting imap4
Password:
Starting imap4s
Password:
Starting pop3
Password:
Starting pop3s
Password:
imap4 is not running
imap4s is not running
pop3 is not running
pop3s is not running
zimbra@giskard:~$  zmperditionctl start
Starting imap4
Password:
Sorry, try again.
Password:
Sorry, try again.
Password:
Sorry, try again.
sudo: 3 incorrect password attempts
...<and so on>...

[jholder]

Try running zmfixperms.

[quanah]

5.0.2 does not use perdition, therefore you can't run it. 5.0.2 uses nginx instead. The command to start/stop nginx is "zmproxyctl"

--Quanah

[jholder]

Originally Posted by quanah

5.0.2 does not use perdition, therefore you can't run it. 5.0.2 uses nginx instead. The command to start/stop nginx is "zmproxyctl"

--Quanah

HAHAHA I knew that.

[k7sle]

Ok, I tried that and ran the zmfixperms as the zimbra user originally, It failed big time because about 60% of the directories are owned by root. So, as shown below, I ran it as root. It didn't touch most of the hard directories, but the symlinks looked ok. However, the results are the same. The hard directories are still owned by root. Symlinks are owned by zimbra. :/

The commands & output:

root@giskard:/opt/zimbra# /opt/zimbra/libexec/zmfixperms -verbose
Fixing ownership and permisions on /opt/zimbra/java
Fixing ownership and permisions on /opt/zimbra/lib
Fixing ownership and permisions on /opt/zimbra/db
Fixing ownership and permisions on /opt/zimbra/cyrus-sasl
Fixing ownership and permisions on /opt/zimbra/dspam
Fixing ownership and permisions on /opt/zimbra/jetty
Fixing ownership and permisions on /opt/zimbra/ssl
Fixing ownership and permisions on /opt/zimbra/httpd
Fixing ownership and permisions on /opt/zimbra/logger/mysql
Fixing ownership and permisions on /opt/zimbra/logger/db
Fixing ownership and permisions on /opt/zimbra/mysql
Fixing ownership and permisions on /opt/zimbra/snmp
Fixing ownership and permisions on /opt/zimbra/openldap
Fixing ownership and permisions on /opt/zimbra/sleepycat
Fixing ownership and permisions on /opt/zimbra/clamav
Fixing ownership and permisions on /opt/zimbra/amavisd
Fixing ownership and permisions on /opt/zimbra/tomcat
Fixing ownership and permisions on /opt/zimbra/zimbramon/lib
Fixing ownership and permisions on /opt/zimbra/rrdtool
Fixing ownership and permisions on /opt/zimbra/postfix
root@giskard:/opt/zimbra# su - zimbra
zimbra@giskard:~$ zmcontrol restart


Release 5.0.2_GA_1975.UBUNTU6 UBUNTU6 FOSS edition

/opt/zimbra/bin/zmcontrol [-v -h -H <host>] command [args]

        -v:     display version
        -h:     print usage statement
        -H:     Host name (localhost)

        Command in:
                maintenance                Toggle maintenance mode
                shutdown                             Stop services
                start                               Start services
                startup                             Start services
                status                      Display service status
                stop                                 Stop services

zimbra@giskard:~$ zmcontrol stop
Host giskard.k7sle.com
        Stopping stats...Done
        Stopping mta...Done
        Stopping spell...Done
        Stopping snmp...Done
        Stopping archiving...Done
        Stopping antivirus...Done
        Stopping antispam...Done
        Stopping imapproxy...Done
        Stopping mailbox...Done
        Stopping logger...Done
        Stopping ldap...Done
zimbra@giskard:~$ zmcontrol start
Host giskard.k7sle.com
        Starting ldap...Done.
        Starting logger...Done.
        Starting mailbox...Done.
        Starting imapproxy...Done.
        Starting antispam...Done.
        Starting antivirus...Done.
        Starting snmp...Done.
        Starting spell...Done.
        Starting mta...Done.
        Starting stats...Done.
zimbra@giskard:~$ zmperditionctl status
imap4 is not running
imap4s is not running
pop3 is not running
pop3s is not running
zimbra@giskard:~$

The actual directory listing:

zimbra@giskard:~$ ls -lF --color
total 216
lrwxrwxrwx  1 zimbra zimbra   29 Feb  5 00:26 amavisd -> /opt/zimbra/amavisd-new-2.5.2/
drwxr-xr-x  8 zimbra zimbra 4096 Feb  5 10:02 amavisd-new-2.5.2/
drwxr-xr-x  6 root   root   4096 Feb  4 23:41 apache-tomcat-5.5.15/
drwxr-xr-x  6 zimbra zimbra 4096 Feb  5 00:27 aspell-0.60.5/
drwxr-xr-x  2 zimbra zimbra 4096 Nov 27 21:49 backup/
drwxr-xr-x  2 root   root   4096 Feb  5 00:26 bin/
lrwxrwxrwx  1 zimbra zimbra   23 Feb  5 00:26 clamav -> /opt/zimbra/clamav-0.92/
drwxr-xr-x  3 root   root   4096 Feb  4 23:41 clamav-0.91.1/
drwxr-xr-x  9 root   root   4096 Feb  5 00:26 clamav-0.92/
drwxr-xr-x  7 zimbra zimbra 4096 Feb  5 10:02 conf/
-rw-------  1 zimbra zimbra 1135 Nov 27 22:00 config.11270
-rw-------  1 zimbra zimbra 1749 Feb  5 00:33 config.1129
-rw-------  1 zimbra zimbra 1736 Feb  5 00:03 config.25749
drwxr-xr-x  2 zimbra zimbra 4096 Feb  5 00:26 contrib/
drwxr-xr-x  2 zimbra zimbra 4096 Nov 27 21:50 convertd/
lrwxrwxrwx  1 zimbra zimbra   23 Feb  5 00:26 curl -> /opt/zimbra/curl-7.17.0/
drwxr-xr-x  6 zimbra zimbra 4096 Feb  5 00:26 curl-7.17.0/
lrwxrwxrwx  1 zimbra zimbra   32 Feb  5 00:26 cyrus-sasl -> /opt/zimbra/cyrus-sasl-2.1.22.3z/
drwxr-xr-x  4 root   zimbra 4096 Feb  4 23:41 cyrus-sasl-2.1.22.3/
drwxr-xr-x  8 root   zimbra 4096 Feb  5 00:26 cyrus-sasl-2.1.22.3z/
drwxr-xr-x  3 zimbra zimbra 4096 Feb  5 10:01 db/
drwxr-xr-x  2 zimbra zimbra 4096 Feb  5 00:26 doc/
lrwxrwxrwx  1 zimbra zimbra   23 Feb  5 00:26 dspam -> /opt/zimbra/dspam-3.8.0/
drwxr-xr-x  7 root   root   4096 Feb  5 00:26 dspam-3.8.0/
lrwxrwxrwx  1 zimbra zimbra   25 Feb  5 00:26 heimdal -> /opt/zimbra/heimdal-1.0.2/
drwxr-xr-x  6 zimbra zimbra 4096 Feb  5 00:26 heimdal-1.0.2/
lrwxrwxrwx  1 zimbra zimbra   23 Feb  5 00:27 httpd -> /opt/zimbra/httpd-2.2.6/
drwxr-xr-x 15 root   root   4096 Feb  5 00:27 httpd-2.2.6/
drwxr-xr-x  3 zimbra zimbra 4096 Nov 27 22:07 index/
lrwxrwxrwx  1 zimbra zimbra   23 Feb  5 00:26 java -> /opt/zimbra/jdk1.6.0_04/
drwxr-xr-x  3 zimbra zimbra 4096 Feb  4 23:41 jdk1.6.0_02/
drwxr-xr-x  8 root   root   4096 Feb  5 00:26 jdk1.6.0_04/
lrwxrwxrwx  1 zimbra zimbra   23 Feb  5 00:27 jetty -> /opt/zimbra/jetty-6.1.5/
drwxr-xr-x 11 root   root   4096 Feb  5 00:27 jetty-6.1.5/
drwxr-xr-x  5 root   root   4096 Feb  5 00:26 lib/
drwxr-xr-x  4 root   root   4096 Feb  5 00:26 libexec/
drwxr-xr-x  2 zimbra zimbra 4096 Feb  5 10:06 log/
drwxr-xr-x  4 zimbra zimbra 4096 Feb  5 00:26 logger/
lrwxrwxrwx  1 zimbra zimbra   23 Feb  5 00:27 mailboxd -> /opt/zimbra/jetty-6.1.5/
lrwxrwxrwx  1 zimbra zimbra   27 Feb  5 00:27 memcached -> /opt/zimbra/memcached-1.2.4/
drwxr-xr-x  6 zimbra zimbra 4096 Feb  5 00:27 memcached-1.2.4/
lrwxrwxrwx  1 zimbra zimbra   59 Feb  5 00:27 mysql -> /opt/zimbra/mysql-standard-5.0.45-pc-linux-gnu-i686-glibc23/
drwxr-xr-x  9 root   root   4096 Feb  5 00:27 mysql-standard-5.0.45-pc-linux-gnu-i686-glibc23/
drwxr-xr-x 10 root   root   4096 Feb  5 00:26 net-snmp-5.4.1/
lrwxrwxrwx  1 zimbra zimbra   31 Feb  5 00:27 nginx -> /opt/zimbra/nginx-0.5.30-zimbra/
drwxr-xr-x  6 zimbra zimbra 4096 Feb  5 00:27 nginx-0.5.30-zimbra/
lrwxrwxrwx  1 zimbra zimbra   30 Feb  5 00:26 openldap -> /opt/zimbra/openldap-2.3.40.7z/
drwxr-xr-x 10 root   root   4096 Feb  5 00:26 openldap-2.3.40.7z/
lrwxrwxrwx  1 zimbra zimbra   36 Feb  5 00:26 openldap-clibs -> /opt/zimbra/openldap-clibs-2.3.40.7z/
drwxr-xr-x  3 root   root   4096 Feb  5 00:26 openldap-clibs-2.3.40.7z/
drwxr-xr-x  4 zimbra zimbra 4096 Feb  5 00:30 openldap-data/
drwxr-xr-x  2 root   root   4096 Nov 27 21:49 openldap-replica/
lrwxrwxrwx  1 zimbra zimbra   26 Feb  5 00:26 openssl -> /opt/zimbra/openssl-0.9.8g/
drwxr-xr-x  6 zimbra zimbra 4096 Feb  5 00:26 openssl-0.9.8g/
drwxr-xr-x  3 root   root   4096 Feb  4 23:41 perdition-1.17.1/
lrwxrwxrwx  1 root   root     28 Feb  5 00:26 postfix -> /opt/zimbra/postfix-2.4.3.4z/
drwxr-xr-x  4 root   root   4096 Feb  4 23:41 postfix-2.2.9/
drwxr-xr-x  3 root   root   4096 Feb  4 23:53 postfix-2.4.3.3/
drwxr-xr-x  3 root   root   4096 Feb  4 23:54 postfix-2.4.3.3z/
drwxr-xr-x  7 root   root   4096 Feb  5 00:26 postfix-2.4.3.4z/
drwxr-xr-x  3 zimbra zimbra 4096 Feb  5 10:00 redolog/
lrwxrwxrwx  1 zimbra zimbra   30 Feb  5 00:26 sleepycat -> /opt/zimbra/sleepycat-4.2.52.6/
drwxr-xr-x  6 root   root   4096 Feb  5 00:26 sleepycat-4.2.52.6/
lrwxrwxrwx  1 zimbra zimbra   26 Feb  5 00:26 snmp -> /opt/zimbra/net-snmp-5.4.1/
drwx------  5 zimbra zimbra 4096 Feb  5 00:04 ssl/
drwxr-xr-x  4 zimbra zimbra 4096 Nov 27 22:07 store/
lrwxrwxrwx  1 zimbra zimbra   27 Feb  5 00:26 tcmalloc -> /opt/zimbra/tcmalloc-0.94.1/
drwxr-xr-x  7 zimbra zimbra 4096 Feb  5 00:26 tcmalloc-0.94.1/
lrwxrwxrwx  1 zimbra zimbra   32 Feb  5 00:27 tomcat -> /opt/zimbra/apache-tomcat-5.5.15/
drwxr-xr-x  3 zimbra zimbra 4096 Feb  5 00:27 wiki/
drwxr-xr-x  6 root   root   4096 Feb  5 00:26 zimbramon/
drwxr-xr-x  2 zimbra zimbra 4096 Feb  5 00:27 zimlets/
drwxr-xr-x  2 zimbra zimbra 4096 Feb  5 00:27 zimlets-admin-extra/
drwxr-xr-x  2 zimbra zimbra 4096 Feb  5 00:27 zimlets-extra/
drwxr-xr-x 72 zimbra zimbra 4096 Feb  5 00:13 zmstat/
zimbra@giskard:~$

