Editing ITD - Zimbra Multi Server Deployment

'''Procedure :''' 

DC Server Details

 1. 10.176.24.116 - dcplzmpxy01 - Primary MTA+Proxy  
 2. 10.176.24.117 - dcplzmpxy02 - Secondary MTA+Proxy 
 3. 10.176.24.118 - dcplzlmmr01 - Master LDAP
 4. 10.176.24.119 - dcplzlmmr02 - Slave LDAP
 5. 10.176.24.120 - dcplzmbox01a - Primary Mailbox
 6. 10.176.24.121 - dcplzmbox01b - Secondary Mailbox   
 7. 10.176.24.137 - dcplzmbox01 - Mailbox Cluster IP
 8. 10.176.24.138 - dcplzmdoctr - Docs server
  
DR Server Details

 1. 10.144.24.179 - drplzimtpx01 - Primary MTA+Proxy  
 2. 10.144.24.180 - drplzimtpx02 - Secondary MTA+Proxy 
 3. 10.144.24.181 - drplzilpmr01 - Master LDAP
 4. 10.144.24.182 - drplzilpmr02 - Slave LDAP
 5. 10.144.24.177 - dcplzmbox01a - Primary Mailbox
 6. 10.144.24.178 - dcplzmbox01b - Secondary Mailbox   
 7. 10.144.24.137 - dcplzmbox01 - Mailbox Cluster IP
 8. 10.144.24.138 - drplzmdoctr - Docs server


1. Install/Configure Zimbra NE 8.8.15 GA Patch 15 Multi Components Architecture - LDAP, Mailbox and MTA + Proxy all on different nodes 

NOTE: Installations/Configurations are same for both DC and DR.  

Ref : https://zimbra.github.io/installguides/latest/multi.html


- Install Master LDAP

 1. ./install.sh 
 2. Do you agree with the terms of the software license agreement? [N] : Yes
 3. Use Zimbra’s package repository [Y] : Enter
 4. Install zimbra-ldap [Y] Y
 5. Remaining Packages will be marked "No" for installation.
 6. Type 1 to display the Common Configuration submenu.
 -> Type 2 and add Master LDAP as 'dcplzmmr01.incometax.co.in'
 -> Type 4 to display the automatically generated LDAP admin password : 'root123'
 -> Type 7 to set the correct time zone : 'Asia/Kolkata'
 -> Type r to return to the Main menu.
 -> From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
 -> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
 -> The passwords listed in the LDAP configuration menu are automatically generated. Check the passwords for LDAP root, LDAP replication, LDAP Postfix, LDAP Amavis, and LDAP Nginx,                            they must be same as DC LDAP Master LDAP, if not enter the corresponding number 4 through 8 and change the passwords to 'root123'.
 -> Type 'a' to apply configurations.

- Install Slave LDAP
 1. ./install.sh 
 2. Do you agree with the terms of the software license agreement? [N] : Yes
 3. Use Zimbra’s package repository [Y] : Enter
 4. Install zimbra-ldap [Y] Y
 5. Remaining Packages will be marked "No" for installation.
 6. Type 1 to display the Common Configuration submenu.
 -> Type 2 to change/add LDAP Master HostName : 'dcplzlmmr01.incometax.gov.in'
 -> Type 4 to display the automatically generated LDAP admin password : 'root123'
 -> Type 7 to set the correct time zone : 'Asia/Kolkata'
 -> Type r to return to the Main menu.
 7. From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
 -> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
 8. Type 'a' to apply configurations.

 * NOTE : Enable LDAP Replication on Master LDAP 
       :-> /opt/zimbra/libexec/zimbraldapenablereplica


- Install MailBox 
 1 ./install.sh 
 2. Do you agree with the terms of the software license agreement? [N] : Yes
 3. Use Zimbra’s package repository [Y] : Enter
 4. zimbra-logger, zimbra-snmp, zimbra-store, zimbra-apache, zimbra-spell, zimbra-convertd, zimbra-archiving, zimbra-chat, zimbra-drive, zimbra-network-modules-ng will be marked 'Yes' for  installation.
 5. Remaining packages will not be installed.
 6. Type Y, and press Enter to modify the system. 
 7. Type 1 to display the Common Configuration submenu.
 -> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
 -> Type 4, press Enter, and type the LDAP password : 'root123'
 -> Type 8 to set the correct time zone : 'Asia/Kolkata'
 8. Type r to return to the Main menu.
 9. From the Main menu, type 4 for zimbra-store to view the Store configuration settings.
 -> Type 4 and set the password for the administrator account : 'root123'
 -> Type the corresponding number to set the SMTP host. This is the mta-server host name : 'dcplzmpxy01.incometax.gov.in'
 -> Type r to return to the Main menu.
 10. When the mailbox server is configured, return to the Main menu and type 'a' to apply the configuration changes.


* NOTE : Check mailbox, Open 'https://dcplzmbox01.incometax.gov.in:7071' in browser.

- Install MTA + Proxy

 1. ./install.sh --platform-override --skip-activation-check --license /opt/ZCSLicense.xml
 2. Do you agree with the terms of the software license agreement? [N] : Yes
 3. Use Zimbra’s package repository [Y] : Enter
 4. zimbra-mta, zimbra-dnscache, zimbra-proxy, zimbra-memcached will be marked 'Yes' for installation.
 5. Remaining packages will not be installed.
 6. Type Y, and press Enter to modify the system. The selected packages are installed on the server.
 7. Type 1 to display the Common Configuration submenu.
 -> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
 -> Type 4, press Enter, and type the LDAP password : 'root123'
 -> Type 8 to set the correct time zone : 'Asia/Kolkata'
 -> Type r to return to the Main menu.
 8. Type 2 to got to the MTA configuration menu.
 -> Select the menu number for Bind password for postfix ldap user : 'root123'
 -> Select the menu number for Bind password for amavis ldap user : 'root123'
 9. Type r to return to the Main menu.
 10. Type 'a' to apply the configuration changes.


2. Install Zimbra Connect on MailBox Server

 - yum install zimbra-connect
 - Zimbra Connect features can be enabled and disabled via the zxsuite config command line utility:
     
     Enable Zimbra Connect «Advanced» features
     Property: teamChatEnabled
     Available in: COS, account
     Enable or disable the chat history
     Property: historyEnabled   
     Available in: global, server, COS, account
     Enable or disable Video Chat
     Property: videoChatEnabled
     Available in: global, server, COS, account


3. Install Zimbra Docs Server 
 
 All mailbox servers will need to be able to directly communicate with the Docs Server over port 8443 (HTTPS Backend), which must be open on both ends.
 The Docs Server communicates with the Extension through port 9980, so incoming traffic from all mailbox and proxy servers to that port must be allowed. The Docs Server component must 
 also be able to directly communicate with the master LDAP server as well as with all Mailbox servers.

 - Now, get this LDAP information,
 zmlocalconfig -s ldap_master_url zimbra_ldap_user zimbra_ldap_userdn zimbra_ldap_password
 
 Proxy Nodes
 
 /opt/zimbra/libexec/zmproxyconfgen as the zimbra user and then restart the proxy service running zmproxyctl restart as the same user.
  
 Mailbox Nodes

 The com_zextras_docs Zimlet is available in the Zimbra repository, so it can be easily downloaded and deployed by running apt-get install zimbra-docs.


4. Zimbra - Redhat HA Cluster

 Zimbra MailBox Clustering

 yum groupinstall 'High Availability'
 yum groupinstall 'Resilient Storage'
 
 systemctl start pcsd  
 systemctl enable pcsd

 passwd hacluster
 
 pcs cluster setup --name Mailbox-Cluster dcplzmbox01a.incometax.gov.in dcplzmbox01b.incometax.gov.in pcs cluster start --all
 pcs cluster enable --all 
 pcs status corosync
 pcs property list

 pcs resource create ClusterIP ocf:heartbeat:IPaddr2 ip=10.176.24.137 cidr_netmask=24 op monitor interval=30s

 pcs resource create dlm ocf:pacemaker:controld op monitor interval=30s on-fail=fence clone interleave=true ordered=true 
 pcs resource create clvmd ocf:heartbeat:clvm op monitor interval=30s on-fail=fence clone interleave=true ordered=true
 pcs constraint order start dlm-clone then clvmd-clone
 pcs constraint colocation add clvmd-clone with dlm-clone

 pvcreate /dev/vdb1
 vgcreate -cy vg_cluster /dev/vdb1 
 lvcreate -l100%FREE -n lv_cluster vg_cluster
 mkfs.gfs2 -p lock_dlm -t mailbox_cluster:gfs2 -j 2 /dev/vg_cluster/lv_cluster
 
 pcs resource create fs_gfs2 Filesystem device="/dev/vg_cluster/lv_cluster" directory="/opt/zimbra" fstype="gfs2" options="noatime,nodiratime" op monitor interval=10s on-fail=fence clone       interleave=true
 pcs constraint order start clvmd-clone then fs_gfs2-clone
 pcs constraint colocation add fs_gfs2-clone with clvmd-clone
 pcs constraint show

 pcs stonith create rhevfence fence_rhevm stonith-timeout=120 pcmk_host_map="GD9109.gstn.org.in:GD9109 GD9110.gstn.org.in:GD9110" ipaddr=172.18.102.22 ssl=1 login=cluster_admin   passwd=XXXXXXX

 Zimbra MTA clustering

 yum -y install pacemaker pcs
 systemctl start pcsd 
 systemctl enable pcsd
 passwd hacluster
 pcs cluster start --all 
 pcs cluster start --all
 pcs status corosync
 pcs property list
 pcs resource create Virtual_IP ocf:heartbeat:IPaddr2 ip=172.18.201.13 cidr_netmask=24 op monitor interval=30s
 cs stonith create rhevfence fence_rhevm stonith-timeout=120 pcmk_host_map=" gd9107.gstn.org.in:Zimbra-MTA_Proxy_1 gd9108.gstn.org.in:Zimbra-MTA_Proxy_2 " ipaddr=172.18.102.22 ssl=1 login=cluster_admin passwd=XXXXXXX 

                                                                 ************************************************