change password link is broken again

[dwfallin]

i think a version of the 21246 bug is back. we just installed community edition of 5.0.13, mostly working except that in the ajax (or html) interface, if a user clicks on the 'change pwd' button/link under preferences, it tries to open an http connection to the server (we're running https only mode).

am i missing something?

thanks
dwf

[dwfallin]

here's the code and problem (i think):

// Popup the change password dialog.
ZmPreferencesPage.prototype._changePasswordListene r =
function(ev) {
var url = appCtxt.get(ZmSetting.CHANGE_PASSWORD_URL);
if (!url) {
url = appCtxt.get(ZmSetting.PUBLIC_URL) + "/h/changepass";
}
if (!url) {
var isHttp = appCtxt.get(ZmSetting.PROTOCOL_MODE) == ZmSetting.PROTO_HTTP;
var proto = isHttp ? ZmSetting.PROTO_HTTP : ZmSetting.PROTO_HTTPS;
var port = appCtxt.get(isHttp ? ZmSetting.HTTP_PORT : ZmSetting.HTTPS_PORT);
url = AjxUtil.formatUrl({protocolroto, portort, path:"/zimbra/h/changepass", qsReset:true});
}

url is getting set to 'url = appCtxt.get(ZmSetting.PUBLIC_URL) + "/h/changepass";' _before_ the fancy check for protocol - so its never hitting the part that does formatUrl().

[carestad]

I think the easiest solution here is to just change your domain's "Public service host name" to the hostname to your Zimbra web interface, e.g. "webmail.foobar.com".

[rogle]

How do you change that?
Will it matter if I'm using ssl? e.g. "https://secure.foobar.com"

[rogle]

ok...scratch that...you can do it via the web gui.
Now...how do you make it point to a secure address?

[rogle]

I'm still not having any luck with making the change password link secure.
My url is https://secure.foobar.com and I'd like the entire site/experience/exposure/whatever to be ssl secured.

I did put in the "Public Service Host Name" and the change password then changed from http://foobar.com/changepass to http://secure.foobar.com/changepass.

I tried telling one user to just pencil in the needed "s" in the url. Now I have to buy a new monitor.

[rogle]

still searching for a solution....any zimbra employees care to chime in?

My users are getting increasingly antsy because they can't change their passwords and I refuse to open up a non-secure web port just for a password change form.

[rogle]

Anyone got any ideas?

[rogle]

still wondering how to fix this. new thoughts? Ideas?

[rogle]

Does anyone have a fix on this yet?