Zimbra ldap error invalid credentials

[zimbra@mail init.d]$ zmcontrol -v
Release 8.0.7_GA_6021.RHEL6_64_20140408123911 RHEL6_64 FOSS edition.

Yesterday we rebooted our zimbra server and now the service’s will not start.

There have been no changes to zembra or the server in weeks maybe even months just a reboot. I have looked and verified DNS, files permissions and ssl certs all are correct and seam to me in order.

If someone could help, we are also willing to pay for support or consultant to help resolve this issue.

[zimbra@mail ldap]$ zmcontrol restart
Host mail.nnwifi.com
Stopping vmware-ha…Done.
Stopping zmconfigd…Done.
Stopping stats…Done.
Stopping mta…Done.
Stopping spell…Done.
Stopping snmp…Done.
Stopping cbpolicyd…Done.
Stopping archiving…Done.
Stopping opendkim…Done.
Stopping antivirus…Done.
Stopping antispam…Done.
Stopping proxy…Done.
Stopping memcached…Done.
Stopping mailbox…Done.
Stopping logger…Done.
Stopping ldap…Done.
Host mail.nnwifi.com
Starting ldap…Done.
Unable to determine enabled services from ldap.
Enabled services read from cache. Service list may be inaccurate.
Starting zmconfigd…Done.
Starting logger…Failed.
Starting logswatch…[] INFO: master is down, falling back to replica…
[] FATAL: failed to initialize LDAP client
com.zimbra.cs.ldap.LdapException: LDAP error: : invalid credentials
ExceptionId:main:1459864082648:b89c3161812b01c9
Code:ldap.LDAP_ERROR
at com.zimbra.cs.ldap.LdapException.LDAP_ERROR(LdapException.java:88)
at com.zimbra.cs.ldap.unboundid.UBIDLdapException.mapToLdapException(UBIDLdapException.java:72)
at com.zimbra.cs.ldap.unboundid.UBIDLdapException.mapToLdapException(UBIDLdapException.java:38)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnPool(LdapConnectionPool.java:117)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnectionPool(LdapConnectionPool.java:64)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.init(UBIDLdapContext.java:99)
at com.zimbra.cs.ldap.unboundid.UBIDLdapClient.init(UBIDLdapClient.java:37)
at com.zimbra.cs.ldap.LdapClient.getInstance(LdapClient.java:63)
at com.zimbra.cs.ldap.LdapClient.initialize(LdapClient.java:86)
at com.zimbra.cs.account.ldap.LdapProv.<init>(LdapProv.java:46)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:257)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:254)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:57)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:526)
at java.lang.Class.newInstance(Class.java:374)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:281)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:238)
at com.zimbra.cs.account.ProvUtil.initProvisioning(ProvUtil.java:799)
at com.zimbra.cs.account.ProvUtil.main(ProvUtil.java:3581)
Caused by: LDAPException(resultCode=49 (invalid credentials), errorMessage=’invalid credentials’)
at com.unboundid.ldap.sdk.LDAPConnection.bind(LDAPConnection.java:1894)
at com.unboundid.ldap.sdk.LDAPConnectionPool.createConnection(LDAPConnectionPool.java:988)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:876)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:779)
at com.unboundid.ldap.sdk.LDAPConnectionPool.<init>(LDAPConnectionPool.java:726)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnPool(LdapConnectionPool.java:113)
… 17 more
zimbra logger service is not enabled! failed.

Starting mailbox…Failed.

Starting antispam…Done.
Starting opendkim…Failed.
opendkim: /opt/zimbra/conf/opendkim.conf:

ldap://mail.nnwifi.com:389/?DKIMSelecto … dentity=$d

): dkimf_db_open(): Invalid credentials
Failed to start opendkim: 0

Starting snmp…Done.
Starting spell…Done.
Starting mta…Done.
Starting stats…Done.

Hi,

My Zimbra installation stopped working this morning, it looked like a file system crash as the system switched to «read-only» mode. I restarted the server and ran a file system check which completed successfully.

After restarting the server, Zimbra won’t start. After checking the logs, I found that Zimbra couldn’t connect to LDAP.

