TetraWiki - User contributions [en]

ITD - Zimbra Multi Server Deployment

2021-04-10T04:36:49Z

Harsh:

'''Procedure :'''

DC Server Details

1. 10.176.24.116 - dcplzmpxy01 - Primary MTA+Proxy
2. 10.176.24.117 - dcplzmpxy02 - Secondary MTA+Proxy
3. 10.176.24.118 - dcplzlmmr01 - Master LDAP
4. 10.176.24.119 - dcplzlmmr02 - Slave LDAP
5. 10.176.24.120 - dcplzmbox01a - Primary Mailbox
6. 10.176.24.121 - dcplzmbox01b - Secondary Mailbox
7. 10.176.24.137 - dcplzmbox01 - Mailbox Cluster IP
8. 10.176.24.138 - dcplzmdoctr - Docs server

DR Server Details

1. 10.144.24.179 - drplzimtpx01 - Primary MTA+Proxy
2. 10.144.24.180 - drplzimtpx02 - Secondary MTA+Proxy
3. 10.144.24.181 - drplzilpmr01 - Master LDAP
4. 10.144.24.182 - drplzilpmr02 - Slave LDAP
5. 10.144.24.177 - dcplzmbox01a - Primary Mailbox
6. 10.144.24.178 - dcplzmbox01b - Secondary Mailbox
7. 10.144.24.137 - dcplzmbox01 - Mailbox Cluster IP
8. 10.144.24.138 - drplzmdoctr - Docs server

1. Install/Configure Zimbra NE 8.8.15 GA Patch 15 Multi Components Architecture - LDAP, Mailbox and MTA + Proxy all on different nodes

NOTE: Installations/Configurations are same for both DC and DR.

Ref : https://zimbra.github.io/installguides/latest/multi.html

- Install Master LDAP

1. ./install.sh
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. Install zimbra-ldap [Y] Y
5. Remaining Packages will be marked "No" for installation.
6. Type 1 to display the Common Configuration submenu.
-> Type 2 and add Master LDAP as 'dcplzmmr01.incometax.co.in'
-> Type 4 to display the automatically generated LDAP admin password : 'root123'
-> Type 7 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
-> From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
-> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
-> The passwords listed in the LDAP configuration menu are automatically generated. Check the passwords for LDAP root, LDAP replication, LDAP Postfix, LDAP Amavis, and LDAP Nginx, they must be same as DC LDAP Master LDAP, if not enter the corresponding number 4 through 8 and change the passwords to 'root123'.
-> Type 'a' to apply configurations.

- Install Slave LDAP
1. ./install.sh
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. Install zimbra-ldap [Y] Y
5. Remaining Packages will be marked "No" for installation.
6. Type 1 to display the Common Configuration submenu.
-> Type 2 to change/add LDAP Master HostName : 'dcplzlmmr01.incometax.gov.in'
-> Type 4 to display the automatically generated LDAP admin password : 'root123'
-> Type 7 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
7. From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
-> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
8. Type 'a' to apply configurations.

* NOTE : Enable LDAP Replication on Master LDAP
:-> /opt/zimbra/libexec/zimbraldapenablereplica

- Install MailBox
1 ./install.sh
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. zimbra-logger, zimbra-snmp, zimbra-store, zimbra-apache, zimbra-spell, zimbra-convertd, zimbra-archiving, zimbra-chat, zimbra-drive, zimbra-network-modules-ng will be marked 'Yes' for installation.
5. Remaining packages will not be installed.
6. Type Y, and press Enter to modify the system.
7. Type 1 to display the Common Configuration submenu.
-> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
-> Type 4, press Enter, and type the LDAP password : 'root123'
-> Type 8 to set the correct time zone : 'Asia/Kolkata'
8. Type r to return to the Main menu.
9. From the Main menu, type 4 for zimbra-store to view the Store configuration settings.
-> Type 4 and set the password for the administrator account : 'root123'
-> Type the corresponding number to set the SMTP host. This is the mta-server host name : 'dcplzmpxy01.incometax.gov.in'
-> Type r to return to the Main menu.
10. When the mailbox server is configured, return to the Main menu and type 'a' to apply the configuration changes.

* NOTE : Check mailbox, Open 'https://dcplzmbox01.incometax.gov.in:7071' in browser.

- Install MTA + Proxy

1. ./install.sh --platform-override --skip-activation-check --license /opt/ZCSLicense.xml
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. zimbra-mta, zimbra-dnscache, zimbra-proxy, zimbra-memcached will be marked 'Yes' for installation.
5. Remaining packages will not be installed.
6. Type Y, and press Enter to modify the system. The selected packages are installed on the server.
7. Type 1 to display the Common Configuration submenu.
-> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
-> Type 4, press Enter, and type the LDAP password : 'root123'
-> Type 8 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
8. Type 2 to got to the MTA configuration menu.
-> Select the menu number for Bind password for postfix ldap user : 'root123'
-> Select the menu number for Bind password for amavis ldap user : 'root123'
9. Type r to return to the Main menu.
10. Type 'a' to apply the configuration changes.

2. Install Zimbra Connect on MailBox Server

- yum install zimbra-connect
- Zimbra Connect features can be enabled and disabled via the zxsuite config command line utility:

Enable Zimbra Connect «Advanced» features
Property: teamChatEnabled
Available in: COS, account
Enable or disable the chat history
Property: historyEnabled
Available in: global, server, COS, account
Enable or disable Video Chat
Property: videoChatEnabled
Available in: global, server, COS, account

3. Install Zimbra Docs Server

All mailbox servers will need to be able to directly communicate with the Docs Server over port 8443 (HTTPS Backend), which must be open on both ends.
The Docs Server communicates with the Extension through port 9980, so incoming traffic from all mailbox and proxy servers to that port must be allowed. The Docs Server component must
also be able to directly communicate with the master LDAP server as well as with all Mailbox servers.

- Now, get this LDAP information,
zmlocalconfig -s ldap_master_url zimbra_ldap_user zimbra_ldap_userdn zimbra_ldap_password

Proxy Nodes

/opt/zimbra/libexec/zmproxyconfgen as the zimbra user and then restart the proxy service running zmproxyctl restart as the same user.

Mailbox Nodes

The com_zextras_docs Zimlet is available in the Zimbra repository, so it can be easily downloaded and deployed by running apt-get install zimbra-docs.

4. Zimbra - Redhat HA Cluster

Zimbra MailBox Clustering

yum groupinstall 'High Availability'
yum groupinstall 'Resilient Storage'

systemctl start pcsd
systemctl enable pcsd

passwd hacluster

pcs cluster setup --name Mailbox-Cluster dcplzmbox01a.incometax.gov.in dcplzmbox01b.incometax.gov.in pcs cluster start --all
pcs cluster enable --all
pcs status corosync
pcs property list

pcs resource create ClusterIP ocf:heartbeat:IPaddr2 ip=10.176.24.137 cidr_netmask=24 op monitor interval=30s

pcs resource create dlm ocf:pacemaker:controld op monitor interval=30s on-fail=fence clone interleave=true ordered=true
pcs resource create clvmd ocf:heartbeat:clvm op monitor interval=30s on-fail=fence clone interleave=true ordered=true
pcs constraint order start dlm-clone then clvmd-clone
pcs constraint colocation add clvmd-clone with dlm-clone

pvcreate /dev/vdb1
vgcreate -cy vg_cluster /dev/vdb1
lvcreate -l100%FREE -n lv_cluster vg_cluster
mkfs.gfs2 -p lock_dlm -t mailbox_cluster:gfs2 -j 2 /dev/vg_cluster/lv_cluster

pcs resource create fs_gfs2 Filesystem device="/dev/vg_cluster/lv_cluster" directory="/opt/zimbra" fstype="gfs2" options="noatime,nodiratime" op monitor interval=10s on-fail=fence clone interleave=true
pcs constraint order start clvmd-clone then fs_gfs2-clone
pcs constraint colocation add fs_gfs2-clone with clvmd-clone
pcs constraint show

pcs stonith create rhevfence fence_rhevm stonith-timeout=120 pcmk_host_map="GD9109.gstn.org.in:GD9109 GD9110.gstn.org.in:GD9110" ipaddr=172.18.102.22 ssl=1 login=cluster_admin passwd=XXXXXXX

Zimbra MTA clustering

yum -y install pacemaker pcs
systemctl start pcsd
systemctl enable pcsd
passwd hacluster
pcs cluster start --all
pcs cluster start --all
pcs status corosync
pcs property list
pcs resource create Virtual_IP ocf:heartbeat:IPaddr2 ip=172.18.201.13 cidr_netmask=24 op monitor interval=30s
cs stonith create rhevfence fence_rhevm stonith-timeout=120 pcmk_host_map=" gd9107.gstn.org.in:Zimbra-MTA_Proxy_1 gd9108.gstn.org.in:Zimbra-MTA_Proxy_2 " ipaddr=172.18.102.22 ssl=1 login=cluster_admin passwd=XXXXXXX

************************************************

ISGEC - Samba Migration

2021-04-10T03:55:04Z

Harsh: Created page with "You need to backup all of the above files and directories from old server to new Linux server. Commands to type on old Linux system First create a tar ball of old uses (old..."

You need to backup all of the above files and directories from old server to new Linux server.

Commands to type on old Linux system

First create a tar ball of old uses (old Linux system). Create a directory:
# mkdir /root/move/

Setup UID filter limit:
# export UGIDLIMIT=500

Now copy /etc/passwd accounts to /root/move/passwd.mig using awk to filter out system account (i.e. only copy user accounts)
# awk -v LIMIT=$UGIDLIMIT -F: '($3>=LIMIT) && ($3!=65534)' /etc/passwd > /root/move/passwd.mig

Copy /etc/group file:Commands to type on new Linux system

First, make a backup of current users and passwords:
# mkdir /root/newsusers.bak
# cp /etc/passwd /etc/shadow /etc/group /etc/gshadow /root/newsusers.bak

Now restore passwd and other files in /etc/
# cd /path/to/location
# cat passwd.mig >> /etc/passwd
# cat group.mig >> /etc/group
# cat shadow.mig >> /etc/shadow
# /bin/cp gshadow.mig /etc/gshadow

Please note that you must use >> (append) and not > (create) shell redirection.

Now copy and extract home.tar.gz to new server /home
# cd /
# tar -zxvf /path/to/location/home.tar.gz

Now copy and extract mail.tar.gz (Mails) to new server /var/spool/mail
# cd /
# tar -zxvf /path/to/location/mail.tar.gz

Now reboot system; when the Linux comes back, your user accounts will work as they did before on old system:
# reboot
# awk -v LIMIT=$UGIDLIMIT -F: '($3>=LIMIT) && ($3!=65534)' /etc/group > /root/move/group.mig

Copy /etc/shadow file:
# awk -v LIMIT=$UGIDLIMIT -F: '($3>=LIMIT) && ($3!=65534) {print $1}' /etc/passwd | tee - |egrep -f - /etc/shadow > /root/move/shadow.mig

Copy /etc/gshadow (rarely used):
# cp /etc/gshadow /root/move/gshadow.mig

Make a backup of /home and /var/spool/mail dirs:
# tar -zcvpf /root/move/home.tar.gz /home
# tar -zcvpf /root/move/mail.tar.gz /var/spool/mail

scp -r /root/move/* user@new.linuxserver.com:/path/to/location

ISGEC - Next Cloud Deployment

2021-04-10T00:35:48Z

Harsh: Created page with "ref : https://computingforgeeks.com/install-nextcloud-on-centos-with-php-apache-mariadb/ sudo setenforce 0 sudo sed -i 's/^SELINUX=.*/SELINUX=permissive/g' /etc/selinux/con..."

ref : https://computingforgeeks.com/install-nextcloud-on-centos-with-php-apache-mariadb/

sudo setenforce 0
sudo sed -i 's/^SELINUX=.*/SELINUX=permissive/g' /etc/selinux/config

yum -y install epel-release yum-utils
yum -y install http://rpms.remirepo.net/enterprise/remi-release-7.rpm

yum-config-manager --disable remi-php54
yum-config-manager --enable remi-php73

yum -y install vim httpd php php-cli php-mysqlnd php-zip php-devel php-gd php-mcrypt php-mbstring php-curl php-xml php-pear php-bcmath php-json php-pdo php-pecl-apcu php-pecl-apcu-devel

https://computingforgeeks.com/install-mariadb-10-on-ubuntu-18-04-and-centos-7/

cat <<EOF | sudo tee /etc/yum.repos.d/MariaDB.repo
[mariadb]
name = MariaDB
baseurl = http://yum.mariadb.org/10.4/centos7-amd64
gpgkey=https://yum.mariadb.org/RPM-GPG-KEY-MariaDB
gpgcheck=1
EOF

yum makecache fast
yum -y install MariaDB-server MariaDB-client
systemctl enable --now mariadb

mysql_secure_installation
root_pw - tetra123

export http_proxy=http://192.168.25.190:3128/
export https_proxy=http://192.168.25.190:3128/
export ftp_proxy=http://192.168.25.190:3128/

mysql -p

CREATE USER 'nextcloud'@'localhost' IDENTIFIED BY "StrongPassword";
CREATE DATABASE nextcloud;
GRANT ALL PRIVILEGES ON nextcloud.* TO 'nextcloud'@'localhost';
FLUSH PRIVILEGES;
QUIT

yum -y install wget unzip

wget https://download.nextcloud.com/server/releases/latest-18.zip
unzip latest-18.zip
mv nextcloud/ /var/www/html/
mkdir -p /home/nextcloud/data
ln -s /home/nextcloud/data /var/www/html/nextcloud/data
chown apache:apache -R /var/www/html/nextcloud/data
chown apache:apache -R /var/www/html/nextcloud/

+
iptables -t nat -A PREROUTING -p tcp --dport 7780 -j DNAT --to-destination 192.168.25.225:80
iptables -t nat -A PREROUTING -p tcp --dport 7780 -j DNAT --to-destination 192.168.25.225:80
iptables -t nat -A POSTROUTING -p tcp -d 192.168.25.225 --dport 80 -j SNAT --to-source 192.168.25.190
+

vim /etc/httpd/conf.d/nextcloud.conf
<VirtualHost *:80>
ServerName fileserver.isgec.com
ServerAdmin admin@example.com
DocumentRoot /var/www/html/nextcloud
<directory /var/www/html/nextcloud>
Require all granted
AllowOverride All
Options FollowSymLinks MultiViews
SetEnv HOME /var/www/html/nextcloud
SetEnv HTTP_HOME /var/www/html/nextcloud
</directory>
</VirtualHost>

admin - Passiv_66%%

App store time out issue

https://help.nextcloud.com/t/curl-error-28-appstore-blank-no-apps-shown-request-timeout/70142
In /var/www/html/nextcloud/lib/private/App/AppStore/Fetcher/Fetcher.php
On line 98 change the timeout from 10 to 30 or 90
in /var/www/html/nextcloud/lib/private/Http/Client.php
On line 66 change the timeout from 30 to 90

Main Page/Isgec-Piler-Archive

2021-04-10T00:28:26Z

Harsh: Blanked the page

ISGEC - Piler Archive Server

2021-04-10T00:05:41Z

Harsh: Created page with "'''Procedure :''' setenforce 0 hostnamectl set-hostname piler.isgec.com yum install mariadb-devel.x86_64 mariadb-libs.x86_64 yum -y remove postfix && yum -y update yu..."

'''Procedure :'''

setenforce 0
hostnamectl set-hostname piler.isgec.com

yum install mariadb-devel.x86_64 mariadb-libs.x86_64
yum -y remove postfix && yum -y update
yum -y install epel-release gcc make wget libzip sysstat
yum -y install tre tre-devel python python-devel MySQL-python openssl openssl-devel
yum -y install http://sphinxsearch.com/files/sphinx-2.3.2-1.rhel7.x86_64.rpm //python - to restructure docs
yum install https://centos7.iuscommunity.org/ius-release.rpm
yum install https://repo.ius.io/ius-release-el$(rpm -E '%{rhel}').rpm
yum -y install httpd mod_ssl php72u php72u-cli php72u-common php72u-gd php72u-mbstring php72u-mysqlnd php72u-pdo php72u-ldap
yum -y install tcp_wrappers tcp_wrappers-devel catdoc poppler poppler-utils unrtf tnef libpst
yum install mariadb-server

systemctl restart mariadb && systemctl enable mariadb

mysql_secure_installation - Set root password

cd && wget https://bitbucket.org/jsuto/piler/downloads/xlhtml-0.5.1-sj-mod.tar.gz && tar xfvz xlhtml* && cd xlhtml* && ./configure && make && make install
groupadd piler
useradd -g piler -m -s /bin/sh -d /var/piler piler
usermod -L piler //lock account
chmod 755 /var/piler
cd && wget https://bitbucket.org/jsuto/piler/downloads/piler-1.3.5.tar.gz
tar zxvf piler-* && cd piler-*
./configure --localstatedir=/var --with-database=mysql
make
make install
ldconfig //creating necessary links
make postinstall
echo /usr/local/lib > /etc/ld.so.conf.d/piler.conf

vi /usr/local/etc/piler/piler.conf - hostid as hostname
/etc/init.d/rc.piler start

su - piler
/etc/init.d/rc.searchd start
sed -i '$ a /etc/init.d/rc.piler start' /etc/rc.d/rc.local
sed -i '$ a /etc/init.d/rc.searchd start' /etc/rc.d/rc.local
chmod 755 /etc/rc.d/rc.local
sed -i 's|DirectoryIndex index.html|DirectoryIndex index.html index.php|' /etc/httpd/conf/httpd.conf
sed -i 's|DocumentRoot "/var/www/html"|DocumentRoot "/var/piler/www"|' /etc/httpd/conf/httpd.conf
sed -i 's|ErrorLog "logs/error_log"|ErrorLog "/var/log/httpd/mailarchiver-error.log"|' /etc/httpd/conf/httpd.conf
sed -i '$ a <Directory "/var/piler/www">' /etc/httpd/conf/httpd.conf
sed -i '$ a AllowOverride All' /etc/httpd/conf/httpd.conf
sed -i '$ a Require all granted' /etc/httpd/conf/httpd.conf
sed -i '$ a </Directory>' /etc/httpd/conf/httpd.conf
sed -i '$ a Defaults requiretty' /etc/sudoers
sed -i '$ a Defaults:%apache !requiretty' /etc/sudoers

apachectl configtest
systemctl restart httpd
systemctl restart firewalld && systemctl enable firewalld
firewall-cmd --permanent --zone=public --add-service=smtp
firewall-cmd --permanent --zone=public --add-service=http
firewall-cmd --permanent --zone=public --add-service=https
firewall-cmd --reload

cp /var/piler/www/config-site.php /usr/local/etc/piler/
/etc/init.d/rc.searchd stop
/etc/init.d/rc.piler stop

mkdir -p /home/piler
rsync -av /var/piler/ /home/piler/
ln -s /var/piler /home/piler
chown piler.piler /home/piler
/etc/init.d/rc.searchd start
/etc/init.d/rc.piler start

/etc/init.d/rc.searchd status
/etc/init.d/rc.piler status

yum install sshfs
mkdir /old_mails

//with screen command

sshfs -o allow_other,uid=1000,gid=1000 192.168.25.190:/opt/zimbra/store/0/ /old_mails/ // To mount dirs and files

/etc/init.d/rc.piler start
/etc/init.d/rc.searchd start

pilerimport -d /old_mails/

vi /var/piler/www/config.php
$config['ENABLE_LDAP_AUTH'] = 1;
$config['LDAP_HOST'] = 'zimbra.isgec.com';
$config['LDAP_PORT'] = 389;
$config['LDAP_MAIL_ATTR'] = 'mail';
$config['LDAP_ACCOUNT_OBJECTCLASS'] = 'zimbraAccount';
$config['LDAP_DISTRIBUTIONLIST_OBJECTCLASS'] = 'zimbraDistributionList';
$config['LDAP_DISTRIBUTIONLIST_ATTR'] = 'zimbraMailForwardingAddress';
$config['LDAP_HELPER_DN'] = 'uid=zimbra,cn=admins,cn=zimbra';
$config['LDAP_HELPER_PASSWORD'] = 'wQyIzBhr';
$config['LDAP_AUDITOR_MEMBER_DN'] = '';
$config['LDAP_ADMIN_MEMBER_DN'] = '';
$config['LDAP_BASE_DN'] = '';

//On Zimbra Server
vi /opt/zimbra/common/conf/main.cf
always_bcc = archive@piler.isgec.com

su - zimbra
zmcontrol restart

That’s almost it for Piler – Browse to http://Piler.domain.local:8080 to access the web interface.

Default Login Details:
User: administrator/admin
Password: pilerrocks

Logs:

Mail logs - /var/log/maillog
Error Logs - mailarchiver-error.log

192.168.25.199
P@ssw0rd@2020

Pahwa - Trend IMSS Deployment

2021-04-10T00:01:22Z

Harsh: Created page with "'''TREND IMSS''' Ref: https://docs.trendmicro.com/all/ent/imss/v7.1/en-us/linux/imss_7.1_linux_ig.pdf Preparing Postfix (MTA) Insert or modify the following settings to /et..."

'''TREND IMSS'''

Ref: https://docs.trendmicro.com/all/ent/imss/v7.1/en-us/linux/imss_7.1_linux_ig.pdf

Preparing Postfix (MTA)

Insert or modify the following settings to /etc/postfix/main.cf
mydomain = your.domain.name
myhostname = your.hostname.domainname
mydestination = $myhostname, localhost.$mydomain, $mydomain
default_process_limit=200
imss_timeout=10m
imss_connect_timeout=1s
content_filter = imss:localhost:10025
imss_destination_recipient_limit=200
imss_destination_concurrency_limit=200
Insert the following settings to /etc/postfix/master.cf
#IMSS: content filter smtp transport imss for IMSS
imss unix – – n – – smtp
–o disable_dns_lookups=yes
–o smtp_connect_timeout=$imss_connect_timeout
-o smtp_data_done_timeout=$imss_timeout
#IMSS: content filter loop back smtpd
localhost:10026 inet n – n – 200 smtpd
–o content_filter=
–o smtpd_timeout=$imss_timeout
–o local_recipient_maps=
–o myhostname=postfix.imss71

Download and install the Trend IMSS package and configure via Web Console.

TRIBURG - Desktop Central and AD Deployment

2021-04-09T23:47:37Z

Harsh:

'''DESKTOP CENTRAL - WINDOWS'''

Ref: https://www.manageengine.com/products/desktop-central/help/getting_started/installing_desktop_central.html

Desktop Central is distributed in the EXE Format.
Run the self-extracting EXE with an Install Shield program for installation and follow the instructions provided. The installation wizard will guide you through a series of instructions like the installation directory, web server port, etc.
You can either install the product with the default values or can change the values as required. If you are changing the web server port (default port is 8020), ensure that you open the appropriate port in the firewall.
Upon successful installation of the product, all the required components like the web server and database server will automatically be installed.

1. Prerequisites
Full Host Name –
IP Address –
EXE File Download Link:- https://www.manageengine.com/products/desktop-central/download.html

We have download for 64bit

2. Installation Process

1. Double click on ManageEngine Desktop Central 9 setup.exe file.

2. Below window will be pop up.

3. Click Next.

4. Accept the License Agreement : Click On Yes.

5. Provide the Destination folder for DC : Click on Browse.

6. Select D drive > Next.

7. Define D Drive exception from Anti-Virus Scanners : Click on Ok.

8. Default port is 8020 > Click on Next.

9. Click on Next.

10. Click on the skip because that time we did no't have the certificate details at that point of time.

11. Finish

'''SAMBA4 ADC - LINUX'''

vi /etc/yum.repos.d/local.repo

[local]
name=local
baseurl=file:///mnt
gpgcheck=0
enabled=1

yum install perl gcc attr libacl-devel libblkid-devel gnutls-devel readline-devel python-devel gdb pkgconfig krb5-workstation zlib-devel setroubleshoot-server libaio-devel setroubleshoot-plugins policycoreutils-python libsemanage-python perl-ExtUtils-MakeMaker perl-Parse-Yapp perl-Test-Base popt-devel libxml2-devel libattr-devel keyutils-libs-devel cups-devel bind-utils libxslt docbook-style-xsl openldap-devel autoconf python-crypto pam-devel

Download samba file from https://www.samba.org/ and extract it.
tar xvzf samba-4.4.4.tar.gz
cd samba-4.4.4/
./configure
make
make install
/usr/local/samba/bin/samba-tool domain provision --use-rfc2307 --interactive

- Set the permissions on samba4 file.
# chmod 755 /etc/rc.d/init.d/samba4
# chmod +x /etc/rc.d/init.d/samba4
# ln -s /etc/rc.d/init.d/samba4 /etc/rc3.d/S80samba4
# chkconfig --add samba4
# chkconfig samba4 on
service samba4 restart
/usr/local/samba/bin/smbclient -L localhost -U%

TRIBURG - Desktop Central and AD Deployment

2021-04-09T23:42:51Z

Harsh:

TRIBURG - Desktop Central and AD Deployment

2021-04-09T23:38:38Z

Harsh:

TRIBURG - Desktop Central and AD Deployment

2021-04-09T23:36:22Z

Harsh:

TRIBURG - Desktop Central and AD Deployment

2021-04-09T23:35:57Z

Harsh:

TRIBURG - Desktop Central and AD Deployment

2021-04-09T23:35:11Z

Harsh: Created page with "'''DESKTOP CENTRAL - WINDOWS''' Ref: https://www.manageengine.com/products/desktop-central/help/getting_started/installing_desktop_central.html Desktop Central is distribut..."

ITD - ELK Multi Server Deployment

2021-04-09T23:22:14Z

Harsh:

'''Procedure :'''

UAT Server Details
ELK_Kafka_Cluster1_UAT dcnluelkkafcl01 10.176.16.121
ELK_Elastic_Search1_UAT dcnluelkelse01 10.176.16.122
ELK_Logtash dcnlelklog 10.176.16.123
ELK_Kibana dcnlelkkib 10.176.16.124

PDC Server Details
ELK_Kafka_Node1_PDC 10.176.25.233 dcplekafka01
ELK_Kafka_Node2_PDC 10.176.25.234 dcplekafka02
ELK_Elastic_Search_Master_Node_1 10.176.25.235 dcplelkesmas01
ELK_Elastic_Search_Master_Node_2 10.176.25.236 dcplelkesmas02
ELK_Elastic_Search_Master_Node_3 10.176.25.237 dcplelkesmas03
ELK_Elastic_Search_Slave_Node_1 10.176.25.238 dcplelkesdat01
ELK_Elastic_Search_Slave_Node_2 10.176.25.239 dcplelkesdat02
ELK_Logstash Node 1 10.176.25.240 dcplelklogst01
ELK_Logstash Node 2 10.176.25.241 dcplelklogst02
ELK_Kibana Node 10.176.25.242 dcplelkkibana

BCP Server Details
ELK_Kafka_Node1_BCP 10.144.24.233 drplekafka01
ELK_Kafka_Node2_BCP 10.144.24.234 drplekafka02
ELK_Elastic_Search_Master_Node_1 10.144.24.235 drplelkesmas01
ELK_Elastic_Search_Master_Node_2 10.144.24.236 drplelkesmas02
ELK_Elastic_Search_Master_Node_3 10.144.24.237 drplelkesmas03
ELK_Elastic_Search_Slave_Node_1 10.144.24.238 drplelkesdat01
ELK_Elastic_Search_Slave_Node_2 10.144.24.239 drplelkesdat02
ELK_Logstash Node 1 10.144.24.240 drplelklogst01
ELK_Logstash Node 2 10.144.24.241 drplelklogst02
ELK_Kibana Node 10.144.25.242 drplelkkibana

1. Install/Configure ELK Multi Components Architecture - Elasticsearch, Logstash, Kibana and Kafka all on different nodes

NOTE: Installations/Configurations are same for both DC and DR.

INSTALL KAFKA

Installing pre-requisities,

yum install java-1.8.0-openjdk
yum install java-1.8.0-openjdk-devel

wget https://mirrors.estointernet.in/apache/kafka/2.4.1/kafka_2.12-2.4.1.tgz

tar -xzf kafka_2.12-2.4.1.tgz
cp -r kafka_2.12-2.4.1 /opt/kafka

cd /opt/kafka/
bin/zookeeper-server-start.sh config/zookeeper.properties &
/opt/kafka/bin/kafka-server-start.sh /opt/kafka/config/server.properties &

yum install net-tools
netstat -ntplu // check ports and services.

Enable Kafka at boot time

sudo vi /etc/systemd/system/zookeeper.service

[Unit]
Requires=network.target remote-fs.target
After=network.target remote-fs.target

[Service]
Type=simple
ExecStart=/opt/kafka/bin/zookeeper-server-start.sh /opt/kafka/config/zookeeper.properties
ExecStop=/opt/kafka/bin/zookeeper-server-stop.sh
Restart=on-abnormal

[Install]
WantedBy=multi-user.target

Next, create the systemd service file for kafka:

sudo vi /etc/systemd/system/kafka.service

[Unit]
Requires=zookeeper.service
After=zookeeper.service

[Service]
Type=simple

ExecStart=/bin/sh -c '/opt/kafka/bin/kafka-server-start.sh /opt/kafka/config/server.properties > /opt/kafka/kafka.log 2>&1'
ExecStop=/opt/kafka/bin/kafka-server-stop.sh
Restart=on-abnormal

[Install]
WantedBy=multi-user.target

sudo systemctl start kafka

To ensure that the server has started successfully, check the journal logs for the kafka unit:
journalctl -u kafka
sudo systemctl enable kafka

firewall-cmd --permanent --add-port=9092/tcp
firewall-cmd --reload

Configure Filebeat in Kafka machine.

Configuration of Yum for electicsearch

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

vi /etc/yum.repos.d/elasticsearch.repo
[elasticsearch]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

yum install filebeat
systemctl enable filebeat
systemctl start filebeat

vi /etc/filebeat/filebeat.yml
change
#output.elasticsearch:
#hosts: ["localhost:9200"]
output.kafka:
hosts: ["10.176.25.135:9092"]
topic: "filebeat"
codec.json:
pretty: false

filebeat modules enable system
filebeat setup --pipelines --modules system
systemctl restart filebeat

INSTALL ELASTICSEARCH MASTER NODE

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

vi /etc/yum.repos.d/elasticsearch.repo
[elasticsearch]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

yum install java-1.8.0-openjdk
yum install java-1.8.0-openjdk-devel

yum install elasticsearch
vi /etc/elasticsearch/elasticsearch.yml
network.host: 0.0.0.0
discovery.seed_hosts: ["10.176.25.135", "127.0.0.1"] ## Just one Node in UAT ###
. . .
Save and close elasticsearch.yml.
Change Value of java Heap Size in /etc/elasticsearch/jvm.options
-Xms1g
-Xmx1g
to
#-Xms1g
#-Xmx1g
-Xms4g
-Xmx4g

Then, start the Elasticsearch service with systemctl:
systemctl start elasticsearch
Next, run the following command to enable Elasticsearch to start up every time your server boots:
systemctl enable elasticsearch
You can test whether your Elasticsearch service is running by sending an HTTP request:

curl -X GET "localhost:9200"

INSTALL KIBANA

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

vi /etc/yum.repos.d/elasticsearch.repo
[elasticsearch]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

yum install java-1.8.0-openjdk
yum install java-1.8.0-openjdk-devel

yum install kibana

vi /etc/kibana/kibana.yml and change
elasticsearch.hosts: ["http://dcplelkesmas01:9200"]

sudo systemctl enable kibana
sudo systemctl start kibana

Nginx installation on Kibana
wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
yum install epel-release-latest-7.noarch.rpm
yum install nginx
systemctl status nginx
systemctl enable nginx
systemctl start nginx
Now nginx as reverse proxy should be running on the Server .

Set the Selinux and Firewall setting
setsebool httpd_can_network_connect 1 -P
firewall-cmd --zone=public --permanent --add-service=http
firewall-cmd --reload

Then check the configuration for syntax errors:
nginx -t
systemctl restart nginx //to restart

INSTALL LOGSTASH

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

vi /etc/yum.repos.d/elasticsearch.repo
[elasticsearch]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

yum install java-1.8.0-openjdk
yum install java-1.8.0-openjdk-devel
yum install logstash

sudo vi /etc/logstash/conf.d/02-beats-input.conf
Insert the following input configuration. This specifies a beats input that will listen on TCP port 5044.
/etc/logstash/conf.d/02-beats-input.conf
input {
beats {
port => 5044
}
}

/etc/logstash/conf.d/10-syslog-filter.conf
filter {
if [fileset][module] == "system" {
if [fileset][name] == "auth" {
grok {
match => { "message" => ["%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} sshd(?:\[%{POSINT:[system][auth][pid]}\])?: %{DATA:[system][auth] [ssh][event]} %{DATA:[system][auth][ssh][method]} for (invalid user )?%{DATA:[system][auth][user]} from %{IPORHOST:[system][auth][ssh][ip]} port %{NUMBER:[system][auth][ssh][port]} ssh2(: %{GREEDYDATA:[system][auth][ssh][signature]})?",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} sshd(?:\[%{POSINT:[system][auth][pid]}\])?: %{DATA:[system][auth][ssh][event]} user %{DATA:[system][auth][user]} from %{IPORHOST:[system][auth][ssh][ip]}",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} sshd(?:\[%{POSINT:[system][auth][pid]}\])?: Did not receive identification string from %{IPORHOST:[system][auth][ssh][dropped_ip]}",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} sudo(?:\[%{POSINT:[system][auth][pid]}\])?: \s*%{DATA:[system][auth][user]} :( %{DATA:[system][auth][sudo][error]} ;)? TTY=%{DATA:[system][auth][sudo][tty]} ; PWD=%{DATA:[system][auth][sudo][pwd]} ; USER=%{DATA:[system][auth][sudo][user]} ; COMMAND=%{GREEDYDATA:[system][auth][sudo][command]}",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} groupadd(?:\[%{POSINT:[system][auth][pid]}\])?: new group: name=%{DATA:system.auth.groupadd.name}, GID=%{NUMBER:system.auth.groupadd.gid}",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} useradd(?:\[%{POSINT:[system][auth][pid]}\])?: new user: name=%{DATA:[system][auth][user][add][name]}, UID=%{NUMBER:[system][auth][user][add][uid]}, GID=%{NUMBER:[system][auth][user][add][gid]}, home=%{DATA:[system][auth][user][add][home]}, shell=%{DATA:[system][auth][user][add][shell]}$",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} %{DATA:[system][auth][program]}(?:\[%{POSINT:[system][auth][pid]}\])?: %{GREEDYMULTILINE:[system][auth][message]}"] }
pattern_definitions => {
"GREEDYMULTILINE"=> "(.|\n)*"
}
remove_field => "message"
}
date {
match => [ "[system][auth][timestamp]", "MMM d HH:mm:ss", "MMM dd HH:mm:ss" ]
}
geoip {
source => "[system][auth][ssh][ip]"
target => "[system][auth][ssh][geoip]"
}
}
else if [fileset][name] == "syslog" {
grok {
match => { "message" => ["%{SYSLOGTIMESTAMP:[system][syslog][timestamp]} %{SYSLOGHOST:[system][syslog][hostname]} %{DATA:[system][syslog][program]}(?:\[%{POSINT:[system][syslog] [pid]}\])?: %{GREEDYMULTILINE:[system][syslog][message]}"] }
pattern_definitions => { "GREEDYMULTILINE" => "(.|\n)*" }
remove_field => "message"
}
date {
match => [ "[system][syslog][timestamp]", "MMM d HH:mm:ss", "MMM dd HH:mm:ss" ]
}
}
}
}

vi /etc/logstash/conf.d/30-elasticsearch-output.conf
input {
kafka {
bootstrap_servers => "dcplekafka01:9092, dcplekafka02:9092"
topics => ["filebeat", "oracle"]
codec => json
}
}

filter {
mutate {
add_field => {"[@metadata][index]" => "%{[kafka][topic]}"}
}
}

output {
elasticsearch {
hosts => ["dcplelkesmas01:9200", "dcplelkesmas02:9200", "dcplelkesmas03:9200"]
index => "logstash-%{[@metadata][index]}-%{+YYYY.MM.dd}"
}
}
Save and close the file.
If you want to add filters for other applications that use the Filebeat input, be sure to name the files so they’re sorted between the input and the output configuration, meaning that the file names should begin with a two-digit number between 02 and 30 .
Test your Logstash configuration with this command:
sudo -u logstash /usr/share/logstash/bin/logstash --path.settings /etc/logstash -t

ES master and Data node setup

On all master nodes,
Update elasticsearch.yml

cluster.name: es-cluster
node.name: ${HOSTNAME}
node.master: true
node.data: false
##bootstrap.memory_lock: true
network.host: 0.0.0.0
cluster.initial_master_nodes: ["dcplelkesmas01", "dcplelkesmas02", "dcplelkesmas03"]
discovery.zen.minimum_master_nodes: 2
discovery.zen.ping.unicast.hosts: ["dcplelkesmas01", "dcplelkesmas02", "dcplelkesmas03"]

Next,

cat > /etc/default/elasticsearch << EOF
ES_STARTUP_SLEEP_TIME=5
MAX_OPEN_FILES=131070
MAX_LOCKED_MEMORY=unlimited
EOF

cat > /etc/security/limits.conf << EOF
elasticsearch soft memlock unlimited
elasticsearch hard memlock unlimited
EOF

sysctl -w vm.max_map_count=262144
sysctl -p /etc/sysctl.conf
mkdir /usr/share/elasticsearch/data
chown -R elasticsearch:elasticsearch /usr/share/elasticsearch/data

systemctl daemon-reload
systemctl enable elasticsearch
systemctl restart elasticsearch

On Data Nodes

chown -R elasticsearch:elasticsearch /data
mkdir /data/nodes
chown -R elasticsearch:elasticsearch /data/nodes

Add following /etc/elasticsearch/elasticsearch.yml
cluster.name: es-cluster
node.name: ${HOSTNAME}
node.master: false
node.data: true
path.data: /data
network.host: 0.0.0.0
cluster.initial_master_nodes: ["dcplelkesmas01", "dcplelkesmas02", "dcplelkesmas03"]
discovery.zen.minimum_master_nodes: 2
discovery.zen.ping.unicast.hosts: ["dcplelkesmas01", "dcplelkesmas02", "dcplelkesmas03"]

Remove node.path /var/lib/elasticsearch

On Logstash Nodes

vi /etc/logstash/conf.d/30-elasticsearch-output.conf

input {
kafka {
bootstrap_servers => "dcplekafka01:9092, dcplekafka02:9092"
topics => ["filebeat", "oracle"]
codec => json
}
}

filter {
mutate {
add_field => {"[@metadata][index]" => "%{[kafka][topic]}"}
}
}

output {
elasticsearch {
hosts => ["dcplelkesmas01:9200", "dcplelkesmas02:9200", "dcplelkesmas03:9200"]
index => "logstash-%{[@metadata][index]}-%{+YYYY.MM.dd}"
}
}

ELK nodes integration with Cluster
Setup Zookeeper Cluster for Kafka
On Both Kafka
mkdir /home/kafka
mkdir /home/zookeeper
firewall-cmd --zone=trusted --add-source=10.176.25.233 --permanent
firewall-cmd --zone=trusted --add-source=10.176.25.234 --permanent
On Kafka Node 1
cd /home/zookeeper
touch myid
echo "1" >> myid
For /opt/kafka/config/zookeeper.properties on Kafka01
dataDir=/home/zookeeper
clientPort=2181
maxClientCnxns=0
initLimit=5
syncLimit=2
tickTime=2000
# list of servers
server.1=0.0.0.0:2888:3888
server.2=10.176.25.234:2888:3888
Restart zookeeper
systemctl restart zookeeper
On Kafka Node 2
cd /home/zookeeper
touch myid
echo "2" >> myid
For /opt/kafka/config/zookeeper.properties on kafka02
dataDir=/home/zookeeper
clientPort=2181
maxClientCnxns=0
initLimit=5
syncLimit=2
tickTime=2000
# list of servers
server.1=10.176.25.233:3888
server.2=0.0.0.0:2888:3888
Restart zookeeper
systemctl restart zookeeper

Now, Set Kafka to connect to multi node zookeeper cluster

For /opt/kafka/config/server.properties for kafka01

# The id of the broker. This must be set to a unique integer for each broker.
broker.id=10
# A comma separated list of directories under which to store log files
log.dirs=/home/kafka
#advertised.host.name=10.176.25.233

# Add all 2 zookeeper instances IP’s here
zookeeper.connect=localhost:2181,10.176.25.234:2181
zookeeper.connection.timeout.ms=6000
# Restart Kafka - systemctl restart kafka.service

For /opt/kafka/config/server.properties for kafka02

# The id of the broker. This must be set to a unique integer for each broker.
broker.id=20

# A comma seperated list of directories under which to store log files
log.dirs=/home/kafka
#advertised.host.name=10.176.25.234

# Add all 2 zookeeper instances IP’s here
zookeeper.connect=localhost:2181,10.176.25.233:2181
zookeeper.connection.timeout.ms=6000
# Restart Kafka - systemctl restart kafka.service

Testing

On the first machine, produce some messages on the test topic. You can use this command.
$ bin/kafka-topics.sh --create --zookeeper localhost:2181 --replication-factor 1 --partitions 1 --topic test
$ bin/kafka-console-producer.sh --broker-list localhost:9092 --topic test
Now, Type some messages

On the second machine, consume those messages.
$ bin/kafka-console-consumer.sh --bootstrap-server localhost:9092 --topic test --from-beginning

You should be receiving the messages you have typed in the producer command.

ITD - ELK Multi Server Deployment

2021-04-09T23:09:06Z

Harsh:

'''Procedure :'''

UAT Server Details
ELK_Kafka_Cluster1_UAT dcnluelkkafcl01 10.176.16.121
ELK_Elastic_Search1_UAT dcnluelkelse01 10.176.16.122
ELK_Logtash dcnlelklog 10.176.16.123
ELK_Kibana dcnlelkkib 10.176.16.124

PDC Server Details
ELK_Kafka_Node1_PDC 10.176.25.233 dcplekafka01
ELK_Kafka_Node2_PDC 10.176.25.234 dcplekafka02
ELK_Elastic_Search_Master_Node_1 10.176.25.235 dcplelkesmas01
ELK_Elastic_Search_Master_Node_2 10.176.25.236 dcplelkesmas02
ELK_Elastic_Search_Master_Node_3 10.176.25.237 dcplelkesmas03
ELK_Elastic_Search_Slave_Node_1 10.176.25.238 dcplelkesdat01
ELK_Elastic_Search_Slave_Node_2 10.176.25.239 dcplelkesdat02
ELK_Logstash Node 1 10.176.25.240 dcplelklogst01
ELK_Logstash Node 2 10.176.25.241 dcplelklogst02
ELK_Kibana Node 10.176.25.242 dcplelkkibana

BCP Server Details
ELK_Kafka_Node1_BCP 10.144.24.233 drplekafka01
ELK_Kafka_Node2_BCP 10.144.24.234 drplekafka02
ELK_Elastic_Search_Master_Node_1 10.144.24.235 drplelkesmas01
ELK_Elastic_Search_Master_Node_2 10.144.24.236 drplelkesmas02
ELK_Elastic_Search_Master_Node_3 10.144.24.237 drplelkesmas03
ELK_Elastic_Search_Slave_Node_1 10.144.24.238 drplelkesdat01
ELK_Elastic_Search_Slave_Node_2 10.144.24.239 drplelkesdat02
ELK_Logstash Node 1 10.144.24.240 drplelklogst01
ELK_Logstash Node 2 10.144.24.241 drplelklogst02
ELK_Kibana Node 10.144.25.242 drplelkkibana

1. Install/Configure ELK Multi Components Architecture - Elasticsearch, Logstash, Kibana and Kafka all on different nodes

NOTE: Installations/Configurations are same for both DC and DR.

INSTALL KAFKA

Installing pre-requisities,

yum install java-1.8.0-openjdk
yum install java-1.8.0-openjdk-devel

wget https://mirrors.estointernet.in/apache/kafka/2.4.1/kafka_2.12-2.4.1.tgz

tar -xzf kafka_2.12-2.4.1.tgz
cp -r kafka_2.12-2.4.1 /opt/kafka

cd /opt/kafka/
bin/zookeeper-server-start.sh config/zookeeper.properties &
/opt/kafka/bin/kafka-server-start.sh /opt/kafka/config/server.properties &

yum install net-tools
netstat -ntplu // check ports and services.

Enable Kafka at boot time

sudo vi /etc/systemd/system/zookeeper.service

[Unit]
Requires=network.target remote-fs.target
After=network.target remote-fs.target

[Service]
Type=simple
ExecStart=/opt/kafka/bin/zookeeper-server-start.sh /opt/kafka/config/zookeeper.properties
ExecStop=/opt/kafka/bin/zookeeper-server-stop.sh
Restart=on-abnormal

[Install]
WantedBy=multi-user.target

Next, create the systemd service file for kafka:

sudo vi /etc/systemd/system/kafka.service

[Unit]
Requires=zookeeper.service
After=zookeeper.service

[Service]
Type=simple

ExecStart=/bin/sh -c '/opt/kafka/bin/kafka-server-start.sh /opt/kafka/config/server.properties > /opt/kafka/kafka.log 2>&1'
ExecStop=/opt/kafka/bin/kafka-server-stop.sh
Restart=on-abnormal

[Install]
WantedBy=multi-user.target

sudo systemctl start kafka

To ensure that the server has started successfully, check the journal logs for the kafka unit:
journalctl -u kafka
sudo systemctl enable kafka

firewall-cmd --permanent --add-port=9092/tcp
firewall-cmd --reload

Configure Filebeat in Kafka machine.

Configuration of Yum for electicsearch

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

vi /etc/yum.repos.d/elasticsearch.repo
[elasticsearch]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

yum install filebeat
systemctl enable filebeat
systemctl start filebeat

vi /etc/filebeat/filebeat.yml
change
#output.elasticsearch:
#hosts: ["localhost:9200"]
output.kafka:
hosts: ["10.176.25.135:9092"]
topic: "filebeat"
codec.json:
pretty: false

filebeat modules enable system
filebeat setup --pipelines --modules system
systemctl restart filebeat

INSTALL ELASTICSEARCH

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

vi /etc/yum.repos.d/elasticsearch.repo
[elasticsearch]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

yum install java-1.8.0-openjdk
yum install java-1.8.0-openjdk-devel

yum install elasticsearch
vi /etc/elasticsearch/elasticsearch.yml
network.host: 0.0.0.0
discovery.seed_hosts: ["10.176.25.135", "127.0.0.1"] ## Just one Node in UAT ###
. . .
Save and close elasticsearch.yml.
Change Value of java Heap Size in /etc/elasticsearch/jvm.options
-Xms1g
-Xmx1g
to
#-Xms1g
#-Xmx1g
-Xms4g
-Xmx4g

Then, start the Elasticsearch service with systemctl:
systemctl start elasticsearch
Next, run the following command to enable Elasticsearch to start up every time your server boots:
systemctl enable elasticsearch
You can test whether your Elasticsearch service is running by sending an HTTP request:

curl -X GET "localhost:9200"

INSTALL KIBANA

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

vi /etc/yum.repos.d/elasticsearch.repo
[elasticsearch]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

yum install java-1.8.0-openjdk
yum install java-1.8.0-openjdk-devel

yum install kibana

vi /etc/kibana/kibana.yml and change
elasticsearch.hosts: ["http://dcplelkesmas01:9200"]

sudo systemctl enable kibana
sudo systemctl start kibana

Nginx installation on Kibana
wget https://dl.fedoraproject.org/pub/epel/epel-release-latest-7.noarch.rpm
yum install epel-release-latest-7.noarch.rpm
yum install nginx
systemctl status nginx
systemctl enable nginx
systemctl start nginx
Now nginx as reverse proxy should be running on the Server .

Set the Selinux and Firewall setting
setsebool httpd_can_network_connect 1 -P
firewall-cmd --zone=public --permanent --add-service=http
firewall-cmd --reload

Then check the configuration for syntax errors:
nginx -t
systemctl restart nginx //to restart

INSTALL LOGSTASH

rpm --import https://artifacts.elastic.co/GPG-KEY-elasticsearch

vi /etc/yum.repos.d/elasticsearch.repo
[elasticsearch]
name=Elasticsearch repository for 7.x packages
baseurl=https://artifacts.elastic.co/packages/7.x/yum
gpgcheck=1
gpgkey=https://artifacts.elastic.co/GPG-KEY-elasticsearch
enabled=1
autorefresh=1
type=rpm-md

yum install java-1.8.0-openjdk
yum install java-1.8.0-openjdk-devel
yum install logstash

sudo vi /etc/logstash/conf.d/02-beats-input.conf
Insert the following input configuration. This specifies a beats input that will listen on TCP port 5044.
/etc/logstash/conf.d/02-beats-input.conf
input {
beats {
port => 5044
}
}

/etc/logstash/conf.d/10-syslog-filter.conf
filter {
if [fileset][module] == "system" {
if [fileset][name] == "auth" {
grok {
match => { "message" => ["%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} sshd(?:\[%{POSINT:[system][auth][pid]}\])?: %{DATA:[system][auth] [ssh][event]} %{DATA:[system][auth][ssh][method]} for (invalid user )?%{DATA:[system][auth][user]} from %{IPORHOST:[system][auth][ssh][ip]} port %{NUMBER:[system][auth][ssh][port]} ssh2(: %{GREEDYDATA:[system][auth][ssh][signature]})?",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} sshd(?:\[%{POSINT:[system][auth][pid]}\])?: %{DATA:[system][auth][ssh][event]} user %{DATA:[system][auth][user]} from %{IPORHOST:[system][auth][ssh][ip]}",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} sshd(?:\[%{POSINT:[system][auth][pid]}\])?: Did not receive identification string from %{IPORHOST:[system][auth][ssh][dropped_ip]}",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} sudo(?:\[%{POSINT:[system][auth][pid]}\])?: \s*%{DATA:[system][auth][user]} :( %{DATA:[system][auth][sudo][error]} ;)? TTY=%{DATA:[system][auth][sudo][tty]} ; PWD=%{DATA:[system][auth][sudo][pwd]} ; USER=%{DATA:[system][auth][sudo][user]} ; COMMAND=%{GREEDYDATA:[system][auth][sudo][command]}",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} groupadd(?:\[%{POSINT:[system][auth][pid]}\])?: new group: name=%{DATA:system.auth.groupadd.name}, GID=%{NUMBER:system.auth.groupadd.gid}",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} useradd(?:\[%{POSINT:[system][auth][pid]}\])?: new user: name=%{DATA:[system][auth][user][add][name]}, UID=%{NUMBER:[system][auth][user][add][uid]}, GID=%{NUMBER:[system][auth][user][add][gid]}, home=%{DATA:[system][auth][user][add][home]}, shell=%{DATA:[system][auth][user][add][shell]}$",
"%{SYSLOGTIMESTAMP:[system][auth][timestamp]} %{SYSLOGHOST:[system][auth][hostname]} %{DATA:[system][auth][program]}(?:\[%{POSINT:[system][auth][pid]}\])?: %{GREEDYMULTILINE:[system][auth][message]}"] }
pattern_definitions => {
"GREEDYMULTILINE"=> "(.|\n)*"
}
remove_field => "message"
}
date {
match => [ "[system][auth][timestamp]", "MMM d HH:mm:ss", "MMM dd HH:mm:ss" ]
}
geoip {
source => "[system][auth][ssh][ip]"
target => "[system][auth][ssh][geoip]"
}
}
else if [fileset][name] == "syslog" {
grok {
match => { "message" => ["%{SYSLOGTIMESTAMP:[system][syslog][timestamp]} %{SYSLOGHOST:[system][syslog][hostname]} %{DATA:[system][syslog][program]}(?:\[%{POSINT:[system][syslog] [pid]}\])?: %{GREEDYMULTILINE:[system][syslog][message]}"] }
pattern_definitions => { "GREEDYMULTILINE" => "(.|\n)*" }
remove_field => "message"
}
date {
match => [ "[system][syslog][timestamp]", "MMM d HH:mm:ss", "MMM dd HH:mm:ss" ]
}
}
}
}

vi /etc/logstash/conf.d/30-elasticsearch-output.conf
input {
kafka {
bootstrap_servers => "dcplekafka01:9092, dcplekafka02:9092"
topics => ["filebeat", "oracle"]
codec => json
}
}

filter {
mutate {
add_field => {"[@metadata][index]" => "%{[kafka][topic]}"}
}
}

output {
elasticsearch {
hosts => ["dcplelkesmas01:9200", "dcplelkesmas02:9200", "dcplelkesmas03:9200"]
index => "logstash-%{[@metadata][index]}-%{+YYYY.MM.dd}"
}
}
Save and close the file.
If you want to add filters for other applications that use the Filebeat input, be sure to name the files so they’re sorted between the input and the output configuration, meaning that the file names should begin with a two-digit number between 02 and 30 .
Test your Logstash configuration with this command:
sudo -u logstash /usr/share/logstash/bin/logstash --path.settings /etc/logstash -t

EKASTOC SEARCH MASTER

ITD - ELK Multi Server Deployment

2021-04-09T22:58:58Z

Harsh:

ITD - ELK Multi Server Deployment

2021-04-09T22:43:14Z

Harsh:

ITD - ELK Multi Server Deployment

2021-04-09T22:38:35Z

Harsh:

ITD - ELK Multi Server Deployment

2021-04-09T22:37:49Z

Harsh:

ITD - ELK Multi Server Deployment

2021-04-09T22:36:00Z

Harsh:

ITD - ELK Multi Server Deployment

2021-04-09T22:33:36Z

Harsh: Created page with "'''Procedure :''' UAT Server Details ELK_Kafka_Cluster1_UAT dcnluelkkafcl01 10.176.16.121 ELK_Elastic_Search1_UAT dcnluelkelse01 10.176.16.122 ELK_Logtash dcnlelklog 10..."

ITD - Zimbra Multi Server Deployment

2021-04-09T22:15:45Z

Harsh:

'''Procedure :'''

DC Server Details

1. 10.176.24.116 - dcplzmpxy01 - Primary MTA+Proxy
2. 10.176.24.117 - dcplzmpxy02 - Secondary MTA+Proxy
3. 10.176.24.118 - dcplzlmmr01 - Master LDAP
4. 10.176.24.119 - dcplzlmmr02 - Slave LDAP
5. 10.176.24.120 - dcplzmbox01a - Primary Mailbox
6. 10.176.24.121 - dcplzmbox01b - Secondary Mailbox
7. 10.176.24.137 - dcplzmbox01 - Mailbox Cluster IP
8. 10.176.24.138 - dcplzmdoctr - Docs server

DR Server Details

1. 10.144.24.179 - drplzimtpx01 - Primary MTA+Proxy
2. 10.144.24.180 - drplzimtpx02 - Secondary MTA+Proxy
3. 10.144.24.181 - drplzilpmr01 - Master LDAP
4. 10.144.24.182 - drplzilpmr02 - Slave LDAP
5. 10.144.24.177 - dcplzmbox01a - Primary Mailbox
6. 10.144.24.178 - dcplzmbox01b - Secondary Mailbox
7. 10.144.24.137 - dcplzmbox01 - Mailbox Cluster IP
8. 10.144.24.138 - drplzmdoctr - Docs server

1. Install/Configure Zimbra NE 8.8.15 GA Patch 15 Multi Components Architecture - LDAP, Mailbox and MTA + Proxy all on different nodes

NOTE: Installations/Configurations are same for both DC and DR.

Ref : https://zimbra.github.io/installguides/latest/multi.html

- Install Master LDAP

1. ./install.sh
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. Install zimbra-ldap [Y] Y
5. Remaining Packages will be marked "No" for installation.
6. Type 1 to display the Common Configuration submenu.
-> Type 2 and add Master LDAP as 'dcplzmmr01.incometax.co.in'
-> Type 4 to display the automatically generated LDAP admin password : 'root123'
-> Type 7 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
-> From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
-> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
-> The passwords listed in the LDAP configuration menu are automatically generated. Check the passwords for LDAP root, LDAP replication, LDAP Postfix, LDAP Amavis, and LDAP Nginx, they must be same as DC LDAP Master LDAP, if not enter the corresponding number 4 through 8 and change the passwords to 'root123'.
-> Type 'a' to apply configurations.

- Install Slave LDAP
1. ./install.sh
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. Install zimbra-ldap [Y] Y
5. Remaining Packages will be marked "No" for installation.
6. Type 1 to display the Common Configuration submenu.
-> Type 2 to change/add LDAP Master HostName : 'dcplzlmmr01.incometax.gov.in'
-> Type 4 to display the automatically generated LDAP admin password : 'root123'
-> Type 7 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
7. From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
-> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
8. Type 'a' to apply configurations.

* NOTE : Enable LDAP Replication on Master LDAP
:-> /opt/zimbra/libexec/zimbraldapenablereplica

- Install MailBox
1 ./install.sh
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. zimbra-logger, zimbra-snmp, zimbra-store, zimbra-apache, zimbra-spell, zimbra-convertd, zimbra-archiving, zimbra-chat, zimbra-drive, zimbra-network-modules-ng will be marked 'Yes' for installation.
5. Remaining packages will not be installed.
6. Type Y, and press Enter to modify the system.
7. Type 1 to display the Common Configuration submenu.
-> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
-> Type 4, press Enter, and type the LDAP password : 'root123'
-> Type 8 to set the correct time zone : 'Asia/Kolkata'
8. Type r to return to the Main menu.
9. From the Main menu, type 4 for zimbra-store to view the Store configuration settings.
-> Type 4 and set the password for the administrator account : 'root123'
-> Type the corresponding number to set the SMTP host. This is the mta-server host name : 'dcplzmpxy01.incometax.gov.in'
-> Type r to return to the Main menu.
10. When the mailbox server is configured, return to the Main menu and type 'a' to apply the configuration changes.

* NOTE : Check mailbox, Open 'https://dcplzmbox01.incometax.gov.in:7071' in browser.

- Install MTA + Proxy

1. ./install.sh --platform-override --skip-activation-check --license /opt/ZCSLicense.xml
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. zimbra-mta, zimbra-dnscache, zimbra-proxy, zimbra-memcached will be marked 'Yes' for installation.
5. Remaining packages will not be installed.
6. Type Y, and press Enter to modify the system. The selected packages are installed on the server.
7. Type 1 to display the Common Configuration submenu.
-> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
-> Type 4, press Enter, and type the LDAP password : 'root123'
-> Type 8 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
8. Type 2 to got to the MTA configuration menu.
-> Select the menu number for Bind password for postfix ldap user : 'root123'
-> Select the menu number for Bind password for amavis ldap user : 'root123'
9. Type r to return to the Main menu.
10. Type 'a' to apply the configuration changes.

2. Install Zimbra Connect on MailBox Server

- yum install zimbra-connect
- Zimbra Connect features can be enabled and disabled via the zxsuite config command line utility:

Enable Zimbra Connect «Advanced» features
Property: teamChatEnabled
Available in: COS, account
Enable or disable the chat history
Property: historyEnabled
Available in: global, server, COS, account
Enable or disable Video Chat
Property: videoChatEnabled
Available in: global, server, COS, account

3. Install Zimbra Docs Server

All mailbox servers will need to be able to directly communicate with the Docs Server over port 8443 (HTTPS Backend), which must be open on both ends.
The Docs Server communicates with the Extension through port 9980, so incoming traffic from all mailbox and proxy servers to that port must be allowed. The Docs Server component must
also be able to directly communicate with the master LDAP server as well as with all Mailbox servers.

- Now, get this LDAP information,
zmlocalconfig -s ldap_master_url zimbra_ldap_user zimbra_ldap_userdn zimbra_ldap_password

Proxy Nodes

/opt/zimbra/libexec/zmproxyconfgen as the zimbra user and then restart the proxy service running zmproxyctl restart as the same user.

Mailbox Nodes

The com_zextras_docs Zimlet is available in the Zimbra repository, so it can be easily downloaded and deployed by running apt-get install zimbra-docs.

4. Zimbra - Redhat HA Cluser

Zimbra MailBox Clustering

yum groupinstall 'High Availability'
yum groupinstall 'Resilient Storage'

systemctl start pcsd
systemctl enable pcsd

passwd hacluster

pcs cluster setup --name Mailbox-Cluster dcplzmbox01a.incometax.gov.in dcplzmbox01b.incometax.gov.in pcs cluster start --all
pcs cluster enable --all
pcs status corosync
pcs property list

pcs resource create ClusterIP ocf:heartbeat:IPaddr2 ip=10.176.24.137 cidr_netmask=24 op monitor interval=30s

pcs resource create dlm ocf:pacemaker:controld op monitor interval=30s on-fail=fence clone interleave=true ordered=true
pcs resource create clvmd ocf:heartbeat:clvm op monitor interval=30s on-fail=fence clone interleave=true ordered=true
pcs constraint order start dlm-clone then clvmd-clone
pcs constraint colocation add clvmd-clone with dlm-clone

pvcreate /dev/vdb1
vgcreate -cy vg_cluster /dev/vdb1
lvcreate -l100%FREE -n lv_cluster vg_cluster
mkfs.gfs2 -p lock_dlm -t mailbox_cluster:gfs2 -j 2 /dev/vg_cluster/lv_cluster

pcs resource create fs_gfs2 Filesystem device="/dev/vg_cluster/lv_cluster" directory="/opt/zimbra" fstype="gfs2" options="noatime,nodiratime" op monitor interval=10s on-fail=fence clone interleave=true
pcs constraint order start clvmd-clone then fs_gfs2-clone
pcs constraint colocation add fs_gfs2-clone with clvmd-clone
pcs constraint show

pcs stonith create rhevfence fence_rhevm stonith-timeout=120 pcmk_host_map="GD9109.gstn.org.in:GD9109 GD9110.gstn.org.in:GD9110" ipaddr=172.18.102.22 ssl=1 login=cluster_admin passwd=XXXXXXX

Zimbra MTA clustering

yum -y install pacemaker pcs
systemctl start pcsd
systemctl enable pcsd
passwd hacluster
pcs cluster start --all
pcs cluster start --all
pcs status corosync
pcs property list
pcs resource create Virtual_IP ocf:heartbeat:IPaddr2 ip=172.18.201.13 cidr_netmask=24 op monitor interval=30s
cs stonith create rhevfence fence_rhevm stonith-timeout=120 pcmk_host_map=" gd9107.gstn.org.in:Zimbra-MTA_Proxy_1 gd9108.gstn.org.in:Zimbra-MTA_Proxy_2 " ipaddr=172.18.102.22 ssl=1 login=cluster_admin passwd=XXXXXXX

************************************************

ITD - Zimbra Multi Server Deployment

2021-04-09T22:14:27Z

Harsh:

'''Procedure :'''

DC Server Details

1. 10.176.24.116 - dcplzmpxy01 - Primary MTA+Proxy
2. 10.176.24.117 - dcplzmpxy02 - Secondary MTA+Proxy
3. 10.176.24.118 - dcplzlmmr01 - Master LDAP
4. 10.176.24.119 - dcplzlmmr02 - Slave LDAP
5. 10.176.24.120 - dcplzmbox01a - Primary Mailbox
6. 10.176.24.121 - dcplzmbox01b - Secondary Mailbox
7. 10.176.24.137 - dcplzmbox01 - Mailbox Cluster IP
8. 10.176.24.138 - dcplzmdoctr - Docs server

DR Server Details

1. 10.144.24.179 - drplzimtpx01 - Primary MTA+Proxy
2. 10.144.24.180 - drplzimtpx02 - Secondary MTA+Proxy
3. 10.144.24.181 - drplzilpmr01 - Master LDAP
4. 10.144.24.182 - drplzilpmr02 - Slave LDAP
5. 10.144.24.177 - dcplzmbox01a - Primary Mailbox
6. 10.144.24.178 - dcplzmbox01b - Secondary Mailbox
7. 10.144.24.137 - dcplzmbox01 - Mailbox Cluster IP
8. 10.144.24.138 - drplzmdoctr - Docs server

1. Install/Configure Zimbra NE 8.8.15 GA Patch 15 Multi Components Architecture - LDAP, Mailbox and MTA + Proxy all on different nodes

NOTE: Installations/Configurations are same for both DC and DR.

Ref : https://zimbra.github.io/installguides/latest/multi.html

- Install Master LDAP

1. ./install.sh
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. Install zimbra-ldap [Y] Y
5. Remaining Packages will be marked "No" for installation.
6. Type 1 to display the Common Configuration submenu.
-> Type 2 and add Master LDAP as 'dcplzmmr01.incometax.co.in'
-> Type 4 to display the automatically generated LDAP admin password : 'root123'
-> Type 7 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
-> From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
-> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
-> The passwords listed in the LDAP configuration menu are automatically generated. Check the passwords for LDAP root, LDAP replication, LDAP Postfix, LDAP Amavis, and LDAP Nginx, they must be same as DC LDAP Master LDAP, if not enter the corresponding number 4 through 8 and change the passwords to 'root123'.
-> Type 'a' to apply configurations.

- Install Slave LDAP
1. ./install.sh
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. Install zimbra-ldap [Y] Y
5. Remaining Packages will be marked "No" for installation.
6. Type 1 to display the Common Configuration submenu.
-> Type 2 to change/add LDAP Master HostName : 'dcplzlmmr01.incometax.gov.in'
-> Type 4 to display the automatically generated LDAP admin password : 'root123'
-> Type 7 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
7. From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
-> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
8. Type 'a' to apply configurations.

* NOTE : Enable LDAP Replication on Master LDAP
:-> /opt/zimbra/libexec/zimbraldapenablereplica

- Install MailBox
1 ./install.sh
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. zimbra-logger, zimbra-snmp, zimbra-store, zimbra-apache, zimbra-spell, zimbra-convertd, zimbra-archiving, zimbra-chat, zimbra-drive, zimbra-network-modules-ng will be marked 'Yes' for installation.
5. Remaining packages will not be installed.
6. Type Y, and press Enter to modify the system.
7. Type 1 to display the Common Configuration submenu.
-> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
-> Type 4, press Enter, and type the LDAP password : 'root123'
-> Type 8 to set the correct time zone : 'Asia/Kolkata'
8. Type r to return to the Main menu.
9. From the Main menu, type 4 for zimbra-store to view the Store configuration settings.
-> Type 4 and set the password for the administrator account : 'root123'
-> Type the corresponding number to set the SMTP host. This is the mta-server host name : 'dcplzmpxy01.incometax.gov.in'
-> Type r to return to the Main menu.
10. When the mailbox server is configured, return to the Main menu and type 'a' to apply the configuration changes.

* NOTE : Check mailbox, Open 'https://dcplzmbox01.incometax.gov.in:7071' in browser.

- Install MTA + Proxy

1. ./install.sh --platform-override --skip-activation-check --license /opt/ZCSLicense.xml
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. zimbra-mta, zimbra-dnscache, zimbra-proxy, zimbra-memcached will be marked 'Yes' for installation.
5. Remaining packages will not be installed.
6. Type Y, and press Enter to modify the system. The selected packages are installed on the server.
7. Type 1 to display the Common Configuration submenu.
-> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
-> Type 4, press Enter, and type the LDAP password : 'root123'
-> Type 8 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
8. Type 2 to got to the MTA configuration menu.
-> Select the menu number for Bind password for postfix ldap user : 'root123'
-> Select the menu number for Bind password for amavis ldap user : 'root123'
9. Type r to return to the Main menu.
10. Type 'a' to apply the configuration changes.

2. Install Zimbra Connect on MailBox Server

- yum install zimbra-connect
- Zimbra Connect features can be enabled and disabled via the zxsuite config command line utility:

Enable Zimbra Connect «Advanced» features
Property: teamChatEnabled
Available in: COS, account
Enable or disable the chat history
Property: historyEnabled
Available in: global, server, COS, account
Enable or disable Video Chat
Property: videoChatEnabled
Available in: global, server, COS, account

3. Install Zimbra Docs Server

All mailbox servers will need to be able to directly communicate with the Docs Server over port 8443 (HTTPS Backend), which must be open on both ends.
The Docs Server communicates with the Extension through port 9980, so incoming traffic from all mailbox and proxy servers to that port must be allowed. The Docs Server component must
also be able to directly communicate with the master LDAP server as well as with all Mailbox servers.

- Now, get this LDAP information,
zmlocalconfig -s ldap_master_url zimbra_ldap_user zimbra_ldap_userdn zimbra_ldap_password

Proxy Nodes

/opt/zimbra/libexec/zmproxyconfgen as the zimbra user and then restart the proxy service running zmproxyctl restart as the same user.

Mailbox Nodes

The com_zextras_docs Zimlet is available in the Zimbra repository, so it can be easily downloaded and deployed by running apt-get install zimbra-docs.

4. Zimbra - Redhat HA Cluser

Zimbra MailBox Clustering

yum groupinstall 'High Availability'
yum groupinstall 'Resilient Storage'

systemctl start pcsd
systemctl enable pcsd

passwd hacluster

pcs cluster setup --name Mailbox-Cluster dcplzmbox01a.incometax.gov.in dcplzmbox01b.incometax.gov.in pcs cluster start --all
pcs cluster enable --all
pcs status corosync
pcs property list

pcs resource create ClusterIP ocf:heartbeat:IPaddr2 ip=10.176.24.137 cidr_netmask=24 op monitor interval=30s

pcs resource create dlm ocf:pacemaker:controld op monitor interval=30s on-fail=fence clone interleave=true ordered=true
pcs resource create clvmd ocf:heartbeat:clvm op monitor interval=30s on-fail=fence clone interleave=true ordered=true
pcs constraint order start dlm-clone then clvmd-clone
pcs constraint colocation add clvmd-clone with dlm-clone

pvcreate /dev/vdb1
vgcreate -cy vg_cluster /dev/vdb1
lvcreate -l100%FREE -n lv_cluster vg_cluster
mkfs.gfs2 -p lock_dlm -t mailbox_cluster:gfs2 -j 2 /dev/vg_cluster/lv_cluster

pcs resource create fs_gfs2 Filesystem device="/dev/vg_cluster/lv_cluster" directory="/opt/zimbra" fstype="gfs2" options="noatime,nodiratime" op monitor interval=10s on-fail=fence clone interleave=true
pcs constraint order start clvmd-clone then fs_gfs2-clone
pcs constraint colocation add fs_gfs2-clone with clvmd-clone
pcs constraint show

pcs stonith create rhevfence fence_rhevm stonith-timeout=120 pcmk_host_map="GD9109.gstn.org.in:GD9109 GD9110.gstn.org.in:GD9110" ipaddr=172.18.102.22 ssl=1 login=cluster_admin passwd=XXXXXXX

Zimbra MTA clustering

yum -y install pacemaker pcs
systemctl start pcsd
systemctl enable pcsd
passwd hacluster
pcs cluster start --all
pcs cluster start --all
pcs status corosync
pcs property list
pcs resource create Virtual_IP ocf:heartbeat:IPaddr2 ip=172.18.201.13 cidr_netmask=24 op monitor interval=30s
cs stonith create rhevfence fence_rhevm stonith-timeout=120 pcmk_host_map=" gd9107.gstn.org.in:Zimbra-MTA_Proxy_1 gd9108.gstn.org.in:Zimbra-MTA_Proxy_2 " ipaddr=172.18.102.22 ssl=1 login=cluster_admin passwd=XXXXXXX

************************************************

ITD - Zimbra Multi Server Deployment

2021-04-09T21:47:10Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T21:36:57Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T21:20:38Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T21:19:53Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T21:18:59Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T21:17:57Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T21:16:10Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T21:13:36Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T21:11:59Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T19:47:10Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T19:20:01Z

Harsh:

ITD - Zimbra Multi Server Deployment

2021-04-09T19:19:29Z

Harsh: /* ITD - Zimbra Multi Server Deployment */

ITD - Zimbra Multi Server Deployment

2021-04-09T19:12:51Z

Harsh: /* ITD - Zimbra Multi Server Deployment */

ITD - Zimbra Multi Server Deployment

2021-04-08T19:34:03Z

Harsh: Created page with " == ITD - Zimbra Multi Server Deployment =="

== ITD - Zimbra Multi Server Deployment ==

Technical Training Serssions 2021 Linux Team

2021-04-08T19:31:48Z

Harsh: /* Session for Client Introduction with Technologies (Part1) . Dated 16th Jan 2021 - Tetra Support Staff - Biswajit Banerjee */

[[category:Training‏‎]]

==Session for Client Introduction with Technologies (Part1) . Dated 16th Jan 2021 - Tetra Support Staff - Biswajit Banerjee==

<HTML5video type="youtube" width="640" height="480" autoplay="false">Okd_MQE2oqw</HTML5video>

==Session for Client Introduction with Technologies (Part2) . Dated 16th Jan 2021 - Tetra Support Staff - Biswajit Banerjee ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">7VX1kXFQWEs</HTML5video>

==Session for Client Introduction with Technologies - capital bank . Dated 18th Jan 2021 - Tetra Support Staff - Biswajit Banerjee ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">9rHaInJVD84</HTML5video>

==Session for Client Introduction with Technologies - JBOSS/POSTGRESQL Brijraj/Beetel . Dated 19th Jan 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">MZZKR0Lt8FQ</HTML5video>

==Session for Client Introduction with Technologies - LAMP . Dated 20th Jan 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">Jw5dVkNqy5w</HTML5video>

==Session for Introduction with Technologies - Generic . Dated 24th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">PGeTUt9vj50</HTML5video>

==Session Harsh for Team about Infosys-ITD zimbra Deployment . Dated 25th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">ar1q3ufH2jk</HTML5video>

==Session for Introduction with Mail Concept . Dated 25th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">uN8iTDPr9bQ</HTML5video>

==Session Harsh for Team about Infosys-ITD ELK Deployment . Dated 26th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">e7AfaibdCVM</HTML5video>

==Session for Mail Concept (Contd). Dated 26th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">k4wIxQVnf7I</HTML5video>

==Session Harsh for Team about Samba and Desktop Central Deployment at Triburg. Dated 27th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">6CHqu7iuY68</HTML5video>

==Session Harsh for Team about NextCloud deployment at Triburg. Dated 1st April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">RFTOkS71vRM</HTML5video>

==Session Harsh for Team about Various Clients deployments. Dated 2nd April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">jdxJAKkfUTs</HTML5video>

==Session for Zimbra Mail Concept (Contd).Part2 Dated 2nd April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">QIvBgsFTEiA</HTML5video>

==Session for Zimbra Mail Log Analysis Approach Dated 5th April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">CcngpTUNZZE</HTML5video>

==Session for Zimbra Mail Log Analysis Approach (part2) Dated 6th April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">nSb4il5IlvE</HTML5video>

Technical Training Documents by Harsh sessions 2021 Linux Team

2021-04-08T19:27:18Z

Harsh:

[[ITD - Zimbra Multi Server Deployment]]

[[ITD - ELK Multi Server Deployment]]

[[TRIBURG - Desktop Central and AD Deployment]]

[[Pahwa - Trend IMSS Deployment]]

[[ISGEC - Piler Archive Server]]

[[ISGEC - Next Cloud Deployment]]

[[ISGEC - Samba Migration]]

Technical Training Documents by Harsh sessions 2021 Linux Team

2021-04-08T19:26:32Z

Harsh:

[[ITD - Zimbra Multi Server Deployment]]
[[ITD - ELK Multi Server Deployment]]
[[[[TRIBURG - Desktop Central and AD Deployment]]
[[Pahwa - Trend IMSS Deployment]]]]
[[ISGEC - Piler Archive Server]]
[[ISGEC - Next Cloud Deployment]]
[[ISGEC - Samba Migration]]

Technical Training Documents by Harsh sessions 2021 Linux Team

2021-04-08T19:09:46Z

Harsh: Created page with "ITD Zimbra Deployment"

[[ITD Zimbra Deployment]]

Technical Training Serssions 2021 Linux Team

2021-04-08T18:33:25Z

Harsh: /* Session for Client Introduction with Technologies (Part1) . Dated 16th Jan 2021 - Tetra Support Staff - Biswajit Banerjee */

[[category:Training‏‎]]

==Session for Client Introduction with Technologies (Part1) . Dated 16th Jan 2021 - Tetra Support Staff - Biswajit Banerjee==

