Spirit of Change » Zimbra

User Account Integration between Samba PDC & Zimbra Mail Server on openSUSE/SLES Part 2 (Finish)

Masim "Vavai" Sugianto — Wed, 31 Mar 2010 10:08:47 +0000

This is part 2 of 2 article. Previous article : User Account Integration between Samba PDC & Zimbra Mail Server on openSUSE/SLES Part 1

MANAGING SAMBA DOMAIN WITH ZIMBRA ADMIN

Restart samba service with the following command :

service smb restart

Login to Zimbra Admin and see that these are 2 new entry on left panel menu : Posix Groups and Samba Domain. If you click on Samba Domain, there should be existing entry, your Samba domain (in my sample : vavai.co.id). Please restart your computer if you found nothing on the Samba Domain menu.
`

MANAGING LINUX AND SAMBA GROUPS USING ZIMBRA ADMIN

Login to Zimbra Admin
Choose Posix Groups
Click New. Fill in you new group, ie : Accounting. Move to Samba Group tab and choose your domain from combo box. Fill in 2 (default entry for group) on group type text box.
Click Save

Test the configuration whether Samba successfully read new added groups or no by using this command on konsole/terminal :

su
getent group

Samba should be response by display list of groups and your new group should be listed on the list.

Create new user account by using following procedure :

Open Zimbra Admin
Click Account
Click New
Fill in account profile and description. Account name, First Name, Last Name and Password are mandatory, mark with *. Scroll down to bottom of account wizard to change password.
Click Next until finish. These are should be 2 add-on tabs/wizard at the end of Account configuration: Posix Groups and Samba Domain. Add your new account as your new group member and Samba domain member
Click finish

Test the configuration whether Samba successfully read new added user account or no by using following command on konsole/terminal :

su
getent passwd

Samba should be response by display list of user account and your new user should be listed on the user list.

UPDATE PROFILE FOR EXISTING ACCOUNT

Run the following command to update profile of existing Zimbra user (user created before Samba-Zimbra joined). Replace Samba SID with your own (Look at Zimbra Admin | Samba Domain) :

zmprov ma admin@vavai.co.id +objectClass posixAccount uidNumber 10003 gidNumber 10001 homeDirectory /home/admin loginShell /bin/bash
zmprov ma admin@vavai.co.id +objectClass sambaSamAccount sambaDomainName vavai.co.id sambaSID S-1-5-21-3745602466-621825477-2613676135-21006 sambaAcctFlags [UX]

MAKING WINDOWS NT DOMAIN GROUP

We will use this group as Administrative user for join client as domain member :

Login to Zimbra Admin
Choose Posix Groups, click New
Fill ini group name : Domain Admins. Move to Samba tab, pick your domain name from combo box and then choose Special Windows group – Domain Admins
Click Save
Run the following command to give this group domain administrative permission :

net rpc rights grant "vavai.co.id\Domain Admins" SeAddUsersPrivilege SeMachineAccountPrivilege SePrintOperatorPrivilege

Create a new user with Zimbra domain and add it as “Domain Admins” group member

ADDING WINDOWS NT/2000/XP MACHINE TO SAMBA DOMAIN

Login to your Windows workstation with your Administrator user/permission
Right click on My Computer
Choose Properties
Move to Computer Name tab
Click Change
Fill in your computer name
Fill in vavai.co.id as member of domain (not workgroup. Replace vavai.co.id with your domain name)
Click OK
Windows will be asked about Administrator user name and password. Use Zimbra user and password who is joined as Domain Admin group member

Finish. You should be able to restart your computer and then login with Zimbra user name and password. You may also use LDAP client as user authentication on Linux client. Modify share permission, share folder, profile, etc to fit with your environment setting.

Related Entries

User Account Integration between Samba PDC & Zimbra Mail Server on openSUSE/SLES

Masim "Vavai" Sugianto — Wed, 31 Mar 2010 02:33:08 +0000

Note : This is part one of 2 article. I decided to split the tutorial to make it easier to read (and to write )

This tutorial describes how you can configure Zimbra Mail Server & Collaboration Suite and Samba to act as a primary domain controller (PDC) that uses Zimbra LDAP (Lightweight Directory Access Protocol) as a central password database for authenticating users on Linux and Windows desktops. The integration process will make it easier for administrators to manage Zimbra Mail Server and Samba PDC / Active Directory account because it use same LDAP database. If applied in corporate environments or institutions who have been using Windows Server, this guide can be used to set up Linux servers to replace the Windows Active Directory Server and Microsoft Exchange Server.

The setup described in this document is not the only possible way to make Samba and Zimbra use the same user database for authentication. You may also use Zimbra External Authentication with Samba PDC. External authentication are a little bit easy to be setting up, but we must manage the mailbox profile in Zimbra and it doesn’t seamlessly integrate Zimbra into Samba PDC+OpenLDAP. It is highly recommended to get familiar with Zimbra, Samba, LDAP and PAM, before you start the installation.

This tutorial are based on Zimbra wiki article : UNIX and Windows Accounts in Zimbra LDAP and Zimbra Admin UI 6.0 but has been tune up to works successfully on openSUSE/SLES environment. The original wiki using Ubuntu/RedHat environment which doesn’t automatically fit with openSUSE/SLES configuration.

I’m using Zimbra Mail Server 6.0.5 64 bit with the following configuration :

Domain & Hostname

Domain   : vavai.co.id
Hostname : zcspdc.vavai.co.id

IP Address

IP Address    : 192.168.10.1
Name Server 1 : 192.168.10.1
Name Server 2 : 8.8.8.8  (Google public DNS Server)
Name Server 3 : 208.67.222.222 (OpenDNS public DNS Server)
Router        : 192.168.10.254 (ADSL Modem)

File /etc/hosts

127.0.0.1       localhost
192.168.10.1    zcspdc.vavai.co.id zcspdc

ZIMBRA INSTALLATION

Please use following article to install Zimbra on SLES 11 : Installing Zimbra 6.0.5 64 bit on SUSE Linux Enterprise Server (SLES) 11 64 bit or use this tutorial : Installing Zimbra 6.0.4 on openSUSE 11.1 64 bit for Zimbra+openSUSE version.

ZIMBRA LDAP CONFIGURATION

The following script will automatically configure Zimbra LDAP as below :

Add Samba Schema into Zimbra LDAP
Add proper index into Zimbra LDAP Schema
Add 2 user (zmposix and zmposixroot) as Zimbra LDAP Administrative Account with default password : rahasia
Adjust Zimbra LDAP ACL to allow administrative task regarding Samba-Zimbra integration
Add Admin Extension Zimbra Posfix Account and Zimbra Samba Extension

Thanks to Peracchi and Lithorus on the following thread on Zimbra Forum for idea and a great script.

To run the automated script, run the following commandon console/terminal :

su
cd /srv
wget -c http://vavai.com/wp-content/uploads/zcs-samba.tar.gz
tar -zxvf zcs-samba.tar.gz
su - zimbra
cd /srv/zcs-samba
./zcs-samba.sh

NOTE : The script will automatically use ‘rahasia’ (Indonesian word means ‘secret’ ) as default password for zmposixroot and zmposix password. Please modify script to use your own password by change the following code on /srv/zcs-samba/zcs-samba.sh :

# set password for the posix ldap accounts
ZMPOSIX_LDAP_PASSWORD=`/opt/zimbra/openldap/sbin/slappasswd -s rahasia`
ZMPOSIXROOT_LDAP_PASSWORD=`/opt/zimbra/openldap/sbin/slappasswd -s rahasia`
echo "Domain : $DOMAIN"
echo "Hostname : $HOSTNAME"
echo "Zimbra LDAP Password : $ZIMBRA_LDAP_PASSWORD"
echo "LDAP Prefix : $LDAP_PREFIX"
echo "ZMPOSIX_LDAP_PASSWORD : rahasia"

Change ‘rahasia’ on the above line with your own password.

