Centos-7 setup

-----

    /etc/rc.d/init.d/zimbra restart

  systemctl status zimbra.service

  systemctl restart zimbra.service

  systemctl stop zimbra.service

  systemctl start zimbra.service

 

 su - zimbra -c "zmcontrol restart"

 su - zimbra -c "zmapachectl restart"

  su - zimbra

  zmmailboxdctl start

  zmcontrol status

First you need to do some initial setup in the server

1. Configure /etc/hosts and hostname

2. Allow iptables to by-pass all zimbra ports.

3.  Disabled SELINUX

[root@centos7 ~]# vim /etc/sysconfig/selinux

Change enforcing to disabled :

# This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: #     enforcing - SELinux security policy is enforced. #     permissive - SELinux prints warnings instead of enforcing. #     disabled - No SELinux policy is loaded. SELINUX=disabled # SELINUXTYPE= can take one of these two values: #     targeted - Targeted processes are protected, #     minimum - Modification of targeted policy. Only selected processes are protected. #     mls - Multi Level Security protection. SELINUXTYPE=targeted

4. Stop any MTA services installed in the server

[root@centos7 ~]# systemctl stop postfix [root@centos7 ~]# systemctl disable postfix [root@centos7 ~]# systemctl stop sendmail [root@centos7 ~]# systemctl disable sendmail

systemctl disable firewalld

systemctl stop firewalld

systemctl stop httpd

systemctl disable httpd

systemctl stop mysqld

systemctl disable mysqld

systemctl stop postfix

systemctl disable postfix

systemctl stop sendmail

systemctl disable sendmail

systemctl stop NetworkManager

systemctl disable NetworkManager

# getenforce

# setenforce 0

# getenforce

5.Update the OS

[root@centos7 ~]# yum update -y

6.Install the required packages and libraries by issuing the following command :

[root@centos7 ~]#   yum install perl perl-core ntpl nmap sudo libidn gmp libaio libstdc++ unzip sysstat sqlite nmap-ncat openssh-clients net-tools sed nc rsync telnet aspell  net-tools wget unzip  -y

Now, the server is ready for install Zimbra 8.6.0.

Download Zimbra Open Source Edition 8.6.0

Issue the following command to download ZCS 8.6.0

wget https://files.zimbra.com/downloads/8.6.0_GA/zcs-8.6.0_GA_1153.RHEL7_64.20141215151110.tgz

Extract the downloaded tar file :

Using the following command you can extract the tar file, We downloaded in previous step

tar xzf zcs-8.6.0_GA_1153.RHEL7_64.20141215151110.tgz

Go to extracted ZCS Open Source Edition :

cd zcs-8.6.0_GA_1153.RHEL7_64.20141215151110

Start the installation with the following command :

Now, we are going to install the ZCS package using the script

./install.sh --platform-override

You can see the following screen when starting the script.

