ZCS Multi-Server Installation Guide, Network Edition 4.0

Multiple-Server Installation

Starting the Installation Process

Starting the Installation Process on the Mac Server

Installing Zimbra LDAP Master Server

Installing Zimbra Mailbox Server

Installing Zimbra MTA on a Server

Installing the Zimbra-SNMP package

Final Set-Up

Verifying Server Configuration

Post Installation Tasks

Uninstalling Zimbra Collaboration Suite

The installation is straight-forward and easy to run. You run the same install script on each server, select which component(s) to install, and use the menu to configure the system. After the installation is complete, two additional steps to fetch the ssh encryption keys and enable some logger functionality should be run. When the server installation is complete, the servers are started, and the status is displayed.

Important: Install the servers in the following order

1.	LDAP server

2.	Zimbra mailbox servers

3.	Zimbra MTA servers

Important: Do not manually create the user ‘zimbra’ before running the ZCS installation. The installation automatically creates this user and sets up its environment.

Starting the Installation Process

For servers other than Mac servers, step 1 through step 4 are performed for each server to be installed.

For Mac servers, see "Starting the Installation Process on the Mac Server” .

1.	Log in as root to the Zimbra server and cd to the directory where the Zimbra Collaboration Suite archive file is saved (cd /var/<tmp>/var). Type the following commands.

•	tar xzvf [zcs.tgz] to unpack the file

•	cd zcs to change to the correct directory

•	./install.sh to begin the installation

Note: As the installation proceeds, press Enter to accept the defaults that are shown in brackets [ ] or enter the appropriate answer for your configuration.

The screen shots are examples of the Zimbra installation script.

 

[root@mailhost tmp]# tar xzvf zcs.tgz zcs/ zcs/install.sh zcs/packages/ zcs/packages/zimbra-ldap-3.0.M2_316.RHEL4-20051007080249.i386.rpm zcs/packages/zimbra-logger-3.0.M2_316.RHEL4-20051007080249.i386.rpm zcs/packages/zimbra-snmp-3.0.M2_316.RHEL4-20051007080249.i386.rpm zcs/packages/zimbra-mta-3.0.M2_316.RHEL4-20051007080249.i386.rpm zcs/packages/zimbra-core-3.0.M2_316.RHEL4-20051007080249.i386.rpm zcs/packages/zimbra-store-3.0.M2_316.RHEL4-20051007080249.i386.rpm zcs/README.txt zcs/readme_binary.txt zcs/docs/ zcs/docs/quick_start.pdf zcs/docs/RNZCSN.pdf zcs/docs/admin.pdf . . . [root@ tmp]# cd zcs [root@ zcs]# ./install.sh   Operations logged to /tmp/install.log.9496 Checking for existing installation... zimbra-ldap...NOT FOUND zimbra-logger...NOT FOUND zimbra-mta...NOT FOUND zimbra-snmp...NOT FOUND zimbra-store...NOT FOUND zimbra-apache...NOT FOUND zimbra-spell...NOT FOUND zimbra-core...NOT FOUND

2.

The installation process checks to see if Sendmail, Postfix, and MySQL software are running. If any application is running, you are asked to disable it. The default is Yes to disable the applications. Disabling MySQL is optional, but highly recommended. Sendmail and Postfix must be disabled for the Zimbra Collaboration Suite to start correctly.

3.

The installation process checks to see of a Zimbra license is already installed. If no license file is found, a warning displays stating that the ZCS Connector for Outlook, Zimbra Mobile, and Zimbra account creation will not work without a valid license file. When asked if you wish to continue, type Y to continue the installation.

Important: When the installation is complete, you will need to install the Zimbra license. See the Post Installation Tasks section.

4.	The Zimbra software agreement is displayed and includes the link to the license terms for the Zimbra Collaboration Suite. Please read the agreement and to continue, press Enter.

 

PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE. ZIMBRA, INC. ("ZIMBRA") WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOU FIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLING THE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BY THIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.   License Terms for the Zimbra Collaboration Suite: http://www.zimbra.com/license/index.html   Press Return to continue

5.	Next, the installer checks to see that the prerequisite software is installed. If NPTL, sudo, libidn, cURL, fetchmail, GMP or compat-libstdc++- are not installed, the install process quits. You must fix the problem and start the installation over.

Note: Before the Main menu is displayed, the installer checks to see if the hostname is resolvable via DNS and if there is an error asks of you would like to change the hostname. The domain name should have a MX record configured in DNS.

Starting the Installation Process on the Mac Server

The following steps are performed on each Mac server to be installed.

