Mudanças entre as edições de "SSL Expirado Zimbra"
De Slacam_Wiki
| Linha 1: | Linha 1: | ||
| − | + | Zimbra OSE Error: Unable to determine enabled services. Cache is out of date or doesn’t exist. | |
| − | + | Posted on 27/12/2012 | |
| − | + | ||
| − | + | Case: | |
| − | Case: | + | Suddenly the mail server can’t receive and send email. |
| + | No changes in configuration and settings. | ||
| + | After checking the mail status by zmcontrol status command. | ||
| + | [zimbra@mail log]$ zmcontrol status | ||
| + | Unable to determine enabled services from ldap. | ||
| + | Unable to determine enabled services. Cache is out of date or doesn’t exist. | ||
Possible Solutions: | Possible Solutions: | ||
| Linha 9: | Linha 14: | ||
1. Timezone for your zimbra whether system timezone and zimbra timezone it matches or not if not then log to zimbra and run “tzselect” and find your correct timezone and make timezone entry in “.bash_profile”. | 1. Timezone for your zimbra whether system timezone and zimbra timezone it matches or not if not then log to zimbra and run “tzselect” and find your correct timezone and make timezone entry in “.bash_profile”. | ||
| − | 2. DNS – check whether your DNS configuration is correct. | + | 2. DNS – check whether your DNS configuration is correct. |
| + | use - | ||
| + | dig domain.com | ||
| + | dig domain.com mx | ||
| + | dig domain.com any | ||
host domain.com | host domain.com | ||
| − | 3. make sure /etc/resolv.conf entry is correct, make sure your “/etc/hosts” Entry is correct. | + | 3. make sure /etc/resolv.conf entry is correct, make sure your “/etc/hosts” Entry is correct. |
| + | Make sure disabled SeLinux, make sure you set correct permission to zimbra directory if not then run below command to fix permission issue - | ||
# chown -R zimbra:zimbra /opt/zimbra | # chown -R zimbra:zimbra /opt/zimbra | ||
| Linha 19: | Linha 29: | ||
# /opt/zimbra/libexec/zmfixperms -verbose | # /opt/zimbra/libexec/zmfixperms -verbose | ||
| − | 4. If you are using self signed certificate then run below command | + | 4. If you are using self signed certificate then run below command |
| + | # zmlocalconfig -s ssl_allow_untrusted_certs | ||
# If that returns false, please run: | # If that returns false, please run: | ||
| Linha 26: | Linha 37: | ||
5. Now Try creating certificate, just follow the below Instructions: | 5. Now Try creating certificate, just follow the below Instructions: | ||
| − | + | ||
# su – zimbra -c ‘zmcontrol stop’ | # su – zimbra -c ‘zmcontrol stop’ | ||
| Linha 39: | Linha 50: | ||
#vi /opt/zimbra/bin/zmcertmgr | #vi /opt/zimbra/bin/zmcertmgr | ||
| − | # Find line | + | # Find line |
| + | # SUBJECT=”/C=US/ST=N\/A/L=N\/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=${zimbra_server_hostname}” | ||
| + | # and change to your company name | ||
| − | # then find and change you want value days expire cert validation_days=365 to validation_days=3650 | + | # then find and change you want value days expire cert validation_days=365 to validation_days=3650 |
| + | # save /opt/zimbra/bin/zmcertmgr | ||
#/opt/zimbra/bin/zmcertmgr createca -new | #/opt/zimbra/bin/zmcertmgr createca -new | ||
| Linha 68: | Linha 82: | ||
#/opt/zimbra/bin/zmcertmgr viewdeployedcrt | #/opt/zimbra/bin/zmcertmgr viewdeployedcrt | ||
| − | |||
Edição das 14h21min de 3 de junho de 2013
Zimbra OSE Error: Unable to determine enabled services. Cache is out of date or doesn’t exist. Posted on 27/12/2012
Case: Suddenly the mail server can’t receive and send email. No changes in configuration and settings. After checking the mail status by zmcontrol status command. [zimbra@mail log]$ zmcontrol status Unable to determine enabled services from ldap. Unable to determine enabled services. Cache is out of date or doesn’t exist.
Possible Solutions:
1. Timezone for your zimbra whether system timezone and zimbra timezone it matches or not if not then log to zimbra and run “tzselect” and find your correct timezone and make timezone entry in “.bash_profile”.
2. DNS – check whether your DNS configuration is correct. use - dig domain.com dig domain.com mx dig domain.com any
host domain.com
3. make sure /etc/resolv.conf entry is correct, make sure your “/etc/hosts” Entry is correct. Make sure disabled SeLinux, make sure you set correct permission to zimbra directory if not then run below command to fix permission issue -
- chown -R zimbra:zimbra /opt/zimbra
- /opt/zimbra/libexec/zmfixperms -verbose
4. If you are using self signed certificate then run below command
- zmlocalconfig -s ssl_allow_untrusted_certs
- If that returns false, please run:
- zmlocalconfig -e ssl_allow_untrusted_certs=true
5. Now Try creating certificate, just follow the below Instructions:
- su – zimbra -c ‘zmcontrol stop’
- rm -rf /opt/zimbra/ssl/*
- rm -rf /opt/zimbra/ssl/.rnd
- /opt/zimbra/java/bin/keytool -delete -alias my_ca -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit
- /opt/zimbra/java/bin/keytool -delete -alias jetty -keystore /opt/zimbra/mailboxd/etc/keystore -storepass `su – zimbra -c ‘zmlocalconfig -s -m nokey mailboxd_keystore_password’`
- vi /opt/zimbra/bin/zmcertmgr
- Find line
- SUBJECT=”/C=US/ST=N\/A/L=N\/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=${zimbra_server_hostname}”
- and change to your company name
- then find and change you want value days expire cert validation_days=365 to validation_days=3650
- save /opt/zimbra/bin/zmcertmgr
- /opt/zimbra/bin/zmcertmgr createca -new
- /opt/zimbra/bin/zmcertmgr deployca -localonly
- /opt/zimbra/bin/zmcertmgr createcrt self -new
May be you will receive some Failed but ignore them,
- /opt/zimbra/bin/zmcertmgr deploycrt self
Here also
- su – zimbra -c ‘zmcontrol start’
It should start services successfully.
- /opt/zimbra/bin/zmcertmgr deploycrt self
- /opt/zimbra/bin/zmcertmgr deployca
Everything would be perfect here.
- su – zimbra -c ‘zmupdateauthkeys’
- /opt/zimbra/bin/zmcertmgr viewdeployedcrt
