How to get Proxy and MemCache running on Zimbra 8.6.0

The Zimbra wiki has the steps to install proxy and memcache on zimbra 8.6. The setup is quite straight forward. Once installed I highly recommend upgrading to 8.7. Then to 8.8. To avoid any hiccups from jump in g 2 major versions.

Argh! My post vanished!

https://wiki.zimbra.com/wiki/Enabling_Zimbra_Proxy_and_memcached


Use the above to install proxy and memcahce on Zimbra 6. The upgrade to 8.7 followed upgrade to 8.8

Hi Sanga

Thanks for coming to my aid as always. When I looked at that page and of course went to where it says "existing servers" it says to run the install.sh script and then:

Do you wish to upgrade? [Y] y
Install zimbra-memcached [N] y
Install zimbra-proxy [N] y

I don't get the two questions after the first one. I answer YES to the upgrade question and then the upgrade immediately begins and then fails with the fact that the two items are not installed.

I will try again using the 8.7 installer rather than the 8.8.12 installer, if I can find the download for the FOSS upgrade.

Thanks again!
Chris

Hi again, Sanga

This is what I get when attempting to install 8.7.x

ZCS upgrade from 8.6.0 to 8.7.11 will be performed.
Checking for existing proxy service in your environment
Error: proxy not enabled
Error: No proxy detected in your environment. Proxy is required for ZCS 8.7+.
See https://wiki.zimbra.com/wiki/Enabling_Zimbra_Proxy for details on installing proxy.
Checking for existing memcached service in your environment
Error: memcached not enabled
Error: No memcached detected in your environment. Memcached is required for ZCS 8.7+.
See https://wiki.zimbra.com/wiki/Enabling_Zimbra_Memcached for details on installing memcached.
Proxy and Memcached services must exist. Exiting...

Cheers
Chris

Hi Chris.

Actually you need to find the installer for your exact running version 8.6 (they are still available if your search zimbra open source downloads)

Then run that installer and choose upgrade. It will then ask the Y/n questions about proxy and memcache.

Once both are upgraded to 8.6 versions of mem/proxy and tested working. You can then do the regular upgrade to 8.7 and the 8.8

Sorry for the lack of details. On a flight so internet access is sketchy!

Sanga thanks very much for the rapid response. Hope you're going somewhere to relax! :)

I'll do the upgrade and see how it goes. I have already installed Path 13 so hoping it won't screw that up.

I'll get back to you as soon as I have done that.

All the best
Chris

The question ‘do you wish to upgrade’ will always appear. Even if you are just adding new modules to your current zimbra. It used to confuse me at firt too.

OOPS! I see downloads for 8.5.1 and 8.7.0 (not recommended) and 8.7.1 but nothing that says 8.6.0 P13

Will keep looking....


OK - Found one but without the Patch. Bit reluctant to install over the patched version as it's a live server. Do you think this should be OK?

https://zimbra.org/download/zimbra-collaboration/8.6.0

Cheers
Chris

when you log into zimbra server check the version and let me know what you have

su - zimbra
zmcontrol -v


I am going to double check in the zimbra forums, but since you are actually only adding the memcached and the zimbra proxy part, you shouldn't have any problems

Hi Sanga - apologies for the delay getting back to you.

The version: Release 8.6.0_GA_1153.RHEL6_64_20141215151155 RHEL6_64 FOSS edition, Patch 8.6.0_P13

Cheers
Chris

Here is the correct version you need to get the proxy and memcache installed

https://files.zimbra.com/downloads/8.6.0_GA/zcs-8.6.0_GA_1153.RHEL6_64.20141215151155.tgz

this will not cause issues with the current patch version you are running. Once proxy/memcache are installed, make sure they are working as intended, and once verified, you can easily follow the normal upgrade steps to get to 8.7 and 8.8.

At newer versions you will see some additional features like the new chat service. I usually skip those during the upgrade, then come back to install them later once I assure everything is stable.

Hi Sanga

Many thanks - will download and give it go then get back to you.

Cheers
Chris

Sanga - apologies for the delay - I have just started the install of 8.6.0. Will let you know what happens as soon as I have some news.

@Sanga

OK - 8.6.0 install completed. I enabled the proxy and memcache. The installation killed the v13 Patch so I have reinstalled that. Now for the upgrade to version 8.7 - fingers crossed!

Fantastic!!!

It should get a lot easier now that proxy/memcache is enabled. Keep me posted if you get stuck anywhere. If you are not pressed for time. I would let the server run for 12 hours and watch the logs before doing the next upgrade. Here is a great command I use that is very effective at cutting through the noise.

tail -f /var/log/zimbra.log | egrep '(reject|warning|error|fatal|panic|failure):'

GOODLUCK!

@Sanga

OK - we are upgraded to 8.8.12 but there is a problem. The admin https:// interface no longer loads. We usually use port 7071 but it appears we should be using 9071. However, if on the same network as the Zimbra server and using 7071 we get "Loading" after entering Admin username and password. It goes no further - just stays on "Loading" indefinitely.

If we go in from outside using port 9071 we instantly get "The server refused the connection"

Any ideas? I have made sure that our perimeter firewall is set to allow both 7071 and 9071 to the server.

On mine I actually did not proxy the admin interface. It uses 7071 whether from the LAN or via the Mapped IP on the WAN. Give me moment to find the command you need to disable the proxy service for just the admin

@Sanga - did I mention that I thought you were a gent? :D

@Sanga

https://wiki.zimbra.com/wiki/Zimbra_Proxy_Manual:Zimbra_Proxy_Related_CLI_Commands ??

A gent as in a man, or just a good all around guy? LOL :)


Are you accessing the server admin using the FQDN domain name or its internal IP address on either port? Also when logged into the admin mailbox, are you able to click the link in the top right corner to open the admin page?

@Sanga

Considering the number of times you've attempted to rescue me from IT disasters, I reckon the latter bit of the sentence! lol

No matter whether we attempt to access the server using the FQDN or the IP address we get the same result. The login box comes up and allows me to enter the login name and password but then just sits on "Loading" forever.

If we attempt to login to the normal user mailbox using the web client, it works perfectly.

If I login using my personal account (which can be elevated to Admin) and I go to the top right and try login as Admin - it does the same thing - just sits on "Loading".

I have a feeling the proxy on Admin login needs to be killed...

Cheers
Chris

I ran the following on my server to see the settings, let me know what yours looks like

[zimbra@mail ~]$ zmprov gs `zmhostname` zimbraReverseProxySSLToUpstreamEnabled zimbraReverseProxyLookupTarget \
> zimbraReverseProxyHttpEnabled zimbraMailReferMode zimbraMailPort zimbraMailProxyPort zimbraMailSSLPort  zimbraMailSSLProxyPort \
> zimbraMailMode zimbraReverseProxyMailEnabled zimbraReverseProxyMailMode zimbraImapBindPort zimbraImapProxyBindPort \
> zimbraImapSSLBindPort zimbraImapSSLProxyBindPort zimbraImapCleartextLoginEnabled zimbraPop3BindPort zimbraPop3ProxyBindPort \
> zimbraPop3SSLBindPort zimbraPop3SSLProxyBindPort zimbraPop3CleartextLoginEnabled zimbraAdminPort zimbraAdminProxyPort \
> zimbraReverseProxyAdminEnabled ; zmprov gs `zmhostname` zimbraServiceEnabled | egrep 'memcache|proxy|mailbox'
# name mail.redacted.net:)
zimbraAdminPort: 7071
zimbraAdminProxyPort: 9071
zimbraImapBindPort: 7143
zimbraImapCleartextLoginEnabled: TRUE
zimbraImapProxyBindPort: 143
zimbraImapSSLBindPort: 7993
zimbraImapSSLProxyBindPort: 993
zimbraMailMode: https
zimbraMailPort: 8080
zimbraMailProxyPort: 80
zimbraMailReferMode: reverse-proxied
zimbraMailSSLPort: 8443
zimbraMailSSLProxyPort: 443
zimbraPop3BindPort: 7110
zimbraPop3CleartextLoginEnabled: TRUE
zimbraPop3ProxyBindPort: 110
zimbraPop3SSLBindPort: 7995
zimbraPop3SSLProxyBindPort: 995
zimbraReverseProxyAdminEnabled: FALSE
zimbraReverseProxyHttpEnabled: TRUE
zimbraReverseProxyLookupTarget: TRUE
zimbraReverseProxyMailEnabled: TRUE
zimbraReverseProxyMailMode: redirect
zimbraReverseProxySSLToUpstreamEnabled: TRUE

zimbraServiceEnabled: mailbox
zimbraServiceEnabled: memcached
zimbraServiceEnabled: proxy

The first one gives me:

bash: zimbraReverseProxyHttpEnabled: Permission denied
zimbraServiceEnabled: mailbox
zimbraServiceEnabled: memcached
zimbraServiceEnabled: proxy

Didn't really get the mail.redacted.net....

zimbraReverseProxyAdminEnabled: FALSE

I think this is it!

zmprov ms `zmhostname` zimbraReverseProxyAdminEnabled FALSE

I know my name is quite unisex (suffered greatly as a youth) LOL

i forgot to add you will need to change to zimbra user to run the command

su - zimbra

# command to show settings

hahaha - have no idea - I just assumed Sanga was male.  The "gent" refers to the "nice guy" thang! :D

Assuming I don't have to replace 'zmhostname' with the hostname of my server??

OK - I'm going to have a go at the command.... stand back!!

Well - that didn't work....

zmprov ms `zmhostname` zimbraReverseProxyAdminEnabled FALSE

I changed mine to TRUE and got the same loading .... errror, changing it back got the page to load using 7071


Any errors when you ran the command as the zimbra user? Also please post the results of the long command so I can double check notthing else is out of place.

