Problem starting Zimbra 6.0.8

[stivlo]

Hello everyone,

The system used to run, but failed to restart properly. A commercial certificate had been installed previously from the web administration. The system is on an internal IP and has DNS split set.

I've read many messages in the forum and tried the suggestions, but I still could not solve my problem, so I decided to post.

*** About the system:

$ zmcontrol -v
Release 6.0.8_GA_2661.DEBIAN5 DEBIAN5 FOSS edition.

$ cat /etc/issue
Debian GNU/Linux 5.0 \n \l

$ uname -a
Linux mail03 2.6.21.7-2.fc8xen #1 SMP Fri Feb 15 12:39:36 EST 2008 i686 GNU/Linux

*** Trying to start Zimbra:

# /etc/init.d/zimbra start
Host localhost
Unable to determine enabled services from ldap.
Enabled services read from cache. Service list may be inaccurate.
Starting ldap...Done.
Failed.
Started slapd: pid 10321
Error: Unable to check that slapd is listening to connections

*** Strangely enough slapd starts but seems not to listen to connections.

# ps fax | grep slapd
10645 pts/3 S+ 0:00 \_ grep slapd
10321 ? Ssl 0:00 /opt/zimbra/openldap/sbin/slapd -l LOCAL0 -4 -u zimbra -h ldapi:/// -F /opt/zimbra/data/ldap/config

# su - zimbra
$ ldapsearch
ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)

$ nmap localhost

Starting Nmap 4.62 ( Nmap - Free Security Scanner For Network Exploration & Security Audits. ) at 2010-12-04 00:17 UTC
Interesting ports on localhost.localdomain (127.0.0.1):
Not shown: 1713 closed ports
PORT STATE SERVICE
22/tcp open ssh
111/tcp open rpcbind

Nmap done: 1 IP address (1 host up) scanned in 0.143 seconds

*** I stop slapd, through zimbra stop

# /etc/init.d/zimbra stop
Host localhost
Stopping stats...Done.
Stopping mta...Done.
Stopping spell...Done.
Stopping snmp...Done.
Stopping archiving...Done.
Stopping antivirus...Done.
Stopping antispam...Done.
Stopping imapproxy...Done.
Stopping memcached...Done.
Stopping mailbox...Done.
Stopping logger...Done.
Stopping ldap...Done.

*** Grepping ps confirms that is indeed stopped. I try to start slapd by hand:

# /opt/zimbra/openldap/sbin/slapd -l LOCAL0 -4 -u zimbra -h ldap://mail03.obliquid.com:389 ldapi:/// -F /opt/zimbra/data/ldap/config

*** This time slapd starts and listen successfully, and as zimbra user:

$ ldapsearch -h localhost -x -b 'dc=mail03.obliquid.com,dc=com' '(objectclass=*)'
# extended LDIF
#
# LDAPv3
# base <dc=mail03.obliquid.com,dc=com> with scope subtree
# filter: (objectclass=*)
# requesting: ALL
#

# search result
search: 2
result: 32 No such object
matchedDN: dc=com

# numResponses: 1

I'm not an ldap expert and I think my query is probably wrong, but it shows that can connect successfully.

I try again to start zimbra:

$ zmcontrol start
Host localhost
Unable to determine enabled services from ldap.
Enabled services read from cache. Service list may be inaccurate.
Starting mailbox...Done.
Starting antispam...Done.
Starting antivirus...Done.
Starting spell...Done.
Starting mta...Done.
Starting stats...Done.
$ zmcontrol status
Unable to determine enabled services from ldap.
Enabled services read from cache. Service list may be inaccurate.
Host localhost
antispam Running
antivirus Running
ldap Running
mailbox Stopped
zmmailboxdctl is not running.
mta Running
spell Running
stats Running

So all services seem to start, but not the mailbox service (I suppose pop/imap), mysql connection from zimbra user works:

$ mysql
Welcome to the MySQL monitor. Commands end with ; or \g.
Your MySQL connection id is 17
Server version: 5.0.90-log Source distribution

One thing I've noticed that doesn't look right is:

$ zmlocalconfig | grep ldap_url
ldap_url =

But I don't know how to fix it.

Further looking at /var/log/mail.log I see:

Dec 4 00:38:28 mail03 postfix/proxymap[26138]: fatal: /opt/zimbra/conf/ldap-vam.cf: bad string length 0 < 1: server_host =
Dec 4 00:38:28 mail03 postfix/proxymap[26139]: fatal: /opt/zimbra/conf/ldap-vad.cf: bad string length 0 < 1: server_host =
Dec 4 00:38:29 mail03 postfix/smtpd[19405]: warning: private/proxymap socket: service dict_proxy_open: Success
Dec 4 00:38:29 mail03 postfix/master[19093]: warning: process /opt/zimbra/postfix/libexec/proxymap pid 26138 exit status 1
Dec 4 00:38:29 mail03 postfix/master[19093]: warning: /opt/zimbra/postfix/libexec/proxymap: bad command startup -- throttling
Dec 4 00:38:29 mail03 postfix/master[19093]: warning: process /opt/zimbra/postfix/libexec/proxymap pid 26139 exit status 1
Dec 4 00:38:29 mail03 postfix/trivial-rewrite[19096]: warning: private/proxymap socket: service dict_proxy_open: Success
Dec 4 00:40:16 mail03 zmmailboxdmgr[29169]: status requested
Dec 4 00:40:16 mail03 zmmailboxdmgr[29169]: stale pid 16575 found in /opt/zimbra/log/zmmailboxd_manager.pid: No such process
Dec 4 00:40:16 mail03 zmmailboxdmgr[29169]: assuming no other instance is running

Zimbra Log /var/log/zimbra.log

Dec 4 00:42:54 mail03 zimbramon[14672]: 14672:info: zmmtaconfig: gacf ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])
Dec 4 00:42:58 mail03 zimbramon[14672]: 14672:info: zmmtaconfig: Skipping All Reverse Proxy URLs update.
Dec 4 00:42:58 mail03 zimbramon[14672]: 14672:info: zmmtaconfig: Skipping getAllReverseProxyURLs ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])

So seems that zimbra can't authenticate itself to ldap, but I don't know how to fix that.

Sorry for the long post, I would be very happy if someone can help me.

Thank you very much
Regards,
Stivlo



Despite I should not have the proxy server installed (single server installation).

[phoenix]

Is this a new install or an upgrade? Why do you have the proxy service installed on this server? Are your certificates up to date? Have you checked your Split DNS (go to the 'Verify..' section of the article and run the commands there)?