Enable clear text login - Server error encountered

[czaveri]

Background:

Zimbra 3.0.1 - bugfix release
Upgraded from M3 update 2
running on CentOS 4.2

Received the following error on:

1. Going to Configuration->Global Settings->IMAP
2. and, setting the Enable clear text login

The Error:

Message: Csfe service error
Error code: service.FAILURE
Method: ZmCsfeCommand.invoke
Details:system failure: unable to modify attrs

Any idea how I can cure this?

[marcmac]

That should work.

Can you try from the command line?

su - zimbra
zmprov mcf zimbraImapCleartextLoginEnabled TRUE

[czaveri]

[root@zimbra zimbra]# su - zimbra
[zimbra@zimbra ~]$ zmprov mcf zimbraImapCleartextLoginEnabled TRUE
ERROR: service.FAILURE (system failure: unable to modify attrs) (cause: javax.naming.directory.SchemaViolationException [LDAP: error code 65 - unrecognized objectClass 'zimbraHsmGlobalConfig'])
[zimbra@zimbra ~]$

[marcmac]

Can you send me the output from:
grep include /opt/zimbra/conf/slapd.conf

ls /opt/zimbra/lib/conf

cat /opt/zimbra/lib/conf/zimbra-ext.schema

[czaveri]

[root@zimbra opt]# grep include /opt/zimbra/conf/slapd.conf
include "/opt/zimbra/openldap/etc/openldap/schema/core.schema"
include "/opt/zimbra/openldap/etc/openldap/schema/cosine.schema"
include "/opt/zimbra/openldap/etc/openldap/schema/inetorgperson.schema"
include "/opt/zimbra/openldap/etc/openldap/schema/amavisd.schema"
include "/opt/zimbra/openldap/etc/openldap/schema/zimbra.schema"
[root@zimbra opt]# ls /opt/zimbra/lib/conf
zimbra-hsm.schema
[root@zimbra opt]# cat /opt/zimbra/lib/conf/zimbra-ext.schema
cat: /opt/zimbra/lib/conf/zimbra-ext.schema: No such file or directory
[root@zimbra opt]#



Did I do something wrong somewhere?

[marcmac]

No, I don't think so.

Try adding
include "/opt/zimbra/ib/conf/zimbra-hsm.schema"

right after
include "/opt/zimbra/openldap/etc/openldap/schema/zimbra.schema"

in slapd.conf and then
ldap stop
ldap start

Then retry the zmprov command.

[czaveri]

[root@zimbra bin]# ./zmprov mcf zimbraImapCleartextLoginEnabled TRUE
ERROR: service.FAILURE (system failure: unable to modify attrs) (cause: javax.naming.directory.SchemaViolationException [LDAP: error code 65 - unrecognized objectClass 'zimbraHsmGlobalConfig'])
[root@zimbra bin]#

I added the line and restarted ldap (stop and start), and then executed the above command.

I received the same result when I tried using Zimbra Admin Section, again.

I also stopped zimbra; checked and killed some lingering zimbra processes and started it again; but the output for the above command did not change.

(BTW, I also tried it as zimbra user)
[zimbra@zimbra ~]$ zmprov mcf zimbraImapCleartextLoginEnabled TRUE
ERROR: service.FAILURE (system failure: unable to modify attrs) (cause: javax.naming.directory.SchemaViolationException [LDAP: error code 65 - unrecognized objectClass 'zimbraHsmGlobalConfig'])
[zimbra@zimbra ~]$

[marcmac]

Write this to a file (FILENAME):

# Add HSM-specific attributes and values

dn: cn=config,cn=zimbra
changetype: modify
objectclass: zimbraHsmGlobalConfig
-

dn: cn=config,cn=zimbra
changetype: modify
add:
zimbraHsmAge: 30d
zimbraServerInheritedAttr: zimbraHsmAge

then

zmlocalconfig -s ldap_root_password
zmlocalconfig -s zimbra_ldap_userdn

Take the values you got for password and userdn and the name of the file you created and run (as the zimbra user):

/opt/zimbra/openldap/bin/ldapmodify -a -c -w 'PASSWORD' -D "USERDN" -x -f FILENAME

NOTE - quotes are important in the above command.

[czaveri]

Thank-you for your time and help, but errors like me too much.

After creating the file /opt/FILENAME and chown-ing it to zimbra, I proceeded to do the following.

[root@zimbra opt]# su - zimbra
[zimbra@zimbra ~]$ zmlocalconfig -s ldap_root_password
ldap_root_password = YdIjRfCpVz
[zimbra@zimbra ~]$ zmlocalconfig -s zimbra_ldap_userdn
zimbra_ldap_userdn = uid=zimbra,cn=admins,cn=zimbra
[zimbra@zimbra ~]$ /opt/zimbra/openldap/bin/ldapmodify -a -c -w 'YdIjRfCpVz' -D "uid=zimbra,cn=admins,cn=zimbra" -x -f /opt/FILENAME
modifying entry "cn=config,cn=zimbra"
ldap_modify: Invalid syntax (21)
additional info: objectclass: value #0 invalid per syntax

modifying entry "cn=config,cn=zimbra"
ldap_modify: Undefined attribute type (17)
additional info: zimbraHsmAge: attribute type undefined

[zimbra@zimbra ~]$

[marcmac]

Can you send post /opt/zimbra/conf/slapd.conf?