[SOLVED] TLS/SSL required since update to 6.0.4 (need to enable insecure login)

[elcorazon]

Hi,

since I updated to ZCS 6.0.4 a few days ago I cannot receive mails via IMAP or POP3 without secure connection. (No problem at all after enabling SSL or TLS but some clients still have the insecure setting and I don't want to force them to change the settings.)

No settings have been changed, the setup is very simple and default. I also tried to change some settings after the update like described here (Setting Up a Single Node)
Zimbra IMAP/POP Proxy
but unfortunately nothing seems to help

Any advice appreciated - thanks

[phoenix]

Originally Posted by elcorazon

since I updated to ZCS 6.0.4 a few days ago I cannot receive mails via IMAP or POP3 without secure connection. (No problem at all after enabling SSL or TLS but some clients still have the insecure setting and I don't want to force them to change the settings.)

You really should not let clients connect via an insecure connection, their passwords will be visible to anyone sniffing your system. Do you mean via Port 25 for submitting mail or via IMAP(S)/POP3(S)? What port(s) are they trying to connect to?

Originally Posted by elcorazon

No settings have been changed, the setup is very simple and default. I also tried to change some settings after the update like described here (Setting Up a Single Node)
Zimbra IMAP/POP Proxy
but unfortunately nothing seems to help

You haven't enabled the proxy have you? What settings did you change?

[vbn]

Originally Posted by elcorazon

Hi,

since I updated to ZCS 6.0.4 a few days ago I cannot receive mails via IMAP or POP3 without secure connection. (No problem at all after enabling SSL or TLS but some clients still have the insecure setting and I don't want to force them to change the settings.)

No settings have been changed, the setup is very simple and default. I also tried to change some settings after the update like described here (Setting Up a Single Node)
Zimbra IMAP/POP Proxy
but unfortunately nothing seems to help

Any advice appreciated - thanks

As phoenix suggested, its very insecure to do this. But anyways, you can try enabling "Clear Text" option in IMAP/POP3 tab of Global Settings when in the Administration Panel. You may also need to remove "TLS Auth only" from the MTA tab.

If still only TLS is coming up (it should not), check what the values are as following :
zmprov gs `zmhostname` | grep zimbraReverseProxyPop3StartTlsMode
zmprov gs `zmhostname` | grep zimbraReverseProxyImapStartTlsMode

If set to 'Only', change by :
zmprov ms `zmhostname` zimbraReverseProxyPop3StartTlsMode on
zmprov ms `zmhostname` zimbraReverseProxyImapStartTlsMode on

zmcontrol stop/start may be required.

[elcorazon]

Originally Posted by vbn

As phoenix suggested, its very insecure to do this. But anyways, you can try enabling "Clear Text" option in IMAP/POP3 tab of Global Settings when in the Administration Panel. You may also need to remove "TLS Auth only" from the MTA tab.

I know its insecure (thats why I wrote it in the title) - and I think I will disable it in a few weeks after warning the clients. But since some clients have been unable to receive mails with their current setting I needed to reset it to the state it was before the update.

Originally Posted by vbn

If still only TLS is coming up (it should not), check what the values are as following :
zmprov gs `zmhostname` | grep zimbraReverseProxyPop3StartTlsMode
zmprov gs `zmhostname` | grep zimbraReverseProxyImapStartTlsMode

If set to 'Only', change by :
zmprov ms `zmhostname` zimbraReverseProxyPop3StartTlsMode on
zmprov ms `zmhostname` zimbraReverseProxyImapStartTlsMode on

zmcontrol stop/start may be required.

That helped, thanks!

Setting the suggested values in the Admin panel didn't help (I tried that before posting, hope I didn't miss something).