<?xml version="1.0" encoding="UTF-8"?>        <rss version="2.0"
             xmlns:atom="http://www.w3.org/2005/Atom"
             xmlns:dc="http://purl.org/dc/elements/1.1/"
             xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
             xmlns:admin="http://webns.net/mvcb/"
             xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"
             xmlns:content="http://purl.org/rss/1.0/modules/content/">
        <channel>
            <title>
									service-discover: error: unable to download credentials from LDAP - Carbonio General				            </title>
            <link>https://community.zextras.com/forum/carbonio-general-thread/service-discover-error-unable-to-download-credentials-from-ldap/</link>
            <description>Zextras Community Discussion Board</description>
            <language>en-US</language>
            <lastBuildDate>Mon, 05 Oct 2026 21:04:39 +0000</lastBuildDate>
            <generator>wpForo</generator>
            <ttl>60</ttl>
							                    <item>
                        <title>RE: service-discover: error: unable to download credentials from LDAP</title>
                        <link>https://community.zextras.com/forum/carbonio-general-thread/service-discover-error-unable-to-download-credentials-from-ldap/#post-11746</link>
                        <pubDate>Fri, 19 Dec 2025 08:17:49 +0000</pubDate>
                        <description><![CDATA[Just want to share with the community that I tried to install Carbonio Version 25.9.0 on Rocky Linux 8 and it didn&#039;t really work. 
Token file &quot;/etc/carbonio/mailbox-db/service-discover/toke...]]></description>
                        <content:encoded><![CDATA[<p>Just want to share with the community that I tried to install Carbonio <span>Version 25.9.0 on Rocky Linux 8 and it didn't really work. </span></p>
<p><span>Token file "/etc/carbonio/mailbox-db/service-discover/token" missing, Unable to proceed without consul token. Exiting! Database: <a class="anchor-url" href="https://oneday.com.vn/" target="_blank" rel="noopener noreferrer">oneday.com.vn</a></span><a class="anchor-url" href="https://127.0.0.1:5432/" target="_blank" rel="noopener noreferrer">:5432</a><span> user carbonio_adm Error connecting to Consul agent: Error loading token file </span><a href="//bot_command?command=etc">/etc</a><a href="//bot_command?command=carbonio">/carbonio</a><a href="//bot_command?command=docs">/docs</a><span>-connector-db/service-discover/token : open </span><a href="//bot_command?command=etc">/etc</a><a href="//bot_command?command=carbonio">/carbonio</a><a href="//bot_command?command=docs">/docs</a><span>-connector-db/service-discover/token: no such file or directory Database: </span><a class="anchor-url" href="https://oneday.com.vn/" target="_blank" rel="noopener noreferrer">oneday.com.vn:5432</a><span> user carbonio_adm Check postgres connection: OK Error connecting to Consul agent: Error loading token file </span><a href="//bot_command?command=etc">/etc</a><a href="//bot_command?command=carbonio">/carbonio</a><a href="//bot_command?command=tasks">/tasks</a><span>-db/service-discover/token : open </span><a href="//bot_command?command=etc">/etc</a><a href="//bot_command?command=carbonio">/carbonio</a><a href="//bot_command?command=tasks">/tasks</a><span>-db/service-discover/token: no such file or directory NOTICE: empty string is not a valid password, clearing password CREATE ROLE CREATE DATABASE ==================================================== carbonio-tasks-db database initialized successfully! ==================================================== Database: <a class="anchor-url" href="https://oneday.com.vn/" target="_blank" rel="noopener noreferrer">oneday.com.vn</a></span><a class="anchor-url" href="https://127.0.0.1:5432/" target="_blank" rel="noopener noreferrer">:5432</a><span> user carbonio_adm Check postgres connection: OK Error connecting to Consul agent: Error loading token file </span><a href="//bot_command?command=etc">/etc</a><a href="//bot_command?command=carbonio">/carbonio</a><a href="//bot_command?command=ws">/ws</a><span>-collaboration-db/service-discover/token : open </span><a href="//bot_command?command=etc">/etc</a><a href="//bot_command?command=carbonio">/carbonio</a><a href="//bot_command?command=ws">/ws</a><span>-collaboration-db/service-discover/token: no such file or directory NOTICE: empty string is not a valid password, clearing password CREATE ROLE CREATE DATABASE ==================================================== carbonio-ws-collaboration-db database initialized successfully! ==================================================== Reading package lists... Done Building dependency tree... Done Reading state information... Done carbonio-message-dispatcher-db is already the newest version (0.2.3-1ubuntu). 0 upgraded, 0 newly installed, 0 to remove and 9 not upgraded. Insert the cluster credential password:</span></p>
<p>The error keeps coming up:-</p>
<p><span>Always:- Insert the cluster credential password: service-discover: error: unable to open </span><a href="//bot_command?command=etc">/etc</a><a href="//bot_command?command=zextras">/zextras</a><a href="//bot_command?command=service">/service</a><span>-discover/cluster-credentials.tar.gpg: cannot find Cluster credential in </span><a href="//bot_command?command=etc">/etc</a><a href="//bot_command?command=zextras">/zextras</a><a href="//bot_command?command=service">/service</a><span>-discover/cluster-credentials.tar.gpg, please copy the file from the existing server or upload it to LDAP</span></p>
<p>Tried to manually reset the password and the completion script but still to no availl..... Have switched to Ubuntu 22 and it worked.</p>
<p>If anyone else has any joy with Rocky Linux 8 or 9 - please share. Thanks. </p>
<p> </p>
<p> </p>]]></content:encoded>
						                            <category domain="https://community.zextras.com/forum/carbonio-general-thread/">Carbonio General</category>                        <dc:creator>hodfords</dc:creator>
                        <guid isPermaLink="true">https://community.zextras.com/forum/carbonio-general-thread/service-discover-error-unable-to-download-credentials-from-ldap/#post-11746</guid>
                    </item>
				                    <item>
                        <title>RE: service-discover: error: unable to download credentials from LDAP</title>
                        <link>https://community.zextras.com/forum/carbonio-general-thread/service-discover-error-unable-to-download-credentials-from-ldap/#post-5883</link>
                        <pubDate>Thu, 28 Sep 2023 12:50:20 +0000</pubDate>
                        <description><![CDATA[I found for some reason in my installation that ldap_bind_url was empty..
You can check by running:-
su zextras
zmlocalconfig | grep ldap_bind_url
if it is empty - you can set the value ...]]></description>
                        <content:encoded><![CDATA[<p>I found for some reason in my installation that ldap_bind_url was empty..</p>
<p>You can check by running:-</p>
<p>su zextras</p>
<p>zmlocalconfig | grep ldap_bind_url</p>
<p>if it is empty - you can set the value to localhost (assuming single server installation)</p>
<p class="p1"><span class="s1">zmlocalconfig -e ldap_bind_url='ldap://127.0.0.1:389'</span></p>
<p>After that you can restart ldap with</p>
<p class="p1"><span class="s1">/opt/zextras/bin/ldap restart</span></p>
<p>and then ldap was now available </p>
<p>but when I try restart zmcontrol - many problems ensue. </p>
<p class="p1"><span class="s1">Starting logger...skipped.</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">                 </span>missing or not executable.</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>Starting config service...Failed.</span></p>
<p class="p1"><span class="s1">Starting zmconfigd...failed.</span></p>
<p class="p2"> </p>
<p class="p2"> </p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>Starting mailbox...Failed.</span></p>
<p class="p2"> </p>
<p class="p2"> </p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>Starting memcached...Done.</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>Starting proxy...Done.</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>Starting antivirus...Done.</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>Starting mta...Done.</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>Starting stats...Done.</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>Starting service webapp...</span></p>]]></content:encoded>