<HTML5video type="youtube" width="640" height="480" autoplay="false">Okd_MQE2oqw</HTML5video>

t
t
t
t

t

t
t

t
ttt
tt

t

t
t
t
t

t

t
t

t
ttt
tt

t
t
t
t
t

t

t
t

t
ttt
tt

t

t
t
t
t

t

t
t

t
ttt
tt

t

t
t
t
t

t

t
t

t
ttt
tt

t

t
t
t
t

t

t
t

t
ttt
tt

t
t
t
t
t

t

t
t

t
ttt
tt

t
t
t
t
t

t

t
t

t
ttt
tt

t

==Session for Client Introduction with Technologies (Part2) . Dated 16th Jan 2021 - Tetra Support Staff - Biswajit Banerjee ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">7VX1kXFQWEs</HTML5video>

==Session for Client Introduction with Technologies - capital bank . Dated 18th Jan 2021 - Tetra Support Staff - Biswajit Banerjee ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">9rHaInJVD84</HTML5video>

==Session for Client Introduction with Technologies - JBOSS/POSTGRESQL Brijraj/Beetel . Dated 19th Jan 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">MZZKR0Lt8FQ</HTML5video>

==Session for Client Introduction with Technologies - LAMP . Dated 20th Jan 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">Jw5dVkNqy5w</HTML5video>

==Session for Introduction with Technologies - Generic . Dated 24th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">PGeTUt9vj50</HTML5video>

==Session Harsh for Team about Infosys-ITD zimbra Deployment . Dated 25th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">ar1q3ufH2jk</HTML5video>

==Session for Introduction with Mail Concept . Dated 25th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">uN8iTDPr9bQ</HTML5video>

==Session Harsh for Team about Infosys-ITD ELK Deployment . Dated 26th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">e7AfaibdCVM</HTML5video>

==Session for Mail Concept (Contd). Dated 26th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">k4wIxQVnf7I</HTML5video>

==Session Harsh for Team about Samba and Desktop Central Deployment at Triburg. Dated 27th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">6CHqu7iuY68</HTML5video>

==Session Harsh for Team about NextCloud deployment at Triburg. Dated 1st April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">RFTOkS71vRM</HTML5video>

==Session Harsh for Team about Various Clients deployments. Dated 2nd April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">jdxJAKkfUTs</HTML5video>

==Session for Zimbra Mail Concept (Contd).Part2 Dated 2nd April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">QIvBgsFTEiA</HTML5video>

==Session for Zimbra Mail Log Analysis Approach Dated 5th April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">CcngpTUNZZE</HTML5video>

==Session for Zimbra Mail Log Analysis Approach (part2) Dated 6th April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">nSb4il5IlvE</HTML5video>

Technical Training Serssions 2021 Linux Team

2021-04-08T17:49:41Z

Harsh: /* Session Harsh for Team about Infosys-ITD zimbra Deployment . Dated 25th Mar 2021 */

Technical Training Serssions 2021 Linux Team

2021-04-08T17:49:11Z

Harsh: /* Session Harsh for Team about Infosys-ITD zimbra Deployment . Dated 25th Mar 2021 */

[[category:Training‏‎]]

==Session for Client Introduction with Technologies (Part1) . Dated 16th Jan 2021 - Tetra Support Staff - Biswajit Banerjee==

<HTML5video type="youtube" width="640" height="480" autoplay="false">Okd_MQE2oqw</HTML5video>

==Session for Client Introduction with Technologies (Part2) . Dated 16th Jan 2021 - Tetra Support Staff - Biswajit Banerjee ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">7VX1kXFQWEs</HTML5video>

==Session for Client Introduction with Technologies - capital bank . Dated 18th Jan 2021 - Tetra Support Staff - Biswajit Banerjee ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">9rHaInJVD84</HTML5video>

==Session for Client Introduction with Technologies - JBOSS/POSTGRESQL Brijraj/Beetel . Dated 19th Jan 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">MZZKR0Lt8FQ</HTML5video>

==Session for Client Introduction with Technologies - LAMP . Dated 20th Jan 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">Jw5dVkNqy5w</HTML5video>

==Session for Introduction with Technologies - Generic . Dated 24th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">PGeTUt9vj50</HTML5video>

==Session Harsh for Team about Infosys-ITD zimbra Deployment . Dated 25th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">ar1q3ufH2jk</HTML5video>

saldlasmas
asd
sad
sad
asdsadasda
da
sdasdasdsadsa
d
asd

asdasdasdadasdsa
d
sadasdasda

==Session for Introduction with Mail Concept . Dated 25th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">uN8iTDPr9bQ</HTML5video>

==Session Harsh for Team about Infosys-ITD ELK Deployment . Dated 26th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">e7AfaibdCVM</HTML5video>

==Session for Mail Concept (Contd). Dated 26th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">k4wIxQVnf7I</HTML5video>

==Session Harsh for Team about Samba and Desktop Central Deployment at Triburg. Dated 27th Mar 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">6CHqu7iuY68</HTML5video>

==Session Harsh for Team about NextCloud deployment at Triburg. Dated 1st April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">RFTOkS71vRM</HTML5video>

==Session Harsh for Team about Various Clients deployments. Dated 2nd April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">jdxJAKkfUTs</HTML5video>

==Session for Zimbra Mail Concept (Contd).Part2 Dated 2nd April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">QIvBgsFTEiA</HTML5video>

==Session for Zimbra Mail Log Analysis Approach Dated 5th April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">CcngpTUNZZE</HTML5video>

==Session for Zimbra Mail Log Analysis Approach (part2) Dated 6th April 2021 ==

<HTML5video type="youtube" width="640" height="480" autoplay="false">nSb4il5IlvE</HTML5video>

Main Page/Isgec-Piler-Archive

2020-09-07T11:16:56Z

Harsh: Created page with "setenforce 0 hostnamectl set-hostname piler.isgec.com yum install mariadb-devel.x86_64 mariadb-libs.x86_64 yum -y remove postfix && yum -y update yum -y install epel-release ..."

setenforce 0
hostnamectl set-hostname piler.isgec.com
yum install mariadb-devel.x86_64 mariadb-libs.x86_64
yum -y remove postfix && yum -y update
yum -y install epel-release gcc make wget libzip sysstat
yum -y install tre tre-devel python python-devel MySQL-python openssl openssl-devel
yum -y install http://sphinxsearch.com/files/sphinx-2.3.2-1.rhel7.x86_64.rpm
yum install https://centos7.iuscommunity.org/ius-release.rpm
yum install https://repo.ius.io/ius-release-el$(rpm -E '%{rhel}').rpm
yum -y install httpd mod_ssl php72u php72u-cli php72u-common php72u-gd php72u-mbstring php72u-mysqlnd php72u-pdo php72u-ldap
yum -y install tcp_wrappers tcp_wrappers-devel catdoc poppler poppler-utils unrtf tnef libpst
yum install mariadb-server
systemctl restart mariadb && systemctl enable mariadb

mysql_secure_installation - Set root password

cd && wget https://bitbucket.org/jsuto/piler/downloads/xlhtml-0.5.1-sj-mod.tar.gz && tar xfvz xlhtml* && cd xlhtml* && ./configure && make && make install
groupadd piler
useradd -g piler -m -s /bin/sh -d /var/piler piler
usermod -L piler //lock account
chmod 755 /var/piler
cd && wget https://bitbucket.org/jsuto/piler/downloads/piler-1.3.5.tar.gz
tar zxvf piler-* && cd piler-*
./configure --localstatedir=/var --with-database=mysql
make
make install
ldconfig //creating necessary links
make postinstall
echo /usr/local/lib > /etc/ld.so.conf.d/piler.conf
vi /usr/local/etc/piler/piler.conf - hostid as hostname
/etc/init.d/rc.piler start

su - piler
/etc/init.d/rc.searchd start
sed -i '$ a /etc/init.d/rc.piler start' /etc/rc.d/rc.local
sed -i '$ a /etc/init.d/rc.searchd start' /etc/rc.d/rc.local
chmod 755 /etc/rc.d/rc.local
sed -i 's|DirectoryIndex index.html|DirectoryIndex index.html index.php|' /etc/httpd/conf/httpd.conf
sed -i 's|DocumentRoot "/var/www/html"|DocumentRoot "/var/piler/www"|' /etc/httpd/conf/httpd.conf
sed -i 's|ErrorLog "logs/error_log"|ErrorLog "/var/log/httpd/mailarchiver-error.log"|' /etc/httpd/conf/httpd.conf
sed -i '$ a <Directory "/var/piler/www">' /etc/httpd/conf/httpd.conf
sed -i '$ a AllowOverride All' /etc/httpd/conf/httpd.conf
sed -i '$ a Require all granted' /etc/httpd/conf/httpd.conf
sed -i '$ a </Directory>' /etc/httpd/conf/httpd.conf
sed -i '$ a Defaults requiretty' /etc/sudoers
sed -i '$ a Defaults:%apache !requiretty' /etc/sudoers

apachectl configtest
systemctl restart httpd
systemctl restart firewalld && systemctl enable firewalld
firewall-cmd --permanent --zone=public --add-service=smtp
firewall-cmd --permanent --zone=public --add-service=http
firewall-cmd --permanent --zone=public --add-service=https
firewall-cmd --reload

cp /var/piler/www/config-site.php /usr/local/etc/piler/
/etc/init.d/rc.searchd stop
/etc/init.d/rc.piler stop

mkdir -p /home/piler
rsync -av /var/piler/ /home/piler/
ln -s /var/piler /home/piler
chown piler.piler /home/piler
/etc/init.d/rc.searchd start
/etc/init.d/rc.piler start

yum install sshfs
mkdir /old_mails
sshfs -o allow_other,uid=1000,gid=1000 192.168.25.190:/opt/zimbra/store/0/ /old_mails/
/etc/init.d/rc.piler start
/etc/init.d/rc.searchd start

pilerimport -d /old_mails/

vi /var/piler/www/config.php
$config['ENABLE_LDAP_AUTH'] = 1;
$config['LDAP_HOST'] = 'zimbra.isgec.com';
$config['LDAP_PORT'] = 389;
$config['LDAP_MAIL_ATTR'] = 'mail';
$config['LDAP_ACCOUNT_OBJECTCLASS'] = 'zimbraAccount';
$config['LDAP_DISTRIBUTIONLIST_OBJECTCLASS'] = 'zimbraDistributionList';
$config['LDAP_DISTRIBUTIONLIST_ATTR'] = 'zimbraMailForwardingAddress';
$config['LDAP_HELPER_DN'] = 'uid=zimbra,cn=admins,cn=zimbra';
$config['LDAP_HELPER_PASSWORD'] = 'wQyIzBhr';
$config['LDAP_AUDITOR_MEMBER_DN'] = '';
$config['LDAP_ADMIN_MEMBER_DN'] = '';
$config['LDAP_BASE_DN'] = '';

//On Zimbra Server
vi /opt/zimbra/common/conf/main.cf
always_bcc = archive@piler.isgec.com

su - zimbra
zmcontrol restart

Logs:

Mail logs - /var/log/maillog
Error Logs - mailarchiver-error.log

File:Mailman newsnation.odt

2020-01-24T09:55:50Z

Harsh: Mailman access for NewsNation

Mailman access for NewsNation