TetraWiki - User contributions [en]

File:How to Implement Sender Restricted Groups on Qmail-LDAP environment.txt

2016-05-30T02:54:09Z

Saurabh:

[[category:SCEH]]

'''How to Implement Sender Restricted Groups on Qmail-LDAP environment'''

==Contents==

Sender Restricted Groups
When a Sender send a mail to the group , the Qmail see whether the sender is allowed to send the mail or not . Also Sends back a mail to the sender , for him to reply and release the mail to the group members .

We add a users on mail group who can receive a mail when ever a sender send a mail on this group.

Please have following example of Sender Restricted group implemented in LDAP

# everyone@sceh.net, everyone, sceh.net
dn: uid=everyone,ou=sceh.net,dc=sceh,dc=net
objectClass: top
objectClass: inetOrgPerson
objectClass: qmailUser
objectClass: phpQLAdminBranch
accountStatus: active
uid: everyone
mailHost: mail.sceh.net
cn: everyone
mail: everyone@sceh.net
mailMessageStore: sceh.net/everyone
userPassword:: e0NSWVBUfUdQOXRXOFJxTUo3Tm8=
deliveryMode: forward
mail: everyone@sceh.net
'''mailAlternateAddress: everyone-catchall@sceh.net'''
mailMessageStore: sceh.net/everyone
sn: everyone
'''mailForwardingAddress''': rahul@sceh.net
mailForwardingAddress: abhilekh@sceh.net
mailForwardingAddress: accounts@sceh.net
mailForwardingAddress: akarora@sceh.net
mailForwardingAddress: aksingh@sceh.net
mailForwardingAddress: amreek@sceh.net
mailForwardingAddress: anil.thakur@sceh.net
mailForwardingAddress: anurag.mishra@sceh.net
mailForwardingAddress: arun@sceh.net
mailForwardingAddress: cashier@sceh.net
mailForwardingAddress: counselling@sceh.net
mailForwardingAddress: dipa@sceh.net
mailForwardingAddress: gaurav.anand@sceh.net
mailForwardingAddress: harigupta@sceh.net
mailForwardingAddress: harish.kumar@sceh.net
mailForwardingAddress: harsh@sceh.net
mailForwardingAddress: johnny@sceh.net
mailForwardingAddress: kalpana@sceh.net
mailForwardingAddress: kiranmehta@sceh.net
mailForwardingAddress: kksabharwal@sceh.net
mailForwardingAddress: klbatra@sceh.net
mailForwardingAddress: lab@sceh.net
mailForwardingAddress: lokesh@sceh.net
mailForwardingAddress: macharya@sceh.net
mailForwardingAddress: manisha@sceh.net
mailForwardingAddress: michael.choudhary@sceh.net
mailForwardingAddress: monica@sceh.net

'''Please note'''

* '''objectClass: qmailGroup''' is mandatory.
*The Restricted Sender is defined a email address by '''rfc822sender''' . The sender can belong to any domain . You can also define dnsender
* To Ensure that the mails generated by the sender are authentic in nature , '''senderconfirm: TRUE '''is specified . An return mail to the same ID will be generated by Qmail ( Qmail-secetary ) and the sender has to reply this mail to release the sent mail to Group .

______________________________________________________

'''How to allow a user to send a mail on mail group'''.

Please have following example on below.

#everyone, sceh.net, sceh.net
dn: uid=everyone,ou=sceh.net,dc=sceh,dc=net
objectClass: top
objectClass: qmailUser
objectClass: qmailGroup
objectClass: inetOrgPerson
membersonly: TRUE
uid: everyone
cn: everyone
mail: everyone@sceh.net
mailMessageStore: sceh.net/everyone
userPassword:: e0NSWVBUfUdQOXRXOFJxTUo3Tm8=
mailAlternateAddress: everyone-catchall@sceh.net
mailMessageStore: sceh.net/everyone
sn: everyone
rfc822member: abhilekh@sceh.net
rfc822member: accounts@sceh.net
rfc822member: akarora@sceh.net
rfc822member: aksingh@sceh.net
rfc822member: amreek@sceh.net
rfc822member: anil.thakur@sceh.net
rfc822member: anurag.mishra@sceh.net
rfc822member: arun@sceh.net
rfc822member: cashier@sceh.net
rfc822member: counselling@sceh.net
rfc822member: dipa@sceh.net

Please note

* '''objectClass: qmailGroup''' is mandatory
* '''mailAlternateAddress''' – A catch all type of address needs to be created as shown in example
* The allow user is defined by '''rfc822member '''for ex.'''rfc822member: dipa@sceh.net'''''' . '''

= Referance =
* QLDAPGROUP file in Qmail Source after Qmail-LDAP patch Applied [[File:QLDAPGROUP.txt]]

File:How to Implement Sender Restricted Groups on Qmail-LDAP environment.txt

2016-05-29T10:25:19Z

Saurabh:

[[category:SCEH]]

'''How to Implement Sender Restricted Groups on Qmail-LDAP environment'''

==Contents==

Sender Restricted Groups
When a Sender send a mail to the group , the Qmail see whether the sender is allowed to send the mail or not . Also Sends back a mail to the sender , for him to reply and release the mail to the group members .

We add a users on mail group who can receive a mail when ever a sender send a mail on this group.

Please have following example of Sender Restricted group implemented in LDAP

# everyone@sceh.net, everyone, sceh.net
dn: uid=everyone,ou=sceh.net,dc=sceh,dc=net
objectClass: top
objectClass: inetOrgPerson
objectClass: qmailUser
objectClass: phpQLAdminBranch
accountStatus: active
uid: everyone
mailHost: mail.sceh.net
cn: everyone
mail: everyone@sceh.net
mailMessageStore: sceh.net/everyone
userPassword:: e0NSWVBUfUdQOXRXOFJxTUo3Tm8=
deliveryMode: forward
mail: everyone@sceh.net
'''mailAlternateAddress: everyone-catchall@sceh.net'''
mailMessageStore: sceh.net/everyone
sn: everyone
'''mailForwardingAddress''': rahul@sceh.net
mailForwardingAddress: abhilekh@sceh.net
mailForwardingAddress: accounts@sceh.net
mailForwardingAddress: akarora@sceh.net
mailForwardingAddress: aksingh@sceh.net
mailForwardingAddress: amreek@sceh.net
mailForwardingAddress: anil.thakur@sceh.net
mailForwardingAddress: anurag.mishra@sceh.net
mailForwardingAddress: arun@sceh.net
mailForwardingAddress: cashier@sceh.net
mailForwardingAddress: counselling@sceh.net
mailForwardingAddress: dipa@sceh.net
mailForwardingAddress: gaurav.anand@sceh.net
mailForwardingAddress: harigupta@sceh.net
mailForwardingAddress: harish.kumar@sceh.net
mailForwardingAddress: harsh@sceh.net
mailForwardingAddress: johnny@sceh.net
mailForwardingAddress: kalpana@sceh.net
mailForwardingAddress: kiranmehta@sceh.net
mailForwardingAddress: kksabharwal@sceh.net
mailForwardingAddress: klbatra@sceh.net
mailForwardingAddress: lab@sceh.net
mailForwardingAddress: lokesh@sceh.net
mailForwardingAddress: macharya@sceh.net
mailForwardingAddress: manisha@sceh.net
mailForwardingAddress: michael.choudhary@sceh.net
mailForwardingAddress: monica@sceh.net

'''Please note'''

* '''objectClass: qmailGroup''' is mandatory.
*The Restricted Sender is defined a email address by '''rfc822sender''' . The sender can belong to any domain . You can also define dnsender
* To Ensure that the mails generated by the sender are authentic in nature , '''senderconfirm: TRUE '''is specified . An return mail to the same ID will be generated by Qmail ( Qmail-secetary ) and the sender has to reply this mail to release the sent mail to Group .

______________________________________________________

How to allow a user to send a mail on mail group.

Please have following example on below.

#everyone, sceh.net, sceh.net
dn: uid=everyone,ou=sceh.net,dc=sceh,dc=net
objectClass: top
objectClass: qmailUser
objectClass: qmailGroup
objectClass: inetOrgPerson
membersonly: TRUE
uid: everyone
cn: everyone
mail: everyone@sceh.net
mailMessageStore: sceh.net/everyone
userPassword:: e0NSWVBUfUdQOXRXOFJxTUo3Tm8=
mailAlternateAddress: everyone-catchall@sceh.net
mailMessageStore: sceh.net/everyone
sn: everyone
rfc822member: abhilekh@sceh.net
rfc822member: accounts@sceh.net
rfc822member: akarora@sceh.net
rfc822member: aksingh@sceh.net
rfc822member: amreek@sceh.net
rfc822member: anil.thakur@sceh.net
rfc822member: anurag.mishra@sceh.net
rfc822member: arun@sceh.net
rfc822member: cashier@sceh.net
rfc822member: counselling@sceh.net
rfc822member: dipa@sceh.net

