no services running HELP!

[BrianA]

Hi,

I fell foul of the expired certificate. I tried recreating one, and also have re-run the install.sh from the same version as I have installed.

there are no services running on ports 80, 143, 993, 7071, only the smtp services on 25 and 465. (checked via nmap)

nmap localhost -p 25,465,80,143,993,7071

Starting Nmap 4.62 ( Nmap - Free Security Scanner For Network Exploration & Security Audits. ) at 2011-02-03 17:49 EST
Interesting ports on localhost.localdomain (127.0.0.1):
PORT STATE SERVICE
25/tcp open smtp
80/tcp closed http
143/tcp closed imap
465/tcp open smtps
993/tcp closed imaps
7071/tcp closed unknown


how on earth do I fix this?

zcs-6.0.4_GA_2038.DEBIAN5.20091214191015


zimbra@mail:~$ zmcontrol status
Host mail.xxxorg.au
antispam Running
antivirus Running
ldap Running
logger Running
mailbox Running
mta Running
snmp Running
spell Running
stats Running

thanks in advance

[phoenix]

You should update your forum profile with the output of the following command )do not post it in this thread)(:

zmcoltrol -v

The information you've provided shows nothing useful expect that all your services are running, there are many threads in the forums that cover the details of how to recreate a certificate.

You could try starting Zimbra and looking in the log files for the exact error and you could also try recreating the certificate via the command line: Administration Console and CLI Certificate Tools - Zimbra :: Wiki

[BrianA]

did this..

Administration Console and CLI Certificate Tools - Zimbra :: Wiki
followed by the repeat the commands in this thread
Severe problems when creating self-signed certificate from CLI

and the logs, well theres no tomcat folder for logs to start with asper the link suggests, and thats the services appears failed?

there appears no "catalina.out" anywhere.

I did "> /opt/zimbra/log/mailbox.log" to empty the file, so I could see where the problems started from.. and the file is owned by zimbra, yet nothing at all written to it as zimbra starts.
startup.log also nothing written to it..

there are also empty stacktraces appearing in the log folder.

also..
zimbra@mail:~/bin$ zmprov
[] INFO: I/O exception (java.net.ConnectException) caught when processing request: Connection refused
[] INFO: Retrying request
ERROR: zclient.IO_ERROR (invoke Connection refused, server: localhost) (cause: java.net.ConnectException Connection refused)


so here I am asking what to do... roll back a day?

[BrianA]

changed the line in hosts to look like this

127.0.1.1 mail.woronoracemetery.org.au mail

and its ok again.. it ran for a year no problems.. shrug.

mail:~# nmap localhost

Starting Nmap 4.62 ( Nmap - Free Security Scanner For Network Exploration & Security Audits. ) at 2011-02-03 20:20 EST
Interesting ports on localhost.localdomain (127.0.0.1):
Not shown: 1705 closed ports
PORT STATE SERVICE
22/tcp open ssh
25/tcp open smtp
80/tcp open http
110/tcp open pop3
143/tcp open imap
465/tcp open smtps
587/tcp open submission
993/tcp open imaps
995/tcp open pop3s

[phoenix]

Glad you've fixed it.

Originally Posted by BrianA

changed the line in hosts to look like this

127.0.1.1 mail.woronoracemetery.org.au mail

and its ok again.. it ran for a year no problems.. shrug.

If that's really what you've changed then the hosts file is totally incorrect. Please go to the Split DNS and post the output from all of the commands in the 'Verify...' section - just for confirmation. Is this server running in a VM by any chance? I'd also suggest you get yourself up to the most recent version of Zimbra, see this announcement:

ZCS 6.0.9 and 5.0.25 Generally Available and OpenSSL Advisory

[BrianA]

--------------------------------------------------------------------------

mail:~# dig woronoracemetery.org.au mx

; <<>> DiG 9.6-ESV-R3 <<>> woronoracemetery.org.au mx
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 7448
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;woronoracemetery.org.au. IN MX

;; ANSWER SECTION:
woronoracemetery.org.au. 3600 IN MX 10 mail.woronoracemetery.org.au.

;; ADDITIONAL SECTION:
mail.woronoracemetery.org.au. 3600 IN A 192.168.32.5

;; Query time: 1 msec
;; SERVER: 192.168.32.1#53(192.168.32.1)
;; WHEN: Thu Feb 3 22:02:49 2011
;; MSG SIZE rcvd: 78
--------------------------------------------------------------------------

mail:~# dig woronoracemetery.org.au any

; <<>> DiG 9.6-ESV-R3 <<>> woronoracemetery.org.au any
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 62336
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4

;; QUESTION SECTION:
;woronoracemetery.org.au. IN ANY

;; ANSWER SECTION:
woronoracemetery.org.au. 3600 IN NS casket.woronora.org.
woronoracemetery.org.au. 3600 IN NS crypt.woronora.org.
woronoracemetery.org.au. 3600 IN SOA crypt.woronora.org. hostmaster.woronora.org. 9 900 600 86400 3600
woronoracemetery.org.au. 3600 IN MX 10 mail.woronoracemetery.org.au.

;; ADDITIONAL SECTION:
casket.woronora.org. 3600 IN A 192.168.32.11
crypt.woronora.org. 3600 IN A 192.168.32.1
crypt.woronora.org. 3600 IN A 192.168.32.124
mail.woronoracemetery.org.au. 3600 IN A 192.168.32.5

;; Query time: 0 msec
;; SERVER: 192.168.32.1#53(192.168.32.1)
;; WHEN: Thu Feb 3 22:03:15 2011
;; MSG SIZE rcvd: 226
--------------------------------------------------------------------------

host $(hostname)
mail.woronoracemetery.org.au A 192.168.32.5
--------------------------------------------------------------------------

mail:~# cat /etc/resolv.conf
domain woronoracemetery.org.au
search woronora.org
nameserver 192.168.32.1
--------------------------------------------------------------------------
mail:~# cat /etc/hosts
192.168.32.5 mail.woronoracemetery.org.au mail
127.0.0.1 localhost.localdomain localhost
127.0.1.1 mail.woronoracemetery.org.au mail

# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts
--------------------------------------------------------------------------
it used to be

127.0.1.1 mail.woronora.org mail

thats a windows domain that was set up ages ago, and that line was added by debian installer. I suspect the new certificate got the "right" hostname mail.woronoracemetery.org.au and was invalidated by this line and the dns lookups....

My only input is the zimbra install should make a 10 year certificate, and so not break the rig after 12 months..

thanks guys - and I'll update all my sites to 6.0.10 cause you asked so nicely.

[phoenix]

Originally Posted by BrianA

mail:~# cat /etc/hosts
192.168.32.5 mail.woronoracemetery.org.au mail
127.0.0.1 localhost.localdomain localhost
127.0.1.1 mail.woronoracemetery.org.au mail

# The following lines are desirable for IPv6 capable hosts
::1 localhost ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts
--------------------------------------------------------------------------
it used to be

127.0.1.1 mail.woronora.org mail

Everything is OK except for the hosts file above, it should only contain the following:

192.168.32.5 mail.woronoracemetery.org.au mail
127.0.0.1 localhost.localdomain localhost

Originally Posted by BrianA

thats a windows domain that was set up ages ago, and that line was added by debian installer. I suspect the new certificate got the "right" hostname mail.woronoracemetery.org.au and was invalidated by this line and the dns lookups....

Yes and it should be reomoved to contain only the lines I've given you above.

Originally Posted by BrianA

My only input is the zimbra install should make a 10 year certificate, and so not break the rig after 12 months..

You can generate a certificate of any duration that suits you but if you want the default change then file an RFE.