Aiwatar da wuraren aikin ofis na Zextras/Zimbra a cikin Yandex.Cloud

Gabatarwar

Inganta kayan aikin ofis da tura sabbin wuraren aiki babban ƙalubale ne ga kamfanoni na kowane iri da girma. Mafi kyawun zaɓi don sabon aikin shine hayan albarkatu a cikin gajimare da siyan lasisi waɗanda za a iya amfani da su duka daga mai samarwa da kuma a cikin cibiyar bayanan ku. Ɗayan mafita ga irin wannan yanayin shine Zextras Suite, wanda ke ba ku damar ƙirƙirar dandamali don haɗin gwiwa da sadarwar kamfanoni na kamfani duka a cikin yanayin girgije da kuma kan kayan aikin ku.

An tsara maganin don ofisoshi na kowane girman kuma yana da manyan al'amuran ƙaddamarwa guda biyu: idan kuna da akwatunan wasiku har zuwa dubu 3000 kuma babu manyan buƙatu don haƙurin kuskure, zaku iya amfani da shigarwar uwar garken guda ɗaya, da zaɓin shigarwar uwar garken da yawa. yana goyan bayan amintaccen aiki mai amsawa na dubun-dubatar akwatunan wasiku. A kowane hali, mai amfani yana samun damar yin amfani da wasiku, takardu da saƙonni ta hanyar haɗin yanar gizo guda ɗaya daga wurin aiki da ke gudanar da kowane OS ba tare da shigar da kuma daidaita ƙarin software ba, ko ta hanyar aikace-aikacen hannu na iOS da Android. Yana yiwuwa a yi amfani da saba Outlook da Thunderbird abokan ciniki.

Don tura aikin, abokin tarayya na Zextras - SVZ ya zaɓi Yandex.Cloud saboda tsarin gine-ginensa yana kama da AWS kuma akwai goyon baya ga S3 mai dacewa da ajiya, wanda zai rage farashin adana babban kundin wasiku, saƙonni da takardu kuma yana ƙara rashin haƙuri na maganin.

A cikin yanayin Yandex.Cloud, ana amfani da kayan aikin sarrafa injin kama-da-wane don shigar da uwar garken guda ɗaya "Compute Cloud" da damar sarrafa hanyar sadarwa ta kama-da-wane "Virtual Private Cloud". Don shigarwar uwar garken da yawa, ban da ƙayyadaddun kayan aiki, wajibi ne a yi amfani da fasaha "Rukunin Wuri", idan ya cancanta (dangane da ma'auni na tsarin) - kuma "Kungiyoyin Misali", da ma'auni na hanyar sadarwa Yandex Load Balancer.

Ma'ajiyar abu mai jituwa S3 Adana Abubuwan Yandex ana iya amfani da su a cikin zaɓuɓɓukan shigarwa guda biyu, kuma ana iya haɗa su zuwa tsarin da aka tura kan-gida don tattalin arziƙi da rashin haƙuri na ajiyar bayanan sabar sabar a cikin Yandex.Cloud.

Don shigarwar uwar garken guda ɗaya, dangane da adadin masu amfani da/ko akwatunan wasiku, ana buƙatar waɗannan abubuwan: don babban uwar garken 4-12 vCPU, 8-64 GB vRAM (takamaiman ƙimar vCPU da vRAM sun dogara da lambar. na akwatunan wasiku da ainihin kaya), aƙalla 80 GB na faifai don tsarin aiki da aikace-aikacen, da ƙarin sarari diski don adana wasiku, fihirisa, rajistan ayyukan, da sauransu, dangane da lamba da matsakaicin girman akwatunan wasiku kuma waɗanda zasu iya. canzawa mai ƙarfi yayin aikin tsarin; don sabar Docs masu taimako: 2-4 vCPU, 2-16 GB vRAM, 16 GB sarari diski (takamaiman ƙimar albarkatu da adadin sabar sun dogara da ainihin kaya); Bugu da ƙari, ana iya buƙatar uwar garken TURN/STUN (buƙatar sa azaman uwar garken daban da albarkatun sun dogara da ainihin nauyin). Don shigarwar sabar sabar da yawa, lamba da manufar injunan wasan kwaikwayo da kuma albarkatun da aka ware musu an ƙayyade su daban-daban dangane da buƙatun mai amfani.

Manufar labarin

Bayanin turawa a cikin mahallin Yandex.Cloud na samfuran Zextras Suite bisa tushen sabar saƙon Zimbra a zaɓin shigar uwar garken guda ɗaya. Za a iya amfani da shigarwar da aka samu a cikin yanayin samarwa (masu amfani da kwarewa zasu iya yin saitunan da suka dace da kuma ƙara albarkatun).

Tsarin Zextras Suite/Zimbra ya haɗa da:

• Zimbra - imel na kamfani tare da ikon raba akwatunan wasiku, kalanda da jerin lambobin sadarwa (littattafan adireshi).
• Zextras Docs - ginin ofishi da aka gina akan LibreOffice akan layi don ƙirƙira da haɗin gwiwa tare da takardu, maƙunsar bayanai, da gabatarwa.
• Zextras Drive - Adana fayil guda ɗaya wanda ke ba ku damar shirya, adanawa da raba fayiloli da manyan fayiloli tare da sauran masu amfani.
• Ƙungiyar Zextras – manzo mai goyan bayan taron sauti da bidiyo. Samfuran nau'ikan su ne Basic Team, wanda ke ba da damar sadarwar 1: 1 kawai, da Team Pro, wanda ke goyan bayan taron masu amfani da yawa, tashoshi, raba allo, raba fayil da sauran ayyuka.
• Zaxtras Mobile - goyan baya ga na'urorin hannu ta hanyar Exchange ActiveSync don aiki tare da wasiku tare da na'urorin hannu tare da ayyukan gudanarwa na MDM (Gudanar da Na'urar Waya). Yana ba ku damar amfani da Microsoft Outlook azaman abokin ciniki na imel.
• Zextras Admin - aiwatar da tsarin gudanarwa na masu haya da yawa tare da wakilan masu gudanarwa don sarrafa ƙungiyoyin abokan ciniki da nau'ikan ayyuka.
• Ajiyayyen Zextras - cikakken sake zagayowar data madadin da kuma dawo da a ainihin lokacin
• Zextras Powerstore - Adana tsarin abubuwa na tsarin wasiku tare da tallafi don azuzuwan sarrafa bayanai, tare da ikon adana bayanai a cikin gida ko cikin ma'ajiyar girgije na gine-ginen S3, gami da Adana Abubuwan Yandex.

Bayan kammala shigarwa, mai amfani yana karɓar tsarin aiki a cikin yanayin Yandex.Cloud.

