ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    Solved Proxy Failure on Zimbra 8.8 After Update

    IT Discussion
    zimbra nginx zimbra 8.8 zimbra proxy
    4
    10
    3.0k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • S
      scottalanmiller
      last edited by

      Zimbra has, by default, the web interface runs on port 8443, and then an Nginx proxy runs in front of it that provides port 443 translation. This has been working for a year without an issue, but with the latest update we get the following error.

      0_1513720600152_Screenshot from 2017-12-19 15-53-41.png

      You can see the page attempting to authenticate, loads of TLS info flies by as the page loads, but it winds up here. If we go to port 8443 directly, everything works fine (but ideally we want that port closed to the outside.) So the underlying Java based Zimbra server is running fine. It's something in the NGinx based proxy that is having the issue.

      To make things stranger, the SSL cert from LetsEncrypt is held by the Java process, so that's working just fine.

      In theory there really isn't nay configuration involved with the Zimbra Proxy. I tried updating the LetsEnrypt cert to ensure that that was not a problem or corrupt in some way. But even after going through that entire process, things remain the same.

      Not sure where I should be looking for a place to start. I see nothing in the logs.

      1 Reply Last reply Reply Quote 0
      • D
        dbeato
        last edited by

        Apparently this fixes it

        $ zmprov md domain.com zimbraVirtualHostname mail.domain.com zimbraVirtualIPAddress 10.0.1.6
        $ libexec/zmproxyconfgen
        $ zmproxyctl restart
        

        Obviously change it to your enviroment.

        W 1 Reply Last reply Reply Quote 0
        • J
          JaredBusch
          last edited by

          Does Zimbra have some kind of "trusted proxy" setting or something?

          I know many applications have this to assist with working behind a reverse proxy.

          S 1 Reply Last reply Reply Quote 0
          • S
            scottalanmiller @JaredBusch
            last edited by

            @jaredbusch said in Proxy Failure on Zimbra 8.8 After Update:

            Does Zimbra have some kind of "trusted proxy" setting or something?

            I know many applications have this to assist with working behind a reverse proxy.

            None of which I know - I assume because it is all one package. The proxy is still part of the base Zimbra installation and logs into the Zimbra directory.

            J 1 Reply Last reply Reply Quote 0
            • J
              JaredBusch @scottalanmiller
              last edited by

              @scottalanmiller said in Proxy Failure on Zimbra 8.8 After Update:

              @jaredbusch said in Proxy Failure on Zimbra 8.8 After Update:

              Does Zimbra have some kind of "trusted proxy" setting or something?

              I know many applications have this to assist with working behind a reverse proxy.

              None of which I know - I assume because it is all one package. The proxy is still part of the base Zimbra installation and logs into the Zimbra directory.

              I was firing blind as I have never used it.

              1 Reply Last reply Reply Quote 1
              • S
                scottalanmiller
                last edited by

                We've been through a lot of updates, this is a new issue.

                From what I can tell, it looks like the LE cert didn't update properly either. It looks like it is still using the old one that will expire soon.

                1 Reply Last reply Reply Quote 0
                • D
                  dbeato
                  last edited by

                  Apparently this fixes it

                  $ zmprov md domain.com zimbraVirtualHostname mail.domain.com zimbraVirtualIPAddress 10.0.1.6
                  $ libexec/zmproxyconfgen
                  $ zmproxyctl restart
                  

                  Obviously change it to your enviroment.

                  W 1 Reply Last reply Reply Quote 0
                  • D
                    dbeato
                    last edited by

                    More on this below:
                    https://forums.zimbra.org/viewtopic.php?t=62695

                    1 Reply Last reply Reply Quote 0
                    • W
                      wirestyle22 @dbeato
                      last edited by

                      @dbeato said in Proxy Failure on Zimbra 8.8 After Update:

                      Apparently this fixes it

                      $ zmprov md domain.com zimbraVirtualHostname mail.domain.com zimbraVirtualIPAddress 10.0.1.6
                      $ libexec/zmproxyconfgen
                      $ zmproxyctl restart
                      

                      Obviously change it to your enviroment.

                      did this work @scottalanmiller?

                      S 1 Reply Last reply Reply Quote 0
                      • S
                        scottalanmiller @wirestyle22
                        last edited by

                        @wirestyle22 said in Proxy Failure on Zimbra 8.8 After Update:

                        @dbeato said in Proxy Failure on Zimbra 8.8 After Update:

                        Apparently this fixes it

                        $ zmprov md domain.com zimbraVirtualHostname mail.domain.com zimbraVirtualIPAddress 10.0.1.6
                        $ libexec/zmproxyconfgen
                        $ zmproxyctl restart
                        

                        Obviously change it to your enviroment.

                        did this work @scottalanmiller?

                        Boom, that did it!

                        Thanks @dbeato

                        D 1 Reply Last reply Reply Quote 1
                        • D
                          dbeato @scottalanmiller
                          last edited by

                          @scottalanmiller said in Proxy Failure on Zimbra 8.8 After Update:

                          @wirestyle22 said in Proxy Failure on Zimbra 8.8 After Update:

                          @dbeato said in Proxy Failure on Zimbra 8.8 After Update:

                          Apparently this fixes it

                          $ zmprov md domain.com zimbraVirtualHostname mail.domain.com zimbraVirtualIPAddress 10.0.1.6
                          $ libexec/zmproxyconfgen
                          $ zmproxyctl restart
                          

                          Obviously change it to your enviroment.

                          did this work @scottalanmiller?

                          Boom, that did it!

                          Thanks @dbeato

                          Awesomeness !

                          1 Reply Last reply Reply Quote 0
                          • 1 / 1
                          • First post
                            Last post