Search found 1719 matches

by L. Mark Stone
Tue Oct 16, 2018 3:34 pm
Forum: Administrators
Topic: [Zimbra FOSS 8.8.10] Multi-server installation cannot authenticate against ldap replica
Replies: 5
Views: 838

Re: [Zimbra FOSS 8.8.10] Multi-server installation cannot authenticate against ldap replica

Let's check some more basics then. Please also don't obfuscate your FQDNs and IP addresses. If you environment is secured properly your actual FQDNs and IP addresses cannot help facilitate an exposure, and in any event most will be contained in all of your outbound email headers anyway. So on every ...
by L. Mark Stone
Mon Oct 15, 2018 3:38 pm
Forum: Installation and Upgrade
Topic: Installation architecture
Replies: 8
Views: 1442

Re: Installation architecture

For 250 users to get a little redundancy I’d install a standard single standalone server, and then add a second server as an LDAP replica, proxy and MTA server.

Hope that helps,
Mark
by L. Mark Stone
Sun Oct 14, 2018 5:54 pm
Forum: Administrators
Topic: reveal IP connection source from bruteforce authentication attempt
Replies: 13
Views: 1950

Re: reveal IP connection source from bruteforce authentication attempt

This scenario is what Zimbra’s DoSFilter or fail2ban are intended to address: block an offending IP address for some amount of time — before an account is hacked. Probably you already know that 8.6 is past end of life, so no more security fixes. Nginx is much better at handling this sort of nonsense...
by L. Mark Stone
Sun Oct 14, 2018 2:03 pm
Forum: Administrators
Topic: reveal IP connection source from bruteforce authentication attempt
Replies: 13
Views: 1950

Re: reveal IP connection source from bruteforce authentication attempt

First step is to configure Zimbra to log the originating IP address; there's a wiki for that: https://wiki.zimbra.com/wiki/Log_Files#Logging_the_Originating_IP You don't say what version of Zimbra you are running but I am going to presume you have Zimbra proxy running (required on all supported vers...
by L. Mark Stone
Sun Oct 14, 2018 2:00 pm
Forum: Administrators
Topic: [Zimbra FOSS 8.8.10] Multi-server installation cannot authenticate against ldap replica
Replies: 5
Views: 838

Re: [Zimbra FOSS 8.8.10] Multi-server installation cannot authenticate against ldap replica

Hi, and thanks I read the installation guide and I did what is told, I did configure the ldap_url to include the slave server, but the authentication don't work when the master is down. - If I stop the master, then I execute for example zmprov -l gaa from another server, the store for example, it t...
by L. Mark Stone
Fri Oct 12, 2018 3:34 pm
Forum: Русский язык-фор
Topic: цветные теги в общих папках
Replies: 1
Views: 537

Re: цветные теги в общих папках

Теги предназначены только для каждого пользователя и не могут быть доступны для разных почтовых ящиков. Используя Google Translate, чтобы написать это ...)

Надеюсь, это поможет,
Mark
by L. Mark Stone
Fri Oct 12, 2018 3:24 pm
Forum: Administrators
Topic: How to automatically create custom folders each time new user created
Replies: 3
Views: 625

Re: How to automatically create custom folders each time new user created

You may also want to reference the bulk provisioning wiki, which shows you how to feed commands into zmprov via a single file. zmprov can call zmmailbox. There are also a number of scripts around that leverage zmmailbox directly (Google is your friend...). I am not a programmer although I took a few...
by L. Mark Stone
Fri Oct 12, 2018 3:13 pm
Forum: Administrators
Topic: Considerations around the Forgot Password feature.
Replies: 3
Views: 770

Re: Considerations around the Forgot Password feature.

Were just some considerations.. zimbraAuthLdapURL and zimbraAuthLdapBindDn. You don't say explicitly that you set those two variables. Yes, actually set a complete, tested and working external ldap authentication against another zimbra server. I did'nt want to write a poem. May I suggest using the ...
by L. Mark Stone
Fri Oct 12, 2018 3:09 pm
Forum: Migration
Topic: [SOLVED] Zimbra test server - keep messages locally
Replies: 6
Views: 1117

Re: Zimbra test server - keep messages locally

Glad you got it sorted. FWIW, I typically recommend deploying dnscache on Zimbra servers for exactly this reason. It enables one to do proof-of-concept testing and then move to production with no changes whatsoever. I have a blog post about this; in your case you could have used your AD servers with...

Go to advanced search