Zimbra Network Edition 7.2 Implementation on BBFGroup

Zimbra Network Edition 7.2 Implementation on BBF Group

Architecture Diagram:

Pre-Installation steps on first MTA+Mailbox server [10.5.14.15]:

1. Install CentOS 6.2 x86_64 on server.
2. Disable SELinux in file “/etc/sysconfig/selinux” :

# vim /etc/sysconfig/selinux

SELINUX=disabled

1. Disable the Firewall:

# system-config-firewall

1. Disable iptables and sendmail services:

# /etc/init.d/postfix stop

# chkconfig postfix off

# chkconfig iptables off

# chkconfig ip6tables off

1. Disable MySQL if installed and running:

# /etc/init.d/mysqld stop

# chkconfig mysqld off

1. Yum repository must be configured to install packages and other dependencies:

# wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm

Install DAG's GPG key:

# rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt

Install the repository package:

# rpm –ivh rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm

This will add a yum repository config file and import the appropriate GPG keys.

1. Install and configure NTP to synchronize the system clock:

# yum install ntp

# chkconfig ntpd on

# ntpdate -u pool.ntp.org

# /etc/init.d/ntpd start

1. Now start installation of Centos 6.2 packages required by ZCS 7.2

# yum install nc perl sudo sysstat gmp libidn libstdc++ sqlite libtool-ltdl bind bind-chroot bind-libs bind-utils -y

1. Configure hostname of the server and DNS for the domain:

Make sure that in /etc/hosts, the hostname of the server has been pointed to the IP address of the server.

# vim /etc/hosts

127.0.0.1localhost.localdomain localhost

10.5.14.15 mailserver.bbfgroup.com mailserver

10.5.14.16 mailserver2.bbfgroup.com mailserver2

1localhost6.localdomain6 localhost6

# vim /etc/sysconfig/network

NETWORKING=yes

NETWORKING_IPV6=no

HOSTNAME=mailserver.bbfgroup.com

1. Create a file /var/named/chroot/var/named/named.conf with the following configuration:

# vim /var/named/chroot/var/named/named.conf

options {

listen-on port 53 { 127.0.0.1; 10.5.14.0/8;};

listen-on-v6 port 53 { ::1; };

directory "/var/named";

dump-file "/var/named/data/cache_dump.db";

statistics-file "/var/named/data/named_stats.txt";

memstatistics-file "/var/named/data/named_mem_stats.txt";

allow-query { localhost; 10.5.14.0/8; };

allow-query-cache { localhost; 10.5.14.0/8; };

};

// a caching only nameserver config

controls {

inet 127.0.0.1 allow { localhost; 10.5.14.0/8 ; } ;

};

//Added by Heera

zone "." IN {

type hint;

file "root.hints";

};

//Added by Heera

zone "0.0.127.in-addr.arpa" IN {

type master;

file "named.local";

allow-update { none; };

};

zone "14.5.10.in-addr.arpa" IN {

type master;

file "mailrev.zone";

allow-update { none; };

};

zone "bbfgroup.com" {

type master;

file "bbfgroup.com.zone";

};

1. Create a file /var/named/chroot/var/named/bbfgroup.com.zone with the following configuration:

# vim /var/named/chroot/var/named/bbfgroup.com.zone

$TTL 86400

@ IN SOA mailserver.bbfgroup.com. service.tetrain.com. (

42 ; serial (d. adams)

3H ; refresh

15M ; retry

1W ; expiry

1D ) ; minimum

; IN NS .in.

;localhost IN A 127.0.0.1

@ IN NS ns1.bbfgroup.com.

IN NS mailserver.bbfgroup.com.

mailserver.bbfgroup.com. IN A 10.5.14.15

bbfgroup.com. IN A 118.67.248.188

mailserver2 IN A 10.5.14.16

mail IN A 208.109.176.99

;apply settings after DNS pointing

;mail IN A 10.5.14.15

www IN CNAME bbfgroup.com.

ns1 IN CNAME mailserver.bbfgroup.com.

bbfgroup.com. IN MX 10 mailserver.bbfgroup.com.

1. Create a reverse zone file /var/named/chroot/var/named/mailrev.zone with the following configuration:

# vim /var/named/chroot/var/named/mailrev.zone

$TTL 86400

@ IN SOA mailserver.bbfgroup.com. root.localhost. (

1997022700 ; Serial

28800 ; Refresh

14400 ; Retry

3600000 ; Expire

86400 ) ; Minimum

INNS ns1.bbfgroup.com.