LDAP service is starting
zmcontrol restart returns an error saying that it couldn’t connect to LDAP server

I tried to connect to LDAP using this command:

Using the password I have in /opt/zimbra/conf/localconfig.xml but I get the following error:

Runnig it with debug mode returns the following:

Restarting other services returns the same error:

Do you have an idea what could cause that and how to fix it?

Thank you.

I have succesfully replicated Zimbra LDAP server to standalone OpenLDAP server. I plan to use the replicated server as central LDAP server for our internal application authentication service.

Steps that I follow to replicate Zimbra LDAP are:
1. Install new OpenLDAP server.
2. Copy all schema definition from Zimbra to new server
3. Add new database with olcSuffix: «» and add replication and other configs:

dn: olcDatabase={2}mdb,cn=config
objectClass: olcMdbConfig
olcDatabase: {2}mdb
olcDbDirectory: /var/lib/ldap1
olcSuffix:
olcDbIndex: entryUUID eq
olcDbIndex: objectClass eq
olcDbIndex: entryCSN eq
olcDbIndex: cn pres,eq,sub
olcDbIndex: uid pres,eq
olcDbIndex: zimbraForeignPrincipal eq
olcDbIndex: zimbraYahooId eq
olcDbIndex: zimbraId eq
olcDbIndex: zimbraVirtualHostname eq
olcDbIndex: zimbraVirtualIPAddress eq
olcDbIndex: zimbraMailDeliveryAddress eq,sub
olcDbIndex: zimbraAuthKerberos5Realm eq
olcDbIndex: zimbraMailForwardingAddress eq
olcDbIndex: zimbraMailCatchAllAddress eq,sub
olcDbIndex: zimbraMailHost eq
olcDbIndex: zimbraMemberOf eq
olcDbIndex: zimbraShareInfo sub
olcDbIndex: zimbraSharedItem eq,sub
olcDbIndex: zimbraMailTransport eq
olcDbIndex: zimbraMailAlias eq,sub
olcDbIndex: zimbraACE sub
olcDbIndex: zimbraDomainName eq,sub
olcDbIndex: mail pres,eq,sub
olcDbIndex: zimbraCalResSite eq,sub
olcDbIndex: givenName pres,eq,sub
olcDbIndex: displayName pres,eq,sub
olcDbIndex: sn pres,eq,sub
olcDbIndex: zimbraCalResRoom eq,sub
olcDbIndex: zimbraCalResCapacity eq
olcDbIndex: zimbraCalResBuilding eq,sub
olcDbIndex: zimbraCalResFloor eq,sub
olcDbIndex: zimbraDomainAliasTargetID eq
olcDbIndex: zimbraUCServiceId eq
olcDbIndex: DKIMIdentity eq
olcDbIndex: DKIMSelector eq
olcDbIndex: uidNumber eq
olcDbIndex: gidNumber eq
olcDbIndex: memberUid eq
structuralObjectClass: olcMdbConfig
entryUUID: 3b19a066-8133-1036-9c54-457b17c0eeaa
creatorsName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
createTimestamp: 20170207034245Z
olcSyncrepl: {0}rid=919 provider=ldap://master.example.com type=refresh
 AndPersist retry="5 5 300 +" searchbase="" attrs="*,+" bindmethod=simple bi
 nddn="uid=zimbra,cn=admins,cn=zimbra" credentials=secret
olcDbMaxSize: 85899345920
olcRootDN: cn=admin,cn=config
entryCSN: 20170207042001.780092Z#000000#000#000000
modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=external,cn=auth
modifyTimestamp: 20170207042001Z

I have succesfully replicated all the data from Zimbra to the new LDAP server. But I can’t bind to the replicated server using zimbra user. e.g.
uid=desdulianto,ou=people,dc=example,dc=com.

ldapwhoami -vvv -x -h localhost -D uid=desdulianto,ou=people,dc=example,dc=com -W
ldap_initialize( ldap://localhost )
Enter LDAP Password: 
ldap_bind: Invalid credentials (49)

But I can verify the password using Apache Directory Studio (cannot bind though).

Is there any mistake or other configuration that I need to add?

Thanks.