Missing read permissions on /opt/zimbra/common/etc/openldap/slapd.conf

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
rsaeks
Advanced member
Advanced member
Posts: 53
Joined: Sat Sep 13, 2014 3:03 am
ZCS/ZD Version: Release 8.8.11_GA_3737.RHEL7_64_201

Missing read permissions on /opt/zimbra/common/etc/openldap/slapd.conf

Post by rsaeks »

After the 8.8.11 patch 3 I'm seeing the following error while the NG backup runs:

Missing read permissions on /opt/zimbra/common/etc/openldap/slapd.conf

I did run a zmfixperms as root but still see the same message. The permissions on the item are:

-rw------- 1 root root 2179 Sep 18 2018 slapd.conf

Before changing any permissions on the item I wanted to check with the forums / support and see if anyone has run into the issue or has any other ideas on a workaround.

Thanks!
User avatar
pup_seba
Outstanding Member
Outstanding Member
Posts: 687
Joined: Sat Sep 13, 2014 2:43 am
Location: Tarragona - Spain
Contact:

Re: Missing read permissions on /opt/zimbra/common/etc/openldap/slapd.conf

Post by pup_seba »

Hi mate,

You are the first, as far as I know. I can confirm to you that my permissions look like this:
-rw-------. 1 root root 2,2K sep 18 2018 slapd.conf

Although I still did not apply the patch 3 in that server.

Release 8.8.11_GA_3737.RHEL7_64_20181207111719 RHEL7_64 NETWORK edition

Although your permissions look ok for me, did you try running your zmfixperms with the "-e" arg?
phoenix
Ambassador
Ambassador
Posts: 27272
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Missing read permissions on /opt/zimbra/common/etc/openldap/slapd.conf

Post by phoenix »

Change the permissions of the files in that directory to 644 and,FWIW, zmfixperms does not fix the permissions.

As you're a customer I'd suggest you raise also raise a support case to get this fixed correctly.

Another stunning change that breaks part of the ZCS installation and no mention of why the changes were implemented as far as I can see. I've also had this problem with the ZeXtras packages on my OSS server.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
User avatar
pup_seba
Outstanding Member
Outstanding Member
Posts: 687
Joined: Sat Sep 13, 2014 2:43 am
Location: Tarragona - Spain
Contact:

Re: Missing read permissions on /opt/zimbra/common/etc/openldap/slapd.conf

Post by pup_seba »

Changing file permissions to 0644 worked for me. Thanks!
phoenix
Ambassador
Ambassador
Posts: 27272
Joined: Fri Sep 12, 2014 9:56 pm
Location: Liverpool, England

Re: Missing read permissions on /opt/zimbra/common/etc/openldap/slapd.conf

Post by phoenix »

You're welcome, that fix was from the ZeXtras team after I hit the problem when I updated ZCS then hit that problem.
Regards

Bill

Rspamd: A high performance spamassassin replacement

Per ardua ad astra
FredKarno
Posts: 49
Joined: Sat Oct 10, 2015 5:40 am

Re: Missing read permissions on /opt/zimbra/common/etc/openldap/slapd.conf

Post by FredKarno »

FWIW, I've got the same errors. I'll change the file perms now.
Thanks!
Fred
User avatar
quanah
Zimbra Alumni
Zimbra Alumni
Posts: 1668
Joined: Fri Sep 12, 2014 10:33 pm
Contact:

Re: Missing read permissions on /opt/zimbra/common/etc/openldap/slapd.conf

Post by quanah »

Zimbra hasn't used slapd.conf since Zimbra 7. It shouldn't even exist, and there's certainly no reason to back it up.
--
Quanah Gibson-Mount
Product Architect, Symas http://www.symas.com/
OpenLDAP Core team http://www.openldap.org/project/
Post Reply