Upgrade from ZCS 4.5.9 to ZCS 5.0 RC3

[punit.jain]

Hi ,

I have upgraded zimbra 4.5.9 on redhat to 5.0 RC3 in a multi install environment. Upgrade went fine but while sending mail i get following errors in /var/log/zimb ra.log

Dec 3 04:12:30 multi-mb1 postfix/smtpd[25094]: warning: problem talking to service rewrite: Success
Dec 3 04:12:30 multi-mb1 postfix/master[4350]: warning: process /opt/zimbra/postfix-2.4.3.3/libexec/trivial-rewrite pid 28850 exit status 1
Dec 3 04:13:30 multi-mb1 postfix/trivial-rewrite[29115]: error: dict_ldap_connect: Unable to set STARTTLS: -11: Connect error
Dec 3 04:13:30 multi-mb1 last message repeated 2 times
Dec 3 04:13:30 multi-mb1 postfix/trivial-rewrite[29115]: fatal: ldap:/opt/zimbra/conf/ldap-vad.cf(0,lock|fold_fix): table lookup problem
D

Any clue ?

-Punit

[dijichi2]

the problem is you travelled into the future and got a version that hasn't been released yet! (rc3). seriously, looks like your postfix can't talk tls to openldap for table lookups. make sure openldap is starting up with tls support, and make sure both postfix and openldap are picking up the correct ssl libs (ldd libldap.so etc).

[Xao]

I'm getting this exact same error but on the release version, did you ever get it resolved?

Originally Posted by punit.jain

Hi ,

I have upgraded zimbra 4.5.9 on redhat to 5.0 RC3 in a multi install environment. Upgrade went fine but while sending mail i get following errors in /var/log/zimb ra.log

Dec 3 04:12:30 multi-mb1 postfix/smtpd[25094]: warning: problem talking to service rewrite: Success
Dec 3 04:12:30 multi-mb1 postfix/master[4350]: warning: process /opt/zimbra/postfix-2.4.3.3/libexec/trivial-rewrite pid 28850 exit status 1
Dec 3 04:13:30 multi-mb1 postfix/trivial-rewrite[29115]: error: dict_ldap_connect: Unable to set STARTTLS: -11: Connect error
Dec 3 04:13:30 multi-mb1 last message repeated 2 times
Dec 3 04:13:30 multi-mb1 postfix/trivial-rewrite[29115]: fatal: ldap:/opt/zimbra/conf/ldap-vad.cf(0,lock|fold_fix): table lookup problem
D

Any clue ?

-Punit

[mmorse]

Looks like: [SOLVED] Expired Cert in 5.0GA can cause mail Delivery failure

[Xao]

Unfortunately that only works with selfsigned certs. I have been able to get that far, but I want to use my SSL Cert from Thawte.

I think the main problem is that it is a two year CERT and I'm about fourteen months into it, so it seems that Postfix/LDAP thinks it's expired or something.

This is driving me nuts, everytime I start up a fat client, visit the webpage, or use my iPhone a prompt spits out about it not being trusted. That would be fine if it was just me, but I have about 30 people using the system to.

Not to mention it was working on 4.10.