ITD - Zimbra Multi Server Deployment: Difference between revisions

Latest revision as of 04:36, 10 April 2021

Procedure :

DC Server Details

1. 10.176.24.116 - dcplzmpxy01 - Primary MTA+Proxy  
2. 10.176.24.117 - dcplzmpxy02 - Secondary MTA+Proxy 
3. 10.176.24.118 - dcplzlmmr01 - Master LDAP
4. 10.176.24.119 - dcplzlmmr02 - Slave LDAP
5. 10.176.24.120 - dcplzmbox01a - Primary Mailbox
6. 10.176.24.121 - dcplzmbox01b - Secondary Mailbox   
7. 10.176.24.137 - dcplzmbox01 - Mailbox Cluster IP
8. 10.176.24.138 - dcplzmdoctr - Docs server

DR Server Details

1. 10.144.24.179 - drplzimtpx01 - Primary MTA+Proxy  
2. 10.144.24.180 - drplzimtpx02 - Secondary MTA+Proxy 
3. 10.144.24.181 - drplzilpmr01 - Master LDAP
4. 10.144.24.182 - drplzilpmr02 - Slave LDAP
5. 10.144.24.177 - dcplzmbox01a - Primary Mailbox
6. 10.144.24.178 - dcplzmbox01b - Secondary Mailbox   
7. 10.144.24.137 - dcplzmbox01 - Mailbox Cluster IP
8. 10.144.24.138 - drplzmdoctr - Docs server

1. Install/Configure Zimbra NE 8.8.15 GA Patch 15 Multi Components Architecture - LDAP, Mailbox and MTA + Proxy all on different nodes

NOTE: Installations/Configurations are same for both DC and DR.

Ref : https://zimbra.github.io/installguides/latest/multi.html

- Install Master LDAP

1. ./install.sh 
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. Install zimbra-ldap [Y] Y
5. Remaining Packages will be marked "No" for installation.
6. Type 1 to display the Common Configuration submenu.
-> Type 2 and add Master LDAP as 'dcplzmmr01.incometax.co.in'
-> Type 4 to display the automatically generated LDAP admin password : 'root123'
-> Type 7 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
-> From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
-> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
-> The passwords listed in the LDAP configuration menu are automatically generated. Check the passwords for LDAP root, LDAP replication, LDAP Postfix, LDAP Amavis, and LDAP Nginx,                            they must be same as DC LDAP Master LDAP, if not enter the corresponding number 4 through 8 and change the passwords to 'root123'.
-> Type 'a' to apply configurations.

- Install Slave LDAP

1. ./install.sh 
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. Install zimbra-ldap [Y] Y
5. Remaining Packages will be marked "No" for installation.
6. Type 1 to display the Common Configuration submenu.
-> Type 2 to change/add LDAP Master HostName : 'dcplzlmmr01.incometax.gov.in'
-> Type 4 to display the automatically generated LDAP admin password : 'root123'
-> Type 7 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
7. From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
-> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
8. Type 'a' to apply configurations.

* NOTE : Enable LDAP Replication on Master LDAP 
      :-> /opt/zimbra/libexec/zimbraldapenablereplica

- Install MailBox

1 ./install.sh 
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. zimbra-logger, zimbra-snmp, zimbra-store, zimbra-apache, zimbra-spell, zimbra-convertd, zimbra-archiving, zimbra-chat, zimbra-drive, zimbra-network-modules-ng will be marked 'Yes' for  installation.
5. Remaining packages will not be installed.
6. Type Y, and press Enter to modify the system. 
7. Type 1 to display the Common Configuration submenu.
-> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
-> Type 4, press Enter, and type the LDAP password : 'root123'
-> Type 8 to set the correct time zone : 'Asia/Kolkata'
8. Type r to return to the Main menu.
9. From the Main menu, type 4 for zimbra-store to view the Store configuration settings.
-> Type 4 and set the password for the administrator account : 'root123'
-> Type the corresponding number to set the SMTP host. This is the mta-server host name : 'dcplzmpxy01.incometax.gov.in'
-> Type r to return to the Main menu.
10. When the mailbox server is configured, return to the Main menu and type 'a' to apply the configuration changes.

NOTE : Check mailbox, Open 'https://dcplzmbox01.incometax.gov.in:7071' in browser.

