8.8.15 Patch 32 GA Release

Ask questions about your setup or get help installing ZCS server (ZD section below).
M_vdM
Posts: 4
Joined: Fri Mar 18, 2022 2:02 pm

Re: 8.8.15 Patch 32 GA Release

Post by M_vdM »

M_vdM wrote:

Code: Select all

Jun 16, 2022 10:23:17 AM org.python.google.common.base.internal.Finalizer getInheritableThreadLocalsField
INFO: Couldn't access Thread.inheritableThreadLocals. Reference finalizer threads will inherit thread local values.
Traceback (most recent call last):
  File "libexec/zmconfigd", line 32, in <module>
    from org.apache.log4j import PropertyConfigurator
ImportError: No module named apache
Same problem over here with zmconfigd after updating the ldap server(s).

Problem is solved over here with instructions from support:

Create backup of the original files before replacing them with the github files below:
/opt/zimbra/common/lib/jylibs/commands.py
/opt/zimbra/libexec/zmconfigd

https://raw.githubusercontent.com/Zimbr ... /zmconfigd
https://raw.githubusercontent.com/Zimbr ... ommands.py
User avatar
JDunphy
Outstanding Member
Outstanding Member
Posts: 872
Joined: Fri Sep 12, 2014 11:18 pm
Location: Victoria, BC
ZCS/ZD Version: 9.0.0_P38 NETWORK Edition

Re: 8.8.15 Patch 32 GA Release

Post by JDunphy »

Trying to layout an update plan from P31.1 to P32 for RHEL. Here is what I believe thus far from the activity in the forums.

Problem 1: zmconfig not running

I believe the early adopters hit the zmconfigd problem which should be fixed by later update pulls. I don't think they updated the patch versioning but workarounds are documented if you pull directly from github.
Ref: "Sorry, this has been fixed for everyone who did not update on the first day after the release of the patch". Source: https://blog.zimbra.com/2022/06/new-zim ... -patch-32/ in comment section.

Problem 2: 2FA broke (specifically application passwords for MUA like mobile phones, etc. NETWORK/Commercial version I believe as there are open source variants of this.
ZBUG-2831 with no direct fix as I write this but few workarounds using account credentials and/or web interface, disable 2FA (but not going to fly here).

Problem 3: ldap didn't start: Doesn't apply to us as we don't do dist-upgrades as we are RHEL 8. Looks like they blew away the sudoers config for ldap for some ubuntu installs????

Problem 4: Suite Plus stopped working: Doesn't apply to us as we are NETWORK/commercial only

Problem 5: mailboxd - OSE doesn't start which hopefully doesn't apply to NETWORK/commercial versions, maybe zimbra chat? - viewtopic.php?f=13&t=66709&start=10#p292609

The problem is they have a lot of security updates mixed in with P32 so there is some urgency here.

Worse: if you are on P31 or earlier (not P31.1) you have to move ASAP given this: https://blog.sonarsource.com/zimbra-mai ... injection/ and what has been on the forum banners for a while now.

HTH,

Jim
User avatar
L. Mark Stone
Ambassador
Ambassador
Posts: 2782
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 10.0.6 Network Edition
Contact:

Re: 8.8.15 Patch 32 GA Release

Post by L. Mark Stone »

Spot on Jim from everything I am seeing; thanks so much for this comprehensive summary!

FWIW we are advising our customers already on 24.1 and 31.1 to hold off updating for a bit, as almost all of them have been heavy adopters of 2FA.

All the best,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
moebius
Posts: 18
Joined: Sat Sep 13, 2014 3:34 am

Re: 8.8.15 Patch 32 GA Release

Post by moebius »

Seems like something is up with the patch repo today...

Code: Select all

Err:1 https://repo.zimbra.com/apt/8815 xenial/zimbra amd64 zimbra-mta-components all 1.0.15-1zimbra8.8b1.16.04  403  Forbidden
Err:2 https://repo.zimbra.com/apt/8815 xenial/zimbra amd64 zimbra-mta-patch amd64 8.8.15.1655303181.p32-1.u16  403  Forbidden
Err:3 https://repo.zimbra.com/apt/8815 xenial/zimbra amd64 zimbra-patch amd64 8.8.15.1655187016.p32-1.u16  403  Forbidden
Err:4 https://repo.zimbra.com/apt/8815 xenial/zimbra amd64 zimbra-proxy-patch amd64 8.8.15.1655305713.p32-1.u16  403  Forbidden
E: Failed to fetch https://repo.zimbra.com/apt/8815/pool/zimbra/z/zimbra-mta-components/zimbra-mta-components_1.0.15-1zimbra8.8b1.16.04_all.deb  403 Forbidden
E: Failed to fetch https://repo.zimbra.com/apt/8815/pool/zimbra/z/zimbra-mta-patch/zimbra-mta-patch_8.8.15.1655303181.p32-1.u16_amd64.deb  403  Forbidden
E: Failed to fetch https://repo.zimbra.com/apt/8815/pool/zimbra/z/zimbra-patch/zimbra-patch_8.8.15.1655187016.p32-1.u16_amd64.deb  403  Forbidden
E: Failed to fetch https://repo.zimbra.com/apt/8815/pool/zimbra/z/zimbra-proxy-patch/zimbra-proxy-patch_8.8.15.1655305713.p32-1.u16_amd64.deb  403 Forbidden
gmills
Posts: 13
Joined: Sat Mar 11, 2017 10:13 pm

Re: 8.8.15 Patch 32 GA Release

Post by gmills »

Thank you M_vdM :D ,
My ZCS OSE LDAP Server is back online now.
The Zextras menu disappeared from the admin console. I downloaded and installed the latest zextras_suite and the menus are back now

Regards
Geoffrey Mills
alisvit
Posts: 2
Joined: Sat Jun 18, 2022 5:30 am

Re: 8.8.15 Patch 32 GA Release

Post by alisvit »

After instalation Patch 32 on CentOS 7 i receive the following error:

Code: Select all

Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt false ticketCache is null isInitiator false KeyTab is /opt/zimbra/data/mailboxd/spnego/jetty.keytab refreshKrb5Config is  false principal is HTTP/mail.domain.com tryFirstPass is false useFirstPass is false storePass is false clearPass is  false
principal is HTTP/mail.domain.com@domain.local
Will use keytab
Commit Succeeded


2022-06-18 08:49:37,015 INFO  [qtp2011482127-1934:https://mail.domain.com/service/spnego] [ip=1.1.1.1;port=59920;ua=Mozilla/5.0 (Windows NT 10.0;; Win64;; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36;] account - spnego auth failed: authentication failed for [], SpnegoAuthenticator: unable to login
2022-06-18 08:49:37,015 INFO  [qtp2011482127-1934:https://mail.domain.com/service/spnego] [ip=1.1.1.1;port=59920;ua=Mozilla/5.0 (Windows NT 10.0;; Win64;; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36;] account - spnego auth failed: authentication failed for [], no principal
2022-06-18 08:49:37,076 INFO  [qtp2011482127-1938:https://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ua=ZCS/8.8.15_GA_4303;soapId=3dcb603b;] soap - GetDomainInfoRequest elapsed=0
saket.patel
Zimbra Employee
Zimbra Employee
Posts: 133
Joined: Mon Apr 11, 2022 8:39 pm

Re: 8.8.15 Patch 32 GA Release

Post by saket.patel »

alisvit wrote:After instalation Patch 32 on CentOS 7 i receive the following error:

Code: Select all

Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt false ticketCache is null isInitiator false KeyTab is /opt/zimbra/data/mailboxd/spnego/jetty.keytab refreshKrb5Config is  false principal is HTTP/mail.domain.com tryFirstPass is false useFirstPass is false storePass is false clearPass is  false
principal is HTTP/mail.domain.com@domain.local
Will use keytab
Commit Succeeded


2022-06-18 08:49:37,015 INFO  [qtp2011482127-1934:https://mail.domain.com/service/spnego] [ip=1.1.1.1;port=59920;ua=Mozilla/5.0 (Windows NT 10.0;; Win64;; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36;] account - spnego auth failed: authentication failed for [], SpnegoAuthenticator: unable to login
2022-06-18 08:49:37,015 INFO  [qtp2011482127-1934:https://mail.domain.com/service/spnego] [ip=1.1.1.1;port=59920;ua=Mozilla/5.0 (Windows NT 10.0;; Win64;; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36;] account - spnego auth failed: authentication failed for [], no principal
2022-06-18 08:49:37,076 INFO  [qtp2011482127-1938:https://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ua=ZCS/8.8.15_GA_4303;soapId=3dcb603b;] soap - GetDomainInfoRequest elapsed=0
Can you please confirm if steps indicated in release notes were followed?
Attachments
Screenshot 2022-06-18 at 7.22.06 PM.png
Screenshot 2022-06-18 at 7.22.06 PM.png (60.06 KiB) Viewed 4697 times
alisvit
Posts: 2
Joined: Sat Jun 18, 2022 5:30 am

Re: 8.8.15 Patch 32 GA Release

Post by alisvit »

saket.patel wrote: Can you please confirm if steps indicated in release notes were followed?
Works! Thanks a lot! You my savior.
pjzr
Posts: 2
Joined: Thu Jun 16, 2022 9:19 am

Re: 8.8.15 Patch 32 GA Release

Post by pjzr »

Hi,

You have to install zimbra-ldap-patch on the LDAP servers.

Regards
edisu
Advanced member
Advanced member
Posts: 71
Joined: Fri May 01, 2020 3:25 am

Re: 8.8.15 Patch 32 GA Release

Post by edisu »

Hi Everyone,

For those who already applied the patch on their zimbra server, I just want to know did you also apply the instructions on "Changes required for SSO setup before patch upgrade"? Can we skip that procedure? Thanks
Post Reply