[Users] November 24, 2020 Zeta Alliance Conference Call Summary

[Randy Leiker]

Hello Zeta Alliance Community, 

Here is a summary of an earlier week’s conference call. A few brief reminders: 


    * Conference calls are every Tuesday and open to all using either the FreeConferenceCall.com VoIP app or via a dial-in number: [ https://www.freeconferencecall.com/wall/zetalliance | https://www.freeconferencecall.com/wall/zetalliance ] 
    * Each week’s call agenda can be found at: [ https://docs.google.com/document/d/1uUUDJpwp2CAylU6lxtbEdVcUX_qSbciyes6gLTWw2fY/edit | https://docs.google.com/document/d/1uUUDJpwp2CAylU6lxtbEdVcUX_qSbciyes6gLTWw2fY/edit ] 
    * A copy of each week’s summary is also posted to the Zimbra Forums: 
        * All Prior Months: [ https://forums.zimbra.org/viewforum.php?f=9 | https://forums.zimbra.org/viewforum.php?f=9 ] 
        * October 2020 : [ https://forums.zimbra.org/viewtopic.php?f=9&t=68823 | https://forums.zimbra.org/viewtopic.php?f=9&t=68823 ] 
        * November 2020 : [ https://forums.zimbra.org/viewtopic.php?f=9&t=68942 | https://forums.zimbra.org/viewtopic.php?f=9&t=68942 ] 
    * Constructive feedback on these call summaries is always welcome. 

November 24, 2020 

Zimbra Multi-Server Install Issue 
Mark S. said while working on a new multi-server install of Zimbra, he successfully installed one Zimbra server as a dedicated LDAP server, then upon attempting to install a second LDAP server (for LDAP high-availability), he encountered the following: 

Starting ldap...Done. 
Starting zmconfigd… 
Broadcast message from systemd-journald at smtp (Tue 2020-11-24 15:25:53 UTC): 
zmconfigd[14114]: Can't create listener socket: (-1, 'Unmapped exception: java.net.SocketException: Protocol family unavailable') Failed. 
Starting zmconfigd...failed. 

Mark said that he has IPv6 disabled on both servers. Barry D. said if Mark disables IPv6, the Zimbra installer will show this error and suggested enabling IPv6, but only with a link local address. Barry said he recalled a similar issue occurring when installing a new Zimbra Docs server with IPv6 disabled. Mark said he would try Barry’s suggestion and share the results on the next Zeta Alliance call. 

Patched jQuery Vulnerabilities In Zimbra 8.8.15 Patch 16 and 9.0 Patch 9 
Mark S. asked how much importance should be place on patching his Zimbra servers for the recently revealed vulnerabilities in jQuery 3.4.1, as described in the release notes ( [ https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P16 | https://wiki.zimbra.com/wiki/Zimbra_Releases/8.8.15/P16 ] ). John E. shared a jQuery post with some details ( [ https://blog.jquery.com/2020/05/04/jquery-3-5-1-released-fixing-a-regression | https://blog.jquery.com/2020/05/04/jquery-3-5-1-released-fixing-a-regression ] ). Mark S. said that it is his understanding that the vulnerabilities do not appear to be actively exploited, so he felt the jQuery update did not need to be treated as an emergency patch since it has a mid-range CVSS score of 6.5. 

Updated Zimbra Mobile Password Feature 
Cine shared that with the release of 8.8.15 Patch 16 and 9.0 Patch 9, management of mobile passwords has been moved out of the Zimbra Administration Console and in to the Zimbra Web Client, so that users can now manage their own mobile passwords, instead of only Zimbra Administrators. This has been implemented as a new Zimlet. Cine recommended reading the patch installation release notes carefully for instructions on how to install the new “zimbra-zimlet-auth” package from the Zimbra repo. This change still allows for mobile passwords to be managed from the Zimbra command line too. After installing the patches, refer to [ https://docs.zextras.com/zextras-suite-documentation/latest/auth.html#mobile-password | https://docs.zextras.com/zextras-suite-documentation/latest/auth.html#mobile-password ] for a how-to in using the new Zimlet. 

Additional Issues Fixed in 8.8.15 Patch 16 and 9.0 Patch 9 
Cine commented that these patches also fix an earlier issue with Mobile NG where any email accounts that were set to use a custom Zimbra ID, instead of the default UUID format were creating a problem with mobile device syncing. Certain characters such as / are not supported in Zimbra custom IDs. 

John E. commented that the patches also restore the various chart functionality in the Zimbra Administration Console that previously relied on Flash. They now use JavaScript to display, since Flash is end-of-life at the end of December 2020. He said that the upcoming road map for Zimbra for next year is anticipated to include a series of additional improvements for monitoring and metrics in Zimbra. 


Randy Leiker ( randy at skywaynetworks.com ) 
Skyway Networks, LLC 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zetalliance.org/pipermail/users_lists.zetalliance.org/attachments/20201201/b4e0126f/attachment.html>