						                            <category domain="https://community.zextras.com/forum/carbonio-general-thread/">Carbonio General</category>                        <dc:creator>hodfords</dc:creator>
                        <guid isPermaLink="true">https://community.zextras.com/forum/carbonio-general-thread/service-discover-error-unable-to-download-credentials-from-ldap/#post-5883</guid>
                    </item>
				                    <item>
                        <title>RE: service-discover: error: unable to download credentials from LDAP</title>
                        <link>https://community.zextras.com/forum/carbonio-general-thread/service-discover-error-unable-to-download-credentials-from-ldap/#post-5882</link>
                        <pubDate>Thu, 28 Sep 2023 12:42:08 +0000</pubDate>
                        <description><![CDATA[I&#039;m getting the same issue. Running:-
- Carbonio Release 23.9.0
- Rocky Linux 8 
Host xxxxx
        amavis                  Running
        antispam                Running
        anti...]]></description>
                        <content:encoded><![CDATA[<p>I'm getting the same issue. Running:-</p>
<p>- <span class="s1">Carbonio Release 23.9.0</span></p>
<p>- Rocky Linux 8 </p>
<p class="p1"><span class="s1">Host xxxxx</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>amavis<span class="Apple-converted-space">                  </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>antispam<span class="Apple-converted-space">                </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>antivirus <span class="Apple-converted-space">              </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>directory-server<span class="Apple-converted-space">        </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>logger<span class="Apple-converted-space">                  </span>Stopped</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>mailbox <span class="Apple-converted-space">                </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>memcached <span class="Apple-converted-space">              </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>mta <span class="Apple-converted-space">                    </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>opendkim<span class="Apple-converted-space">                </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>proxy <span class="Apple-converted-space">                  </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>service webapp<span class="Apple-converted-space">          </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>stats <span class="Apple-converted-space">                  </span>Running</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">        </span>config service<span class="Apple-converted-space">          </span>Running</span></p>
<p> </p>
<p>Strangely logger is not working and when I try to restart it shows:-</p>
<p class="p1"> </p>
<p class="p1"><span class="s1">Starting logger...skipped.</span></p>
<p class="p1"><span class="s1"><span class="Apple-converted-space">                 </span>missing or not executable.</span></p>
<p>When I run nmap</p>
<p class="p1"><span class="s1">nmap -p 1-1000 localhost</span></p>
<p class="p1"><span class="s1">Starting Nmap 7.70 ( https://nmap.org ) at 2023-09-28 06:12 EDT</span></p>
<p class="p1"><span class="s1">Nmap scan report for localhost (127.0.0.1)</span></p>
<p class="p1"><span class="s1">Host is up (0.00041s latency).</span></p>
<p class="p1"><span class="s1">Not shown: 991 closed ports</span></p>
<p class="p1"><span class="s1">PORT<span class="Apple-converted-space">    </span>STATE SERVICE</span></p>
<p class="p1"><span class="s1">22/tcp<span class="Apple-converted-space">  </span>open<span class="Apple-converted-space">  </span>ssh</span></p>
<p class="p1"><span class="s1">25/tcp<span class="Apple-converted-space">  </span>open<span class="Apple-converted-space">  </span>smtp</span></p>
<p class="p1"><span class="s1">110/tcp open<span class="Apple-converted-space">  </span>pop3</span></p>
<p class="p1"><span class="s1">143/tcp open<span class="Apple-converted-space">  </span>imap</span></p>
<p class="p1"><span class="s1">443/tcp open<span class="Apple-converted-space">  </span>https</span></p>
<p class="p1"><span class="s1">465/tcp open<span class="Apple-converted-space">  </span>smtps</span></p>
