Jump to content

ITD - Zimbra Multi Server Deployment

From TetraWiki
Revision as of 21:36, 9 April 2021 by Harsh (talk | contribs)

Procedure :

DC Server Details 

1. 10.176.24.116 - dcplzmpxy01 - Primary MTA+Proxy  
2. 10.176.24.117 - dcplzmpxy02 - Secondary MTA+Proxy 
3. 10.176.24.118 - dcplzlmmr01 - Master LDAP
4. 10.176.24.119 - dcplzlmmr02 - Slave LDAP
5. 10.176.24.120 - dcplzmbox01a - Primary Mailbox
6. 10.176.24.121 - dcplzmbox01b - Secondary Mailbox   
7. 10.176.24.137 - dcplzmbox01 - Mailbox Cluster IP
8. 10.176.24.138 - dcplzmdoctr - Docs server

DR Server Details 

1. 10.144.24.179 - drplzimtpx01 - Primary MTA+Proxy  
2. 10.144.24.180 - drplzimtpx02 - Secondary MTA+Proxy 
3. 10.144.24.181 - drplzilpmr01 - Master LDAP
4. 10.144.24.182 - drplzilpmr02 - Slave LDAP
5. 10.144.24.177 - dcplzmbox01a - Primary Mailbox
6. 10.144.24.178 - dcplzmbox01b - Secondary Mailbox   
7. 10.144.24.137 - dcplzmbox01 - Mailbox Cluster IP
8. 10.144.24.138 - drplzmdoctr - Docs server


1. Install/Configure Zimbra NE 8.8.15 GA Patch 15 Multi Components Architecture - LDAP, Mailbox and MTA + Proxy all on different nodes

NOTE: Installations/Configurations are same for both DC and DR.

Ref : https://zimbra.github.io/installguides/latest/multi.html


- Install Master LDAP 

1. ./install.sh 
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. Install zimbra-ldap [Y] Y
5. Remaining Packages will be marked "No" for installation.
6. Type 1 to display the Common Configuration submenu.
-> Type 2 and add Master LDAP as 'dcplzmmr01.incometax.co.in'
-> Type 4 to display the automatically generated LDAP admin password : 'root123'
-> Type 7 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
-> From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
-> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
-> The passwords listed in the LDAP configuration menu are automatically generated. Check the passwords for LDAP root, LDAP replication, LDAP Postfix, LDAP Amavis, and LDAP Nginx,                            they must be same as DC LDAP Master LDAP, if not enter the corresponding number 4 through 8 and change the passwords to 'root123'.
-> Type 'a' to apply configurations.

- Install Slave LDAP 

1. ./install.sh 
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. Install zimbra-ldap [Y] Y
5. Remaining Packages will be marked "No" for installation.
6. Type 1 to display the Common Configuration submenu.
-> Type 2 to change/add LDAP Master HostName : 'dcplzlmmr01.incometax.gov.in'
-> Type 4 to display the automatically generated LDAP admin password : 'root123'
-> Type 7 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
7. From the Main menu, type 2 for zimbra-ldap to view the Ldap configuration settings.
-> Type 3 for Domain to create to change the default domain name to the main domain name you want to use for your network : 'incometax.gov.in'
8. Type 'a' to apply configurations.

* NOTE : Enable LDAP Replication on Master LDAP 
      :-> /opt/zimbra/libexec/zimbraldapenablereplica


- Install MailBox 

1 ./install.sh 
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. zimbra-logger, zimbra-snmp, zimbra-store, zimbra-apache, zimbra-spell, zimbra-convertd, zimbra-archiving, zimbra-chat, zimbra-drive, zimbra-network-modules-ng will be marked 'Yes' for  installation.
5. Remaining packages will not be installed.
6. Type Y, and press Enter to modify the system. 
7. Type 1 to display the Common Configuration submenu.
-> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
-> Type 4, press Enter, and type the LDAP password : 'root123'
-> Type 8 to set the correct time zone : 'Asia/Kolkata'
8. Type r to return to the Main menu.
9. From the Main menu, type 4 for zimbra-store to view the Store configuration settings.
-> Type 4 and set the password for the administrator account : 'root123'
-> Type the corresponding number to set the SMTP host. This is the mta-server host name : 'dcplzmpxy01.incometax.gov.in'
-> Type r to return to the Main menu.
10. When the mailbox server is configured, return to the Main menu and type 'a' to apply the configuration changes.


- Install MTA + Proxy 

1. ./install.sh --platform-override --skip-activation-check --license /opt/ZCSLicense.xml
2. Do you agree with the terms of the software license agreement? [N] : Yes
3. Use Zimbra’s package repository [Y] : Enter
4. zimbra-mta, zimbra-dnscache, zimbra-proxy, zimbra-memcached will be marked 'Yes' for installation.
5. Remaining packages will not be installed.
6. Type Y, and press Enter to modify the system. The selected packages are installed on the server.
7. Type 1 to display the Common Configuration submenu.
-> Type 2, press Enter, and type the LDAP host name : 'dcplzlmmr01.incometax.gov.in'
-> Type 4, press Enter, and type the LDAP password : 'root123'
-> Type 8 to set the correct time zone : 'Asia/Kolkata'
-> Type r to return to the Main menu.
8. Type 2 to got to the MTA configuration menu.
-> Select the menu number for Bind password for postfix ldap user : 'root123'
-> Select the menu number for Bind password for amavis ldap user : 'root123'
9. Type r to return to the Main menu.
10. Type 'a' to apply the configuration changes.


2. Install Zimbra Connect on MailBox Server 

- yum install zimbra-connect
- Zimbra Connect features can be enabled and disabled via the zxsuite config command line utility:
    
    Enable Zimbra Connect «Advanced» features
    Property: teamChatEnabled
    Available in: COS, account
    Enable or disable the chat history
    Property: historyEnabled   
    Available in: global, server, COS, account
    Enable or disable Video Chat
    Property: videoChatEnabled
    Available in: global, server, COS, account


3. Install Zimbra Docs Server 

All mailbox servers will need to be able to directly communicate with the Docs Server over port 8443 (HTTPS Backend), which must be open on both ends.
The Docs Server communicates with the Extension through port 9980, so incoming traffic from all mailbox and proxy servers to that port must be allowed. The Docs Server component must 
also be able to directly communicate with the master LDAP server as well as with all Mailbox servers.

- Now, get this LDAP information,
zmlocalconfig -s ldap_master_url zimbra_ldap_user zimbra_ldap_userdn zimbra_ldap_password

Proxy Nodes

/opt/zimbra/libexec/zmproxyconfgen as the zimbra user and then restart the proxy service running zmproxyctl restart as the same user.
 
Mailbox Nodes

The com_zextras_docs Zimlet is available in the Zimbra repository, so it can be easily downloaded and deployed by running apt-get install zimbra-docs.


4.

Retrieved from "https://wiki.tetrain.com/index.php?title=ITD_-_Zimbra_Multi_Server_Deployment&oldid=3174"