Please note

* '''objectClass: qmailGroup''' is mandatory
* '''mailAlternateAddress''' – A catch all type of address needs to be created as shown in example
* The allow user is defined by '''rfc822member '''for ex.'''rfc822member: dipa@sceh.net'''''' . '''

= Referance =
* QLDAPGROUP file in Qmail Source after Qmail-LDAP patch Applied [[File:QLDAPGROUP.txt]]

File:How to Implement Sender Restricted Groups on Qmail-LDAP environment.txt

2016-05-28T11:01:08Z

Saurabh:

File:How to Implement Sender Restricted Groups on Qmail-LDAP environment.txt

2016-05-27T14:51:23Z

Saurabh:

File:How to Implement Sender Restricted Groups on Qmail-LDAP environment.txt

2016-05-27T14:02:39Z

Saurabh:

File:QLDAPGROUP.txt

2016-05-27T14:00:37Z

Saurabh: Blanked the page

File:QLDAPGROUP.txt

2016-05-27T13:57:42Z

Saurabh:

[[category:SCEH]]

'''How to Implement Sender Restricted Groups on Qmail-LDAP environment'''

==Contents==

= Add user on Mail Groups on sceh =
When a Sender send a mail to the group , the Qmail see whether the sender is allowed to send the mail or not . Also Sends back a mail to the sender , for him to reply and release the mail to the group members .

We add a users on mail group who can receive a mail when ever a sender send a mail on this group.

Please have following example of Sender Restricted group implemented in LDAP

# everyone@sceh.net, everyone, sceh.net </nowiki>
dn: uid=everyone,ou=sceh.net,dc=sceh,dc=net
objectClass: top
objectClass: inetOrgPerson
objectClass: qmailUser
objectClass: phpQLAdminBranch
accountStatus: active
uid: everyone
mailHost: mail.sceh.net
cn: everyone
mail: everyone@sceh.net
mailMessageStore: sceh.net/everyone
userPassword:: e0NSWVBUfUdQOXRXOFJxTUo3Tm8=
deliveryMode: forward
sn: everyone
mailForwardingAddress: rahul@sceh.net
mailForwardingAddress: abhilekh@sceh.net
mailForwardingAddress: accounts@sceh.net
mailForwardingAddress: akarora@sceh.net
mailForwardingAddress: aksingh@sceh.net
mailForwardingAddress: amreek@sceh.net
mailForwardingAddress: anil.thakur@sceh.net
mailForwardingAddress: anurag.mishra@sceh.net
mailForwardingAddress: arun@sceh.net
mailForwardingAddress: cashier@sceh.net
mailForwardingAddress: counselling@sceh.net
mailForwardingAddress: dipa@sceh.net
mailForwardingAddress: gaurav.anand@sceh.net
mailForwardingAddress: harigupta@sceh.net
mailForwardingAddress: harish.kumar@sceh.net
mailForwardingAddress: harsh@sceh.net
mailForwardingAddress: johnny@sceh.net
mailForwardingAddress: kalpana@sceh.net
mailForwardingAddress: kiranmehta@sceh.net
mailForwardingAddress: kksabharwal@sceh.net
mailForwardingAddress: klbatra@sceh.net
mailForwardingAddress: lab@sceh.net
mailForwardingAddress: lokesh@sceh.net
mailForwardingAddress: macharya@sceh.net
mailForwardingAddress: manisha@sceh.net
mailForwardingAddress: michael.choudhary@sceh.net
mailForwardingAddress: monica@sceh.net

Please note

* '''objectClass: qmailGroup''' is mandatory
* To Ensure that the mails generated by the sender are authentic in nature , '''senderconfirm: TRUE '''is specified . An return mail to the same ID will be generated by Qmail ( Qmail-secetary ) and the sender has to reply this mail to release the sent mail to Group .

