Results 1 to 7 of 7

Thread: zimbra desktop + no security = login/passwords cleartext over network?

  1. #1
    BloodyIron is offline Senior Member
    Join Date
    Nov 2012
    Posts
    62
    Rep Power
    2

    Default zimbra desktop + no security = login/passwords cleartext over network?

    Zimbra Desktop does not accept our self-signed certs inherently, so a proposed solution in our environment is just not using a secure connection.

    Does anyone know if this means the login/password are transmitted in clear or readable text at all when authenticating?

  2. #2
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,569
    Rep Power
    57

    Default

    Quote Originally Posted by BloodyIron View Post
    Zimbra Desktop does not accept our self-signed certs inherently, so a proposed solution in our environment is just not using a secure connection.
    Why doesn't it accept the certificate, there is an option to accept self-signed certificates - are you saying that doesn't work?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    BloodyIron is offline Senior Member
    Join Date
    Nov 2012
    Posts
    62
    Rep Power
    2

    Default

    I only know of this setting through a config file change, not a GUI option. Am I missing it? So far though the setting via the config file has not reliably worked, but I haven't rigorously tested it.

  4. #4
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,569
    Rep Power
    57

    Default

    When you connect to an account that has a self-signed certificate it gives you the option to accept it on the setup page for that account, have you not seen that option?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    BloodyIron is offline Senior Member
    Join Date
    Nov 2012
    Posts
    62
    Rep Power
    2

    Default

    For the Zimbra Desktop 7.2.2 client it just says Invalid or Untrusted certificate, and lets me see the error. I am not presented with a way to trust the certificate.

  6. #6
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,569
    Rep Power
    57

    Default

    Quote Originally Posted by BloodyIron View Post
    I am not presented with a way to trust the certificate.
    I'm not at my machine at the moment but if I remember correctly, the error that you see should have an option to accept the untrusted certificate - I've used it often enough to know it exists.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  7. #7
    BloodyIron is offline Senior Member
    Join Date
    Nov 2012
    Posts
    62
    Rep Power
    2

    Default

    Hmm, yes the green button does turn into "Accept". Not sure how I missed that.

    I recall now though that my earlier issue I was having that Zimbra Desktop was not actually getting any data from the server at all. It was just erroring out, but now it is getting data. While that may not be very much information, do you know of any scenarios where this may happen? It would have a Red X beside inbox when Zimbra logged in, after trying to sync of course.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. zimbra desktop 7 : security SSL
    By simon-Hing in forum General Questions
    Replies: 3
    Last Post: 07-05-2011, 03:06 AM
  2. Storing cleartext passwords in LDAP
    By richsand in forum Administrators
    Replies: 0
    Last Post: 04-26-2011, 10:11 PM
  3. Enable Cleartext login over POP3.
    By joelserrano in forum Administrators
    Replies: 2
    Last Post: 03-31-2010, 04:32 AM
  4. Cleartext Login Disabled
    By alexebner in forum Administrators
    Replies: 2
    Last Post: 03-29-2010, 04:38 AM
  5. Replies: 3
    Last Post: 08-07-2008, 11:43 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •