<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body dir="auto">
Hah! <br>
<br>
<div id="AppleMailSignature" dir="ltr">___________________________
<div>L. Mark Stone</div>
<div>Sent from my iPhone</div>
</div>
<div dir="ltr"><br>
On Mar 20, 2019, at 6:50 AM, Frédéric Nass <<a href="mailto:frederic.nass@univ-lorraine.fr">frederic.nass@univ-lorraine.fr</a>> wrote:<br>
<br>
</div>
<blockquote type="cite">
<div dir="ltr">Hey Mark,<br>
<br>
Now I know where I got this from! :-D<br>
<br>
<a class="moz-txt-link-freetext" href="https://forums.zimbra.org/viewtopic.php?t=62916">https://forums.zimbra.org/viewtopic.php?t=62916</a><br>
<br>
Frédéric.<br>
<br>
<div class="moz-cite-prefix">Le 19/03/2019 à 16:24, Frédéric Nass a écrit :<br>
</div>
<blockquote type="cite" cite="mid:6de8b914-286b-05b5-8615-47a1d34fc4b9@univ-lorraine.fr">
Mark,<br>
<br>
That's interesting. Now I remember seeing these warnings before which is probably why I raised
<span><span style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraImapInactiveSessionEhcacheSize to 104857600 in the past.<br>
Can't remember exactly and apparently I didn't take note of this change which is quite unusual. :-D<br>
<br>
I just had a look in mailbox.log files from 8 stores and 11.000 staff accounts and only found 14 records as such from March 1st till today, so I guess raising the value did help.<br>
<br>
FWIW, the values you provided before (8.8.10 latest patch) are still the same in latest 8.8.11 P3.<br>
<br>
Cheers,<br>
Frédéric.<br>
</span></span><br>
<div class="moz-cite-prefix">Le 19/03/2019 à 15:00, L Mark Stone a écrit :<br>
</div>
<blockquote type="cite" cite="mid:BL0PR16MB2225E194945A5DE361BED715B5400@BL0PR16MB2225.namprd16.prod.outlook.com">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0"><span style="color:
rgb(33, 33, 33); font-family: "Segoe UI",
"Segoe UI Web (West European)", "Segoe
UI", -apple-system, system-ui, Roboto,
"Helvetica Neue", sans-serif; font-size: 15px;">Frédéric,</span><br>
</p>
<p style="margin-top:0;margin-bottom:0"><span style="color:
rgb(33, 33, 33); font-family: "Segoe UI",
"Segoe UI Web (West European)", "Segoe
UI", -apple-system, system-ui, Roboto,
"Helvetica Neue", sans-serif; font-size: 15px;"><br>
</span></p>
<p style="margin-top:0;margin-bottom:0"><span style="color:
rgb(33, 33, 33); font-family: "Segoe UI",
"Segoe UI Web (West European)", "Segoe
UI", -apple-system, system-ui, Roboto,
"Helvetica Neue", sans-serif; font-size: 15px;">mailbox.log
had errors like this (some entries modified for privacy)</span></p>
<p style="margin-top:0;margin-bottom:0"><span style="color:
rgb(33, 33, 33); font-family: "Segoe UI",
"Segoe UI Web (West European)", "Segoe
UI", -apple-system, system-ui, Roboto,
"Helvetica Neue", sans-serif; font-size: 15px;"><br>
</span></p>
<p style="margin-top:0;margin-bottom:0"><span style="color:
rgb(33, 33, 33); font-family: "Segoe UI",
"Segoe UI Web (West European)", "Segoe
UI", -apple-system, system-ui, Roboto,
"Helvetica Neue", sans-serif; font-size: 15px;"><span style="font-family: arial, verdana, tahoma, sans-serif;
font-size: 10pt;">2018-08-02
13:57:06,518 WARN [ImapSSLServer-5] [name=</span><a href="mailto:cfiddle@stepbystepny.org" style="color:
rgb(0, 51, 255); font-family: arial, verdana, tahoma,
sans-serif; font-size: 11px; padding-left: 4px;" id="LPlnk83679" class="OWAAutoLink" previewremoved="true" moz-do-not-send="true"><span style="font-size: 10pt;">u</span></a><span style="font-size: 10pt;"><a class="moz-txt-link-abbreviated" href="mailto:ser@domain.tld" moz-do-not-send="true">ser@domain.tld</a></span><span style="font-family: arial, verdana, tahoma, sans-serif;