Sharuɗɗa da ƙuntatawa

1. Ba a rufe sararin samaniya don akwatunan wasiku, fihirisa, da sauran nau'ikan bayanai saboda Zextras Powerstore yana goyan bayan nau'ikan ajiya da yawa. Nau'in da girman ajiya ya dogara da ayyuka da sigogin tsarin. Idan ya cancanta, ana iya yin hakan daga baya a cikin aiwatar da canza shigarwar da aka kwatanta zuwa na samarwa.
2. Don sauƙaƙe shigarwa, ba a la'akari da amfani da uwar garken DNS mai sarrafa mai gudanarwa don warware sunayen yanki na ciki (wanda ba na jama'a ba) ba; ana amfani da daidaitaccen uwar garken Yandex.Cloud DNS. Lokacin amfani da shi a cikin yanayin samarwa, ana ba da shawarar yin amfani da uwar garken DNS, wanda ƙila ya riga ya wanzu a cikin abubuwan haɗin gwiwa.
3. Ana ɗauka cewa ana amfani da asusu a cikin Yandex.Cloud tare da saitunan tsoho (musamman, lokacin shiga cikin "Console" na sabis ɗin, akwai kundin adireshi kawai (a cikin jerin "Gajimare mai samuwa" a ƙarƙashin sunan tsoho). saba da aiki a Yandex.Cloud, Za su iya, bisa ga ra'ayinsu, ƙirƙirar kundin adireshi daban don benci na gwaji, ko amfani da wanda yake akwai.
4. Dole ne mai amfani ya sami yankin DNS na jama'a wanda dole ne su sami damar gudanarwa.
5. Dole ne mai amfani ya sami damar yin amfani da kundin adireshi a cikin Yandex.Cloud "Console" tare da aƙalla rawar "edita" ("Mai mallakar Cloud" yana da duk haƙƙoƙin da suka dace ta tsohuwa; akwai jagororin ba da damar yin amfani da gajimare ga sauran masu amfani. : sau, два, uku)
6. Wannan labarin baya bayyana shigar da takaddun takaddun X.509 na al'ada da ake amfani da su don amintar sadarwar hanyar sadarwa ta amfani da hanyoyin TLS. Da zarar an gama shigarwa, za a yi amfani da takaddun shaida masu hannu da shuni, wanda zai ba da damar yin amfani da masu bincike don samun damar shigar da tsarin. Yawancin lokaci suna nuna sanarwar cewa uwar garken ba ta da takaddun shaida, amma tana ba ku damar ci gaba da aiki. Har sai an tabbatar da shigar da takaddun shaida ta na'urorin abokin ciniki (wanda jama'a da/ko hukumomin takaddun shaida suka sanya hannu), aikace-aikacen na'urorin hannu na iya yin aiki tare da tsarin da aka shigar. Don haka, shigar da takamaiman takaddun shaida a cikin yanayin samarwa ya zama dole, kuma ana aiwatar da shi bayan kammala gwajin daidai da manufofin tsaro na kamfanoni.

Bayanin tsarin shigarwa na tsarin Zextras/Zimbra a cikin sigar “uwar garken guda ɗaya”

1. Shiri na farko

Kafin fara shigarwa dole ne ka tabbatar:

a) Yin canje-canje ga yankin DNS na jama'a (ƙirƙirar rikodin sabar Zimbra da rikodin MX don yankin saƙon da aka yi aiki).
b) Ƙirƙirar kayan aikin cibiyar sadarwar kama-da-wane a cikin Yandex.Cloud.

A lokaci guda, bayan yin canje-canje zuwa yankin DNS, yana ɗaukar ɗan lokaci don waɗannan canje-canje su yaɗa, amma, a gefe guda, ba za ku iya ƙirƙirar rikodin A ba tare da sanin adireshin IP ɗin da ke da alaƙa da shi ba.

Don haka, ana yin ayyuka a cikin jeri mai zuwa:

1. Ajiye adireshin IP na jama'a a cikin Yandex.Cloud

1.1 A cikin "Yandex.Cloud Console" (idan ya cancanta, zaɓi manyan fayiloli a cikin "samuwar gajimare"), je zuwa sashin Cloud Private Cloud, sashe na adiresoshin IP, sannan danna maɓallin "Ajiye adireshin", zaɓi yankin da kuka fi so (ko yarda). tare da ƙimar da aka tsara; dole ne a yi amfani da wannan yankin samuwa daga baya don duk ayyukan da aka bayyana daga baya a cikin Yandex.Cloud, idan siffofin da suka dace suna da zaɓi don zaɓar yankin samuwa), a cikin akwatin maganganu da ke buɗewa, zaku iya, idan ana so, amma ba lallai ba ne, zaɓi zaɓin "Kariyar DDoS", sannan danna maɓallin "Ajiye" (duba kuma takardun shaida).

Bayan rufe maganganun, adireshin IP na tsaye wanda tsarin ya keɓe zai kasance a cikin jerin adiresoshin IP, waɗanda za a iya kwafi da amfani da su a mataki na gaba.

1.2 A cikin "gaba" DNS yankin, yi rikodin don uwar garken Zimbra yana nuni zuwa adireshin IP da aka ware a baya, rikodin don uwar garken TURN yana nuni zuwa adireshin IP iri ɗaya, da rikodin MX don yankin saƙon da aka karɓa. A cikin misalinmu, waɗannan za su zama mail.testmail.svzcloud.ru (Sabar Zimbra), turn.testmail.svzcloud.ru (Sarkar TURN), da testmail.svzcloud.ru (yankin saƙo), bi da bi.

1.3 A cikin Yandex.Cloud, a cikin yankin da aka zaɓa don rukunin yanar gizo wanda za a yi amfani da shi don tura injunan kama-da-wane, kunna NAT akan Intanet.

Don yin wannan, a cikin sashin Cloud Private Private Cloud, karamin sashe "Cibiyoyin Sadarwar Cloud", zaɓi cibiyar sadarwar da ta dace (ta tsohuwa, tsohuwar hanyar sadarwa tana can), zaɓi yankin da ya dace a ciki kuma zaɓi "Kunna NAT akan Intanet. ” a cikin saitunan sa.

Matsayin zai canza a cikin jerin hanyoyin sadarwa:

Don ƙarin cikakkun bayanai, duba takaddun: sau и два.

2. Ƙirƙirar injuna masu kama-da-wane

2.1. Ƙirƙirar injin kama-da-wane don Zimbra

Tsarin ayyukan:

2.1.1 A cikin "Yandex.Cloud Console", je zuwa sashin Compute Cloud, karamin sashe "Injini na gani", danna maɓallin "Create VM" (don ƙarin bayani kan ƙirƙirar VM, duba. takardun shaida).

2.1.2 A can kuna buƙatar saita:

• Suna - sabani (daidai da tsarin da Yandex.Cloud ke tallafawa)
• Yankin samuwa – dole ne ya dace da wanda aka zaɓa a baya don cibiyar sadarwar kama-da-wane.
• A cikin "Hotunan Jama'a" zaɓi Ubuntu 18.04 lts
• Sanya faifan boot na aƙalla girman 80GB. Don dalilai na gwaji, nau'in HDD ya wadatar (kuma kuma don amfani mai amfani, idan har an canza wasu nau'ikan bayanai zuwa diski irin na SSD). Idan ya cancanta, ana iya ƙara ƙarin fayafai bayan ƙirƙirar VM.

A cikin saitin “albarkatun lissafi”:

• vCPU: akalla 4.
• Tabbatar da rabon vCPU: na tsawon lokacin ayyukan da aka bayyana a cikin labarin, aƙalla 50%; bayan shigarwa, idan ya cancanta, ana iya rage shi.
• RAM: 8GB shawarar.
• Subnet: zaɓi wani yanki wanda aka kunna Intanet NAT a lokacin matakin shiri na farko.
• Adireshin jama'a: zaɓi daga lissafin adireshin IP ɗin da aka yi amfani da shi a baya don ƙirƙirar rikodin A a cikin DNS.
• Mai amfani: bisa ga ra'ayinka, amma ya bambanta da tushen mai amfani da asusun tsarin Linux.
• Dole ne ku saka maɓalli na jama'a (buɗe) SSH.

→ Ƙara koyo game da amfani da SSH

Duba kuma 1 app. Ƙirƙirar maɓallan SSH a cikin openssh da putty da canza maɓallan daga putty zuwa tsarin openssh.

2.1.3 Da zarar an gama saitin, danna "Ƙirƙiri VM".

2.2. Ƙirƙirar injin kama-da-wane don Zextras Docs

Tsarin ayyukan:

2.2.1 A cikin "Yandex.Cloud Console", je zuwa sashin Compute Cloud, karamin sashe "Injini na gani", danna maɓallin "Create VM" (don ƙarin bayani kan ƙirƙirar VM, duba. a nan).

