Page 1 of 2 12 LastLast
Results 1 to 10 of 15

Thread: [SOLVED] Can't access web interface after install - zclient.IO_ERROR in log

  1. #1
    JpMaxMan is offline Active Member
    Join Date
    Sep 2007
    Location
    Brookly, NY
    Posts
    48
    Rep Power
    7

    Default [SOLVED] Can't access web interface after install - zclient.IO_ERROR in log

    I am trying to install Zimbra on a Redhat 5 machine that is behind a firewall (I know that the recommendation is to not have it behind a firewall). I have the private IP setup 192.168.1.13 and have the public IP mapped. From my network I have full pass through (all ports) enabled.

    Everything seems to install fine, no issues until the end when it says it cannot initialize the documents. Looking at the log I see this error:
    Code:
     ERROR: zclient.IO_ERROR (invoke Connection refused, server: localhost) (cause: java.net.ConnectException Connection refused)
    Now, from another post w/ similar issues I tried the command:

    zmprov ga

    which I get the same error:
    Code:
    ERROR: zclient.IO_ERROR (invoke Connection refused, server: localhost) (cause: java.net.ConnectException Connection refused)
    I also cannot login to any of the web portals, admin or otherwise. I changed via the install the port for the zimbra web portion to run on port 8080 so it didn't conflict w/ an existing apache install. Port 80 was the only conflict listed in the conflict list.

    Any help on next steps would be appreciated, I'm sort of at a loss. I've installed Zimbra 3 other times without too much trouble. Now I've finally licensed it to put into our production environment and am running into issues... (murpheys law!).

    Thanks!


  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,568
    Rep Power
    57

    Default

    You should also disable SElinux on the Zimbra server. If you are behind a firewall on a LAN IP then you'll need a Split DNS set-up and a correct /etc/hosts file. Run the following on the zimbra server:

    Code:
    host `hostname`  <-- use backticks not single quotes
    dig yourdomain.com any
    dig yourdomain.com mx
    and post the output.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    JpMaxMan is offline Active Member
    Join Date
    Sep 2007
    Location
    Brookly, NY
    Posts
    48
    Rep Power
    7

    Default

    Ok, I already had selinux disabled. Here are the outputs you requested:

    [edited]

    ok, I see the issue, the hostname needs to resolve to the private IP or the public IP needs to loop back to the private. Let me make some adjustments and I'll let you know if it worked.
    Last edited by JpMaxMan; 05-09-2008 at 11:59 AM.

  4. #4
    JpMaxMan is offline Active Member
    Join Date
    Sep 2007
    Location
    Brookly, NY
    Posts
    48
    Rep Power
    7

    Default

    Ok, I am working with our network engineers on this. Would it be accurate to say that I need to be able to connect to SMTP using the public IP from the server itself? i.e. if I am at a terminal on the server:

    telnet publicip 25

    should solicit a connection? and that that would solve this?

  5. #5
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,568
    Rep Power
    57

    Default

    Quote Originally Posted by JpMaxMan View Post
    Ok, I am working with our network engineers on this. Would it be accurate to say that I need to be able to connect to SMTP using the public IP from the server itself? i.e. if I am at a terminal on the server:
    That depends what you're trying to do and if you've got the split DNS set-up or if your firwall does loopback (it probably doesn't). In general if you're external to the LAN you use the public IP with the port forwarded through the firewall to the zimbra server. If you are on the LAN then you should use the LAN IP (if the firewall does loopback then you could use the public IP or the LAN IP).
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  6. #6
    JpMaxMan is offline Active Member
    Join Date
    Sep 2007
    Location
    Brookly, NY
    Posts
    48
    Rep Power
    7

    Default

    I am trying to avoid setting up split dns. So, I am pursuing the loopback path. I am wondering if that will fix this issue?

    I actually already have DJBDNS running on that server and don't want to create any conflicts.

  7. #7
    JpMaxMan is offline Active Member
    Join Date
    Sep 2007
    Location
    Brookly, NY
    Posts
    48
    Rep Power
    7

    Default

    I had "DNS Doctoring" enabled on the firewall, but it doesn't seem to be making a difference.

    "We now have DNS Doctoring enabled on the firewall which will make the firewall return internal IP addresses for lookups which return the external IP address."

    I guess what I'm looking to you for is specifically what needs to resolve to what and what I can to do to test that connectivity?

  8. #8
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,568
    Rep Power
    57

    Default

    It would be far simpler setting up a Split DNS, why don't you want to do that?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  9. #9
    JpMaxMan is offline Active Member
    Join Date
    Sep 2007
    Location
    Brookly, NY
    Posts
    48
    Rep Power
    7

    Default

    Quote Originally Posted by phoenix View Post
    It would be far simpler setting up a Split DNS, why don't you want to do that?
    Because I'm using this machine as a secondary DNS server. While I could probably use BIND on one IP and TinyDNS on a second for the secondary DNS - I'd prefer to keep it simple.

  10. #10
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,568
    Rep Power
    57

    Default

    You don't need a second DNS server, just add the zone for your LAN to the current DNS server.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Errors installing Outlook Connector
    By Tim G in forum Zimbra Connector for Outlook
    Replies: 57
    Last Post: 05-05-2011, 02:27 PM
  2. [Installation] Zimbra Desktop - Ubuntu 8.04 Hardy
    By kaltera in forum Installation Help
    Replies: 1
    Last Post: 06-18-2008, 04:43 AM
  3. Replies: 7
    Last Post: 02-27-2008, 05:17 PM
  4. Connector Fails
    By ILLCOMM in forum Zimbra Connector for Outlook
    Replies: 4
    Last Post: 09-28-2007, 12:08 PM
  5. Error Installing Outlook Connector
    By DanO in forum Zimbra Connector for Outlook
    Replies: 17
    Last Post: 08-28-2007, 09:35 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •