<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0"><span style="color: rgb(33, 33, 33); font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, system-ui, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;">Frédéric,</span><br>
</p>
<p style="margin-top:0;margin-bottom:0"><span style="color: rgb(33, 33, 33); font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, system-ui, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;"><br>
</span></p>
<p style="margin-top:0;margin-bottom:0"><span style="color: rgb(33, 33, 33); font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, system-ui, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;">mailbox.log had errors like this
(some entries modified for privacy)</span></p>
<p style="margin-top:0;margin-bottom:0"><span style="color: rgb(33, 33, 33); font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, system-ui, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;"><br>
</span></p>
<p style="margin-top:0;margin-bottom:0"><span style="color: rgb(33, 33, 33); font-family: "Segoe UI", "Segoe UI Web (West European)", "Segoe UI", -apple-system, system-ui, Roboto, "Helvetica Neue", sans-serif; font-size: 15px;"><span style="font-family: arial, verdana, tahoma, sans-serif; font-size: 10pt;">2018-08-02
13:57:06,518 WARN [ImapSSLServer-5] [name=</span><a href="mailto:cfiddle@stepbystepny.org" style="color: rgb(0, 51, 255); font-family: arial, verdana, tahoma, sans-serif; font-size: 11px; padding-left: 4px;" id="LPlnk83679" class="OWAAutoLink" previewremoved="true"><span style="font-size: 10pt;">u</span></a><span style="font-size: 10pt;">ser@domain.tld</span><span style="font-family: arial, verdana, tahoma, sans-serif; font-size: 11px;"><span style="font-size: 10pt;">;ip=10.7.57.17;oip=</span><span style="font-size: 10pt;">xx.xx.xx.xx</span><span style="font-size: 10pt;">;via=10.7.57.17(nginx/1.7.1);ua=Zimbra/8.8.8_GA_3008;cid=1325;]
CompoundCachingTier - Error overflowing '8ec5c54f-eb59-4b22-adb6-2f2707617874:5:69952:1' into lower caching tier org.ehcache.impl.internal.store.offheap.OffHeapStore@4d0b8b8b </span></span><br style="font-family: arial, verdana, tahoma, sans-serif; font-size: 11px;">
<span style="font-family: arial, verdana, tahoma, sans-serif; font-size: 10pt;">org.ehcache.core.spi.store.StoreAccessException: The element with key '8ec5c54f-eb59-4b22-adb6-2f2707617874:5:69952:1' is too large to be stored in this offheap store. </span><br>
</span></p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Note this was back in August, when the system was running 8.8.8. It may be that Zimbra has increased the defaults since then in later versions; the farm where I provided the various ehcache values is 8.8.10 with the latest
patch.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Hope that helps,</p>
<p style="margin-top:0;margin-bottom:0">Mark</p>
<div id="Signature">
<meta content="text/html; charset=UTF-8">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255); font-family: Calibri, Arial, Helvetica, sans-serif, Helvetica, EmojiFont, "Apple Color Emoji", "Segoe UI Emoji", NotoColorEmoji, "Segoe UI Symbol", "Android Emoji", EmojiSymbols;">
<p><strong>_________________________________________________</strong></p>
<p><strong>Another Message From... L. Mark Stone</strong></p>
<p><br>
</p>
</div>
</div>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" style="font-size:11pt" color="#000000"><b>From:</b> Frédéric Nass <frederic.nass@univ-lorraine.fr><br>
<b>Sent:</b> Tuesday, March 19, 2019 9:50 AM<br>
<b>To:</b> L Mark Stone; Victor d'Agostino; David Touitou<br>
<b>Cc:</b> users; Info Zeta Alliance<br>
<b>Subject:</b> Re: [Users] Last security patch</font>
<div> </div>
</div>
<div style="background-color:#FFFFFF">Hello Mark,<br>
<br>
Can you share with us the WARN or ERROR messages that had you contact Zimbra support initially ? So we can check if we're also facing Ehcache issues on our ZCS infrastructures?<br>
<br>
Regards,<br>
Frédéric.<br>
<br>
<div class="x_moz-cite-prefix">Le 19/03/2019 à 14:45, L Mark Stone a écrit :<br>
</div>
<blockquote type="cite">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
As regards ehcache, I had a Support Case open with Zimbra on this, and it was recommend to increase the ehcache size.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span>This is what I have now:</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span><br>
</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<span>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures; font-variant-ligatures:no-common-ligatures">zimbra@my:~$ zmprov gacf | grep -i ehcach</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures; font-variant-ligatures:no-common-ligatures">zimbraActiveSyncEhcacheExpiration: 5m</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures; font-variant-ligatures:no-common-ligatures">zimbraActiveSyncEhcacheHeapSize: 10485760</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures; font-variant-ligatures:no-common-ligatures">zimbraActiveSyncEhcacheMaxDiskSize: 10737418240</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures; font-variant-ligatures:no-common-ligatures">zimbraImapActiveSessionEhcacheMaxDiskSize: 107374182400</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures; font-variant-ligatures:no-common-ligatures">zimbraImapInactiveSessionEhcacheMaxDiskSize: 107374182400</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures; font-variant-ligatures:no-common-ligatures">zimbraImapInactiveSessionEhcacheSize: 1048576</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures; font-variant-ligatures:no-common-ligatures">zimbra@my:~$<span> </span></span></p>
<br>
</span><span></span>Hope that helps,</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
Mark</div>
<div id="x_signature">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; background-color:#FFFFFF; font-family:Calibri,Arial,Helvetica,sans-serif">
<p style="margin-top:0px; margin-bottom:0px"><strong>_________________________________________________</strong></p>
<p style="margin-top:0px; margin-bottom:0px"><strong>Another Message From... L. Mark Stone</strong></p>
<p style="margin-top:0px; margin-bottom:0px"><br>
</p>
</div>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Victor d'Agostino
<a class="x_moz-txt-link-rfc2396E OWAAutoLink" href="mailto:d.agostino.victor@gmail.com" id="LPlnk314963" previewremoved="true">
<d.agostino.victor@gmail.com></a><br>
<b>Sent:</b> Tuesday, March 19, 2019 9:36 AM<br>
<b>To:</b> David Touitou<br>
<b>Cc:</b> L Mark Stone; users; Info Zeta Alliance<br>
<b>Subject:</b> Re: [Users] Last security patch</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div dir="ltr">Hello again<br>
<br>
Security apart the article lets suppose a <i>zimbraMemcachedClientServerList</i> empty attribute is always safer, but IMAP performance could be better with it because the zimbra store would use the memcached service for IMAP protocol instead of EhCache.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">The official Zimbra guide says :<br>
zimbraMemcachedClientServerList : list of host:port for memcached servers;<b> set to empty value to disable the use of memcached
</b></div>
<div dir="ltr"><br>
</div>
<div dir="ltr">I also have an empty attribute on my Zimbra 8.8.8 multi-store environment. If I have I/O performance issues on my zimbra stores, should I set the zimbraMemcachedClientServerList server attribute or let it empty ?<br>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Why does the memcached service is better than EhCache which is memory based ?<br>
<br>
Regards,<br>
Victor<br>
<br>
<br>
<br clear="all">
<div>
<div dir="ltr" class="x_x_gmail_signature">
<div dir="ltr">
<div>Cordialement,<br>
</div>
Victor d'Agostino<br>
</div>
</div>
</div>
<br>
</div>
</div>
<br>
<div class="x_x_gmail_quote">
<div dir="ltr" class="x_x_gmail_attr">Le mar. 19 mars 2019 à 14:30, David Touitou <<a href="mailto:david@network-studio.com" id="LPlnk521565" class="OWAAutoLink" previewremoved="true">david@network-studio.com</a>> a écrit :<br>
</div>
<blockquote class="x_x_gmail_quote" style="margin:0px 0px 0px
0.8ex; border-left:1px solid rgb(204,204,204); padding-left:1ex">
<br>
> Thanks David; it wasn't clear to me that the author was saying in the last<br>
> section that all these exposures had been fixed.<br>
<br>
I might be wrong.<br>
But considereing there are attributed CVE numbers and patches, it looks to me as standard procedure:<br>
. vulnerability discovered and embargoed<br>
. software company contacted<br>
. software company acknowledged the vulnerability<br>
. software company issued patch<br>
. a couple days later, vulnerability went public with explanations<br>
<br>
David<br>
<br>
</blockquote>
</div>
</div>
</blockquote>
<br>
</div>
</div>
</div>
</body>
</html>