{"id":377,"date":"2012-05-04T13:34:15","date_gmt":"2012-05-04T13:34:15","guid":{"rendered":"http:\/\/www.plugged.in\/?p=377"},"modified":"2012-05-04T13:34:15","modified_gmt":"2012-05-04T13:34:15","slug":"zimbra-mail-server-unable-to-determine-enabled-services-from-ldap","status":"publish","type":"post","link":"https:\/\/www.veriteknik.net.tr\/en\/zimbra-mail-server-unable-to-determine-enabled-services-from-ldap\/","title":{"rendered":"(Zimbra Mail Server) Unable to determine enabled services from LDAP"},"content":{"rendered":"
[zimbra@ck]$ zmcontrol start
\nHost mail.plugged.in
\n Starting ldap…Done.
\nUnable to determine enabled services from ldap.
\nEnabled services read from cache. Service list may be inaccurate.
\n Starting logger…Failed.
\nStarting logswatch…ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)
\nzimbra logger service is not enabled! failed.<\/p><\/blockquote>\n

The usual reason for this error is expired an SSL certificate.<\/p>\n


\nThis error usually happens if your SSL certificate has expired. There are two solutions for this problem.<\/p>\n

The first solution is renewing your certificate and deploying it with the following command :<\/strong><\/p>\n

 <\/p>\n

[zimbra@ck]$ \/opt\/zimbra\/bin\/zmcertmgr deploycrt comm \/opt\/zimbra\/ssl\/zimbra\/commercial\/your_new_ssl.crt \/path\/to\/ca_bundle.crt<\/p><\/blockquote>\n

After this you need to restart zmcontrol.<\/p>\n

The second solution is regenerating self-signed certificate.<\/strong><\/p>\n

[zimbra@ck]$ su – zimbra -c ‘zmcontrol stop’
\n[zimbra@ck]$ rm -rf \/opt\/zimbra\/ssl\/*
\n[zimbra@ck]$ rm -rf \/opt\/zimbra\/ssl\/.rnd
\n[zimbra@ck]$ \/opt\/zimbra\/java\/bin\/keytool -delete -alias my_ca -keystore \/opt\/zimbra\/java\/jre\/lib\/security\/cacerts -storepass changeit
\n[zimbra@ck]$ \/opt\/zimbra\/java\/bin\/keytool -delete -alias jetty -keystore \/opt\/zimbra\/mailboxd\/etc\/keystore -storepass `su – zimbra -c ‘zmlocalconfig -s -m nokey mailboxd_keystore_password’`<\/p><\/blockquote>\n

Then you need to edit\u00a0 \/opt\/zimbra\/bin\/zmcertmgr file ( you can use ‘vi’ )<\/p>\n

Find validation_days=365 and change to validation_days=3650<\/p>\n

And save \/opt\/zimbra\/bin\/zmcertmgr<\/p>\n

[zimbra@ck]$ \/opt\/zimbra\/bin\/zmcertmgr createca -new
\n[zimbra@ck]$ \/opt\/zimbra\/bin\/zmcertmgr deployca -localonly
\n[zimbra@ck]$ \/opt\/zimbra\/bin\/zmcertmgr createcrt self -new
\n[zimbra@ck]$ \/opt\/zimbra\/bin\/zmcertmgr deploycrt self<\/p>\n[zimbra@ck]$ su – zimbra -c ‘zmcontrol start’<\/p>\n[zimbra@ck]$ \/opt\/zimbra\/bin\/zmcertmgr deploycrt self
\n[zimbra@ck]$ \/opt\/zimbra\/bin\/zmcertmgr deployca<\/p>\n[zimbra@ck]$ su – zimbra -c ‘zmupdateauthkeys’
\n[zimbra@ck]$ \/opt\/zimbra\/bin\/zmcertmgr viewdeployedcrt<\/p><\/blockquote>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

[zimbra@ck]$ zmcontrol start Host mail.plugged.in Starting ldap…Done. Unable to determine enabled services from ldap. Enabled services read from cache. Service list may be inaccurate. Starting logger…Failed. Starting logswatch…ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target) zimbra logger service is not enabled! […]<\/p>\n","protected":false},"author":6,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_uag_custom_page_level_css":"","footnotes":""},"categories":[370,372],"tags":[496,497,498],"yst_prominent_words":[],"class_list":["post-377","post","type-post","status-publish","format-standard","hentry","category-linux","category-linux_help","tag-ldap-service-error","tag-service-error","tag-zimbra"],"jetpack_featured_media_url":"","uagb_featured_image_src":{"full":false,"thumbnail":false,"medium":false,"medium_large":false,"large":false,"1536x1536":false,"2048x2048":false},"uagb_author_info":{"display_name":"Cevdet Kaymaz","author_link":"https:\/\/www.veriteknik.net.tr\/en\/author\/cevdet-kaymaz\/"},"uagb_comment_info":0,"uagb_excerpt":"[zimbra@ck]$ zmcontrol start Host mail.plugged.in Starting ldap…Done. Unable to determine enabled services from ldap. Enabled services read from cache. Service list may be inaccurate. Starting logger…Failed. Starting logswatch…ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target) zimbra logger service is not enabled!…","_links":{"self":[{"href":"https:\/\/www.veriteknik.net.tr\/en\/wp-json\/wp\/v2\/posts\/377","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.veriteknik.net.tr\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.veriteknik.net.tr\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.veriteknik.net.tr\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.veriteknik.net.tr\/en\/wp-json\/wp\/v2\/comments?post=377"}],"version-history":[{"count":0,"href":"https:\/\/www.veriteknik.net.tr\/en\/wp-json\/wp\/v2\/posts\/377\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.veriteknik.net.tr\/en\/wp-json\/wp\/v2\/media?parent=377"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.veriteknik.net.tr\/en\/wp-json\/wp\/v2\/categories?post=377"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.veriteknik.net.tr\/en\/wp-json\/wp\/v2\/tags?post=377"},{"taxonomy":"yst_prominent_words","embeddable":true,"href":"https:\/\/www.veriteknik.net.tr\/en\/wp-json\/wp\/v2\/yst_prominent_words?post=377"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}