./install.sh --platform-override  Operations logged to /tmp/install.log.14668 Checking for existing installation...     zimbra-ldap...NOT FOUND     zimbra-logger...NOT FOUND     zimbra-mta...NOT FOUND     zimbra-dnscache...NOT FOUND     zimbra-snmp...NOT FOUND     zimbra-store...NOT FOUND     zimbra-apache...NOT FOUND     zimbra-spell...NOT FOUND     zimbra-convertd...NOT FOUND     zimbra-memcached...NOT FOUND     zimbra-proxy...NOT FOUND     zimbra-archiving...NOT FOUND     zimbra-core...NOT FOUND   PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE. ZIMBRA, INC. ("ZIMBRA") WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.  License Terms for the Zimbra Collaboration Suite:  http://www.zimbra.com/license/zimbra-public-eula-2-5.html  Do you agree with the terms of the software license agreement? [N] y  Use Zimbra's package repository [Y] Y  Importing Zimbra GPG key  Configuring package repository  Checking for installable packages  Found zimbra-core (local) Found zimbra-ldap (local) Found zimbra-logger (local) Found zimbra-mta (local) Found zimbra-dnscache (local) Found zimbra-snmp (local) Found zimbra-store (local) Found zimbra-apache (local) Found zimbra-spell (local) Found zimbra-memcached (repo) Found zimbra-proxy (local) Found zimbra-drive (repo) Found zimbra-imapd (local) Found zimbra-patch (repo) Found zimbra-mta-patch (repo) Found zimbra-proxy-patch (repo)   Select the packages to install  Install zimbra-ldap [Y] Y  Install zimbra-logger [Y] Y  Install zimbra-mta [Y] YInstall zimbra-dnscache [Y] N Install zimbra-snmp [Y] Y  Install zimbra-store [Y] Y  Install zimbra-apache [Y] Y  Install zimbra-spell [Y] Y  Install zimbra-memcached [Y] Y  Install zimbra-proxy [Y] Y  Install zimbra-drive [Y] YInstall zimbra-imapd (BETA - for evaluation only) [N] N  Install zimbra-chat [Y] Y Checking required space for zimbra-core Checking space for zimbra-store Checking required packages for zimbra-store zimbra-store package check complete.  Installing:     zimbra-core     zimbra-ldap     zimbra-logger     zimbra-mta     zimbra-snmp     zimbra-store     zimbra-apache     zimbra-spell     zimbra-memcached     zimbra-proxy     zimbra-drive     zimbra-patch     zimbra-mta-patch     zimbra-proxy-patch     zimbra-chat  The system will be modified.  Continue? [N] Y  Removing /opt/zimbra Removing zimbra crontab entry...done. Cleaning up zimbra init scripts...done. Cleaning up /etc/ld.so.conf...done. Cleaning up /etc/security/limits.conf...done.  Finished removing Zimbra Collaboration Server.  Installing packages      zimbra-core......zimbra-core-8.6.0_GA_1153.RHEL7_64-20141215151110.x86_64.rpm...done     zimbra-ldap......zimbra-ldap-8.6.0_GA_1153.RHEL7_64-20141215151110.x86_64.rpm...done     zimbra-logger......zimbra-logger-8.6.0_GA_1153.RHEL7_64-20141215151110.x86_64.rpm...done     zimbra-mta......zimbra-mta-8.6.0_GA_1153.RHEL7_64-20141215151110.x86_64.rpm...done     zimbra-snmp......zimbra-snmp-8.6.0_GA_1153.RHEL7_64-20141215151110.x86_64.rpm...done     zimbra-store......zimbra-store-8.6.0_GA_1153.RHEL7_64-20141215151110.x86_64.rpm...done     zimbra-apache......zimbra-apache-8.6.0_GA_1153.RHEL7_64-20141215151110.x86_64.rpm...done     zimbra-spell......zimbra-spell-8.6.0_GA_1153.RHEL7_64-20141215151110.x86_64.rpm...done     zimbra-memcached......zimbra-memcached-8.6.0_GA_1153.RHEL7_64-20141215151110.x86_64.rpm...done     zimbra-proxy......zimbra-proxy-8.6.0_GA_1153.RHEL7_64-20141215151110.x86_64.rpm...done Operations logged to /tmp/zmsetup01032015-084819.log Installing LDAP configuration database...done. Setting defaults...No results returned for A lookup of centos7.unixmen.local Checked nameservers:         192.168.0.70 No results returned for AAAA lookup of centos7.unixmen.local Checked nameservers:         192.168.0.70   DNS ERROR resolving centos7.unixmen.local It is suggested that the hostname be resolvable via DNS Change hostname [Yes] Please enter the logical hostname for this host [centos7.worldcm.net] mail.worldcm.net

No results returned for A lookup of mail.worldcm.net

Checked nameservers:         192.168.0.70   DNS ERROR resolving mail.example.com It is suggested that the hostname be resolvable via DNS Re-Enter hostname [Yes] NO Please enter the logical hostname for this host [centos7.unixmen.local] mail.worldcm.net

  DNS ERROR resolving MX for mail.example.local It is suggested that the domain name have an MX record configured in DNS Change domain name? [Yes] Create domain: [mail.example.local] worldcm.net

        MX: mail.worldcm.net (192.168.0.70)

