From Ubuntu32 to Ubuntu64

[bramm]

Ok, we have purchased a new server, I have installed Ubuntu 6.06 64.

I'm trying to perform a test to see how the migration should go. I follow the steps in the wiki. But at step 2 d I'm stuck. I copy the backup file to thje new server, and on the new server I key in the command:

Copy from the 32-bit server to the 64-bit server the /backup/ldap.bak file. Type /opt/zimbra/openldap/sbin/slapadd \ -b "" -f /opt/zimbra/conf/slapd.conf -cv \ -l /backup/ldap.bak

I get the error message:

usage: slapadd [-v] [-d debuglevel] [-f configfile] [-F configdir] [-c]
        [-g] [-n databasenumber | -b suffix]
        [-l ldiffile] [-q] [-u] [-s] [-w]

I'm using version 5.0.7 on both servers, one is the 32 edition and on the new server 64.

[quanah]

Originally Posted by bramm

/opt/zimbra/openldap/sbin/slapadd \ -b "" -f /opt/zimbra/conf/slapd.conf -cv \ -l /backup/ldap.bak

It should be

/opt/zimbra/openldap/sbin/slapadd -b "" -f /opt/zimbra/conf/slapd.conf -q -l /backup/ldap.bak

--Quanah

[bramm]

Ok, that was indeeed the command, my bad. Now I have followed all of the steps. But in the end, when I start the server again with zmcontrol start I get the following error message, I assume I did something wrong, but what?

zimbra@mail:/opt/restore/certs$ zmcontrol start
Host mail.comp.com
        Starting ldap...Done.
FAILED
Failed to start slapd.  Attempting debug start to determine error.
backend_startup_one: bi_db_open failed! (-1)

[bramm]

Again my fault, I forgot to change the owner of the files in openldap-data. I only get the message Unable to determine enabled services from ldap. when starting the server, I assume this is nothing important?

Besides this, I'm getting errors on startup, I assume these have something to do with resolving. Since the new server has the same hostname as the old one, but the old one has the correct IP adress, it is still my MX server.

Aug 20 14:32:16 mail zimbramon[14944]: 14944:info: zmmtaconfig: Skipping getAllMtaAuthURLs ERROR: service.FAILURE (system failure: unable to list all servers) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])
Aug 20 14:32:17 mail zimbramon[14944]: 14944:info: zmmtaconfig: Skipping Configuration for server mail.comp.com update.
Aug 20 14:32:17 mail zimbramon[14944]: 14944:info: zmmtaconfig: gs:mail.comp.com ERROR: service.FAILURE (system failure: unable to lookup server by name: mail.comp.com message: [LDAP: error code 49 - Invalid Credentials]) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])
Aug 20 14:32:17 mail zimbramon[14944]: 14944:info: zmmtaconfig: Sleeping...Key lookup failed.

Is my assumption correct or is there really something wrong with my ldap config? The command host mail.comp.com gives me the IP adress of the old mail server. This may causde the problem right? How do I solve this for testing, without bringing my production server down?

[quanah]

The errors you are seeing indicate that the passwords set in localconfig do not match the passwords set in the LDAP server. Check the password values in localconfig on the 32-bit system for the following:

zmlocalconfig -s ldap_amavis_password ldap_postfix_password ldap_replication_password ldap_root_password zimbra_ldap_password

And make sure that those are set to the same values on your 64-bit server.

[bramm]

You are correct, for some reason the zimbra_ldap_password is different. All of the other are equal. How do I change this? The new servers thinks that mail.comp.com is still the old server, so when I use the command

/opt/zimbra/openldap/bin/ldapmodify -x -H ldap://mail.comp.com:389 -D "uid=zimbra,cn=admins,cn=zimbra" -W

I have to use the credentials of the old server, and I assume, when I can change a password then, it will be changed on the old server. And does the server authenticate to the old server anyway? Since it resolvs mail.comp.com to the old server instead of itself?

[quanah]

Use the zmldappasswd command. Read the usage first.

[bramm]

Fixed it with the zmldappasswd command. All of the passwords are the same, but zmmailboxdctl is still not running. In /opt/zimbra/log/zmmailboxd.out I see these messgaes:

Zimbra server reserving server socket port=110 bindaddr=null ssl=false
Zimbra server reserving server socket port=995 bindaddr=null ssl=true
Fatal error: exception while binding to ports
java.net.SocketException: Unbound server sockets not implemented
        at javax.net.ServerSocketFactory.createServerSocket(ServerSocketFactory.java:80)
        at com.zimbra.common.util.NetUtil.newBoundServerSocket(NetUtil.java:97)
        at com.zimbra.common.util.NetUtil.bindServerSocket(NetUtil.java:165)
        at com.zimbra.common.util.NetUtil.bindSslTcpServerSocket(NetUtil.java:56)
        at com.zimbra.common.handlers.PrivilegedHandler.openPorts(PrivilegedHandler.java:93)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.mortbay.xml.XmlConfiguration.call(XmlConfiguration.java:534)
        at org.mortbay.xml.XmlConfiguration.configure(XmlConfiguration.java:244)
        at org.mortbay.xml.XmlConfiguration.configure(XmlConfiguration.java:206)
        at org.mortbay.xml.XmlConfiguration.main(XmlConfiguration.java:968)
        at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
        at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:39)
        at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:25)
        at java.lang.reflect.Method.invoke(Method.java:585)
        at org.mortbay.start.Main.invokeMain(Main.java:183)
        at org.mortbay.start.Main.start(Main.java:497)
        at org.mortbay.start.Main.main(Main.java:115)

I found this but that thread ens in a reinstall. I hope that is not my solution. I must say I did try to transfer the commercial certificates as stated in the wiki page mentioned above.

[iway]

Have you been able to get it working? If so, how?