1.	Click on the dmg file to open the file and then click ZCS.mpkg to open the Zimbra install package. The Apple installer opens and verifies that the server is ready to install the Zimbra Collaboration Suite. Click Continue.

2.	Welcome screen appears, click Continue.

3.	The Zimbra Software License Agreement is displayed. Read the agreement and click Continue. A popup screen appears asking that to continue the install you must accept the terms of the license agreement. Click Agree.

4.	Select the destination volume to install the software. Click Continue.

5.	The Easy Install ... dialog displays. Now you select which services to be installed on this server.

To select which services to install, click Customize. Deselect those packages you do not want installed. See "Planning for the Installation” for information about the packages. Click Install to proceed.

A progress bar shows the Zimbra packages being installed. When The software was successfully installed dialog displays, click Close.

6.	Open the Apple Terminal and log on as root. Type sudo /bin/bash. Enter your root password, if asked.

7.	Type cd /opt/zimbra/libexec.

8.	Type ls to see the packages in the directory.

9.

Type ./zmsetup.pl. This starts the ZCS configuration. A temporary log file is created and the server port configurations are checked for conflicts. The installation process checks to see if Sendmail, Postfix, and MySQL software are running. If any of these applications are running, you are asked to disable them. Disabling MySQL is optional but highly recommended. Sendmail and Postfix must be disabled for the Zimbra Collaboration Suite to start correctly.

10.

If no conflicts are found, the Main menu displays the default entries for the Zimbra component you are installing. To expand the menu to see the configuration values type X and press Enter. The main menu expands to display configuration details for the package being installed. Values that require further configuration are marked with asterisks (*).

11.	To continue, follow the installation instructions for each server type, starting with Step 3.

Installing Zimbra LDAP Master Server

You must configure the Zimbra Master LDAP server before you can install the other Zimbra servers.

1.	Follow steps 1 through 4 in Starting the Installation Process section to open a SSH session to the LDAP server, log on to the server as root, and unpack the Zimbra software.

2.	The zimbra-ldap package should be marked y. The MTA, Store and Logger packages should be marked n. If you are using SNMP, SNMP package is marked y.

 

Select the packages to install Install zimbra-ldap [Y] Install zimbra-mta [Y]N Install zimbra-snmp [Y]N Install zimbra-store [Y]N Install zimbra-logger [Y]N Install zimbra-spell [Y]N   Installing: zimbra-core zimbra-ldap   This system will be modified. Continue [N} Y Configuration section

3.	Type y, and press Enter to modify the system. The selected packages are installed on the server.

The Main menu displays showing the default entries for the Zimbra component you are installing. To expand the menu to see the configuration values type x and press Enter. The main menu expands to display configuration details for the package being installed. Values that require further configuration are marked with asterisks (*).

To navigate the Main menu, select the menu item to change. You can modify any of the defaults. See Table 2, "Main Menu Options,” on page 17 for a description of the Main menu.

 

Main menu   1) Hostname: ldap.example.com 2) Ldap master host:                   ldap.example.com 3) Ldap port: 389 4) Ldap password: set 5) zimbra-ldap: Enabled +Create Domain: yes +Domain to create: ldap.example.com    r) Start servers after configuration yes s) Save config to file x) Expand menu q) Quit   Address unconfigured (**) items (? - help)

Items with an asterisks must be configured.

4.	Type 4 to display the automatically generated LDAP password. You can change this password.

Remember the LDAP password, the LDAP host name, and the LDAP port. You must configure this information, when you install the MTA server and the mailbox servers.

5.	Type 5 to change the zimbra-ldap settings.

•	Type 3 to change the default domain name to the email domain name.

 

Ldap configuration   1) Status: Enabled 2) Create Domain: yes 3) Domain to create: ldap.example.com   Select, or 'r' for previous menu [r] 3   Create Domain: [ldap.example.com] example.com

6.	When the LDAP server is configured, type a to apply the configuration changes. Press Enter to save the configuration data.

7.	When Save Configuration data to a file appears, press Enter.

8.	When The system will be modified - continue? appears, type y and press Enter.

The server is modified. Installing all the components and configuring the server can take a few minutes.

9.	When Installation complete - press return to exit displays, press Enter.

The installation of the LDAP server is complete.

 

Select, or press 'a' to apply config (? - help) a Save configuration data? [Yes] Save config in file: [/opt/zimbra/config.2843] Saving config in /opt/zimbra/config.2843...Done The system will be modified - continue? [No] y Operations logged to /tmp/zmsetup.log.2843 Setting local config zimbra_server_hostname to [ldap.example.com] . Operations logged to /tmp/zmsetup.log.2843   Installation complete - press return to exit

Installing Zimbra Mailbox Server

The Zimbra-store can be installed with the LDAP server, the MTA server, or as a separate mailbox server. You can have more than one mailbox server and new servers can be added at any time.

