Final Document Submitted to Sandhar
- Zimbra Server Architecture.
- ZIMBRA : Installation & Configuration.
- Avoiding conflicts: what are the default port configurations when Zimbra is installed
- How do I make sure that DNS is configured correctly
- What are the top issues affecting performance
- How do I change the Zimbra server's hostname, IP address and credentials
- How to restore mails from archive server
- Since there is no password restriction on mailing group, what would be best practice for restricting users from sending mails to " everyone "
- How can we increase or decrease mail size quota
- How to create a mail ID
- How to create diff groups
- Is there any daily checklist of the best practice which can be reviewed on daily basis to check whether the Zimbra mailing server and its all services ar functioning properly
- How to configure archive server
Cluster : 2 Nodes (node1.sandhar.in, node2.sandhar.in )
Commonly named as node.sandhar.in and working with name mail.sandhar.in
Archiving : 1 Server (archive.sandhar.in)
Node2.sandhar.in
172.17.16.98Archive.sandhar.in
172.17.16.99 Node1.sandhar.in
172.17.16.97Node.sandhar.in
172.17.16.22
Only MD's Mails were forwared to the remote MS exchange server for the mobile syncronization facility, It's done by adding an additional domain in the server name msexc.sandhar.in and create the user and then provide the remote mail box information in mail transport.
1) ZIMBRA : Installation & Configuration
# install first below
[root@mail ~]# yum -y install nc sysstat
Download the ZCS 8.5 package
[root@mail ~]# tar zxvf zcs-8.5.1_GA_3056.RHEL6_64.20141103151539.tgz
[root@mail ~]# cd zcs-8.5.1_GA_3056.RHEL6_64.20141103151539
# execute install scripts
[root@mail zcs-8.5.1_GA_3056.RHEL6_64.20141103151539]#./install.sh –platform-override
Operations logged to /tmp/install.log.1178
Checking for existing installation…
zimbra-ldap…NOT FOUND
zimbra-logger…NOT FOUND
zimbra-mta…NOT FOUND
zimbra-snmp…NOT FOUND
zimbra-store…NOT FOUND
zimbra-apache…NOT FOUND
zimbra-spell…NOT FOUND
zimbra-convertd…NOT FOUND
zimbra-memcached…NOT FOUND
zimbra-proxy…NOT FOUND
zimbra-archiving…NOT FOUND
zimbra-cluster…NOT FOUND
zimbra-core…NOT FOUND
PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE.
ZIMBRA, INC. (“ZIMBRA”) WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU
FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING
THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY
THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS
AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.
License Terms for the Zimbra Collaboration Suite:
http://www.zimbra.com/license/zimbra_public_eula_2.1.html
Do you agree with the terms of the software license agreement? [N] y # Yes
Do you agree with the terms of the software license agreement? [N] y # Yes again
Checking for prerequisites…
FOUND: NPTL
FOUND: nc-1.84-22
FOUND: sudo-1.7.4p5-13
FOUND: libidn-1.18-2
FOUND: gmp-4.3.1-7
FOUND: /usr/lib64/libstdc++.so.6
Checking for suggested prerequisites…
FOUND: perl-5.10.1
FOUND: sysstat
FOUND: sqlite
Prerequisite check complete.
Checking for installable packages
Found zimbra-core
Found zimbra-ldap
Found zimbra-logger
Found zimbra-mta
Found zimbra-snmp
Found zimbra-store
Found zimbra-apache
Found zimbra-spell
Found zimbra-memcached
Found zimbra-proxy
Select the packages to install
Install zimbra-ldap [Y] # Enter
Install zimbra-logger [Y] # Enter
Install zimbra-mta [Y] # Enter
Install zimbra-snmp [Y] # Enter
Install zimbra-store [Y] # Enter
Install zimbra-apache [Y] # Enter
Install zimbra-spell [Y] # Enter
Install zimbra-memcached [N] # Enter
Install zimbra-proxy [N] # Enter
Checking required space for zimbra-core
Checking space for zimbra-store
Installing:
zimbra-core
zimbra-ldap
zimbra-logger
zimbra-mta
zimbra-snmp
zimbra-store
zimbra-apache
zimbra-spell
zimbra-memcached
zimbra-proxy
You appear to be installing packages on a platform different
than the platform for which they were built.
This platform is CentOS6_64
Packages found: RHEL6_64
This may or may not work.
Using packages for a platform in which they were not designed for
may result in an installation that is NOT usable. Your support
options may be limited if you choose to continue.
Install anyway? [N] y # Yes
The system will be modified. Continue? [N] y # Yes
Removing /opt/zimbra
Removing zimbra crontab entry…done.
Cleaning up zimbra init scripts…done.
Cleaning up /etc/ld.so.conf…done.
Cleaning up /etc/security/limits.conf…done.
Finished removing Zimbra Collaboration Server.
Installing packages
zimbra-core……zimbra-core-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done
zimbra-ldap……zimbra-ldap-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done
zimbra-logger……zimbra-logger-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done
zimbra-mta……zimbra-mta-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done
zimbra-snmp……zimbra-snmp-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done
zimbra-store……zimbra-store-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done
zimbra-apache……zimbra-apache-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done
zimbra-spell……zimbra-spell-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done
zimbra-memcached……zimbra-memcached-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done
zimbra-proxy……zimbra-proxy-8.5.1_GA_3056.RHEL6_64.20141103151539.x86_64.rpm…done
Operations logged to /tmp/zmsetup.01082013-134300.log
Installing LDAP configuration database…done.
Setting defaults…
DNS ERROR resolving MX for dlp.sandhar.in
It is suggested that the domain name have an MX record configured in DNS
# the following error will be shown on many servers, then proceed with Yes.
Change domain name? [Yes] y # Yes
Create domain: [mail.sandhar.in] sandhar.in # input doman name
MX: mail.sandhar.in (10.0.0.32)
Interface: 10.0.0.32
Interface: 127.0.0.1
Interface: ::1
done.
Checking for port conflicts
Main menu
1) Common Configuration:
2) zimbra-ldap: Enabled
3) zimbra-store: Enabled
+Create Admin User: yes
+Admin user to create: admin@sandhar.in
******* +Admin Password UNSET
+Anti-virus quarantine user: virus-quarantine.u81auho8@sandhar.in
+Enable automated spam training: yes
+Spam training user: spam.m6vf8lprt8@sandhar.in
+Non-spam(Ham) training user: ham.vpd5_v3c@sandhar.in
+SMTP host: mail.sandhar.in
+Web server HTTP port: 80
+Web server HTTPS port: 443
+Web server mode: https
+IMAP server port: 143
+IMAP server SSL port: 993
+POP server port: 110
+POP server SSL port: 995
+Use spell check server: yes
+Spell server URL: http://mail.sandhar.in:7780/aspell.php
+Configure for use with mail proxy: FALSE
+Configure for use with web proxy: FALSE
+Enable version update checks: TRUE
+Enable version update notifications: TRUE
+Version update notification email: admin@sandhar.in
+Version update source email: admin@sandhar.in
4) zimbra-mta: Enabled
5) zimbra-snmp: Enabled
6) zimbra-logger: Enabled
7) zimbra-spell: Enabled
8) Default Class of Service Configuration:
r) Start servers after configuration yes
s) Save config to file
x) Expand menu
q) Quit
Address unconfigured (**) items (? – help) 3 # select “3”
Store configuration
1) Status: Enabled
2) Create Admin User: yes
3) Admin user to create: admin@sandhar.in
** 4) Admin Password UNSET
5) Anti-virus quarantine user: virus-quarantine.u81auho8@sandhar.in
6) Enable automated spam training: yes
7) Spam training user: spam.m6vf8lprt8@sandhar.in
