Installation fails, due to: Fetching CA from ldap...ERROR: service.FAILURE

**xtin** · 04-13-2007, 12:40 AM

UPDATE: If you try to get Zimbra running on Debian 4.0 do as in this Post Debian ETCH 4.0 install stated!

Hello

I can't get my zimbra running

Code:

Main menu

   1) Hostname:                                t.dyndns.org             
   2) Ldap master host:                        t.dyndns.org             
   3) Ldap port:                               389                           
   4) Ldap password:                           set                           
   r) Start servers after configuration        yes                           
   s) Save config to file                                                    
   x) Expand menu                                                            
   q) Quit                                    

*** CONFIGURATION COMPLETE - press 'a' to apply
Select from menu, or press 'a' to apply config (? - help) a
Save configuration data to a file? [Yes] 
Save config in file: [/opt/zimbra/config.3750] 
Saving config in /opt/zimbra/config.3750...Done
The system will be modified - continue? [No] Y
Operations logged to /tmp/zmsetup.log.3750
Setting local config values...Done
Setting up CA...Done
Fetching CA from ldap...ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.CommunicationException t.dyndns.org:389)
ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.CommunicationException t.dyndns.org:389)
Done
Creating server entry for t.dyndns.org...Done
Setting services on t.dyndns.org...Done
Setting up zimbra crontab...Done
Setting up syslog.conf...ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.CommunicationException t.dyndns.org:389)
Done

You have the option of notifying Zimbra of your installation.
This helps us to track the uptake of the Zimbra Collaboration Suite.
The only information that will be transmitted is:
        The VERSION of zcs installed (4.5.4_GA_763_UNKNOWN)
        The ADMIN EMAIL ADDRESS created (admin@t.dyndns.org)

Notify Zimbra of your installation? [Yes] N
Notification skipped
Starting servers...Done.

Output of "dig t.dyndns.org"

Code:

; <<>> DiG 9.3.4 <<>> t.dyndns.org
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42471
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;t.dyndns.org.             IN      A

;; ANSWER SECTION:
t.dyndns.org.      14113   IN      A       88.198.**.*** it's the correct ip of the server

;; Query time: 0 msec
;; SERVER: 213.133.98.97#53(213.133.98.97)
;; WHEN: Fri Apr 13 03:34:42 2007
;; MSG SIZE  rcvd: 51

output of "dig mx t.dyndns.org"

Code:

; <<>> DiG 9.3.4 <<>> t.dyndns.org mx
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 40687
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;t.dyndns.org.             IN      MX

;; ANSWER SECTION:
t.dyndns.org.      42876   IN      MX      10 t.dyndns.org.

;; Query time: 1 msec
;; SERVER: 213.133.98.97#53(213.133.98.97)
;; WHEN: Fri Apr 13 03:35:20 2007
;; MSG SIZE  rcvd: 51

/etc/hosts reads:

Code:

127.0.0.1       localhost.localdomain localhost
88.198.**.** t.dyndns.org t

# The following lines are desirable for IPv6 capable hosts
::1     ip6-localhost ip6-loopback
fe00::0 ip6-localnet
ff00::0 ip6-mcastprefix
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters
ff02::3 ip6-allhosts

The System is a Debian 4.0 with 2.6.18-4-xen-686 kernel in a domU (128Mb RAM).
(Edit: Just tried it with more ram, yet no difference)

I read something about libssl0.9.7 (etch comes with 0.9.8) in the forum, so i installed that package too, without success though.

**phoenix** · 04-13-2007, 12:53 AM

Disable IPv6 and you need more RAM - that doesn't even meet the basic specifications. Check the documentation for required system specifications.

**xtin** · 04-13-2007, 01:28 AM

Disabled IPv6 without any effect.

The spec. for zimbra mention at least 1GB of Ram for testing purposes, i can at most give it 640MB (it's only for testing purposes right now and my other domU's got to run on...)

Trying it with 640MB of RAM brought no success so far.

Is the 1GB vital?

(I cleaned the IPv6 entries from /etc/hosts too)

**phoenix** · 04-13-2007, 01:48 AM

No, it's not vital to have 1GB but what you've now got should do it.

OK, I see you're using a dyndns.org address for you DNS. Is that because you're behind a NAT router? If you are then you need an internal DNS server for split-DNS, have a look in the wiki for details.

**xtin** · 04-13-2007, 03:27 AM

No, its not behind a NAT.

Im using dyndns because the domU has it's own public IP and i got no domain for it. (at least not while it is in testing phase)

**phoenix** · 04-13-2007, 03:46 AM

It would appear, from my perspective, that you don't have any MX records - check this report. You really do need A & MX records for a domain name as well as /etc/hosts.

The usual reasons for LDAP failures are DNS related, were there any errors earlier in the install log?

**xtin** · 04-13-2007, 08:48 AM

Uh my dyndnshost is not really t

i'm just not so keen on publishing the ip of a server on a public forum unless it's rock steady ...

Here the report from pingability:

Code:

Info Type   	Message   
Information	We did not find any name server records for 't.dyndns.org' but we did for 'dyndns.org.'. This probably indicates that the domain you entered is a sub-domain not a zone. That is fine.
Information	t.dyndns.org./88.198.**.*** is located in Germany (DE)
Good	The RDNS entry ***.**.198.88.in-addr.arpa (t.dyndns.org./88.198.**.***) points to t.dyndns.org.. t.dyndns.org. has an IP Address (A) record that matches this IP as well. Good.
Information	www.t.dyndns.org is a CNAME record pointing to t.dyndns.org.

Mail Server Info
Info Type   	Message   
Heads-up	Your domain t.dyndns.org has only a single MX record 't.dyndns.org'. If you add a secondary mail server then you will still be able to accept email if your primary mail server is unavailable.
Mail Server: t.dyndns.org
Server Name	t.dyndns.org
IP	88.198.**.***
Location	Germany
Mail Server For	*@t.dyndns.org
MX Priority	10
Connect Response Time	NA
Server 'Hello' Line	
Open Relay?	Not tested
RDNS Entry	t.dyndns.org.

Here's the logfile of the install:

Code:

Setting defaults...
Setting local config zimbra_java_home to /opt/zimbra/java
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e zimbra_java_home='/opt/zimbra/java'
Done
Checking for port conflicts
ldap configuration not complete
ldap configuration not complete
ldap configuration not complete
ldap configuration not complete
ldap configuration not complete
Saving config in /opt/zimbra/config.2834...
Done
Operations logged to /tmp/zmsetup.log.2834
Setting local config values...
Setting local config zimbra_server_hostname to t.dyndns.org
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e zimbra_server_hostname='t.dyndns.org'
Setting local config ldap_master_url to ldap://t.dyndns.org:389
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e ldap_master_url='ldap://t.dyndns.org:389'
Setting local config ldap_url to ldap://t.dyndns.org:389
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e ldap_url='ldap://t.dyndns.org:389'
Setting local config ldap_port to 389
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e ldap_port='389'
Setting local config ldap_host to t.dyndns.org
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e ldap_host='t.dyndns.org'
Setting local config zimbra_uid to 1000
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e zimbra_uid='1000'
Setting local config zimbra_gid to 103
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e zimbra_gid='103'
Setting local config zimbra_user to zimbra
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e zimbra_user='zimbra'
Setting local config av_notify_user to admin@t.dyndns.org
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e av_notify_user='admin@t.dyndns.org'
Setting local config ssl_allow_untrusted_certs to TRUE
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e ssl_allow_untrusted_certs='TRUE'
Setting local config mysql_memory_percent to 30
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e mysql_memory_percent='30'
Setting local config tomcat_java_heap_memory_percent to 40
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e tomcat_java_heap_memory_percent='40'
Done
Setting up CA...
*** Running as zimbra user: cd /opt/zimbra; zmcreateca
** Creating CA private key

Generating a 1024 bit RSA private key
.++++++
..........................++++++
unable to write 'random state'
writing new private key to '/opt/zimbra/ssl/ssl/ca/ca.key'
-----
** Creating CA cert

Signature ok
subject=/C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite
Getting Private key
unable to write 'random state'
Done
Updating ldap_root_password and zimbra_ldap_passwd
Setting local config ldap_root_password to *******
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e ldap_root_password='*******'
Setting local config zimbra_ldap_password to *******
*** Running as zimbra user: /opt/zimbra/bin/zmlocalconfig -f -e zimbra_ldap_password='*******'
Fetching CA from ldap...
*** Running as zimbra user: mkdir -p /opt/zimbra/ssl/ssl/ca
Done
Creating server entry for t.dyndns.org...
*** Running as zimbra user: /opt/zimbra/bin/zmprov -l cs t.dyndns.org
ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.CommunicationException t.dyndns.org:389)
Done
Setting services on t.dyndns.org...
*** Running as zimbra user: /opt/zimbra/bin/zmprov -l ms t.dyndns.org
usage:  modifyServer(ms) {name|id} [attr1 value1 [attr2 value2...]]

zmprov [args] [cmd] [cmd-args ...]

  -h/--help                      display usage
  -f/--file                      use file as input stream
  -s/--server   {host}[:{port}]  server hostname and optional port
  -l/--ldap                      provision via LDAP instead of SOAP
  -a/--account  {name}           account name to auth as
  -p/--password {pass}           password for account
  -P/--passfile {file}           read password from file
  -z/--zadmin                    use zimbra admin name/password from localconfig for admin/password
  -v/--verbose                   verbose mode (dumps full exception stack trace)
  -d/--debug                     debug mode (dumps SOAP messages)

 zmprov is used for provisioning. Try:

     zmprov help account         help on account-related commands
     zmprov help calendar        help on calendar resource-related commands
     zmprov help commands        help on all commands
     zmprov help config          help on config-related commands
     zmprov help cos             help on COS-related commands
     zmprov help domain          help on domain-related commands
     zmprov help list            help on distribution list-related commands
     zmprov help misc            help on misc commands
     zmprov help notebook        help on notebook-related commands
     zmprov help search          help on search-related commands
     zmprov help server          help on server-related commands

*** Running as zimbra user: /opt/zimbra/bin/zmprov -l ms t.dyndns.org
usage:  modifyServer(ms) {name|id} [attr1 value1 [attr2 value2...]]

zmprov [args] [cmd] [cmd-args ...]

  -h/--help                      display usage
  -f/--file                      use file as input stream
  -s/--server   {host}[:{port}]  server hostname and optional port
  -l/--ldap                      provision via LDAP instead of SOAP
  -a/--account  {name}           account name to auth as
  -p/--password {pass}           password for account
  -P/--passfile {file}           read password from file
  -z/--zadmin                    use zimbra admin name/password from localconfig for admin/password
  -v/--verbose                   verbose mode (dumps full exception stack trace)
  -d/--debug                     debug mode (dumps SOAP messages)

 zmprov is used for provisioning. Try:

     zmprov help account         help on account-related commands
     zmprov help calendar        help on calendar resource-related commands
     zmprov help commands        help on all commands
     zmprov help config          help on config-related commands
     zmprov help cos             help on COS-related commands
     zmprov help domain          help on domain-related commands
     zmprov help list            help on distribution list-related commands
     zmprov help misc            help on misc commands
     zmprov help notebook        help on notebook-related commands
     zmprov help search          help on search-related commands
     zmprov help server          help on server-related commands

Done
Setting up zimbra crontab...
Done
Setting up syslog.conf...
Done
Notification skipped
Starting servers...
*** Running as zimbra user: /opt/zimbra/bin/zmcontrol start
Host t.dyndns.org
Done.
*** Running as zimbra user: /opt/zimbra/bin/zmsshkeygen
Generating public/private dsa key pair.
Your identification has been saved in /opt/zimbra/.ssh/zimbra_identity.
Your public key has been saved in /opt/zimbra/.ssh/zimbra_identity.pub.
The key fingerprint is:
48:d5:f7:a4:d8:2d:2a:01:c6:e5:e7:64:57:b9:80:41 t.dyndns.org
ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.CommunicationException t.dyndns.org:389)
*** Running as zimbra user: /opt/zimbra/bin/zmupdateauthkeys
ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.CommunicationException t.dyndns.org:389)
Updating /opt/zimbra/.ssh/authorized_keys



Operations logged to /tmp/zmsetup.log.2834

Thanks for your help!

**jholder** · 04-13-2007, 11:05 AM

What does:
host `hostname`
return?

Are you behind a router/nat?
If so, then you'll need the NATTED address in the hosts file, not the public IP. That's what the DNS is for.

**xtin** · 04-14-2007, 12:51 AM

host `hostname` returns:

Code:

Host t not found: 3(NXDOMAIN)

As far as i know i'm not behind a NAT (i didn't set one up.) I'll investigate it a bit further when i'm home!

edit: this is what netstat -anp outputs at the very moment the error occurs.

