Multi server install issue with zmupdateauthkeys step

[cdmdotnet]

I've tried to follow the guide for installing multiple servers a few times and i've atleast got them installed however i get an error message upon entering the web admin console.
Reading a bit i figured this was related to the SSH keys and logger settings ( as metioned on page 37 of http://files.zimbra.com/website/docs...%20Install.pdf )

however when issuing the zmupdateauthkeys command on either of the servers i receive the following error
Fetching key for [server 2]
Key for [server 2] NOT FOUND

any suggestions on how to resolve / solve this?

thanks

[brian]

Make sure the keys exist for the server in question. You can generate new keys with zmsshkeygen and then rerun zmupdateauthkeys on all the hosts.

[cdmdotnet]

Thanks for that - That's solved the keys issue.

now i've just got the issue with the admin console displaying the following error ( an HTTP watcher gave me the full SOAP response ) when showing the server status page

{"Body":{"Fault":{"Code":{"Value":"soap:Receiver"},"Reason":{"Text":"error while proxying request to
target server Connection refused"},"Detail":{"Error":{"Code":"service.PROXY_ERROR","Trace":"btpool0-3
:1229383255717:2c3ec82270668c5c","_jsns":"urn:zimbra"}}}},"Header":{"context":{"sessionId":[{"_content"
:"38331","type":"admin","id":"38331"}],"change":{"token":33041},"_jsns":"urn:zimbra"}},"_jsns":"urn:zimbraSoap"
}

any ideas on how to solve this last issue?

[brian]

A request was proxied to another server and the connection was refused. Do you have firewalls or anything else blocking the communication between the multiple servers? This is a soap service so either port 80 or 7071.

[cdmdotnet]

Thanks for that pointer

i've checked both ports from server 1 (main server) to server 2 ( slave / backup server) and neither ports were responding to a telnet request

I've logged into the slave and noticed the following issue:

zimbra@:~/bin$ zmcontrol status
Cannot determine services - exiting
zimbra@:~/bin$ zmcontrol stop
Host [slave machine]
Stopping stats...Done
Stopping mta...Done
Stopping spell...Done
Stopping snmp...Done
Stopping archiving...Done
Stopping antivirus...Done
Stopping antispam...Done
Stopping imapproxy...Done
Stopping logger...Done
Stopping ldap...Done
zimbra@:~/bin$ zmcontrol start
Host [slave machine]
zimbra@:~/bin$

i cannot check the status and issuing a start request doesn't appear to do much.

any thoughts on this?

[brian]

It's a pretty good indication that it can't reach the ldap server to lookup which services are enabled for the local server. If ldap is installed on the local system then it should be listed as the first entry returned from zmlocalconfig ldap_url

[cdmdotnet]

I've run the following

zimbra@[slave machine]:~/bin$ zmlocalconfig ldap_url
ldap_url = ldap://[master machine]:389 ldap://[master machine]:389

i'm guessing the server should be listed once and not twice

if so whats the command to correct this setting, and are there likely to be other settings i should probe to make sure values haven't doubled up?

[cdmdotnet]

I've issued the following command from the slave
zmprov gaa. and zmprov gad
and the results show that data is synced up between the two servers

any further thoughts on how to find my issue?

[brian]

You'll need to provide more information on how you installed the servers and what you are trying to accomplish. zmprov gad/gaa doesn't really indicated a sync'd state between two servers. For the most part all servers in a ZCS multi-node install are distinct instances, with the exception of ldap which has a single master and 1 or more replicas. There really is not a notion of a master/slave unless you are installing in a clustered environment in which case its more of an active/passive configuration.

How many servers are in your multi-server install?
What services are installed on each one?

[cdmdotnet]

There are two servers in this installation
the main server with LDAP , MTA, SMTP , POP/IMAP services and one that we want to be a backup SMTP to the external world for receiving incoming emails via moving the main server behind more tight firewall rules and hopefully ( not sure if this is possible ) remove some of the load off the main server relating to spam and junk mail processing.

as for which services are installed on the secondary server. I think all options were chosen. which command would best inform me of the exact services?