[SOLVED] Trouble installing zcs-7.1.0 on centos 5.6

[jdinunci]

Hi, I'm installing zcs-7.1.0_GA_3140.RHEL5_64.20110329150833.tgz on a recently installed Centos 5.6 (64 bits).

The installation of packages works fine. The problems start after I exit the main menu of the configuration. Reviewing the log of the installation I find the following entries:

[...]
Thu May 5 09:15:29 2011 zimbra-ldap is enabled
Thu May 5 09:15:29 2011 checking isEnabled zimbra-store
Thu May 5 09:15:29 2011 zimbra-store is enabled
Thu May 5 09:15:29 2011 This is the ldap master and ldap hasn't been configured yet.
Thu May 5 09:15:29 2011 This is the ldap master and ldap hasn't been configured yet.
Thu May 5 09:15:29 2011 This is the ldap master and ldap hasn't been configured yet.
[...]
Thu May 5 09:15:29 2011 zimbra-snmp is enabled
Thu May 5 09:15:29 2011 This is the ldap master and ldap hasn't been configured yet.
Thu May 5 09:15:29 2011 checking isEnabled zimbra-store
Thu May 5 09:15:29 2011 zimbra-store is enabled
Thu May 5 09:15:29 2011 This is the ldap master and ldap hasn't been configured yet.
Thu May 5 09:15:29 2011 This is the ldap master and ldap hasn't been configured yet.
Thu May 5 09:15:29 2011 This is the ldap master and ldap hasn't been configured yet.
[...]
Thu May 5 09:16:22 2011 *** Running as root user: /opt/zimbra/bin/zmcertmgr createca
** Creating directory /opt/zimbra/ssl/zimbra
** Creating directory /opt/zimbra/ssl/zimbra/ca
** Creating directory /opt/zimbra/ssl/zimbra/server
** Creating directory /opt/zimbra/ssl/zimbra/commercial
** Creating directory /opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
** Retrieving CA private key from ldap...failed.
** Retrieving CA cert from ldap...failed.
** Retrieving Commercial CA cert from ldap...failed.
[...]
Thu May 5 09:16:53 2011 Installing mailboxd SSL certificates...
Thu May 5 09:16:53 2011 /opt/zimbra/mailboxd/etc/keystore didn't exist.
Thu May 5 09:16:53 2011 *** Running as root user: /opt/zimbra/bin/zmcertmgr deploycrt self
** Saving server config key zimbraSSLCertificate...failed.
** Saving server config key zimbraSSLPrivateKey...failed.
[...]
Thu May 5 09:17:29 2011 Creating server entry for d.correo.uc.edu.ve...
Thu May 5 09:17:33 2011 ERROR: service.FAILURE (system failure: unable to lookup server by name: d.correo.uc.edu.ve message: [LDAP: error code 49 - Invalid Credentials]) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])
Thu May 5 09:17:33 2011 *** Running as zimbra user: /opt/zimbra/bin/zmprov -m -l cs d.correo.uc.edu.ve
ERROR: service.FAILURE (system failure: unable to get config) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])
Thu May 5 09:17:37 2011 failed.
Thu May 5 09:17:37 2011 Saving CA in ldap ...
Thu May 5 09:17:37 2011 *** Running as root user: /opt/zimbra/bin/zmcertmgr deployca
** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
** Saving global config key zimbraCertAuthorityCertSelfSigned...failed.
** Saving global config key zimbraCertAuthorityKeySelfSigned...failed.
[...]
Thu May 5 09:17:55 2011 *** Running as zimbra user: /opt/zimbra/bin/zmprov -m -l ms d.correo.uc.edu.ve zimbraSpellCheckURL 'http://d.correo.uc.edu.ve:7780/aspell.php'
ERROR: service.FAILURE (system failure: unable to lookup server by name: d.correo.uc.edu.ve message: [LDAP: error code 49 - Invalid Credentials]) (cause: javax.naming.AuthenticationException [LDAP: error code 49 - Invalid Credentials])
Thu May 5 09:17:59 2011 failed.
[...]


