{"id":36206,"date":"2019-10-31T22:10:16","date_gmt":"2019-10-31T19:10:16","guid":{"rendered":"https:\/\/prohoster.info\/blog\/bezopasnoe-obnovlenie-zimbra-collaboration-suite\/"},"modified":"2019-10-31T22:10:16","modified_gmt":"2019-10-31T19:10:16","slug":"bezopasnoe-obnovlenie-zimbra-collaboration-suite","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/bezopasnoe-obnovlenie-zimbra-collaboration-suite","title":{"rendered":"Zimbra Collaboration Suite'i turvaline uuendamine","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

On the whole, system administrators tend to be skeptical of anything new. Literally everything, from new server platforms to software updates, is met with caution, until practical experience and positive feedback from colleagues in other companies emerge. It\u2019s understandable, as when you are literally responsible for the functionality of the business and the safety of important information, you eventually stop trusting even yourself, not to mention contractors, subordinates, or regular users.<\/p>\n

Distrust towards software updates stems from numerous unpleasant instances where the installation of new patches led to reduced performance, changes in the user interface, failures of information systems, or, particularly unpleasant, data loss. However, completely abandoning updates isn\u2019t an option, as doing so could leave your enterprise's infrastructure vulnerable to cybercriminal attacks. One merely needs to recall the notorious WannaCry virus incident, when data stored on millions of computers that had not been updated to the latest version of Windows became encrypted. This incident not only cost the jobs of countless system administrators, but also clearly demonstrated the need to develop a new policy for updating software products within the enterprise that would balance security and the speed of installation. So, in anticipation of the release of the LTS version of Zimbra 8.8.15, let's take a look at how we can update the Zimbra Collaboration Suite Open-Source Edition to ensure the preservation of all critically important data.<\/p>\n

\"Zimbra<\/a><\/noindex><\/p>\n

\u00dcks Zimbra Collaboration Suite'i peamisi omadusi on, et praktiliselt k\u00f5iki selle komponente saab dubleerida. Eriti on v\u00f5imalik lisada LDAP-Master'ile dubleerivaid LDAP-replikaid, millele on vajadusel v\u00f5imalik \u00fcle kanda p\u00f5hja LDAP-serveri funktsioonid. Samuti on v\u00f5imalik dubleerida Proxy-servereid ja MTA-servereid. Selline dubleerimine v\u00f5imaldab vajaduse korral infrastruktuuri eraldi komponente uuendamise ajaks v\u00e4lja l\u00fclitada ning seel\u00e4bi kaitsta end mitte ainult pika seisaku, vaid ka andmete kaotuse eest eba\u00f5nnestunud uuendamise korral.<\/p>\n

Erinevalt teistest infrastruktuuri komponentidest ei toeta Zimbra Collaboration Suite e-posti salvestuste dubleerimist. Ieven kui teie infrastruktuuris on mitmeid e-posti salvestusi, v\u00f5ivad iga e-posti kasti andmed asuda vaid \u00fches kindlas salvestuses. serveris<\/a>. Seet\u00f5ttu on \u00fcks peamisi andmete s\u00e4ilitamise reegleid uuendamise k\u00e4igus \u00f5igeaegne teabe varundamine e-posti salvestustes. Mida v\u00e4rskem on teie varukoopia, seda rohkem andmeid j\u00e4\u00e4b alles, kui tekib erakorraline olukord. Siiski on siin n\u00fcanss, et Zimbra Collaboration Suite'i tasuta v\u00e4ljaandes ei ole sisseehitatud varundusmehhanismi ning varukoopia loomiseks tuleb kasutada GNU\/Linux'i sisseehitatud t\u00f6\u00f6riistu. Kui aga teie Zimbra infrastruktuuris t\u00f6\u00f6tab mitu e-posti salvestust ja e-posti arhiivi suurus on piisavalt suur, siis v\u00f5ib iga selline varundamine v\u00f5tta v\u00e4ga kaua aega ja luua t\u00f5sist koormust kohalikele v\u00f5rkudele ja serveritele. Lisaks, pikaajalise kopeerimise k\u00e4igus t\u00f5usevad erinevate erakorraliste olukordade tekkimise riskid. Samuti, kui teha sellist varundamist teenuse peatamata, on oht, et rida faile v\u00f5ib olla kopeeritud valesti, mis toob kaasa m\u00f5ningate andmete kaotuse. <\/p>\n

Just because of this, if you need to back up large amounts of data from mail storage, it is better to use incremental backups, which allow you to avoid a full copy of all data, instead backing up only the files that were created or changed after the last full backup. This significantly speeds up the backup process and allows for quicker installation of updates. Incremental backups in Zimbra Open-Source Edition can be achieved using the Zextras Backup modular extension included in Zextras Suite.<\/p>\n

