zmproxy listening on wrong www/https port?

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Robstarusa
Posts: 14
Joined: Sat Sep 13, 2014 1:42 am

zmproxy listening on wrong www/https port?

Postby Robstarusa » Tue Mar 27, 2018 10:47 pm

Hello everyone,

I've had a Zimbra OSS edition installation since 2010. Recently, IIRC, (8.7?) Zimbra proxy is required. I've had this running a while and noticed that nginx is NOT listening on the correct ports. Is there a quick way to correct this? I noticed this after checking things out after an upgrade to 8.8.

Code: Select all

# netstat -anp | grep nginx | grep 0.0.0.0
tcp        0      0 0.0.0.0:993             0.0.0.0:*               LISTEN      9899/nginx.conf
tcp        0      0 0.0.0.0:995             0.0.0.0:*               LISTEN      9899/nginx.conf
tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTEN      9899/nginx.conf
tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN      9899/nginx.conf
tcp        0      0 0.0.0.0:8080            0.0.0.0:*               LISTEN      9899/nginx.conf
tcp        0      0 0.0.0.0:8443            0.0.0.0:*               LISTEN      9899/nginx.conf


OS Version

Code: Select all

# uname -a
Linux xxxxx 4.4.0-116-generic #140~14.04.1-Ubuntu SMP Fri Feb 16 09:25:20 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux


Shouldn't nginx be listening on 80/443 and not 8080/8443 or am I missing something?


Robstarusa
Posts: 14
Joined: Sat Sep 13, 2014 1:42 am

Re: zmproxy listening on wrong www/https port?

Postby Robstarusa » Tue Mar 27, 2018 11:43 pm

I attempted to fix this with:

Code: Select all

zimbra@xxx:~/libexec$ ./zmproxyconfig -w -a 8080:80:8443:443 -e -f -H <xxx.my.fqdn>


and a "zmcontrol restart".

Now I have nginx listening on 80, and "java" listening on 8080
but NOTHING listening on 443/8443.

I saw nothing interesting in /var/log/zimbra.log or /opt/zimbra/log/nginx.log

Can anyone toss me a bone? I'm probably just looking in the wrong place.
User avatar
JDunphy
Outstanding Member
Outstanding Member
Posts: 505
Joined: Fri Sep 12, 2014 11:18 pm
Location: Victoria, BC
ZCS/ZD Version: 8.7.11_P14 RHEL6 Network Edition
Contact:

Re: zmproxy listening on wrong www/https port?

Postby JDunphy » Wed Mar 28, 2018 1:55 pm

This is the document to follow, https://wiki.zimbra.com/wiki/Enabling_Zimbra_Proxy_and_memcached#Using_existing_servers
Effectively, you are doing the following:

Code: Select all

su - zimbra
% zmprov ms `zmhostname` zimbraReverseProxyMailMode https
% zmprov ms `zmhostname` zimbraMailReferMode reverse-proxied
% zmprov ms `zmhostname` zimbraReverseProxyHttpEnabled TRUE

% ./libexec/zmproxyconfig -e -w -o -a 8080:80:8443:443 -x https -H `zmhostname`
% ./libexec/zmproxyconfig -e -m -o -i 7143:143:7993:993 -p 7110:110:7995:995 -H `zmhostname`
% zmprov ms `zmhostname` zimbraMailReferMode reverse-proxied
% zmcontrol restart
 

test via:

Code: Select all

# Test via:
[zimbra@mail ~]$ lsof -i :443
COMMAND   PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
nginx   23631 zimbra   10u  IPv4 959302      0t0  TCP *:https (LISTEN)
nginx   23632 zimbra   10u  IPv4 959302      0t0  TCP *:https (LISTEN)
nginx   23633 zimbra   10u  IPv4 959302      0t0  TCP *:https (LISTEN)
nginx   23635 zimbra   10u  IPv4 959302      0t0  TCP *:https (LISTEN)

Part 2 config for the admin console

Code: Select all

zmprov mcf zimbraPublicServiceHostname mail.example.com
zmprov md example.com zimbraPublicServicePort 443
zmprov md example.net  zimbraPublicServicePort 443
zmprov md example.com zimbraPublicServiceProtocol https
zmprov md example.net zimbraPublicServiceProtocol https
zmmailboxdctl restart

Some commands to run to see what you have.

Code: Select all

zmcontrol -v
zmprov -l gs `zmhostname` | grep -i port

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 8 guests