Code:

Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name   
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN     1211/sshd

this is "ps aux" from the same moment

Code:

root      1186  0.0  0.0   1636   624 ?        Ss   Apr13   0:00 /sbin/syslogd
root      1192  0.0  0.0   1592   384 ?        Ss   Apr13   0:00 /sbin/klogd -x
root      1211  0.0  0.1   4940  1084 ?        Ss   Apr13   0:00 /usr/sbin/sshd
root      1225  0.0  0.1   2208   768 ?        Ss   Apr13   0:00 /usr/sbin/cron
root      1289  0.0  0.1   2676  1176 tty1     Ss   Apr13   0:00 /bin/login -- 
root      1290  0.0  0.2   2832  1700 tty1     S    Apr13   0:00 -bash
root     31492  0.0  0.2   2896  1636 tty1     T    08:17   0:00 /bin/bash ./ins
root     31910  0.0  0.0      0     0 ?        S    08:18   0:00 [pdflush]
root     32380  0.0  0.0      0     0 ?        S    08:18   0:00 [pdflush]
root     32618  0.0  1.7  12824 11212 tty1     T    08:18   0:00 /usr/bin/perl /
zimbra     579  0.0  0.1   2540  1012 tty1     T    08:19   0:00 su - zimbra -c
zimbra     580  0.0  0.2   3156  1556 tty1     T    08:19   0:00 -su -c /opt/zim
zimbra     583  0.0  0.2   2952  1420 tty1     T    08:19   0:00 /bin/bash /opt/
zimbra     584  0.0  0.0   1624   492 tty1     T    08:19   0:00 sed -ne /-----B
zimbra     585  0.0  0.0   1628   504 tty1     T    08:19   0:00 sed -e s/^zimbr
zimbra     588  0.0  2.0 261412 13252 tty1     Tl   08:19   0:00 /opt/zimbra/jav
root       715  0.0  0.1   2232   896 tty1     R+   08:23   0:00 ps aux

Running /opt/zimbra/bin/ldap returns:

Code:

ldap_url and ldap_master_url cannot be the same on an ldap replica

So it looks like the LDAP Server never comes up!

Any ideas?
Thanks for your help!

**xtin** · 04-14-2007, 08:31 AM

I installed zimbra with /install.sh -s and then checked the install log:

Code:

Selecting previously deselected package zimbra-core.
(Reading database ... 10080 files and directories currently installed.)
Unpacking zimbra-core (from .../zimbra-core_4.5.4_GA_763.DEBIAN3.1_i386.deb) ...
Setting up zimbra-core (4.5.4_GA_763.DEBIAN3.1) ...
chown: cannot access `/opt/zimbra/a*': No such file or directory
chown: cannot access `/opt/zimbra/s[a-su-z]*': No such file or directory
chown: cannot access `/opt/zimbra/perdition-1.17': No such file or directory
chown: cannot access `/opt/zimbra/apache-tomcat-*': No such file or directory
mkdir: cannot create directory `/opt/zimbra/.ssh': File exists
Loading classes to share ... done. 
Rewriting and unlinking classes ... done. 
Calculating hash values for String objects .. done. 
Calculating fingerprints ... done. 
Removing unshareable information ... done. 
Moving most read-only objects to shared space at 0x909f0000 ... done. 
Moving common symbols to shared space at 0x90d6c4f0 ... done. 
Moving remaining symbols to shared space at 0x90e98280 ... done. 
Moving string char arrays to shared space at 0x90e98d10 ... done. 
Moving additional symbols to shared space at 0x90f1a7b8 ... done. 
Read-only space ends at 0x90f6eaf8, 5761784 bytes.
Moving read-write objects to shared space at 0x911f0000 ... done. 
Moving String objects to shared space at 0x91779c50 ... done. 
Read-write space ends at 0x917b9d78, 6069624 bytes.
Updating references to shared objects ... done. 


Selecting previously deselected package zimbra-ldap.
(Reading database ... 12417 files and directories currently installed.)
Unpacking zimbra-ldap (from .../zimbra-ldap_4.5.4_GA_763.DEBIAN3.1_i386.deb) ...
Setting up zimbra-ldap (4.5.4_GA_763.DEBIAN3.1) ...
chown: cannot access `/opt/zimbra/a*': No such file or directory
chown: cannot access `/opt/zimbra/perdition-1.17': No such file or directory
chown: cannot access `/opt/zimbra/apache-tomcat-*': No such file or directory

Selecting previously deselected package zimbra-logger.
(Reading database ... 12706 files and directories currently installed.)
Unpacking zimbra-logger (from .../zimbra-logger_4.5.4_GA_763.DEBIAN3.1_i386.deb) ...
Setting up zimbra-logger (4.5.4_GA_763.DEBIAN3.1) ...
chown: cannot access `/opt/zimbra/a*': No such file or directory
chown: cannot access `/opt/zimbra/perdition-1.17': No such file or directory
chown: cannot access `/opt/zimbra/apache-tomcat-*': No such file or directory

