Unable to determine enabled services from ldap.

[flanciotti]

Hi all,
I've got an issue with zcs.

Today, after one year, zimbra doesn't start.

Running "zmcontrol start" I receive these messages:

Host mail.xxxx.it
Starting ldap...Done.
Unable to determine enabled services from ldap.
Unable to determine enabled services. Cache is out of date or doesn't exist.

On many threads I've found information about certificates expiration but after executing (as root)
"chown zimbra:zimbra /opt/zimbra and
"/opt/zimbra/libexec/zmfixperms -verbose"

I receive always the same issue messages.

Any idea?

Thanks is advance.

Fabio

[phoenix]

Originally Posted by flanciotti

On many threads I've found information about certificates expiration but after executing (as root)
"chown zimbra:zimbra /opt/zimbra and
"/opt/zimbra/libexec/zmfixperms -verbose"

Why did you run those commands when the threads mention that your certificates probably need to be regenerated?

[flanciotti]

I tried to regenerate the certificates follow the thread.
These the problems.

The "/opt/zimbra/bin/zmcertmgr deploycrt self" (as root) give these two "failed!".
** Saving server config key zimbraSSLCertificate...failed.
** Saving server config key zimbraSSLPrivateKey...failed.
** Installing mta certificate and key...done.
** Installing slapd certificate and key...done.
** Installing proxy certificate and key...done.
** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
** Installing CA to /opt/zimbra/conf/ca...done.


The "/opt/zimbra/bin/zmcertmgr deployca self" give these error messages:
** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
** Saving global config key zimbraCertAuthorityCertSelfSigned...failed.
** Saving global config key zimbraCertAuthorityKeySelfSigned...failed.
** Copying CA to /opt/zimbra/conf/ca...done.


At the end these is the output of "/opt/zimbra/bin/zmcertmgr viewdeployedcrt" is:

::service mta::
notBefore=Aug 16 10:01:55 2011 GMT
notAfter=Aug 15 10:01:55 2012 GMT
subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
SubjectAltName=
::service proxy::
notBefore=Aug 16 10:01:55 2011 GMT
notAfter=Aug 15 10:01:55 2012 GMT
subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
SubjectAltName=
::service mailboxd::
notBefore=Aug 16 10:01:55 2011 GMT
notAfter=Aug 15 10:01:55 2012 GMT
subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
SubjectAltName=
::service ldap::
notBefore=Aug 16 10:01:55 2011 GMT
notAfter=Aug 15 10:01:55 2012 GMT
subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=mail.xxxxxx.it
SubjectAltName=

Any idea about the failed save?

Thanks again.

Fabio

[phoenix]

Follow the instructions in this article: Administration Console and CLI Certificate Tools - Zimbra :: Wiki

[flanciotti]

I'm following the instructions on this article: Administration Console and CLI Certificate Tools - Zimbra :: Wiki.

The first step is ok.

root@zcs:/tmp# /opt/zimbra/bin/zmcertmgr createca -new
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
** Creating CA private key /opt/zimbra/ssl/zimbra/ca/ca.key...done.
** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...done.

On the second step there is these error: "** Saving server config key zimbraSSLPrivateKey...failed."

root@zcs:/tmp# /opt/zimbra/bin/zmcertmgr createcrt -new -days 365
Validation days: 365
** Creating /opt/zimbra/conf/zmssl.cnf...done
** Backup /opt/zimbra/ssl/zimbra to /opt/zimbra/ssl/zimbra.20110816144849
** Generating a server csr for download self -new -keysize 1024
** Creating /opt/zimbra/conf/zmssl.cnf...done
** Backup /opt/zimbra/ssl/zimbra to /opt/zimbra/ssl/zimbra.20110816144849
** Creating server cert request /opt/zimbra/ssl/zimbra/server/server.csr...done.
** Saving server config key zimbraSSLPrivateKey...failed.
** Signing cert request /opt/zimbra/ssl/zimbra/server/server.csr...done.

How can I solve this problem?

Thanks again,
Fabio

[flanciotti]

Hi all,
today I tried to copy new certificates from another zimbra server following the instructions of this article "http://wiki.zimbra.com/wiki/Transfer_SSL_certificates_between_servers".

The copy is done but when I try to deploy the certificates I always receive these errors:

fabio@zcs:/opt/zimbra/bin$ sudo ./zmcertmgr deploycrt self
** Saving server config key zimbraSSLCertificate...failed.
** Saving server config key zimbraSSLPrivateKey...failed.
** Installing mta certificate and key...done.
** Installing slapd certificate and key...done.
** Installing proxy certificate and key...done.
** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
** Installing CA to /opt/zimbra/conf/ca...done.
fabio@zcs:/opt/zimbra/bin$ sudo su - zimbra
zimbra@zcs:~$ zmcontrol stop
Host mail.xxxxx.it
Stopping stats...Done.
Stopping mta...Done.
Stopping spell...Done.
Stopping snmp...Done.
Stopping archiving...Done.
Stopping antivirus...Done.
Stopping antispam...Done.
Stopping imapproxy...Done.
Stopping memcached...Done.
Stopping mailbox...Done.
Stopping logger...Done.
Stopping ldap...Done.
zimbra@zcs:~$ zmcontrol start
Host mail.xxxxx.it
Starting ldap...Done.
Unable to determine enabled services from ldap.
Unable to determine enabled services. Cache is out of date or doesn't exist.
zimbra@zcs:~$

Have you any idea?

Thanks,
Fabio

[flanciotti]

Hi all,

how can I copy users, store, mailboxes and any other information from two different zcs server except ssl certificates?

It's really urgent for me solve that problem.

Many thanks,
Fabio