Note: The Zimbra logger is installed on only one Zimbra mailbox server.

1.	Follow steps 1 through 4 in Starting the Installation Process section to log on to the server as root and unpack the Zimbra software.

2.	Type y to install the zimbra-store, zimbra-logger (optional and only on one mailbox server), and zimbra-spell (optional) packages. When zimbra-spell is installed the zimbra-apache package is also installed.

 

Installing: zimbra-core     zimbra-store     zimbra-logger     zimbra-apache     zimbra-spell

3.	Press Enter to modify the system. The selected packages are installed on the server.

At this point the Main menu displays the default entries for the Zimbra component you are installing. To expand the menu to see the configuration values type x and press Enter.

To navigate the Main menu, select the menu item to change. You can modify any of the defaults.

 

Main menu   1) Hostname: mailhost.example.com ** 2) Ldap master host: UNSET 3) Ldap port: 389 ** 4) Ldap password: UNSET 5) zimbra-store: Enabled +Create Admin User: yes +Admin user to create: admin@mailhost.example.com ******* +Admin Password UNSET +Enable automated spam training: yes +Spam training user:                   zqjeh@mailhost.example.com +Non-spam(Ham) training user: loqpu@mailhost.example.com ******* +SMTP host: UNSET +Web server HTTP port: 80 +Web server HTTPS port: 443 +Web server mode: http +Enable POP/IMAP proxy: no +IMAP server port: 143 +IMAP server SSL port: 993 +POP server port: 110 +POP server SSL port: 995 +Use spell check server: yes +Spell server URL: http://mailhost.example.com:7780/aspell.php   6) zimbra-logger: Enabled 7) zimbra-spell: Enabled 8) Enable default backup schedule: yes r) Start servers after configuration yes s) Save config to file x) Expand menu q) Quit   Address unconfigured (**) items or correct ldap configuration (? - help)   Checking ldap on :389...FAILED

4.	The Hostname is displayed. You must set the LDAP host and password configured on the LDAP server.

•	Type 2 and then type the LDAP host name.

•	Type 4 and then type the LDAP password.

The server immediately contacts the LDAP server. If it cannot contact the server, you cannot proceed.

5.	Type 5 to configure the admin password, the SMTP host, and to set the web server mode, if your configuration is not http.

•

Type 4 and set the password for the administrator account. The password is case sensitive and must be a minimum of six characters. The admin account is provisioned on the Zimbra server and allows you to log on to the administration console. The administrator name, mail address, and password are required to log in to the administration console.

•	Type 8 to set the SMTP host.

•	Type 9, if you are changing the default. The communication protocol options are HTTP, HTTPS, or mixed. Mixed mode uses HTTPS for logging in and HTTP for normal session traffic. All modes use SSL encryption for back-end administrative traffic

•	If you are setting up IMAP/POP proxy servers, type 12 to enable. When you enable these, IMAP and POP server port numbers and proxy port numbers are automatically changed. See the "Planning for the Installation" Configuring IMAP and POP Proxy Server.

 

Address unconfigured (**) items or correct ldap configuration (? - help) 5 Store configuration   1) Status: Enabled 2) Create Admin User: yes 3) Admin user to create: admin@mailhost.example.com ** 4) Admin Password UNSET 5) Enable automated spam training: yes 6) Spam training user:                    k7vb@mailhost.example.com 7) Non-spam(Ham) training user:           tofx@mailhost.example.com ** 8) SMTP host: UNSET 9) Web server HTTP port: 80 10) Web server HTTPS port: 443 11) Web server mode: http 12) Enable POP/IMAP proxy: no 13) IMAP server port: 143 14) IMAP server SSL port: 993 15) POP server port: 110 16) POP server SSL port: 995 17) Use spell check server: yes 18) Spell server URL: http://mailhost.example.com:7780/aspell.php   Select, or 'r' for previous menu [r] 2

6.	When the mailbox server is configured, type a to apply the configuration changes. Press Enter to save the configuration data.

7.	When Save Configuration data to a file appears, press Enter.

8.	When The system will be modified - continue? appears, type y and press Enter.

The server is modified. Installing all the components and configuring the server can take a few minutes.

9.	When Installation complete - press return to exit displays, press Enter.

The installation of the mailbox server is complete.