15INPTR mailserver.bbfgroup.com.

16INPTR mailserver2.bbfgroup.com

1. Create a reverse zone file /var/named/chroot/var/named/named.local for localhost with the following configuration:

# vim /var/named/chroot/var/named/named.local

$TTL 86400

@ IN SOA localhost. root.localhost. (

1997022700 ; Serial

28800 ; Refresh

14400 ; Retry

3600000 ; Expire

86400 ) ; Minimum

IN NS localhost.

1 IN PTR localhost.

1. Change your /etc/resolv.conf to use your mail server's IP address as primary DNS.

# vim /etc/resolv.conf

search bbfgroup.com

nameserver 127.0.0.1

nameserver 10.5.14.15

1. Start named service on the server and set autostart:

# /etc/init.d/named start

# chkconfig named on

1. Verify that the dns is working:

# host -t mx bbfgroup.com

bbfgroup.com mail is handled by 10 mailserver.bbfgroup.com

# nslookup mailserver.bbfgroup.com

Server: 10.5.14.15

Address: 10.5.14.15#53

Name: mailserver.bbfgroup.com

Address: 10.5.14.15

1. Reboot server before Zimbra installation :

# init 6

Zimbra Installation steps on MTA+Mailbox server [10.5.14.15]:

1. Create download directory for zimbra package:

# mkdir /download

# cd /download

1. Download ZCS – Network Edition from http://www.zimbra.com/products/download_network.html

Select architecture (x86 or x64) according to the installed Operation System and fill registration form.

1. Now extract the download zimbra tarball and start installation:

# tar –xvzf zcs-NETWORK-7.2.0_GA_2669.RHEL6_64.20120410002117.tgz

# cd zcs-NETWORK-7.2.0_GA_2669.RHEL6_64.20120410002117

#./install.sh --platform-override –license /root/Desktop/ZCSLicense.xml

Note: If we install Zimbra Collaboration Suite on Centos, we have to add ‘--platform-override’ when run the ‘install.sh’ script. Otherwise the installation will stop because the system is not detected as RedHat OS.

The output should look something like:

Operations logged to /tmp/install.log.3833

Checking for existing installation...

zimbra-ldap...NOT FOUND

zimbra-logger...NOT FOUND

zimbra-mta...NOT FOUND

zimbra-snmp...NOT FOUND

zimbra-store...NOT FOUND

zimbra-apache...NOT FOUND

zimbra-spell...NOT FOUND

zimbra-convertd...NOT FOUND

zimbra-memcached...NOT FOUND

zimbra-proxy...NOT FOUND

zimbra-archiving...NOT FOUND

zimbra-cluster...NOT FOUND

zimbra-core...NOT FOUND

First, we need to agree with the license terms.

Do you agree with the terms of the software license agreement? [N] y

Now, Zimbra will check all the prerequisites. If anything is not found, stop the Wizard and install it with yum.

If everything is ok, the script will ask what the packages that we want to install are. Just select the default options.

Checking for installable packages

Found zimbra-core

Found zimbra-ldap

Found zimbra-logger

Found zimbra-mta

Found zimbra-snmp

Found zimbra-store

Found zimbra-apache

Found zimbra-spell

Found zimbra-convertd

Found zimbra-memcached

Found zimbra-proxy

Found zimbra-archiving

Select the packages to install

Install zimbra-ldap [Y]

Install zimbra-logger [Y]

Install zimbra-mta [Y]

Install zimbra-snmp [Y]

Install zimbra-store [Y]

Install zimbra-apache [Y]

Install zimbra-spell [Y]

Install zimbra-convertd [Y]

Install zimbra-memcached [N]

Install zimbra-proxy [N]

Install zimbra-archiving [N]

Checking required space for zimbra-core

checking space for zimbra-store

Installing:

zimbra-core

zimbra-ldap

zimbra-logger

zimbra-mta

zimbra-snmp

zimbra-store

zimbra-apache

zimbra-spell

zimbra-convertd

Afterwards, the script asks you if you want to override the platform. You say "yes", of course.

You appear to be installing packages on a platform different

than the platform for which they were built.

This platform is CentOS6_64

Packages found: RHEL6_64

This may or may not work.

Using packages for a platform in which they were not designed for

may result in an installation that is NOT usable. Your support

options may be limited if you choose to continue.

Install anyway? [N] y

The system will be modified. Continue? [N] y

During installation, setup shows error like this then enter the domain name:

DNS ERROR resolving MX for mailserver.bbfgroup.com

It is suggested that the domain name have an MX record configured in DNS

Change domain name? [Yes]

Create domain: [mailserver.bbfgroup.com] bbfgroup.com

MX: mailserver.bbfgroup.com (10.5.14.15)

Interface: 10.5.14.15

Interface: 127.0.0.1

done.

Checking for port conflicts

Once the install is finished you are presented with the Main Menu. It looks like this:

Main menu

1) Common Configuration:

+Hostname: mailserver.bbfgroup.com

+Ldap master host: mailserver.bbfgroup.com

+Ldap port: 389

+Ldap Admin password: set

+Secure interprocess communications: yes

+TimeZone: Asia/Kolkata

2) zimbra-ldap: Enabled

+Status Enabled

+Create Domain: yes

+Domain to create: mailserver.bbfgroup.com

+Ldap root password: set

+Ldap replication password: set

+Ldap postfix password: set

+Ldap amavis password: set

+Ldap nginx password set

3) zimbra-store: Enabled

+Status Enabled

+Create Admin User: yes

+Admin user to create: admin@mailserver.bbfgroup.com

*******+Admin Password UNSET

+Anti-virus quarantine user: virusquarantine.zodi72xmm6@mailserver.bbfgroup.com

+Enable automated spam training: yes

+Spam training user spam.vviwu_izoj@mailserver.bbfgroup.com

+Non-spam(Ham) training user: ham.unsbogyzer@mailserver.bbfgroup.com

+SMTP host: mailserver.bbfgroup.com

+Web server HTTP port: 80

+Web server HTTPS port: 443

+Web server mode: http

+IMAP server port: 143

+IMAP server SSL port: 993

+POP server port: 110

+POP server SSL port: 995

+Use spell check server: yes

+Spell server URL: http://mailserver.bbfgroup.com:7780/aspell.php

+Configure for use with mail proxy: FALSE

+Configure for use with web proxy: FALSE

+Enable version update checks: TRUE

+Enable version update notifications: TRUE

+Version update notification email: admin@mailserver.bbfgroup.com

+Version update source email: admin@mailserver.bbfgroup.com

+License filename: set

4) zimbra-mta: Enabled

5) zimbra-snmp: Enabled

6) zimbra-logger: Enabled

7) zimbra-spell: Enabled

8) zimbra-convertd: Enabled

9) Default Class of Service Configuration:

10) Enable default backup schedule: yes

c) Collapse menu

r) Start servers after configuration yes

s) Save config to file

q) Quit

Notice the asterisks next to the Admin Password. You need to set the Admin Password before you complete the install. To do this enter “3” at the prompt and hit enter. The menu changes to:

Store configuration

1) Status: Enabled

2) Create Admin User: yes

3) Admin user to create: admin@mailserver.bbfgroup.com

******4) Admin Password UNSET

5) Anti-virus quarantine user: virusquarantine.zodi72xmm6@mailserver.bbfgroup.com

6) Enable automated spam training: yes

7) Spam training user: spam.vviwu_izoj@mailserver.bbfgroup.com

8) Non-spam(Ham) training user: ham.unsbogyzer@mailserver.bbfgroup.com

9) SMTP host: mailserver.bbfgroup.com

10) Web server HTTP port: 80

11) Web server HTTPS port: 443

12) Web server mode: http

13) IMAP server port: 143

14) IMAP server SSL port: 993

15) POP server port: 110

16) POP server SSL port: 995

17) Use spell check server: yes

18) Spell server URL: http://mailserver.bbfgroup.com :7780/aspell.php

19) Configure for use with mail proxy: FALSE

20) Configure for use with web proxy: FALSE

21) Enable version update checks: TRUE

22) Enable version update notifications: TRUE

23) Version update notification email: admin@mailserver.bbfgroup.com

24) Version update source email: admin@mailserver.bbfgroup.com

25) License filename: set

Select, or 'r' for previous menu [r] 4

Password for admin@mailserver.bbfgroup.com (min 6 characters): [2LPoBSob] Zimbra7

Now you choose “4”. You will be prompted to change the password. After you change the password hit “r” which will take you back to the previous menu.

