<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Mark,<br>
<br>
That's interesting. Now I remember seeing these warnings before
which is probably why I raised <span><span
style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraImapInactiveSessionEhcacheSize
to 104857600 in the past.<br>
Can't remember exactly and apparently I didn't take note of this
change which is quite unusual. :-D<br>
<br>
I just had a look in mailbox.log files from 8 stores and 11.000
staff accounts and only found 14 records as such from March 1st
till today, so I guess raising the value did help.<br>
<br>
FWIW, the values you provided before (8.8.10 latest patch) are
still the same in latest 8.8.11 P3.<br>
<br>
Cheers,<br>
Frédéric.<br>
</span></span><br>
<div class="moz-cite-prefix">Le 19/03/2019 à 15:00, L Mark Stone a
écrit :<br>
</div>
<blockquote type="cite"
cite="mid:BL0PR16MB2225E194945A5DE361BED715B5400@BL0PR16MB2225.namprd16.prod.outlook.com">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
<div id="divtagdefaultwrapper"
style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;"
dir="ltr">
<p style="margin-top:0;margin-bottom:0"><span style="color:
rgb(33, 33, 33); font-family: "Segoe UI",
"Segoe UI Web (West European)", "Segoe
UI", -apple-system, system-ui, Roboto, "Helvetica
Neue", sans-serif; font-size: 15px;">Frédéric,</span><br>
</p>
<p style="margin-top:0;margin-bottom:0"><span style="color:
rgb(33, 33, 33); font-family: "Segoe UI",
"Segoe UI Web (West European)", "Segoe
UI", -apple-system, system-ui, Roboto, "Helvetica
Neue", sans-serif; font-size: 15px;"><br>
</span></p>
<p style="margin-top:0;margin-bottom:0"><span style="color:
rgb(33, 33, 33); font-family: "Segoe UI",
"Segoe UI Web (West European)", "Segoe
UI", -apple-system, system-ui, Roboto, "Helvetica
Neue", sans-serif; font-size: 15px;">mailbox.log had
errors like this (some entries modified for privacy)</span></p>
<p style="margin-top:0;margin-bottom:0"><span style="color:
rgb(33, 33, 33); font-family: "Segoe UI",
"Segoe UI Web (West European)", "Segoe
UI", -apple-system, system-ui, Roboto, "Helvetica
Neue", sans-serif; font-size: 15px;"><br>
</span></p>
<p style="margin-top:0;margin-bottom:0"><span style="color:
rgb(33, 33, 33); font-family: "Segoe UI",
"Segoe UI Web (West European)", "Segoe
UI", -apple-system, system-ui, Roboto, "Helvetica
Neue", sans-serif; font-size: 15px;"><span
style="font-family: arial, verdana, tahoma, sans-serif;
font-size: 10pt;">2018-08-02 13:57:06,518 WARN
[ImapSSLServer-5] [name=</span><a
href="mailto:cfiddle@stepbystepny.org" style="color:
rgb(0, 51, 255); font-family: arial, verdana, tahoma,
sans-serif; font-size: 11px; padding-left: 4px;"
id="LPlnk83679" class="OWAAutoLink" previewremoved="true"
moz-do-not-send="true"><span style="font-size: 10pt;">u</span></a><span
style="font-size: 10pt;"><a class="moz-txt-link-abbreviated" href="mailto:ser@domain.tld">ser@domain.tld</a></span><span
style="font-family: arial, verdana, tahoma, sans-serif;
font-size: 11px;"><span style="font-size: 10pt;">;ip=10.7.57.17;oip=</span><span
style="font-size: 10pt;">xx.xx.xx.xx</span><span
style="font-size: 10pt;">;via=10.7.57.17(nginx/1.7.1);ua=Zimbra/8.8.8_GA_3008;cid=1325;]
CompoundCachingTier - Error overflowing
'8ec5c54f-eb59-4b22-adb6-2f2707617874:5:69952:1' into
lower caching tier
org.ehcache.impl.internal.store.offheap.OffHeapStore@4d0b8b8b </span></span><br
style="font-family: arial, verdana, tahoma, sans-serif;
font-size: 11px;">
<span style="font-family: arial, verdana, tahoma,
sans-serif; font-size: 10pt;">org.ehcache.core.spi.store.StoreAccessException:
The element with key
'8ec5c54f-eb59-4b22-adb6-2f2707617874:5:69952:1' is too
large to be stored in this offheap store. </span><br>
</span></p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Note this was back in
August, when the system was running 8.8.8. It may be that
Zimbra has increased the defaults since then in later
versions; the farm where I provided the various ehcache values
is 8.8.10 with the latest patch.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Hope that helps,</p>
<p style="margin-top:0;margin-bottom:0">Mark</p>
<div id="Signature">
<meta content="text/html; charset=UTF-8">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:
12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255,
255); font-family: Calibri, Arial, Helvetica, sans-serif,
Helvetica, EmojiFont, "Apple Color Emoji",
"Segoe UI Emoji", NotoColorEmoji, "Segoe UI
Symbol", "Android Emoji", EmojiSymbols;">
<p><strong>_________________________________________________</strong></p>
<p><strong>Another Message From... L. Mark Stone</strong></p>
<p><br>
</p>
</div>
</div>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt"
face="Calibri, sans-serif" color="#000000"><b>From:</b>
Frédéric Nass <a class="moz-txt-link-rfc2396E" href="mailto:frederic.nass@univ-lorraine.fr"><frederic.nass@univ-lorraine.fr></a><br>
<b>Sent:</b> Tuesday, March 19, 2019 9:50 AM<br>
<b>To:</b> L Mark Stone; Victor d'Agostino; David Touitou<br>
<b>Cc:</b> users; Info Zeta Alliance<br>
<b>Subject:</b> Re: [Users] Last security patch</font>
<div> </div>
</div>
<div style="background-color:#FFFFFF">Hello Mark,<br>
<br>
Can you share with us the WARN or ERROR messages that had
you contact Zimbra support initially ? So we can check if
we're also facing Ehcache issues on our ZCS infrastructures?<br>
<br>
Regards,<br>
Frédéric.<br>
<br>
<div class="x_moz-cite-prefix">Le 19/03/2019 à 14:45, L Mark
Stone a écrit :<br>
</div>
<blockquote type="cite">
<div
style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
As regards ehcache, I had a Support Case open with
Zimbra on this, and it was recommend to increase the
ehcache size.</div>
<div
style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div
style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
<span>This is what I have now:</span></div>
<div
style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
<span><br>
</span></div>
<div
style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
<span>
<p style="margin:0px; font:14px Menlo; margin:0px"><span
style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbra@my:~$
zmprov gacf | grep -i ehcach</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span
style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraActiveSyncEhcacheExpiration:
5m</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span
style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraActiveSyncEhcacheHeapSize:
10485760</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span
style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraActiveSyncEhcacheMaxDiskSize:
10737418240</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span
style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraImapActiveSessionEhcacheMaxDiskSize:
107374182400</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span
style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraImapInactiveSessionEhcacheMaxDiskSize:
107374182400</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span
style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraImapInactiveSessionEhcacheSize:
1048576</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span
style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbra@my:~$<span> </span></span></p>
<br>
</span><span></span>Hope that helps,</div>
<div
style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
Mark</div>
<div id="x_signature">
<div id="x_divtagdefaultwrapper" dir="ltr"
style="font-size:12pt; color:#000000;
background-color:#FFFFFF;
font-family:Calibri,Arial,Helvetica,sans-serif">
<p style="margin-top:0px; margin-bottom:0px"><strong>_________________________________________________</strong></p>
<p style="margin-top:0px; margin-bottom:0px"><strong>Another
Message From... L. Mark Stone</strong></p>
<p style="margin-top:0px; margin-bottom:0px"><br>
</p>
</div>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font
style="font-size:11pt" face="Calibri, sans-serif"
color="#000000"><b>From:</b> Victor d'Agostino
<a class="x_moz-txt-link-rfc2396E OWAAutoLink"
href="mailto:d.agostino.victor@gmail.com"
id="LPlnk314963" previewremoved="true"
moz-do-not-send="true">
<d.agostino.victor@gmail.com></a><br>
<b>Sent:</b> Tuesday, March 19, 2019 9:36 AM<br>
<b>To:</b> David Touitou<br>
<b>Cc:</b> L Mark Stone; users; Info Zeta Alliance<br>
<b>Subject:</b> Re: [Users] Last security patch</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div dir="ltr">Hello again<br>
<br>
Security apart the article lets suppose a <i>zimbraMemcachedClientServerList</i>
empty attribute is always safer, but IMAP
performance could be better with it because the
zimbra store would use the memcached service for
IMAP protocol instead of EhCache.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">The official Zimbra guide says :<br>
zimbraMemcachedClientServerList : list of host:port
for memcached servers;<b> set to empty value to
disable the use of memcached
</b></div>
<div dir="ltr"><br>
</div>
<div dir="ltr">I also have an empty attribute on my
Zimbra 8.8.8 multi-store environment. If I have I/O
performance issues on my zimbra stores, should I set
the zimbraMemcachedClientServerList server attribute
or let it empty ?<br>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Why does the memcached service is
better than EhCache which is memory based ?<br>
<br>
Regards,<br>
Victor<br>
<br>
<br>
<br clear="all">
<div>
<div dir="ltr" class="x_x_gmail_signature">
<div dir="ltr">
<div>Cordialement,<br>
</div>
Victor d'Agostino<br>
</div>
</div>
</div>
<br>
</div>
</div>
<br>
<div class="x_x_gmail_quote">
<div dir="ltr" class="x_x_gmail_attr">Le mar. 19 mars
2019 à 14:30, David Touitou <<a
href="mailto:david@network-studio.com"
id="LPlnk521565" class="OWAAutoLink"
previewremoved="true" moz-do-not-send="true">david@network-studio.com</a>>
a écrit :<br>
</div>
<blockquote class="x_x_gmail_quote" style="margin:0px
0px 0px 0.8ex; border-left:1px solid
rgb(204,204,204); padding-left:1ex">
<br>
> Thanks David; it wasn't clear to me that the
author was saying in the last<br>
> section that all these exposures had been
fixed.<br>
<br>
I might be wrong.<br>
But considereing there are attributed CVE numbers
and patches, it looks to me as standard procedure:<br>
. vulnerability discovered and embargoed<br>
. software company contacted<br>
. software company acknowledged the vulnerability<br>
. software company issued patch<br>
. a couple days later, vulnerability went public
with explanations<br>
<br>
David<br>
<br>
</blockquote>
</div>
</div>
</blockquote>
<br>
</div>
</div>
</div>
</blockquote>
<br>
</body>
</html>