Results 1 to 4 of 4

Thread: [SOLVED] Zimbra Social Zimlet and Jetty 403 Errors

  1. #1
    LMStone's Avatar
    LMStone is offline Moderator
    Join Date
    Sep 2006
    Location
    477 Congress Street | Portland, ME 04101
    Posts
    1,367
    Rep Power
    10

    Default [SOLVED] Zimbra Social Zimlet and Jetty 403 Errors

    On our fresh ZCS test environment, the Zimbra Social zimlet works fine.

    On our production system, originally built at the 4.0.3 version, the Zimbra social zimlet throws Jetty /service/proxy 403 errors, like many others have reported here in the forums on various threads.

    Using rrao's suggestion to create a new COS, we found that new COSs created under ZCS version 6 have the proper zimbraProxyAllowedDomains configured, but when upgrading from a version of ZCS earlier than 6.0.x, COSs in existence at the time of the upgrade do not get these parameters added.

    Internally, we all use a COS called "reliablenetworks". We created a new COS called "relnet" and did the following:

    Code:
    zimbra@viognier:~> zmprov gc reliablenetworks > /tmp/cos_reliablenetworks
    zimbra@viognier:~> zmprov gc relnet> /tmp/cos_relnet
    After moving those files elsewhere, we ran a diff against them:

    Code:
    lmstone@ibm-r52:~/Desktop> diff cos_relnet cos_reliablenetworks | grep zimbraProxyAllowedDomains< zimbraProxyAllowedDomains: api.tr.im
    < zimbraProxyAllowedDomains: api.bit.ly
    < zimbraProxyAllowedDomains: *.twitter.com
    < zimbraProxyAllowedDomains: *.tweetmeme.com
    < zimbraProxyAllowedDomains: *.yimg.com
    < zimbraProxyAllowedDomains: *.yahoo.com
    < zimbraProxyAllowedDomains: *.digg.com
    < zimbraProxyAllowedDomains: *.yahooapis.com
    < zimbraProxyAllowedDomains: *.facebook.com
    < zimbraProxyAllowedDomains: twitter.com
    < zimbraProxyAllowedDomains: *.calcxml.com
    < zimbraProxyAllowedDomains: *.maxmind.com
    < zimbraProxyAllowedDomains: *.csgnetwork.com
    lmstone@ibm-r52:~/Desktop>
    So then all we needed to do was add those domains into the old, pre-existing COS:

    Code:
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains api.tr.im
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains api.bit.ly
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains *.twitter.com
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains *.tweetmeme.com
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains *.yimg.com     
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains *.yahoo.com
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains *.digg.com 
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains *.yahooapis.com
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains *.facebook.com
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains twitter.com   
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains *.calcxml.com
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains *.maxmind.com
    zimbra@viognier:~> zmprov mc reliablenetworks +zimbraProxyAllowedDomains *.csgnetwork.com
    zimbra@viognier:~>
    After doing that, accounts in the old reliablenetworks COS now worked fine with the social zimlet and we deleted the test relnet COS.

    Hope that helps,
    Mark

    P.S. And yes, we do name our Zimbra servers after wines!

  2. #2
    tech-ninja is offline Trained Alumni
    Join Date
    Jun 2008
    Location
    Upstate, SC
    Posts
    15
    Rep Power
    7

    Default

    Worked like a champ, Mark! Thanks!

  3. #3
    LMStone's Avatar
    LMStone is offline Moderator
    Join Date
    Sep 2006
    Location
    477 Congress Street | Portland, ME 04101
    Posts
    1,367
    Rep Power
    10

    Default

    You are welcome! Glad it helped!

    All the best,
    Mark

  4. #4
    mailman.33's Avatar
    mailman.33 is offline Loyal Member
    Join Date
    Jun 2010
    Location
    India
    Posts
    82
    Rep Power
    5

    Lightbulb

    HTML Code:
    P.S. And yes, we do name our Zimbra servers after wines!
    nice ... good choice

    Social zimlet was throwing 403 for a while ... with some of the accounts under a particular COS. It is working fine now .. I didn't have to do anything but happy its fine . The zimbraProxyAllowedDomains is set with all required domains for the COS. But can't figure out why it was throwing the error before. Thank you for the help Mark.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Zimbra 5.0.18 Upgrade to 6.0.4 - Some Issues
    By LMStone in forum Administrators
    Replies: 25
    Last Post: 07-30-2010, 09:00 AM
  2. ZCS 6.0.2 Admin Interface Missing Features and/or Broken
    By Guenther983 in forum Installation
    Replies: 7
    Last Post: 02-23-2010, 05:46 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •