How to fix the error: Failed to start slapd TLS: error:0200100D:system library:fopen:Permission denied bss file.c

 - This article is a Work in Progress, and may be unfinished or missing sections.

Article Information
This article applies to the following ZCS versions. ZCS 8.6 ZCS 8.5 ZCS 8.0

Fixing error: Failed to start slapd TLS: error:0200100D:system library:fopen:Permission denied bss file.c

Purpose

Doing a zmcontrol restart or zmcontrol start you obtain the next error:

Host mail.example.com
        Starting ldap...Done.
Failed.
Failed to start slapd.  Attempting debug start to determine error.
TLS: error:0200100D:system library:fopen:Permission denied bss_file.c:398
TLS: error:20074002:BIO routines:FILE_CTRL:system lib bss_file.c:400
5551ed24 main: TLS init def ctx failed: -1

Resolution

This problem is related to the privileges, try to run the next command to fix the privileges: As root

/opt/zimbra/libexec/zmfixperms --extended

As zimbra user

zmcontrol start

Additional Content

• A Community thread about the error, in this case the fix was manually changing the permissions of some files to zimbra:zimbra, but is much better use the zmfixperms tool.