Main menu   1) Common Configuration:   2) zimbra-ldap:                             Enabled   3) zimbra-store:                            Enabled   4) zimbra-mta:                              Enabled   5) zimbra-snmp:                             Enabled   6) zimbra-logger:                           Enabled   7) zimbra-spell:                            Enabled   8) Default Class of Service Configuration:   r) Start servers after configuration        yes   s) Save config to file   x) Expand menu   q) Quit

Enter “1” to display the Common Configuration submenus Ldap admin password:

Common Configuration:

1)Hostname: mailserver.bbfgroup.com

2)Ldap master host: mailserver.bbfgroup.com

3)Ldap port: 389

4)Ldap Admin password: UNSET

5)Secure interprocess communications: Yes

6)TimeZone: (GMT-05.30) Asia Kolkata

Now choose “4”. You will be prompted to change the password.

Password for Ldap Admin of mailserver.bfgroup.com (min 6 characters): [2XwnZS] Z7LdAp

After you set Ldap password hit “r” which will take you back to the previous menu and hit “a” at the prompt to save the configuration.

*** CONFIGURATION COMPLETE - press 'a' to apply

Select from menu, or press 'a' to apply config (? - help) a

Save configuration data to a file? [Yes] y

Save config in file: [/opt/zimbra/config.11722]

Saving config in /opt/zimbra/config.11722...done.

The system will be modified - continue? [No] y

We need to wait the end of the process.

Operations logged to /tmp/zmsetup.04042011-131235.log

Setting local config values...done.

Setting up CA...done.

Deploying CA to /opt/zimbra/conf/ca ...done.

Creating SSL certificate...done.

Installing mailboxd SSL certificates...done.

Initializing ldap...done.

Setting replication password...done.

Setting Postfix password...done.

Setting amavis password...done.

Setting nginx password...done.

Creating server entry for mailserver.bbfgroup.com...done.

Saving CA in ldap ...done.

Saving SSL Certificate in ldap ...done.

Setting spell check URL...done.

Setting service ports on mailserver.bbfgroup.com...done.

Adding mailserver.bbfgroup.com to zimbraMailHostPool in default COS...done.

Installing webclient skins...

steel...done.

twilight...done.

pebble...done.

bare...done.

lemongrass...done.

beach...done.

sand...done.

sky...done.

carbon...done.

smoke...done.

lavender...done.

tree...done.

waves...done.

lake...done.

oasis...done.

bones...done.

hotrod...done.

Finished installing webclient skins.

Setting zimbraFeatureTasksEnabled=TRUE...done.

Setting zimbraFeatureBriefcasesEnabled=TRUE...done.

Setting MTA auth host...done.

Setting TimeZone Preference...done.

Initializing mta config...done.

Setting services on mailserver.bbfgroup.com...done.

Creating domain mailserver.bbfgroup.com...done.

Setting default domain name...done.

Creating domain mailserver.bbfgroup.com...already exists.

Creating admin account admin@mailserver.bbfgroup.com...done.

Creating root alias...done.

Creating postmaster alias...done.

Creating user spam.sd5fsqtdzi@mailserver.bbfgroup.com...done.

Creating user ham.2qun60wc4@mailserver.bbfgroup.com...done.

Creating user virus-quarantine.kzpbrsgbx7@mailserver.bbfgroup.com...done.

Setting spam training and Anti-virus quarantine accounts...done.

Initializing store sql database...done.

Setting zimbraSmtpHostname for mailserver.bbfgroup.com...done.

Configuring SNMP...done.

Checking for default IM conference room...not present.

Initializing default IM conference room...done.

Setting up syslog.conf...done.

You have the option of notifying Zimbra of your installation.

This helps us to track the uptake of the Zimbra Collaboration Suite.

The only information that will be transmitted is:

The VERSION of zcs installed (zcs-NETWORK-7.2.0_GA_2669.CentOS6_64)

The ADMIN EMAIL ADDRESS created (admin@mailserver.bbfgroup.com)

Notify Zimbra of your installation? [Yes] no

Notification skipped

Starting servers...done.

Installing common zimlets...

com_zimbra_bulkprovision...done.

com_zimbra_phone...done.

com_zimbra_attachmail...done.

com_zimbra_linkedin...done.

com_zimbra_srchhighlighter...done.

com_zimbra_attachcontacts...done.

com_zimbra_adminversioncheck...done.

com_zimbra_url...done.

com_zimbra_cert_manager...done.

com_zimbra_date...done.

com_zimbra_email...done.

com_zimbra_webex...done.

com_zimbra_dnd...done.

com_zimbra_social...done.

