Showing posts with label zimbra. Show all posts
Showing posts with label zimbra. Show all posts

Buat script pada direktori tmp
Masuk ke user zimbra dengan menggunakan perintah su - zimbra
Jalankan perintah sh /tmp/export.sh /tmp/hasil-export.csv
Jika proses sudah selesai, data dapat diambil/dilihat pada file hasil-export.csv pada direcroty tmp.


berikut script nya


==============================================================


RESULT=$1



if test -f $RESULT; then

rm -rf $RESULT

fi

TMPFILE=/tmp/userattr

for user in `zmprov -l gaa`; do

echo "getting $user attributes"
zmprov ga $user > $TMPFILE

gn=`cat $TMPFILE | grep ^givenName | cut -d: -f2 | sed -e 's/^ *//'`
sn=`cat $TMPFILE | grep ^sn | cut -d: -f2 | sed -e 's/^ *//'`
dname=`cat $TMPFILE | grep ^displayName | cut -d: -f2 | sed -e 's/^ *//'`
name=`cat $TMPFILE |grep ^zimbraMailDeliveryAddress | cut -d: -f2 | sed -e 's/^ *//'`

echo "FirstName: $gn, LastName: $sn, displayName: $dname, email: $name" 
echo "$gn,$sn,$dname,$name" >> $RESULT

done



script for set account to the maintenance mode

pls follow this step to create the script.

vim account_to_maintenance.sh

put the code

here is the code.

#!/bin/bash
for i in $( cat /tmp/daftar_user.txt ); 
do
    zmprov ma $i zimbraAccountStatus maintenance
done

save the file

Note : 
pls create this file  daftar_user.txt

daftar_user.txt  : put the list user who wants to be a maintenance mode



i got this error, the root cause is DNSRBL to njabl.org  and ahbl can not be used anymore because the service has been closed therefore each perform lookup dnsrbl will always fail



Jan 7 15:18:55 zmmail postfix/smtpd[13988]: NOQUEUE: reject: RCPT from unknown[10.33.10.10]: 554 5.7.1 Service unavailable; Client host [10.33.10.10] blocked using dnsbl.ahbl.org; List shut down. See: http://www.ahbl.org/content/last-notice-wildcarding-services-jan-1st; from=<> to= proto=ESMTP helo=


to solve this problem pls. run this command as zimbra user

su - zimbra
zmprov mcf -zimbraMtaRestriction "reject_rbl_client dnsbl.ahbl.org"
zmprov mcf -zimbraMtaRestriction "reject_rbl_client dnsbl.njabl.org"

zmmtactl reload




To fix this issue, find the Zimbra crontabs directory at /opt/zimbra/zimbramon/crontabs

Now, lets put the cronjob’s to a single file (just to make your job easier) as follows:

[root@zimbra crontabs]# cat crontab >> crontab.zimbra
[root@zimbra crontabs]# cat crontab.ldap >> crontab.zimbra
[root@zimbra crontabs]# cat crontab.logger >> crontab.zimbra
[root@zimbra crontabs]# cat crontab.mta >> crontab.zimbra
[root@zimbra crontabs]# cat crontab.store >> crontab.zimbra


Finally,Load the crontab.zimbra file to crontab as follows:
[root@zimbra crontabs]# crontab -u zimbra crontab.zimbra


to verify the crontab zimbra is exist

su - zimbra
crontab -l
1.  Cari account spam pada search bar  yang ada pada zimbra admin console
2.  Klik kanan => view mail



Maka akan muncul mailbox dari account spam tersebut

  • Cari e-mail yang dibutuhkan
  • Klik kanan => Redirect => masukan nama e-mail tujuan
  • Setelah itu e-mail akan masuh pada inbox tujuan



E-mail yang sudah di redirect bisa di lihat pada inbox user


semoga bermanfaat.






    1.        Melakukan tunning zimbraPop3NumThreads dan zimbraImapNumThreads

     login sebagai zimbra user, lalu masukan perintah seperti dibawah ini.
su - zimbra
zmprov ms `zmhostname` zimbraPop3NumThreads 300
zmprov ms `zmhostname` zimbraImapNumThreads 500

     Lakukan Restart service zimbra
zmcontrol restart


Note:

lakukan pada server-server mailbox







First download the appropriate binaries from this location:

RHEL/CentOS 6: http://files.zimbra.com/downloads/8.0.7_GA/curl/RHEL6_64/curl-7.35.0.tgz
UBUNTU 10: http://files.zimbra.com/downloads/8.0.7_GA/curl/UBUNTU10_64/curl-7.35.0.tgz
UBUNTU 12: http://files.zimbra.com/downloads/8.0.7_GA/curl/UBUNTU12_64/curl-7.35.0.tgz
SLES 11: http://files.zimbra.com/downloads/8.0.7_GA/curl/SLES11_64/curl-7.35.0.tgz

The MD5 checksums are also available:

RHEL/CentOS 6: http://files.zimbra.com/downloads/8.0.7_GA/curl/RHEL6_64/curl-7.35.0.tgz.md5sum
UBUNTU 10: http://files.zimbra.com/downloads/8.0.7_GA/curl/UBUNTU10_64/curl-7.35.0.tgz.md5sum
UBUNTU 12: http://files.zimbra.com/downloads/8.0.7_GA/curl/UBUNTU12_64/curl-7.35.0.tgz.md5sum
SLES 11: http://files.zimbra.com/downloads/8.0.7_GA/curl/SLES11_64/curl-7.35.0.tgz.md5sum

Then place the downloaded tgz file at the following location: /tmp/curl/$PLAT/
(where $PLAT is one of RHEL6_64, SLES11_64, UBUNTU10_64, or UBUNTU12_64).


Then run:
[root@mail01 ~]# ./zmcurl807-updater.sh -o

Validating patched curl: success
Backing up old curl: complete
Installing patched curl: complete
Curl patch process complete.
Please restart Zimbra Collaboration Suite as the Zimbra user via 


--------------------------------------------------
restart service mta
--------------------------------------------------
[root@mail01 zimbra]# su - zimbra
[zimbra@mail01 ~]$ zmmtactl stop
/postfix-script: stopping the Postfix mail system
Stopping saslauthd...done.
[zimbra@mail01 ~]$ zmmtactl start
Rewriting configuration files...done.
Starting saslauthd...done.
/postfix-script: starting the Postfix mail system



-----------------------
check with this command
-----------------------
[root@mail01 ]# curl https://shellshocker.net/shellshock_test.sh | bash

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current

  Dload  Upload   Total   Spent    Left  Speed
101  2627  101  2627    0     0    416      0  0:00:06  0:00:06 --:--:--  1957
CVE-2014-6271 (original shellshock): not vulnerable
CVE-2014-6277 (segfault): not vulnerable
CVE-2014-6278 (Florian's patch): not vulnerable
CVE-2014-7169 (taviso bug): not vulnerable
CVE-2014-7186 (redir_stack bug): not vulnerable
CVE-2014-7187 (nested loops off by one): not vulnerable
CVE-2014-//// (exploit 3 on http://shellshocker.net/): not vulnerable







when i check the status of replication, i got this status :


[root@ldap conf]# /opt/zimbra/libexec/zmreplchk
SSL_ca_path /opt/zimbra
/conf/ca does not exist at /opt/zimbra/zimbramon/lib/IO/Socket/SSL.pm line 377.
[root@ldap conf]#



use this command to edit the script


vi /opt/zimbra/libexec/zmreplchk



A workaround is to add following line:

chomp $val;

After this line:
my $val=`$c{zmlocalconfig} -x -s -m nokey ${key} 2> /dev/null`;


And that fix the issue. 

Let me know if how it goes.






  • Untuk menjalankan full backup pada SELURUH mailbox2 di server1:
$ zmbackup -f -a all -s server1.domain.com

  • Untuk melakukan incremental backup pada SELURUH mailboxes di server1 SEJAK full backup terakhir:
$ zmbackup -i -a all -s server1.domain.com

  • Untuk melakukan full backup pada  HANYA mailbox-nya  user1 di server1:
$ zmbackup -f -s server1 -a user1@domain.com

  • Untuk melakukan incremental backup pada mailbox-nya user1 di server1:
$ zmbackup -i -s server1 -a user1@domain.com

  • Untuk mengaktifkan MySQL database backups (mysqldump):
zmlocalconfig –e mysql_backup_retention=

  • Untuk merubah status sebuah accounts menjadi maintenance mode:
$ zmprov ma account1 zimbraAccountStatus maintenance
  • Sebagai catatan, maintenance mode akan mencegah masuknya email2 baru selama proses restore, kalau tidak, email2 akan ter-override selama proses restore ke mailbox account tersebut
  • Jalankan perintah zmrestore untuk me-restore banyak accounts, menggunakan  tanda koma antara accounts:
$ zmrestore -s server1 -a account1@abc.comaccount2@abc.com

  • Untuk merubah status  accounts menjadi active mode:
$ zmprov ma account1 zimbraAccountStatus active

  • Penting diingat: jika sebuah user account di restore dan COS dari si account tsb sudah tidak ada lagi, maka account tsb akan di berikan COS default-nya zimbra collab

  • Untuk melakukan full restore dari SELURUH accounts di server1, TERMASUK full backup terakhir dan SETIAP incremental backups sejak full backupterakhir dilakukan:
$ zmrestore -s server1.domain.com -a all

  • Untuk melakukan sebuah restorasi single account di server1:
$ zmrestore -s server1.domain.com -a account1@abc.com
  • catatan: single account juga tentunya dapat di restore dari ZC admin console







As the Zimbra user:

zmlocalconfig -e mailboxd_java_heap_size=6144

zmlocalconfig -e mailboxd_java_options="-server -Djava.awt.headless=true -Dsun.net.inetaddr.ttl=60 -Dorg.apache.jasper.compiler.disablejsr199=true -XX:NewRatio=2 -XX:+UseConcMarkSweepGC -XX:+UseParNewGC -XX:PermSize=196m -XX:MaxPermSize=350m -XX:SoftRefLRUPolicyMSPerMB=1 -verbose:gc -XX:+PrintGCDetails -XX:+PrintGCTimeStamps -XX:+PrintGCApplicationStoppedTime -XX:-OmitStackTraceInFastThrow -Djava.net.preferIPv4Stack=true"

zmmailboxdctl restart
Please note that the above mailboxd_java_options command is a single line. While copy-pasting , it may break up to different lines, so please correct it to a single line.




Untuk disable direct link pada ZWC (Zimbra Web Client) dengan cara sebagai berikut ini:





zmprov gacf | grep zimbraMtaMaxMessageSize
zmprov gacf | grep zimbraFileUploadMaxSize
--> untuk check maximum  ukuran file attachment sebelumnya

zmprov mcf zimbraMtaMaxMessageSize 104857600
zmprov mcf zimbraFileUploadMaxSize 104857600
--> Untuk Merubahnya menjadi 100 MB


#Note
gunakan satuan byte untuk value angkanya

104857600  = 100 MB

Bisa di konversi melalui link ini

https://www.google.com/search?q=kb+to+mb&oq=kb+to+mb&aqs=chrome..69i57j0l5.2907j0j7&sourceid=chrome&espv=210&es_sm=93&ie=UTF-8

Thank You :D



Command For Get a list of all the ports being used by Zimbra

# try his command from user zimbra


su - zimbra

zmprov gs vm2.zimbra0.lab | grep Port


Output :


zimbraMailProxyPort: 8080
zimbraMailSSLClientCertPort: 9443
zimbraMailSSLPort: 443
zimbraMailSSLProxyClientCertPort: 3443
zimbraMailSSLProxyPort: 8443
zimbraMemcachedBindPort: 11211
zimbraMessageChannelPort: 7285
zimbraMilterBindPort: 7026
zimbraNotifyBindPort: 7035
zimbraNotifySSLBindPort: 7036
zimbraPop3BindPort: 110
zimbraPop3ProxyBindPort: 7110
zimbraPop3SSLBindPort: 995
zimbraPop3SSLProxyBindPort: 7995
zimbraRemoteManagementPort: 22
zimbraSmtpPort: 25




[zimbra@vm1 ~]$ zmprov -l gaa > /tmp/userlist


vi /tmp/mailbox-move.sh

for i in `cat /tmp/userlist`; do zmmboxmove -a $i -f mailbox1.anwar.lab -t mailbox2.anwar.lab

done


cara kerja script :

memindahkan user-user yang ada pada file /tmp/userlist dari server sebelumnya ke
server baru ( mailbox2.anwar.lab )


Hi All


case
muncul "A Network Service error has occured" pada login page

Root couse : Certificate zimbra sudah expired


Berikut cara solving nya:

mail:~ # /opt/zimbra/bin/zmcertmgr createca -new
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
** Creating CA private key /opt/zimbra/ssl/zimbra/ca/ca.key...done.
** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...done.

mail:~ # /opt/zimbra/bin/zmcertmgr createcrt -new -days 365

Validation days: 365
** Creating /opt/zimbra/conf/zmssl.cnf...done
** Backup /opt/zimbra/ssl/zimbra to /opt/zimbra/ssl/zimbra.20131212160559 
** Generating a server csr for download self -new -keysize 1024
** Creating /opt/zimbra/conf/zmssl.cnf...done
** Backup /opt/zimbra/ssl/zimbra to /opt/zimbra/ssl/zimbra.20131212160559 
** Creating server cert request /opt/zimbra/ssl/zimbra/server/server.csr...done.
** Saving server config key zimbraSSLPrivateKey...done.
** Signing cert request /opt/zimbra/ssl/zimbra/server/server.csr...done.

mail:~ # /opt/zimbra/bin/zmcertmgr deploycrt self
** Saving server config key zimbraSSLCertificate...done.
** Saving server config key zimbraSSLPrivateKey...done.
** Installing mta certificate and key...done.
** Installing slapd certificate and key...done.
** Installing proxy certificate and key...done.
** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
** Installing CA to /opt/zimbra/conf/ca...done.

mail:~ # /opt/zimbra/bin/zmcertmgr deployca
** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
** Saving global config key zimbraCertAuthorityCertSelfSigned...done.
** Saving global config key zimbraCertAuthorityKeySelfSigned...done.
** Copying CA to /opt/zimbra/conf/ca...done.

jika sudah selesai generate certificate yang baru,  restart service zimbra

zimbra@mail:~> zmcontrol restart


Terimakasih telah berkunjung :)











Berikut cara installasi DNS untuk zimbra