Admin WebUI Not Opening

[carnold]

This use to work. Using FOSS 6.0.7 on SLES10 SP3. I can not get to the admin interface via safari or firefox and from different PC's. Where exactly are the log files found for zimbra admin web interface? I looked in /opt/zimbra/log/mailboxd and i do see this:
2010-10-26 14:38:27,043 INFO [btpool0-12://localhostort/service/soap/AuthRequest] [name=email@addressip=private.ip;ua=zclient/6.0.7_GA_2473.SuSEES10;] SoapEngine - handler exception
com.zimbra.common.service.ServiceException: auth credentials have expired
ExceptionId:btpool0-12://localhostort/service/soap/AuthRequest:1288118307039:7a58750264e0868e
Code:service.AUTH_EXPIRED
at com.zimbra.common.service.ServiceException.AUTH_EX PIRED(ServiceException.java:282)
at com.zimbra.cs.service.AuthProvider.validateAuthTok en(AuthProvider.java:507)
at com.zimbra.cs.service.account.Auth.handle(Auth.jav a:72)
at com.zimbra.soap.SoapEngine.dispatchRequest(SoapEng ine.java:420)
at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.jav a:274)
at com.zimbra.soap.SoapEngine.dispatch(SoapEngine.jav a:158)
at com.zimbra.soap.SoapServlet.doWork(SoapServlet.jav a:291)
at com.zimbra.soap.SoapServlet.doPost(SoapServlet.jav a:212)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:727)
at com.zimbra.cs.servlet.ZimbraServlet.service(Zimbra Servlet.java:181)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:820)
at org.mortbay.jetty.servlet.ServletHolder.handle(Ser vletHolder.java:511)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1166)
at com.zimbra.cs.servlet.SetHeaderFilter.doFilter(Set HeaderFilter.java:79)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1157)
at org.mortbay.servlet.UserAgentFilter.doFilter(UserA gentFilter.java:81)
at org.mortbay.servlet.GzipFilter.doFilter(GzipFilter .java:155)
at org.mortbay.jetty.servlet.ServletHandler$CachedCha in.doFilter(ServletHandler.java:1157)
at org.mortbay.jetty.servlet.ServletHandler.handle(Se rvletHandler.java:388)
at org.mortbay.jetty.security.SecurityHandler.handle( SecurityHandler.java:216)
at org.mortbay.jetty.servlet.SessionHandler.handle(Se ssionHandler.java:182)
at org.mortbay.jetty.handler.ContextHandler.handle(Co ntextHandler.java:765)
at org.mortbay.jetty.webapp.WebAppContext.handle(WebA ppContext.java:418)
at org.mortbay.jetty.handler.ContextHandlerCollection .handle(ContextHandlerCollection.java:230)
at org.mortbay.jetty.handler.HandlerCollection.handle (HandlerCollection.java:114)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.handler.rewrite.RewriteHandler.h andle(RewriteHandler.java:230)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.handler.DebugHandler.handle(Debu gHandler.java:77)
at org.mortbay.jetty.handler.HandlerWrapper.handle(Ha ndlerWrapper.java:152)
at org.mortbay.jetty.Server.handle(Server.java:326)
at org.mortbay.jetty.HttpConnection.handleRequest(Htt pConnection.java:543)
at org.mortbay.jetty.HttpConnection$RequestHandler.co ntent(HttpConnection.java:939)
at org.mortbay.jetty.HttpParser.parseNext(HttpParser. java:755)
at org.mortbay.jetty.HttpParser.parseAvailable(HttpPa rser.java:218)
at org.mortbay.jetty.HttpConnection.handle(HttpConnec tion.java:405)
at org.mortbay.io.nio.SelectChannelEndPoint.run(Selec tChannelEndPoint.java:409)
at org.mortbay.thread.BoundedThreadPool$PoolThread.ru n(BoundedThreadPool.java:451)
2010-10-26 14:38:27,088 INFO [btpool0-12://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ip=127.0.0.1;] soap - GetDomainInfoRequest
2010-10-26 14:38:27,166 INFO [btpool0-12://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ip=127.0.0.1;] soap - GetDomainInfoRequest
2010-10-26 14:38:28,567 INFO [btpool0-0://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ip=127.0.0.1;] soap - GetDomainInfoRequest
2010-10-26 14:38:52,860 INFO [LmtpServer-142] [ip=private.ip;] lmtp - Delivering message: size=4932 bytes, nrcpts=1, sender=owner-postfix-users@postfix.org, msgid=<20101026183835.BA4CB1F3EA5@spike.porcupine. org>
2010-10-26 14:38:52,865 INFO [LmtpServer-142] [name=email@address;mid=3;ip=192.168.124.3;] mailop - Adding Message: id=765949, Message-ID=<20101026183835.BA4CB1F3EA5@spike.porcupine.org >, parentId=765866, folderId=2, folderName=Inbox.
2010-10-26 14:38:53,100 INFO [LmtpServer-142] [] ProtocolHandler - Handler exiting normally
2010-10-26 14:38:53,653 WARN [btpool0-1] [] log - javax.net.ssl.SSLException: Received fatal alert: certificate_expired

We are using the default certificate with the admin interface, https://mail.domain.com:7071
How do i regenerate the certificate?

[soxfan]

Have a look at Administration Console and CLI Certificate Tools - Zimbra :: Wiki

[carnold]

So i am following?:
Examples

The following are examples of using the above options for different installation scenarios.
Single-Node Self-Signed Certificate

1. Begin by generating a new Certificate Authority (CA).
zmcertmgr createca -new

2. Then generate a certificate signed by the CA that expires in 365 days.
zmcertmgr createcrt -new -days 365

3. Next deploy the certificate.
zmcertmgr deploycrt self

4. Next deploy the CA.
zmcertmgr deployca

5. To finish, verify the certificate was deployed to all the services.
zmcertmgr viewdeployedcrt

So su zimbra and run zmcertmgr createca -new
/opt/zimbra/bin/zmcertmgr must be run as user root

I have tried both su - zimbra and su zimbra. Does this need the system root or zimbra root? I did try both

[soxfan]

su - zimbra and su zimbra would both run as the Zimbra user. How are you logging into the server? I typically log-in to my server directly as root so I would run these commands right from there. If you are logging in as a "regular" user then you could run 'su -' (no user name specified) to become root.

[carnold]

I login to the server as root. When i run the zmcert command from a CLI, this is what i get:
/opt/zimbra/bin # zmcertmgr createca -new
bash: zmcertmgr: command not found

[soxfan]

Try the full path name of the executable (/opt/zimbra/bin/zmcertmgr) or, if you are in the /opt/zimbra/bin directory, ./ in front of the command (./zmcertmgr)

[carnold]

Well, it worked with /opt/zimbra/bin/zmcertmgr. However, i still can not get to the admin UI. Any other ideas?

[soxfan]

Did you stop and start the Zimbra services after you re-deployed the certs? Are you still getting the same error messages in the logs?

[carnold]

Yes to the start and stop, no to the error in the log (it seems to have gone away but now i see these:
2010-10-26 16:11:47,180 WARN [main] [] log - No value for env-entry-name trustedIPs
2010-10-26 16:11:47,184 INFO [main] [] log - No Transaction manager found - if your webapp requires one, please configure one.
2010-10-26 16:11:47,773 WARN [main] [] log - No value for env-entry-name trustedIPs
2010-10-26 16:11:47,777 INFO [main] [] log - No Transaction manager found - if your webapp requires one, please configure one.
2010-10-26 16:11:48,268 INFO [main] [] log - No Transaction manager found - if your webapp requires one, please configure one.