ldap not initializing on Ubuntu with zimbra 5RC2

[askov]

I would really like to have Zimbra up and running - this looks so promising. But I dont get very far: The installation never passes the ldap initializing...
From searching this forum I found that being befind a NAT firewall I had to use split-DNS. But either I havn't got it right or it was not the problem. I still get an error 115 and I cannot find any explanation for that.

Big boys dont cry - I'm not a big boy anymore.
But ofcourse one of you genies know exactly what is wrong.

I'm running Ubuntu server 6.0.6 and trying Zimbra 5 RC2.
This is from my Putty session with relevant files and dig:

root@ibm5600:/etc/bind# cat db.ibm5600.giver.info
; BIND reverse data file for empty rfc1918 zone
;
;
$TTL 86400
@ IN SOA ibm5600.giver.info. root.ibm5600.giver.info. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
86400 ) ; Negative Cache TTL
;
@ IN NS 10.10.10.235
@ IN A 10.10.10.235
@ IN MX 10 ibm5600.giver.info

root@ibm5600:/etc/bind# cd ..
root@ibm5600:/etc# cat resolv.conf
nameserver 10.10.10.235
nameserver 10.10.10.10
nameserver 194.239.134.83
root@ibm5600:/etc# dig @10.10.10.10 ibm5600.giver.info MX

; <<>> DiG 9.3.2 <<>> @10.10.10.10 ibm5600.giver.info MX
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 37009
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ibm5600.giver.info. IN MX

;; AUTHORITY SECTION:
giver.info. 3600 IN SOA ns1.navneservice.com. . 37 3600 600 86400 3600

;; Query time: 469 msec
;; SERVER: 10.10.10.10#53(10.10.10.10)
;; WHEN: Fri Dec 7 20:14:45 2007
;; MSG SIZE rcvd: 91

root@ibm5600:/etc# dig @194.239.134.83 ibm5600.giver.info MX

; <<>> DiG 9.3.2 <<>> @194.239.134.83 ibm5600.giver.info MX
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 59981
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ibm5600.giver.info. IN MX

;; AUTHORITY SECTION:
giver.info. 3600 IN SOA ns1.navneservice.com. . 37 3600 600 86400 3600

;; Query time: 255 msec
;; SERVER: 194.239.134.83#53(194.239.134.83)
;; WHEN: Fri Dec 7 20:15:47 2007
;; MSG SIZE rcvd: 91

root@ibm5600:/etc# dig @ns1.navneservice.com ibm5600.giver.info MX
; <<>> DiG 9.3.2 <<>> @ns1.navneservice.com ibm5600.giver.info MX
; (1 server found)
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43464
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;ibm5600.giver.info. IN MX

;; AUTHORITY SECTION:
giver.info. 3600 IN SOA ns1.navneservice.com. . 37 3600 600 86400 3600

;; Query time: 240 msec
;; SERVER: 209.126.200.122#53(209.126.200.122)
;; WHEN: Fri Dec 7 20:16:29 2007
;; MSG SIZE rcvd: 91

root@ibm5600:/etc# /etc/init.d/bind9 restart
* Stopping domain name service... [ ok ]
* Starting domain name service... [ ok ]
root@ibm5600:/etc# /opt/zimbra/libexec/zmsetup.pl
Operations logged to /tmp/zmsetup.12072007-201850.log
Setting defaults...

DNS ERROR - No A record for ibm5600.giver.info.

Interface: 10.10.10.235
Interface: 127.0.0.1


DNS ERROR - none of the MX records for ibm5600.giver.info
resolve to this host
Change domain name? [Yes] no
done.
Checking for port conflicts
Port conflict detected: 80 (zimbra-store)
Port conflicts detected! - Any key to continue


Note

The previous configuration appears to have failed to complete

Attempt to complete configuration now? [yes]
Save configuration data to a file? [Yes]
Save config in file: [/opt/zimbra/config.7987]
Saving config in /opt/zimbra/config.7987...done.
The system will be modified - continue? [No] yes
Operations logged to /tmp/zmsetup.12072007-201850.log
Initializing ldap...IO::Socket::INET: connect: timeout at /opt/zimbra/libexec/zmldapinit line 150.
FAILED (115)


ERROR



Configuration failed

Please address the error and re-run /opt/zimbra/libexec/zmsetup.pl to
complete the configuration.

Errors have been logged to /tmp/zmsetup.12072007-201850.log

root@ibm5600:/etc# cat /tmp/zmsetup.12072007-201850.log
Operations logged to /tmp/zmsetup.12072007-201850.log
Getting installed packages
checking isEnabled zimbra-core
zimbra-core not in enabled cache
enabled packages
Newinstall enabling all installed packages
Enabling zimbra-core
Enabling zimbra-ldap
Enabling zimbra-store
Enabling zimbra-mta
Enabling zimbra-snmp
Enabling zimbra-logger
Enabling zimbra-apache
Enabling zimbra-spell
Setting defaults...
Setting local config zimbra_java_home to /opt/zimbra/java
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e zimbra_java_home='/opt/zimbra/java' 2> /dev/null
checking isEnabled zimbra-cluster
zimbra-cluster not in enabled cache
enabled packages zimbra-logger zimbra-store zimbra-mta zimbra-core zimbra-apache zimbra-snmp zimbra-ldap zimbra-spell
Newinstall enabling all installed packages
Enabling zimbra-core
Enabling zimbra-ldap
Enabling zimbra-store
Enabling zimbra-mta
Enabling zimbra-snmp
Enabling zimbra-logger
Enabling zimbra-apache
Enabling zimbra-spell
checking isEnabled zimbra-store
zimbra-store is enabled
checking isEnabled zimbra-ldap
zimbra-ldap is enabled
checking isEnabled zimbra-store
zimbra-store is enabled
checking isEnabled zimbra-mta
zimbra-mta is enabled
checking isEnabled zimbra-mta
zimbra-mta is enabled


DNS ERROR - No A record for ibm5600.giver.info.

Interface: 10.10.10.235
Interface: 127.0.0.1


DNS ERROR - none of the MX records for ibm5600.giver.info
resolve to this host
done.
checking isEnabled zimbra-ldap
zimbra-ldap is enabled
checking isEnabled zimbra-store
zimbra-store is enabled
checking isEnabled zimbra-mta
zimbra-mta is enabled
checking isEnabled zimbra-mta
zimbra-mta is enabled
checking isEnabled zimbra-spell
zimbra-spell is enabled
Checking for port conflicts
checking isEnabled zimbra-store
zimbra-store is enabled
Port conflict detected: 80 (zimbra-store)
checking isEnabled zimbra-ldap
zimbra-ldap is enabled
checking isEnabled zimbra-store
zimbra-store is enabled
checking isEnabled zimbra-logger
zimbra-logger is enabled
checking isEnabled zimbra-mta
zimbra-mta is enabled


Note

The previous configuration appears to have failed to complete

Saving config in /opt/zimbra/config.7987...
done.
Operations logged to /tmp/zmsetup.12072007-201850.log
checking isEnabled zimbra-ldap
zimbra-ldap is enabled
Initializing ldap...
*** Running as zimbra user: /opt/zimbra/libexec/zmldapinit
FAILED (115)


ERROR



Configuration failed

Please address the error and re-run /opt/zimbra/libexec/zmsetup.pl to
complete the configuration.

Errors have been logged to /tmp/zmsetup.12072007-201850.log

root@ibm5600:/etc#

[phoenix]

Well, if it says there's no A record then you have no A record pointing to your server. Check with the following (run on teh zimbra server):

host `hostname`  <-- type as-is with backtick not single quotes

dig yourdomain.com any
dig yourdomain.com mx

There's also a how-to here written by an esteemed forum member - that should tell you all you need to know. If you don't have 6.06 then there are other articles on the wiki for Ubuntu.

[askov]

Thank you. Looks as if thats exactly what I need.
I'll start by reinstalling the Ubuntu server - and this time NOT using LAMP install.

[askov]

Reinstalled the UBUNTU 6.0.6 without using the LAMP option. Used the Dapper Beginner Guide and got the correct answer from nslookup (and everything else before that): ibm5600.giver.info is 10.10.10.235 when looking from itself - and 195.215.251.235 when looking from anywhere else.

But then the party was over: using wget to download the zcs packet gave me an error 403 Forbidden. Both for the 5.0 RC2 and the 4.5.10.
Tried using curl instead - no luck: It gave an access denied and some message indicating that the RequestID and HostID were different.
Ofcourse my Windows PC downloads with no problem and in this way I may work around the problem - but I asume that other problems in connection to this will arise later.

[phoenix]

Don't use nslookup, use the commands I posted earlier -run those command on your zimbra server and post the results.

What response/error does using wget give you when you try to download zimbra?

[askov]

wget gives me an http 403 Forbidden.

host `ibm5600` gives a peculiar result:
root@ibm5600:/usr2/zimbra# host `ibm5600`
-bash: ibm5600: command not found
Usage: host [-aCdlriTwv] [-c class] [-N ndots] [-t type] [-W time]
[-R number] hostname [server]
-a is equivalent to -v -t *
-c specifies query class for non-IN data
-C compares SOA records on authoritative nameservers
-d is equivalent to -v
-l lists all hosts in a domain, using AXFR
-i IP6.INT reverse lookups
-N changes the number of dots allowed before root lookup is done
-r disables recursive processing
-R specifies number of retries for UDP packets
-t specifies the query type
-T enables TCP/IP mode
-v enables verbose output
-w specifies to wait forever for a reply
-W specifies how long to wait for a reply
-4 use IPv4 query transport only
-6 use IPv6 query transport only

wheras the two dig commands seems allright:

root@ibm5600:/usr2/zimbra# dig giver.info ANY

; <<>> DiG 9.3.2 <<>> giver.info ANY
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 32155
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;giver.info.                    IN      ANY

;; ANSWER SECTION:
giver.info.             604800  IN      SOA     ibm5600.giver.info. admin.giver.info. 70725 604800 86400 2419200 604800
giver.info.             604800  IN      NS      ibm5600.giver.info.
giver.info.             604800  IN      MX      10 ibm5600.giver.info.
giver.info.             604800  IN      A       10.10.10.235

;; ADDITIONAL SECTION:
ibm5600.giver.info.     604800  IN      A       10.10.10.235

;; Query time: 3 msec
;; SERVER: 10.10.10.235#53(10.10.10.235)
;; WHEN: Sat Dec  8 16:40:53 2007
;; MSG SIZE  rcvd: 140

root@ibm5600:/usr2/zimbra# dig giver.info MX

; <<>> DiG 9.3.2 <<>> giver.info MX
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 41208
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;giver.info.                    IN      MX

;; ANSWER SECTION:
giver.info.             604800  IN      MX      10 ibm5600.giver.info.

;; AUTHORITY SECTION:
giver.info.             604800  IN      NS      ibm5600.giver.info.

;; ADDITIONAL SECTION:
ibm5600.giver.info.     604800  IN      A       10.10.10.235

;; Query time: 3 msec
;; SERVER: 10.10.10.235#53(10.10.10.235)
;; WHEN: Sat Dec  8 16:41:25 2007
;; MSG SIZE  rcvd: 82

[phoenix]

You didn't use the command in the way I asked you, this is it:

host `hostname`  <-- type as-is with backtick not single quotes

You have also disabled SElinux, the firewall and ipv6 on this machine haven't you?

[EDIT] In future could you please put "code" around text so that it's more readable. You can do that by highlighting a piece of text and hitting the hash (#) symbol above the editing box.

[askov]

Sorry about that - I thought I should substitute hostname with my hostname.
When writing it exactly as you did, I got this:
(and I cannot get the CODE tag working - maybe it's my old Win98 with IE6 thats the problem):

root@ibm5600:~# host `hostname`
Host ibm5600 not found: 3(NXDOMAIN)

The two dig commands shows the same as before:
root@ibm5600:~# dig giver.info ANY

; <<>> DiG 9.3.2 <<>> giver.info ANY
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24220
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1

;; QUESTION SECTION:
;giver.info. IN ANY

;; ANSWER SECTION:
giver.info. 604800 IN SOA ibm5600.giver.info. admin.giver.info. 70725 604800 86400 2419200 604800
giver.info. 604800 IN NS ibm5600.giver.info.
giver.info. 604800 IN MX 10 ibm5600.giver.info.
giver.info. 604800 IN A 10.10.10.235

;; ADDITIONAL SECTION:
ibm5600.giver.info. 604800 IN A 10.10.10.235

;; Query time: 2 msec
;; SERVER: 10.10.10.235#53(10.10.10.235)
;; WHEN: Sat Dec 8 17:11:17 2007
;; MSG SIZE rcvd: 140

root@ibm5600:~# dig giver.info MX

; <<>> DiG 9.3.2 <<>> giver.info MX
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2233
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;giver.info. IN MX

;; ANSWER SECTION:
giver.info. 604800 IN MX 10 ibm5600.giver.info.

;; AUTHORITY SECTION:
giver.info. 604800 IN NS ibm5600.giver.info.

;; ADDITIONAL SECTION:
ibm5600.giver.info. 604800 IN A 10.10.10.235

;; Query time: 1 msec
;; SERVER: 10.10.10.235#53(10.10.10.235)
;; WHEN: Sat Dec 8 17:11:28 2007
;; MSG SIZE rcvd: 82

but now comes the funny part. I wanted to copy the html 403 error, but now the wget works fine - I might have rebooted a couple of times.

root@ibm5600:/tmp# wget http://files.zimbra.com/downloads/4....75.UBUNTU6.tgz
--17:13:11-- http://files.zimbra.com/downloads/4....75.UBUNTU6.tgz
=> `zcs-4.5.10_GA_1575.UBUNTU6.tgz'
Resolving files.zimbra.com... 72.21.207.241
Connecting to files.zimbra.com|72.21.207.241|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 315.284.701 (301M) [binary/octet-stream]

I used the tgz from my windows PC (transfered on CD) and the installation went on like a beauty. The only tricky thing was that I - as mentioned in the guide - had to change domainname from ibm5600.giver.info to giver.info.

So now it's up an running and accessible from the outside world as Zimbra and from my lan as https://10.10.10.235:7071.

Thank you very much for your help!

[phoenix]

Unfortunately you haven't quite finished yet. The fact the host command gave an invalid result indicates you have an incorrect hosts file, can you post the details of that file so I can see it?

[askov]

Sure thing. Here it is:
root@ibm5600:/etc# cat hosts
127.0.0.1 localhost.localdomain localhost
10.10.10.235 ibm5600.giver.info ibm5600

# The following lines are desirable for IPv6 capable hosts
::1 ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts

Do I really have to take my arms down again?