2.2.2 A can kuna buƙatar saita:

• Suna - sabani (daidai da tsarin da Yandex.Cloud ke tallafawa)
• Yankin samuwa – dole ne ya dace da wanda aka zaɓa a baya don cibiyar sadarwar kama-da-wane.
• A cikin "Hotunan Jama'a" zaɓi Ubuntu 18.04 lts
• Sanya faifan boot na aƙalla girman 80GB. Don dalilai na gwaji, nau'in HDD ya wadatar (kuma kuma don amfani mai amfani, idan har an canza wasu nau'ikan bayanai zuwa diski irin na SSD). Idan ya cancanta, ana iya ƙara ƙarin fayafai bayan ƙirƙirar VM.

A cikin saitin “albarkatun lissafi”:

• vCPU: akalla 2.
• Tabbatar da rabon vCPU: na tsawon lokacin ayyukan da aka bayyana a cikin labarin, aƙalla 50%; bayan shigarwa, idan ya cancanta, ana iya rage shi.
• RAM: akalla 2GB.
• Subnet: zaɓi wani yanki wanda aka kunna Intanet NAT a lokacin matakin shiri na farko.
• Adireshin jama'a: babu adireshi (wannan injin baya buƙatar samun dama daga Intanet, samun damar fita daga wannan na'ura zuwa Intanet, wanda zaɓin "NAT zuwa Intanet" zaɓi na subnet ɗin da aka yi amfani da shi).
• Mai amfani: bisa ga ra'ayinka, amma ya bambanta da tushen mai amfani da asusun tsarin Linux.
• Tabbas dole ne ku saita maɓallin SSH na jama'a (buɗe), zaku iya amfani da ɗaya da na uwar garken Zimbra, zaku iya ƙirƙirar maɓalli daban daban, tunda maɓallin keɓaɓɓen uwar garken Zextras Docs zai buƙaci a sanya shi akan sabar Zimbra. faifai.

Duba kuma Karin Bayani na 1. Ƙirƙirar maɓallan SSH a cikin openssh da putty da kuma canza maɓallan daga putty zuwa tsarin openssh.

2.2.3 Da zarar an gama saitin, danna "Ƙirƙiri VM".

2.3 Na'urorin da aka ƙirƙira za su kasance a cikin jerin injunan kama-da-wane, waɗanda ke nuna, musamman, matsayinsu da adiresoshin IP da ake amfani da su, na jama'a da na ciki. Za a buƙaci bayani game da adiresoshin IP a matakan shigarwa na gaba.

3. Ana shirya uwar garken Zimbra don shigarwa

3.1 Ana shigar da sabuntawa

Kuna buƙatar shiga cikin uwar garken Zimbra a adireshin IP na jama'a ta amfani da abokin ciniki na ssh da kuka fi so ta amfani da maɓallin ssh mai zaman kansa da kuma amfani da sunan mai amfani da aka ƙayyade lokacin ƙirƙirar injin kama-da-wane.

Bayan shiga, gudanar da umarni:

sudo apt update
sudo apt upgrade

(lokacin aiwatar da umarni na ƙarshe, amsa "y" ga tambayar game da ko kuna da tabbacin shigar da jerin abubuwan sabuntawa da aka tsara)

Bayan shigar da sabuntawar, zaku iya (amma ba a buƙata) gudanar da umarni:

sudo apt autoremove

Kuma a ƙarshen mataki, gudanar da umarni

sudo shutdown –r now

3.2 Ƙarin shigarwa na aikace-aikace

Kuna buƙatar shigar da abokin ciniki na NTP don daidaita lokacin tsarin da aikace-aikacen allo tare da umarni mai zuwa:

sudo apt install ntp screen

(Lokacin aiwatar da umarni na ƙarshe, amsa "y" lokacin da aka tambaye ku idan kun tabbata kun shigar da jerin fakitin da aka haɗe)

Hakanan zaka iya shigar da ƙarin kayan aiki don dacewar mai gudanarwa. Misali, ana iya shigar da Kwamandan Midnight tare da umarnin:

sudo apt install mc

3.3. Canza tsarin tsarin

3.3.1 A cikin fayil /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg canza siga darajar sarrafa_etc_hosts c gaskiya a kan arya.

Lura: don canza wannan fayil ɗin, dole ne a gudanar da editan tare da haƙƙin mai amfani, misali, "sudo vi /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg"ko, idan an shigar da kunshin mc, za ku iya amfani da umarnin"sudo mcedit /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg»

3.3.2 Gyara / sauransu / runduna kamar haka, maye gurbin a cikin layin da ke bayyana FQDN mai masaukin adireshin daga 127.0.0.1 zuwa adireshin IP na ciki na wannan uwar garken, da sunan daga cikakken suna a cikin yankin .internal zuwa sunan jama'a na uwar garken da aka ƙayyade a baya a cikin A. -record na yankin DNS, da madaidaicin canza gajeriyar sunan mai watsa shiri ta wannan hanyar (idan ya bambanta da gajeriyar sunan mai masauki daga rakodin DNS A na jama'a).

Misali, a yanayinmu fayil ɗin runduna yayi kama da:

Bayan gyara ya yi kama da haka:

Lura: don canza wannan fayil ɗin, dole ne a gudanar da editan tare da haƙƙin mai amfani, misali, "sudo vi /etc/hosts"ko, idan an shigar da kunshin mc, za ku iya amfani da umarnin"sudo mcedit /etc/hosts»

3.4 Saita kalmar sirrin mai amfani

Wannan ya zama dole saboda gaskiyar cewa a nan gaba za a saita Tacewar zaɓi, kuma idan duk wata matsala ta taso tare da shi, idan mai amfani yana da kalmar wucewa, zai yiwu a shiga cikin na'ura mai mahimmanci ta amfani da na'urar wasan bidiyo ta Yandex. Cloud na'ura wasan bidiyo da kuma musaki Tacewar zaɓi da/ko gyara kuskure. Lokacin ƙirƙirar injin kama-da-wane, mai amfani ba shi da kalmar sirri, sabili da haka samun dama yana yiwuwa ta hanyar SSH ta amfani da ingantaccen maɓalli.

Don saita kalmar wucewa kuna buƙatar gudanar da umarni:

sudo passwd <имя пользователя>

Misali, a cikin yanayinmu zai zama umarnin "sudo passwd mai amfani".

4. Shigar da Zimbra da Zextras Suite

4.1. Zazzagewar Zimbra da Zextras Suite

4.1.1 Zazzage rarraba Zimbra

Tsarin ayyukan:

1) Je zuwa URL tare da mai bincike www.zextras.com/download-zimbra-9 kuma cike fom. Za ku karɓi imel tare da hanyoyin haɗin yanar gizo don zazzage Zimbra don OS daban-daban.

2) Zaɓi nau'in rarrabawa na yanzu don dandalin Ubuntu 18.04 LTS kuma kwafi hanyar haɗin

3) Zazzage rarrabawar Zimbra zuwa uwar garken Zimbra kuma a kwaɓe shi. Don yin wannan, gudanar da umarni a cikin zaman ssh akan sabar zimbra

cd ~
mkdir zimbra
cd zimbra
wget <url, скопированный на предыдущем шаге>
tar –zxf <имя скачанного файла>

(a cikin misalinmu wannan shine "tar –zxf zcs-9.0.0_OSE_UBUNTU18_latest-zextras.tgz")

4.1.2 Zazzage rarrabawar Zextras Suite

Tsarin ayyukan:

1) Je zuwa URL tare da mai bincike www.zextras.com/download

2) Cika fam ɗin ta shigar da bayanan da ake buƙata kuma danna maɓallin "SAUKAR DA YANZU".

3) Zazzage shafin zai buɗe

Yana da URL guda biyu masu ban sha'awa a gare mu: ɗaya a saman shafin don Zextras Suite kanta, wanda za mu buƙaci yanzu, ɗayan kuma a ƙasa a cikin Docs Server toshe don Ubuntu 18.04 LTS, wanda za a buƙaci daga baya. shigar da Dokokin Zextras akan VM don Docs.