8) Non-spam(Ham) training user: ham.vpd5_v3c@sandhar.in
9) SMTP host: mail.sandhar.in
10) Web server HTTP port: 80
11) Web server HTTPS port: 443
12) Web server mode: https
13) IMAP server port: 143
14) IMAP server SSL port: 993
15) POP server port: 110
16) POP server SSL port: 995
17) Use spell check server: yes
18) Spell server URL: http://mail.sandhar.in:7780/aspell.php
19) Configure for use with mail proxy: FALSE
20) Configure for use with web proxy: FALSE
21) Enable version update checks: TRUE
22) Enable version update notifications: TRUE
23) Version update notification email: admin@sandhar.in
24) Version update source email: admin@sandhar.in
Select, or ‘r’ for previous menu [r] 4 # select “4” and set admin password
Password for admin@sandhar.in (min 6 characters): [xFuoltBR] youradminpassword # input password
Store configuration
1) Status: Enabled
2) Create Admin User: yes
3) Admin user to create: admin@sandhar.in
4) Admin Password set
5) Anti-virus quarantine user: virus-quarantine.u81auho8@sandhar.in
6) Enable automated spam training: yes
7) Spam training user: spam.m6vf8lprt8@sandhar.in
8) Non-spam(Ham) training user: ham.vpd5_v3c@sandhar.in
9) SMTP host: mail.sandhar.in
10) Web server HTTP port: 80
11) Web server HTTPS port: 443
12) Web server mode: https
13) IMAP server port: 143
14) IMAP server SSL port: 993
15) POP server port: 110
16) POP server SSL port: 995
17) Use spell check server: yes
18) Spell server URL: http://mail.sandhar.in:7780/aspell.php
19) Configure for use with mail proxy: FALSE
20) Configure for use with web proxy: FALSE
21) Enable version update checks: TRUE
22) Enable version update notifications: TRUE
23) Version update notification email: admin@sandhar.in
24) Version update source email: admin@sandhar.in
Select, or ‘r’ for previous menu [r] r # back
Main menu
1) Common Configuration:
2) zimbra-ldap: Enabled
3) zimbra-store: Enabled
4) zimbra-mta: Enabled
5) zimbra-snmp: Enabled
6) zimbra-logger: Enabled
7) zimbra-spell: Enabled
8) Default Class of Service Configuration:
r) Start servers after configuration yes
s) Save config to file
x) Expand menu
q) Quit
*** CONFIGURATION COMPLETE – press ‘a’ to apply
Select from menu, or press ‘a’ to apply config (? – help) a # apply
Save configuration data to a file? [Yes] # Enter
Save config in file: [/opt/zimbra/config.7621] # Enter
Saving config in /opt/zimbra/config.7621…done.The system will be modified – continue? [No] y # Yes
Operations logged to /tmp/zmsetup.01082013-165631.log
Setting local config values…done.
Initializing core config…Setting up CA…done.
Deploying CA to /opt/zimbra/conf/ca …done.
Creating SSL zimbra-store certificate…done.
Creating new zimbra-ldap SSL certificate…done.
Creating new zimbra-mta SSL certificate…done.
Installing mailboxd SSL certificates…done.
Installing MTA SSL certificates…done.
Installing LDAP SSL certificate…done.
Initializing ldap…done.
Setting replication password…done.
Setting Postfix password…done.
Setting amavis password…done.
Setting nginx password…done.
Creating server entry for mail.sandhar.in…done.
Setting Zimbra IP Mode…done.
Saving CA in ldap …done.
Saving SSL Certificate in ldap …done.
Setting spell check URL…done.
Setting service ports on mail.sandhar.in…done.
Adding mail.sandhar.in to zimbraMailHostPool in default COS…done.
Setting zimbraFeatureTasksEnabled=TRUE…done.
Setting zimbraFeatureBriefcasesEnabled=FALSE…done.
Setting MTA auth host…done.
Setting TimeZone Preference…done.
Initializing mta config…done.
Setting services on mail.ssandhar.in…done.
Creating domain sandhar.in…done.
Setting default domain name…done.
Creating domain sandhar.in…already exists.
Creating admin account admin@sandhar.in…done.
Creating root alias…done.
Creating postmaster alias…done.
Creating user spam.ger0jvv1@sandhar.in…done.
Creating user ham.zz8dhhpvdh@sandhar.in…done.
Creating user virus-quarantine.zrfydwcl0y@sandhar.in…done.
Setting spam training and Anti-virus quarantine accounts…done.
Initializing store sql database…done.
Setting zimbraSmtpHostname for mail.sandhar.in…done.
Configuring SNMP…done.
Setting up syslog.conf…done.
Starting servers…done.
Installing common zimlets…
com_zimbra_srchhighlighter…done.
com_zimbra_url…done.
com_zimbra_phone…done.
com_zimbra_attachmail…done.
com_zimbra_ymemoticons…done.
com_zimbra_email…done.
com_zimbra_adminversioncheck…done.
com_zimbra_bulkprovision…done.
com_zimbra_proxy_config…done.
com_zimbra_attachcontacts…done.
com_zimbra_tooltip…done.
com_zimbra_clientuploader…done.
com_zimbra_date…done.
com_zimbra_cert_manager…done.
com_zimbra_viewmail…done.
com_zimbra_webex…done.
Finished installing common zimlets.
Restarting mailboxd…done.
Creating galsync account for default domain…failed.
You have the option of notifying Zimbra of your installation.
This helps us to track the uptake of the Zimbra Collaboration Server.
The only information that will be transmitted is:
The VERSION of zcs installed (8.5.1_GA_3056_CentOS6_64)
The ADMIN EMAIL ADDRESS created (admin@sandhar.in)
Notify Zimbra of your installation? [Yes]
Notifying Zimbra of installation via
Notification complete
Setting up zimbra crontab…done.
Moving /tmp/zmsetup.01082013-165631.log to /opt/zimbra/log
Configuration complete – press return to exit
2) Avoiding conflicts: what are the default port configurations when Zimbra is installed?
Some Important open port there is may more ports zimbra use internally, but below wer important and need to take care.
587 Subbmission smtp port143 Imap port
465 secure smtp port
22 ssh port
25 smtp port
443 secure http port
7071 zimbra admin port
993 secure imap
995 secure pop
389 ldap port
3) How do I make sure that DNS is configured correctly?
1st login to the server and check with below commands
# host sandhar.in
# host -t mx sandhar.in
or we can test with dig command
#dig sandhar.in
# dig sandhar.in -t mx
DNS is working internally in the server.
4) What are the top issues affecting performance?
1: Hardware performance
2: Disk Size (/opt partition )
3: Network performance
4: Server Memory ( RAM )
5) How do I change the Zimbra server's hostname, IP address and credentials?
1: Changing Zimbra server hostname is not adviseable cause everything intenally works with name, if needed and very important then have to analyse the effect at that moment have proper downtime and then can be done only by Us cause it might affect all the services and a very risky thing to do.
2: IP address and credentials
As the server is behind the firewall the credentials were simple but not adviseable that can be changed after informing us
node1: 172.17.16.97 : root@4321
node2: 172.17.16.98 : root123
archive: 172.17.16.99 : root123
node: 172.17.16.22: its a floating IP between node1 and node2
6) How to restore mails from archive server?
1st login to the archive server switch user to zimbra
let take the example for the amit.sharma1
hit the below commands
$ zmprov gmi amit.sharma1@archive.sandhar.in
above command will give the mailbox id suppose it give 33 then go to directory
$ cd /opt/zimbra/store/0/
$ rsync -aP 33 root@172.17.16.22:/tmp/ # it will prompt for the password of machine 22 provide it then the directory will transfer to the server
Now login to 172.17.16.22 and check the directory was there or not by below command.