Another powerful tool, Zextras PowerStore, allows system administrators to deduplicate data on the mail storage. This means that all identical attachments and duplicate emails on the mail server will be replaced with a single original file, while all duplicates will become transparent symbolic links. As a result, this not only leads to significant disk space savings, but also greatly reduces the size of the backup, which allows for a decrease in the time taken for full backups and consequently making them much more frequent.<\/p>\n

However, the main capability that Zextras PowerStore offers for safe updates is the transfer of mailboxes between mail servers in multi-server Zimbra infrastructures. With this feature, the system administrator can perform the same operations with mail storage as we did with MTA and LDAP servers for their safe updates. For example, if there are four mail storages in the Zimbra infrastructure, you can try distributing mailboxes from one of them to the other three, and when the first mail storage is empty, it can be updated without any concerns for data safety. If the system administrator has a backup mail storage in the infrastructure, it can be utilized as a temporary repository for mailboxes transferred from the mail storages being updated. <\/p>\n

The console command that allows such transfers is DoMoveMailbox<\/b>. Ette, et saaksite seda kasutada k\u00f5igi kontode edastamiseks e-posti salvest, peate esmalt saama nende t\u00e4ieliku loendi. Selle saavutamiseks t\u00e4itke e-posti serveris k\u00e4sk zmprov sa zimbraMailHost=mailbox.example.com > accounts.txt<\/b>. P\u00e4rast selle t\u00e4itmist saame faili accounts.txt<\/b> , mis sisaldab k\u00f5igi e-posti postkastide loetelu meie e-posti salvestuses. P\u00e4rast seda saame seda kasutada kontode edastamiseks teise e-posti salvesse. See n\u00e4eb v\u00e4lja n\u00e4iteks nii:<\/p>\n

zxsuite powerstore doMailboxMove reserve_mailbox.example.com input_file accounts.txt stages data
\nzxsuite powerstore doMailboxMove reserve_mailbox.example.com input_file accounts.txt stages data,account notifications admin@example.com<\/p><\/blockquote>\n

\nK\u00e4sku t\u00e4idetakse kaks korda, et esmakordsel andmete kopeerimisel ei edastataks kontot, ning teisel korral, kuna andmete edastamine toimub inkrementaalselt, kopeeritakse k\u00f5ik andmed, mis ilmusid p\u00e4rast esimest edastamist, ja seej\u00e4rel edastatakse ka kontod. Juhime t\u00e4helepanu sellele, et konto edastamine kaasneb l\u00fchikese ajavahemikuga e-posti postkasti k\u00e4ttesaamatusega, seega on m\u00f5istlik kasutajaid sellest teavitada. Lisaks saadetakse p\u00e4rast teise k\u00e4su t\u00e4itmist administraatori e-posti seonduv teavitusteade. T\u00e4nu sellele saab administraator maksimaalselt kiiresti alustada e-posti salvestuse uuendamist. <\/p>\n

Kui e-posti salvestuse tarkvara uuendamine toimub SaaS-teenuse pakkuja poolt, on palju m\u00f5istlikum andmete edastamine mitte kontode j\u00e4rgi, vaid domeenide kaupa, mis seal asuvad. Sellisteks eesm\u00e4rkideks piisab veidi muudetud k\u00e4sust:<\/p>\n

zxsuite powerstore doMailboxMove reserve_mailbox.saas.com domains client1.ru, client2.ru, client3.ru stages data
\nzxsuite powerstore doMailboxMove secureserver.saas.com domains client1.ru, client2.ru, client3.ru stages data,account notifications admin@saas.com<\/p><\/blockquote>\n

\nP\u00e4rast seda, kui kontode ja nende andmete edastamine e-posti salvestusest on toimunud, lakab andmed algses serveris olemast mingit v\u00e4\u00e4rtust ja saate alustada e-posti serveri uuendamist ilma mureta nende s\u00e4ilitamise p\u00e4rast.<\/p>\n

Nende jaoks, kes soovivad minimeerida seisakuaega e-posti postkastide edastamisel, sobib ideaalselt fundamentaalselt erinev k\u00e4su kasutamise stsenaarium zxsuite powerstore doMailboxMove<\/b>, mille sisu seisneb selles, et e-posti postkastid viiakse kohe uuendatud serveritesse, ilma vaheserverite kasutamise vajaduseta, serverid<\/a>. Teisis\u00f5nu, me lisame Zimbra infrastruktuuri uue e-posti salvestusruumi, mis on juba ajakohastatud viimane versioon, ja seej\u00e4rel viime lihtsalt juba tuttava stsenaariumi j\u00e4rgi \u00fcle arvestused vanalt serverilt ning kordame protseduuri, kuni k\u00f5ik infrastruktuuri serverid on uuendatud.<\/p>\n

Selline l\u00e4henemine v\u00f5imaldab kontode \u00fcleviimist teha \u00fche korra ning seet\u00f5ttu v\u00e4hendada aega, mille jooksul postkastid j\u00e4\u00e4vad k\u00e4ttesaamatuks. Lisaks on selleks vajalik vaid \u00fcks t\u00e4iendav e-posti server. Siiski peaks ettevaatlik olema nende administraatorite suhtes, kes deployivad e-posti salvestusruume erinevate konfiguratsioonidega serverites. Asi on selles, et suures koguses kontode \u00fcleviimine n\u00f5rgemale serverile v\u00f5ib negatiivselt m\u00f5jutada teenuse k\u00e4ttesaadavust ja reageerimiskiirust, mis v\u00f5ib olla \u00fcsna kriitiline suurte ettev\u00f5tete ja SaaS-teenusepakkujate jaoks.<\/p>\n

Nii saavad Zextras Backup ja Zextras PowerStore abil Zimbra s\u00fcsteemiadministraatorid uuendada k\u00f5iki Zimbra infrastruktuuri s\u00f5lmi ilma igasuguste riskideta nendele salvestatud teabe s\u00e4ilitamise osas.
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0422\u0430\u043a \u0443\u0436 \u0441\u043b\u043e\u0436\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0432\u0441\u0435\u0433\u0434\u0430 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0438\u0435\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a\u043e \u0432\u0441\u0435\u043c\u0443 \u043d\u043e\u0432\u043e\u043c\u0443. \u0411\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e \u0432\u0441\u0435, \u043d\u0430\u0447\u0438\u043d\u0430\u044f \u043e\u0442 \u043d\u043e\u0432\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043d\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c \u0434\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f \u0432\u043e\u0441\u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f \u0441 \u043d\u0430\u0441\u0442\u043e\u0440\u043e\u0436\u0435\u043d\u043d\u043e\u0441\u0442\u044c\u044e, \u0440\u043e\u0432\u043d\u043e \u0434\u043e \u0442\u0435\u0445 \u043f\u043e\u0440, \u043f\u043e\u043a\u0430 \u043d\u0435 \u043f\u043e\u044f\u0432\u0438\u0442\u0441\u044f \u043f\u0435\u0440\u0432\u044b\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043e\u043f\u044b\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u043f\u043e\u0437\u0438\u0442\u0438\u0432\u043d\u044b\u0435 \u043e\u0442\u0437\u044b\u0432\u044b \u043e\u0442 \u043a\u043e\u043b\u043b\u0435\u0433 \u0438\u0437 \u0434\u0440\u0443\u0433\u0438\u0445 \u043f\u0440\u0435\u0434\u043f\u0440\u0438\u044f\u0442\u0438\u0439. \u041e\u043d\u043e \u0438 \u043f\u043e\u043d\u044f\u0442\u043d\u043e, \u0432\u0435\u0434\u044c \u043a\u043e\u0433\u0434\u0430 \u0432 \u0431\u0443\u043a\u0432\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043c\u044b\u0441\u043b\u0435 \u0433\u043e\u043b\u043e\u0432\u043e\u0439 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":27084,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-36206","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Turvaline Zimbra Collaboration Suite uuendus | ProHoster","description":"Nii on juhtunud, et s\u00fcsteemiadministraatorid suhtuvad alati uutesse asjadesse ettevaatlikult.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/bezopasnoe-obnovlenie-zimbra-collaboration-suite","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0435 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 Zimbra Collaboration Suite | ProHoster","og:description":"\u0422\u0430\u043a \u0443\u0436 \u0441\u043b\u043e\u0436\u0438\u043b\u043e\u0441\u044c, \u0447\u0442\u043e \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0432\u0441\u0435\u0433\u0434\u0430 \u0441 \u043d\u0435\u0434\u043e\u0432\u0435\u0440\u0438\u0435\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u043a\u043e \u0432\u0441\u0435\u043c\u0443 \u043d\u043e\u0432\u043e\u043c\u0443.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/bezopasnoe-obnovlenie-zimbra-collaboration-suite","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:10:16+00:00","article:modified_time":"2019-10-31T19:10:16+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"36206","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 21:51:47","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:48:27","updated":"2026-02-09 21:51:47","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36206","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=36206"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36206\/revisions"}],"predecessor-version":[{"id":159775,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/36206\/revisions\/159775"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/27084"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=36206"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=36206"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=36206"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}