font-size: 11px;"><span style="font-size: 10pt;">;ip=10.7.57.17;oip=</span><span style="font-size: 10pt;">xx.xx.xx.xx</span><span style="font-size: 10pt;">;via=10.7.57.17(nginx/1.7.1);ua=Zimbra/8.8.8_GA_3008;cid=1325;]
CompoundCachingTier - Error overflowing '8ec5c54f-eb59-4b22-adb6-2f2707617874:5:69952:1' into lower caching tier org.ehcache.impl.internal.store.offheap.OffHeapStore@4d0b8b8b </span></span><br style="font-family: arial, verdana, tahoma, sans-serif;
font-size: 11px;">
<span style="font-family: arial, verdana, tahoma,
sans-serif; font-size: 10pt;">org.ehcache.core.spi.store.StoreAccessException: The element with key '8ec5c54f-eb59-4b22-adb6-2f2707617874:5:69952:1' is too large to be stored in this offheap
store. </span><br>
</span></p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Note this was back in August, when the system was running 8.8.8. It may be that Zimbra has increased the defaults since then in later versions; the farm where I provided the various ehcache values is 8.8.10 with the latest
patch.</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">Hope that helps,</p>
<p style="margin-top:0;margin-bottom:0">Mark</p>
<div id="Signature">
<meta content="text/html; charset=UTF-8">
<div id="divtagdefaultwrapper" dir="ltr" style="font-size:
12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255,
255); font-family: Calibri, Arial, Helvetica, sans-serif,
Helvetica, EmojiFont, "Apple Color Emoji",
"Segoe UI Emoji", NotoColorEmoji, "Segoe UI
Symbol", "Android Emoji", EmojiSymbols;">
<p><strong>_________________________________________________</strong></p>
<p><strong>Another Message From... L. Mark Stone</strong></p>
<p><br>
</p>
</div>
</div>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Frédéric Nass
<a class="moz-txt-link-rfc2396E" href="mailto:frederic.nass@univ-lorraine.fr" moz-do-not-send="true">
<frederic.nass@univ-lorraine.fr></a><br>
<b>Sent:</b> Tuesday, March 19, 2019 9:50 AM<br>
<b>To:</b> L Mark Stone; Victor d'Agostino; David Touitou<br>
<b>Cc:</b> users; Info Zeta Alliance<br>
<b>Subject:</b> Re: [Users] Last security patch</font>
<div> </div>
</div>
<div style="background-color:#FFFFFF">Hello Mark,<br>
<br>
Can you share with us the WARN or ERROR messages that had you contact Zimbra support initially ? So we can check if we're also facing Ehcache issues on our ZCS infrastructures?<br>
<br>
Regards,<br>
Frédéric.<br>
<br>
<div class="x_moz-cite-prefix">Le 19/03/2019 à 14:45, L Mark Stone a écrit :<br>
</div>
<blockquote type="cite">
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
As regards ehcache, I had a Support Case open with Zimbra on this, and it was recommend to increase the ehcache size.</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
<span>This is what I have now:</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
<span><br>
</span></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
<span>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbra@my:~$ zmprov gacf | grep -i ehcach</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraActiveSyncEhcacheExpiration: 5m</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraActiveSyncEhcacheHeapSize: 10485760</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraActiveSyncEhcacheMaxDiskSize: 10737418240</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraImapActiveSessionEhcacheMaxDiskSize: 107374182400</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraImapInactiveSessionEhcacheMaxDiskSize: 107374182400</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbraImapInactiveSessionEhcacheSize: 1048576</span></p>