Finished installing common zimlets.

Restarting mailboxd...done.

Setting up zimbra crontab...done.

Moving /tmp/zmsetup.04042011-131235.log to /opt/zimbra/log

Configuration complete - press return to exit

When Configuration complete! appears, the installation is finished and the server has been started.

To verify that the server is running:

# su - zimbra

$ zmcontrol status

Host mailserver.bbfgroup.com

antispam Running

antivirus Running

convertd Running

ldap Running

logger Running

mailbox Running

mta Running

snmp Running

spell Running

stats Running

The installation will complete and you will be all set to access the administrative web interface.

1. Configuring Zimbra 7 wih Admin web interface:

Access the admin web interface by going to https://mailserver.bbfgroup.com:7071 or https://10.5.14.15:7071

[[Image:]]

To log in, the user is admin and the password used in the installation script.

Use the admin console to configure the server.

1. Activate ZCS license:

After you log on, a dialog displays stating your license is not activated. Go to Global Settings > License and click Activate License on the toolbar. Click OK to continue.

Pre-Installation step on second Mailbox server [10.5.14.16]:

1. Install CentOS 6.2 x86_64 on server.
2. Disable SELinux in file “/etc/sysconfig/selinux” :

# vim /etc/sysconfig/selinux

SELINUX=disabled

1. Disable the Firewall:

# system-config-firewall

1. Disable iptables and sendmail services:

# /etc/init.d/postfix stop

# chkconfig postfix off

# chkconfig iptables off

# chkconfig ip6tables off

1. Disable MySQL if installed and running:

# /etc/init.d/mysqld stop

# chkconfig mysqld off

1. Yum repository must be configured to install packages and other dependencies:

# wget http://packages.sw.be/rpmforge-release/rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm

Install DAG's GPG key:

# rpm --import http://apt.sw.be/RPM-GPG-KEY.dag.txt

Install the repository package:

# rpm –ivh rpmforge-release-0.5.2-2.el6.rf.x86_64.rpm

This will add a yum repository config file and import the appropriate GPG keys.

1. Install and configure NTP to synchronize the system clock:

# yum install ntp

# chkconfig ntpd on

# ntpdate -u pool.ntp.org

# /etc/init.d/ntpd start

1. Now start installation of Centos 6.2 packages required by ZCS 7.2

# yum install nc perl sudo sysstat gmp libidn libstdc++ sqlite libtool-ltdl -y

1. Configure hostname of the server and DNS for the domain:

Make sure that in /etc/hosts, the hostname of the server has been pointed to the IP address of the server.

# vim /etc/hosts

127.0.0.1localhost.localdomain localhost

10.5.14.15 mailserver.bbfgroup.com mailserver

10.5.14.16 mailserver2.bbfgroup.com mailserver2

1localhost6.localdomain6 localhost6

# vim /etc/sysconfig/network

NETWORKING=yes

NETWORKING_IPV6=no

HOSTNAME=mailserver2.bbfgroup.com

1. Change your /etc/resolv.conf to use mailserver.bbfgroup.com as a primary DNS.

# vim /etc/resolv.conf

search bbfgroup.com

nameserver 10.5.14.15

1. Verify that the dns is working:

# host -t mx bbfgroup.com

bbfgroup.com mail is handled by 10 mailserver.bbfgroup.com

# nslookup mailserver.bbfgroup.com

Server: 10.5.14.15

Address: 10.5.14.15#53

Name: mailserver.bbfgroup.com

Address: 10.5.14.15

1. Reboot server before Zimbra installation :

# init 6

Zimbra Installation steps on second Mailbox server [10.5.14.16]:

1. Create download directory for zimbra package:

# mkdir /download

# cd /download

1. Download ZCS – Network Edition from http://www.zimbra.com/products/download_network.html

Select architecture (x86 or x64) according to the installed Operation System and fill registration form.

1. Now extract the download zimbra tarball and start installation:

# tar –xvzf zcs-NETWORK-7.2.0_GA_2669.RHEL6_64.20120410002117.tgz

# cd zcs-NETWORK-7.2.0_GA_2669.RHEL6_64.20120410002117

#./install.sh --platform-override

Note: If we install Zimbra Collaboration Suite on Centos, we have to add ‘--platform-override’ when run the ‘install.sh’ script. Otherwise the installation will stop because the system is not detected as RedHat OS.

