Install & Setup - Zextras Forum

Carbonio CE 26.3 – Ubuntu 24.94 Auth v3 (/zx/login/v3/*) returns 502 from Internet, works only inside LAN (Envoy issue?)

Giovanny-E — Mon, 27 Apr 2026 06:39:41 +0000

Hello,

I am running Carbonio CE 26.3.0 on Ubuntu 24.04 (single-server setup).

Issue:

Mobile apps (Chats / Mobile login) fail from Internet with:

/zx/login/v3/auth/config → HTTP 502 (Connection to upstream refused)

However:

- Web UI works normally

- Mobile apps work when the client is inside the same LAN as the server

- Services are all running and “green”

Technical findings:

- carbonio-user-management is healthy and listening on an internal IP:

127.78.0.5:10000 (confirmed via ss -lntp)

- Envoy sidecar listens on 127.78.0.5:20000

- NGINX routes /zx/* through Envoy by design

Tests performed:

- Direct access to the backend does NOT expose Auth v3:

curl removed link

(no response (no JSON))

This confirms:

- Auth v3 endpoints are NOT exposed by carbonio-user-management directly

- Envoy is REQUIRED to publish /zx/login/v3/*

- There is no viable NGINX bypass/workaround for Auth v3

Observed behavior strongly suggests:

- Envoy does not mark the Auth v3 upstream as healthy in CE 26.3

- This only affects traffic coming from outside the LAN

- Results in consistent 502 errors for mobile apps

Has anyone else confirmed this behavior on CE 26.3 (Ubuntu 24.04)?

Is there a known issue or planned fix regarding Envoy/Auth v3 upstream health?

Thanks,

Giovanny.

550-No Such User Here

tanka — Tue, 21 Apr 2026 02:55:10 +0000

Hi,

Is there a way to enable Carbonio to verify the user to the recipients domain? It looks like Carbonio is not doing this. I sent the email from Carbonio webmail so it should have authenticated.

Here is the bounced email I got.

: host nauoi.com said: 550-Verification failed for 550-No Such User Here
550 Sender verify failed (in reply to RCPT TO command)

Really appreciate how I can solve this problem so that if there are very strict, our mail server will be able to comply.

I am using Carbonio CE 24.9.5.

Carbonio is on hq.pub.com.ki

Thanks in advance.

Tanka

550-No Such User Here

tanka — Tue, 21 Apr 2026 02:54:03 +0000

Hi,

Is there a way to enable Carbonio to verify the user to the recipients domain? It looks like Carbonio is not doing this. I sent the email from Carbonio webmail so it should have authenticated.

Here is the bounced email I got.

: host nauoi.com said: 550-Verification failed for 550-No Such User Here
550 Sender verify failed (in reply to RCPT TO command)

Really appreciate how I can solve this problem so that if there are very strict, our mail server will be able to comply.

I am using Carbonio CE 24.9.5.

Thanks in advance.

Tanka

Emails sent from Google Mail fail to deliver

chiribita — Mon, 20 Apr 2026 13:37:35 +0000

Hello,

I'm experiencing issues with receiving emails from Gmail/Google Mail servers. Messages are bouncing back with the following error:

"The recipient server did not accept our requests to connect. For more information, go to removed link ."

I have passed all tests on mail-tester.com (score: 10/10), and diagnostics on mxtoolbox.com look fine.

Emails from other servers are being delivered normally.

What might be causing this issue?

renew ssl certificate for virtualhost

salah — Fri, 27 Mar 2026 22:13:01 +0000

I have Carbonio CE server with:

primary domain domain1.com,

and a gest domain gest.com,

the gest domain has virtualhost mail.gest.com,

with SSL certificate about to expire,

my task is to renew SSL certificate of virtualhost mail.gest.com,

how to complete so?

Migrating from zimbra 8.8.15

iomari — Thu, 26 Mar 2026 08:03:23 +0000

I currently have a newly installed Carbonio server. I also have a corrupted old zimbra 8.8.15 server that was the active server until it recently stopped working due to ldap no longer starting successfully. I've tried many ways to do a clean migration but I've only been able to migrate user names, and distributed lists successfully. My main challenge now is to migrate the 800 gig store. I need a way to import all the existing mail on the old server without the use of ldap. I have already imported all accounts with their existing old IDs.I have total access to both servers and they are on the same local network. I've been on this for weeks. Any will be much appreciated

Carbonio CE 2026 Ubuntu 22.04 Install Fails: slapd Permission Denied (Missing setcap)

lpe397 — Sun, 22 Mar 2026 22:04:53 +0000

Environment:

OS: Ubuntu 22.04.5 LTS (Fresh Install)
Storage: Dedicated ZFS dataset mounted at /opt/zextras
Version: Carbonio CE (Current 2026 Repository Build as of 3/22/26)
Component: carbonio-directory-server / OpenLDAP

The Issue:

During a fresh installation, carbonio-bootstrap fails at the "Initializing ldap..." phase with the error Starting openldap...failed.

Running the LDAP daemon manually in debug mode via: sudo su - zextras -c "/opt/zextras/common/libexec/slapd -d 1" Reveals the daemon is crashing immediately with: daemon: bind(7) failed errno=13 (Permission denied)

The Root Cause:

The unprivileged zextras user is attempting to bind OpenLDAP to port 389 (a privileged port < 1024). In recent builds, the slapd binary was moved to /opt/zextras/common/libexec/slapd. The .deb package's post-installation script fails to grant the required cap_net_bind_service capability to the binary at this new path.

Running the legacy zmfixperms script does not resolve this, as it only fixes standard POSIX file permissions, not kernel capabilities.

Steps to Reproduce:

Mount a dedicated drive/dataset to /opt/zextras and chown 999:999.
Install the package via apt install carbonio-ce.
Run carbonio-bootstrap.
The bootstrap crashes during LDAP initialization because the daemon is killed by the kernel when attempting to bind to port 389.

The Fix / Workaround:

Before running carbonio-bootstrap, manually grant the required network capability to the new binary path:

Bash

sudo setcap 'cap_net_bind_service=+ep' /opt/zextras/common/libexec/slapd

Once applied, carbonio-bootstrap finishes flawlessly.

Recommendation for Zextras: Please update the post-install hooks in the carbonio-directory-server Debian package to ensure setcap is successfully applied to /opt/zextras/common/libexec/slapd, regardless of underlying storage mounts.

virtual room works but not with non members when i send link

laratz — Fri, 20 Mar 2026 15:45:25 +0000

Everything on carbonio works great the video meeting with other members works to but when I copy the link of a virtual room and send it to the guest the page that appears says the meeting you are looking for does not exist... Is anyone able to send link and works with external guests ?

Error with carbonio-ws-collaboration.service

WRD — Wed, 18 Mar 2026 21:37:10 +0000

After a brand new install using step by step install instructions all is good except when starting "carbonio-ws-collaboration.service it fails with the following error:

Caused by: org.postgresql.util.PSQLException: Connection to 127.78.0.4:20003 refused. Check that the hostname and port are correct and that the postmaster is accepting TCP/IP connections

The proper SQL port is 5432 however ws-collab keeps trying 20003.

I have attempted to change the port in the following two ways:

1) first by editing the "carbonio-ws-collaboration.hcl" file located in "etc/zextras/service-discover"

2) and this way, "kv put -token-file="/etc/carbonio/ws-collaboration/service-discover/token" "carbonio-ws-collaboration/db-port" "5432""

Neither of these options work. Startup still fails with the same exact error as above. What am I missing. Where do I go from here.

Before anyone says to reinstall, here is what has happened.

1) installed using the official script file (probably 5 or 6 times) these all failed. I could not even get in to the WebAdmin

2) then I installed using step by step instructions, I did this two times because I missed something the first go around

with the second install everything works except for the ws-collab.

Here is my layout:

16GB RAM

1TB Storage

Ubuntu 24.04

Carbonio-ce 26.3

Please help!!!

WRD

Certbot runtime error

hwoffinden — Tue, 17 Mar 2026 13:28:55 +0000

Hi.

I'm running Carbonio CE 26.3.1 on RHEL8.

Apparently the automatic renewal of Let's Encrypt SSL certificates stopped working after upgrading to 25.12.0.
I see that now when the certificates are expiring one by one.

Any idea how to fix this?

$ certbot certificates
An unexpected error occurred:
KeyError: 'manual'
Ask for help or search for solutions at https://community.letsencrypt.org. See the logfile /tmp/certbot-log-j7ocicto/log or re-run Certbot with -v for more details.
$ cat /tmp/certbot-log-j7ocicto/log
2026-03-17 13:56:57,083:DEBUG:certbot._internal.main:certbot version: 2.11.1
2026-03-17 13:56:57,083:DEBUG:certbot._internal.main:Location of certbot entry point: /opt/zextras/common/certbot/bin/carbonio-certbot
2026-03-17 13:56:57,083:DEBUG:certbot._internal.main:Arguments: []
2026-03-17 13:56:57,084:DEBUG:certbot._internal.main:Discovered plugins: PluginsRegistry()
2026-03-17 13:56:57,086:DEBUG:certbot._internal.log:Exiting abnormally:
Traceback (most recent call last):
File "/opt/zextras/common/certbot/bin/carbonio-certbot", line 8, in
sys.exit(main())
File "/opt/zextras/common/certbot/lib/python3.8/site-packages/certbot/main.py", line 19, in main
return internal_main.main(cli_args)
File "/opt/zextras/common/certbot/lib/python3.8/site-packages/certbot/_internal/main.py", line 1877, in main
config = cli.prepare_and_parse_args(plugins, cli_args)
File "/opt/zextras/common/certbot/lib/python3.8/site-packages/certbot/_internal/cli/__init__.py", line 370, in prepare_and_parse_args
helpful.add(
File "/opt/zextras/common/certbot/lib/python3.8/site-packages/certbot/_internal/cli/helpful.py", line 418, in add
self.actions.append(self._add(topics, *args, **kwargs))
File "/opt/zextras/common/certbot/lib/python3.8/site-packages/certbot/_internal/cli/helpful.py", line 441, in _add
if not isinstance(topic, bool) and self.visible_topics:
KeyError: 'manual'
2026-03-17 13:56:57,086:ERROR:certbot._internal.log:An unexpected error occurred:
2026-03-17 13:56:57,086:ERROR:certbot._internal.log:KeyError: 'manual'

Thanks!