<p class="p1"><span class="s1">587/tcp open<span class="Apple-converted-space">  </span>submission</span></p>
<p class="p1"><span class="s1">993/tcp open<span class="Apple-converted-space">  </span>imaps</span></p>
<p class="p1"><span class="s1">995/tcp open<span class="Apple-converted-space">  </span>pop3s</span></p>
<p>It seems the ldap service is not running </p>
<p> </p>
<p>I just realised from this article (https://techviewleo.com/install-carbonio-zimbra-on-rocky-almalinux/) that for Rocky Linux 8 - there is another package called <span>carbonio-prometheus; so the installation script should be </span></p>
<p><span>dnf -y install carbonio-directory-server \ carbonio-proxy \ carbonio-webui carbonio-files-ui \ carbonio-mta \ carbonio-appserver \ carbonio-user-management carbonio-preview-ce \ carbonio-files-ce carbonio-files-db \ carbonio-storages-ce \ carbonio-docs-connector-ce carbonio-docs-editor \ <strong>carbonio-prometheus</strong></span></p>
<p>Whilst going through the log - I found this:-</p>
<p class="p1"><span class="s1">Thu Sep 28 07:38:47 2023 *** Running as zextras user: /opt/zextras/bin/zmprov -r -m -l mcf<span class="Apple-converted-space">  </span>zimbraMemcachedBindAddress '127.0.0.1'</span></p>
<p class="p1"><span class="s1">ERROR: service.FAILURE (system failure: unable to modify attrs: object class violation - unable to modify attributes: ldap host=xxxx.hodfords.com:389: attribute 'zimbraMemcachedBindAddress' not allowed) (cause: com.zimbra.cs.ldap.LdapException$LdapObjectClassViolationException object class violation - unable to modify attributes: ldap host=xxxx.hodfords.com:389: attribute 'zimbraMemcachedBindAddress' not allowed)</span></p>
<p class="p1"><span class="s1">Thu Sep 28 07:38:51 2023 Setting services on xxxx.hodfords.com...</span></p>
<p>Can anyone shed light on why ldap is acting up? </p>
<p> </p>]]></content:encoded>
						                            <category domain="https://community.zextras.com/forum/carbonio-general-thread/">Carbonio General</category>                        <dc:creator>hodfords</dc:creator>
                        <guid isPermaLink="true">https://community.zextras.com/forum/carbonio-general-thread/service-discover-error-unable-to-download-credentials-from-ldap/#post-5882</guid>
                    </item>
				                    <item>
                        <title>service-discover: error: unable to download credentials from LDAP</title>
                        <link>https://community.zextras.com/forum/carbonio-general-thread/service-discover-error-unable-to-download-credentials-from-ldap/#post-5080</link>
                        <pubDate>Fri, 09 Jun 2023 13:30:15 +0000</pubDate>
                        <description><![CDATA[I was trying to setup Carbonio CE on Rocky Linux 8 but I can&#039;t seem to complete the installation. 
 
When I try to perform service-discover setup-wizard I always get the following error. I...]]></description>
                        <content:encoded><![CDATA[<div>I was trying to setup Carbonio CE on Rocky Linux 8 but I can't seem to complete the installation. </div>
<div> </div>
<div>When I try to perform service-discover setup-wizard I always get the following error. I try to google around but it seems like I am the only one encountering the issue. Ldap server seems to be running and listening on port 389, is there anyway I can make the error message more verbose ?</div>
<div> </div>
<div>
<div># service-discover setup-wizard</div>
<div>ens192 X.X.X.X/24, ffffffff/64</div>
<div>Specify the binding address for service discovery: X.X.X.X</div>
<div>Insert the cluster credential password:</div>
<div>service-discover: error: unable to download credentials from LDAP: unable to download data from ldap: expected 1 ldap result but instead got 0</div>
</div>]]></content:encoded>
						                            <category domain="https://community.zextras.com/forum/carbonio-general-thread/">Carbonio General</category>                        <dc:creator>davidtio</dc:creator>
                        <guid isPermaLink="true">https://community.zextras.com/forum/carbonio-general-thread/service-discover-error-unable-to-download-credentials-from-ldap/#post-5080</guid>
                    </item>
							        </channel>
        </rss>
		