Can't make ldap backup with sudo -u zimbra

[soniqsoft]

ISSUE TYPE

• Bug Report

ENVIRONMENT VERSION

• Zmbackup Version: 1.2.5
• Zimbra Version: 8.8.15
• Linux Distribution & Version: Ubuntu 18.04.5 LTS

SUMMARY

Hi,
I'm trying to run full and incremental backups with zmbackup cron included in package.
Unfortunately can't get it done due to ldap backup fail with messages:

Zmbackup: LDAP - Can't extract accounts from LDAP - Error below:
Zmbackup: ldap_start_tls: Connect error (-11)#012#011additional info: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (self signed certificate in certificate chain)#012ldap_result: Can't contact LDAP server (-1)
Zmbackup: Mail sent to admin@email to notify about the backup routine conclusion.
Zmbackup: Excluding the temporary files before close.

However I can:

telnet mail.server 389

without any issue.

I've got letsencrypt certificate deployed on my zimbra server.

The problem does not exist when I'm running full or incremental backup in following sequence:

su - zimbra
zmbackup -f -ldp
or
zmbackup -f
or
zmbackup -i`

Any idea how to get it working with cron?

Thanks in advance.
M@riusz

STEPS TO REPRODUCE

Install zimbra
Install and deploy letsencrypt certificate based on this: https://github.com/VojtechMyslivec/letsencrypt-zimbra
Install zmbackup following this: https://github.com/Zmbackup/zmbackup
sudo -u zimbra zmcontrol -ldp

ACTUAL RESULTS

In syslog file I can see:

Zmbackup: LDAP - Can't extract accounts from LDAP - Error below:
Zmbackup: ldap_start_tls: Connect error (-11)#012#011additional info: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (self signed certificate in certificate chain)#012ldap_result: Can't contact LDAP server (-1)
Zmbackup: Mail sent to admin@email to notify about the backup routine conclusion.
Zmbackup: Excluding the temporary files before close.

and I'm receiving an email confirming proper result of the backup task:

Greetings Administrator,
    

This is an automatic message to inform you that the process for Account - Only LDAP BACKUP that you scheduled ended right now.
    
Here some information about this session:

Size: 0
Accounts: 0
Status: SUCCESS

Regards,
Zmbackup Team
    

Summary of files:

[lucascbeyeler]

I will take a look at this

[soniqsoft]

Great! Thanks!

[lucascbeyeler]

Could you try executing this command before zmbackup?

export LDAPTLS_REQCERT=never