Skip to content

Instantly share code, notes, and snippets.

@gordyt
Created November 8, 2018 16:13
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save gordyt/0bf4e587f438044b4b7a28ff748edb19 to your computer and use it in GitHub Desktop.
Save gordyt/0bf4e587f438044b4b7a28ff748edb19 to your computer and use it in GitHub Desktop.
Deploying with image build from feature/kubernetes branch of zm-docker with master branch of zm-kubernetes
ZMC-LDAP Entrypoint
execute_as_root: mkdir -p /opt/zimbra/data/ldap/config /opt/zimbra/data/ldap/mdb /opt/zimbra/data/ldap/mdb/db /opt/zimbra/data/ldap/state /opt/zimbra/data/ldap/state/run
execute_as_root: chmod +rwx /opt/zimbra/data/ldap/config /opt/zimbra/data/ldap/mdb /opt/zimbra/data/ldap/mdb/db /opt/zimbra/data/ldap/state /opt/zimbra/data/ldap/state/run
execute_as_root: rsync -a --delete /opt/zimbra/common/etc/openldap/zimbra/config/ /opt/zimbra/data/ldap/config
execute_as_root: chown -R zimbra:zimbra /opt/zimbra/data/ldap
execute_as_root: find /opt/zimbra/data/ldap/config -name *.ldif -exec chmod 600 {} ;
execute_as_zimbra: /opt/zimbra/libexec/zmldapschema
Looking for LDAP installation...succeeded
Installing core schema...
Installing cosine schema...
Installing inetOrgPerson schema...
Installing zimbra schema...
Installing amavis schema...
Installing dyngroup schema...
Installing OpenDKIM schema...
Installing local configuration: {'zimbra_ldap_password': 'tit4c98hjonzgmi', 'ssl_allow_mismatched_certs': 'true', 'ldap_port': 389, 'zimbra_zmprov_default_to_ldap': 'true', 'ldap_root_password': 'on3oqy5j4ishoj_', 'ssl_allow_untrusted_certs': 'true', 'zimbra_user': 'zimbra', 'ldap_host': 'zmc-ldap-0', 'ldap_is_master': 'false', 'mailboxd_truststore': '/opt/zimbra/common/lib/jvm/java/jre/lib/security/cacerts', 'ldap_url': 'ldap://zmc-ldap-0.ldap-svc.default.svc.cluster.local:389', 'zimbra_java_home': '/opt/zimbra/common/lib/jvm/java', 'zimbra_require_interprocess_security': 1, 'zimbra_server_hostname': 'zmc-ldap-0', 'ldap_starttls_supported': 1, 'zimbra_gid': 999, 'zimbra_uid': 999, 'ldap_master_url': 'ldap://zmc-ldap-0.ldap-svc.default.svc.cluster.local:389', 'mailboxd_truststore_password': 'changeit'}
execute_as_zimbra: /opt/zimbra/bin/zmlocalconfig -f -e zimbra_ldap_password=tit4c98hjonzgmi ssl_allow_mismatched_certs=true ldap_port=389 zimbra_zmprov_default_to_ldap=true ldap_root_password=on3oqy5j4ishoj_ ssl_allow_untrusted_certs=true zimbra_user=zimbra ldap_host=zmc-ldap-0 ldap_is_master=false mailboxd_truststore=/opt/zimbra/common/lib/jvm/java/jre/lib/security/cacerts ldap_url=ldap://zmc-ldap-0.ldap-svc.default.svc.cluster.local:389 zimbra_java_home=/opt/zimbra/common/lib/jvm/java zimbra_require_interprocess_security=1 zimbra_server_hostname=zmc-ldap-0 ldap_starttls_supported=1 zimbra_gid=999 zimbra_uid=999 ldap_master_url=ldap://zmc-ldap-0.ldap-svc.default.svc.cluster.local:389 mailboxd_truststore_password=changeit
Installing key: /var/run/secrets/ca.key => /opt/zimbra/conf/ca/ca.key mode=384
Installing key: /var/run/secrets/ca.pem => /opt/zimbra/conf/ca/ca.pem mode=420
Installing key: /var/run/secrets/ldap-0.key => /opt/zimbra/conf/slapd.key mode=384
Installing key: /var/run/secrets/ldap-0.crt => /opt/zimbra/conf/slapd.crt mode=420
Hashing the certificates...
execute_as_zimbra: c_rehash /opt/zimbra/conf/ca
Doing /opt/zimbra/conf/ca
execute_as_zimbra: /opt/zimbra/common/bin/keytool -delete -alias my_ca -keystore /opt/zimbra/common/lib/jvm/java/jre/lib/security/cacerts -storepass changeit
keytool error: java.lang.Exception: Alias <my_ca> does not exist
execute_as_zimbra: /opt/zimbra/common/bin/keytool -import -alias my_ca -noprompt -file /opt/zimbra/conf/ca/ca.pem -keystore /opt/zimbra/common/lib/jvm/java/jre/lib/security/cacerts -storepass changeit
Certificate was added to keystore
updateRsyslogd: Updating /etc/rsyslog.d/50-default.conf...done.
execute_as_zimbra: /opt/zimbra/libexec/zmldapinit on3oqy5j4ishoj_ tit4c98hjonzgmi
Connection refused at /opt/zimbra/libexec/zmldapinit line 138.
