[Users] Zimbra 8.7.0 Upgrade Concerns Expanded

[Malte Stretz]

Hi Mark,

on the OpenLDAP bug Quanah wrote:

> Backing out various changes, I tracked this down to the recent rewrite of 
> ITS8054.  As soon as that patch is introduced, changes are lost, causing 
> this issue (and 8493).

Ie. the root cause seems to be ITS#8054. I looked at the OpenLDAP Changelog 
and couldn't find any reference to ITS#8054 so I assumed that this feature was 
backported to the Zimbra OpenLDAP. I then had a look at the branches and found 
an ITS8054.patch which was added between 8.5.0 and 8.6.0. So I assume that 
8.6.0 is affected as well (see below). I can be wrong of course :-)

> [stretz:~/Source/Zimbra/zimbra-foss/ThirdParty] judaspriest-foss+* 0s ± git
> checkout judaspriest-860-foss
> Checking out files: 100% (32708/32708), done.
> Switched to branch 'judaspriest-860-foss'
> Your branch is up-to-date with 'origin/judaspriest-860-foss'.
> [stretz:~/Source/Zimbra/zimbra-foss/ThirdParty] judaspriest-860-foss+* 7s ±
> ls -l openldap/patches/
> total 76
> -rw-rw-r-- 1 stretz stretz  1680 Sep 16 15:57 index-slot-increase.patch
> -rw-rw-r-- 1 stretz stretz  2660 Sep 16 15:57 ITS5037.patch
> -rw-rw-r-- 1 stretz stretz  6923 Sep 16 15:57 ITS7683.patch
> -rw-rw-r-- 1 stretz stretz  7343 Sep 16 15:57 ITS8054.patch
> -rw-rw-r-- 1 stretz stretz   757 Sep 16 15:57 leopard.fix
> -rw-rw-r-- 1 stretz stretz 36385 Sep 16 15:57 threadpool.patch
> -rw-rw-r-- 1 stretz stretz  9982 Sep 16 15:57 writers.patch
> [stretz:~/Source/Zimbra/zimbra-foss/ThirdParty] judaspriest-860-foss+* 0s ±
> git checkout judaspriest-850-foss
> Checking out files: 100% (16109/16109),
> done.
> Switched to branch 'judaspriest-850-foss'
> Your branch is up-to-date with 'origin/judaspriest-850-foss'.
> [stretz:~/Source/Zimbra/zimbra-foss/ThirdParty] judaspriest-850-foss+* 5s ±
> ls -l openldap/patches/
> total 156
> -rw-rw-r-- 1 stretz stretz 51283 Sep 16 15:58 index.patch
> -rw-rw-r-- 1 stretz stretz  1680 Sep 16 15:57 index-slot-increase.patch
> -rw-rw-r-- 1 stretz stretz  2660 Sep 16 15:57 ITS5037.patch
> -rw-rw-r-- 1 stretz stretz  4131 Sep 16 15:58 ITS7705.patch
> -rw-rw-r-- 1 stretz stretz   581 Sep 16 15:58 ITS7849.patch
> -rw-rw-r-- 1 stretz stretz   757 Sep 16 15:57 leopard.fix
> -rw-rw-r-- 1 stretz stretz 66348 Sep 16 15:58 threadpool.patch
> -rw-rw-r-- 1 stretz stretz 10559 Sep 16 15:58 writers.patch

