Zimbra Starting logger…Failed

Merhabalar mail yolu ile bana gelen bir zimbra kullanıcısı mail sunucusunda söyle bir sorun olmuştur ( Zimbra Unable to Determine Enabled Services From Ldap. Starting logger…Failed.) ldap servisi start olmuyor bunun çözümü söyledir.

Hata

[zimbra@mail ~]$ zmcontrol start

Host mail.ardaglassware.com

Starting ldap…Done.

Unable to determine enabled services from ldap.

Enabled services read from cache. Service list may be inaccurate.

Starting zmconfigd…Done.

Starting logger…Failed.

Starting logswatch…ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed)

zimbra logger service is not enabled! failed.

Starting mailbox…Done.

Starting antispam…Done.

Starting antivirus…Done.

Starting snmp…Done.

Starting spell…Done.

Starting mta…Failed.

Starting saslauthd…saslauthd[9609] :set_auth_mech : failed to initialize mechanism zimbra

failed.

zmsaslauthdctl failed to start

Starting stats…Done.

Çözüm
Her zamanki gibi bu hatanın nedeni SSL sertifikası…
Bu hata genellikle, SSL sertifikasının süresi dolmuş olur. Bu sorunun iki çözümü vardır.

[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zimbra/commercial/your_new_ssl.crt /path/to/ca_bundle.crt

/opt/zimbra/bin/zmcertmgr must be run as user root

 

zimbra servislerini stop edelim.

 

[zimbra@mail ~]$ zmcontrol stop

[zimbra@mail ~]$ rm -rf /opt/zimbra/ssl/*

[zimbra@mail ~]$ rm -rf /opt/zimbra/ssl/.rnd

[zimbra@mail ~]$ /opt/zimbra/java/bin/keytool -delete -alias my_ca -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit

[zimbra@mail ~]$ /opt/zimbra/java/bin/keytool -delete -alias jetty -keystore /opt/zimbra/mailboxd/etc/keystore -storepass `su – zimbra -c 'zmlocalconfig -s -m nokey mailboxd_keystore_password'`

 

[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr createca -new

[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr deployca -localonly

[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr createcrt self -new

[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr deploycrt self

 

Zimbra servisini start edelim.

[zimbra@mail ~]$ zmcontrol start

Host mail.ardaglassware.com

Starting ldap…Done.

Starting zmconfigd…Done.

Starting logger…Done.

Starting mailbox…Done.

Starting antispam…Done.

Starting antivirus…Done.

Starting snmp…Done.

Starting spell…Done.

Starting mta…Done.

Starting stats…Done.

 

Zimbra servisleri start oldu

[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr deploycrt self

[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr deployca

[zimbra@mail ~]$ su – zimbra -c 'zmupdateauthkeys'

[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr viewdeployedcrt