Search our database

How To Fix “Unable To Determine Enabled Services From LDAP” Error In Zimbra

If you are getting “Unable to determine enabled services from ldap.” error, perhaps you need to perform a couple of routine checks on your certificates expiration status and redeploy them if necessary.

To check your certifications and their expiration status, execute the following command as root:

/opt/zimbra/bin/zmcertmgr  viewdeployedcrt all

 

You should see an output similar to below. Look at “notAfter” lines and you will know if your certificates have expired or not.

::service mta::
notBefore=Apr 16 03:58:55 2011 GMT
notAfter=Apr 15 03:58:55 2012 GMT
subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=zimbra.example.com
issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=zimbra.example.com
SubjectAltName= 
::service proxy::
notBefore=Apr 16 03:58:55 2011 GMT
notAfter=Apr 15 03:58:55 2012 GMT
subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=zimbra.example.com
issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=zimbra.example.com
SubjectAltName= 
::service mailboxd::
notBefore=Apr 16 03:58:55 2011 GMT
notAfter=Apr 15 03:58:55 2012 GMT
subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=zimbra.example.com
issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=zimbra.example.com
SubjectAltName= 
::service ldap::
notBefore=Apr 16 03:58:55 2011 GMT
notAfter=Apr 15 03:58:55 2012 GMT
subject= /C=US/ST=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=zimbra.example.com
issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=zimbra.example.com
SubjectAltName= 

 

1) If the certificates have expired, you can reissue a single-node self-assigned certificate by running the following commands.

/opt/zimbra/bin/zmcertmgr createca -new

 

2) To generate a certificate signed by the CA that expires in 365 days:

/opt/zimbra/bin/zmcertmgr createcrt -new -days 365

 

3) To deploy the certificate:

/opt/zimbra/bin/zmcertmgr deploycrt self

 

4) To deploy the certificate:

/opt/zimbra/bin/zmcertmgr deployca

 

5) To confirm the certificates have been deployed:

/opt/zimbra/bin/zmcertmgr viewdeployedcrt

 

Do restart Zimbra service to apply changes.

 

Dedicated Server from RM549/mth!

Check out IPServerOne’s Dedicated Server Packages.
Contact us @ +603-2026-1688 or email @ sales@ipserverone.com

Tags: , ,