4) Zazzage rarrabawar Zextras Suite zuwa uwar garken Zimbra kuma a kwaɓe shi. Don yin wannan, gudanar da umarni a cikin zaman ssh akan sabar zimbra

cd ~
mkdir zimbra
cd zimbra

(idan kundin adireshi na yanzu bai canza ba bayan matakin da ya gabata, ana iya barin umarnin da ke sama)

wget http://download.zextras.com/zextras_suite-latest.tgz
tar –zxf zextras_suite-latest.tgz

4.2. Shigar da Zimbra

Tsarin ayyukan

1) Je zuwa kundin adireshi inda aka cire fayilolin a mataki na 4.1.1 (ana iya duba shi tare da umarnin ls yayin da yake cikin ~/zimbra directory).

A cikin misalinmu zai kasance:

cd ~/zimbra/zcs-9.0.0_OSE_UBUNTU18_latest-zextras/zimbra-installer

2) Gudanar da shigarwar Zimbra ta amfani da umarnin

sudo ./install.sh

3) Muna amsa tambayoyin mai sakawa

Kuna iya amsa tambayoyin mai sakawa da “y” (daidai da “eh”), “n” (ya yi daidai da “a’a”), ko barin shawarar mai sakawa ba ta canzawa (yana ba da zaɓuɓɓuka, yana nuna su a madaukai, misali, “ [Y]" ko "[N]."

Shin kun yarda da sharuɗɗan yarjejeniyar lasisin software? - Da.

Yi amfani da ma'ajiyar fakitin Zimbra? - ta hanyar tsoho (yes).

"Shigar da zimbra-ldap?","Shigar da zimbra-logger?","Shigar da zimbra-mta?"- tsoho (yes).

Shigar zimbra-dnscache? - a'a (tsarin aiki yana da nasa uwar garken DNS na caching wanda aka kunna ta tsohuwa, don haka wannan kunshin zai sami rikici da shi saboda tashoshin jiragen ruwa da aka yi amfani da su).

Shigar zimbra-snmp? - idan ana so, zaku iya barin zaɓi na tsoho (e), ba lallai ne ku shigar da wannan fakitin ba. A cikin misalinmu, an bar zaɓin tsoho.

"Sanya zimbra-store?","Shigar da zimbra-apache?","Sanya zimbra-spell?","Sanya zimbra-memcached?","Sanya zimbra-proxy?"- tsoho (yes).

Shigar zimbra-snmp? - a'a (a zahiri ba a tallafawa fakitin kuma Zextras Drive ya maye gurbinsa da aiki).

Shigar da zimbra-imapd? - tsoho (babu).

Shigar zimbra-chat? - a'a (aikin Zextras ya maye gurbinsa)

Bayan haka mai sakawa zai tambayi ko ya ci gaba da shigarwa?

Mun amsa "eh" idan za mu iya ci gaba, in ba haka ba za mu amsa "a'a" kuma mu sami damar canza amsoshin tambayoyin da aka yi a baya.

Bayan yarda don ci gaba, mai sakawa zai shigar da fakitin.

4.) Muna amsa tambayoyi daga mai daidaitawa na farko

4.1) Tun da a cikin misalin mu sunan DNS na sabar saƙon (Sunan rikodin) da sunan yankin wasiƙar da aka yi aiki ( MX rikodin sunan) sun bambanta, mai daidaitawa yana nuna gargaɗi kuma ya sa ka saita sunan yankin saƙon da aka yi aiki. Mun yarda da shawararsa kuma mun shigar da sunan rikodin MX. A cikin misalinmu yana kama da haka:

Lura: Hakanan zaka iya saita yankin saƙon da aka yi aiki ya bambanta da sunan uwar garken idan sunan uwar garken yana da rikodin MX na suna iri ɗaya.

4.2) Mai daidaitawa yana nuna babban menu.

Muna buƙatar saita kalmar wucewa ta mai gudanarwa na Zimbra (menu abu na 6 a cikin misalinmu), ba tare da wanda ba zai yuwu a ci gaba da shigarwa ba, kuma canza saitunan zimbra-proxy (menu abu na 8 a cikin misalinmu; idan ya cancanta, ana iya canza wannan saitin. bayan shigarwa).

4.3) Canza saitunan kantin sayar da zimbra

A cikin faɗakarwa mai daidaitawa, shigar da lambar abin menu kuma danna Shigar. Muna zuwa menu na saitunan ajiya:

inda a cikin gayyata mai daidaitawa za mu shigar da lambar abin menu na Admin Password (a cikin misalinmu na 4), danna Shigar, bayan haka mai daidaitawa yana ba da kalmar sirri ba da gangan ba, wanda zaku iya yarda da (tunawa da shi) ko shigar da naku. A kowane hali, a karshen dole ne ka danna Shigar, bayan haka abu "Admin Password" zai cire alamar jiran shigarwar bayanai daga mai amfani:

Muna komawa zuwa menu na baya (mun yarda da shawarar mai daidaitawa).

4.4) Canza saitunan zimbra-proxy

Ta hanyar kwatankwacin matakin da ya gabata, a cikin babban menu, zaɓi lambar abin "zimbra-proxy" kuma shigar da shi cikin saurin daidaitawa.

A cikin menu na saitin wakili wanda ke buɗewa, zaɓi lambar abin "Tsarin uwar garken wakili" kuma shigar da shi cikin saurin daidaitawa.

Mai daidaitawa zai bayar don zaɓar ɗaya daga cikin hanyoyin, shigar da “redirect” cikin hanzarin sa kuma danna Shigar.

Bayan haka muna komawa zuwa babban menu (mun yarda da shawarar mai daidaitawa).

4.5) Tsarin aiki

Don fara daidaitawa, shigar da “a” a cikin faɗakarwar mai daidaitawa. Bayan haka za ta tambayi ko za a adana saitunan da aka shigar zuwa fayil (wanda za'a iya amfani dashi don sake shigar da shi) - za ku iya yarda da tsarin tsoho, idan an yi ajiyar ajiya - zai tambayi a cikin wane fayil don adana tsarin (ku. Hakanan zaka iya yarda da tsararren tsari ko shigar da sunan fayil naka).

A wannan mataki, har yanzu za ku iya ƙi ci gaba da yin canje-canje ga tsarin ta hanyar yarda da tsohuwar amsar tambayar "Za a gyara tsarin - ci gaba?"

Don fara shigarwa, dole ne ku amsa "Ee" ga wannan tambayar, bayan haka mai daidaitawa zai yi amfani da saitunan da aka shigar a baya na ɗan lokaci.

4.6) Ana kammala shigarwar Zimbra

Kafin kammalawa, mai sakawa zai tambaya ko zai sanar da Zimbra game da shigarwar. Kuna iya ko dai yarda da tsohuwar shawara ko ƙi (ta hanyar amsa “A’a”) sanarwar.

Bayan haka mai sakawa zai ci gaba da yin ayyuka na ƙarshe na ɗan lokaci kuma ya nuna sanarwar cewa tsarin tsarin ya cika tare da faɗakarwa don danna kowane maɓalli don fita daga mai sakawa.

4.3. Shigar da Zextras Suite

Don ƙarin bayani game da shigar da Zextras Suite, duba umarni.

Tsarin ayyukan:

1) Je zuwa kundin adireshi inda aka cire fayilolin a mataki na 4.1.2 (ana iya duba shi tare da umarnin ls yayin da yake cikin ~/zimbra directory).

A cikin misalinmu zai kasance:

cd ~/zimbra/zextras_suite

2) Gudanar da shigarwar Zextras Suite ta amfani da umarnin

sudo ./install.sh all

3) Muna amsa tambayoyin mai sakawa

Ka'idar aiki na mai sakawa yayi kama da na mai sakawa na Zimbra, sai dai rashin na'urar daidaitawa. Kuna iya amsa tambayoyin mai sakawa da “y” (daidai da “yes”), “n” (ya yi daidai da “a’a”), ko barin shawarar mai sakawa ba ta canzawa (yana ba da zaɓuɓɓuka, yana nuna su a cikin madauri, misali, “ [Y]" ko "[N]."