File:Sceh.txt

2016-05-27T13:55:31Z

Saurabh:

LDAP-Cluster-Failure of PUNJAB GOVT

2016-05-21T09:45:56Z

Saurabh:

[[category:Punjab's IFMS-IWDMS Project]]
Problem : LDAP Services not working on the Cluster setup

Details
'''LDAP Server 1 - 192.168.10.91 ( ldap1.pbifmsiwdms.pjb )'''
'''LDAP Server 2 - 192.168.10.96 ( ldap2.pbifmsiwdms.pjb )'''
'''Cluster IP - 192.168.10.98'''

'''Diagnosis Process and resolution'''

Check Cluster Status on LDAP 1
# clustat
'''Service not running'''

Check Cluster Status on LDAP 2

#clustat
Cluster Status for LdapCluster @ Sat May 21 10:02:44 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
'''ldap1.pbifmsiwdms.pjb 1 Offline'''
ldap2.pbifmsiwdms.pjb 2 Online, Local

'''But Services were not showing'''

On LDAP1 Started the cman and rgmanager services
/etc/init.d/cman start
/etc/init.d/rgmanager start

Checked in /var/log/messages for any error . cman and rgmanager Services started successfully .

Checked the cluster status
#clustat
Cluster Status for LdapCluster @ Sat May 21 10:02:44 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
ldap1.pbifmsiwdms.pjb 1 Online, Local
ldap2.pbifmsiwdms.pjb 2 Online

'''But Services were still not showing.'''

We have to enable the service manually

#clusvcadm -e dummy_httpd -m ldap1.pbifmsiwdms.pjb
( where dummy_httpd is the service named defined in /etc/cluster/cluster.conf )
'''But Service dummy_httpd failled''' .

Checked the log and found '''/etc/init.d/httpd''' , could not start .

Tried to start httpd service via '''"/etc/init.d/httpd start"''' , but failed .

Checked the log i.e /var/log/httpd/error_log and found
[Sat May 21 10:14:45 2016] [error] Unable to verify certificate 'Server-Cert'. Add '''"NSSEnforceValidCerts off"''' to nss.conf so the server can start until the problem can be resolved.

We added '''NSSEnforceValidCerts''' off in /etc/httpd/conf.d/nss.conf in virtualHost context .

Checked the httpd service via starting it on the cli , it worked successfully .

Then we stopped this service as it is controlled by cluster process.

We enabled the service manually again
#clusvcadm -e dummy_httpd -m ldap1.pbifmsiwdms.pjb
'''The services started successfully''' .

[root@ldap1 ~]# clustat

Cluster Status for LdapCluster @ Sat May 21 10:43:43 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
ldap1.pbifmsiwdms.pjb 1 Online, Local, rgmanager
ldap2.pbifmsiwdms.pjb 2 Online

Service Name Owner (Last) State
------- ---- ----- ------ -----
'''service:dummy_httpd ldap1.pbifmsiwdms.pjb started'''

'''Now Cluster IP is visible and LDAP is successfully accessed''' .

LDAP-Cluster-Failure of PUNJAB GOVT

2016-05-21T07:34:34Z

Saurabh:

[[category:Punjab Govt]]
Problem : LDAP Services not working on the Cluster setup

Details
'''LDAP Server 1 - 192.168.10.91 ( ldap1.pbifmsiwdms.pjb )'''
'''LDAP Server 2 - 192.168.10.96 ( ldap2.pbifmsiwdms.pjb )'''
'''Cluster IP - 192.168.10.98'''

'''Diagnosis Process and resolution'''

Check Cluster Status on LDAP 1
# clustat
'''Service not running'''

Check Cluster Status on LDAP 2

#clustat
Cluster Status for LdapCluster @ Sat May 21 10:02:44 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
'''ldap1.pbifmsiwdms.pjb 1 Offline'''
ldap2.pbifmsiwdms.pjb 2 Online, Local

'''But Services were not showing'''

On LDAP1 Started the cman and rgmanager services
/etc/init.d/cman start
/etc/init.d/rgmanager start

Checked in /var/log/messages for any error . cman and rgmanager Services started successfully .

Checked the cluster status
#clustat
Cluster Status for LdapCluster @ Sat May 21 10:02:44 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
ldap1.pbifmsiwdms.pjb 1 Online, Local
ldap2.pbifmsiwdms.pjb 2 Online

'''But Services were still not showing.'''

We have to enable the service manually

#clusvcadm -e dummy_httpd -m ldap1.pbifmsiwdms.pjb
( where dummy_httpd is the service named defined in /etc/cluster/cluster.conf )
'''But Service dummy_httpd failled''' .

Checked the log and found '''/etc/init.d/httpd''' , could not start .

Tried to start httpd service via '''"/etc/init.d/httpd start"''' , but failed .

Checked the log i.e /var/log/httpd/error_log and found
[Sat May 21 10:14:45 2016] [error] Unable to verify certificate 'Server-Cert'. Add '''"NSSEnforceValidCerts off"''' to nss.conf so the server can start until the problem can be resolved.

We added '''NSSEnforceValidCerts''' off in /etc/httpd/conf.d/nss.conf in virtualHost context .

Checked the httpd service via starting it on the cli , it worked successfully .

Then we stopped this service as it is controlled by cluster process.

We enabled the service manually again
#clusvcadm -e dummy_httpd -m ldap1.pbifmsiwdms.pjb
'''The services started successfully''' .

[root@ldap1 ~]# clustat

Cluster Status for LdapCluster @ Sat May 21 10:43:43 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
ldap1.pbifmsiwdms.pjb 1 Online, Local, rgmanager
ldap2.pbifmsiwdms.pjb 2 Online

Service Name Owner (Last) State
------- ---- ----- ------ -----
'''service:dummy_httpd ldap1.pbifmsiwdms.pjb started'''

'''Now Cluster IP is visible and LDAP is successfully accessed''' .

LDAP-Cluster-Failure of Punjab Govt

2016-05-21T07:06:40Z

Saurabh: moved LDAP-Cluster-Failure of Punjab Govt to LDAP-Cluster-Failure of PUNJAB GOVT

#REDIRECT [[LDAP-Cluster-Failure of PUNJAB GOVT]]

LDAP-Cluster-Failure of PUNJAB GOVT

2016-05-21T07:06:40Z

Saurabh: moved LDAP-Cluster-Failure of Punjab Govt to LDAP-Cluster-Failure of PUNJAB GOVT

Problem : LDAP Services not working on the Cluster setup

Details
'''LDAP Server 1 - 192.168.10.91 ( ldap1.pbifmsiwdms.pjb )'''
'''LDAP Server 2 - 192.168.10.96 ( ldap2.pbifmsiwdms.pjb )'''
'''Cluster IP - 192.168.10.98'''

'''Diagnosis Process and resolution'''

Check Cluster Status on LDAP 1
# clustat
'''Service not running'''

Check Cluster Status on LDAP 2

#clustat
Cluster Status for LdapCluster @ Sat May 21 10:02:44 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
'''ldap1.pbifmsiwdms.pjb 1 Offline'''
ldap2.pbifmsiwdms.pjb 2 Online, Local

'''But Services were not showing'''

On LDAP1 Started the cman and rgmanager services
/etc/init.d/cman start
/etc/init.d/rgmanager start

Checked in /var/log/messages for any error . cman and rgmanager Services started successfully .

Checked the cluster status
#clustat
Cluster Status for LdapCluster @ Sat May 21 10:02:44 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
ldap1.pbifmsiwdms.pjb 1 Online, Local
ldap2.pbifmsiwdms.pjb 2 Online

'''But Services were still not showing.'''

We have to enable the service manually

#clusvcadm -e dummy_httpd -m ldap1.pbifmsiwdms.pjb
( where dummy_httpd is the service named defined in /etc/cluster/cluster.conf )
'''But Service dummy_httpd failled''' .

Checked the log and found '''/etc/init.d/httpd''' , could not start .

Tried to start httpd service via '''"/etc/init.d/httpd start"''' , but failed .

Checked the log i.e /var/log/httpd/error_log and found
[Sat May 21 10:14:45 2016] [error] Unable to verify certificate 'Server-Cert'. Add '''"NSSEnforceValidCerts off"''' to nss.conf so the server can start until the problem can be resolved.

We added '''NSSEnforceValidCerts''' off in /etc/httpd/conf.d/nss.conf in virtualHost context .

Checked the httpd service via starting it on the cli , it worked successfully .

Then we stopped this service as it is controlled by cluster process.

We enabled the service manually again
#clusvcadm -e dummy_httpd -m ldap1.pbifmsiwdms.pjb
'''The services started successfully''' .

[root@ldap1 ~]# clustat

Cluster Status for LdapCluster @ Sat May 21 10:43:43 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
ldap1.pbifmsiwdms.pjb 1 Online, Local, rgmanager
ldap2.pbifmsiwdms.pjb 2 Online

Service Name Owner (Last) State
------- ---- ----- ------ -----
'''service:dummy_httpd ldap1.pbifmsiwdms.pjb started'''

'''Now Cluster IP is visible and LDAP is successfully accessed''' .

LDAP-Cluster-Failure

2016-05-21T07:04:31Z

Saurabh: moved LDAP-Cluster-Failure to LDAP-Cluster-Failure of Punjab Govt

#REDIRECT [[LDAP-Cluster-Failure of Punjab Govt]]

LDAP-Cluster-Failure of PUNJAB GOVT

2016-05-21T07:04:31Z

Saurabh: moved LDAP-Cluster-Failure to LDAP-Cluster-Failure of Punjab Govt

File:LDAP-Cluster-Failure of Punjab Govt.txt

2016-05-21T06:58:21Z

Saurabh: LDAP-Cluster-Failure of Punjab Govt

LDAP-Cluster-Failure of Punjab Govt

LDAP-Cluster-Failure of PUNJAB GOVT

2016-05-21T06:14:29Z

Saurabh:

LDAP-Cluster-Failure of PUNJAB GOVT

2016-05-21T05:56:27Z

Saurabh: Created page with "Problem : LDAP Services not working on the Cluster setup Details '''LDAP Server 1 - 192.168.10.91 ( ldap1.pbifmsiwdms.pjb )''' '''LDAP Server 2 - 192.168.10.96 ( ldap2.pbif..."

Problem : LDAP Services not working on the Cluster setup

Details
'''LDAP Server 1 - 192.168.10.91 ( ldap1.pbifmsiwdms.pjb )'''
'''LDAP Server 2 - 192.168.10.96 ( ldap2.pbifmsiwdms.pjb )'''
'''Cluster IP - 192.168.10.98'''

'''Diagnosis Process and resolution'''

Check Cluster Status on LDAP 1
# clustat
'''Service not running'''

Check Cluster Status on LDAP 2

#clustat
Cluster Status for LdapCluster @ Sat May 21 10:02:44 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
'''ldap1.pbifmsiwdms.pjb 1 Offline'''
ldap2.pbifmsiwdms.pjb 2 Online, Local

'''But Services were not showing'''

On LDAP1 Started the cman and rgmanager services
/etc/init.d/cman start
/etc/init.d/rgmanager start

Checked in /var/log/messages for any error . cman and rgmanager Services started successfully .

Checked the cluster status
#clustat
Cluster Status for LdapCluster @ Sat May 21 10:02:44 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
ldap1.pbifmsiwdms.pjb 1 Online, Local
ldap2.pbifmsiwdms.pjb 2 Online

'''But Services were still not showing.'''

We have to enable the service manually

#clusvcadm -e dummy_httpd -m ldap1.pbifmsiwdms.pjb
( where dummy_httpd is the service named defined in /etc/cluster/cluster.conf )
'''But Service dummy_httpd failled''' .

Checked the log and found '''/etc/init.d/httpd''' , could not start .

Tried to start httpd service via '''"/etc/init.d/httpd start"''' , but failed .

Checked the log i.e /var/log/httpd/error_log and found
[Sat May 21 10:14:45 2016] [error] Unable to verify certificate 'Server-Cert'. Add '''"NSSEnforceValidCerts off"''' to nss.conf so the server can start until the problem can be resolved.

We added '''NSSEnforceValidCerts''' off in /etc/httpd/conf.d/nss.conf in virtualHost context .

Checked the httpd service via starting it on the cli , it worked successfully .

Then we stopped this service as it is controlled by cluster process.

We enabled the service manually again
#clusvcadm -e dummy_httpd -m ldap1.pbifmsiwdms.pjb
'''The services started successfully''' .

[root@ldap1 ~]# clustat
Cluster Status for LdapCluster @ Sat May 21 10:43:43 2016
Member Status: Quorate

Member Name ID Status
------ ---- ---- ------
ldap1.pbifmsiwdms.pjb 1 Online, Local, rgmanager
ldap2.pbifmsiwdms.pjb 2 Online

Service Name Owner (Last) State
------- ---- ----- ------ -----
'''service:dummy_httpd ldap1.pbifmsiwdms.pjb started'''

'''Now Cluster IP is visible and LDAP is successfully accessed''' .

File:LDAP-Cluster-Failure-issue-resoltion.txt

2016-05-21T05:38:47Z

Saurabh:

LDAP-Cluster-Failure

File:LDAP-Cluster-Failure-issue-resoltion.txt

2016-05-21T05:35:30Z

Saurabh: LDAP-Cluster-issue-resoltion_(1).txt

LDAP-Cluster-issue-resoltion_(1).txt