Error while changing values via zmprov

[borispr]

zmprov ma user attr value
gives
ERROR: service.FAILURE (system failure: ZimbraLdapContext)

zmprov ga
returns values without error

Also errors in the log when imap client connects
2011-04-01 13:53:42,335 WARN [ImapServer-10] [ip=178.176.87.221;] account - updating zimbraLastLogonTimestamp
com.zimbra.common.service.ServiceException: system failure: ZimbraLdapContext
ExceptionId:ImapServer-10:1301651622335:a1c5dec31a2ea90d
Code:service.FAILURE
at com.zimbra.common.service.ServiceException.FAILURE (ServiceException.java:251)
at com.zimbra.cs.account.ldap.ZimbraLdapContext.<init >(ZimbraLdapContext.java:350)
at com.zimbra.cs.account.ldap.ZimbraLdapContext.<init >(ZimbraLdapContext.java:321)
at com.zimbra.cs.account.ldap.LdapProvisioning.modify AttrsInternal(LdapProvisioning.java:316)
at com.zimbra.cs.account.ldap.LdapProvisioning.modify Attrs(LdapProvisioning.java:295)
at com.zimbra.cs.account.ldap.LdapProvisioning.modify Attrs(LdapProvisioning.java:276)
at com.zimbra.cs.account.Provisioning.modifyAttrs(Pro visioning.java:301)
at com.zimbra.cs.account.ldap.LdapProvisioning.update LastLogon(LdapProvisioning.java:3315)
at com.zimbra.cs.account.ldap.LdapProvisioning.authAc count(LdapProvisioning.java:3281)
at com.zimbra.cs.account.ldap.LdapProvisioning.authAc count(LdapProvisioning.java:3234)
at com.zimbra.cs.security.sasl.AuthenticatorUtil.auth enticate(AuthenticatorUtil.java:49)
at com.zimbra.cs.imap.ImapHandler.authenticate(ImapHa ndler.java:1165)
at com.zimbra.cs.imap.ImapHandler.doLOGIN(ImapHandler .java:1127)
at com.zimbra.cs.imap.ImapHandler.executeRequest(Imap Handler.java:456)
at com.zimbra.cs.imap.TcpImapHandler.processCommand(T cpImapHandler.java:101)
at com.zimbra.cs.tcpserver.ProtocolHandler.processCon nection(ProtocolHandler.java:175)
at com.zimbra.cs.tcpserver.ProtocolHandler.run(Protoc olHandler.java:132)
at EDU.oswego.cs.dl.util.concurrent.PooledExecutor$Wo rker.run(Unknown Source)
at java.lang.Thread.run(Thread.java:619)
Caused by: javax.naming.CommunicationException: localhost:636 [Root exception is java.net.ConnectException: Connection refused]
at com.sun.jndi.ldap.Connection.<init>(Connection.jav a:197)
at com.sun.jndi.ldap.LdapClient.<init>(LdapClient.jav a:118)
at com.sun.jndi.ldap.LdapClient.getInstance(LdapClien t.java:1580)
at com.sun.jndi.ldap.LdapCtx.connect(LdapCtx.java:265 2)
at com.sun.jndi.ldap.LdapCtx.<init>(LdapCtx.java:293)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURL(LdapC txFactory.java:175)
at com.sun.jndi.ldap.LdapCtxFactory.getUsingURLs(Ldap CtxFactory.java:193)
at com.sun.jndi.ldap.LdapCtxFactory.getLdapCtxInstanc e(LdapCtxFactory.java:136)
at com.sun.jndi.ldap.LdapCtxFactory.getInitialContext (LdapCtxFactory.java:66)
at javax.naming.spi.NamingManager.getInitialContext(N amingManager.java:667)
at javax.naming.InitialContext.getDefaultInitCtx(Init ialContext.java:288)
at javax.naming.InitialContext.init(InitialContext.ja va:223)
at javax.naming.ldap.InitialLdapContext.<init>(Initia lLdapContext.java:134)
at com.zimbra.cs.account.ldap.ZimbraLdapContext.<init >(ZimbraLdapContext.java:336)
... 17 more
Caused by: java.net.ConnectException: Connection refused
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.PlainSocketImpl.doConnect(PlainSocketImpl .java:333)
at java.net.PlainSocketImpl.connectToAddress(PlainSoc ketImpl.java:195)
at java.net.PlainSocketImpl.connect(PlainSocketImpl.j ava:182)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.j ava:366)
at java.net.Socket.connect(Socket.java:525)
at com.sun.net.ssl.internal.ssl.SSLSocketImpl.connect (SSLSocketImpl.java:550)
at sun.reflect.GeneratedMethodAccessor3.invoke(Unknow n Source)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(De legatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at com.sun.jndi.ldap.Connection.createSocket(Connecti on.java:297)
at com.sun.jndi.ldap.Connection.<init>(Connection.jav a:184)
... 30 more

What I have broken and how to repair it?

[gvillari]

Hi,

The problem would appear to be the inability to retrieve certain attributes from LDAP as evidenced by this message:

Caused by: javax.naming.CommunicationException: localhost:636 [Root exception is java.net.ConnectException: Connection refused]

Also the default port to contact the ldap is 389, your is 636, why?

Regards

[borispr]

ldap works on 389, I can execute ldapsearch
seems java tries to connect via ldaps (636) and it is not working
ldap is started this way
/opt/zimbra/openldap/sbin/slapd -l LOCAL0 -4 -u zimbra -h ldap://hostname:389 ldapi:/// -F /opt/zimbra/data/ldap/config
I don't know why java tries to use ldaps

[gvillari]

Run the following commands on the Zimbra server:

cat /etc/hosts
cat /etc/resolv.conf
host `hostname`  <-- use backticks not single quotes
dig yourdomain.com mx 
dig yourdomain.com any

and post the output here.

Regards

[borispr]

I have found how I broken it.
After "locahost:636" I have remembered that have tried to configure ldaps to use in local net,tried to change slapd parameters in different ways and did not return everything back
ldap_master_url was "ldap://hostname:389 ldaps://"
I changed it back to "ldap://hostname:389" and now zmprov works fine.

Thanks for help

[gvillari]

Glad you have solved.

Regards