<p style="margin:0px; font:14px Menlo; margin:0px"><span style="font-variant-ligatures:no-common-ligatures;
font-variant-ligatures:no-common-ligatures">zimbra@my:~$<span> </span></span></p>
<br>
</span><span></span>Hope that helps,</div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;
font-size:12pt; color:rgb(0,0,0)">
Mark</div>
<div id="x_signature">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000;
background-color:#FFFFFF;
font-family:Calibri,Arial,Helvetica,sans-serif">
<p style="margin-top:0px; margin-bottom:0px"><strong>_________________________________________________</strong></p>
<p style="margin-top:0px; margin-bottom:0px"><strong>Another Message From... L. Mark Stone</strong></p>
<p style="margin-top:0px; margin-bottom:0px"><br>
</p>
</div>
</div>
<hr tabindex="-1" style="display:inline-block;
width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> Victor d'Agostino
<a class="x_moz-txt-link-rfc2396E OWAAutoLink" href="mailto:d.agostino.victor@gmail.com" id="LPlnk314963" previewremoved="true" moz-do-not-send="true">
<d.agostino.victor@gmail.com></a><br>
<b>Sent:</b> Tuesday, March 19, 2019 9:36 AM<br>
<b>To:</b> David Touitou<br>
<b>Cc:</b> L Mark Stone; users; Info Zeta Alliance<br>
<b>Subject:</b> Re: [Users] Last security patch</font>
<div> </div>
</div>
<div>
<div dir="ltr">
<div dir="ltr">Hello again<br>
<br>
Security apart the article lets suppose a <i>zimbraMemcachedClientServerList</i> empty attribute is always safer, but IMAP performance could be better with it because the zimbra store would use the memcached service for IMAP protocol instead of EhCache.</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">The official Zimbra guide says :<br>
zimbraMemcachedClientServerList : list of host:port for memcached servers;<b> set to empty value to disable the use of memcached
</b></div>
<div dir="ltr"><br>
</div>
<div dir="ltr">I also have an empty attribute on my Zimbra 8.8.8 multi-store environment. If I have I/O performance issues on my zimbra stores, should I set the zimbraMemcachedClientServerList server attribute or let it empty ?<br>
</div>
<div dir="ltr"><br>
</div>
<div dir="ltr">Why does the memcached service is better than EhCache which is memory based ?<br>
<br>
Regards,<br>
Victor<br>
<br>
<br>
<br clear="all">
<div>
<div dir="ltr" class="x_x_gmail_signature">
<div dir="ltr">
<div>Cordialement,<br>
</div>
Victor d'Agostino<br>
</div>
</div>
</div>
<br>
</div>
</div>
<br>
<div class="x_x_gmail_quote">
<div dir="ltr" class="x_x_gmail_attr">Le mar. 19 mars 2019 à 14:30, David Touitou <<a href="mailto:david@network-studio.com" id="LPlnk521565" class="OWAAutoLink" previewremoved="true" moz-do-not-send="true">david@network-studio.com</a>> a écrit :<br>
</div>
<blockquote class="x_x_gmail_quote" style="margin:0px 0px 0px 0.8ex; border-left:1px
solid rgb(204,204,204); padding-left:1ex">
<br>
> Thanks David; it wasn't clear to me that the author was saying in the last<br>
> section that all these exposures had been fixed.<br>
<br>
I might be wrong.<br>
But considereing there are attributed CVE numbers and patches, it looks to me as standard procedure:<br>
. vulnerability discovered and embargoed<br>
. software company contacted<br>
. software company acknowledged the vulnerability<br>
. software company issued patch<br>
. a couple days later, vulnerability went public with explanations<br>
<br>
David<br>
<br>
</blockquote>
</div>
</div>
</blockquote>
<br>
</div>
</div>
</div>
</blockquote>
<br>
</blockquote>
<br>
</div>
</blockquote>
</body>
</html>