 

Select, or press 'a' to apply config (? - help) a Save configuration data? [Yes] Save config in file: [/opt/zimbra/config.2843] Saving config in /opt/zimbra/config.2843...Done The system will be modified - continue? [No] y Operations logged to /tmp/zmsetup.log.2843 Setting local config zimbra_server_hostname to [mailhost.example.com] . Operations logged to /tmp/zmsetup.log.2843   Installation complete - press return to exit

Installing Zimbra MTA on a Server

When the Zimbra MTA is being installed the root LDAP password and the Zimbra LDAP password must be known to the MTA server. If not, the MTA cannot contact the LDAP server and will not be able to complete the installation.

1.	Follow steps 1 through 4 in Starting the Installation Process section to open a SSH session to the MTA server, log on to the server as root, and unpack the Zimbra software.

2.	Enter y to install the zimbra-mta package. The other packages should be marked n. Note: If you installed the SNMP package on the LDAP server, install it here also.

3.	Press Enter to modify the system. The selected packages are installed on the server.

At this point the Main menu displays the default entries for the Zimbra component you are installing. To expand the menu to see all the configuration values type X and press Enter.

To navigate the Main menu, select the menu item to change. You can modify any of the defaults.

 

Main menu   1) Hostname: mta.example.com ** 2) Ldap host: UNSET 3) Ldap port: 389 ** 4) Ldap password: UNSET    5) zimbra-mta: Enabled ******* +MTA Auth host: UNSET +Enable Spamassassin: yes +Enable Clam AV: yes +Notification address for AV alerts: admin@example.com    r) Start servers after configuration yes s) Save config to file    x) Expand menu q) Quit   Address unconfigured (**) items or correct ldap configuration (? - help) 2   Please enter the ldap server hostname ldap.company.com Checking ldap on ldap.company.com:389...FAILED

4.	The Main menu displays. The Hostname is displayed. You must set the LDAP host and password configured on the LDAP server.

•	Type 2 and then type the LDAP host name.

•	Type 4 and then type the LDAP password.

The server immediately contacts the LDAP server. If it cannot contact the server, you cannot proceed.

5.	Type 5 and then type 2 to set the MTA Auth host. This is the MTA authentication server host name and is set to one of the Zimbra mailbox server’s hostname.

Note: If configuring the MTA server for a cluster environment, the MTA Auth host is the cluster services hostname, not the physical hostname.

You can change 5, AV alerts notification address. The administrator’s address is configured by default.

Note: If you enter a new address, you will need to configure this address on the administration console.

 

Select, or press 'a' to apply config (? - help) 5   Mta configuration     1) Status: Enabled **2) MTA Auth host:                           mailhost.example.com   3) Enable Spamassassin: yes   4) Enable Clam AV: yes   5) Notification address for AV alerts: admin@mta.example.com

6.	When the MTA server is configured, type a to apply the configuration changes. Press Enter to save the configuration data.

7.	When Save Configuration data to a file appears, press Enter.

8.	When The system will be modified - continue? appears, type y and press Enter.

The server is modified. Installing all the components and configuring the server can take a few minutes.

9.	When Installation complete - press return to exit displays, press Enter.

The installation of the MTA server is complete.

Installing the Zimbra-SNMP package

Installing the Zimbra-SNMP package is optional, but if you use SNMP monitoring, this package should be installed on each Zimbra server.

In the Main menu select the zimbra-snmp to make changes to the default values.

The following questions are asked for SNMP configuration.

•	Configure whether to be notified by SNMP or SMTP. The default is No. If you enter yes, you must enter additional information.

•	For SNMP type the SNMP Trap host name.

•	For SMTP type the SMTP source email address and destination email address.

 

8) zimbra-snmp: Enabled +Enable SNMP notifications: yes +SNMP Trap hostname:                  mailhost.example.com +Enable SMTP notifications: yes +SMTP Source email address:           admin@example.com +SMTP Destination email address:      admin@example.com

Final Set-Up

After the Zimbra LDAP, mailbox, and MTA servers are configured in a multi-node configuration, the following two functions must be configured:

•	In order for remote management and postfix queue management, the ssh keys must be manually populated on each server.

•

If logger is installed, set up the syslog configuration files on each server to enable server statistics to display on the administration console, and then enable the logger monitor host. The server statistics includes information about the message count, message volume, and anti-spam and anti-virus activity.

Set up the ssh keys.

To populate the ssh keys, on each server, as Zimbra user (su-zimbra). Type zmupdateauthkeys and press Enter. The key is updated on
/opt/zimbra/.ssh/authorized_keys.

Enabling Server Statistics Display.

In order for the server statistics to display on the administration console, the syslog configuration files must be modified.

Note: If you set up Zimbra in a cluster environment, the syslog configuration files for logger are automatically modified during the cluster configuration. In a cluster installation, you need only to perform step 1 on the LDAP and MTA servers to enable the syslog.

1.	On each server, as root, type /opt/zimbra/bin/zmsyslogsetup. This enables the server to display statistics.

2.	On the logger monitor host, you must enable syslog to log statistics from remote machines.

a.	Edit the /etc/sysconfig/syslog file, add -r to the SYSLOGD_OPTIONS setting, SYSLOGD_options=”-r -m 0”

b.	Stop the syslog daemon. Type /etc/init.d/syslogd stop.

c.	Start the syslog daemon. Type /etc/init.d/syslogd start.

Verifying Server Configuration

When Configuration complete - press return to exit is displayed, the installation is finished and the server has been started. Before going to the next server, you should verify that the server is running.

Use the CLI command, zmcontrol status, to verify that each server is running.

1.	For each server in the Zimbra Collaboration Suite environment, log on as a Zimbra administrator, from the root.

2.	Type su - zimbra.

3.	Type zmcontrol status. The services status information is displayed. All services should be running.

Note: If services are not started, you can type zmcontrol start. See the CLI command appendix in the Administration Guide for more zmcontrol commands.

Post Installation Tasks

Once the Zimbra Collaboration Suite is installed, you should go to the administration console and install your Zimbra license. You can configure additional domains and create Classes of Service without the license but you cannot provision accounts. See "Zimbra License” on page 13 for more information about the Zimbra license.

Logging on to the Administration Console

To log on to the administration console, open your browser, type the administration console URL and log on to the console. The administration console URL is entered as
https://[example.com]:7071/zimbraAdmin.

Note: The administration console address must be typed with "https”, even if you configured only "http”.

The first time you log on, a certificate authority (CA) alert may be displayed. Click Accept this certificate permanently to accept the certificate and be able connect to the Zimbra administration console. Then click OK.

Enter the admin user name and password configured during the installation process. Enter the user name as admin@[example.com]

Defining Classes of Service

A default Class of Service (COS) is automatically created during the installation of Zimbra software. The COS controls mailbox quotas, message lifetime, password restrictions, attachment blocking and server pools. You can modify the default COS and create new COSs to assign to accounts according to your group management policies.

In an environment with multiple mailbox servers, COS is used to assign the new accounts to a mailbox server. The COS server pool tab lists the mailbox servers in your Zimbra environment. When you configure the COS, select which servers to add to the server pool. Within each pool of servers, a random algorithm assigns new mailboxes to any available server.

To create or modify a COS, from the administration console, click COS. If you have questions, refer to the Help.

Provisioning Accounts

From the administration console, you can quickly create accounts using the New Account Wizard that steps you through the account information to be completed.

To provision accounts:

1.	From the admin console navigation pane, click Accounts.

2.	Click New, page 1 of the New Account Wizard opens.

3.	Enter the account name to be used as the email address. The only required information is the account name and last name.

4.	You can click Finish at this point, and the account will be configured with the default COS and global features.

If you want to configure aliases, forwarding addresses, and specific features for this account, proceed through the dialog.

Accounts are now ready to send and receive mail.

Refer to the administration guide to learn more about provisioning accounts, including how to provision multiple accounts at once.

Uninstalling Zimbra Collaboration Suite

To uninstall servers, other than Mac servers, you run the install script -u and then delete the zcs directory and remove the ZCS tgz file on the servers.

1.	cd to the original install directory for the zcs files.

2.	Type ./install.sh -u.

3.	When Completely remove existing installation? is displayed, type Yes.

The Zimbra servers are stopped, the existing packages, the webapp directories, and the /opt/zimbra directory are removed.

4.	Delete the zcs directory, type rm -rf zcs.

5.	Delete the zcs.tgz file.

6.	Additional files may need to be delete. See the Zimbra Wiki Installation section on http://wiki.zimbra.com/index.php?title=Main_Page.

To uninstall ZCS from a Mac server

1.	Type su - zimbra to go to the Zimbra directory.

2.	To stop the Zimbra services, type zmcontrol stop. To verify that the services are stopped, type zmcontrol status. The display should show all services stopped.

3.	Type Exit, to return to the root.

4.	Run the following commands to remove the Zimbra directories and log files

rm -rf /opt/zimbra

rm -rf /Library/Receipts/zimbra-*

rm -f /var/log/zimbra*

rm -f /tmp/install.*

5.	If you want to remove the zimbra user, use the System Preferences, User pane.

 

ZCS Multi-Server Installation Guide, Network Edition 4.0