ZCS 8 FOSS - Web proxy Issues

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
sviriyala
Posts: 41
Joined: Sat Sep 13, 2014 1:49 am

ZCS 8 FOSS - Web proxy Issues

Postby sviriyala » Fri Nov 23, 2012 2:31 am

Hi All,
I have a strange issue with Web Proxy. My Config is a Multiserver install on RHEL 6.2 64 bit. Have Web Proxy installed on a separate box. The issue is while I am able to login using web sometimes, at other times (seems quite random) it re-directs the requests directly to the mailbox server. And I am not getting a clue as to when this happens? Isn't the whole idea of proxy that the user doesn't directly connect to the mailbox server? I have been trying to look at the log files (/opt/zimbra/log/ nginx.log & nginx.access.log). No clue.
For exampl:
https://webmail.mydomain.com works fine some times (webmail.mydomain.com) being the web proxy host
and at other times the moment I login it immediately re-directs the url to
https://mailstore1.mydomain.com or
This">https://mailstore2.mydomain.com
This
is happening with all accounts, on different PCs. I even tried clearing the cache & other stuff in the browsers, restart the browser etc, still it happens. And at other times it logins perfectly.
Any clue is highly appreciated.
Thanks


sviriyala
Posts: 41
Joined: Sat Sep 13, 2014 1:49 am

ZCS 8 FOSS - Web proxy Issues

Postby sviriyala » Sun Nov 25, 2012 2:08 pm

With no help at all, I further tried to find out some clue the hard way. Tried even packet capture from client side. Eventually this is one thing I noticed.
/opt/zimbra/log/nginx.access.log
I had kept a putty session open on the http proxy server with the following command

#tail -f nginx.access.log
I opened a browser (IE9) & got to the login page: https://webmail.mydomain.com">https://webmail.mydomain.com
At">https://webmail.mydomain.com">https://webmail.mydomain.com
At this point I marked the last message i the above log file. Then tried to login, and captured all the lines that came in. Later after several unsuccessful logins, waited till I was able to successfully login and then again, captured the output of the log. Then compared the lines. The very first line differs with different http codes as shown below:
[QUOTE]Unsuccessful Login:

172.16.7.110 - - [26/Nov/2012:00:27:00 +0530] "POST / HTTP/1.1" 200 1265 https://webmail.mydomain.com">https://webmail.mydomain.com/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"[/QUOTE]
[QUOTE]SUCCESSFUL LOGIN:

172.16.7.110 - - [26/Nov/2012:00:34:07 +0530] "POST / HTTP/1.1" 302 0 https://webmail.mydomain.com">https://webmail.mydomain.com/" "Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Trident/5.0)"[/QUOTE]
Notice that during unsuccesful login I get a HTTP code of 200 while during successful login I get HTTP code 302.
Any idea as to why this is happening and what is causing this?
Thanks.
sviriyala
Posts: 41
Joined: Sat Sep 13, 2014 1:49 am

ZCS 8 FOSS - Web proxy Issues

Postby sviriyala » Mon Nov 26, 2012 7:36 am

So much for my 'debugging' over the past 4/5 days. This seems to be a known issue in Zimbra. Finally found the solution thro a KB article on VMWare site itself. Here is the link:
VMware KB: Web log in through reverse proxy redirects to mailstore
Posting it for the benefit of others who might search/post in the forum.
Regards

--Suri
11416Vladimir
Outstanding Member
Outstanding Member
Posts: 216
Joined: Fri Sep 12, 2014 10:42 pm

ZCS 8 FOSS - Web proxy Issues

Postby 11416Vladimir » Tue Feb 19, 2013 4:16 pm

I've just ran into this after an upgrade to 7.2.2
My problem is that the mailstores already have these options set correctly so for me the KB article doesn't really help.
ayoub_r
Posts: 1
Joined: Sat Sep 13, 2014 3:32 am

ZCS 8 FOSS - Web proxy Issues

Postby ayoub_r » Wed Jun 25, 2014 4:30 am

Hi,

(This answer is for those who have met this issue)

Your problem is due the configuration parameter "zimbraMailReferMode" which it's value is "wronghost" (i think :p )

Use the following command to check it (on you reverse-proxy Server):

zimbra$ zmprov gcf zimbraMailReferMode

You should change it to "reverse-proxied" using the following commands

zimbra$ zmprov mcf zimbraMailReferMode reverse-proxied
and then restart your rev-proxy server
Best regards

Return to “Administrators”

Who is online

Users browsing this forum: Google [Bot] and 17 guests