Giovanni Toraldo gionn

Zimbra: how to skip validation for self-signed or invalid certificates

Zimbra 8 will refuse to fetch emails from external accounts if the remote server is using a self-signed (or invalid) SSL certificate. Hence this is a good thing in terms of security, sometimes it isn't possible to control how external mail providers is handling their things.

This limitation is active even if "Use an encrypted connection (SSL) when accessing this server" isn't checked, since Zimbra will automatically use STARTTLS if detects that remote server support it.

$ sudo -i -u zimbra 
$ zmlocalconfig -e javamail_imap_enable_starttls=false
$ zmlocalconfig -e javamail_pop3_enable_starttls=false

$ zmmailboxdctl restart

Zimbra automatic fetching of external accounts

Zimbra 8 will not fetch automatically external POP3 or IMAP account. Use the following command to enable it! (every 5 minutes)

zmprov mc default zimbraDataSourcePollingInterval 5m

How to enable bind mount inside lxc container

When mount is returning:

STDERR: mount: block device /srv/database-data/postgres is write-protected, mounting read-only
mount: cannot mount block device /srv/database-data/postgres read-only

and dmesg shows:

Enable root via hack

Ref: http://forum.xda-developers.com/showpost.php?p=43489456&postcount=1

Download and unpack: http://bayfiles.net/file/SwU3/x09m9g/adb_bundle.zip

On first terminal:

./adb shell "while ! ln -s /data/local.prop /data/data/com.android.settings/a/file99; do :; done" > /dev/null

	root@gionn:~# bonnie++ -u nobody -c 2 -d /tmp
	Using uid:65534, gid:65534.
	Writing a byte at a time...done
	Writing intelligently...done
	Rewriting...done
	Reading a byte at a time...done
	Reading intelligently...done
	start 'em...done...done...done...done...done...
	Create files in sequential order...done.
	Stat files in sequential order...done.


	# Add acpi_backlight=vendor for brightness not working
	/etc/default/grub
	GRUB_CMDLINE_LINUX_DEFAULT="quiet splash acpi_backlight=vendor"

	# Fix for lag and packet loss on wifi - working on 3.2 stock kernel but not on 3.5 backported
	07:00.0 Network controller: Atheros Communications Inc. AR9287 Wireless Network Adapter (PCI-Express) (rev 01)
	/etc/modprobe.d/ath9k.conf
	options ath9k nohwcrypt=1

	package com.liberologico.cloudesire.cmw.controllers;

	import org.springframework.stereotype.Controller;
	import org.springframework.web.bind.annotation.PathVariable;
	import org.springframework.web.bind.annotation.RequestMapping;
	import org.springframework.web.bind.annotation.RequestMethod;
	import org.springframework.web.bind.annotation.ResponseBody;

	import com.liberologico.cloudesire.cmw.models.Entity;

	CONTEXT=[
	ETH0_GATEWAY="$NETWORK[GATEWAY, NETWORK=\"loc\"]",
	ETH0_IP="$NIC[IP, NETWORK=\"loc\"]",
	ETH0_MASK="$NETWORK[NETWORK_MASK, NETWORK=\"loc\"]",
	ETH0_DNS="$NETWORK[DNS, NETWORK=\"loc\"]",
	ETH0_NETWORK="$NETWORK[NETWORK_ADDRESS, NETWORK=\"loc\"]",
	TARGET="hda",
	SSH_PUBLIC_KEY="yourkey"
	]

	#!/bin/bash
	openssl genrsa 2048 > host.key
	openssl req -new -x509 -nodes -sha1 -days 3650 -key host.key > host.cert
	openssl x509 -noout -fingerprint -text < host.cert > host.info
	cat host.cert host.key > host.pem
	chmod 400 host.key host.pem

	echo ## put on your nginx virtualhost ##
	echo ssl on;
	echo ssl_certificate /path/to/host.pem;

	ComputeServiceContext context = ContextBuilder.newBuilder("openstack-nova")
	.credentials(user, password)
	.endpoint("https://api-legacy.entercloudsuite.com:5000/v2.0")
	.modules(ImmutableSet.<Module> of(new SLF4JLoggingModule(),
	new SshjSshClientModule()))
	.buildView(ComputeServiceContext.class);

	ComputeService computeService = context.getComputeService();

	Template template = computeService.getTemplateBuilder()