Update on June 2022 Zimbra Patch release
https://blog.zimbra.com/2022/06/update-on-june-2022-zimbra-patch-release/ (June 20th 2022)

8.8.15 Patch 32 GA Release

Ask questions about your setup or get help installing ZCS server (ZD section below).
M_vdM
Posts: 4
Joined: Fri Mar 18, 2022 2:02 pm

Re: 8.8.15 Patch 32 GA Release

Postby M_vdM » Thu Jun 16, 2022 11:41 am

M_vdM wrote:

Code: Select all

Jun 16, 2022 10:23:17 AM org.python.google.common.base.internal.Finalizer getInheritableThreadLocalsField
INFO: Couldn't access Thread.inheritableThreadLocals. Reference finalizer threads will inherit thread local values.
Traceback (most recent call last):
  File "libexec/zmconfigd", line 32, in <module>
    from org.apache.log4j import PropertyConfigurator
ImportError: No module named apache


Same problem over here with zmconfigd after updating the ldap server(s).



Problem is solved over here with instructions from support:

Create backup of the original files before replacing them with the github files below:
/opt/zimbra/common/lib/jylibs/commands.py
/opt/zimbra/libexec/zmconfigd

https://raw.githubusercontent.com/Zimbr ... /zmconfigd
https://raw.githubusercontent.com/Zimbr ... ommands.py


User avatar
JDunphy
Outstanding Member
Outstanding Member
Posts: 721
Joined: Fri Sep 12, 2014 11:18 pm
Location: Victoria, BC
ZCS/ZD Version: 8.8.15_P32 RHEL8 Network Edition

Re: 8.8.15 Patch 32 GA Release

Postby JDunphy » Thu Jun 16, 2022 3:53 pm

Trying to layout an update plan from P31.1 to P32 for RHEL. Here is what I believe thus far from the activity in the forums.

Problem 1: zmconfig not running

I believe the early adopters hit the zmconfigd problem which should be fixed by later update pulls. I don't think they updated the patch versioning but workarounds are documented if you pull directly from github.
Ref: "Sorry, this has been fixed for everyone who did not update on the first day after the release of the patch". Source: https://blog.zimbra.com/2022/06/new-zim ... -patch-32/ in comment section.

Problem 2: 2FA broke (specifically application passwords for MUA like mobile phones, etc. NETWORK/Commercial version I believe as there are open source variants of this.
ZBUG-2831 with no direct fix as I write this but few workarounds using account credentials and/or web interface, disable 2FA (but not going to fly here).

Problem 3: ldap didn't start: Doesn't apply to us as we don't do dist-upgrades as we are RHEL 8. Looks like they blew away the sudoers config for ldap for some ubuntu installs????

Problem 4: Suite Plus stopped working: Doesn't apply to us as we are NETWORK/commercial only

Problem 5: mailboxd - OSE doesn't start which hopefully doesn't apply to NETWORK/commercial versions, maybe zimbra chat? - viewtopic.php?f=13&t=66709&start=10#p292609

The problem is they have a lot of security updates mixed in with P32 so there is some urgency here.

Worse: if you are on P31 or earlier (not P31.1) you have to move ASAP given this: https://blog.sonarsource.com/zimbra-mai ... injection/ and what has been on the forum banners for a while now.

HTH,

Jim
User avatar
L. Mark Stone
Elite member
Elite member
Posts: 2408
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine, US
ZCS/ZD Version: 8.8.15 Network Edition
Contact:

Re: 8.8.15 Patch 32 GA Release

Postby L. Mark Stone » Thu Jun 16, 2022 4:08 pm

Spot on Jim from everything I am seeing; thanks so much for this comprehensive summary!

FWIW we are advising our customers already on 24.1 and 31.1 to hold off updating for a bit, as almost all of them have been heavy adopters of 2FA.

All the best,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/
moebius
Posts: 18
Joined: Sat Sep 13, 2014 3:34 am

Re: 8.8.15 Patch 32 GA Release

Postby moebius » Thu Jun 16, 2022 4:37 pm

Seems like something is up with the patch repo today...

Code: Select all

Err:1 https://repo.zimbra.com/apt/8815 xenial/zimbra amd64 zimbra-mta-components all 1.0.15-1zimbra8.8b1.16.04  403  Forbidden
Err:2 https://repo.zimbra.com/apt/8815 xenial/zimbra amd64 zimbra-mta-patch amd64 8.8.15.1655303181.p32-1.u16  403  Forbidden
Err:3 https://repo.zimbra.com/apt/8815 xenial/zimbra amd64 zimbra-patch amd64 8.8.15.1655187016.p32-1.u16  403  Forbidden
Err:4 https://repo.zimbra.com/apt/8815 xenial/zimbra amd64 zimbra-proxy-patch amd64 8.8.15.1655305713.p32-1.u16  403  Forbidden
E: Failed to fetch https://repo.zimbra.com/apt/8815/pool/zimbra/z/zimbra-mta-components/zimbra-mta-components_1.0.15-1zimbra8.8b1.16.04_all.deb  403 Forbidden
E: Failed to fetch https://repo.zimbra.com/apt/8815/pool/zimbra/z/zimbra-mta-patch/zimbra-mta-patch_8.8.15.1655303181.p32-1.u16_amd64.deb  403  Forbidden
E: Failed to fetch https://repo.zimbra.com/apt/8815/pool/zimbra/z/zimbra-patch/zimbra-patch_8.8.15.1655187016.p32-1.u16_amd64.deb  403  Forbidden
E: Failed to fetch https://repo.zimbra.com/apt/8815/pool/zimbra/z/zimbra-proxy-patch/zimbra-proxy-patch_8.8.15.1655305713.p32-1.u16_amd64.deb  403 Forbidden
gmills
Posts: 11
Joined: Sat Mar 11, 2017 10:13 pm

Re: 8.8.15 Patch 32 GA Release

Postby gmills » Fri Jun 17, 2022 10:18 pm

Thank you M_vdM :D ,
My ZCS OSE LDAP Server is back online now.
The Zextras menu disappeared from the admin console. I downloaded and installed the latest zextras_suite and the menus are back now

Regards
Geoffrey Mills
alisvit
Posts: 2
Joined: Sat Jun 18, 2022 5:30 am

Re: 8.8.15 Patch 32 GA Release

Postby alisvit » Sat Jun 18, 2022 6:07 am

After instalation Patch 32 on CentOS 7 i receive the following error:

Code: Select all

Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt false ticketCache is null isInitiator false KeyTab is /opt/zimbra/data/mailboxd/spnego/jetty.keytab refreshKrb5Config is  false principal is HTTP/mail.domain.com tryFirstPass is false useFirstPass is false storePass is false clearPass is  false
principal is HTTP/mail.domain.com@domain.local
Will use keytab
Commit Succeeded


2022-06-18 08:49:37,015 INFO  [qtp2011482127-1934:https://mail.domain.com/service/spnego] [ip=1.1.1.1;port=59920;ua=Mozilla/5.0 (Windows NT 10.0;; Win64;; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36;] account - spnego auth failed: authentication failed for [], SpnegoAuthenticator: unable to login
2022-06-18 08:49:37,015 INFO  [qtp2011482127-1934:https://mail.domain.com/service/spnego] [ip=1.1.1.1;port=59920;ua=Mozilla/5.0 (Windows NT 10.0;; Win64;; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36;] account - spnego auth failed: authentication failed for [], no principal
2022-06-18 08:49:37,076 INFO  [qtp2011482127-1938:https://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ua=ZCS/8.8.15_GA_4303;soapId=3dcb603b;] soap - GetDomainInfoRequest elapsed=0
saket.patel
Zimbra Employee
Zimbra Employee
Posts: 17
Joined: Mon Apr 11, 2022 8:39 pm

Re: 8.8.15 Patch 32 GA Release

Postby saket.patel » Sat Jun 18, 2022 1:53 pm

alisvit wrote:After instalation Patch 32 on CentOS 7 i receive the following error:

Code: Select all

Debug is  true storeKey true useTicketCache false useKeyTab true doNotPrompt false ticketCache is null isInitiator false KeyTab is /opt/zimbra/data/mailboxd/spnego/jetty.keytab refreshKrb5Config is  false principal is HTTP/mail.domain.com tryFirstPass is false useFirstPass is false storePass is false clearPass is  false
principal is HTTP/mail.domain.com@domain.local
Will use keytab
Commit Succeeded


2022-06-18 08:49:37,015 INFO  [qtp2011482127-1934:https://mail.domain.com/service/spnego] [ip=1.1.1.1;port=59920;ua=Mozilla/5.0 (Windows NT 10.0;; Win64;; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36;] account - spnego auth failed: authentication failed for [], SpnegoAuthenticator: unable to login
2022-06-18 08:49:37,015 INFO  [qtp2011482127-1934:https://mail.domain.com/service/spnego] [ip=1.1.1.1;port=59920;ua=Mozilla/5.0 (Windows NT 10.0;; Win64;; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/102.0.0.0 Safari/537.36;] account - spnego auth failed: authentication failed for [], no principal
2022-06-18 08:49:37,076 INFO  [qtp2011482127-1938:https://localhost:7071/service/admin/soap/GetDomainInfoRequest] [ua=ZCS/8.8.15_GA_4303;soapId=3dcb603b;] soap - GetDomainInfoRequest elapsed=0


Can you please confirm if steps indicated in release notes were followed?
Attachments
Screenshot 2022-06-18 at 7.22.06 PM.png
Screenshot 2022-06-18 at 7.22.06 PM.png (60.06 KiB) Viewed 1818 times
alisvit
Posts: 2
Joined: Sat Jun 18, 2022 5:30 am

Re: 8.8.15 Patch 32 GA Release

Postby alisvit » Sat Jun 18, 2022 2:59 pm

saket.patel wrote:Can you please confirm if steps indicated in release notes were followed?


Works! Thanks a lot! You my savior.
pjzr
Posts: 1
Joined: Thu Jun 16, 2022 9:19 am

Re: 8.8.15 Patch 32 GA Release

Postby pjzr » Tue Jun 21, 2022 7:31 am

Hi,

You have to install zimbra-ldap-patch on the LDAP servers.

Regards
edisu
Advanced member
Advanced member
Posts: 59
Joined: Fri May 01, 2020 3:25 am

Re: 8.8.15 Patch 32 GA Release

Postby edisu » Tue Jun 21, 2022 10:16 am

Hi Everyone,

For those who already applied the patch on their zimbra server, I just want to know did you also apply the instructions on "Changes required for SSO setup before patch upgrade"? Can we skip that procedure? Thanks

Return to “Installation and Upgrade”

Who is online

Users browsing this forum: No registered users and 16 guests