# ls /tmp/
above will show a directory maned 33, now change the permission of the directory so hat zimbra can work on it as with below command.
# chown zimbra.zimbra /tmp/33 -R
# su – zimbra
$ zmmailbox -zadmin
mbox> selectMailbox amit.sharma1@sandhar.in
mbox amit.sharma1@sandhar.in> creatFolder /Recovery
mbox amit.sharma1@sandhar.in> addMessage /Recovery /tmp/33/
#/tmp/33 is the path of the folder in which acrive mails were there.
Note: Please do not do the above without under our observation till you haven't have a good experince with cli and understanding of the process.
7) Since there is no password restriction on mailing group, what would be best practice for restricting users from sending mails to " everyone "
There is a process on group restricting that only who can delever the mail on that particular group, which can be done at backend via CLI only.
8) How can we increase or decrease mail size quota?
There is no Such option of mail size quota, its a users mailbox quota which can be maintain via GUI admin panel
login to Admin Panel and hit below
Manage -->> user@sandhar.in -->>double click on user, go to advance in the left pane, and set the quota accordingly, 0 stands for unlimited quota.
9) How to create a mail ID?
Login to Admin Panel hit the below.
Manage -->> click on the right corner most setting tab, click on New and follow the instruction accordingly.
10) How to create diff groups?
Login to Admin Panel hit below
Manage -->> click on distribution list, and follow the instruction accordingly.
11) Is there any daily checklist of the best practice which can be reviewed on daily basis to check whether the Zimbra mailing server and its all services ar functioning properly
For this nagios client can be implemented on the server as you were having the nagios server.
12) How to configure archive server ? SOP for the same.
Introduction
This document shows how to create a simple archiving server. If you have a user 'keyur@example.com', all mails sent to and from this email ID will be forwarded to 'keyur@archive.example.com'. We will need two servers for this. Both will be installed with Zimbra, one being the live mail server 'example.com', and the other the archiving server, 'archive.example.com'. The archiving server should have a much larger HDD drive than the mail server, preferably formatted using LVM, to allow for expansion later.
The installation on each server will be independent, ie, this isn't a multi-server setup. Each server will be a single-server, with the only difference being the domain names.
In this example, let's assume the live server's domain is 'example.com', with IP 192.168.1.5, and the archiving server is 'archive.example.com', with IP 192.168.1.18. Install Zimbra on both as usual.
DNS
The servers will require a local DNS, as we use this to forward the mails. In this example, I will assume that we have set up a caching name server using bind on the live server. Typical entries would be something like this:
example.com. IN A 192.0.43.10
mail.example.com. IN A 192.168.1.5
example.com. IN MX 10 mail.example.com.
Along with this, we need to add an A and MX record for archive.example.com as well.
archive.example.com. IN A 192.168.1.18
archive.example.com. IN MX 10 archive.example.com.
Now all mails addressed to 'archive.example.com' will be forwarded to the archive server.
Postfix
In postfix, we can specify an email address to which all incoming and outgoing mails from a particular email ID will be forwarded to. This is done using 'sender_bcc_maps' and 'recipient_bcc_maps'. All these changes are done only on the main server. We make the following entries at the end of /opt/zimbra/postfix/conf/main.cf
sender_bcc_maps = hash:/opt/zimbra/postfix/conf/archivelist
recipient_bcc_maps = hash:/opt/zimbra/postfix/conf/archivelist
The file '/opt/zimbra/postfix/conf/archivelist' will have users in the following format: keyur@example.com keyur@archive.example.com All mails to and from keyur@example.com will be forwarded to keyur@archive.example.com.
Manual addition
Create a user on the main server, and then the corresponding user on the archive server. Then add the users in the format as show above to the file '/opt/zimbra/postfix/conf/archivelist', and then run the postmap command as the zimbra user:
$ postmap /opt/zimbra/postfix/conf/archivelist
$ postfix reload