LDAP schema error

[ArcaneMagus]

If you look at the wiki section that I linked, does it look like those steps have been followed on your system? Meaning do those extra .schema files exist as well as the slapd.conf.in modifications?

[TomB17]

samba.schema was not present and neither lines were in slapd.conf.in. What's more, slapd.conf.in was obviously changed when I upgraded, from the time stamp.

I have made the changes but am still reading .....

[TomB17]

OK, after the schema files were copied in and slapd.conf.in was updated, the user side of Zimbra seems to be working perfectly. Thank you!!!

Also, I can now get into the admin screen. I'm back to the very original problem.

When I try to add an account, I get the following error.

Message: invalid request: createAccount invalid schema change: [LDAP: error code 65 - object class 'posixAccount' requires attribute 'uidNumber'] Error code: service.INVALID_REQUEST Method: CreateAccountRequest Details:soap:Sender

I don't see anything relevant in the log files you mentioned:

/var/log/zimbra.log
/opt/zimbra/mailbox.log
/opt/zimbra/audit.log

[TomB17]

I apologize for making so many posts.

I did some testing and found a relevant entry in /opt/zimbra/log/mailbox.log after a failed mailbox add.

Mar 11 16:37:12 zion slapd[15959]: Entry (uid=johnny,ou=people,dc=liveglobalbid,dc=com): object class 'posixAccount' requires attribute 'uidNumber'
        at com.sun.jndi.ldap.LdapCtx.mapErrorCode(LdapCtx.java:3048)
        at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2963)
        at com.sun.jndi.ldap.LdapCtx.processReturnCode(LdapCtx.java:2769)
        at com.sun.jndi.ldap.LdapCtx.c_createSubcontext(LdapCtx.java:784)
        at com.sun.jndi.toolkit.ctx.ComponentDirContext.p_createSubcontext(ComponentDirContext.java:319)
        at com.sun.jndi.toolkit.ctx.PartialCompositeDirContext.createSubcontext(PartialCompositeDirContext.java:248)
        at javax.naming.directory.InitialDirContext.createSubcontext(InitialDirContext.java:183)
        at com.zimbra.cs.account.ldap.ZimbraLdapContext.createEntry(ZimbraLdapContext.java:598)
        ... 33 more

[ArcaneMagus]

Ok a couple of questions here:
Do you know why the previous admin had even started to setup posix/samba attributes on the accounts? Do you have another server that might be using it as an authentication source? Does it have Samba installed, or another server have it?

If no to those questions... do you actually want this installed on here? There is no benefit to having it installed if you are not going to use the functionality of it (no real harm though other then a bit of extra time spent on upgrades for the 5.0.x branch).

Before you go much further you should ask yourself this, and then we can either work to get that integration working properly, or remove it so it will no longer cause errors.

[TomB17]

I don't know why the previous admin installed posix/samba. We have two systems but the second is simply an rsync'd copy of the first. I don't believe they are a cluster but I'm somewhat new to Zimbra so I might be missing something.

Samba is installed on both systems but is not running on either.

I would like to simplify the configuration, if possible.

I really appreciate your time and expertise. Thank you.

[TomB17]

... I just found out, the second mail server is a test system. No cluster.

[ArcaneMagus]

Well if you aren't using the samba/posix stuff for anything, then you probably want to remove it.

Try running these commands as the zimbra user and see if you get any errors, if not, see if it got rid of the other errors you are getting about posix attributes:

zmprov mcf -zimbraAccountExtraObjectClass posixAccount 
zmprov mcf -zimbraAccountExtraObjectClass sambaSamAccount

You might also have to do some removal of the samba/posix specific attributes.

[TomB17]

Everything is now working. I can add new accounts.

Thank you very much. This is a huge gain.

I will now set about reading everything I can so I'm less helpless in the future.

I really appreciate the help.

[ArcaneMagus]

Glad it was that simple

You might want to try removing the

include "/opt/zimbra/openldap/etc/openldap/schema/nis.schema"
include "/opt/zimbra/openldap/etc/openldap/schema/samba.schema"

lines, as well as the index and other related lines. Restart Zimbra and see if you get any errors.

Also don't forget to remove those admin extensions if you installed them.