Possible corrupt LDAP

[weezbunbun]

Copied all certs. Still zmmailboxdctl is not running. I don't care if this is a fully functioning server. I just need to be able to login so I can export a few of the secretaries calendars and messages. But I guess there is no way to do that without all of the services running.

[quanah]

You want:

/opt/zimbra/conf/*.crt
/opt/zimbra/conf/*.key
/opt/zimbra/conf/ca/*
/opt/zimbra/java/jre/lib/security/cacerts

--Quanah

[weezbunbun]

Copied but still the same. Anything else I can look at?

[weezbunbun]

Is there a way to export certian accounts from the data without the server running? I tried zmmailbox but get error-
ERROR: zclient.IO_ERROR (invoke Connection refused, server: localhost) (cause: java.net.ConnectException Connection refused)
I imagine because zmmailboxdctl is not running. There are just a couple of important calendars in a couple of accounts I'd like to retrieve.

[quanah]

You need to check the /opt/zimbra/log directory to see why mailbox won't start. Particularly the mailbox.log and zmmailboxd.out files. Make sure you run "zmmailboxdctl start" first, so it'll generate data on why it won't start up.

One other file you need to copy from your backup, is /opt/zimbra/jetty/etc/keystore to the new system. I forgot to list that one previously.

--Quanah

[weezbunbun]

Put the keystore file in and nothing would start. Maybe corrupt? Put the old one back in and there is no new output in mailbox.log but zmmailboxd.out shows-
CompilerOracle: exclude com/zimbra/cs/session/SessionMap.putAndPrune
CompilerOracle: exclude com/zimbra/cs/mailbox/MailItem.delete
CompilerOracle: exclude org/apache/xerces/impl/XMLDocumentFragmentScannerImpl$FragmentContentDisp atcher.dispatch
0 INFO [main] log - Logging to org.slf4j.impl.Log4jLoggerAdapter(org.mortbay.log) via org.mortbay.log.Slf4jLog
Total time for which application threads were stopped: 0.0001210 seconds
Zimbra server reserving server socket port=110 bindaddr=null ssl=false
Zimbra server reserving server socket port=995 bindaddr=null ssl=true
Fatal error: exception while binding to ports
java.net.SocketException: Unbound server sockets not implemented
at javax.net.ServerSocketFactory.createServerSocket(S erverSocketFactory.java:80)
at com.zimbra.common.util.NetUtil.newBoundServerSocke t(NetUtil.java:95)
at com.zimbra.common.util.NetUtil.bindServerSocket(Ne tUtil.java:163)
at com.zimbra.common.util.NetUtil.bindSslTcpServerSoc ket(NetUtil.java:54)
at com.zimbra.common.handlers.PrivilegedHandler.openP orts(PrivilegedHandler.java:89)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Nativ e Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Native MethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(De legatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.mortbay.xml.XmlConfiguration.call(XmlConfigura tion.java:542)
at org.mortbay.xml.XmlConfiguration.configure(XmlConf iguration.java:252)
at org.mortbay.xml.XmlConfiguration.configure(XmlConf iguration.java:214)
at org.mortbay.xml.XmlConfiguration.main(XmlConfigura tion.java:974)
at sun.reflect.NativeMethodAccessorImpl.invoke0(Nativ e Method)
at sun.reflect.NativeMethodAccessorImpl.invoke(Native MethodAccessorImpl.java:39)
at sun.reflect.DelegatingMethodAccessorImpl.invoke(De legatingMethodAccessorImpl.java:25)
at java.lang.reflect.Method.invoke(Method.java:597)
at org.mortbay.start.Main.invokeMain(Main.java:194)
at org.mortbay.start.Main.start(Main.java:534)
at org.mortbay.start.Main.start(Main.java:441)
at org.mortbay.start.Main.main(Main.java:119)
Heap
def new generation total 358528K, used 12749K [0x0000000096c00000, 0x00000000af100000, 0x00000000af100000)
eden space 318720K, 4% used [0x0000000096c00000, 0x0000000097873428, 0x00000000aa340000)
from space 39808K, 0% used [0x00000000aa340000, 0x00000000aa340000, 0x00000000aca20000)
to space 39808K, 0% used [0x00000000aca20000, 0x00000000aca20000, 0x00000000af100000)
concurrent mark-sweep generation total 1195008K, used 0K [0x00000000af100000, 0x00000000f8000000, 0x00000000f8000000)
concurrent-mark-sweep perm gen total 131072K, used 9146K [0x00000000f8000000, 0x0000000100000000, 0x0000000100000000)

I really appreciate all the help and so will my users.

[quanah]

Zimbra server reserving server socket port=110 bindaddr=null ssl=false
Zimbra server reserving server socket port=995 bindaddr=null ssl=true

This would look to me like it doesn't have knowledge of the IP address/hostname it is supposed to be using, thus it can't start up.

[DanC]

What does this output?:
$ keytool -list -keystore /opt/zimbra/jetty/etc/keystore -storepass `zmlocalconfig -m nokey -s mailboxd_keystore_password`


You need to make sure your keystore is good.

[weezbunbun]

Keystore type: JKS
Keystore provider: SUN

Your keystore contains 1 entry

jetty, Jun 21, 2008, PrivateKeyEntry,
Certificate fingerprint (MD5): C3:04:C5:9B:20:7C:98:7C:58:41:F1:12:50:29:A6:72

[weezbunbun]

So when I copied the certs I didn't have a java directory in the copy I guess it got corrupted so I didn't have the /opt/zimbra/java/jre/lib/security/cacerts

Now when I start the server I get-
Starting ldap...Done.
Unable to determine enabled services from ldap.
Enabled services read from cache. Service list may be inaccurate.
Starting zmconfigd...Done.
Starting logger...Failed.
Starting logswatch...ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed)
zimbra logger service is not enabled! failed.


Starting mailbox...Done.
Starting antispam...Done.
Starting antivirus...Done.
Starting snmp...Done.
Starting spell...Done.
Starting mta...Done.
Starting stats...Done.

And zmcontrol status gives-
Unable to determine enabled services from ldap.
Enabled services read from cache. Service list may be inaccurate.
Host mail.americanleadership.net
antispam Running
antivirus Running
ldap Running
logger Stopped
zmlogswatchctl is not running
mailbox Stopped
zmmailboxdctl is not running.
mta Running
snmp Running
spell Running
stats Running
zmconfigd Running
Seems I'm going backwards