Ajcody-Proxy-Notes

A Proxy On You!

Actual Proxy Notes Homepage

Please see [[Ajcody-Proxy-Notes}}

Proxy References

From Install Guide:

• Multiple-Server Installation - Installing the Zimbra-proxy package
  • http://www.zimbra.com/docs/os/latest/multi_server_install/multi-server_install.5.1.html#1075611
• Configuring IMAP and POP Proxy Server
  • http://www.zimbra.com/docs/ne/latest/multi_server_install/planning%20a%20multi-server%20instalaltion.4.1.html#1073257
• Configuring ZCS HTTP Proxy (Beta 5.0.6)
  • http://www.zimbra.com/docs/ne/latest/multi_server_install/planning%20a%20multi-server%20instalaltion.4.1.html#1090706
• Configuring for Virtual Hosting
  • http://www.zimbra.com/docs/ne/latest/multi_server_install/planning%20a%20multi-server%20instalaltion.4.1.html#1090962
• Working With Zimbra Proxy (IMAP/POP)
  • http://www.zimbra.com/docs/os/latest/administration_guide/ZimbraProxy.7.1.html#1099730
• Working With Zimbra Proxy (HTTP) "...able to reverse proxy HTTP requests to the right backend server"
  • Please note, that ZCS HTTP Proxy (http reverse proxy) is Beta, first released in 5.0.6.
  • http://www.zimbra.com/docs/os/latest/administration_guide/ZimbraProxy.7.1.html#1099560

From Wiki:

• Zimbra Proxy Guide (5.x)
  • http://wiki.zimbra.com/index.php?title=Zimbra_Proxy_Guide
• Configuring Perdition (4.5.x)
  • http://wiki.zimbra.com/index.php?title=Perdition
• Multiple SSL Virtual Hosts 5.0
  • http://wiki.zimbra.com/index.php?title=Multiple_SSL_Virtual_Hosts_5.0

Notable Proxy Bugs

Tentative for 5.0.9

Those That Are Sort Of Client Side Impacting

• "need wiki page on setting up public service hostname and reverse proxy"
  • See : http://bugzilla.zimbra.com/show_bug.cgi?id=29522
• "Proxy: unable to add a buddy"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29492
• "Enabling http proxy breaks sharing"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29458
• "Inconsistent default mail/proxy mode"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29455
• "WRONG_HOST error while viewing a public shared doc using http proxy"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29204
• "mailbox does not load with zimbraPublicServiceHostname and reverse proxy enabled"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29138
• "In reverse-proxied mode, when redirecting with a 302, web client should set Location to proxy provided Host header"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29053
• "Modify SOAP harness to handle session ID to work with proxy"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29021
• "mod_zimbra_proxy infinite redirect"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=27032

Configuration / Initial Setup Issues

• "Remove hostname argument from zmproxyinit"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29479
• "Zmmtaconfig does not monitor several imap proxy variables"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29443
• "Zmproxyconfgen should not generate from templates if critical values are missing"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29436
• "Zmproxyconfgen does not set $? correctly on error"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29400
• "zmproxyconfgen -P has no effect"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29399
• "Webproxy https in mixed mode does not stay in https"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29380
• "Upgrade: starttls mode changed in nginx.conf"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=28312
• "better GSSAPI support in nginx"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=28178
• "nginx fails to redirect the request to mail server if i request using the alias of proxy"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=28106
• "nginx mail proxy does not translate kerberos principal name to zimbra user-name"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=27712

Resolved in 5.0.7

• "Proxy section of admin guide needs to be updated"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29456
• "Zmproxyinit -e -w -x is not allowed"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29404
• "Zmproxyinit does not set zimbraReverseProxyLookupTarget for store only server"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29393
• "Zmproxyinit -e -w port conflict on store only install"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29390
• "Zmproxyinit -e -w failure on proxy only install"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29389
• "Zmproxyinit: can not run zmproxyinit on mbs without proxy installed"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29387
• "Need attribute to track proxy mailmode"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29386
• "nginx: zmproxygen needs to get attributes from server if an attribute is server/global"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29338
• "Zmproxyinit -e -w failure on single node install"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29324
• "zimbra imap/pop clear text not enabled for mail proxy install"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29321
• "nginx: http proxy needs to have the rewrite module built in"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29192
• "nginx: HTTP proxy configuration scripts need to be updated to reflect various mail modes"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29041
• "nginx: http proxy should support all mail modes"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29038
• "nginx: improve http proxy Location header fudging capabilities"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=29037
• "nginx uses client-ip instead of proxy-ip when caching login alias"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=28703
• "nginx http proxy should route by zauthtoken query-string argument"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=28367
• "Improvements to zmproxyinit"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=28083
• "zmproxyinit sets the wrong mail mode"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=27989
• "nginx doesn't proxy caldav"
  • Appears to be about webdav issues and others as well.
  • http://bugzilla.zimbra.com/show_bug.cgi?id=27042
• "Zmproxyinit hard code port settings"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=26109
• "Isync (REST) Needs To Work With Nginx Http Proxy"
  • Note, many issues were still unresolved with this "resolved" bug. You'll see them above.
  • Also, see notes under "ZCS Mailbox Server Proxy" under the Ajcody-Server-Topics#Unsorted section below.
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=25981

Resolved in 5.0.6

Public Service Hostname

• The variable is zimbraPublicServiceHostname , as referenced in /opt/zimbra/openldap/etc/openldap/schema/zimbra.schema . Bugs about the url's for shares that use spaces (%20), the redirection drops the %20
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=27788
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=27477

Resolved in 5.0.5

• Nginx: http proxy does not work with REST
  • Note, this isn't "completely" resolved, as you'll notice by other targeted bugs with 5.0.5+ releases.
  • See: Nginx: http proxy does not work with REST

Unsorted

• "ZCS Mailbox Server Proxy"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=9469
  • From release notes, "HTTP proxy is supported (Beta). This includes REST sharing, Caldav, and Zimbra mobile. For Zimbra Mobile, ZCS redirect/forwards to the correct host. (Bug 9469)"
    • Please note, that ZCS HTTP Proxy (http reverse proxy) is Beta, first released in 5.0.6.
  • Though, as of 5.0.8,""For activesync connection to go thru the proxy, they'll have to configure reversed proxy. However, there're already a few known bugs about sharing broken with reversed proxy enabled. They're better off waiting for 5.0.9 than to try to configure reversed proxy now."
• "need to support multi-server (proxy) for mobile clients"
  • See: http://bugzilla.zimbra.com/show_bug.cgi?id=8174