6.0.1 LDAP Replica

[mackoftrack]

Hi all,

I followed the instructions in the Multi-Server Installation Doc for installing an LDAP replica. I cannot get this thing working. Slapd is running, but an ldapsearch returns 0 entries. Here are some errors I've been getting:

[zimbra@replica root]$ zmupdateauthkeys
ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)
Updating /opt/zimbra/.ssh/authorized_keys

[zimbra@replica root]$ zmldappasswd mysecret
Updating local config and directory
TLS: SSL connect attempt failed with unknown errorerror:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

[zimbra@replica root]$ zmsshkeygen
Generating public/private dsa key pair.
Your identification has been saved in /opt/zimbra/.ssh/zimbra_identity.
Your public key has been saved in /opt/zimbra/.ssh/zimbra_identity.pub.
The key fingerprint is:
d5:17:25:7c:f5:0f:ec:a3:43:84:b2:11:17:9f:ce:7f replica.spacecomputer.com
ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)

Any ideas?

[mackoftrack]

bump

[mackoftrack]

I was able to fix those errors by copying the commercial cert from the main server to this server and running the following:

/opt/zimbra/java/bin/keytool -import -alias new -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit -file /tmp/commercial.crt

However, the replica server still doesn't seem to be working properly. The logs appear to be showing that ldap data is replicated, but when I run ldapsearch, I get nothing:

[root@replica /]# ldapsearch -h replica -x
# extended LDIF
#
# LDAPv3
# base <> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 0 Success

# numResponses: 1

Please help!