You can write an little mailboxd extension (java) that catches mailbox such events and does the desired action (eg. calling another process, etc).

Of course, that all happens on server side, not...

Hi folks,

we're currently developing several zimlets that integrate with other systems (eg. cms, erp, etc).
These zimlets (more precisely: their backend jsp code) need the proper user credentials...

If you just look for an abstraction on accessing the local mailboxd node database, you can use zcs-lib-vnc-common for that:

https://github.com/vnc-biz/zcs-lib-vnc-common

This library is...

Hi folks,

as some of you might already know, ZCS 7 is vulnerable against user enumeration attacks:

In short terms:

It's possible - without any prior authentication - to probe whether certain...

Replace the word BRANCH by the name of the branch you wanna fetch, eg. HELIX.

You also have to create /home/public/p4 and give the user running p4 rw access to it.
Seriously, the p4 server tells...

I ran into similar problems when I tried to keep the version number in the zimlet zip file name. Turned out that zimlet structure is quite restricted.

* the zimlet's name is taken by stripping the...

Hi folks,

is there any API for hooking into the login process w/o changing the core ?

For one of our customers we needed to ask for an additional token on login.
We've modified the core to run...

Hi folks,

does anyone know a good way to access zimlet's translations from the zimlet's jsp code ?
Does Zimbra already have an API for that ?

A dirty hack would be just loading the properties...

If you *REALLY* wanna run it on Windows, you might wanna give CoLinux a try:
It's a modified Linux kernel that runs as normal process on several OS'es, including Windows.

Of course, that's just...

Yes, we have done that. We're step by step integrating those two (also other applications) in our application service platform, so in the end it will feel like one big application.

But...

See zmprov command.

Very useful for things like migration scripts (eg. if you wanna migrate from exchange to zimbra).

What exactly did you try, and what was the outcome ?

Sounds good.

Seems our previous way of storing that information in an separate
mysql table was quite hackish. In future, we'll have to find a solution
to handle user movals anyways, so perhaps...

Hi folks,

we often have to customize the zimbra-core (NE).

Ideally, these changes are done via patches that can be directly
applied to the $ZIMBRA_ROOT. But what about their compressed...

Okay, let me summarize what I understood so far ... please correct me if I'm wrong:

* user properties are hold within the user objects in LDAP
* js client code holds them and allows arbitrary...

Just to make sure, we're not talking about different things:

#1: you've been capable of writing new user properties value downto ldap using a zimlet (client side java script code)
#2: the user...

Thats exactly what I meant. If this setting is stored in these properties, the user
can change it by sending proper requests, bypassing the admin's decision.

I'd consider this a security hole.

Oh, that really *has* security impact in certain environments (not an unusual
customer requirement in our projects) users should not be allowed to change
certain user properties.

Do you know...

By the way: did you already confirm that they're actually written back to LDAP when changing them this way ?

The question isn't whether they are store in LDAP, but whether the frontend
javascript code can simply overwrite them.



Because the user then can arbitrarily change them at will.

Great :)
Could you perhaps give me an java example how to access it ?

Thanks.

Are you sure, these properties you set on *client* side with the

call are really written back to LDAP ?

I really doubt it, as it would be a big security hole.

We've already done this by a zimlet.

It's yet a bit hackish as it stores the data in the mailboxd node's local mysql database,
we probably should use LDAP instead. But it works quite well, eg. in...

Hi folks,

does anyone have an idea how to implement newsgroups / discussion boards in ZCS ?

Shared folders AFAIK won't work, as deleting a mail from one user will make it
disappear to all...

Hmm, take a cheap tablet pc and write a little program that queries the Zimbra
via SOAP API or maybe even caldav and displays the information for that room.

How many of those device to you...