Search found 10 matches

by DaveSmash
Sat Jul 17, 2021 7:22 am
Forum: Administrators
Topic: How Can I Set the SameSite Cookie Attribute? (New Security Requirement for Google Chrome)
Replies: 11
Views: 14387

Re: How Can I Set the SameSite Cookie Attribute? (New Security Requirement for Google Chrome)

Hi, sorry to revive this topic from the grave but did you ever found a way to set "HttpOnly; Secure; SameSite=Strict" in the cookies ? Regards Sorry, but no, I didn't. I tried once more a while later, and ran into the same issues. My solution was to move my application and my Zimbra serve...
by DaveSmash
Thu Aug 20, 2020 10:25 pm
Forum: Administrators
Topic: How Can I Set the SameSite Cookie Attribute? (New Security Requirement for Google Chrome)
Replies: 11
Views: 14387

Re: How Can I Set the SameSite Cookie Attribute? (New Security Requirement for Google Chrome)

@DualBoot - thank you for trying. In addition to the module you have mentioned, I have seen references to using proxy_cookie_path, but I have spent a few hours going down that path and it does not seem to be working either. So in /opt/zimbra/conf/nginx/templates, I tried editing nginx.conf.web.https...
by DaveSmash
Wed Aug 19, 2020 7:30 pm
Forum: Administrators
Topic: How Can I Set the SameSite Cookie Attribute? (New Security Requirement for Google Chrome)
Replies: 11
Views: 14387

Re: How Can I Set the SameSite Cookie Attribute? (New Security Requirement for Google Chrome)

Thank you, DualBoot. EDIT: This appeared to work, but it actually added a second Set-Cookie header without overwriting or removing the first one, so the issue is still ongoing. The following step added the header: zmprov mcf +zimbraReverseProxyResponseHeaders "Set-Cookie: \"ZM_Test=true; S...
by DaveSmash
Tue Aug 18, 2020 8:26 pm
Forum: Administrators
Topic: How Can I Set the SameSite Cookie Attribute? (New Security Requirement for Google Chrome)
Replies: 11
Views: 14387

How Can I Set the SameSite Cookie Attribute? (New Security Requirement for Google Chrome)

I use an IFrame to display the zimbra webmail portal within another web application. Recently, this stopped working in new versions of Google Chrome, which now requires cross-origin cookies to have the Secure and SameSite=None attributes set. In the webmail, users are getting an error saying that co...
by DaveSmash
Fri Apr 13, 2018 7:46 pm
Forum: Developers
Topic: Wait Sets Not Working
Replies: 0
Views: 3158

Wait Sets Not Working

I am trying to an AdminWaitSet to monitor all mailboxes and notify users on new messages, etc. I am using the following to create the wait set: <?xml version="1.0" encoding="utf-8" ?> <soap:Envelope xmlns:soap="http://www.w3.org/2003/05/soap-envelope"> <soap:Header> <co...
by DaveSmash
Tue Apr 10, 2018 7:24 pm
Forum: Developers
Topic: SOAP SendMsgRequest results in "missing required attribute: name"
Replies: 1
Views: 3616

Re: SOAP SendMsgRequest results in "missing required attribute: name"

Removing the empty <header></header> tag inside the <m> tag seems to have resolved the issue. According to the documentation, /m/header@name is optional, but apparently it is not...
by DaveSmash
Tue Apr 10, 2018 5:53 pm
Forum: Developers
Topic: How to Get Zimbra Message ID (Not Postfix Message ID)
Replies: 3
Views: 7822

Re: How to Get Zimbra Message ID (Not Postfix Message ID)

The waitset looks like a better approach. Thanks for the idea! I will work it into code ASAP.
by DaveSmash
Tue Apr 10, 2018 5:50 pm
Forum: Developers
Topic: SOAP SendMsgRequest results in "missing required attribute: name"
Replies: 1
Views: 3616

SOAP SendMsgRequest results in "missing required attribute: name"

I am trying to allow users to send messages from an intranet site without authenticating separately to Zimbra or using the Zimbra web portal. Since I don't store the user's password, I need to use delegate access. First, I use <AuthRequest xmlns="urn:zimbraAdmin"></AuthRequest> to get an a...
by DaveSmash
Wed Mar 07, 2018 3:08 pm
Forum: Developers
Topic: How to Get Zimbra Message ID (Not Postfix Message ID)
Replies: 3
Views: 7822

Re: How to Get Zimbra Message ID (Not Postfix Message ID)

I still welcome any advice or feedback, but I am working through a solution. For anyone else looking for a solution to this problem, it looks like Zimbra IDs are included with the response from the REST API when you get a folder's contents (e.g., http://mydomain.com/home/john.doe/Inbox/?fmt=json). A...
by DaveSmash
Tue Mar 06, 2018 2:10 am
Forum: Developers
Topic: How to Get Zimbra Message ID (Not Postfix Message ID)
Replies: 3
Views: 7822

How to Get Zimbra Message ID (Not Postfix Message ID)

Hello. I am trying to integrate with a third-party app. I would like to notify the app of new incoming and outgoing messages, and include the Zimbra Message ID for direct linking purposes, e.g., https://mydomain.com:7070/home/john.doe/?id=123. I am trying to use zmmsgtrace to log recent messages, bu...