Don fara aikin shigarwa, dole ne ku amsa “eh” akai-akai ga tambayoyi masu zuwa:

Shin kun yarda da sharuɗɗan yarjejeniyar lasisin software?
Kuna son Zextras Suite ya zazzagewa, shigar da haɓaka ɗakin karatu na ZAL ta atomatik?

Bayan haka za a nuna sanarwar da ke neman ka danna Shigar don ci gaba:

Bayan danna Shigar, tsarin shigarwa zai fara, wani lokacin tambayoyi yana katsewa, wanda, duk da haka, muna amsawa ta hanyar yarda da shawarwarin da aka saba ("e"), wato:

Za a shigar da Zextras Suite Core yanzu. Ci gaba?
Kuna so a dakatar da Zimbra Web Application (akwatin wasiku)?
Za a shigar da Zextras Suite Zimlet yanzu. Ci gaba?

Kafin sashin ƙarshe na shigarwa ya fara, za a sanar da ku cewa kuna buƙatar saita tacewar DOS kuma ku nemi ku danna Shigar don ci gaba. Bayan danna Shigar, ɓangaren ƙarshe na shigarwa yana farawa, a ƙarshe ana nuna sanarwar ƙarshe kuma mai sakawa ya kammala.

4.4. Gyaran saitin farko da ƙayyadaddun sigogin daidaitawar LDAP

1) Ana yin duk ayyuka na gaba a ƙarƙashin mai amfani da zimbra. Don yin wannan kuna buƙatar gudanar da umarni

sudo su - zimbra

2) Canja saitin tacewa DOS tare da umarni

zmprov mcf zimbraHttpDosFilterMaxRequestsPerSec 150

3) Don shigar da Dokokin Zextras, kuna buƙatar bayani game da wasu zaɓuɓɓukan sanyi na Zimbra. Don yin wannan zaka iya gudanar da umarni:

zmlocalconfig –s | grep ldap

A cikin misalinmu, za a nuna bayanan masu zuwa:

Don ƙarin amfani, kuna buƙatar ldap_url, zimbra_ldap_password (da zimbra_ldap_usardn, kodayake mai sakawa Zextras Docs yawanci yana yin hasashen daidai game da sunan mai amfani na LDAP).

4) Bar a matsayin mai amfani da zimbra ta hanyar gudanar da umarni
logout

5. Ana shirya uwar garken Docs don shigarwa

5.1. Ana loda maɓallin keɓaɓɓen SSH zuwa uwar garken Zimbra da shiga uwar garken Docs

Wajibi ne a sanya maɓalli na sirri na maɓallan SSH akan uwar garken Zimbra, maɓallin jama'a wanda aka yi amfani da shi a mataki na 2.2.2 na sakin layi na 2.2 lokacin ƙirƙirar injin kama-da-wane na Docs. Ana iya loda shi zuwa uwar garken ta hanyar SSH (misali, ta sftp) ko liƙa ta hanyar allo (idan damar abokin ciniki na SSH da aka yi amfani da shi da yanayin aiwatar da shi ya ba da izini).

Muna ɗauka cewa an sanya maɓalli na sirri a cikin fayil ~/.ssh/docs.key kuma mai amfani da aka yi amfani da shi don shiga uwar garken Zimbra shine mai shi (idan an aiwatar da zazzagewa/ ƙirƙirar wannan fayil ɗin ƙarƙashin wannan mai amfani, yana ta atomatik. ya zama mai shi).

Kuna buƙatar gudanar da umarni sau ɗaya:

chmod 600 ~/.ssh/docs.key

A nan gaba, don shiga cikin uwar garken Docs, dole ne ku aiwatar da jerin ayyuka masu zuwa:

1) Shiga uwar garken Zimbra

2) Gudun umarni

ssh -i ~/.ssh/docs.key user@<внутренний ip-адрес сервера Docs>

Inda za a iya samun ƙimar <adireshin IP na ciki na uwar garken Docs> a cikin "Yandex.Cloud Console", misali, kamar yadda aka nuna a sakin layi na 2.3.

5.2. Ana shigar da sabuntawa

Bayan shiga cikin uwar garken Docs, gudanar da umarni kama da na uwar garken Zimbra:

sudo apt update
sudo apt upgrade

(lokacin aiwatar da umarni na ƙarshe, amsa "y" ga tambayar game da ko kuna da tabbacin shigar da jerin abubuwan sabuntawa da aka tsara)

Bayan shigar da sabuntawar, zaku iya (amma ba a buƙata) gudanar da umarni:

sudo apt autoremove

Kuma a ƙarshen mataki, gudanar da umarni

sudo shutdown –r now

5.3. Ƙarin shigarwa na aikace-aikace

Kuna buƙatar shigar da abokin ciniki na NTP don daidaita lokacin tsarin da aikace-aikacen allo, kama da aikin iri ɗaya na uwar garken Zimbra, tare da umarni mai zuwa:

sudo apt install ntp screen

(Lokacin aiwatar da umarni na ƙarshe, amsa "y" lokacin da aka tambaye ku idan kun tabbata kun shigar da jerin fakitin da aka haɗe)

Hakanan zaka iya shigar da ƙarin kayan aiki don dacewar mai gudanarwa. Misali, ana iya shigar da Kwamandan Midnight tare da umarnin:

sudo apt install mc

5.4. Canza tsarin tsarin

5.4.1. A cikin fayil /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg, kamar yadda na uwar garken Zimbra, canza darajar siginar sarrafa_etc_hosts daga gaskiya zuwa ƙarya.

Lura: don canza wannan fayil ɗin, dole ne a gudanar da editan tare da haƙƙin mai amfani, misali, "sudo vi /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg"ko, idan an shigar da kunshin mc, za ku iya amfani da umarnin"sudo mcedit /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg»

5.4.2. Shirya /etc/hosts, ƙara jama'a FQDN na uwar garken Zimbra, amma tare da adireshin IP na ciki wanda Yandex.Cloud ya sanya. Idan kana da uwar garken DNS na ciki da ke sarrafa mai gudanarwa wanda injinan kama-da-wane ke amfani da shi (misali, a cikin yanayin samarwa), kuma mai ikon warware FQDN na jama'a na sabar Zimbra tare da adireshin IP na ciki lokacin karɓar buƙatu daga hanyar sadarwa ta ciki (don buƙatun daga Intanet, FQDN na uwar garken Zimbra dole ne a warware shi tare da adireshin IP na jama'a, kuma dole ne a warware uwar garken TURN koyaushe ta hanyar adireshin IP na jama'a, gami da lokacin shiga daga adiresoshin ciki), wannan aikin ba a buƙata.

Misali, a yanayinmu fayil ɗin runduna yayi kama da:

Bayan gyara ya yi kama da haka:

Lura: don canza wannan fayil ɗin, dole ne a gudanar da editan tare da haƙƙin mai amfani, misali, "sudo vi /etc/hosts"ko, idan an shigar da kunshin mc, za ku iya amfani da umarnin"sudo mcedit /etc/hosts»

6. Shigar da Zextras Docs

6.1. Shiga zuwa uwar garken Docs

Hanyar shiga cikin uwar garken Docs an bayyana shi a cikin sashe na 5.1.

6.2. Zazzage rarrabawar Zextras Docs

Tsarin ayyukan:

1) Daga shafin wanda a cikin sashe na 4.1.2. Zazzage rarrabawar Zextras Suite Zazzage rarrabawar Zextras Suite (a mataki na 3), kwafi URL don gina Docs don Ubuntu 18.04 LTS (idan ba a kwafi a baya ba).

