ldap start error but cert still valid

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
fbzimblet
Advanced member
Advanced member
Posts: 119
Joined: Sun Apr 17, 2016 4:15 pm

ldap start error but cert still valid

Post by fbzimblet »

ZCS NE 8.7.11
Centos 7

I checked host file and mx record and both valid
SSL certs also is not expired yet.
What else could cause this?

Code: Select all

Host mta1.domain.com
	Starting ldap...Done.
Search error: Unable to determine enabled services from ldap.
Enabled services read from cache. Service list may be inaccurate.
	Starting zmconfigd...Failed.
Starting zmconfigd...failed.


	Starting memcached...Done.
	Starting proxy...Done.
	Starting amavis...Done.
	Starting antispam...Done.
	Starting opendkim...Failed.
opendkim: /opt/zimbra/conf/opendkim.conf: ldap://mta1.domain.com:389/?DKIMSelector?sub?(DKIMIdentity=$d): dkimf_db_open(): Invalid credentials
Failed to start opendkim: 0


	Starting snmp...Done.
	Starting mta...Done.
	Starting stats...Done.
	Starting vmware-ha...Done.
	
[zimbra@mta1 ~]$ /opt/zimbra/bin/zmcertmgr viewdeployedcrt
- ldap: /opt/zimbra/conf/slapd.crt
notBefore=Nov 17 04:32:00 2017 GMT
notAfter=Dec  2 03:23:00 2020 GMT
subject= /OU=Domain Control Validated/CN=*.domain.com
issuer= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
SubjectAltName=*.domain.com, domain.com
- mta: /opt/zimbra/conf/smtpd.crt
notBefore=Nov 17 04:32:00 2017 GMT
notAfter=Dec  2 03:23:00 2020 GMT
subject= /OU=Domain Control Validated/CN=*.domain.com
issuer= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
SubjectAltName=*.domain.com, domain.com
- proxy: /opt/zimbra/conf/nginx.crt
notBefore=Nov 17 04:32:00 2017 GMT
notAfter=Dec  2 03:23:00 2020 GMT
subject= /OU=Domain Control Validated/CN=*.domain.com
issuer= /C=US/ST=Arizona/L=Scottsdale/O=GoDaddy.com, Inc./OU=http://certs.godaddy.com/repository//CN=Go Daddy Secure Certificate Authority - G2
SubjectAltName=*.domain.com, domain.com
Post Reply