On Friday, 16 September 2016 09:50:05 CEST L. Mark Stone wrote:
> My understanding is that the regression introduced in OpenLDAP responsible
> for this out-of-sync issue was made after the version of OpenLDAP shipped
> in 8.6.0, including patches.
> 
> Quanah has commented on the ITS referenced in Bugzilla, and when I read
> through his postings in the ITS it didn't look to me like 8.6.0 is
> impacted. I could very well be wrong (wouldn't be the first time!) but
> would be grateful to understand why you believe 8.6.0 would be impacted
> please.
> 
> Thanks!
> Mark
> ___________________________________________________________
> A Message From... L. Mark Stone, General Manager
> 
> "Uptime. All the time." ® www.reliablenetworks.com
> 
> Fourteen Years In Business! 2003 - 2016!
> 
> 477 Congress Street, Suite 812 | Portland, ME 04101 | ( 207) 772-5678
> Citrix XenApp/XenDesktop Hosting | SOC 2 Type II Audit
> Zimbra Groupware | Mission-Critical Cl oud Hosting
> 
> This email may contain information that is privileged and confidential.
> If you suspect that you were not intended to receive it, please delete
> it and notify us as soon as possible. Thank you.
> 
> > From: "Malte Stretz" <mss at msquadrat.de>
> > To: users at lists.zetalliance.org
> > Cc: devel at lists.zetalliance.org
> > Sent: Friday, September 16, 2016 9:26:16 AM
> > Subject: Re: [Users] Zimbra 8.7.0 Upgrade Concerns Expanded
> > 
> > Hi again,
> > 
> > I have to correct myself: I looked at the wrong branch and
> > judaspriest-860-
> > foss does carry an ITS8054.patch so I guess version 8.6 is affected as
> > well? According to the Git log it was added on 2015-11-10, unfortunately
> > is there no Bugzilla reference in the commit message.
> > 
> > Regards,
> > Malte
> > 
> > On Friday, 16 September 2016 15:21:31 CEST Malte Stretz wrote:
> > > Hi Mark,
> > > 
> > > thanks for the pointer to the LDAP replication bug. Just to be sure I
> > > checked if ITS8054 was backported to the OpenLDAP in version 8.6 as well
> > > and luckily it wasn't.
> > > 
> > > Our general recommendation for our customers for any Zimbra upgrades is
> > > not
> > > to do it until at least one patch release is available. Ie. never use a
> > > dot-zero unless you have really good reasons to do so.
> > > 
> > > That's one reason I am still looking forward to a 8.6.1 rollup release
> > > eagerly. Unfortunately it looks like it will never happen :-/
> > > 
> > > Cheers,
> > > Malte
> > > 
> > > On Friday, 16 September 2016 00:34:03 CEST L. Mark Stone wrote:
> > > > I did a little more bug researching tonight as part of trying to get a
> > > > sense how far away an 8.6.1, 8.71 or 8.6.0 Patch8 release might be, to
> > > > fix the Oracle padding bug (and others). As compared to previous
> > > > bugzilla
> > > > searches I've done, there seems to be not as much activity on the open
> > > > bugs as there was earlier in the summer. Maybe I'm doing the searches
> > > > sub
> > > > optimally...
> > > > 
> > > > More importantly though, an LDAP MMR bug filed by Quanah caused me to
> > > > update my blog post on upgrading to 8.7.0:
> > > > http://www.reliablenetworks.com/zimbra-8-7-0-fine-new-installs-wait-li
> > > > ttle
> > > > -> longer-though-upgrade/
> > > > 
> > > > Essentially, I've shrunk my 8.7.0 upgrade recommendation eligibility
> > > > further by eliminating any Zimbra farm with multiple LDAP servers.
> > > > It's
> > > > pretty much new installations with only one LDAP server which should
> > > > consider 8.7.0 as of this writing.
> > > > 
> > > > See for reference:
> > > > https://bugzilla.zimbra.com/show_bug.cgi?id=106513
> > > > http://www.openldap.org/its/index.cgi/?findid=8490
> > > > 
> > > > Hope that helps,
> > > > Mark
> > > > ___________________________________________________________
> > > > A Message From... L. Mark Stone, General Manager
> > > > 
> > > > "Uptime. All the time." ® www.reliablenetworks.com
> > > > 
> > > > 
> > > > 
> > > > 
> > > > 
> > > > Fourteen Years In Business! 2003 - 2016!
> > > > 
> > > > 
> > > > 477 Congress Street, Suite 812 | Portland, ME 04101 | ( 207) 772-5678
> > > > Citrix XenApp/XenDesktop Hosting | SOC 2 Type II Audit
> > > > Zimbra Groupware | Mission-Critical Cl oud Hosting
> > > > 
> > > > 
> > > > This email may contain information that is privileged and
> > > > confidential.
> > > > If you suspect that you were not intended to receive it, please delete
> > > > it and notify us as soon as possible. Thank you.