SAMBA INSTALLATION

Open YAST | Network Service | Samba Server. YAST will automatically added Samba package if you never install it.
On the first wizard, fill in the workgroup/domain name. I’m using vavai.co.id as my domain name as shown on top of the tutorial. Click Next.
On Samba Server Type, Choose Primary Domain Controller (PDC) and then click Next
On start-up, choose Service Start During Boot so Samba will automatically be activated during boot. Don’t forget to open your Firewall port
Move to LDAP Setting tab.
Click on Use LDAP Password Back-End option
Change LDAP Server URL from default entry ldap://127.0.0.1 to be ldap://192.168.10.1 (remember my IP address configuration above). Use same address to IdMap Back-End
Change Search Base DN to Zimbra LDAP DN, mine are dc=vavai,dc=co,dc=id
Fill in Administrator DN and the password: uid=zmposixroot,cn=appaccts,cn=zimbra). Click Test Connection to test the connection between Zimbra and Samba machine.
Click Advanced Setting | Expert LDAP Setting
Change user suffix to be ou=people
Change group suffix to be ou=groups
Change Machine suffix to be ou=machines
Click OK to close Expert LDAP Setting windows
Click OK to close Samba Server wizard. Fill in password for Samba root /Administrator password. To prevent any confused setting, I’m using same password between zmposixroot, zmposix and Samba root password

SAMBA CONFIGURATION

Open /etc/samba/smb.conf with your preferred text editor (vi, gedit, kate or kwrite)
Give it a # (comment mark) on the following line (if you do not use dhcp on your Samba configuration) :

include = /etc/samba/dhcp.conf

Save the configuration

LDAP CLIENT CONFIGURATION

Click YAST | Network Services | LDAP Client
Click Use LDAP on User Authentication
Change Address to use Zimbra IP (192.168.10.1)
Fill in LDAP Base DN (dc=vavai,dc=co,dc=id)
Leave others as is
Click Advanced Configuration
Change Password Change Protocol to MD5
Leave Group Member Attribute = Member setting
Click on Administration Setting tab
Fill in uid=zmposixroot,cn=appaccts,cn=zimbra on Administrator DN text box. Leave Append Base DN setting unchecked
Leave Create Default Configuration Objects setting unchecked
Click OK
Click OK

NSS-LDAP & PAM-LDAP CONFIGURATION

Open file /etc/ldap.conf with your preferred text editor and change the following line (remove # mark)

host 192.168.10.1
base dc=vavai,dc=co,dc=id
binddn uid=zmposix,cn=appaccts,cn=zimbra
bindpw rahasia
rootbinddn uid=zmposixroot,cn=appaccts,cn=zimbra
port 389
bind_policy soft
nss_reconnect_tries 2
uri ldap://192.168.10.1/
ssl start_tls
tls_cacertdir /opt/zimbra/conf/ca
tls_checkpeer no
pam_password md5
nss_base_passwd         ou=people,dc=vavai,dc=co,dc=id?one
nss_base_shadow         ou=people,dc=vavai,dc=co,dc=id?one
nss_base_group          ou=groups,dc=vavai,dc=co,dc=id?one
nss_base_hosts          ou=machines,dc=vavai,dc=co,dc=id?one

Save the configuration
Edit /etc/nsswitch.conf and change the following line :

passwd: compat
group: compat

with

passwd: files ldap
group: files ldap

Edit /etc/pam.d/common-account and change the configuration as below :

account sufficient pam_unix.so
account sufficient pam_ldap.so

Edit /etc/pam.d/common-auth and change the configuration as below :

auth sufficient pam_ldap.so
auth sufficient pam_unix.so

Edit /etc/pam.d/common-password and change the configuration as below :

password sufficient pam_unix.so
password sufficient pam_ldap.so

Edit /etc/pam.d/common-session and change the configuration as below :

session sufficient pam_unix.so
session sufficient pam_ldap.so

Tutorial will be continue to part 2 of User Account Integration between Samba PDC & Zimbra Mail Server on openSUSE / SLES.

Related Entries

Zimbra Mail Server with External Authentication using Samba PDC+OpenLDAP

Masim "Vavai" Sugianto — Mon, 29 Mar 2010 20:57:09 +0000

Zimbra mail server using LDAP as default account database, but we may also use external LDAP/AD as Zimbra user authentication. This tutorial will cover how to use openSUSE/SLES PDC+OpenLDAP user as Zimbra user authentication.

SAMBA PDC CONFIGURATION

I’m using openSUSE 11.2 with Samba PDC+OpenLDAP but tutorial may also applied on another openSUSE version or on SLES. In this example, server hostname is host pdc.vavai.info (192.168.0.6), with bind DN cn=Administrator, dc=vavai, dc=info and using 2 LDAP ports : standard port 389 and SSL port 636. Don’t forget to add these ports as an allowed port on firewall.

ZIMBRA CONFIGURATION

Login to Zimbra Admin
Go to Domain on left pane menu
Choose domain to be configure. If we have multi domain schema on Zimbra, we must configuring external authentication for each domain, even if all domain using same LDAP server
Choose Configure Authentication menu.
On Authentication Mode choose External LDAP
Fill in the configuration of Samba LDAP. Take a look on the following picture for a configuration example
Adjust the configuration with your own setting and then click Next.
Next wizard are LDAP bind DN configuration. Bind DN is the configuration of admin user/manager used for accessing LDAP data. Click on Use DN/Password to bind to external server check box and then fill the bind DN text box. I’m using cn=Administrator,dc=vavai,dc=info as Samba PDC+openLDAP bind DN. Don’t forget to fill in the bind DN password (admin user/LDAP manager password)
On next wizard, use Samba PDC user account as user name and password and then click Test for testing Samba PDC+OpenLDAP connection. Zimbra will response with Authentication Test Result : Authentication test successful message if Samba PDC+OpenLDAP has connected successfully.
`

Please remember that the above configuration still need an inbox account on Zimbra mail server so you must create the appropriate account with no password on Zimbra to map user on Samba PDC with their mailbox. Zimbra account do not need password because password will be pass to LDAP account on Samba PDC.

If you wish to integrating Samba & Zimbra user as fully single user name, mailbox and password, please refer to UNIX and Windows Accounts in Zimbra LDAP and Zimbra Admin UI

Related Entries

Installing Zimbra 6.0.5 64 bit on SLES 11 64 bit

Masim "Vavai" Sugianto — Wed, 10 Feb 2010 08:34:06 +0000

Zimbra has published a new update for Zimbra Mail Server & Collaboration Suite, Zimbra 5.0.22 and Zimbra 6.0.5. This is the first update since VMWare acquired Zimbra. I would like to test it to see whether status & logger problem on Zimbra 6.0.4 has been officially solved or not.

I’m currently testing Zimbra 6.0.5 64 bit installation on SLES 11 64 bit, using Xen Hypervisor Guest (paravirtualization). The installation went smooth with only a few modification on SLES as describe below :

Install SLES on text or server mode to prevent any unused services
Edit your /etc/hosts so it will looks like below (change 127.0.0.2 with your Zimbra IP, mine is 192.168.0.31) :
```
127.0.0.1       localhost
192.168.0.31 hostname.domain.tld hostname
```
Add sysstat package using YAST | Software | Software Management or by using Zypper. Zimbra need another package such as cron, fetchmail etc, but the installation process has installed all of them by default.
```
zypper in sysstat
```
Set your DNS so A and MX records address will point to Zimbra. I’ve published an article regarding DNS Server configuration to meet with Zimbra Requirement.

Disable Postfix :

service postfix stop
chkconfig postfix off

Download Zimbra binary installer

cd /opt
wget -c http://h.yimg.com/lo/downloads/6.0.5_GA/zcs-6.0.5_GA_2213.SLES11_64.20100202233758.tgz

decompress, run the installation script and then follow the wizard

tar -zxvf zcs-6.0.5_GA_2213.SLES11_64.20100202233758.tgz
cd zcs-6.0.5_GA_2213.SLES11_64.20100202233758
sh install.sh

Related Entries

VMWare Acquired Zimbra

Masim "Vavai" Sugianto — Fri, 15 Jan 2010 02:14:06 +0000

Rumors that Yahoo will selling Zimbra has been discussed on mail server world for a month or two. The rumors caused some controversy regarding the issue that Yahoo will released Zimbra to Microsoft. The rumors has finally ended : Yahoo selling Zimbra but not for Microsoft, Yahoo sell it to VMWare instead.

As announced by VMWare and Zimbra, the acquisition will further VMware’s mission of taking complexity out of the datacenter, desktop, application development and core IT services, and delivering a fundamentally more efficient and new approach to IT. Steve Herrord has published his blog post regarding the reason why Zimbra decided to acquire Zimbra.

I’ve read a positive response to the acquisition. It may (and should be) better than lets Zimbra acquired by Microsoft. Microsoft has their own product : Microsoft Exchange Server. One of the stronger competitors for their product are Zimbra. The Dual License providing by Zimbra (Network Edition and Open Source Edition) mat not be really appropriate for Microsoft business model.

Beside the positive response, we must wait an update for VMWare strategy to expanding Zimbra popularity and market share. Hope VMWare has better attention for Zimbra than what Yahoo shows off for 2 years.

Related Entries

Solution for Zimbra 6.0.4 Logger Problem

Masim "Vavai" Sugianto — Wed, 06 Jan 2010 09:09:27 +0000

For anyone installing Zimbra 6.0.4 on openSUSE 11.1 64 bit or on SLES 11 64 bit and found a logger problem (the Zimbra logger status are running but the Zimbra Admin status marks with Red X and the Zimbra log has no content), the following thread on Zimbra Forums may help :

Actually, I haven’t try the suggestion on both thread. I’m currently testing the suggestion on Zimbra 6.0.4 installation on openSUSE 11.1 64 bit and will be updating this post as soon as I try the suggestion.

Related Entries

Zimbra Mail Server Relay Access Denied & ISP Relay with Authentication

Masim "Vavai" Sugianto — Sat, 02 Jan 2010 14:59:02 +0000

Below are a common mail server problems that might be hit you if you wish to move and use your mail server as production server without full & complete check :

Relay access denied because you have a dynamic public IP Address
Email from your mail server delivered to spam box on Gmail or Yahoo mail
Some of your outbound mail being deferred while trying to send to certain domain/recipient

The problem occurred for many reason. It can be a dynamic IP that blacklisted as an open relay mail server; Your IP got trapped and blacklisted on some RBLhost; The destination mail server could not look up your defined host and/or ip address; a missing PTR records or Reverse DNS Zone on your DNS Server and much more.

These are some tips & tricks to solved the problem. If you have no public-static IP address for your mail server, or your mail server behind a NAT service, or you may have no authority to modify the DNS zone, ISP relay may the answer for your problem.

ISP relay means that our mail server will not deliver the outbound mails to the destination mail server. Our mail server will deliver all outbound mails into ISP server (ISP domain & hosting, where our domain resides) and then the ISP server send the message to final destination. It’s means that our mail server will only act as a gateway to the ISP relay.To prevent an open relay hijack from spammer, ISP server usually need an authentication before allows the email delivery.

ISP relays solved the above problem. Any DNS lookup, blacklisted IP or Reverse DNS zone will be asked to ISP mail server. With the reputation of ISP, their mail server should be passed any security check.

Below are a step by step how to configure your Zimbra Mail Server to get an ISP relay authentication. I’m using vavai.co.id as a sample domain with a user name rivai%vavai.co.id and password : passwordku. Public domain & hosting for vavai.co.id stored on hosting server (ISP server). I’ve also setting up Zimbra with default domain vavai.co.id on local server.

Let’s configure Zimbra to use ISP relay with authentication to send outbound mail message.

Get a canonical name for public domain

# nslookup mail.vavai.co.id
Non-authoritative answer:
mail.vavai.co.id  canonical name = vavai.co.id.
Name:   vavai.co.id
Address: 75.126.137.80

Open Zimbra Admin Console (https://hostaddress:7071/zimbraAdmin/)
Go to Global Setting | MTA
Write the public canonical name on “Relay MTA for external delivery:” option.
Open Konsole/Terminal, Log in as Zimbra Admin

# su - zimbra

Create postfix look up table

# echo mail.vavai.co.id rivai@vavai.co.id:passwordku > /opt/zimbra/conf/relay_password
# postmap /opt/zimbra/conf/relay_password

Test the mapping

# postmap -q mail.vavai.co.id /opt/zimbra/conf/relay_password

The response should similar as below : username%domain.tld:password
Configure Zimbra Postfix to use the ISP/SMTP Relay with authentication

# postconf -e smtp_sasl_password_maps=hash:/opt/zimbra/conf/relay_password
# postconf -e smtp_sasl_auth_enable=yes
# postfix reload

Test your Zimbra mail server

Note :

If you found an error or deferred queue as below :

(Authentication failed: cannot SASL authenticate to server …: no mechanism available)

It seems that smtp-sasl_security option do not allows the plain text on ISP relay setting. Checked it with the following command :

# postconf smtp_sasl_security_options

If you get the error message :smtp_sasl_security_options = noplaintext, noanonymous

Change the sasl security setting to allow the plaintext password usage :

# postconf -e smtp_sasl_security_options=noanonymous
# postfix reload

Restart the Zimbra service and test the email server.

If you would not prefer with the plain text password on configuration setting, consider to use SMTP use TLS.

Related Entries

Installing Zimbra 6.0.4 on openSUSE 11.1 64 bit – Part 3

Masim "Vavai" Sugianto — Wed, 23 Dec 2009 13:52:51 +0000

Previous tutorial :

DOWNLOADING & INSTALLING ZIMBRA BINARY

After installing the base OS, adding some package & additional library and preparing the DNS Server, we can go to the final step : installing Zimbra.

From the konsole/terminal, move to /opt folder and then download the Zimbra Binary Installer for SLES 11 64 bit
```
cd /opt
wget -c http://h.yimg.com/lo/downloads/6.0.4_GA/zcs-6.0.4_GA_2038.SLES11_64.20091214184036.tgz
```

Extract it

tar -zxvf zcs-6.0.4_GA_2038.SLES11_64.20091214184036.tgz

Edit file /opt/zcs-6.0.4_GA_2038.SLES11_64.20091214184036/bin/get_plat_tag.sh and add (or edit the openSUSE 10.2 version) the openSUSE 11.1 on the openSUSE version script as below :

grep "openSUSE 10.2" /etc/SuSE-release > /dev/null 2>&1
if [ $? = 0 ]; then
echo "openSUSE_10.2"
exit 0
fi

so, the line will looks like this :

grep "openSUSE 11.1" /etc/SuSE-release > /dev/null 2>&1
if [ $? = 0 ]; then
echo "openSUSE_11.1"
exit 0
fi

Go to Zimbra installation folder and run the installation script :

cd /opt/zcs-6.0.4_GA_2038.SLES11_64.20091214184036/
./install.sh --platform-override

Follow the installation wizard (some screenshot below using remote access via ssh)
Please note that the installation process need our response regarding the configuration. Below is some important step :
- Asking about OS. Binary installer built for openSUSE 10.2 but we used it for openSUSE 11.2. Just answer “Y” while Zimbra asking about different platform
- Asking about DNS ERROR resolving MX. Just answer “Y” for change domain and then typing your domain name (in my case : vavai.net) instead of your hostname (mail.vavai.net)
  `
- Zimbra Admin password. Zimbra will ask for Zimbra Admin password on the final confirmation. Just write your password but beware the password will be typing as plain text and doesn’t masking with different character
  `
At the end of installation, just stop and then start the Zimbra service to make it usable and ready for testing
`
Zimbra web mail should be easy to access by using host name or IP (in my case : http://mail.vavai.net or http://192.168.1.250) while the Zimbra Admin could be accessed with https protocol on port 7071 (https://mail.vavai.net:7071 or https://192.168.1.250:7071)
`

`

MOST ANNOYING BUGS

The installation process should be working flawlessly and the overall system ready for testing but some weird problem could be found, especially regarding log & Zimbra status. I’m working on the status & logger bug fix because the identical problem also hit me with SLES 11. Anyway, beside the logger problem mail system working nice both with webmail and mail client. I’ll be update the bug fixes status as soon as possible.

Related Entries

Installing Zimbra 6.0.4 on openSUSE 11.1 64 bit – Part 2

Masim "Vavai" Sugianto — Wed, 23 Dec 2009 07:19:36 +0000

Previous tutorial : Installing Zimbra 6.0.4 on openSUSE 11.1 64 bit – Part 1

CONFIGURING LOCAL DNS SERVER

Configuring local DNS server with openSUSE 11.1 should be similar as configuring DNS Server on openSUSE 11.2. You may found an annoying bug if you haven’t pick an online update and use the package on the DVD installation, but it could be fixed with a small changes. I will show you the detail on

Zimbra need an A & MX records that pointing to it’s IP Address. We could use/modify existing DNS records to meet with our requirement but I would prefer to installing local DNS server for it’s flexibility. If you’re currently using an existing & running mail server and need to replace it with Zimbra, you should not change any MX entry before completing and testing the configuration. Incomplete configuration on production mail server may impact to bounce mail, so, we need a local DNS server to prevent the impact and to do a full test before activating mail server for production use.

Setting up a DNS server on openSUSE for Zimbra requirement should be easy by using YAST. Below is a step by step, please change the IP and host name to meet with your environment on previous tutorial.

Install DNS server package. Click YAST | Software | Software Management, choose Patterns on Filter option and then find & install the DHCP & DNS Server pattern. You could also installing the pattern by using zypper : zypper in -t pattern dhcp_dns_server. If you wish to install the DNS without DHCP package, just choose & install bind, bind-doc and yast2-dns-server
YAST software Management
Go to YAST | Network Services | DNS Server
Click Next on first configuration wizard : Forwarder List
DNS Server wizard : Initial Windows
Add a new Zone. Write your domain on Zone name, choose type of zone (Master) and then click Add
Add DNS Zone
Click Edit to modify dns zone
`
Just leave the first tab (Basics) as is. Click the second tab : NS Records
Write ns1 on Name Server to Add option and then click Add. YAST should be enough clever to give the records a fully qualified domain name and autocompleting the entry
`
Move to the third tab, MX Records. Write the Zimbra host name (see your configuration on first tutorial) on Address option, Give it a priority number (lower means highest priority) and then click Add. YAST will autocompleting the entry
`
Leave the fourth tab as is, except you need to modify to SOA option
Move to final tab. Write ns1 on Record key, choose A (Address Records) as records type and write Zimbra IP on records value. Click Add.Still on final tab (Records), make a second Address Records for Zimbra hostname. Write mail on Record key, choose A (Address Records) as records type and write Zimbra IP on records value and then click Add
`
Click OK
Click Next
Choose On : Start up now and When Booting and then click Finish. The last option will ensure the DNS service will be active on boot process
`
If you installing DNS package from DVD, you may hit an annoying bugs as below. Just Click OK and then No on the second confirmation window.
`

`
Solved the bug by edit /etc/named.conf and mark the line (give it a # sign) contains “include /etc/named.conf.include”. Actually, bug has been fixed with an online update.
`

Restart the DNS service

service named restart
service named status

Testing the DNS records using nslookup : nslookup ns1.domain.tld and nslookup mail.domain.tld. DNS Server should be response with the Zimbra IP.
`

Continue to the third part of tutorial : Installing Zimbra 6.0.4 on openSUSE 11.1 64 bit – Part 3, Installing Zimbra Binary Installer

Related Entries

Installing Zimbra 6.0.4 on openSUSE 11.1 64 bit – Part 1

Masim "Vavai" Sugianto — Tue, 22 Dec 2009 13:00:34 +0000

Zimbra has been released an update of it’s product on December 19, 2009 : Zimbra Collaboration Suite & Mail Server version 6.0.4 and a minor update for 5.x version : Zimbra 5.0.21. I’ve write a step-by-step tutorial installing Zimbra 5.0.21 on openSUSE 11.2 on previous post and now the second series of Zimbra tutorial : Installing Zimbra 6.0.4 on openSUSE 11.1 64 bit.

Starting with version 6.0.0, Zimbra has only provided the 64 bit binary installer for SLES (SUSE Linux Enterprise Server). There is an explanation why Zimbra decided to provide only 64 bit binary installer, not only for SLES but also for others distro. The installation process looks pretty similar between the 32 bit and 64 bit, so you should be familiar if you tried the 5.0.21 install tutorial. I decided to use openSUSE 11.1 as base OS but you may also try the tutorial using openSUSE 11.2 with just a few minor changes (probably the differences are the graphical interface and installing gmp package).

PREPARATION & BASE INSTALLATION SETUP :

Prepare your 64 bit machine with minimum 1 GB memory. Please refer to Zimbra System Requirement for complete specification. In this tutorial, I will use openSUSE 11.1 64 bit on VirtualBox running on IBM X Series 3400 with 8 GB RAM. VirtualBox using 16 GB virtual harddisk and about 2 GB memory. This is a minimal specification and I take it only for testing (and for writing this tutorial )
Install openSUSE 11.1. I’m using openSUSE 11.1 64 bit DVD installation and choose to install a Text mode (server installation mode) to prevent any unused service to be installed. Root partition taken almost full harddisk and the rest are swap partition. Install it with default option, the modification will be done later.
openSUSE 11.1 Initial Boot Screen

New installation using Automatic Configuration

Setting up Time Zone

Choosing Minimal Server (Text Mode) on Installation option to prevent/remove any unused service for mail server

Edit/Resize partition image. Zimbra need minimum 5GB of /opt folder size. I used only 2 partition (/ and swap) and used almost full harddisk to root partition, only as testing model on my virtual image. Just adapts it with your requirement.

