CLI zmtlsctl to set Web Server Mode: Difference between revisions

Line 10: Line 10:
<font size="3" color="#000000" face=""Times New Roman""> '''  zmtlsctl [mode]  ''' </font>
<font size="3" color="#000000" face=""Times New Roman""> '''  zmtlsctl [mode]  ''' </font>


<font size="3" color="#000000" face="Arial"> mode choices:  
<font size="3" color="#000000" face="Arial"> <ode choices:  


'''http''' - http only, the user would browse to http://zimbra.domain.com
'''http''' - http only, the user would browse to http://zimbra.domain.com


'''https''' - https only, the user would browse to https://zimbra.domain.com http:// is denied (See also [[Redirect_http_to_https]] for 4.5)
'''https''' - https only, the user would browse to https://zimbra.domain.com http:// is denied


'''mixed''' - If the user goes to http:// it will redirect to https:// ''for the login only'', then will revert to http:// for normal session traffic. If they browse to https:// then they will stay https://
'''mixed''' - If the user goes to http:// it will redirect to https:// ''for the login only'', then will revert to http:// for normal session traffic. If they browse to https:// then they will stay https://
Line 20: Line 20:
'''both''' - A user can go to http:// or https:// and will ''keep that mode'' for their entire session
'''both''' - A user can go to http:// or https:// and will ''keep that mode'' for their entire session


-On older versions there were some quirks with 'both' mode; fine from 4.5.2 to 4.5.5? but new issue appeared [http://bugzilla.zimbra.com/show_bug.cgi?id=19636 bug 19636]
'''redirect''' - Added to ZCS 5.0; Like mixed if the user goes to http:// it will redirect to https:// but they will ''stay'' https:// for their entire session.
 
-As a quick fix, when 'both' was selected, it defaulted to 'mixed' [http://bugzilla.zimbra.com/show_bug.cgi?id=5594 bug 5594]


-As of 5.0.5+ [http://bugzilla.zimbra.com/show_bug.cgi?id=5594 bug 5594] is now resolved
(See also [[Redirect_http_to_https]] for 4.5)
 
Beginning with ZCS 5.0:
 
'''redirect''' - like mixed, if the user goes to http:// it will redirect to https:// but they will ''stay'' https:// for their entire session.


</font>
</font>
Line 59: Line 53:


<font size="3" color="#000000" face="Arial">Afterwards: Check [[SMTP_Auth_Problems]] to be sure the auth url is set correctly. </font>
<font size="3" color="#000000" face="Arial">Afterwards: Check [[SMTP_Auth_Problems]] to be sure the auth url is set correctly. </font>
===<font size="3" color="#00007f" face="Arial"> ''' Both Mode Quirks ''' </font>===
-On older versions there were some quirks with 'both' mode; fine from 4.5.2 to 4.5.5? but new issue appeared [http://bugzilla.zimbra.com/show_bug.cgi?id=19636 bug 19636]
-As a quick fix, when 'both' was selected, it defaulted to 'mixed' [http://bugzilla.zimbra.com/show_bug.cgi?id=5594 bug 5594]
-As of 5.0.5+ [http://bugzilla.zimbra.com/show_bug.cgi?id=5594 bug 5594] is now resolved


[[Category:Command Line Interface]]
[[Category:Command Line Interface]]

Revision as of 19:48, 15 April 2009

zmtlsctl

This command is used to set the Web server zimbraMailMode to the different communication protocol options. All modes use SSL encryption for back-end administrative traffic & the admin console.

The webserver has to be stopped and restarted for the change to take effect. Though a full zmcontrol stop/start certainly can't hurt.

Syntax

zmtlsctl [mode]

<ode choices:

http - http only, the user would browse to http://zimbra.domain.com

https - https only, the user would browse to https://zimbra.domain.com http:// is denied

mixed - If the user goes to http:// it will redirect to https:// for the login only, then will revert to http:// for normal session traffic. If they browse to https:// then they will stay https://

both - A user can go to http:// or https:// and will keep that mode for their entire session

redirect - Added to ZCS 5.0; Like mixed if the user goes to http:// it will redirect to https:// but they will stay https:// for their entire session.

(See also Redirect_http_to_https for 4.5)

Steps to run

1.

Type zmtlsctl [mode] , press Enter.

2.

Type zmcontrol stop , press Enter.

3.

after everything stops, type zmcontrol start , press Enter.


Note: In you can also use tomcat stop/start/restart, but in v5 this becomes jetty (zmmailboxdctl stop/start/restart).


Afterwards: Check SMTP_Auth_Problems to be sure the auth url is set correctly.

Both Mode Quirks

-On older versions there were some quirks with 'both' mode; fine from 4.5.2 to 4.5.5? but new issue appeared bug 19636

-As a quick fix, when 'both' was selected, it defaulted to 'mixed' bug 5594

-As of 5.0.5+ bug 5594 is now resolved

Jump to: navigation, search