December 2020 Zeta Alliance Weekly Call Summaries

Industry info, happenings near you, and new product integrations. Hosting an event? Invite people here.
Post Reply
User avatar
rleiker
Advanced member
Advanced member
Posts: 149
Joined: Tue Jan 07, 2020 8:23 pm
Location: Kansas City
Contact:

December 2020 Zeta Alliance Weekly Call Summaries

Post by rleiker »

Hello Zimbra Community,

Here is a summary of this week’s conference call. A few brief reminders: December 1, 2020

New Theme For The Zimbra Classic UI
Cine shared that with the release of Zextras 3.1.5 yesterday, they also released a new theme that can be deployed for either Zimbra 8.6.x and later, including 9.0, which is intended to modernize the default Classic UI included with Zimbra. It is available for download from: https://www.zextras.com/zextras-theme-zimbra-interface/ . While different than then Modern UI included with Zimbra 9, this offers a means to update the Classic UI included with both Zimbra Open Source Edition and Network Edition to a more modern look and feel. Mark S. asked if Cine anticipated Zextras would continue to release updates for this new theme, as needed. Cine said that it is planned to be packaged in to future Zextra releases automatically.

New Address Book Service
Cine said that included in the Zextras 3.1.5 release is a new address book service that can be accessed via LDAP in Outlook. This allows for users to access the Zimbra GAL (global address list) or other administrator defined address books from within Outlook. Details can be found at: https://docs.zextras.com/zextras-suite- ... sbook.html . This is considered a beta feature and Cine explained that to set it up in Outlook, it requires referencing a specific Zimbra mailbox server’s host name, if using a multi-server install of Zimbra, rather than the Zimbra proxy server (Nginx), as would normally be done for setting up a MAPI/IMAP/POP Zimbra email account in Outlook. Randy L. asked if someone setup a load balancer in front of their Zimbra cluster, could users point Outlook to the load balancer, instead of a specific mailbox server, and the address book feature would be able to redirect users to the server where their mailbox is stored, much like Nginx does for MAPI/IMAP/POP clients? Cine said he thinks this would work, but he was not sure as this use case had not been tested.

New Zextras Team Video Server
Cine said that a new Video Server is now available, which serves as a WebRTC aggregator for sound/video feeds, so that Zimbra Connect call participants will need to only have one aggregated inbound stream and one aggregated outbound stream, rather than separate streams to each call participant, thereby improving overall call performance. The Video Server also allows administrators to set limits for video/audio bandwidth used on Zimbra Connect calls. The Video Server is available in beta and more details can be found at: https://docs.zextras.com/zextras-suite- ... erver.html . While in beta, only one Video Server is currently allowed, but once it leaves beta, multiple video servers can be setup within a Zimbra install. Randy L. asked if this is foundation on which the upcoming “webinar mode” for Zimbra Connect is being built, which allows for scheduled calls, similar to Zoom, WebEx, etc. Cine said it is not the foundation, but certainly is a requirement for this upcoming feature. Randy L. asked if this eliminates the need for STUN/TURN server that was previously required for many Zimbra Connect deployments, and Cine confirmed that it does indeed remove the STUN/TURN server requirement, but said that the only use case where a TURN server is still required, when using a Video Server, is if a user’s network does not allow for UDP traffic. Mark S. asked if there is an option to restrict the range of network ports that UDP uses on the Video Server. Cine said that administrators can specify a range of high numbered UDP ports for the Video Server to use. He also explained that the Zimbra mailbox server, where Zimbra Connect is installed, connects to the Video Server over a single web socket on TCP port 8188. Mark S. commented that it would be helpful to have a document showing a list of all network ports required by the new Team Video server and Zimbra Connect, both on the server-side and client-side.

Consolidating Zimbra Mailboxes Via Restores
Mark S. said he has a customer that is trying to consolidate their Zimbra mailboxes for employees no longer with their organization in to a single common mailbox. He asked if it is possible to use the zxsuite backup/restore feature to first backup the former employees mailboxes, then restore each into a single consolidated mailbox. Cine said this is not currently possible, but has been discussed as a possible future feature with the Zextras product team. Mark said he will instead use another method, such as an IMAP synchronization to merge the mailboxes.

Missing Domain Settings
Noah P. said that after upgrading to 8.8.15 Patch 16, he began receiving some unexpected emailed alerts from his Zimbra server related to missing settings for some of the domains setup in Zimbra. He said the emails have a subject of “ZxAuth: Invalid Domains Data From server (mail store hostname)” and include the body text of: “The following domains are missing:” followed by a list of his alias domains and domains with email archiving enabled. Cine said that Zextras is looking at clarifying the text for these administrator notifications, and that it relates to domains setup in Zimbra that may be missing a public service host name, public service port number, or protocol setting. He also said that 8.8.15 Patch 16 and 9.0 Patch 9 have a known bug, where this notification is sent for alias domains too, when it was intended to only be sent for real domains. Randy L. said that he too has seen these same notifications after installing Patch 16, and was able to resolve them by filling-in one or more of the missing properties for domains that are configured for email archiving only, even though those settings will never be used by the Zimbra email archiving feature.

Mark S. suggested that adding a switch to the “zmprov getAllDomains” command would provide an easy means for Zextras to perform this check only for real domains in Zimbra, as compared to a combination of real domains, email archiving domains, and alias domains, as it currently does. John E. suggested that Mark open a new RFE (request for enhancement) with Zimbra for his suggestion. John also said that the majority of the zmprov commands are converted internally within Zimbra to SOAP requests, so implementing this change would be non-trivial, but suggested that submitting an RFE would be helpful to get a discussion started.

Follow-Up: Zimbra Multi-Server Install Issue
In the November 24th Zeta Alliance call ( viewtopic.php?f=9&t=68942&p=299848#p299848 ), Mark S. described an issue encountered when setting up a second LDAP server in a new Zimbra install. Barry D. had suggested enabling the link local IPv6 address for the Zimbra servers to resolve the issue, but upon testing this suggestion, Mark reported today that it did not appear to have any impact and the issue remains unresolved.

Upgrading From 8.8.15 Patch 16 to 9.0 Patch 9
Noah P. asked if there are many differences to be expected in upgrading from 8.8.15 Patch 16 to 9.0 Patch 9. John E. said that they are very close, and in some limited cases, there may be certain features that have been implemented in 9.0, but not yet implemented in 8.8.15 Patch 16.

TLS 1.3 Support For Nginx
John E. said that similar to the addition of TLS 1.3 support for the OpenSSL and Postfix components in Zimbra, introduced in 8.8.15 Patch 15 ( https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P15 ) and 9.0 Patch 8 ( https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P8 ), there is a possibility that TLS 1.3 support will be introduced for Nginx in Zimbra, sometime next week. He said that if anyone has an immediate need for TLS 1.3 support in Nginx in the interim, to contact Zimbra Support for further assistance.


Randy Leiker
Skyway Networks, LLC
User avatar
rleiker
Advanced member
Advanced member
Posts: 149
Joined: Tue Jan 07, 2020 8:23 pm
Location: Kansas City
Contact:

Re: December 2020 Zeta Alliance Weekly Call Summaries

Post by rleiker »

Hello Zimbra Community,

Here is a summary of this week’s conference call. A few brief reminders: December 8, 2020

Occasional Error Upon Logging In To The Zimbra Web Client
Noah P. said he has noticed an occasional error in 8.8.15 that appears when logging in to the Zimbra Web Client (ZWC) Classic UI that says “an unknown error has occurred”. However, upon trying the same login again, the login succeeds. Matthew F. said he has observed this same issue too and that he found that by adding “/zimbra” to the end of the ZWC’s URL before initially logging in, it appears to avoid the error message and allows the first login attempt to succeed. John E. commented that it could be originating from a back-end component in Zimbra, possibly from the interaction between a proxy with a mailbox server, or a Zimbra API (application programming interface) call. Matthew F. suggested it might be mitigated simply by updating bookmarks or links to the ZWC to include the “/zimbra” part of the URL (e.g. zwc-host.com/zimbra).

CentOS Project Change
Noah P. shared this blog post ( https://blog.centos.org/2020/12/future- ... os-stream/ ) related to the CentOS project’s plans to phase-out CentOS Linux 8 and migrate to CentOS Stream 8. He wondered how this will affect Zimbra installs for CentOS 8. Randy L. commented that he was surprised by this news too, as it is his understanding that CentOS Linux 8 is considered to be a stable production-use distribution, based on Red Hat Enterprise, while Stream 8 has been previously positioned as more of a bleeding-edge distribution, similar to Fedora Core.

New Zimlet Development Guides Released
Barry D. said that he has released two new Zimlet guides. The first ( https://github.com/Zimbra/zimbra-zimlet ... e-template ) is a guide discussing how to create a Zimlet for deploying consistent email signatures within an organization. The second guide ( https://github.com/Zimbra/zimbra-zimlet-user-properties ) discusses how to use per-user preferences/settings within a Zimlet.

Excessive Online/Offline Notifications In The Zimbra Web Client
Randy L. said that after installing 8.8.15 Patch 16, he has noticed that when using the Zimbra Web Client (ZWC) with the latest Firefox version, he sees repeated “You are offline” and “You are online” notifications anytime an email attachment is opened, in addition to when signing off of the ZWC. These repetitive notifications do not appear to block any functionality in the ZWC from working, but are just a nuisance. He said he has not yet tested if this occurs in other browsers such as Chrome, Edge, or Safari. Barry suggested these might be related to the Zimbra DoS filter, leading to a 503 error in the background, but Randy said he did not think this was the case, as he has not yet seen any 503 errors logged, nor functionality in the ZWC blocked by the DoS filter. John E. suggested that if Randy has Zimbra Connect enabled, the notifications may be originating from the Zimbra Connect Chat feature, and suggested checking the browser console for any warnings/errors that are being logged by Firefox. Randy said he will gather more information and open a bug report with Zimbra.

Join.Me Add-In for Outlook and the Zimbra Connector Incompatibility
Noah P. said he has discovered an incompatibility between the Join.Me add-in for Outlook and the Zimbra Connector for Outlook 9.0. He said a workaround for the issue is to either uninstall the Join.Me add-in or uninstall the Zimbra Connector. In the case of the latter, Outlook can be configured to use ActiveSync instead of the Zimbra Connector. He has opened Zimbra Support case # 01110188 with a report of the issue.

Custom VBScript Incompatibility With Zimbra Connector 9.0.0.1886
Matthew F. said that he noticed his custom VBScript for Outlook has stopped working when Zimbra Connector for Outlook 9.0.0.1886 is installed. He said the incompatibility seems to occur when the script makes a function call to create a new email message, resulting in an error message that appears and the function call fails. He found that by rolling back to Zimbra Connector 9.0.0.1869, his custom VBScript again works as expected. He wondered if this is related to the incompatibility issue that Noah reported with the Join.Me add-in for Outlook. Matthew has opened Zimbra Support case # 01082979 with a report of the issue.

Zimbra Connect Call Displaying Grey Screen
Marc G. asked if anyone had seen problems with missing video or a grey screen being displayed when starting a Zimbra Connect (Instant Meeting) call. Randy L. said that this likely indicates that a TURN server needs to be setup, as Connect may be having trouble creating a peer-to-peer connection between the call participants. He suggested referring to a how-to article ( viewtopic.php?f=45&t=67960 ) on setting up a TURN server with the popular reTURN package.