2) Zazzage rarrabawar Zextras Suite zuwa uwar garken Zimbra kuma a kwaɓe shi. Don yin wannan, gudanar da umarni a cikin zaman ssh akan sabar zimbra

cd ~
mkdir zimbra
cd zimbra
wget <URL со страницы скачивания>

(a cikin yanayinmu ana aiwatar da umarnin "wget". download.zextras.com/zextras-docs-installer/latest/zextras-docs-ubuntu18.tgz»)

tar –zxf <имя скачанного файла>

(a cikin yanayinmu, ana aiwatar da umarnin “tar –zxf zextras-docs-ubuntu18.tgz”)

6.3. Shigar da Dokokin Zextras

Don ƙarin bayani game da shigarwa da daidaitawa Zextras Docs, duba a nan.

Tsarin ayyukan:

1) Je zuwa kundin adireshi inda aka cire fayilolin a mataki na 4.1.1 (ana iya duba shi tare da umarnin ls yayin da yake cikin ~/zimbra directory).

A cikin misalinmu zai kasance:

cd ~/zimbra/zextras-docs-installer

2) Gudanar da shigarwar Zextras Docs ta amfani da umarnin

sudo ./install.sh

3) Muna amsa tambayoyin mai sakawa

Kuna iya amsa tambayoyin mai sakawa da “y” (daidai da “yes”), “n” (ya yi daidai da “a’a”), ko barin shawarar mai sakawa ba ta canzawa (yana ba da zaɓuɓɓuka, yana nuna su a cikin madauri, misali, “ [Y]" ko "[N]")).

Za a gyara tsarin, kuna son ci gaba? – yarda da tsoho zaɓi ("e").

Bayan haka, za a fara shigar da abubuwan dogaro: mai sakawa zai nuna waɗanne fakitin da yake son sanyawa kuma ya nemi tabbaci don shigar da su. A kowane hali, mun yarda da tsoffin tayin.

Misali, yana iya tambaya "python2.7 ba a samu ba. Kuna so ku girka shi?","python-ldap ba a samu ba. Kuna so ku girka shi?"da dai sauransu.

Bayan shigar da duk fakitin da suka dace, mai sakawa ya nemi izinin shigar da Dokokin Zextras:

Kuna son shigar da Zextras DOCS? – yarda da tsoho zaɓi ("e").

Bayan haka an ɗauki ɗan lokaci don shigar da fakitin, Zextras Docs kanta, da matsawa zuwa tambayoyin daidaitawa.

4) Muna amsa tambayoyi daga mai daidaitawa

Mai daidaitawa yana buƙatar sigogin daidaitawa ɗaya bayan ɗaya; a cikin martani, ana shigar da ƙimar da aka samu a mataki na 3 a cikin sashe na 4.4. Tunanin farko na saituna da ƙayyadaddun sigogin daidaitawar LDAP.

A cikin misalinmu, saitunan sun yi kama da:

5) Ana kammala shigarwa na Zextras Docs

Bayan amsa tambayoyin mai daidaitawa, mai sakawa ya kammala tsarin Docs na gida kuma ya yi rajistar sabis ɗin da aka shigar akan babban sabar Zimbra da aka shigar a baya.

Don shigarwar uwar garken guda ɗaya, wannan yawanci ya isa, amma a wasu lokuta (idan ba za a buɗe takardu ba a cikin Docs a cikin abokin ciniki na gidan yanar gizo akan shafin Drive) kuna iya buƙatar aiwatar da aikin da ake buƙata don shigarwar uwar garken da yawa. - a cikin misalinmu, akan babban uwar garken Zimbra, kuna buƙatar aiwatar da shi daga ƙarƙashin mai amfani da Ƙungiyoyin Zimbra /opt/zimbra/libexec/zmproxyconfgen и zmproxyctl sake kunnawa.

7. Saitin farko na Zimbra da Zextras Suite (sai dai Ƙungiya)

7.1. Shiga admin console a karon farko

Shiga browser ta amfani da URL: https:// : 7071

Idan ana so, zaku iya shiga cikin abokin ciniki na gidan yanar gizo ta amfani da URL: https://

Lokacin shiga, masu bincike suna nuna gargaɗi game da haɗin gwiwa mara tsaro saboda rashin iya tantance takaddun shaida. Dole ne ku ba da amsa ga mai bincike game da izinin ku don zuwa rukunin yanar gizon duk da wannan gargaɗin. Wannan shi ne saboda gaskiyar cewa bayan shigarwa, ana amfani da takardar shaidar X.509 mai sa hannu don haɗin TLS, wanda daga baya (a cikin amfani mai amfani - ya kamata) za a maye gurbin shi da takardar shaidar kasuwanci ko wata takardar shaidar da masu bincike suka gane.

A cikin sigar tantancewa, shigar da sunan mai amfani a tsarin admin@< yankin wasiku da aka karɓa> da kalmar sirrin mai gudanarwa na Zimbra da aka ƙayyade lokacin shigar da uwar garken Zimbra a mataki na 4.3 a cikin sashe na 4.2.

A cikin misalinmu yana kama da haka:

Admin Console:

Abokin yanar gizo:

Lura 1. Idan ba ku ƙididdige yankin saƙon da aka karɓa ba lokacin shiga cikin na'ura mai ba da hanya tsakanin hanyoyin sadarwa ko abokin ciniki na gidan yanar gizo, za a tabbatar da masu amfani zuwa yankin saƙon da aka ƙirƙira lokacin shigar da sabar Zimbra. Bayan shigarwa, wannan shine kawai yankin imel ɗin da aka karɓa wanda ke wanzu akan wannan uwar garken, amma yayin da tsarin ke aiki, ana iya ƙara ƙarin wuraren wasiku, sa'an nan kuma ƙayyadaddun yanki a cikin sunan mai amfani a sarari zai kawo canji.

Lura 2. Lokacin da ka shiga cikin abokin ciniki na gidan yanar gizo, mai bincikenka na iya neman izini don nuna sanarwa daga rukunin yanar gizon. Dole ne ku yarda don karɓar sanarwa daga wannan rukunin yanar gizon.

Lura 3. Bayan shiga cikin na'ura mai sarrafa kwamfuta, ana iya sanar da ku cewa akwai saƙonni zuwa ga mai gudanarwa, yawanci tunatar da ku don saita Zextras Ajiyayyen da/ko siyan lasisin Zextras kafin tsohon lasisin gwaji ya ƙare. Ana iya yin waɗannan ayyukan daga baya, sabili da haka saƙonnin da suke a lokacin shigarwa ana iya watsi da su da/ko yi alama kamar yadda aka karanta a cikin menu na Zextras: Zextras Alert.

Lura 4. Yana da mahimmanci a lura cewa a cikin matsayin uwar garke ana nuna matsayin sabis ɗin Docs azaman “ba samuwa” koda Docs a cikin abokin ciniki na yanar gizo yana aiki daidai:

Wannan sigar sigar gwaji ce kuma ana iya gyarawa bayan siyan lasisi da tuntuɓar tallafi.

7.2. Ƙaddamar da abubuwan Zextras Suite

A cikin Zextras: Core menu, dole ne ka danna maɓallin "Aika" don duk zimlet ɗin da kake son amfani da su.

Lokacin tura kayan sanyi, zance yana bayyana tare da sakamakon aikin kamar haka:

A cikin misalinmu, ana tura duk Zextras Suite winterlets, bayan haka Zextras: Core form zai ɗauki nau'i mai zuwa:

7.3. Canza saitunan shiga

7.3.1. Canza Saitunan Duniya

A cikin menu na Saituna: Saitunan duniya, ƙaramin menu na uwar garken wakili, canza sigogi masu zuwa:

Yanayin wakili na yanar gizo: turawa
Kunna uwar garken na'ura wasan bidiyo na gudanarwa: duba akwatin.
Sa'an nan kuma danna "Ajiye" a cikin ɓangaren dama na sama na fam ɗin.