@Sanga for the long command all I got was what I posted above:
bash: zimbraReverseProxyHttpEnabled: Permission denied
zimbraServiceEnabled: mailbox
zimbraServiceEnabled: memcached
zimbraServiceEnabled: proxy

No errors from the command : zmprov ms `zmhostname` zimbraReverseProxyAdminEnabled FALSE
Just dropped back to the prompt.

This is what the long command looked like:

servername/]$ zmprov gs `zmhostname` zimbraReverseProxySSLToUpstreamEnabled zimbraReverseProxyLookupTarget \
> > zimbraReverseProxyHttpEnabled zimbraMailReferMode zimbraMailPort zimbraMailProxyPort zimbraMailSSLPort  zimbraMailSSLProxyPort \
> > zimbraMailMode zimbraReverseProxyMailEnabled zimbraReverseProxyMailMode zimbraImapBindPort zimbraImapProxyBindPort \
> > zimbraImapSSLBindPort zimbraImapSSLProxyBindPort zimbraImapCleartextLoginEnabled zimbraPop3BindPort zimbraPop3ProxyBindPort \
> > zimbraPop3SSLBindPort zimbraPop3SSLProxyBindPort zimbraPop3CleartextLoginEnabled zimbraAdminPort zimbraAdminProxyPort \
> > zimbraReverseProxyAdminEnabled ; zmprov gs `zmhostname` zimbraServiceEnabled | egrep 'memcache|proxy|mailbox'
bash: zimbraReverseProxyHttpEnabled: Permission denied
zimbraServiceEnabled: mailbox
zimbraServiceEnabled: memcached
zimbraServiceEnabled: proxy

it might be the way the command came accross when I pasted it. the actuall command is on this page

https://wiki.zimbra.com/wiki/Zimbra_Proxy_Manual:Zimbra_Proxy_Related_CLI_Commands

Aha! Better! I now get:

# name servername.co.uk
zimbraAdminPort: 7071
zimbraAdminProxyPort: 9071
zimbraImapBindPort: 143
zimbraImapCleartextLoginEnabled: TRUE
zimbraImapProxyBindPort: 7143
zimbraImapSSLBindPort: 993
zimbraImapSSLProxyBindPort: 7993
zimbraMailMode: https
zimbraMailPort: 80
zimbraMailProxyPort: 8080
zimbraMailReferMode: wronghost
zimbraMailSSLPort: 443
zimbraMailSSLProxyPort: 8443
zimbraPop3BindPort: 110
zimbraPop3CleartextLoginEnabled: TRUE
zimbraPop3ProxyBindPort: 7110
zimbraPop3SSLBindPort: 995
zimbraPop3SSLProxyBindPort: 7995
zimbraReverseProxyAdminEnabled: FALSE
zimbraReverseProxyHttpEnabled: FALSE
zimbraReverseProxyLookupTarget: TRUE
zimbraReverseProxyMailEnabled: TRUE
zimbraReverseProxySSLToUpstreamEnabled: TRUE

zimbraServiceEnabled: mailbox
zimbraServiceEnabled: memcached
zimbraServiceEnabled: proxy

Sanga I have yet to upgrade zeXtras to latest version I'll do that now. Somehow we've got to be able to resolve the admin thing as we are going to have to work with it tomorrow for customers.

Tail on the same logfile you suggested earlier?

Cheers
Chris

@Sanga - I'm about to upgrade zeXtras to the latest version. Will get back to you as soon as I've done that.

yes, tail on the same log file to view the errors, the other thing I noticed is some of the proxy ports are actually reversed. for example look at your imaprpoxy ports compared to what I have in mine. also the zimbra mail refermode settings.

I think the easiest fix is to setup the proxy from scratch (its actually not as complicated as the make it seem)

After enabling proxy and memcache, did you configure them using the steps at this link: https://wiki.zimbra.com/wiki/Enabling_Zimbra_Proxy_and_memcached

It looks like the proxy is installed just not configured

Ah - no I didn't do any setup for the proxy or memcache. OOPS!

Do I do all the stuff that's listed, Sanga?

A couple of the lines are for multi server environments where the MTA is seperate from the actual mailbox data stores. You should skip those lines if yours is a single server.

Good thing we looked at this now since tomorrow once all the users start connecting it could get hectic!

Sanga - it's working! I have not set up proxy or memcache as yet but I just updated the zeXtras suite to the latest version and as soon as it had completed the install, I tried the admin console and it came up perfectly.

THANK YOU so much - you saved my bacon yet again.

Cheers for now
Chris

P.S. I have three more Zimbra servers to upgrade - this was the smallest of the three hence my first target. I'll now not be quite so nervous when doing the others, thanks to your brilliant help. Hope you have a good weekend.

I most certainly will now that you are in the clear.  :D

Really glad to help get it fixed. And also great to see you are leveling up as a zimbra admin!

Keep the questions coming. Pretty soon I’ll be hitting you up for assistance.

Sanga thanks again. I doubt I'll ever be at the stage you're at but I'll keep on trying. All the best from Berkshire in the UK.