Create standard user for daily purpose. Automatic login will be disabled by default for text mode installation

Overview of base installation. I will using standard option and will make any changes & add any requirement library later.
Disable unused software repositories. Go to YAST | Software | Software Repositories and disable unused repos. You should keep the repositories will be used for additional package installation. Just typing yast on terminal/konsole and then move to specified menu
Disable firewall service for temporary installation. We could re-activating the firewall (and it should be ) later. Go to YAST | Security & Firewall | Firewall and disable the service. Don’t forget to click the option “Stop Firewall Now”.
Edit the IP Address, Name Server and Routing Gateway to meet with our requirement. In my case, I will install the DNS Server so my first name server will be my own IP (Zimbra IP). Goto YAST | Network Device | Network Settings and take a look at screenshot.
Move to Global Options tab. Mark “Enable IPv6″ unchecked if you do not use IPv6 support or vice versa, leave it checked if you wish to support IPv6

Disable/Enable IPv6 Support

Move to Overview. Edit and pick a static IP Address. Give a subnet mask and leave host name empty. Since openSUSE 11.x supporting a simple and longer subnet mask, you could give the subnet mask as 255.255.255.0 or just /24 instead. Off course, you should adjust the setting with your environment.
Setting UP IP Address & Subnet mask
Click Next and then move to Hostname & DNS tab. Setup your hostname (eg : mail), your domain, Name Server 1,2 and 3 and domain search. Please remember that I will make a local DNS Server so pick the Zimbra IP as Name server 1. I take Name server 2 and name server 3 for my ADSL modems IP (modem DNS service) and ISP/public DNS
Setting Up Hostname & DNS
Move to Routing tab and write your routing IP at Default IPv4 Gateway option. Keep the Default IPv6 Gateway option as empty unless you weren’t disabling IPv6 support on Global Options tab.
Setting up routing & gateway
Click OK
Edit /etc/hosts file and add/change your setting as below
Setting up hostname & DNS

INSTALLING ADDITIONAL PACKAGE & LIBRARY :

Install the following package using YAST or zypper : fetchmail gmp libmysqlclient15 perl-Bit-Vector perl-Carp-Clan perl-Convert-UUlib perl-Data-ShowTable perl-Date-Calc perl-DBD-mysql perl-IO-Socket-SSL perl-Net-DNS
perl-Net-IP perl-Net-SSLeay perl-Socket6 perl-Unix-Syslog perl-YAML. All package should be available on DVD installation
Install the sysstat package by using openSUSE Build Service. Install it using zypper with the following command :
```
zypper ar http://download.opensuse.org/repositories/server:/monitoring/openSUSE_11.1 monitoring
zypper ref
zypper in sysstat
```
mail:/opt/zimbra-auto # zypper ar http://download.opensuse.org/repositories/server:/monitoring/openSUSE_11.1 monitoring
Adding repository ‘monitoring’ [done]
Repository ‘monitoring’ successfully added
Enabled: Yes
Autorefresh: No
URI: http://download.opensuse.org/repositories/server:/monitoring/openSUSE_11.1

mail:/opt/zimbra-auto # zypper ref
New repository or package signing key received:
Key ID: A5C23697EE454F98
Key Name: server:monitoring OBS Project
Key Fingerprint: 8F3BC8EFF549CDCDA918D981A5C23697EE454F98
Repository: monitoring

Do you want to reject the key, trust temporarily, or trust always? [R/t/a/?]: a
Retrieving repository ‘monitoring’ metadata [done]
Building repository ‘monitoring’ cache [done]
All repositories have been refreshed.
mail:/opt/zimbra-auto # zypper in sysstat
Loading repository data…
Reading installed packages…
Resolving package dependencies…

The following NEW package is going to be installed:
sysstat

Overall download size: 206.0 K. After the operation, additional 766.0 K will be used.
Continue? [YES/no]: yes
Retrieving package sysstat-9.0.6-1.1.x86_64 (1/1), 206.0 K (766.0 K unpacked)
Retrieving: sysstat-9.0.6-1.1.x86_64.rpm [done (14.2 K/s)]
Installing: sysstat-9.0.6-1.1 [done]
mail:/opt/zimbra-auto #

Next tutorial : Installing Zimbra 6.0.4 on openSUSE 11.1 64 bit – Part 2, Configuring Local DNS Server