Configuring primary master: 'zmc-ldap-0'
Installing global configuration: OrderedDict([('zimbraSpamIsNotSpamAccount', 'ham.nojfqf2n@zmc.com'), ('zimbraDefaultDomainName', 'zmc.com'), ('zimbraIndexURL', 'solrcloud:zk-0.zk:2181,zk-1.zk:2181,zk-2.zk:2181'), ('zimbraEventBackendURL', 'solrcloud:zk-0.zk:2181,zk-1.zk:2181,zk-2.zk:2181'), ('zimbraAmavisQuarantineAccount', 'ham.nojfqf2n@zmc.com'), ('+zimbraReverseProxyUpstreamEwsServers', 'mailbox-svc'), ('zimbraSpamIsSpamAccount', 'spam.36ddetb8@zmc.com'), ('+zimbraReverseProxyAvailableLookupTargets', 'mailbox-svc'), ('+zimbraReverseProxyUpstreamLoginServers', 'mailbox-svc')])
execute_as_zimbra: /opt/zimbra/bin/zmprov -r -m -l mcf zimbraSpamIsNotSpamAccount ham.nojfqf2n@zmc.com zimbraDefaultDomainName zmc.com zimbraIndexURL solrcloud:zk-0.zk:2181,zk-1.zk:2181,zk-2.zk:2181 zimbraEventBackendURL solrcloud:zk-0.zk:2181,zk-1.zk:2181,zk-2.zk:2181 zimbraAmavisQuarantineAccount ham.nojfqf2n@zmc.com +zimbraReverseProxyUpstreamEwsServers mailbox-svc zimbraSpamIsSpamAccount spam.36ddetb8@zmc.com +zimbraReverseProxyAvailableLookupTargets mailbox-svc +zimbraReverseProxyUpstreamLoginServers mailbox-svc
[] INFO: master is down, falling back to replica...
[] FATAL: failed to initialize LDAP client
com.zimbra.cs.ldap.LdapException: LDAP error: : An error occurred while attempting to connect to server zmc-ldap-0.ldap-svc.default.svc.cluster.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server zmc-ldap-0.ldap-svc.default.svc.cluster.local/10.1.0.18:389: ConnectException(Connection refused (Connection refused)), ldapSDKVersion=4.0.6, revision=27850'))
ExceptionId:main:1541692679678:fe0d0c12b30c9b25
Code:ldap.LDAP_ERROR
at com.zimbra.cs.ldap.LdapException.LDAP_ERROR(LdapException.java:90)
at com.zimbra.cs.ldap.unboundid.UBIDLdapException.mapToLdapException(UBIDLdapException.java:74)
at com.zimbra.cs.ldap.unboundid.UBIDLdapException.mapToLdapException(UBIDLdapException.java:40)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnPool(LdapConnectionPool.java:117)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnectionPool(LdapConnectionPool.java:63)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.init(UBIDLdapContext.java:111)
at com.zimbra.cs.ldap.unboundid.UBIDLdapClient.init(UBIDLdapClient.java:39)
at com.zimbra.cs.ldap.LdapClient.getInstanceIfLDAPavailable(LdapClient.java:62)
at com.zimbra.cs.ldap.LdapClient.getInstance(LdapClient.java:69)
at com.zimbra.cs.ldap.LdapClient.initialize(LdapClient.java:94)
at com.zimbra.cs.account.ldap.LdapProv.<init>(LdapProv.java:47)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:288)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:285)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:423)
at java.lang.Class.newInstance(Class.java:442)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:353)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:309)
at com.zimbra.cs.account.ProvUtil.initProvisioning(ProvUtil.java:1018)
at com.zimbra.cs.account.ProvUtil.main(ProvUtil.java:4078)
Caused by: LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to connect to server zmc-ldap-0.ldap-svc.default.svc.cluster.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server zmc-ldap-0.ldap-svc.default.svc.cluster.local/10.1.0.18:389: ConnectException(Connection refused (Connection refused)), ldapSDKVersion=4.0.6, revision=27850'))')
at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:871)
at com.unboundid.ldap.sdk.RoundRobinDNSServerSet.getConnection(RoundRobinDNSServerSet.java:708)
at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:1288)
at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:1261)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:1198)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:1053)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:977)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:907)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnPool(LdapConnectionPool.java:114)
... 18 more
Caused by: java.io.IOException: LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server zmc-ldap-0.ldap-svc.default.svc.cluster.local/10.1.0.18:389: ConnectException(Connection refused (Connection refused)), ldapSDKVersion=4.0.6, revision=27850')
at com.unboundid.ldap.sdk.LDAPConnectionInternals.<init>(LDAPConnectionInternals.java:179)
at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:861)
... 26 more
Caused by: LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server zmc-ldap-0.ldap-svc.default.svc.cluster.local/10.1.0.18:389: ConnectException(Connection refused (Connection refused)), ldapSDKVersion=4.0.6, revision=27850')
at com.unboundid.ldap.sdk.ConnectThread.getConnectedSocket(ConnectThread.java:250)
at com.unboundid.ldap.sdk.LDAPConnectionInternals.<init>(LDAPConnectionInternals.java:162)
... 27 more
Caused by: java.net.ConnectException: Connection refused (Connection refused)
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)
at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206)
at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at java.net.Socket.connect(Socket.java:589)
at com.unboundid.ldap.sdk.ConnectThread.run(ConnectThread.java:146)
execute_as_zimbra: process.returncode = 1, sleeping for 5 seconds...