So, for some reason, the installer seems unable to configure ldap and after that it fails whenever it tries to modify entries using authentication.

I tried disabling selinux, but I get the same results.

Thanks in advance.

[phoenix]

Are you behind a NAT router? If you are (or you're behind a firewall), did you set-up a Split DNS(you'll need one)? Is this a single server or multi-server install?

[jdinunci]

This host and the DNS servers are in the same network and there's no NAT or firewall between them. It uses public IPs.

I'm doing a single server install.

[phoenix]

Originally Posted by jdinunci

This host and the DNS servers are in the same network and there's no NAT or firewall between them. It uses public IPs.

Then let's see the output of all the commands in the 'Verify...' section of the Split DNS article, just for verification.

[jdinunci]

Split dns verify section:

~> dig d.correo.uc.edu.ve mx

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 <<>> d.correo.uc.edu.ve mx
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 17327
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;d.correo.uc.edu.ve. IN MX

;; ANSWER SECTION:
d.correo.uc.edu.ve. 30 IN MX 10 d.correo.uc.edu.ve.

;; Query time: 0 msec
;; SERVER: 150.186.32.2#53(150.186.32.2)
;; WHEN: Mon May 9 10:19:21 2011
;; MSG SIZE rcvd: 52

----

~> dig d.correo.uc.edu.ve any

; <<>> DiG 9.3.6-P1-RedHat-9.3.6-16.P1.el5 <<>> d.correo.uc.edu.ve any
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 65371
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;d.correo.uc.edu.ve. IN ANY

;; ANSWER SECTION:
d.correo.uc.edu.ve. 35800 IN A 150.186.32.52

;; Query time: 0 msec
;; SERVER: 150.186.32.2#53(150.186.32.2)
;; WHEN: Mon May 9 10:20:27 2011
;; MSG SIZE rcvd: 52


----

~> host $(hostname)
d.correo.uc.edu.ve has address 150.186.32.52
d.correo.uc.edu.ve mail is handled by 10 d.correo.uc.edu.ve.


----


~> cat /etc/resolv.conf
search uc.edu.ve
nameserver 150.186.32.2
nameserver 150.186.32.3


----


~> cat /etc/hosts
# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1 localhost.localdomain localhost
150.186.32.40 alfa.uc.edu.ve alfa
150.186.32.41 beta.uc.edu.ve beta
150.186.32.42 gamma.uc.edu.ve gamma
150.186.32.43 delta.uc.edu.ve delta
150.186.32.44 epsilon.uc.edu.ve epsilon
150.186.32.45 zeta.uc.edu.ve zeta
150.186.32.46 iota.uc.edu.ve iota
150.186.32.47 kappa.uc.edu.ve kappa
150.186.32.52 d.correo.uc.edu.ve d.correo
190.170.94.131 skade.uc.edu.ve skade
::1 localhost6.localdomain6 localhost6


Thank you.

[phoenix]

Your hosts file is incorrect, it should only contain the localhost entry and the one for the FQDN of your Zimbra server - that's described in the Split DNS article.

Another probable error, isn't your domain name the following:

correo.uc.edu.ve

If it is then you've added the wrong DNS entries for your domain, you've used the FQDN of your server and that's incorrect.

[jdinunci]

I changed /etc/hosts to:

127.0.0.1 localhost.localdomain localhost
150.186.32.52 d.correo.uc.edu.ve d.correo

and make a clean install, but I get the same errors.

correo.uc.edu.ve vs. d.correo.uc.edu.ve: In this particular case, I'm just testing the
new zimbra 7 before making a formal implementation. So, d.correo.uc.edu.ve is my
test playground.

My production mail system serves uc.edu.ve. It is implemented as a split domains, with
postfix as the primary server and one zimbra 6.0 as secondary. Eventually, I would
add one zimbra 7 for the accounts that remain in postfix and then upgrade the
zimbra 6. But before that I want to get used to this new version.

[jdinunci]

Solved!

I updated the system packages

yum update

and the configuration problems disappeared.

Thanks all for your help.