Randy Leiker
Skyway Networks, LLC
User avatar
rleiker
Advanced member
Advanced member
Posts: 149
Joined: Tue Jan 07, 2020 8:23 pm
Location: Kansas City
Contact:

Re: December 2020 Zeta Alliance Weekly Call Summaries

Post by rleiker »

Hello Zimbra Community,

Here is a summary of this week’s conference call. A few brief reminders: December 15, 2020

Configuring a TURN Server for TLS With Zimbra Connect
Matthew F. asked if anyone on the call had had success configuring a TURN server to use TLS, for use with Zimbra Connect. Randy L. said he has done this in the past with one of his reTURN servers, as partially described in this how-to ( viewtopic.php?f=45&t=67960 ). Matthew then asked if Randy had been able to configure it for newer protocols such as TLS 1.2 or TLS 1.3. Upon checking the documentation for the reTURN project more closely, Randy found this page ( https://www.resiprocate.org/TLS ) that suggests the reTURN project only supports the deprecated SSL v2/3 and TLS v1.0 protocols, with no support yet for TLS 1.1 through 1.3, even though news from the reTURN project ( https://www.resiprocate.org/Main_Page#News ) suggests they have integrated support for OpenSSL 1.1.1. OpenSSL 1.1.1 includes support for up to TLS 1.3. Randy said that in a Zeta Alliance call earlier in the year, Cine (Zextras), had recommended not using TLS on a TURN server with Zimbra Connect due to performance concerns identified earlier by Zextras during testing. Randy added that Matthew might want to confirm this on his own, perhaps with another TURN server distribution that supports TLS 1.2/1.3, however the new Zextras Team Video Server ( https://docs.zextras.com/zextras-suite- ... erver.html ) eliminates the need to deploy a separate STUN/TURN server for use with Zimbra Connect. But, a brief scan of the Team View Server documentation does not indicate if it also offers TLS support or not.

Unexpected TCP Port 8743 Connections To Zimbra
Matthew F. said that he recently noticed a large number of TCP port 8743 connections to Nginx, in his Zimbra cluster, from his external Internet gateway, but noted that Nginx is not configured to listen on this port. He asked if anyone knew of a service in Zimbra that normally uses this port, however no one on the call had heard of this port being used within Zimbra.

Upcoming Zimbra Patches
Mark S. asked if anyone knew of the release date and details of what will be included for 8.8.15 Patch 17 and 9.0 Patch 10. He said that December 16th was listed as the anticipated release date in the Zimbra Partner Portal for these patches, but John E. said that he was not sure the patches would be released on this date since he had not yet seen internal notes that Zimbra developers normally release following QA testing of a new patch, prior to a patch release.

Next Zeta Alliance Call: January 5th, 2021
The Tuesday, December 15th call is the last Zeta Alliance call for 2020. Weekly Zeta Alliance calls will resume on Tuesday, January 5th, 2021 at the regular time.


Randy Leiker
Skyway Networks, LLC
ghen
Outstanding Member
Outstanding Member
Posts: 259
Joined: Thu May 12, 2016 1:56 pm
Location: Belgium
ZCS/ZD Version: 9.0.0

Re: December 2020 Zeta Alliance Weekly Call Summaries

Post by ghen »

Is there any indication when the updated OpenSSL and nginx packages will be formally released? (ie. out of beta) Together with an upcoming patch, or independently?
User avatar
rleiker
Advanced member
Advanced member
Posts: 149
Joined: Tue Jan 07, 2020 8:23 pm
Location: Kansas City
Contact:

Re: December 2020 Zeta Alliance Weekly Call Summaries

Post by rleiker »

ghen wrote:Is there any indication when the updated OpenSSL and nginx packages will be formally released? (ie. out of beta) Together with an upcoming patch, or independently?
Officially from Zimbra, they have not provided a specific date yet. Unofficially, it is my impression we might see the new OpenSSL and Nginx releases included for production use as part of a patch for 8.8.15 and 9.0, possibly in the next 1-2 patch releases. Both the OpenSSL and Nginx updates have been in beta for quite a while now, and I think they are nearing the end of their testing. Since they release one patch about every month, that might indicate a release sometime in late January or February.
ghen
Outstanding Member
Outstanding Member
Posts: 259
Joined: Thu May 12, 2016 1:56 pm
Location: Belgium
ZCS/ZD Version: 9.0.0

Re: December 2020 Zeta Alliance Weekly Call Summaries

Post by ghen »

Thanks.
We've been running and testing these in our lab for quite some time now (while they were still work in progress on github), and they have been working fine.
Post Reply