The output should look something like:

Operations logged to /tmp/install.log.3833

Checking for existing installation...

zimbra-ldap...NOT FOUND

zimbra-logger...NOT FOUND

zimbra-mta...NOT FOUND

zimbra-snmp...NOT FOUND

zimbra-store...NOT FOUND

zimbra-apache...NOT FOUND

zimbra-spell...NOT FOUND

zimbra-convertd...NOT FOUND

zimbra-memcached...NOT FOUND

zimbra-proxy...NOT FOUND

zimbra-archiving...NOT FOUND

zimbra-cluster...NOT FOUND

zimbra-core...NOT FOUND

First, we need to agree with the license terms.

Do you agree with the terms of the software license agreement? [N] y

Now, Zimbra will check all the prerequisites. If anything is not found, stop the Wizard and install it with yum.

If everything is ok, the script will ask what the packages that we want to install are. Just select the default options.

Checking for installable packages

Found zimbra-core

Found zimbra-ldap

Found zimbra-logger

Found zimbra-mta

Found zimbra-snmp

Found zimbra-store

Found zimbra-apache

Found zimbra-spell

Found zimbra-convertd

Found zimbra-memcached

Found zimbra-proxy

Found zimbra-archiving

Select the packages to install

Install zimbra-ldap [Y] N

Install zimbra-logger [Y] N

Install zimbra-mta [Y] N

Install zimbra-snmp [Y]

Install zimbra-store [Y]

Install zimbra-apache [Y]

Install zimbra-spell [Y]

Install zimbra-convertd [Y]

Install zimbra-memcached [N]

Install zimbra-proxy [N]

Install zimbra-archiving [N]

Checking required space for zimbra-core

checking space for zimbra-store

Installing:

zimbra-core

zimbra-snmp

zimbra-store

zimbra-apache

zimbra-spell

zimbra-convertd

Afterwards, the script asks you if you want to override the platform. You say "yes", of course.

You appear to be installing packages on a platform different

than the platform for which they were built.

This platform is CentOS6_64

Packages found: RHEL6_64

This may or may not work.

Using packages for a platform in which they were not designed for

may result in an installation that is NOT usable. Your support

options may be limited if you choose to continue.

Install anyway? [N] y

The system will be modified. Continue? [N] y

During installation, setup shows error like this then enter the domain name:

DNS ERROR resolving MX for mailserver2.bbfgroup.com

It is suggested that the domain name have an MX record configured in DNS

Change domain name? [Yes]

Create domain: [mailserver2.bbfgroup.com] bbfgroup.com

MX: mailserver.bbfgroup.com (10.5.14.15)

Interface: 10.5.14.15

Interface: 127.0.0.1

done.

Checking for port conflicts

Once the install is finished you are presented with the Main Menu. It looks like this:

Main menu

1) Common Configuration:

+Hostname: mailserver2.bbfgroup.com

*******+Ldap master host: UNSET

+Ldap port: 389

*******+Ldap Admin password: UNSET

+Secure interprocess communications: yes

+TimeZone: Asia/Kolkata

2) zimbra-store: Enabled

3) zimbra-snmp: Enabled

4) zimbra-spell: Enabled

5) zimbra-convertd: Enabled

6) Default Class of Service Configuration:

7) Enable default backup schedule: yes

c) Collapse menu

r) Start servers after configuration yes

s) Save config to file

q) Quit

Notice the asterisks. You need to be set the Ldap master host and Ldap admin password to complete the installation. To do this enter “1” at the prompt and hit enter. The menu changes to:

Common Configuration:

1)Hostname: mailserver.bbfgroup.com

*******2)Ldap master host: UNSET

3)Ldap port: 389

*******4)Ldap Admin password: UNSET

5)Secure interprocess communications: Yes

6)TimeZone: (GMT-05.30) Asia Kolkata

Now choose “2” to set Ldap master host:

LDAP master host : mailserver.bbfgroup.com

Password for Ldap Admin of mailserver.bfgroup.com (min 6 characters): [2XwnZS] Z7LdAp

After this step hit “r” which will take you back to the previous menu and hit “2” and Store configuration is show on screen:

Store configuration

1) Status: Enabled

2) Create Admin User: yes

3) Admin user to create: admin@mailserver.bbfgroup.com

******4) Admin Password UNSET

5) Anti-virus quarantine user: virusquarantine.zodi72xmm6@mailserver.bbfgroup.com

6) Enable automated spam training: yes

7) Spam training user: spam.vviwu_izoj@mailserver.bbfgroup.com

8) Non-spam(Ham) training user: ham.unsbogyzer@mailserver.bbfgroup.com

9) SMTP host: mailserver.bbfgroup.com

10) Web server HTTP port: 80

11) Web server HTTPS port: 443

12) Web server mode: http

13) IMAP server port: 143

14) IMAP server SSL port: 993

15) POP server port: 110

16) POP server SSL port: 995

17) Use spell check server: yes

18) Spell server URL: http://mailserver.bbfgroup.com :7780/aspell.php

19) Configure for use with mail proxy: FALSE

20) Configure for use with web proxy: FALSE

21) Enable version update checks: TRUE

22) Enable version update notifications: TRUE

23) Version update notification email: admin@mailserver.bbfgroup.com

24) Version update source email: admin@mailserver.bbfgroup.com

Select, or 'r' for previous menu [r] 4

Password for admin@mailserver.bbfgroup.com (min 6 characters): [2LPoBSob] Zimbra7

Now you choose “4”. You will be prompted to change the password. After you change the password hit “r” which will take you back to the previous menu.

Main menu   1) Common Configuration:   2) zimbra-store:                            Enabled   3) zimbra-mta:                              Enabled   4) zimbra-snmp:                             Enabled   5) zimbra-logger:                           Enabled   6) zimbra-spell:                            Enabled   7) Default Class of Service Configuration:   r) Start servers after configuration        yes   s) Save config to file   x) Expand menu   q) Quit

Now press “a” at the prompt to save the configuration.

*** CONFIGURATION COMPLETE - press 'a' to apply

Select from menu, or press 'a' to apply config (? - help) a

Save configuration data to a file? [Yes] y

Save config in file: [/opt/zimbra/config.11722]

Saving config in /opt/zimbra/config.11722...done.

The system will be modified - continue? [No] y

Operations logged to /tmp/zmsetup.04042011-131235.log

Setting local config values...done.

Setting up CA...done.

Deploying CA to /opt/zimbra/conf/ca ...done.

Creating SSL certificate...done.

Installing mailboxd SSL certificates...done.

Initializing ldap...done.

Setting replication password...done.

Setting Postfix password...done.

Setting amavis password...done.

Setting nginx password...done.

Creating server entry for mailserver.bbfgroup.com...done.

Saving CA in ldap ...done.

Saving SSL Certificate in ldap ...done.

Setting spell check URL...done.

Setting service ports on mailserver.bbfgroup.com...done.

Adding mailserver.bbfgroup.com to zimbraMailHostPool in default COS...done.

Installing webclient skins...

steel...done.

twilight...done.

pebble...done.

bare...done.

lemongrass...done.

beach...done.

sand...done.

sky...done.

carbon...done.

smoke...done.

lavender...done.

tree...done.

waves...done.

lake...done.

oasis...done.

bones...done.

hotrod...done.

Finished installing webclient skins.

Setting zimbraFeatureTasksEnabled=TRUE...done.

Setting zimbraFeatureBriefcasesEnabled=TRUE...done.

Setting MTA auth host...done.

Setting TimeZone Preference...done.

Initializing mta config...done.

Setting services on mailserver.bbfgroup.com...done.

Creating domain mailserver.bbfgroup.com...done.

Setting default domain name...done.

Creating domain mailserver.bbfgroup.com...already exists.

Creating admin account admin@mailserver.bbfgroup.com...done.

Creating root alias...done.

Creating postmaster alias...done.

Creating user spam.sd5fsqtdzi@mailserver.bbfgroup.com...done.

Creating user ham.2qun60wc4@mailserver.bbfgroup.com...done.

Creating user virus-quarantine.kzpbrsgbx7@mailserver.bbfgroup.com...done.

Setting spam training and Anti-virus quarantine accounts...done.

Initializing store sql database...done.

Setting zimbraSmtpHostname for mailserver.bbfgroup.com...done.

Configuring SNMP...done.

Checking for default IM conference room...not present.

Initializing default IM conference room...done.

Setting up syslog.conf...done.

You have the option of notifying Zimbra of your installation.

This helps us to track the uptake of the Zimbra Collaboration Suite.

The only information that will be transmitted is:

The VERSION of zcs installed (zcs-NETWORK-7.2.0_GA_2669.CentOS6_64)

The ADMIN EMAIL ADDRESS created (admin@mailserver.bbfgroup.com)

Notify Zimbra of your installation? [Yes] no

Notification skipped

Starting servers...done.

Installing common zimlets...

com_zimbra_bulkprovision...done.

com_zimbra_phone...done.

com_zimbra_attachmail...done.

com_zimbra_linkedin...done.

com_zimbra_srchhighlighter...done.

com_zimbra_attachcontacts...done.

com_zimbra_adminversioncheck...done.

com_zimbra_url...done.

com_zimbra_cert_manager...done.

com_zimbra_date...done.

com_zimbra_email...done.

com_zimbra_webex...done.

com_zimbra_dnd...done.

com_zimbra_social...done.

Finished installing common zimlets.

Restarting mailboxd...done.

Setting up zimbra crontab...done.

Moving /tmp/zmsetup.04042011-131235.log to /opt/zimbra/log

Configuration complete - press return to exit

When Configuration complete! appears, the installation is finished and the server has been started.

To verify that the server is running:

# su - zimbra

$ zmcontrol status

Host mailserver2.bbfgroup.com

convertd Running

logger Running

mailbox Running

snmp Running

spell Running

stats Running

Restrict Users to send e-mail only in Local Domain:

1. This type of customization is performed on postfix level.

On mailserver.bbfgroup.com login as as root user and then switch to zimbra user:

# su - zimbra

1. Edit /opt/zimbra/conf/postfix_recipient_restrictions.cf and add following restriction rule on top of the file:

check_sender_access hash:/opt/zimbra/postfix/conf/bbfgroup_restricted_users

1. Edit /opt/zimbra/conf/zmmta.cf and add following line at the end of "SECTION mta DEPENDS amavis"

just before "RESTART mta":

POSTCONF smtpd_restriction_classes local_bbfgroup_only

POSTCONF local_bbfgroup_only FILE postfix_check_recipient_access.cf

1. Create a new file /opt/zimbra/conf/postfix_check_recipient_access.cf and add following line:

check_recipient_access hash:/opt/zimbra/postfix/conf/local_bbfgroup_domains, reject

1. Create a new file /opt/zimbra/postfix/conf/bbfgroup_restricted_users and add user with the pre-defined format:

apcups1@bbfgroup.comlocal_bbfgroup_only

apcups2@bbfgroup.comlocal_bbfgroup_only

1. Create a new file /opt/zimbra/postfix/conf/local_bbfgroup_domains and list all the domains where

bbfgroup_restricted_users allowed to sent mails. Please follow this syntax :

bbfgroup.comOK

1. Update new posfix configuration files using these commands and restart zimbra MTA:

$ postmap /opt/zimbra/postfix/conf/bbfgroup_restricted_users

$ postmap /opt/zimbra/postfix/conf/local_bbfgroup_domains

$ zmmtactl stop

$ zmmtactl start

After applying these setting, all of restricted user will have limited access for sending an email and they will allowed only to sending an e-mail to bbfgroup domain only as listed on file /opt/zimbra/postfix/conf/local_bbfgroup_domains

Note :

1. These setting will must be re-written after upgrading Zimbra

2. To restore restricted user access so they could sending for various domain, please : Remove any added configuration on zmmta.cf and make sure that the restriction setting will applied to blank account. Run this command : postconf -e smtpd_restriction_classes and zmmtactl reload to restore the setting.

Reference:

Zimbra: http://www.zimbra.com

Zimbra Documentation: http://www.zimbra.com/community/documentation.html

Zimbra Wiki: http://wiki.zimbra.com

Zimbra GUI Mail Training:

https://my.uwsa.edu/helpdesk/Zimbra/Email/

Zimbra CLI commands:

http://wiki.zimbra.com/wiki/Zmprov_Examples

http://wiki.zimbra.com/index.php?title=Zmprov

http://www.zimbra.com/docs/ne/4.5.10/administration_guide/A_app-command-line.14.2.html#1153803

Mail sending restriction:

http://vavai.net/2008/11/zimbra-tips-how-to-restricted-user-to-sending-email-for-specified-domain-only

Heera Singh Koranga

Tetra Information Service