4.0GA upgrade

adobrin · Post by **adobrin** » Thu Aug 31, 2006 10:29 pm

Finished the 4.0GA upgrade, install showed no issues, everything appeared to update ok.
documents aren't working, read through zmprov in wiki@domain instructions elsewhere..
unfortunately, zmprov no longer seems to be functioning. the admin account works in the admin console, and the user accounts are working.

[zimbra@mail conf]$ zmprov gacf

ERROR: account.AUTH_FAILED (authentication failed for zimbra)

[zimbra@mail conf]$

any ideas?

adobrin · Post by **adobrin** » Thu Aug 31, 2006 10:41 pm

the password in localconfig.xml is .. what it used to be.
zimbra.log has

2006-08-31 22:39:20,011 INFO [http-7071-Processor49] [ip=127.0.0.1;] SoapEngine - handler exception

com.zimbra.cs.account.AccountServiceException: authentication failed for zimbra

at com.zimbra.cs.account.AccountServiceException.AUTH_FAILED(AccountServiceException.java:78)

at com.zimbra.cs.account.ldap.LdapProvisioning.verifyPassword(LdapProvisioning.java:2344)

at com.zimbra.cs.account.ldap.LdapProvisioning.authAccount(LdapProvisioning.java:2184)

at com.zimbra.cs.account.ldap.LdapProvisioning.authAccount(LdapProvisioning.java:2168)

adobrin · Post by **adobrin** » Thu Aug 31, 2006 10:43 pm

zmldappasswd blah

tomcat restart
same problem.

StefanD · Post by **StefanD** » Fri Sep 01, 2006 5:11 am

zimbra version: zcs-NETWORK-4.0.0_GA_303.RHEL4

When I run the command # zmprov help

I get the following error.
[] ERROR: java.security.cert.CertificateExpiredException: NotAfter: Mon Jul 10 16:17:00 CEST 2006

ERROR: zclient.IO_ERROR (invoke java.security.cert.CertificateException: Untrusted Server Certificate Chain, server: localhost) (cause: javax.net.ssl.SSLHandshakeException java.security.cert.CertificateException: Untrusted Server Certificate Chain)
Any suggestions?

phoenix · Post by **phoenix** » Fri Sep 01, 2006 7:35 am

Does this help?

marcmac · Post by **marcmac** » Fri Sep 01, 2006 10:20 am

Just talked to adobrin, we found a bug in zmldappasswd (my bug, of course

)
Here's the fix:

At the bottom of the file, there's this command:

ldappasswd -c -w ${ldap_root_password} -D ${zimbra_ldap_userdn}

-x -s ${zimbra_ldap_password} ${zimbra_ldap_userdn} > /dev/null 2>&1

That should change to:

ldappasswd -w ${ldap_root_password} -D ${zimbra_ldap_userdn}

-H ${ldap_master_url}

-x -s ${zimbra_ldap_password} ${zimbra_ldap_userdn} > /dev/null 2>&1

NOTE - 2 changes in there, add the "-H ${ldap_master_url}" and REMOVE the "-c"

jml75 · Post by **jml75** » Fri Sep 01, 2006 12:11 pm

Hi marcmac,
I applied the correction you just mentionned and it still does the same problem.

marcmac · Post by **marcmac** » Fri Sep 01, 2006 12:27 pm

Did you change the password after fixing the script, and then restart tomcat?

orlanth · Post by **orlanth** » Fri Sep 01, 2006 12:31 pm

Now that Licensing is enforced, do the spam training accounts count against your license user total?

marcmac · Post by **marcmac** » Fri Sep 01, 2006 12:32 pm

nope, the spam accounts don't count against your total.