Selecting previously deselected package zimbra-mta.
(Reading database ... 14315 files and directories currently installed.)
Unpacking zimbra-mta (from .../zimbra-mta_4.5.4_GA_763.DEBIAN3.1_i386.deb) ...
Setting up zimbra-mta (4.5.4_GA_763.DEBIAN3.1) ...
chown: cannot access `/opt/zimbra/perdition-1.17': No such file or directory
chown: cannot access `/opt/zimbra/apache-tomcat-*': No such file or directory
umount2: No such file or directory
umount: /opt/zimbra/amavisd/tmp: not found
chown: cannot access `/opt/zimbra/perdition-1.17': No such file or directory
chown: cannot access `/opt/zimbra/apache-tomcat-*': No such file or directory

Selecting previously deselected package zimbra-snmp.
(Reading database ... 15550 files and directories currently installed.)
Unpacking zimbra-snmp (from .../zimbra-snmp_4.5.4_GA_763.DEBIAN3.1_i386.deb) ...
Setting up zimbra-snmp (4.5.4_GA_763.DEBIAN3.1) ...
chown: cannot access `/opt/zimbra/perdition-1.17': No such file or directory
chown: cannot access `/opt/zimbra/apache-tomcat-*': No such file or directory

Selecting previously deselected package zimbra-store.
(Reading database ... 16094 files and directories currently installed.)
Unpacking zimbra-store (from .../zimbra-store_4.5.4_GA_763.DEBIAN3.1_i386.deb) ...
Setting up zimbra-store (4.5.4_GA_763.DEBIAN3.1) ...

Selecting previously deselected package zimbra-apache.
(Reading database ... 20582 files and directories currently installed.)
Unpacking zimbra-apache (from .../zimbra-apache_4.5.4_GA_763.DEBIAN3.1_i386.deb) ...
Setting up zimbra-apache (4.5.4_GA_763.DEBIAN3.1) ...

Selecting previously deselected package zimbra-spell.
(Reading database ... 22315 files and directories currently installed.)
Unpacking zimbra-spell (from .../zimbra-spell_4.5.4_GA_763.DEBIAN3.1_i386.deb) ...
Setting up zimbra-spell (4.5.4_GA_763.DEBIAN3.1) ..

To me it looks like the packages are installed in the wrong order. LDAP assuming that tomcat's already there. I reinstalled all the packages that got errors with "dpkg -i". This time only getting Errors with: zimbra-mta (it persists when trying to install it again.)

Code:

Unpacking replacement zimbra-mta ...
Setting up zimbra-mta (4.5.4_GA_763.DEBIAN3.1) ...
umount2: Invalid argument
umount: /opt/zimbra/amavisd/tmp: not mounted

Maybe that shades some light on the whole issue...

(zmsetup.pl generates the same errors as before when run after this)

----------------------------------

I tried to run /opt/zimbra/libexec/zmldapinit as zimbra user
getting the following:

Code:

/opt/zimbra/libexec/zmldapinit: line 60: /opt/zimbra/conf/slapd.conf.in: Permission denied
/opt/zimbra/libexec/zmldapinit: line 76: /opt/zimbra/conf/zimbra.ldif: Permission denied
/opt/zimbra/lib/conf/zimbra-hsm.schema: line 1: ObjectIdentifier "ZimbraHsmAttrType" previously defined "1.3.6.1.4.1.19348.2.4"ERROR - failed to start slapd

then chmodded the file to 777 and ran it again:

Code:

zimbra@tinzim:~/conf$ /opt/zimbra/libexec/zmldapinit 
TLS: error:02001002:system library:fopen:No such file or directory bss_file.c:278
TLS: error:20074002:BIO routines:FILE_CTRL:system lib bss_file.c:280
TLS: error:140B0002:SSL routines:SSL_CTX_use_PrivateKey_file:system lib ssl_rsa.c:693
main: TLS init def ctx failed: -1
ERROR - failed to start slapd

There was another thread that mentioned the problem of zimbra being linked to libssl0.9.7 when there is libssl0.9.8 installed.
I'll follow this scent a bit ...

EDIT: It's up and running! Just found this post:
Debian ETCH 4.0 install

worked like a charm!

Zimbra

Thread: Installation fails, due to: Fetching CA from ldap...ERROR: service.FAILURE

LinkBack

Thread Tools

Search Thread

Display

Installation fails, due to: Fetching CA from ldap...ERROR: service.FAILURE

Thread Information

Users Browsing this Thread

Similar Threads

Zimbra Install Problem - getDirectContext

3 testing: LDAP: 389 Failed when restore zimbra

Installation Problem - Possibly LDAP

Mac OSX install: Java errors & LDAP CA error

Zimbra MTA fails on LDAP replica host (LDAP: error code 32 - No Such Object)

Posting Permissions