A cikin misalinmu, bayan canje-canjen da aka yi, fom ɗin yayi kama da haka:

7.3.2. Canje-canje zuwa babban saitunan uwar garken Zimbra

A cikin menu na Saituna: Sabar: <sunan babban uwar garken Zimbra>, uwar garken wakili na ƙasa, canza sigogi masu zuwa:

Yanayin wakili na gidan yanar gizo: danna maɓallin "Sake saitin zuwa ƙimar tsoho" (darajar kanta ba zata canza ba, tunda an riga an saita shi yayin shigarwa). Kunna uwar garken wakili na kayan aikin gudanarwa: duba cewa an duba akwatin rajistan (ya kamata a yi amfani da ƙimar tsoho, idan ba haka ba, zaku iya danna maɓallin "Sake saitin zuwa tsohuwar ƙimar" da/ko saita shi da hannu). Sa'an nan kuma danna "Ajiye" a cikin ɓangaren dama na sama na fam ɗin.

A cikin misalinmu, bayan canje-canjen da aka yi, fom ɗin yayi kama da haka:

Lura: (ana iya buƙatar sake kunnawa idan shiga cikin wannan tashar jiragen ruwa baya aiki)

7.4. Sabon admin console shiga

Shiga cikin na'ura mai sarrafawa a cikin burauzar ku ta amfani da URL: https:// :9071
A nan gaba, yi amfani da wannan URL don shiga

Lura: don shigarwar uwar garken guda ɗaya, a matsayin mai mulki, canje-canjen da aka yi a mataki na baya sun isa, amma a wasu lokuta (idan ba a nuna shafin uwar garken lokacin shigar da URL da aka ƙayyade ba), kuna iya buƙatar yin wani aikin da ake bukata. don shigarwar uwar garken da yawa - a cikin misalinmu, akan babban umarnin uwar garken Zimbra ana buƙatar aiwatar da shi azaman mai amfani da Zimbra. /opt/zimbra/libexec/zmproxyconfgen и zmproxyctl sake kunnawa.

7.5. Gyara tsoho COS

A cikin Saituna: Menu na Class Service, zaɓi COS tare da sunan "tsoho".

A cikin menu na “Dama”, cire alamar aikin “Portfolio”, sannan danna “Ajiye” a ɓangaren dama na fom ɗin.

A cikin misalinmu, bayan daidaitawa, fom ɗin yayi kama da haka:

Hakanan ana ba da shawarar duba saitin “Enable sharing of files and folders” a cikin menu na Drive, sannan danna “Ajiye” a ɓangaren dama na fom ɗin.

A cikin misalinmu, bayan daidaitawa, fom ɗin yayi kama da haka:

A cikin yanayin gwaji, a cikin aji ɗaya na sabis, zaku iya kunna ayyukan Team Pro ta kunna akwatin rajistan tare da suna iri ɗaya a cikin menu na ƙungiyar, bayan haka fom ɗin daidaitawa zai ɗauki nau'i mai zuwa:

Lokacin da aka kashe fasalulluka na Team Pro, masu amfani za su sami damar yin amfani da abubuwan Basic na Ƙungiya kawai.
Lura cewa Zextras Team Pro yana da lasisi ba tare da Zextras Suite ba, wanda ke ba ku damar siyan ta don ƙananan akwatunan wasiku fiye da Zextras Suite kanta; Abubuwan Basic na ƙungiyar an haɗa su a cikin lasisin Zextras Suite. Don haka, idan aka yi amfani da su a cikin yanayin samarwa, ƙila za ku buƙaci ƙirƙirar rukunin sabis na daban don masu amfani da Team Pro wanda ya haɗa da abubuwan da suka dace.

7.6. Saitin Firewall

Da ake buƙata don babban uwar garken Zimbra:

a) Bada damar shiga Intanet zuwa ssh, http/https, imap/maps, pop3/pop3s, tashar jiragen ruwa smtp (babban tashar jiragen ruwa da ƙarin tashar jiragen ruwa don amfani da abokan cinikin wasiku) da tashar jiragen ruwa na gudanarwa.

b) Bada duk haɗin kai daga cibiyar sadarwar ciki (wanda aka kunna NAT akan Intanet a mataki na 1.3 a mataki na 1).

Babu buƙatar saita bangon wuta don uwar garken Zextras Docs, saboda ba a samun dama daga Intanet.

Don yin wannan, dole ne ku aiwatar da jerin ayyuka masu zuwa:

1) Shiga cikin na'ura mai kwakwalwa ta rubutu na babban uwar garken Zimbra. Lokacin shiga ta hanyar SSH, dole ne ku gudanar da umarnin "allon" don guje wa katsewar aiwatar da umarni idan haɗin da uwar garken ya ɓace na ɗan lokaci saboda canje-canje a cikin saitunan Tacewar zaɓi.

2) Gudun umarni

sudo ufw allow 22,25,80,110,143,443,465,587,993,995,9071/tcp
sudo ufw allow from <адрес_вашей_сети>/<длина CIDR маски>
sudo ufw enable

A cikin misalinmu yana kama da haka:

7.7. Duba samun dama ga abokin ciniki na gidan yanar gizo da na'ura mai gudanarwa

Don saka idanu akan aikin Tacewar zaɓi, zaku iya zuwa URL mai zuwa a cikin burauzar ku

Console mai gudanarwa: https:// :9071
Abokin Yanar Gizo: http:// (za a sami turawa ta atomatik zuwa https:// )
A lokaci guda, ta amfani da madadin URL https:// :7071 Kada a buɗe na'urar wasan bidiyo mai gudanarwa.

Abokin gidan yanar gizo a cikin misalinmu yayi kama da haka:

Lura. Lokacin da ka shiga cikin abokin ciniki na gidan yanar gizo, mai bincikenka na iya neman izini don nuna sanarwa daga rukunin yanar gizon. Dole ne ku yarda don karɓar sanarwa daga wannan rukunin yanar gizon.

8. Tabbatar da aiki na audio da bidiyo taro a cikin Zextras Team

8.1. Janar bayani

Ba a buƙatar ayyukan da aka bayyana a ƙasa idan duk abokan cinikin Zextras Team suna hulɗa da juna ba tare da amfani da NAT ba (a wannan yanayin, ana iya yin hulɗa tare da uwar garken Zimbra kanta ta amfani da NAT, watau yana da mahimmanci cewa babu NAT tsakanin abokan ciniki). ko kuma idan rubutu ne kawai aka yi amfani da manzo.

Don tabbatar da hulɗar abokin ciniki ta hanyar taron sauti da bidiyo:

a) Dole ne ku girka ko amfani da uwar garken TUN data kasance.

b) Domin uwar garken TURN yawanci yana da ayyuka na uwar garken STUN, ana bada shawarar yin amfani da shi a cikin wannan damar kuma (a madadin, za ku iya amfani da sabobin STUN na jama'a, amma aikin STUN kadai yawanci bai isa ba).

A cikin yanayin samarwa, saboda yuwuwar babban nauyi, ana ba da shawarar matsar da uwar garken TURN zuwa na'ura mai mahimmanci daban. Don gwaji da/ko nauyi mai sauƙi, ana iya haɗa uwar garken TURN tare da babban sabar Zimbra.

Misalinmu yana kallon shigar da uwar garken TURN akan babban sabar Zimbra. Shigar da TURN akan wata uwar garken daban iri ɗaya ne, sai dai matakan da suka shafi sakawa da daidaita software na TURN ana yin su ne akan uwar garken TURN, kuma matakan da za a saita uwar garken Zimbra don amfani da wannan uwar garken ana yin su ne akan babbar uwar garken Zimbra.

