[SOLVED]All shared contacts are being deleted at 00:25

[rport]

Hello All,

I am running Release 8.7.11.GA.1854.UBUNTU14.64 UBUNTU14_64 NETWORK edition.

I have created a ticket with Zimbra support, but, while I wait for a response, I thought I'd post here in case anyone has any tips/clues/brainwaves/solutions/etc.

Every night at 00:25, all contacts within four shared contact folders are being deleted.

Here are some example entries from mailbox.log:

2017-08-11 00:25:16,470 INFO [qtp1068934215-8452:https:https://mail.domain.com:7071/service/admin/soap/GetInfoRequest] [name=contactshares@domain.com;aname=zimbra;mid=69;ip=10.10.xx.xxx;port=36813;ua=zclient/8.7.11_GA_1854;] soap - GetInfoRequest elapsed=1

2017-08-11 00:25:16,678 INFO [qtp1068934215-8507:https:https://mail.domain.com:7071/service/admin/soap/FolderActionRequest] [name=contactshares@domain.com;aname=zimbra;mid=69;ip=10.10.xx.xxx;port=36813;ua=zclient/8.7.11_GA_1854;] misc - delegated access: doc=FolderAction, delegating account=zimbra, authenticated account=contactshares@domain.com, target account=contactshares@domain.com

2017-08-11 00:25:16,680 INFO [qtp1068934215-8507:https:https://mail.domain.com:7071/service/admin/soap/FolderActionRequest] [name=contactshares@domain.com;aname=zimbra;mid=69;ip=10.10.xx.xxx;port=36813;ua=zclient/8.7.11_GA_1854;] mailop - Deleting CONTACTS: 4326634,4326635,4326636,4326637.........

(Names have been changed to protect the innocent/guilty)

I have to restore all contacts to these shared folders every morning. This is somewhat of a nightmare.

I don't see any correlating events occurring in other logs. This started occurring after upgrading from 8.6.0 to 8.7.11

Any ideas?

Many thanks,

rp0rt

[rport]

I found a perl script running on an old Windows server; it was configured as a contact sync between an ancient BPM system and Zimbra. Part of the script would remotely (!!) delete all contacts from these folders prior to pushing new contact data. The script partially broke after I updated the SSL cipher list on Zimbra (to get the A-rating from SSLLabs!), but it was still able to delete all contacts.

I have now put a stop to this madness.

To anyone that read my topic and expended brain cycles on possible causes, I thank you.