LDAP: error code 49 - Invalid Credentials

[Cuenta]

When I run the command "zmsetup.pl" after the installation (zcs 6.0.8) I get this error:

ERROR: service.FAILURE (system failure: unable to lookup server by name: mail.1980consultors.net message: [LDAP: error code 49 - Invalid Credentials]) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])

Useful info:

cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
#127.0.0.1 lnxserver.1980consultors.es lnxserver localhost.localdomain localhost
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
192.168.0.2 mail.1980consultors.net mail
192.168.0.2 zimbra.1980consultors.net zimbra
192.168.0.2 lnxserver.1980consultors.net lnxserver

cat /etc/resolv.conf
search 1980consultors.es
nameserver 192.168.0.2

dig 1980consultors.net mx

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> 1980consultors.net mx
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 10886
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;1980consultors.net. IN MX

;; ANSWER SECTION:
1980consultors.net. 86400 IN MX 10 mail.1980consultors.net.1980consultors.net.

;; AUTHORITY SECTION:
1980consultors.net. 86400 IN NS zimbra.1980consultors.net.1980consultors.net.

;; Query time: 0 msec
;; SERVER: 192.168.0.2#53(192.168.0.2)
;; WHEN: Thu Nov 4 14:19:56 2010
;; MSG SIZE rcvd: 97

dig 1980consultors.net any

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> 1980consultors.net any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 23617
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;1980consultors.net. IN ANY

;; ANSWER SECTION:
1980consultors.net. 86400 IN SOA zimbra.1980consultors.net.1980consultors.net. root. 6 28800 7200 604800 86400
1980consultors.net. 86400 IN NS zimbra.1980consultors.net.1980consultors.net.
1980consultors.net. 86400 IN MX 10 mail.1980consultors.net.1980consultors.net.

;; Query time: 0 msec
;; SERVER: 192.168.0.2#53(192.168.0.2)
;; WHEN: Thu Nov 4 14:20:18 2010
;; MSG SIZE rcvd: 137

host 1980consultors.net
1980consultors.net mail is handled by 10 mail.1980consultors.net.1980consultors.net.

[phoenix]

Could it be that you don't have an A record and your MX record is also invalid for your server:

1980consultors.net. 86400 IN MX 10 mail.1980consultors.net.1980consultors.net.

You need to check your bind config files, you seem to have an error.

Your hosts file really should contain only the following entries:

127.0.0.1 localhost.localdomain localhost
192.168.0.2 mail.1980consultors.net mail

Check the configuration of these entries in the Split DNS wiki article.

[Cuenta]

Ok, I reconfigured the DNS server. I'm getting the same error in the update.

cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost
::1 localhost6.localdomain6 localhost6
192.168.0.2 mail.1980consultors.net mail

cat /etc/resolv.conf
search 1980consultors.net
nameserver 192.168.0.251 <- the new DNS server

dig 1980consultors.net mx

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> 1980consultors.net mx
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7015
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;1980consultors.net. IN MX

;; ANSWER SECTION:
1980consultors.net. 86400 IN MX 10 mail.1980consultors.net.

;; AUTHORITY SECTION:
1980consultors.net. 86400 IN NS zimbra.1980consultors.net.

;; ADDITIONAL SECTION:
mail.1980consultors.net. 86400 IN A 192.168.0.2

;; Query time: 1 msec
;; SERVER: 192.168.0.251#53(192.168.0.251)
;; WHEN: Fri Nov 5 11:36:09 2010
;; MSG SIZE rcvd: 94

dig 1980consultors.net any

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> 1980consultors.net any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35518
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;1980consultors.net. IN ANY

;; ANSWER SECTION:
1980consultors.net. 86400 IN SOA zimbra.1980consultors.net. root. 10 28800 7200 604800 86400
1980consultors.net. 86400 IN NS zimbra.1980consultors.net.
1980consultors.net. 86400 IN MX 10 mail.1980consultors.net.
1980consultors.net. 86400 IN A 192.168.0.2

;; ADDITIONAL SECTION:
mail.1980consultors.net. 86400 IN A 192.168.0.2

;; Query time: 1 msec
;; SERVER: 192.168.0.251#53(192.168.0.251)
;; WHEN: Fri Nov 5 11:36:23 2010
;; MSG SIZE rcvd: 150

host $(hostname)
mail.1980consultors.net has address 192.168.0.2

host 1980consultors.net
1980consultors.net has address 192.168.0.2
1980consultors.net mail is handled by 10 mail.1980consultors.net.

I attach the installation log.

[phoenix]

Is this a new install and is there any mail on this Zimbra installation that you need to keep?

[Cuenta]

It's an update from 5.0.21_GA_3150 and I need keep all the email accounts.

[phoenix]

Originally Posted by Cuenta

It's an update from 5.0.21_GA_3150 and I need keep all the email accounts.

It's slightly confusing posting this in the Installation forum, I'll move it to the correct forum.

Try the instructions here first (then rerun the set-up): Upgrade to 3.0.1_GA_160 broke

[Cuenta]

Originally Posted by phoenix

Try the instructions here first (then rerun the set-up): Upgrade to 3.0.1_GA_160 broke

When I try to do "zmldappasswd -r "password"" I get :

Updating local config and LDAP
connect: No such file or directory at /opt/zimbra/bin/zmldappasswd line 97, <DATA> line 522.

[phoenix]

I assume you ran this as the Zimbra user? Does that file actually exist?

[Cuenta]

Yes, I ran the command as the Zimbra user.

The line 97 in zmldappasswd is:

$ldap = Net::LDAP->new('ldapi://%2fopt%2fzimbra%2fopenldap%2fvar%2frun%2fldapi/') or die "$@";

But I don't know what is "<DATA> line 522".

[quanah]

This means it was unable to create an ldapi socket, which means there's something very wrong with your system.