zmproxy listening on wrong www/https port?

[Robstarusa]

Hello everyone,

I've had a Zimbra OSS edition installation since 2010. Recently, IIRC, (8.7?) Zimbra proxy is required. I've had this running a while and noticed that nginx is NOT listening on the correct ports. Is there a quick way to correct this? I noticed this after checking things out after an upgrade to 8.8.

Code: Select all

# netstat -anp | grep nginx | grep 0.0.0.0
tcp        0      0 0.0.0.0:993             0.0.0.0:*               LISTEN      9899/nginx.conf
tcp        0      0 0.0.0.0:995             0.0.0.0:*               LISTEN      9899/nginx.conf
tcp        0      0 0.0.0.0:110             0.0.0.0:*               LISTEN      9899/nginx.conf
tcp        0      0 0.0.0.0:143             0.0.0.0:*               LISTEN      9899/nginx.conf
tcp        0      0 0.0.0.0:8080            0.0.0.0:*               LISTEN      9899/nginx.conf
tcp        0      0 0.0.0.0:8443            0.0.0.0:*               LISTEN      9899/nginx.conf

OS Version

Code: Select all

# uname -a
Linux xxxxx 4.4.0-116-generic #140~14.04.1-Ubuntu SMP Fri Feb 16 09:25:20 UTC 2018 x86_64 x86_64 x86_64 GNU/Linux

Shouldn't nginx be listening on 80/443 and not 8080/8443 or am I missing something?

[Robstarusa]

I attempted to fix this with:

Code: Select all

zimbra@xxx:~/libexec$ ./zmproxyconfig -w -a 8080:80:8443:443 -e -f -H <xxx.my.fqdn>

and a "zmcontrol restart".

Now I have nginx listening on 80, and "java" listening on 8080
but NOTHING listening on 443/8443.

I saw nothing interesting in /var/log/zimbra.log or /opt/zimbra/log/nginx.log

Can anyone toss me a bone? I'm probably just looking in the wrong place.

[JDunphy]

This is the document to follow, https://wiki.zimbra.com/wiki/Enabling_Z ... ng_servers
Effectively, you are doing the following:

Code: Select all

su - zimbra
% zmprov ms `zmhostname` zimbraReverseProxyMailMode https
% zmprov ms `zmhostname` zimbraMailReferMode reverse-proxied
% zmprov ms `zmhostname` zimbraReverseProxyHttpEnabled TRUE

% ./libexec/zmproxyconfig -e -w -o -a 8080:80:8443:443 -x https -H `zmhostname`
% ./libexec/zmproxyconfig -e -m -o -i 7143:143:7993:993 -p 7110:110:7995:995 -H `zmhostname`
% zmprov ms `zmhostname` zimbraMailReferMode reverse-proxied
% zmcontrol restart
 

test via:

Code: Select all

# Test via:
[zimbra@mail ~]$ lsof -i :443
COMMAND   PID   USER   FD   TYPE DEVICE SIZE/OFF NODE NAME
nginx   23631 zimbra   10u  IPv4 959302      0t0  TCP *:https (LISTEN)
nginx   23632 zimbra   10u  IPv4 959302      0t0  TCP *:https (LISTEN)
nginx   23633 zimbra   10u  IPv4 959302      0t0  TCP *:https (LISTEN)
nginx   23635 zimbra   10u  IPv4 959302      0t0  TCP *:https (LISTEN)

Part 2 config for the admin console

Code: Select all

zmprov mcf zimbraPublicServiceHostname mail.example.com
zmprov md example.com zimbraPublicServicePort 443
zmprov md example.net  zimbraPublicServicePort 443
zmprov md example.com zimbraPublicServiceProtocol https
zmprov md example.net zimbraPublicServiceProtocol https
zmmailboxdctl restart

Some commands to run to see what you have.

Code: Select all

zmcontrol -v
zmprov -l gs `zmhostname` | grep -i port