- Install MTA + Proxy

1. ./install.sh --platform-override --skip-activation-check --license /opt/ZCSLicense.xml
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. zimbra-mta, zimbra-dnscache, zimbra-proxy, zimbra-memcached will be marked 'Yes' for installation.
5. Remaining packages will not be installed.
6. Type Y, and press Enter to modify the system. The selected packages are installed on the server.
7. Type 1 to display the Common Configuration submenu.
-> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
-> Type 4, press Enter, and type the LDAP password : 'root123'
-> Type 8 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
8. Type 2 to got to the MTA configuration menu.
-> Select the menu number for Bind password for postfix ldap user : 'root123'
-> Select the menu number for Bind password for amavis ldap user : 'root123'
9. Type r to return to the Main menu.
10. Type 'a' to apply the configuration changes.

2. Install Zimbra Connect on MailBox Server

- yum install zimbra-connect
- Zimbra Connect features can be enabled and disabled via the zxsuite config command line utility:
    
    Enable Zimbra Connect «Advanced» features
    Property: teamChatEnabled
    Available in: COS, account
    Enable or disable the chat history
    Property: historyEnabled   
    Available in: global, server, COS, account
    Enable or disable Video Chat
    Property: videoChatEnabled
    Available in: global, server, COS, account

3. Install Zimbra Docs Server

All mailbox servers will need to be able to directly communicate with the Docs Server over port 8443 (HTTPS Backend), which must be open on both ends.
The Docs Server communicates with the Extension through port 9980, so incoming traffic from all mailbox and proxy servers to that port must be allowed. The Docs Server component must 
also be able to directly communicate with the master LDAP server as well as with all Mailbox servers.

- Now, get this LDAP information,
zmlocalconfig -s ldap_master_url zimbra_ldap_user zimbra_ldap_userdn zimbra_ldap_password

Proxy Nodes

/opt/zimbra/libexec/zmproxyconfgen as the zimbra user and then restart the proxy service running zmproxyctl restart as the same user.
 
Mailbox Nodes

The com_zextras_docs Zimlet is available in the Zimbra repository, so it can be easily downloaded and deployed by running apt-get install zimbra-docs.

4. Zimbra - Redhat HA Cluster

Zimbra MailBox Clustering

yum groupinstall 'High Availability'
yum groupinstall 'Resilient Storage'

systemctl start pcsd  
systemctl enable pcsd

passwd hacluster

pcs cluster setup --name Mailbox-Cluster dcplzmbox01a.incometax.gov.in dcplzmbox01b.incometax.gov.in pcs cluster start --all
pcs cluster enable --all 
pcs status corosync
pcs property list

pcs resource create ClusterIP ocf:heartbeat:IPaddr2 ip=10.176.24.137 cidr_netmask=24 op monitor interval=30s

pcs resource create dlm ocf:pacemaker:controld op monitor interval=30s on-fail=fence clone interleave=true ordered=true 
pcs resource create clvmd ocf:heartbeat:clvm op monitor interval=30s on-fail=fence clone interleave=true ordered=true
pcs constraint order start dlm-clone then clvmd-clone
pcs constraint colocation add clvmd-clone with dlm-clone

pvcreate /dev/vdb1
vgcreate -cy vg_cluster /dev/vdb1 
lvcreate -l100%FREE -n lv_cluster vg_cluster
mkfs.gfs2 -p lock_dlm -t mailbox_cluster:gfs2 -j 2 /dev/vg_cluster/lv_cluster

pcs resource create fs_gfs2 Filesystem device="/dev/vg_cluster/lv_cluster" directory="/opt/zimbra" fstype="gfs2" options="noatime,nodiratime" op monitor interval=10s on-fail=fence clone       interleave=true
pcs constraint order start clvmd-clone then fs_gfs2-clone
pcs constraint colocation add fs_gfs2-clone with clvmd-clone
pcs constraint show

pcs stonith create rhevfence fence_rhevm stonith-timeout=120 pcmk_host_map="GD9109.gstn.org.in:GD9109 GD9110.gstn.org.in:GD9110" ipaddr=172.18.102.22 ssl=1 login=cluster_admin   passwd=XXXXXXX

Zimbra MTA clustering

yum -y install pacemaker pcs
systemctl start pcsd 
systemctl enable pcsd
passwd hacluster
pcs cluster start --all 
pcs cluster start --all
pcs status corosync
pcs property list
pcs resource create Virtual_IP ocf:heartbeat:IPaddr2 ip=172.18.201.13 cidr_netmask=24 op monitor interval=30s
cs stonith create rhevfence fence_rhevm stonith-timeout=120 pcmk_host_map=" gd9107.gstn.org.in:Zimbra-MTA_Proxy_1 gd9108.gstn.org.in:Zimbra-MTA_Proxy_2 " ipaddr=172.18.102.22 ssl=1 login=cluster_admin passwd=XXXXXXX

                                                                ************************************************