Current issues in ZCS 8.5
Current issues in ZCS 8.5 Build 3040
zimbraReverseProxySSLToUpstreamEnabled is not honored for login & ews urls
Connections from proxy to mailbox are always sent over https regardless of zimbraReverseProxySSLToUpstreamEnabled setting. In case your mailstore's are configured to listen only on http, then users will get 502 errors.
Set zimbraMailMode to "both" on mailstores.
Domain certificates configuration not added to nginx Configuring domain level certificates using this wiki, does not works, due to required nginx include/template files are removed. This also applies to upgrades.
- Workaround for web proxy certificate
In the file /opt/zimbra/conf/nginx/templates/nginx.conf.web.template , add following line in the final include section.
It is considered that /opt/zimbra/conf/nginx/includes/nginx.conf.web.https file exists and it contains valid domain level configuration. It can be pre-upgrade file.
- Workaround for mail proxy certificate
In the file /opt/zimbra/conf/nginx/templates/nginx.conf.mail.template , add following lines in the final include section.
include /opt/zimbra/conf/nginx/includes/nginx.conf.mail.imap; include /opt/zimbra/conf/nginx/includes/nginx.conf.mail.imaps; include /opt/zimbra/conf/nginx/includes/nginx.conf.mail.pop3; include /opt/zimbra/conf/nginx/includes/nginx.conf.mail.pop3s;
It is considered that above listed file exists and it contains valid domain level configuration. Those can be pre-upgrade file.
System account for spam/non-spam training should disable spam check
Spam check is enabled for spam/non-spam accounts. This causes any spam/non-spam marked emails to get filed into Junk folder of spam/ham accounts. zmtrainsa extracts messages from Inbox only of spam/ham accounts, resulting in no training of emails in Junk folder.
On the MTA, as the ZIMBRA user:
REPLACE line 116 with:
%%comment VAR:!zimbraAmavisOriginatingBypassSA%%bypass_spam_checks_maps => , # don't spam-check internal mail if desired:
Generate CSR fields are not added to CSR
Generating CSR from admin console, fields "C=, ST=, L=, O=, OU=" are not added to the CSR. Generated CSR always contains these values.
C=US, ST=N/A, L=N/A, O=Zimbra Collaboration Server, OU=Zimbra Collaboration Server
Use CLI "/opt/zimbra/bin/zmcertmgr createcsr".
Webapp services removed when editing server
This is fixed in patch1 and in the build 3042.
Device not syncing post upgrade to 8.5
ActiveSync issues with the BlackBerry devices and few Android devices, post upgrade to v8.5.
Re-provision the devices.
Postconf all keys.
Handy to know all postfix config keys that are added in 8.5. In some cases, postix LC keys are not being applied to postfix, because those are moved to ldap database. This list will help to know those keys.