8.2. Shigar da uwar garken TURN

Bayan shiga a baya ta hanyar SSH zuwa babban uwar garken Zimbra, gudanar da umarni

sudo apt install resiprocate-turn-server

8.3. Saita uwar garken TURN

Lura. Don canza duk fayilolin sanyi masu zuwa, dole ne a gudanar da editan tare da haƙƙin tushen mai amfani, misali, "sudo vi /etc/reTurn/reTurnServer.config"ko, idan an shigar da kunshin mc, za ku iya amfani da umarnin"sudo mcedit /etc/reTurn/reTurnServer.config»

Ƙirƙirar mai sauƙin amfani

Don sauƙaƙe ƙirƙira da cire kuskuren haɗin gwaji zuwa uwar garken TURN, za mu kashe amfani da kalmomin shiga da aka haɗe a cikin bayanan mai amfani da uwar garken TURN. A cikin yanayin samarwa, ana ba da shawarar yin amfani da kalmomin shiga mara kyau; a wannan yanayin, ƙirƙirar hashes na kalmar sirri don su dole ne a yi su daidai da umarnin da ke cikin /etc/reTurn/reTurnServer.config da /etc/reTurn/users.txt files.

Tsarin ayyukan:

1) Shirya fayil ɗin /etc/reTurn/reTurnServer.config

Canja darajar ma'aunin "UserDatabaseHashedPasswords" daga "gaskiya" zuwa "karya".

2) Shirya fayil ɗin /etc/reTurn/users.txt

Saita shi zuwa sunan mai amfani, kalmar sirri, daula (na sabani, ba a yi amfani da shi ba lokacin saita haɗin Zimbra) kuma saita matsayin asusu zuwa "ISHADI".

A cikin misalinmu, da farko fayil ɗin yayi kama da:

Bayan gyara ya yi kama da:

3) Aiwatar da tsari

Gudun umarni

sudo systemctl restart resiprocate-turn-server

8.4. Ƙaddamar da Tacewar zaɓi don uwar garken TURN

A wannan mataki, an shigar da ƙarin ƙa'idodin Tacewar zaɓi waɗanda ake buƙata don aikin uwar garken TURN. Dole ne ku ba da damar shiga tashar tashar farko wacce uwar garken ke karɓar buƙatun a kanta, da kuma zuwa tsayayyen kewayon tashar jiragen ruwa da uwar garken ke amfani da shi don tsara rafukan watsa labarai.

An kayyade tashoshin jiragen ruwa a cikin /etc/reTurn/reTurnServer.config fayil, a cikin yanayinmu shine:

и

Don shigar da dokokin Tacewar zaɓi, kuna buƙatar gudanar da umarni

sudo ufw allow 3478,49152:65535/udp
sudo ufw allow 3478,49152:65535/tcp

8.5. Ana saita don amfani da uwar garken TURN a cikin Zimbra

Don daidaitawa, ana amfani da FQDN na uwar garken, uwar garken TURN, wanda aka ƙirƙira a mataki na 1.2 na sakin layi na 1, kuma wanda dole ne a warware ta sabobin DNS tare da adireshin IP iri ɗaya na jama'a don buƙatun biyu daga Intanet da buƙatun daga adiresoshin ciki.

Duba tsarin haɗin yanar gizon "zxsuite team iceServer samu" yana gudana ƙarƙashin mai amfani da zimbra.

Don ƙarin bayani game da saita amfani da uwar garken TURN, duba sashin "Shigar da Ƙungiyar Zextras don amfani da uwar garken TURN" a ciki. takardun.

Don daidaitawa, kuna buƙatar gudanar da umarni masu zuwa akan sabar Zimbra:

sudo su - zimbra
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478?transport=udp
zxsuite team iceServer add turn:<FQDN вашего сервера TURN>:3478?transport=udp credential <пароль> username <имя пользователя>
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478?transport=tcp
zxsuite team iceServer add turn:<FQDN вашего сервера TURN>:3478?transport=tcp credential <пароль> username <имя пользователя>
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478
logout

Ana amfani da ƙimar sunan mai amfani da kalmar sirri, bi da bi, ƙayyadaddun a mataki na 2 a cikin sashe na 8.3 azaman <username> da <password>.

A cikin misalinmu yana kama da haka:

9. Bada wasiku damar wucewa ta ka'idar SMTP

A cewar takardun shaida, a cikin Yandex.Cloud, zirga-zirga mai fita zuwa tashar jiragen ruwa na TCP 25 akan Intanet da zuwa Yandex Compute Cloud injunan kama-da-wane ana toshewa koyaushe lokacin shiga ta hanyar adireshin IP na jama'a. Wannan ba zai hana ku duba karɓar wasiƙar da aka aika daga wani sabar saƙon zuwa yankin da aka karɓa ba, amma zai hana ku aika wasiku a wajen sabar Zimbra.

Takaddun sun nuna cewa Yandex.Cloud na iya buɗe tashar tashar TCP 25 akan buƙatar tallafi idan kun bi Sharuɗɗan Amfani Mai karɓuwa, kuma yana da haƙƙin sake toshe tashar jiragen ruwa idan aka keta dokokin. Don buɗe tashar jiragen ruwa, kuna buƙatar tuntuɓar tallafin Yandex.Cloud.

Aikace-aikacen

Ƙirƙirar maɓallan SSH a cikin openssh da putty da canza maɓallan daga putty zuwa tsarin openssh

1. Ƙirƙirar maɓallan maɓalli don SSH

A kan Windows ta amfani da putty: gudanar da umarnin puttygen.exe kuma danna maɓallin "Ƙirƙiri".

A kan Linux: umarnin gudu

ssh-keygen

2. Canza makullin daga putty zuwa tsarin openssh

Na Windows:

Tsarin ayyukan:

1. Shigar da shirin puttygen.exe.
2. Load da keɓaɓɓen maɓalli a tsarin ppk, yi amfani da abin menu Fayil → Load keɓaɓɓen maɓalli.
3. Shigar da kalmar wucewa idan an buƙata don wannan maɓalli.
4. Maɓallin jama'a a cikin tsarin OpenSSH yana nunawa a cikin puttygen tare da rubutun "Maɓallin Jama'a don liƙa a cikin OpenSSH izini_keys filin fayil"
5. Don fitarwa maɓalli na sirri zuwa tsarin OpenSSH, zaɓi Canje-canje → Fitar da maɓallin Buɗe SSH a cikin babban menu
6. Ajiye maɓalli na sirri zuwa sabon fayil.

Na Linux

1. Sanya kunshin kayan aikin PuTTY:

a cikin Ubuntu:

sudo apt-get install putty-tools

akan rabawa kamar Debian:

apt-get install putty-tools

a cikin rabon tushen RPM dangane da yum (CentOS, da sauransu):

yum install putty

2. Don canza maɓalli na sirri, gudanar da umarni:

puttygen <key.ppk> -O private-openssh -o <key_openssh>

3. Don samar da maɓallin jama'a (idan ya cancanta):

puttygen <key.ppk> -O public-openssh -o <key_openssh.pub>

sakamakon

Bayan shigarwa bisa ga shawarwarin, mai amfani yana karɓar sabar saƙon Zimbra da aka saita a cikin kayan aikin Yandex.Cloud tare da tsawo na Zextras don sadarwar kamfanoni da haɗin gwiwa tare da takardu. Ana yin saitunan tare da wasu ƙuntatawa don yanayin gwaji, amma ba shi da wahala a canza shigarwa zuwa yanayin samarwa da ƙara zaɓuɓɓuka don amfani da kayan ajiya na Yandex.Cloud da sauransu. Don tambayoyi game da turawa da amfani da mafita, tuntuɓi abokin aikin ku na Zextras - SVZ ko wakilai Yandex.Cloud.

Don duk tambayoyin da suka shafi Zextras Suite, zaku iya tuntuɓar Wakilin Zextras Ekaterina Triandafilidi ta imel [email kariya]

source: www.habr.com