        Interface: 127.0.0.1         Interface: ::1         Interface: 192.168.0.70 done. Checking for port conflicts  Main menu     1) Common Configuration:    2) zimbra-ldap:                             Enabled    3) zimbra-logger:                           Enabled    4) zimbra-mta:                              Enabled    5) zimbra-snmp:                             Enabled    6) zimbra-store:                            Enabled         +Create Admin User:                    yes         +Admin user to create:                 admin@worldcm.net ******* +Admin Password                        UNSET         +Anti-virus quarantine user:           virus-quarantine.fsbv7fj6r0@worldcm.net         +Enable automated spam training:       yes         +Spam training user:                   spam.7xlmrmrh3@worldcm.net         +Non-spam(Ham) training user:          ham.rt_1on1o@worldcm.net         +SMTP host:                            mail.worldcm.net         +Web server HTTP port:                 8080         +Web server HTTPS port:                8443         +Web server mode:                      https         +IMAP server port:                     7143         +IMAP server SSL port:                 7993         +POP server port:                      7110         +POP server SSL port:                  7995         +Use spell check server:               yes         +Spell server URL:                     http://mail.worldcm.net:7780/aspell.php         +Enable version update checks:         TRUE         +Enable version update notifications:  TRUE         +Version update notification email:    admin@mail.worldcm.net         +Version update source email:          admin@mail.worldcm.net         +Install mailstore (service webapp):   yes         +Install UI (zimbra,zimbraAdmin webapps): yes     7) zimbra-spell:                            Enabled    8) zimbra-proxy:                            Enabled    9) Enable VMware HA:                        no   10) Default Class of Service Configuration:    s) Save config to file    x) Expand menu    q) Quit  Address unconfigured (**) items  (? - help) 6   Store configuration     1) Status:                                  Enabled    2) Create Admin User:                       yes    3) Admin user to create:                    admin@example.local ** 4) Admin Password                           UNSET    5) Anti-virus quarantine user:              virus-quarantine.fsbv7fj6r0@worldcm.net    6) Enable automated spam training:          yes    7) Spam training user:                      spam.7xlmrmrh3@worldcm.net    8) Non-spam(Ham) training user:             ham.rt_1on1o@worldcm.net    9) SMTP host:                               mail.example.local   10) Web server HTTP port:                    8080   11) Web server HTTPS port:                   8443   12) Web server mode:                         https   13) IMAP server port:                        7143   14) IMAP server SSL port:                    7993   15) POP server port:                         7110   16) POP server SSL port:                     7995   17) Use spell check server:                  yes   18) Spell server URL:                        http://mail.worldcm.net:7780/aspell.php   19) Enable version update checks:            TRUE   20) Enable version update notifications:     TRUE   21) Version update notification email:       admin@mail.worldcm.net   22) Version update source email:             admin@mail.worldcm.net   23) Install mailstore (service webapp):      yes   24) Install UI (zimbra,zimbraAdmin webapps): yes  Select, or 'r' for previous menu [r] 4  Password for admin@example.local (min 6 characters): [SBmeBXtA] password Select, or 'r' for previous menu [r] r  Main menu     1) Common Configuration:    2) zimbra-ldap:                             Enabled    3) zimbra-logger:                           Enabled    4) zimbra-mta:                              Enabled    5) zimbra-snmp:                             Enabled    6) zimbra-store:                            Enabled    7) zimbra-spell:                            Enabled    8) zimbra-proxy:                            Enabled    9) Enable VMware HA:                        no   10) Default Class of Service Configuration:    s) Save config to file    x) Expand menu    q) Quit  *** CONFIGURATION COMPLETE - press 'a' to apply Select from menu, or press 'a' to apply config (? - help) a Save configuration data to a file? [Yes] Enter Save config in file: [/opt/zimbra/config.23920] Saving config in /opt/zimbra/config.23920...done. The system will be modified - continue? [No] yes Operations logged to /tmp/zmsetup01032015-084819.log Setting local config values...done. Initializing core config...Setting up CA...done. Deploying CA to /opt/zimbra/conf/ca ...done. Creating SSL zimbra-store certificate...done. Creating new zimbra-ldap SSL certificate...done. Creating new zimbra-mta SSL certificate...done. Creating new zimbra-proxy SSL certificate...done. Installing mailboxd SSL certificates...done. Installing MTA SSL certificates...done. Installing LDAP SSL certificate...done. Installing Proxy SSL certificate...done. Initializing ldap...done. Setting replication password...done. Setting Postfix password...done. Setting amavis password...done. Setting nginx password...done. Setting BES searcher  password...done. Creating server entry for mail.example.local...done. Setting Zimbra IP Mode...done. Saving CA in ldap ...done. Saving SSL Certificate in ldap ...done. Setting spell check URL...done. Setting service ports on mail.example.local...done. Setting zimbraFeatureTasksEnabled=TRUE...done. Setting zimbraFeatureBriefcasesEnabled=TRUE...done. Setting TimeZone Preference...done. Initializing mta config...done. Setting services on mail.example.local...done. Adding mail.example.local to zimbraMailHostPool in default COS...done. Creating domain example.local...done. Setting default domain name...done. Creating domain example.local...already exists. Creating admin account admin@example.local...done. Creating root alias...done. Creating postmaster alias...done. Creating user spam.7xlmrmrh3@example.local...done. Creating user ham.rt_1on1o@example.local...done. Creating user virus-quarantine.fsbv7fj6r0@example.local...done. Setting spam training and Anti-virus quarantine accounts...done. Initializing store sql database...done. Setting zimbraSmtpHostname for mail.example.local...done. Configuring SNMP...done. Setting up syslog.conf...done. Starting servers...done. Installing common zimlets...         com_zimbra_proxy_config...done.         com_zimbra_mailarchive...done.         com_zimbra_attachmail...done.         com_zimbra_url...done.         com_zimbra_phone...done.         com_zimbra_date...done.         com_zimbra_ymemoticons...done.         com_zimbra_clientuploader...done.         com_zimbra_srchhighlighter...done.         com_zimbra_tooltip...done.         com_zimbra_webex...done.         com_zimbra_bulkprovision...done.         com_zimbra_email...done.         com_zimbra_adminversioncheck...done.         com_zimbra_cert_manager...done.         com_zimbra_viewmail...done.         com_zimbra_attachcontacts...done. Finished installing common zimlets. Restarting mailboxd...done. Creating galsync account for default domain...done.  You have the option of notifying Zimbra of your installation. This helps us to track the uptake of the Zimbra Collaboration Server. The only information that will be transmitted is:         The VERSION of zcs installed (8.6.0_GA_1153_RHEL7_64)         The ADMIN EMAIL ADDRESS created (admin@example.local)  Notify Zimbra of your installation? [Yes] no Notification skipped Setting up zimbra crontab...done.   Moving /tmp/zmsetup01032015-084819.log to /opt/zimbra/log   Configuration complete - press return to exit

