ldap fails

[linmar]

Hi,

I am trying to add a second MTA, but if I try to connect (from the remote box) to ldap I get an

root@backup01 ~ # ldapsearch -H ldap://10.1.1.100 -b cn=monitor -s one + -x
ldap_bind: Can't contact LDAP server (-1)

error, locally it works fine. Where do I authorize the list of servers to access LDAP?

Thanks,
Markus

[linmar]

to be more precise, it is listening on 127.0.0.1 only, so even if I try to reach ldap via eth0/1 I get this message ... should be an easy setting, but I dont know where (

[phoenix]

Have you read the Zimbra Multi-Server Install? Are just trying to add a second MTA? If that's the case you have one LDAP instance and you just install the MTA component on a second server. Can you describe in detail what the set-up is that you're trying to achieve?

[linmar]

I did a test-installation of zimbra on my primary server. This worked out well so I will continue to use it as the primary mail system.

In order to make it more reliable I would like to add a second server; that one should have an MTA and should either connect to the primary LDAP server or even better host its own LDAP replica. Possibly it should also host a second web-frontend/pop/imap, but the mails should always be stored on the primary.

I read the multi-host manual, but unfortunately it assums a fresh installation, but I think most cases will be like mine where you start with one and then add more servers.

When following the manual it fails with the LDAP connect error, I used the LDAP commands above to isolate the problem.

My servers are installed with secure linux enabled, might that be the issue? If so, how could I continue without reinstalling the servers (which is not an option)?

Thanks!
Markus

[phoenix]

I'm afraid that I'm not an expert on multi server install but unless you're going to use LDAP replication then you should only have one instance of LDAP. You should definitely disable SElinux as it does cause problems.

[fajarpri]

@linmar,
If your ldap only listens to 127.0.0.1, it means your /etc/hosts file is wrong.
Don't put your hostname in 127.0.0.1, let 127.0.0.1 as localhost.localdomain.
Put your hostname in the ip address of your NIC, such as:
192.168.0.250 masterldap.yourdomain.com backupldap

That way your ldap will listen on 192.168.0.250

I hope this helps. I learnt it the hardway