[] INFO: master is down, falling back to replica...
[] FATAL: failed to initialize LDAP client
com.zimbra.cs.ldap.LdapException: LDAP error: : An error occurred while attempting to connect to server zmc-ldap-0.ldap-svc.default.svc.cluster.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server zmc-ldap-0.ldap-svc.default.svc.cluster.local/10.1.0.18:389: ConnectException(Connection refused (Connection refused)), ldapSDKVersion=4.0.6, revision=27850'))
ExceptionId:main:1541692688338:c9daafcf6872cc66
Code:ldap.LDAP_ERROR
at com.zimbra.cs.ldap.LdapException.LDAP_ERROR(LdapException.java:90)
at com.zimbra.cs.ldap.unboundid.UBIDLdapException.mapToLdapException(UBIDLdapException.java:74)
at com.zimbra.cs.ldap.unboundid.UBIDLdapException.mapToLdapException(UBIDLdapException.java:40)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnPool(LdapConnectionPool.java:117)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnectionPool(LdapConnectionPool.java:63)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.init(UBIDLdapContext.java:111)
at com.zimbra.cs.ldap.unboundid.UBIDLdapClient.init(UBIDLdapClient.java:39)
at com.zimbra.cs.ldap.LdapClient.getInstanceIfLDAPavailable(LdapClient.java:62)
at com.zimbra.cs.ldap.LdapClient.getInstance(LdapClient.java:69)
at com.zimbra.cs.ldap.LdapClient.initialize(LdapClient.java:94)
at com.zimbra.cs.account.ldap.LdapProv.<init>(LdapProv.java:47)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:288)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:285)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:423)
at java.lang.Class.newInstance(Class.java:442)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:353)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:309)
at com.zimbra.cs.account.ProvUtil.initProvisioning(ProvUtil.java:1018)
at com.zimbra.cs.account.ProvUtil.main(ProvUtil.java:4078)
Caused by: LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to connect to server zmc-ldap-0.ldap-svc.default.svc.cluster.local:389: IOException(LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server zmc-ldap-0.ldap-svc.default.svc.cluster.local/10.1.0.18:389: ConnectException(Connection refused (Connection refused)), ldapSDKVersion=4.0.6, revision=27850'))')
at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:871)
at com.unboundid.ldap.sdk.RoundRobinDNSServerSet.getConnection(RoundRobinDNSServerSet.java:708)
at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:1288)
at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:1261)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:1198)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:1053)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:977)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:907)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnPool(LdapConnectionPool.java:114)
... 18 more
Caused by: java.io.IOException: LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server zmc-ldap-0.ldap-svc.default.svc.cluster.local/10.1.0.18:389: ConnectException(Connection refused (Connection refused)), ldapSDKVersion=4.0.6, revision=27850')
at com.unboundid.ldap.sdk.LDAPConnectionInternals.<init>(LDAPConnectionInternals.java:179)
at com.unboundid.ldap.sdk.LDAPConnection.connect(LDAPConnection.java:861)
... 26 more
Caused by: LDAPException(resultCode=91 (connect error), errorMessage='An error occurred while attempting to establish a connection to server zmc-ldap-0.ldap-svc.default.svc.cluster.local/10.1.0.18:389: ConnectException(Connection refused (Connection refused)), ldapSDKVersion=4.0.6, revision=27850')
at com.unboundid.ldap.sdk.ConnectThread.getConnectedSocket(ConnectThread.java:250)
at com.unboundid.ldap.sdk.LDAPConnectionInternals.<init>(LDAPConnectionInternals.java:162)
... 27 more
Caused by: java.net.ConnectException: Connection refused (Connection refused)
at java.net.PlainSocketImpl.socketConnect(Native Method)
at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:350)
at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl.java:206)
at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188)
at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392)
at java.net.Socket.connect(Socket.java:589)
at com.unboundid.ldap.sdk.ConnectThread.run(ConnectThread.java:146)
execute_as_zimbra: process.returncode = 1, sleeping for 5 seconds...
[] INFO: master is down, falling back to replica...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment