LDAP Replicas 4.5.x to 5.0.x
ZCS 4.5.10 (and older): If upgrading to any ZCS 5.0.x (5.0.0, 5.0.1, 5.0.2 +) please use the workaround below.
This procedure allows all the replica servers to properly preserve the changes made to the master during the upgrade process and allows ZCS 5.0.x non-LDAP servers to work with the 4.5.x replica servers.
Choosing to remove your LDAP replicas during the upgrade and install fresh ones is also an alternative if you wish.
When they are released, going from 4.5.x > 4.5.11 > 5.0.2 will not require you to make any special corrections.
4.5.10 (and older) > 5.0.0 or 5.0.1 workaround:
If you have LDAP replica servers configured for ZCS, when you upgrade from 4.5.x to 5.0, you must modify each LDAP replica server before you upgrade the LDAP master server.
1. On each LDAP replica server perform the following:
Stop LDAP, as the zimbra user, type ldap stop Change directors, type cd /opt/zimbra/openldap/etc/openldap/schema/ As the root user, type mv zimbra/schema zimbra.schema.old As the root user, type wget http://files.zimbra.com/downloads/5.0.1_GA/zimbra.schema As the root user, type chown zimbra:zimbra zimbra.schema As the root user, type chmod 664 zimbra.schema Restart the server, as the zimbra user, type ldap start
wget isn't available on macs. Use curl -O instead
2. Upgrade the LDAP master as described in the release notes
3. Upgrade the LDAP replicas
Fix for those who have already upgraded from 4.5.x to 5.0.1, and the replicas become out-of-sync:
On the Master:
su - zimbra /opt/zimbra/openldap/sbin/slapcat -b -f /opt/zimbra/conf/slapd.conf -l /tmp/ldap.ldif scp /tmp/ldap.ldif root@replica:/tmp/ldif
On the Replica:
chown zimbra:zimbra /tmp/ldap.ldif su - zimbra ldap stop exit mv /opt/zimbra/openldap-data /opt/zimbra/openldap-data-old mkdir /opt/zimbra/openldap-data cp /opt/zimbra/openldap-data-old/DB_CONFIG /opt/zimbra/openldap-data chown -R zimbra:zimbra /opt/zimbra/openldap-data/ su - zimbra /opt/zimbra/openldap/sbin/slapadd -w -q -b -f /opt/zimbra/conf/slapd.conf -l /tmp/ldap.ldif ldap start