"zimbra" user password change

[ukturtle]

Hi

I've searched the forums for an answer to this but all the threads I've found say you don't need to change/know the 'zimbra' user password.

So, here is my problem. I've just upgraded my ZCS OSE 7.0 installation to ZCS OSE 7.1.1 and wanted to run the commands to recreate my self signed certs. In the release notes is says use the commands:

sudo zmcertmgr createca -new
sudo zmcertmgr deployca
sudo zmcertmgr deploycrt self -new

I've used sudo -s to get to root and then su - zimbra to get to the zimbra user but the problem is when you use sudo it prompts for the password of the zimbra user which I don't know. If you try to run the commands without sudo it says "This command needs to be run as user root".

The release notes say "After you upgrade, the following commands run as the zimbra user will regenerate the self-signed SSL certificates".

Can someone help me out here please? I'd like to know if it's OK to change the zimbra user password and if I do change it what is it going to break?

Thanks in anticipation.
Bryn

[gvillari]

Originally Posted by ukturtle

Hi

I've searched the forums for an answer to this but all the threads I've found say you don't need to change/know the 'zimbra' user password.

So, here is my problem. I've just upgraded my ZCS OSE 7.0 installation to ZCS OSE 7.1.1 and wanted to run the commands to recreate my self signed certs. In the release notes is says use the commands:

sudo zmcertmgr createca -new
sudo zmcertmgr deployca
sudo zmcertmgr deploycrt self -new

I've used sudo -s to get to root and then su - zimbra to get to the zimbra user but the problem is when you use sudo it prompts for the password of the zimbra user which I don't know. If you try to run the commands without sudo it says "This command needs to be run as user root".

The release notes say "After you upgrade, the following commands run as the zimbra user will regenerate the self-signed SSL certificates".

Can someone help me out here please? I'd like to know if it's OK to change the zimbra user password and if I do change it what is it going to break?

Thanks in anticipation.
Bryn

Hi,

you can try running the following command as root:

/opt/zimbra/bin/zmcertmgr createca -new
/opt/zimbra/bin/zmcertmgr deployca
/opt/zimbra/bin/zmcertmgr deploycrt self -new

Could this solve your issue?

Regards

[siteox]

I don't get prompted for a password for the zimbra account when I do an su - zimbra.

[pegduffy]

I keep getting prompted for zimbra password whenever I try to run the install script.

I have run these commands as sudo (root) and and from an sudo su - zimbra shell.(zimbra)
[root@zimdev-mbox ~]# zmcertmgr createca -new
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
** Creating CA private key /opt/zimbra/ssl/zimbra/ca/ca.key...done.
** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...done.
[root@zimdev-mbox ~]# zmcertmgr deployca
** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
** Saving global config key zimbraCertAuthorityCertSelfSigned...failed.
** Saving global config key zimbraCertAuthorityKeySelfSigned...failed.
** Copying CA to /opt/zimbra/conf/ca...done.
[root@zimdev-mbox ~]# sudo su - zimbra
[zimbra@zimdev-mbox ~]$ zmcertmgr deployca
/opt/zimbra/bin/zmcertmgr must be run as user root
[zimbra@zimdev-mbox ~]$ exit
logout
[root@zimdev-mbox ~]# zmcertmgr deploycrt self -new
Can't deploy cert for -new. Unknown service.
[root@zimdev-mbox ~]# sudo su - zimbra
[zimbra@zimdev-mbox ~]$ zmcertmgr deploycrt self -new
/opt/zimbra/bin/zmcertmgr must be run as user root
[zimbra@zimdev-mbox ~]$ exit
logout
[root@zimdev-mbox ~]# ps
PID TTY TIME CMD
6134 pts/0 00:00:00 ps
25659 pts/0 00:00:00 bash
[root@zimdev-mbox ~]# whoami
root

Why does this "zmcertmgr deployca" fail when run as root?

Can anybody suggest something else?
{I am very new at this and I am playing on a single server sandbox trying to upgrade from 6.0.14 to 6.0.15 }

Thanks in advance for any help or suggestions you can offer?
Do I just need the password for zimbra?