Unable to determine enabled services from ldap

[mgreen99]

Hi guys,

I know this error is covered in many forum posts. I've ready them over and over and I'm still stuck.

I changed the location of my server (new IP) and now I get the following error and I can't connect to the web or admin interface.

[zimbra@zimbra ~]$ zmcontrol start 
Host zimbra.entrypointglobal.com
	Starting ldap...Done.
Unable to determine enabled services from ldap.
Enabled services read from cache. Service list may be inaccurate.

I still suspect there's a DNS problem (since I changed IPs). Below is some more info that might be useful. BTW, this server is on an internal network NAT'd behind a firewall. Internal IP is 192.168.1.51.

[zimbra@zimbra ~]$ host `hostname`
zimbra.entrypointglobal.com has address 192.168.1.51
zimbra.entrypointglobal.com mail is handled by 10 zimbra.entrypointglobal.com.

[zimbra@zimbra ~]$ more /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1	localhost.localdomain	localhost
192.168.1.51	zimbra.entrypointglobal.com	zimbra

[zimbra@zimbra ~]$ more /etc/resolv.conf
nameserver 127.0.0.1

[zimbra@zimbra ~]$ dig entrypointglobal.com mx

; <<>> DiG 9.3.4-P1 <<>> entrypointglobal.com mx
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23688
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;entrypointglobal.com.		IN	MX

;; ANSWER SECTION:
entrypointglobal.com.	14400	IN	MX	1 66-207-204-78.beanfield.net.
entrypointglobal.com.	14400	IN	MX	3 66-207-204-78.beanfield.net.

;; AUTHORITY SECTION:
entrypointglobal.com.	172137	IN	NS	ns2-melody.webserversystems.com.
entrypointglobal.com.	172137	IN	NS	ns1-melody.webserversystems.com.

;; ADDITIONAL SECTION:
ns1-melody.webserversystems.com. 172137	IN A	174.132.76.3
ns2-melody.webserversystems.com. 172137	IN A	174.132.76.4

;; Query time: 226 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Oct 13 00:14:

[zimbra@zimbra ~]$ dig entrypointglobal.com any

; <<>> DiG 9.3.4-P1 <<>> entrypointglobal.com any
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21999
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 2, ADDITIONAL: 2

;; QUESTION SECTION:
;entrypointglobal.com.		IN	ANY

;; ANSWER SECTION:
entrypointglobal.com.	14382	IN	MX	3 66-207-204-78.beanfield.net.
entrypointglobal.com.	14382	IN	MX	1 66-207-204-78.beanfield.net.
entrypointglobal.com.	172119	IN	NS	ns1-melody.webserversystems.com.
entrypointglobal.com.	172119	IN	NS	ns2-melody.webserversystems.com.

;; AUTHORITY SECTION:
entrypointglobal.com.	172119	IN	NS	ns2-melody.webserversystems.com.
entrypointglobal.com.	172119	IN	NS	ns1-melody.webserversystems.com.

;; ADDITIONAL SECTION:
ns1-melody.webserversystems.com. 172119	IN A	174.132.76.3
ns2-melody.webserversystems.com. 172119	IN A	174.132.76.4

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Oct 13 00:15:13 2009
;; MSG SIZE  rcvd: 224

[mgreen99]

Any ideas guys?

I've got a prod system offline right now

[phoenix]

You appear to have no DNS A record for the Zimbra server in the output from those commands, you need to add one.

[ArcaneMagus]

Not only do you not have an A record for the zimbra server, but your MX records point to 66-207-204-78.beanfield.net. (Twice I might add)

Unless the above address is some sort of filtering / caching machine that then forwards to your zimbra server your public records should have the MX record as zimbra.entrypointglobal.com with an A record pointing to it's public IP address.

On the Zimbra server itself it looks like you have a partial Split DNS setup working where you have the server querying itself, but it has no entry for the domain entrypointglobal.com so it is querying it's forwarder. You should set up a domain on the local DNS server on the Zimbra server that has the proper MX record (like I specified above), and the A record should be pointing to 192.168.1.51.