Zimbra Collaboration Suite - Post Installation Configurations:

Zimbra Collaboration Suite creates an operating system user zimbra with disabled password. Zimbra Collaborative Suite connects with this user using ssh keys. Therefore, we need to configure ssh keys as follows.

Allow Zimbra Admin Panel's service ports in Linux firewall.

Enabling automatic scanning of email attachments using ClamAV antivirus.

In order to display server statistics on Administration console, the syslog configuration files must be modified as follows.

Connect as root user and execute following command.

[root@zimbra-01 ~]# sudo -u zimbra -i [zimbra@zimbra-01 ~]$ zmupdateauthkeys Updating keys for zimbra-01.example.com Fetching key for zimbra-01.example.com Updating keys for zimbra-01.example.com Updating /opt/zimbra/.ssh/authorized_keys

[root@zimbra-01 ~]# /opt/zimbra/libexec/zmsyslogsetup updateSyslog: Updating /etc/rsyslog.conf...done.

[root@zimbra-01 ~]# su - zimbra [zimbra@zimbra-01 ~]$ zmprov mcf zimbraAttachmentsScanURL clam://localhost:3310/ [zimbra@zimbra-01 ~]$ zmprov mcf zimbraAttachmentsScanEnabled TRUE

[root@zimbra-01 ~]# firewall-cmd --permanent --add-port=7071/tcp success [root@zimbra-01 ~]# firewall-cmd --reload success

Open URL https://zimbra-01.example.com:7071/ in a client's browser.

Start zimbra services :

su - zimbra zmcontrol start

Access admin panel via browser :

https://<your_zimbra_domain.com>:7071

or directly by IP:

https://192.168.0.70:7071

To log in, the user is admin and the password used in the installation script.

All done, Congratulations !!!

Moving /tmp/zmsetup01262016-002704.log to /opt/zimbra/log

/etc/rc.d/init.d/zimbra start

systemctl status zimbra.service

systemctl restart zimbra.service

systemctl stop zimbra.service

systemctl start zimbra.service

 su - zimbra -c "zmcontrol restart"

 su - zimbra -c "zmapachectl restart"

Please address the error and re-run /opt/zimbra/libexec/zmsetup.pl to

complete the configuration.

Errors have been logged to /tmp/zmsetup09182014-160302.log

Configuration complete - press return to exit # Press Enter

Now do the following steps to run the server properly

[root@mail ~]# vi /etc/sudoers

# Defaults    requiretty                             [ Add # ]

1) Restart Crond service and Enable it to start automatically

#  systemctl enable crond

#  systemctl restart crond

2) Go to rsyslog.conf file and uncomment the below two lines under UDP syslog reception

#  vim /etc/rsyslog.conf

Uncomment these two lines

 15    #$ModLoad imudp

 16    #$UDPServerRun 514

$ModLoad imudp

$UDPServerRun 514

3) Restart the rsyslogd service and enable it permanently

#   systemctl enable rsyslog

#   systemctl restart rsyslog

4) Now run following command to Update /etc/rsyslog.conf

#    /opt/zimbra/libexec/zmsyslogsetup

5) Now go to zimbra user account and execute following two commands and then restart Zimbra services

#  su - zimbra

 Zmupdateauthkeys

Updating keys for mail.worldcm.net

Fetching key for mail.worldcm.net

Updating keys for mail.worldcm.net

Updating /opt/zimbra/.ssh/authorized_keys

  zmcontrol restart

  zmcontrol status

root@mail ~]# firewall-cmd --permanent --add-port={25,80,110,143,443,465,587,993,995,5222,5223,9071,7071}/tcp success [root@mail ~]# firewall-cmd --reload success [root@mail ~]#

--------