[k7sle]

Originally Posted by quanah

5.0.2 does not use perdition, therefore you can't run it. 5.0.2 uses nginx instead. The command to start/stop nginx is "zmproxyctl"

--Quanah

In any event, the problem remains. I can connect, but that's about it. It's like knocking on the door, the door opens, but nobody is home. I can't see anything through the IMAP-SSL connection. Web works fine, though. I can't remember how to put IMAP logging into a debug mode, either. Googling for it didn't help.

Here is the output:

zimbra@giskard:~$ zmproxyctl status
nginx is running
memcached is running

[k7sle]

What would happen if I simply did:

chown -R zimbra:zimbra /opt/zimbra

Would that break things?

Thanks,

Chris

[quanah]

I don't think that would have any effect on the issue you are seeing. If nginx and memcached are running, then something else is wrong, but it is quite unlikely to be a permissions issue.

Have you looked in /opt/zimbra/log/nginx.log? Have you looked in /var/log/zimbra.log?

--Quanah

[k7sle]

Here is what /opt/log/nginx.log shows when I execute a 'zmcontrol start'

2008/02/05 13:55:08 [notice] 7294#0: using the "epoll" event method
2008/02/05 13:55:08 [warn] 7294#0: 10240 worker_connections are more than open file resource limit: 1024
2008/02/05 13:55:08 [notice] 7294#0: nginx/0.5.30
2008/02/05 13:55:08 [notice] 7294#0: OS: Linux 2.6.15-51-server
2008/02/05 13:55:08 [notice] 7294#0: sysctl(KERN_RTSIGMAX): 0
2008/02/05 13:55:08 [notice] 7294#0: getrlimit(RLIMIT_NOFILE): 1024:1024
2008/02/05 13:55:08 [notice] 7299#0: start worker processes
2008/02/05 13:55:08 [notice] 7299#0: start worker process 7300
2008/02/05 13:55:08 [notice] 7299#0: start worker process 7301
2008/02/05 13:55:08 [notice] 7299#0: start worker process 7302
2008/02/05 13:55:08 [notice] 7299#0: start worker process 7305

Here is what happens when Thunderbird connects (same logfile):

2008/02/05 13:56:11 [info] 7300#0: *1 client 209.152.39.170 connected to 0.0.0.0:993
2008/02/05 13:56:11 [notice] 7299#0: signal 17 (SIGCHLD) received
2008/02/05 13:56:11 [alert] 7299#0: worker process 7300 exited on signal 11
2008/02/05 13:56:11 [notice] 7299#0: start worker process 7887
2008/02/05 13:56:11 [notice] 7299#0: signal 29 (SIGIO) received

I looked at /var/log/zimbra.log, but found no wanrings or errors, other than:

Feb  5 13:55:33 giskard postfix/postfix-script[7538]: warning: not owned by root: /opt/zimbra/postfix-2.4.3.4z/conf/main.cf

[mansoor]

Hello,

Can you please paste the contents of /etc/security/limits.conf ?
It appears that the limit of open file descriptors is 1024 on the system.

As a temporary workaround, please do the following:
1. stop nginx (zmproxyctl stop) -- run this command as zimbra user
2. edit nginx.conf.in (/opt/zimbra/conf/nginx.conf.in) and edit the value of worker_connections from 10240 to 1024
3. restart nginx (zmproxyctl start) -- run this command as zimbra user
4 . connect via thunderbird and see if you are getting this problem

Thanks