Results 1 to 7 of 7

Thread: Unable to determine enabled services from ldap.

  1. #1
    flanciotti is offline Junior Member
    Join Date
    Aug 2011
    Posts
    6
    Rep Power
    3

    Default Unable to determine enabled services from ldap.

    Hi all,
    I've got an issue with zcs.

    Today, after one year, zimbra doesn't start.

    Running "zmcontrol start" I receive these messages:

    Host mail.xxxx.it
    Starting ldap...Done.
    Unable to determine enabled services from ldap.
    Unable to determine enabled services. Cache is out of date or doesn't exist.

    On many threads I've found information about certificates expiration but after executing (as root)
    "chown zimbra:zimbra /opt/zimbra and
    "/opt/zimbra/libexec/zmfixperms -verbose"

    I receive always the same issue messages.

    Any idea?

    Thanks is advance.

    Fabio

  2. #2
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    Quote Originally Posted by flanciotti View Post
    On many threads I've found information about certificates expiration but after executing (as root)
    "chown zimbra:zimbra /opt/zimbra and
    "/opt/zimbra/libexec/zmfixperms -verbose"
    Why did you run those commands when the threads mention that your certificates probably need to be regenerated?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    flanciotti is offline Junior Member
    Join Date
    Aug 2011
    Posts
    6
    Rep Power
    3

    Default

    I tried to regenerate the certificates follow the thread.
    These the problems.

    The "/opt/zimbra/bin/zmcertmgr deploycrt self" (as root) give these two "failed!".
    ** Saving server config key zimbraSSLCertificate...failed.
    ** Saving server config key zimbraSSLPrivateKey...failed.
    ** Installing mta certificate and key...done.
    ** Installing slapd certificate and key...done.
    ** Installing proxy certificate and key...done.
    ** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
    ** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
    ** Installing CA to /opt/zimbra/conf/ca...done.


    The "/opt/zimbra/bin/zmcertmgr deployca self" give these error messages:
    ** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
    ** Saving global config key zimbraCertAuthorityCertSelfSigned...failed.
    ** Saving global config key zimbraCertAuthorityKeySelfSigned...failed.
    ** Copying CA to /opt/zimbra/conf/ca...done.


    At the end these is the output of "/opt/zimbra/bin/zmcertmgr viewdeployedcrt" is:

    ::service mta::
    notBefore=Aug 16 10:01:55 2011 GMT
    notAfter=Aug 15 10:01:55 2012 GMT
    subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
    issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
    SubjectAltName=
    ::service proxy::
    notBefore=Aug 16 10:01:55 2011 GMT
    notAfter=Aug 15 10:01:55 2012 GMT
    subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
    issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
    SubjectAltName=
    ::service mailboxd::
    notBefore=Aug 16 10:01:55 2011 GMT
    notAfter=Aug 15 10:01:55 2012 GMT
    subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
    issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
    SubjectAltName=
    ::service ldap::
    notBefore=Aug 16 10:01:55 2011 GMT
    notAfter=Aug 15 10:01:55 2012 GMT
    subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
    issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
    SubjectAltName=

    Any idea about the failed save?

    Thanks again.

    Fabio

  4. #4
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    flanciotti is offline Junior Member
    Join Date
    Aug 2011
    Posts
    6
    Rep Power
    3

    Default

    I'm following the instructions on this article: Administration Console and CLI Certificate Tools - Zimbra :: Wiki.

    The first step is ok.

    root@zcs:/tmp# /opt/zimbra/bin/zmcertmgr createca -new
    ** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
    ** Creating CA private key /opt/zimbra/ssl/zimbra/ca/ca.key...done.
    ** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...done.

    On the second step there is these error: "** Saving server config key zimbraSSLPrivateKey...failed."

    root@zcs:/tmp# /opt/zimbra/bin/zmcertmgr createcrt -new -days 365
    Validation days: 365
    ** Creating /opt/zimbra/conf/zmssl.cnf...done
    ** Backup /opt/zimbra/ssl/zimbra to /opt/zimbra/ssl/zimbra.20110816144849
    ** Generating a server csr for download self -new -keysize 1024
    ** Creating /opt/zimbra/conf/zmssl.cnf...done
    ** Backup /opt/zimbra/ssl/zimbra to /opt/zimbra/ssl/zimbra.20110816144849
    ** Creating server cert request /opt/zimbra/ssl/zimbra/server/server.csr...done.
    ** Saving server config key zimbraSSLPrivateKey...failed.
    ** Signing cert request /opt/zimbra/ssl/zimbra/server/server.csr...done.

    How can I solve this problem?

    Thanks again,
    Fabio

  6. #6
    flanciotti is offline Junior Member
    Join Date
    Aug 2011
    Posts
    6
    Rep Power
    3

    Default

    Hi all,
    today I tried to copy new certificates from another zimbra server following the instructions of this article "http://wiki.zimbra.com/wiki/Transfer_SSL_certificates_between_servers".

    The copy is done but when I try to deploy the certificates I always receive these errors:

    fabio@zcs:/opt/zimbra/bin$ sudo ./zmcertmgr deploycrt self
    ** Saving server config key zimbraSSLCertificate...failed.
    ** Saving server config key zimbraSSLPrivateKey...failed.

    ** Installing mta certificate and key...done.
    ** Installing slapd certificate and key...done.
    ** Installing proxy certificate and key...done.
    ** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
    ** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
    ** Installing CA to /opt/zimbra/conf/ca...done.
    fabio@zcs:/opt/zimbra/bin$ sudo su - zimbra
    zimbra@zcs:~$ zmcontrol stop
    Host mail.xxxxx.it
    Stopping stats...Done.
    Stopping mta...Done.
    Stopping spell...Done.
    Stopping snmp...Done.
    Stopping archiving...Done.
    Stopping antivirus...Done.
    Stopping antispam...Done.
    Stopping imapproxy...Done.
    Stopping memcached...Done.
    Stopping mailbox...Done.
    Stopping logger...Done.
    Stopping ldap...Done.
    zimbra@zcs:~$ zmcontrol start
    Host mail.xxxxx.it
    Starting ldap...Done.
    Unable to determine enabled services from ldap.
    Unable to determine enabled services. Cache is out of date or doesn't exist.

    zimbra@zcs:~$

    Have you any idea?

    Thanks,
    Fabio

  7. #7
    flanciotti is offline Junior Member
    Join Date
    Aug 2011
    Posts
    6
    Rep Power
    3

    Default

    Hi all,

    how can I copy users, store, mailboxes and any other information from two different zcs server except ssl certificates?

    It's really urgent for me solve that problem.

    Many thanks,
    Fabio

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Unable to determine enabled services from ldap.
    By farrukhndm in forum Administrators
    Replies: 15
    Last Post: 02-11-2013, 12:19 AM
  2. Replies: 0
    Last Post: 06-15-2011, 02:14 AM
  3. Unable to determine enabled services from ldap
    By abhiz in forum Installation
    Replies: 1
    Last Post: 06-10-2011, 11:10 PM
  4. Replies: 8
    Last Post: 12-29-2010, 12:50 AM
  5. LDAP Cannot bind on migration to new server
    By neekster in forum Migration
    Replies: 23
    Last Post: 03-09-2009, 02:08 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •