LDAP Errors during Install

[cchill]

Hi, I have tried several times to install Zimbra 5.0.4 on both Centos 5.1 and Fedora 7 and keep getting the same error LDAP Errors, can some one please help me with this I would like to move from Scalix to Zimbra. Both the centos and fedora installs have been on fresh builds and the Zimbra install goes through without fault until I get to the final config, see bellow.

*** Running as root user: /opt/zimbra/bin/zmcertmgr createca
** Creating directory /opt/zimbra/ssl/zimbra
** Creating directory /opt/zimbra/ssl/zimbra/ca
** Creating directory /opt/zimbra/ssl/zimbra/server
** Creating directory /opt/zimbra/ssl/zimbra/commercial
** Creating directory /opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
** Retrieving CA private key from ldap...failed.
** Retrieving CA cert from ldap...failed.
** Creating CA private key /opt/zimbra/ssl/zimbra/ca/ca.key...done.
** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...done.
done.
Deploying CA to /opt/zimbra/conf/ca ...
*** Running as root user: /opt/zimbra/bin/zmcertmgr deployca -localonly
** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
** Copying CA to /opt/zimbra/conf/ca...done.
done.
Creating SSL certificate...
*** Running as root user: /opt/zimbra/bin/zmcertmgr createcrt self
** Creating /opt/zimbra/conf/zmssl.cnf...done
** Backup /opt/zimbra/ssl/zimbra to /opt/zimbra/ssl/zimbra.20080410114022
** Generating a server csr for download
** Backup /opt/zimbra/ssl/zimbra to /opt/zimbra/ssl/zimbra.20080410114022
** Creating server cert request /opt/zimbra/ssl/zimbra/server/server.csr...done.
** Signing cert request /opt/zimbra/ssl/zimbra/server/server.csr...done.
done.
checking isEnabled zimbra-store
zimbra-store is enabled
Installing SSL certificates...
*** Running as root user: /opt/zimbra/bin/zmcertmgr deploycrt self
** Installing mta certificate and key...done.
** Installing slapd certificate and key...done.
** Installing proxy certificate and key...done.
** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
** Installing CA to /opt/zimbra/conf/ca...done.
done.
checking isEnabled zimbra-mta
zimbra-mta is enabled
checking isEnabled zimbra-ldap
zimbra-ldap is enabled
checking isEnabled zimbra-proxy
zimbra-proxy not in enabled cache
enabled packages zimbra-logger zimbra-store zimbra-mta zimbra-core zimbra-archiving zimbra-apache zimbra-cluster zimbra-snmp zimbra-ldap zimbra-spell
Newinstall enabling all installed packages
Enabling zimbra-core
Enabling zimbra-ldap
Enabling zimbra-store
Enabling zimbra-mta
Enabling zimbra-snmp
Enabling zimbra-logger
Enabling zimbra-apache
Enabling zimbra-spell
checking isEnabled zimbra-ldap
zimbra-ldap is enabled
Initializing ldap...
*** Running as zimbra user: /opt/zimbra/libexec/zmldapinit
IO::Socket::INET: connect: Connection refused at /opt/zimbra/libexec/zmldapinit line 160.
failed. (28416)


ERROR



Configuration failed

[mmorse]

Welcome to the forums,

Is that from your CentOS box or Fedora box?
If it's the CentOS 5 box you should be using a RHEL 5 build.
-If you're using NE while CentOS is 99% like RHEL we generally ask that you use RHEL as an operating system platform for support reasons
If it's the Fedora 7 box you should be using the Fedora 7 FOSS build.

Compare ZCS Editions
http://www.zimbra.com/forums/announc...html#post62754

Ok so, if that output is from your your Fedora box, examine your log files in /tmp (install.log.# & zmsetup.log.#) do you see sections like:

** Saving CA in ldap...ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])
ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])
done.
-snip-
Initializing ldap...
*** Running as zimbra user: /opt/zimbra/libexec/zmldapinit
IO::Socket::INET: connect: Connection refused at /opt/zimbra/libexec/zmldapinit line 160.
failed. (28416)
ERROR
-snip-
Starting ldap...Done.
FAILED
/opt/zimbra/bin/ldap: line 57: kill: (16016) - No such process
sudo: sorry, you must have a tty to run sudo

If that's the case:
visudo
comment out:
#Defaults requiretty

ie: Type visudo to edit /etc/sudoers rather than another text editor (vi, nano, nedit, gedit, etc). Visudo provides basic sanity checks, looks for parse errors, and locks the sudoers file against multiple simultaneous edits (say you we're in a multi-admin environment).

If requiretty is set sudo will only run when the user is logged in to a real tty. Requiring it disallows things like 'rsh somehost sudo ls' since rsh does not allocate a tty, etc, etc. Here we're turning it off because it's saying "you must have a tty to run sudo".

[cchill]

HI mmorse,

Thanks for your reply,
1) both installs are community edition,
2) the output in my first post is from my centos box but both the Fedora and centos install logs are almost identical, they show the same three errors.
3) I didn't get the TTY error you discribe because I made the alteration to /etc/sudoers before I installed zimbra on my fedora box.

Thanks again.

[uxbod]

Is your server sat behind a firewall ? Could we just check to ensure your DNS is setup correctly, so please run the following and post the results

cat /etc/hosts
cat /etc/resolv.conf
dig domain.com mx
dig domain.com ns
host `hostname` <- note backticks

[uxbod]

Originally Posted by mmorse

examine your log files in /tmp (install.log.# & zmsetup.log.#)

Would you please provide the logfiles that Mike has indicated aswell please.