Results 1 to 7 of 7

Thread: zimbra desktop + no security = login/passwords cleartext over network?

Hybrid View

  1. #1
    Join Date
    Nov 2012
    Posts
    62
    Rep Power
    3

    Default zimbra desktop + no security = login/passwords cleartext over network?

    Zimbra Desktop does not accept our self-signed certs inherently, so a proposed solution in our environment is just not using a secure connection.

    Does anyone know if this means the login/password are transmitted in clear or readable text at all when authenticating?

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by BloodyIron View Post
    Zimbra Desktop does not accept our self-signed certs inherently, so a proposed solution in our environment is just not using a secure connection.
    Why doesn't it accept the certificate, there is an option to accept self-signed certificates - are you saying that doesn't work?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    Join Date
    Nov 2012
    Posts
    62
    Rep Power
    3

    Default

    I only know of this setting through a config file change, not a GUI option. Am I missing it? So far though the setting via the config file has not reliably worked, but I haven't rigorously tested it.

  4. #4
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    When you connect to an account that has a self-signed certificate it gives you the option to accept it on the setup page for that account, have you not seen that option?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    Join Date
    Nov 2012
    Posts
    62
    Rep Power
    3

    Default

    For the Zimbra Desktop 7.2.2 client it just says Invalid or Untrusted certificate, and lets me see the error. I am not presented with a way to trust the certificate.

  6. #6
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by BloodyIron View Post
    I am not presented with a way to trust the certificate.
    I'm not at my machine at the moment but if I remember correctly, the error that you see should have an option to accept the untrusted certificate - I've used it often enough to know it exists.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Similar Threads

  1. zimbra desktop 7 : security SSL
    By simon-Hing in forum General Questions
    Replies: 3
    Last Post: 07-05-2011, 04:06 AM
  2. Storing cleartext passwords in LDAP
    By richsand in forum Administrators
    Replies: 0
    Last Post: 04-26-2011, 11:11 PM
  3. Enable Cleartext login over POP3.
    By joelserrano in forum Administrators
    Replies: 2
    Last Post: 03-31-2010, 05:32 AM
  4. Cleartext Login Disabled
    By alexebner in forum Administrators
    Replies: 2
    Last Post: 03-29-2010, 05:38 AM
  5. Replies: 3
    Last Post: 08-08-2008, 12:43 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •