undefined symbol: SSL_load_error_strings

[redbaron]

Hi all,

I installed Zimbra on CentOS 5 64bit.
When I'm trying to start Zimbra I get this error:

Starting ldap...Done.
FAILED
sudo: sorry, you must have a tty to run sudo
sudo: sorry, you must have a tty to run sudo
sudo: sorry, you must have a tty to run sudo
sudo: sorry, you must have a tty to run sudo
sudo: sorry, you must have a tty to run sudo
sudo: sorry, you must have a tty to run sudo
sudo: sorry, you must have a tty to run sudo
Failed to start slapd.  Attempting debug start to determine error.

OK, so I tried to run it manually:

 /opt/zimbra/openldap/libexec/slapd -l LOCAL0 -4 -u zimbra -h 'ldap://localhost:389/' -f /opt/zimbra/conf/slapd.conf  -d 1

and I got this error (after a long output):

/opt/zimbra/openldap/libexec/slapd: symbol lookup error: /opt/zimbra/openldap/libexec/slapd: undefined symbol: SSL_load_error_strings

Running it in strace produce this output:

write(2, "    2.5.13.0 (objectIdentifierMa"..., 38    2.5.13.0 (objectIdentifierMatch): ) = 38
write(2, "matchingRuleUse: ( 2.5.13.0 NAME"..., 159matchingRuleUse: ( 2.5.13.0 NAME 'objectIdentifierMatch' APPLIES ( supportedControl $ supportedExtension $ supportedFeatures $ supportedApplicationContext ) )
) = 159
writev(2, [{"/opt/zimbra/openldap/libexec/sla"..., 34}, {": ", 2}, {"symbol lookup error", 19}, {": ", 2}, {"/opt/zimbra/openldap/libexec/sla"..., 34}, {": ", 2}, {"undefined symbol: SSL_load_error"..., 40}, {"", 0}, {"", 0}, {"\n", 1}], 10/opt/zimbra/openldap/libexec/slapd: symbol lookup error: /opt/zimbra/openldap/libexec/slapd: undefined symbol: SSL_load_error_strings
) = 134
exit_group(127)                         = ?
Process 7121 detached

Finally, the ldd output...

 ldd /opt/zimbra/openldap/libexec/slapd
        libsasl2.so.2 => /opt/zimbra/cyrus-sasl/lib/libsasl2.so.2 (0x00002aaaaaad7000)
        libssl.so.4 => /usr/lib64/libssl.so.4 (0x000000365ac00000)
        libcrypto.so.4 => /lib64/libcrypto.so.4 (0x0000003eae400000)
        libcrypt.so.1 => /lib64/libcrypt.so.1 (0x0000003eb4000000)
        libresolv.so.2 => /lib64/libresolv.so.2 (0x0000003ead400000)
        libpthread.so.0 => /lib64/libpthread.so.0 (0x0000003ea4600000)
        libc.so.6 => /lib64/libc.so.6 (0x0000003ea3a00000)
        libdl.so.2 => /lib64/libdl.so.2 (0x0000003ea4200000)
        libxml2.so.2 => /usr/lib64/libxml2.so.2 (0x0000003eaf800000)
        libnss3.so => /usr/lib64/libnss3.so (0x0000003659800000)
        libplc4.so => /usr/lib64/libplc4.so (0x000000365b800000)
        libplds4.so => /usr/lib64/libplds4.so (0x0000003659c00000)
        libnspr4.so => /usr/lib64/libnspr4.so (0x000000365b000000)
        libz.so.1 => /usr/lib64/libz.so.1 (0x0000003ea4a00000)
        /lib64/ld-linux-x86-64.so.2 (0x0000003ea2a00000)
        libm.so.6 => /lib64/libm.so.6 (0x0000003ea3e00000)
        libsoftokn3.so => /usr/lib64/libsoftokn3.so (0x0000003659400000)

How can I resolve this issue? from where can I start searching?
Gili

[phoenix]

Did you modify the sudoers file and install openssl097a as mentioned in various threads in the forums?

[redbaron]

Originally Posted by phoenix

Did you modify the sudoers file and install openssl097a as mentioned in various threads in the forums?

I have openssl-0.9.8b, I don't know if this is a good idea to downgrade.
I have some others applications that use this openssl...

This is my /etc/sudoers

 cat /etc/sudoers | grep -i zimbra
%zimbra   ALL=NOPASSWD:/opt/zimbra/openldap/libexec/slapd
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmtomcatmgr
%zimbra ALL=NOPASSWD:/opt/zimbra/perdition/sbin/perdition
%zimbra   ALL=NOPASSWD:/opt/zimbra/postfix-2.2.9/sbin/postfix, /opt/zimbra/postfix-2.2.9/sbin/postalias, /opt/zimbra/postfix-2.2.9/sbin/qshape.pl, /opt/zimbra/postfix-2.2.9/sbin/postconf,/opt/zimbra/postfix-2.2.9/sbin/postsuper
%zimbra   ALL=NOPASSWD:/opt/zimbra/libexec/zmqstat

oops, I comment out the Defaults requiretty entry, that solved the "sudo" problem...

I think I add all the necessary entries
Gili

[zeus2007]

1, cp from /etc/sudoers in CentOS 4.x
2, reboot
3, install zimbra

It will avoid "sorry, you must have a tty to run sudo sudo".

compare the following config file with yours:

# sudoers file.
#
# This file MUST be edited with the 'visudo' command as root.
#
# See the sudoers man page for the details on how to write a sudoers file.
#

# Host alias specification

# User alias specification

# Cmnd alias specification

# Defaults specification

# User privilege specification
root ALL=(ALL) ALL

# Uncomment to allow people in group wheel to run all commands
# %wheel ALL=(ALL) ALL

# Same thing without a password
# %wheel ALL=(ALL) NOPASSWD: ALL

# Samples
# %users ALL=/sbin/mount /cdrom,/sbin/umount /cdrom
# %users localhost=/sbin/shutdown -h now

%zimbra ALL=NOPASSWD:/opt/zimbra/openldap/libexec/slapd
%zimbra ALL=NOPASSWD:/opt/zimbra/postfix-2.2.9/sbin/postfix, /opt/zimbra/postfix-2.2.9/sbin/postalias, /opt/zimbra/postfix-2.2.9/sbin/qshape.pl, /opt/zimbra/postfix-2.2.9/sbin/postconf,/opt/zimbra/postfix-2.2.9/sbin/postsuper
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmqstat
%zimbra ALL=NOPASSWD:/opt/zimbra/libexec/zmtomcatmgr
%zimbra ALL=NOPASSWD:/opt/zimbra/perdition/sbin/perdition

[dijichi2]

2, reboot

how come this is necessary?