[SOLVED] Postfix: Unable to Bind: 49 invalid credentials.

[uxbod]

Now that has been done could you shutdown all the ZCS services, and also ensure any potential stale processes are also killed off. Especially slapd and Postfix. Then start ZCS back up again.

[ecologist09]

Rebooted completely. Same error.

[quanah]

Rebooted completely. Same error.

Use ldapsearch to validate you can bind as the user with the password you believe is the correct one. If not, you need to fix the password in the LDAP server. If it does work, then you need to fix zmlocalconfig's value for the password for the postfix user. If that matches the password value you have set as well, then you need to run "postfix stop" followed by "postfix start rewrite" so it'll update the postfix files used to bind to LDAP.

--Quanah

[ecologist09]

I tried all of the suggestions posted in this thread but the following is what actually worked.

We viewed the contents of /opt/zimbra/conf/ldap-vad.cf and found the password stored therein. Then we used an ldap browser/editor to set the password for zmamavisd and zmpostfix to the value that was in the file - NOT to what was in zmlocalconfig. Now it is connecting again and has returned me to my original problem which i will post in a separate thread so as not to hijack this one.

So the question that remains is - why wasn't :

zmlocalconfig -e ldap_postfix_password=password
or
zmldappasswd -p password

updating the passwords in the /opt/zimbra/conf/ldap* files?

[ecologist09]

Use ldapsearch to validate you can bind as the user with the password you believe is the correct one. If not, you need to fix the password in the LDAP server. If it does work, then you need to fix zmlocalconfig's value for the password for the postfix user. If that matches the password value you have set as well, then you need to run "postfix stop" followed by "postfix start rewrite" so it'll update the postfix files used to bind to LDAP.

--Quanah

Yes, ldapsearch was authenticating with my "new" password, the one that was set in zmlocalconfig. However, per my post (above) i had to reset the password to the one in /opt/zimbra/conf/lpda-vad.cf in order to get it working again.

[quanah]

Yes, ldapsearch was authenticating with my "new" password, the one that was set in zmlocalconfig. However, per my post (above) i had to reset the password to the one in /opt/zimbra/conf/lpda-vad.cf in order to get it working again.

Running postfix start rewrite is what would have updated the ldap-*.cf files to use the new password. In 5.0.6, any time you restart postfix, it will update those files, but that's not the current behavior.

[ecologist09]

Running postfix start rewrite is what would have updated the ldap-*.cf files to use the new password. In 5.0.6, any time you restart postfix, it will update those files, but that's not the current behavior.

We ran the rewrite option several times and it did not appear to have any effect.

[ecologist09]

My original problem, before this password mess was:

http://www.zimbra.com/forums/install...html#post90869

[quanah]

We ran the rewrite option several times and it did not appear to have any effect.

Sorry, it is "postfix reload" in 5.0.5 and previous. With 5.0.6, postfix will always rewrite the configs when restarted.

[ecologist09]

Thanks. Will mark as solved.