🥇 Kev xa tawm ntawm Zextras / Zimbra chaw ua haujlwm chaw ua haujlwm hauv Yandex.Cloud

Taw qhia

Kev ua kom zoo tshaj plaws hauv chaw ua haujlwm thiab siv cov haujlwm tshiab yog qhov nyuaj rau cov tuam txhab ntawm txhua hom thiab ntau thiab tsawg. Qhov kev xaiv zoo tshaj plaws rau txoj haujlwm tshiab yog xauj cov peev txheej hauv huab thiab yuav cov ntawv tso cai uas tuaj yeem siv tau ob qho tib si los ntawm tus kws kho mob thiab hauv koj tus kheej cov ntaub ntawv chaw. Ib qho kev daws teeb meem rau qhov xwm txheej zoo li no yog Zextras Suite, uas tso cai rau koj los tsim ib lub platform rau kev sib koom tes thiab kev sib txuas lus ntawm kev lag luam ob qho tib si hauv huab ib puag ncig thiab ntawm nws tus kheej infrastructure.

Kev daws teeb meem yog tsim los rau cov chaw ua haujlwm ntawm txhua qhov loj me thiab muaj ob qhov kev xa tawm tseem ceeb: yog tias koj muaj txog li 3000 txhiab mailboxes thiab tsis muaj qhov yuav tsum tau ua rau kev ua txhaum cai, koj tuaj yeem siv ib lub server installation, thiab kev xaiv ntau lub server. txhawb kev txhim khu kev qha thiab kev ua haujlwm ntawm kaum thiab pua pua txhiab lub thawv ntawv. Nyob rau hauv txhua rooj plaub, tus neeg siv tau txais kev nkag mus rau kev xa ntawv, cov ntaub ntawv thiab cov lus los ntawm ib lub web interface los ntawm qhov chaw ua haujlwm los ntawm ib qho OS yam tsis muaj kev txhim kho thiab teeb tsa software ntxiv, lossis los ntawm cov ntawv thov mobile rau iOS thiab Android. Nws tuaj yeem siv tau paub Outlook thiab Thunderbird cov neeg siv khoom.

Txhawm rau xa qhov project, tus khub Zextras − SVZ Kuv tau xaiv Yandex.Cloud, vim tias nws cov qauv zoo ib yam li AWS thiab muaj kev txhawb nqa rau S3 sib haum nrog kev khaws cia, uas yuav txo tus nqi khaws cia ntau ntawm kev xa ntawv, cov lus, thiab cov ntaub ntawv thiab ua rau muaj kev zam txim rau kev daws teeb meem.

Hauv Yandex.Cloud ib puag ncig, kev teeb tsa ib lub server siv cov cuab yeej yooj yim los tswj cov tshuab virtual Computer Huab thiab muaj peev xwm tswj hwm lub network virtual "Virtual Private Huab". Rau kev teeb tsa ntau lub server, ntxiv rau cov cuab yeej tshwj xeeb, nws yog qhov yuav tsum tau siv cov thev naus laus zis "Cov pab pawg nyob", yog tias tsim nyog (nyob ntawm qhov ntsuas ntawm qhov system) - kuj "Instance Groups", thiab network balancer Yandex Load Balancer.

S3 tau tshaj khoom cia Yandex Object Storage tuaj yeem siv rau hauv ob qho kev xaiv kev teeb tsa, thiab tseem tuaj yeem txuas nrog cov tshuab xa tawm ntawm qhov chaw rau kev lag luam thiab kev ua txhaum-tho cia ntawm cov ntaub ntawv xa ntawv hauv Yandex.Cloud.

Rau kev teeb tsa ib lub server, nyob ntawm tus naj npawb ntawm cov neeg siv thiab / lossis cov thawv xa ntawv, cov hauv qab no yuav tsum tau: rau lub server tseem ceeb 4-12 vCPU, 8-64 GB vRAM (cov nqi tshwj xeeb ntawm vCPU thiab vRAM nyob ntawm tus lej ntawm mailboxes thiab qhov tseeb load), tsawg kawg yog 80 GB ntawm disk rau lub operating system thiab daim ntaub ntawv, nrog rau ntxiv disk qhov chaw rau khaws cia mail, indexes, cav, thiab lwm yam., nyob ntawm seb tus naj npawb thiab qhov nruab nrab loj ntawm mailboxes thiab uas muaj peev xwm. dynamically hloov thaum lub sij hawm ua hauj lwm system; rau auxiliary Docs servers: 2-4 vCPU, 2-16 GB vRAM, 16 GB disk chaw (cov peev txheej tshwj xeeb thiab cov naj npawb ntawm cov servers nyob ntawm qhov tseeb load); Tsis tas li ntawd, yuav tsum muaj TURN / STUN server (nws xav tau raws li cov neeg siv khoom sib cais thiab cov peev txheej nyob ntawm qhov tseeb load). Rau kev teeb tsa ntau lub server, tus naj npawb thiab lub hom phiaj ntawm lub luag haujlwm ua si virtual tshuab thiab cov peev txheej muab faib rau lawv tau txiav txim siab tus kheej nyob ntawm tus neeg siv cov kev xav tau.

Lub hom phiaj ntawm tsab xov xwm

Cov lus piav qhia ntawm kev xa mus rau hauv Yandex.Cloud ib puag ncig ntawm Zextras Suite cov khoom lag luam raws li Zimbra mail server hauv kev xaiv ib qho server. Qhov kev teeb tsa tshwm sim tuaj yeem siv rau hauv ib puag ncig ntau lawm (cov neeg siv paub dhau los tuaj yeem ua qhov tsim nyog thiab ntxiv cov peev txheej).

Zextras Suite / Zimbra system suav nrog:

Zimbra - tuam txhab email nrog lub peev xwm los qhia cov ntawv xa ntawv, daim ntawv qhia hnub thiab cov npe hu (cov ntawv chaw nyob).
Zextras Docs - built-in chaw ua hauj lwm suite raws li LibreOffice online rau tsim thiab koom tes nrog cov ntaub ntawv, spreadsheets, nthuav qhia.
Zextras Tsav - ib tus kheej cov ntaub ntawv cia uas tso cai rau koj hloov kho, khaws thiab faib cov ntaub ntawv thiab folders nrog lwm tus neeg siv.
Zextras Team - Tus tub txib nrog kev txhawb nqa rau kev sib tham hauv suab thiab video. Versions muaj nyob rau ntawm Team Basic, uas tso cai rau tsuas yog 1: 1 kev sib txuas lus, thiab Team Pro, uas txhawb ntau tus neeg siv lub rooj sib tham, raws, kev tshuaj ntsuam, sib qhia ntaub ntawv, thiab lwm yam nta.
Zextras Mobile - Kev txhawb nqa rau cov khoom siv txawb ntawm Txauv ActiveSync los synchronize xa ntawv nrog cov khoom siv mobile nrog MDM (Mobile Device Management) cov yam ntxwv tswj. Tso cai rau koj siv Microsoft Outlook ua koj tus email.
Zextras Admin - Kev siv ntau qhov kev tswj hwm tus neeg xauj tsev nrog kev tso cai ntawm cov thawj coj los tswj cov pab pawg ntawm cov neeg siv khoom thiab cov kev pabcuam.
Zextras thaub qab -reservation thiab kho cov ntaub ntawv ntawm lub voj voog tag nrho hauv lub sijhawm
Zextras Powerstore - lub hierarchical cia ntawm mail system khoom nrog kev txhawb nqa rau cov ntaub ntawv ua cov chav kawm, nrog rau kev muaj peev xwm khaws cov ntaub ntawv hauv zos lossis hauv huab cia ntawm S3 architecture, suav nrog Yandex Object Storage.

Thaum ua tiav kev teeb tsa, tus neeg siv tau txais lub kaw lus khiav hauv Yandex.Cloud ib puag ncig.

Cov xwm txheej thiab kev txwv

Disk qhov chaw faib rau mailboxes, indexes, thiab lwm yam ntaub ntawv tsis tau piav, vim Zextras Powerstore txhawb ntau hom kev cia. Hom thiab qhov loj ntawm qhov chaw cia nyob ntawm cov dej num thiab qhov system tsis. Yog tias tsim nyog, qhov no tuaj yeem ua tiav tom qab hauv cov txheej txheem ntawm kev hloov pauv cov lus piav qhia rau kev tsim khoom.
Txhawm rau txhim kho yooj yim, kev siv tus thawj tswj hwm DNS server los daws cov npe sau npe sab hauv (tsis yog pej xeem) tsis suav nrog; tus qauv Yandex.Cloud DNS server yog siv. Thaum siv nyob rau hauv ib puag ncig ntau lawm, nws raug nquahu kom siv DNS server, uas tej zaum yuav muaj nyob hauv cov koom haum koom nrog.
Nws yog xav tias koj siv ib tug account hauv Yandex.Cloud nrog lub neej ntawd nqis (tshwj xeeb, thaum koj nkag mus rau "Console" ntawm cov kev pabcuam, tsuas muaj ib daim ntawv teev npe (hauv "Available huab" npe hauv qab lub npe. ). Cov neeg siv paub txog kev ua haujlwm hauv Yandex.Cloud, tuaj yeem, ntawm lawv qhov kev txiav txim siab, tsim ib daim ntawv teev npe cais rau lub rooj zaum xeem, lossis siv ib qho uas twb muaj lawm.
Tus neeg siv yuav tsum muaj thaj tsam DNS uas lawv yuav tsum muaj kev tswj hwm.
Tus neeg siv yuav tsum muaj kev nkag mus rau cov npe hauv Yandex.Cloud "Console" nrog tsawg kawg yog "tus kws kho" lub luag haujlwm (tus "Cloud Owner" muaj tag nrho cov cai tsim nyog los ntawm lub neej ntawd, muaj phau ntawv qhia rau kev tso cai nkag mus rau lwm tus neeg siv rau huab. : sij hawm, ob, peb)
Kab lus no tsis suav nrog kev teeb tsa ntawm kev cai X.509 daim ntawv pov thawj siv los tiv thaiv kev sib txuas lus hauv network los ntawm TLS cov txheej txheem. Thaum kawg ntawm kev teeb tsa, daim ntawv pov thawj tus kheej kos npe yuav raug siv, uas tso cai rau koj siv cov browsers nkag mus rau hauv lub kaw lus. Lawv feem ntau tso cov ntawv ceeb toom tias tus neeg rau zaub mov tsis muaj daim ntawv pov thawj pov thawj, tab sis tso cai rau koj ua haujlwm ntxiv. Ua ntej kev teeb tsa ntawm daim ntawv pov thawj tau lees paub los ntawm cov neeg siv khoom siv (kos npe los ntawm pej xeem thiab / lossis cov tuam txhab ntawv pov thawj), cov ntawv thov rau cov khoom siv txawb yuav tsis ua haujlwm nrog lub teeb tsa. Yog li ntawd, kev teeb tsa ntawm cov ntawv pov thawj no yog qhov tsim nyog, thiab ua tiav tom qab kev sim ua tiav raws li cov cai tswj hwm kev ruaj ntseg.

Kev piav qhia ntawm cov txheej txheem kev teeb tsa ntawm Zextras / Zimbra system hauv "ib qho server" version

1. Kev npaj ua ntej

Ua ntej pib lub installation, koj yuav tsum xyuas kom meej:

a) Kev hloov pauv rau pej xeem DNS cheeb tsam (tsim A-cov ntaub ntawv rau Zimbra server thiab MX-cov ntaub ntawv rau lub chaw xa ntawv lees paub).
b) Teem lub virtual network infrastructure hauv Yandex.Cloud.

Nyob rau tib lub sijhawm, tom qab hloov pauv rau thaj chaw DNS, nws yuav siv sijhawm qee lub sijhawm rau cov kev hloov pauv no los nthuav tawm, tab sis, ntawm qhov tod tes, koj tsis tuaj yeem tsim cov ntaub ntawv A yam tsis paub txog IP chaw nyob nrog nws.

Yog li ntawd, cov kev nqis tes ua yog ua nyob rau hauv raws li nram no:

1. Khaws qhov chaw nyob IP pej xeem hauv Yandex.Cloud

1.1 Hauv "Yandex.Cloud Console" (yog tias tsim nyog, xaiv cov npe hauv "muaj huab"), mus rau ntu Virtual Private Cloud, ntu ntu IP chaw nyob, tom qab ntawd nyem lub pob "Reserve chaw nyob", xaiv thaj chaw koj nyiam (lossis pom zoo nrog tus nqi tsim nyog; thaj chaw muaj no yuav tsum tau siv rau txhua qhov kev ua tom ntej hauv Yandex.Cloud, yog tias cov ntawv tsim nyog tso cai rau koj xaiv thaj chaw muaj), hauv lub thawv uas qhib, yog tias koj xav tau, koj tuaj yeem ua tau, tab sis Tsis tas li, xaiv qhov "DDoS Protection" kev xaiv, thiab nyem lub pob "Reserve" (saib cov ntaub ntawv).

Tom qab kaw qhov kev sib tham, qhov system-txhim kho IP chaw nyob zoo li qub yuav muaj nyob rau hauv daim ntawv teev npe IP chaw nyob, uas tuaj yeem luam tawm thiab siv rau qib tom ntej.

1.2 Hauv cheeb tsam "forward" DNS, ua ib daim ntawv teev npe rau Zimbra server taw qhia rau qhov chaw nyob IP yav dhau los, cov ntaub ntawv A rau cov neeg rau zaub mov TURN taw qhia rau tib tus IP chaw nyob, thiab cov ntaub ntawv MX rau cov ntawv lees paub. Hauv peb qhov piv txwv, cov no yuav yog mail.testmail.svzcloud.ru (Zimbra server), turn.testmail.svzcloud.ru (TURN server), thiab testmail.svzcloud.ru (mail sau), feem.

1.3 Hauv Yandex.Cloud, hauv thaj chaw xaiv muaj rau lub subnet uas yuav siv los xa cov tshuab virtual, pab NAT rau hauv Is Taws Nem.

Txhawm rau ua qhov no, hauv ntu Virtual Private Cloud, ntu ntu "Cloud networks", xaiv qhov tsim nyog huab network (los ntawm lub neej ntawd, tsuas yog lub network tsis muaj nyob rau ntawd), xaiv thaj chaw muaj nyob hauv nws thiab xaiv "Enable NAT hauv Is Taws Nem. ” hauv nws qhov chaw.

Cov xwm txheej yuav hloov pauv hauv cov npe ntawm cov subnets:

Yog xav paub ntxiv, saib cov ntaub ntawv: sij hawm и ob.

2. Tsim cov tshuab virtual

2.1. Tsim lub tshuab virtual rau Zimbra

Kev ua ntawm kev ua:

2.1.1 Hauv Yandex.Cloud Console, mus rau ntu Compute Cloud, ntu ntu "Virtual Machines", nyem lub pob "Tsim VM" (kom paub ntau ntxiv txog kev tsim VM, saib cov ntaub ntawv).

2.1.2 Koj yuav tsum tau teem caij:

Lub npe - arbitrary (raws li cov hom ntawv txhawb los ntawm Yandex.Cloud)
Availability Zone - yuav tsum sib phim ib qho yav dhau los xaiv rau lub network virtual.
Hauv "Public dluab" xaiv Ubuntu 18.04 lts
Nruab ib lub khau raj ntawm qhov tsawg kawg nkaus 80GB loj. Rau cov hom phiaj kev xeem, ib hom HDD yog txaus (thiab tseem siv tau, muab qee hom ntaub ntawv raug xa mus rau SSD-hom disks). Yog tias tsim nyog, cov disks ntxiv tuaj yeem ntxiv tom qab tsim VM.

Hauv "computing resources" teeb:

vCPU: yam tsawg kawg yog 4.
Kev lees paub ntawm vCPU: tsawg kawg 50% rau lub sijhawm ntawm cov kauj ruam tau piav qhia hauv tsab xov xwm, tom qab kev teeb tsa tiav, yog tias tsim nyog, nws tuaj yeem txo qis.
RAM: 8GB pom zoo.
Subnet: xaiv lub subnet uas Internet NAT tau qhib thaum lub sijhawm npaj ua ntej.
Chaw nyob pej xeem: xaiv los ntawm cov npe IP chaw nyob yav dhau los siv los tsim cov ntaub ntawv A hauv DNS.
Tus neeg siv: xaiv tau, tab sis txawv ntawm cov neeg siv hauv paus thiab Linux system nyiaj.
Nco ntsoov teeb tsa pej xeem (qhib) SSH tus yuam sij.

→ Kawm paub ntxiv txog kev siv SSH

Saib kuj 1 daim ntawv thov. Tsim SSH cov yuam sij hauv openssh thiab putty thiab hloov cov yuam sij los ntawm putty hom rau openssh.

2.1.3 Thaum qhov teeb tsa tiav, nyem "Tsim VM".

2.2. Tsim lub tshuab Virtual rau Zextras Docs

Kev ua ntawm kev ua:

2.2.1 Hauv Yandex.Cloud Console, mus rau ntu Compute Cloud, ntu ntu "Virtual Machines", nyem lub pob "Tsim VM" (kom paub ntau ntxiv txog kev tsim VM, saib S, SѓS,).

2.2.2 Koj yuav tsum tau teem caij:

Lub npe - arbitrary (raws li cov hom ntawv txhawb los ntawm Yandex.Cloud)
Availability Zone - yuav tsum sib phim ib qho yav dhau los xaiv rau lub network virtual.
Hauv "Public dluab" xaiv Ubuntu 18.04 lts
Nruab ib lub khau raj ntawm qhov tsawg kawg nkaus 80GB loj. Rau cov hom phiaj kev xeem, ib hom HDD yog txaus (thiab tseem siv tau, muab qee hom ntaub ntawv raug xa mus rau SSD-hom disks). Yog tias tsim nyog, cov disks ntxiv tuaj yeem ntxiv tom qab tsim VM.

Hauv "computing resources" teeb:

vCPU: yam tsawg kawg yog 2.
Kev lees paub ntawm vCPU: tsawg kawg 50% rau lub sijhawm ntawm cov kauj ruam tau piav qhia hauv tsab xov xwm, tom qab kev teeb tsa tiav, yog tias tsim nyog, nws tuaj yeem txo qis.
RAM: tsawg kawg yog 2 GB.
Subnet: xaiv lub subnet uas Internet NAT tau qhib thaum lub sijhawm npaj ua ntej.
Pej xeem chaw nyob: tsis muaj chaw nyob (lub tshuab no tsis tas yuav tsum tau nkag los ntawm Is Taws Nem, tsuas yog tawm ntawm lub tshuab no mus rau Is Taws Nem, uas yog muab los ntawm "NAT rau Internet" kev xaiv ntawm subnet siv).
Tus neeg siv: xaiv tau, tab sis txawv ntawm cov neeg siv hauv paus thiab Linux system nyiaj.
Nco ntsoov teeb tsa tus yuam sij rau pej xeem (public) SSH, koj tuaj yeem siv tib yam li rau Zimbra server, koj tuaj yeem tsim kom muaj ib khub tseem ceeb, vim hais tias tus yuam sij ntiag tug rau Zextras Docs server yuav tsum tau muab tso rau ntawm Zimbra server. disk.

Saib Ntxiv Ntxiv 1. Tsim SSH cov yuam sij hauv openssh thiab putty thiab hloov cov yuam sij los ntawm putty rau openssh hom.

2.2.3 Thaum qhov teeb tsa tiav, nyem "Tsim VM".

2.3 Cov tshuab virtual tsim yuav muaj nyob rau hauv cov npe ntawm cov tshuab virtual, uas qhia, tshwj xeeb, lawv cov xwm txheej thiab IP chaw nyob siv, pej xeem thiab sab hauv. Cov ntaub ntawv hais txog IP chaw nyob yuav xav tau nyob rau hauv cov kauj ruam tom ntej installation.

3. Npaj Zimbra server rau kev teeb tsa

3.1 Txhim kho cov tshiab

Koj yuav tsum nkag mus rau Zimbra server ntawm nws qhov chaw nyob IP pej xeem siv koj tus neeg siv ssh nyiam siv tus yuam sij ssh ntiag tug thiab siv tus neeg siv lub npe teev thaum tsim lub tshuab virtual.

Tom qab nkag rau hauv, khiav cov lus txib hauv qab no:

sudo apt update
sudo apt upgrade

(thaum ua tiav cov lus txib kawg, teb "y" thaum nug yog tias koj paub tseeb tias daim ntawv teev npe hloov tshiab raug teeb tsa)

Tom qab txhim kho qhov hloov tshiab, koj tuaj yeem (tab sis tsis tas) khiav cov lus txib:

sudo apt autoremove

Thiab thaum kawg ntawm cov kauj ruam, khiav cov lus txib

sudo shutdown –r now

3.2 Ntxiv kev teeb tsa ntawm daim ntawv thov

Koj yuav tsum tau nruab ib tus neeg siv khoom NTP kom synchronize lub sijhawm system thiab daim ntawv thov tshuaj ntsuam nrog cov lus txib hauv qab no:

sudo apt install ntp screen

(thaum ua tiav cov lus txib kawg, teb "y" thaum nug yog tias koj paub tseeb tias koj tau teeb tsa cov npe ntawm cov pob khoom)

Koj tseem tuaj yeem nruab cov khoom siv hluav taws xob ntxiv kom yooj yim rau tus thawj tswj hwm. Piv txwv li, Midnight Commander tuaj yeem nruab nrog cov lus txib:

sudo apt install mc

3.3. Hloov qhov system configuration

3.3.1 Hauv cov ntaub ntawv /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg hloov tus nqi parameter tswj_etc_hosts c muaj tseeb rau cuav.

Nco tseg: hloov cov ntaub ntawv no, tus editor yuav tsum tau khiav nrog cov neeg siv hauv paus txoj cai, piv txwv li, "sudo vi /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg"los yog, yog tias lub pob mc raug teeb tsa, koj tuaj yeem siv cov lus txib "sudo mcedit /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg»

3.3.2 Kho kom raug / etc / hosts raws li hauv qab no, hloov nyob rau hauv kab txhais FQDN ntawm tus tswv tsev, qhov chaw nyob los ntawm 127.0.0.1 mus rau sab hauv IP chaw nyob ntawm tus neeg rau zaub mov no, thiab lub npe los ntawm lub npe tsim nyog hauv cheeb tsam .internal rau pej xeem lub npe ntawm tus neeg rau zaub mov tau teev tseg. ua ntej hauv A-cov ntaub ntawv ntawm DNS cheeb tsam, thiab sib xws los ntawm kev hloov lub npe luv luv hauv txoj kev no (yog tias nws txawv ntawm lub npe luv luv los ntawm pej xeem DNS A-cov ntaub ntawv).

Piv txwv li, hauv peb rooj plaub, cov ntaub ntawv hosts zoo li:

Tom qab editing nws zoo li no:

Nco tseg: hloov cov ntaub ntawv no, tus editor yuav tsum tau khiav nrog cov neeg siv hauv paus txoj cai, piv txwv li, "sudo vi /etc/hosts"los yog, yog tias lub pob mc raug teeb tsa, koj tuaj yeem siv cov lus txib "sudo mcedit /etc/hosts»

3.4 Teeb tus neeg siv tus password

Qhov no yog qhov tsim nyog vim tias lub firewall yuav raug teeb tsa yav tom ntej, thiab yog tias muaj teeb meem nrog nws, yog tias tus neeg siv muaj tus password, nws tuaj yeem nkag mus rau hauv lub tshuab virtual siv lub serial console los ntawm Yandex.Cloud web console. thiab lov tes taw firewall thiab/los yog kho qhov yuam kev. Thaum tsim lub tshuab virtual, tus neeg siv tsis muaj tus password, thiab yog li kev nkag tsuas yog ua tau ntawm SSH siv qhov tseem ceeb authentication.

Txhawm rau teeb tsa tus password, khiav cov lus txib:

sudo passwd <имя пользователя>

Piv txwv li, nyob rau hauv peb rooj plaub nws yuav yog cov lus txib "sudo passwd neeg siv".

4. Kev teeb tsa ntawm Zimbra thiab Zextras Suite

4.1. Rub tawm kev faib tawm ntawm Zimbra thiab Zextras Suite

4.1.1 Rub tawm Zimbra kev faib tawm

Kev ua ntawm kev ua:

1) Mus rau browser rau URL www.zextras.com/download-zimbra-9 thiab sau daim foos. Koj yuav tau txais email nrog txuas mus rub Zimbra rau ntau OSes.

2) Xaiv qhov tseeb version ntawm cov khoom siv faib rau Ubuntu 18.04 LTS platform thiab luam qhov txuas

3) Rub tawm Zimbra faib rau Zimbra server thiab nthuav tawm nws. Txhawm rau ua qhov no, khiav cov lus txib hauv kev sib tham ssh ntawm zimbra server

cd ~
mkdir zimbra
cd zimbra
wget <url, скопированный на предыдущем шаге>
tar –zxf <имя скачанного файла>

(hauv peb qhov piv txwv no yog "tar –zxf zcs-9.0.0_OSE_UBUNTU18_latest-zextras.tgz")

4.1.2 Rub tawm Zextras Suite faib

Kev ua ntawm kev ua:

1) Mus rau browser rau URL www.zextras.com/download

2) Sau daim foos los ntawm kev nkag mus rau cov ntaub ntawv xav tau thiab nyem lub pob "DOWNLOAD TAM SIM NO".

3) Nplooj ntawv download yuav qhib

Nws muaj ob qhov URLs txaus siab rau peb: ib qho nyob rau sab saum toj ntawm nplooj ntawv rau Zextras Suite nws tus kheej, uas peb yuav xav tau tam sim no, thiab lwm qhov hauv qab hauv Docs Server thaiv rau Ubuntu 18.04 LTS, uas yuav xav tau tom qab rau nruab Zextras Docs ntawm Docs VM.

4) Rub tawm Zextras Suite faib rau Zimbra server thiab unzip nws. Txhawm rau ua qhov no, hauv kev sib tham ssh ntawm zimbra server, khiav cov lus txib

cd ~
mkdir zimbra
cd zimbra

(yog tias daim ntawv teev npe tam sim no tsis tau hloov pauv tom qab cov kauj ruam dhau los, cov lus txib saum toj no tuaj yeem raug tshem tawm)

wget http://download.zextras.com/zextras_suite-latest.tgz
tar –zxf zextras_suite-latest.tgz

4.2. Txhim kho Zimbra

Sib koom ua yeeb yam

1) Mus rau hauv phau ntawv qhia uas cov ntaub ntawv tau ntim rau hauv kauj ruam 4.1.1 (tuaj yeem saib nrog cov lus txib ls thaum nyob hauv ~/zimbra directory).

Hauv peb qhov piv txwv, qhov no yuav yog:

cd ~/zimbra/zcs-9.0.0_OSE_UBUNTU18_latest-zextras/zimbra-installer

2) Khiav lub Zimbra installation nrog cov lus txib

sudo ./install.sh

3) Peb teb tus installer cov lus nug

Koj tuaj yeem teb tus installer cov lus nug nrog "y" (xws li "yog"), "n" (xws li "tsis yog"), lossis tawm ntawm tus installer cov kab lus tsis hloov pauv (nws qhia cov kev xaiv los ntawm kev nthuav qhia lawv hauv cov kab lus square, piv txwv li, " [Y]” lossis “[N]”.

Koj puas pom zoo nrog cov lus cog tseg ntawm daim ntawv tso cai software? - Yog.

Siv Zimbra lub pob repository? - default (yog).

"Nruab zimbra-ldap?","Nruab zimbra-logger?","Nruab zimbra-mta?” yog lub neej ntawd (yog).

Nruab zimbra-dnscache? - tsis yog (lub operating system muaj nws tus kheej caching DNS server qhib los ntawm lub neej ntawd, yog li cov pob no yuav muaj kev tsis sib haum xeeb vim yog cov chaw nres nkoj siv).

Nruab zimbra-snmp? - optionally, koj tuaj yeem tawm qhov kev xaiv ua ntej (yog), koj tsis tuaj yeem nruab lub pob no. Hauv peb qhov piv txwv, qhov kev xaiv ua ntej yog sab laug.

"Nruab zimbra-khw?","Nruab zimbra-apache?","Nruab zimbra-spell?","Nruab zimbra-memcached?","Nruab zimbra-proxy?” yog lub neej ntawd (yog).

Nruab zimbra-snmp? - tsis yog (lub pob yeej tsis txaus siab thiab ua haujlwm hloov los ntawm Zextras Drive).

Nruab zimbra-imapd? - default (tsis muaj).

Nruab zimbra-chat? - tsis muaj (ua haujlwm hloov los ntawm Zextras Team)

Tom qab ntawd, tus installer yuav nug seb puas yuav txuas ntxiv lub installation?

Peb teb "yog" yog tias peb tuaj yeem txuas ntxiv, txwv tsis pub peb teb "tsis yog" thiab tau txais lub sijhawm los hloov cov lus teb rau cov lus nug yav dhau los.

Tom qab pom zoo mus txuas ntxiv, tus installer yuav nruab cov pob.

4.) Teb cov lus nug ntawm tus thawj configurator

4.1) Txij li thaum nyob rau hauv peb qhov piv txwv lub npe DNS ntawm tus neeg rau zaub mov xa ntawv (A record name) thiab lub npe ntawm lub chaw xa ntawv (MX cov ntaub ntawv npe) txawv, tus configurator qhia ceeb toom thiab qhia koj kom teem lub npe ntawm lub chaw xa ntawv. Peb pom zoo nrog nws lub tswv yim thiab sau lub npe ntawm MX cov ntaub ntawv. Hauv peb qhov piv txwv nws zoo li no:

Nco tseg: koj tuaj yeem teeb tsa tus xa ntawv xa tuaj txawv ntawm lub npe server yog tias lub npe server muaj MX cov ntaub ntawv ntawm tib lub npe.

4.2) Lub configurator qhia cov ntawv qhia zaub mov tseem ceeb.

Peb yuav tsum teeb tsa Zimbra tus thawj coj lo lus zais (cov ntawv qhia zaub mov 6 hauv peb qhov piv txwv), yam tsis muaj qhov tsis tuaj yeem txuas ntxiv kev teeb tsa, thiab hloov qhov chaw zimbra-proxy (cov ntawv qhia zaub mov 8 hauv peb qhov piv txwv; yog tias tsim nyog, qhov chaw no tuaj yeem hloov pauv. tom qab installation).

4.3) Hloov chaw zimbra-khw

Hauv cov ntawv qhia configurator, nkag mus rau cov ntawv qhia zaub mov thiab nias Enter. Peb mus rau qhov chaw khaws cia zaub mov:

qhov twg nyob rau hauv lub configurator kom peb nkag mus rau tus naj npawb ntawm Admin Password menu item (hauv peb qhov piv txwv 4), nias Enter, tom qab uas tus configurator muab ib tug randomly generated lo lus zais uas koj yuav pom zoo nrog (nco ntsoov nws) los yog sau koj tus kheej. Hauv ob qho xwm txheej, thaum kawg, koj yuav tsum nias Enter, tom qab ntawd lub cim rau tos cov ntaub ntawv los ntawm tus neeg siv yuav raug tshem tawm ntawm "Admin Password" yam khoom:

Peb rov qab mus rau cov ntawv qhia zaub mov dhau los (peb pom zoo nrog rau cov lus pom zoo configurator).

4.4) Hloov chaw zimbra-proxy

Los ntawm kev sib piv nrog cov kauj ruam dhau los, hauv cov ntawv qhia zaub mov tseem ceeb, xaiv tus naj npawb ntawm cov khoom "zimbra-proxy" thiab nkag mus rau hauv qhov kev qhia tam sim.

Hauv cov ntawv qhia zaub mov Proxy configuration uas qhib, xaiv tus naj npawb ntawm cov khoom "Proxy server mode" thiab nkag mus rau hauv cov lus qhia configurator.

Tus configurator yuav muab xaiv ib qho ntawm cov hom, nkag mus rau "redirect" rau hauv nws cov lus qhia thiab nias Enter.

Tom qab ntawd peb rov qab mus rau cov ntawv qhia zaub mov tseem ceeb (peb pom zoo nrog rau cov lus pom zoo configurator).

4.5) Khiav configuration

Txhawm rau pib qhov kev teeb tsa, nkag mus rau "a" ntawm lub configurator tam sim. Tom qab ntawd nws yuav nug seb puas yuav khaws cov kev teeb tsa nkag mus rau hauv cov ntaub ntawv (uas tuaj yeem siv rau rov txhim kho) - koj tuaj yeem pom zoo nrog cov lus pom zoo, yog tias txuag tau ua tiav - nws yuav nug nyob rau hauv cov ntaub ntawv twg kom txuag tau qhov kev teeb tsa (koj kuj tuaj yeem pom zoo nrog cov lus pom zoo los yog sau koj tus kheej cov ntaub ntawv npe).

Nyob rau theem no, koj tseem tuaj yeem tsis kam mus txuas ntxiv thiab hloov pauv rau kev teeb tsa los ntawm kev pom zoo nrog cov lus teb ua ntej rau lo lus nug "Lub kaw lus yuav raug hloov kho - txuas ntxiv?"

Txhawm rau pib lub installation, koj yuav tsum teb "Yes" rau lo lus nug no, tom qab ntawd tus configurator yuav siv cov kev teeb tsa yav dhau los rau qee lub sijhawm.

4.6) Ua kom tiav Zimbra installation

Ua ntej ua tiav, tus installer yuav nug yog Zimbra yuav tsum tau ceeb toom tias lub installation tiav lawm? Koj tuaj yeem lees txais qhov kev lees paub los yog tsis kam (los ntawm kev teb "Tsis yog") cov lus ceeb toom.

Tom qab ntawd tus installer yuav txuas ntxiv ua haujlwm zaum kawg rau qee lub sijhawm thiab tso cov ntawv ceeb toom tias kev teeb tsa lub kaw lus ua tiav nrog kev hais kom nias txhua tus yuam sij kom tawm ntawm lub installer.

4.3. Installation ntawm Zextras Suite

Kawm ntxiv txog kev txhim kho Zextras Suite ntawm no. cov lus qhia.

Kev ua ntawm kev ua:

1) Mus rau hauv phau ntawv qhia uas cov ntaub ntawv tau ntim rau hauv kauj ruam 4.1.2 (tuaj yeem saib nrog cov lus txib ls thaum nyob hauv ~/zimbra directory).

Hauv peb qhov piv txwv, qhov no yuav yog:

cd ~/zimbra/zextras_suite

2) Khiav lub installation ntawm Zextras Suite nrog cov lus txib

sudo ./install.sh all

3) Peb teb tus installer cov lus nug

Lub hauv paus ntsiab lus ntawm kev ua haujlwm ntawm lub installer yog zoo ib yam li Zimbra installer, tshwj tsis yog qhov tsis muaj configurator. Koj tuaj yeem teb tus installer cov lus nug nrog "y" (xws li "yog"), "n" (xws li "tsis yog"), lossis tawm ntawm tus installer cov lus qhia tsis hloov pauv (nws muaj cov kev xaiv, tso rau hauv square brackets, piv txwv li, " [Y]” lossis “[N]”.

Txhawm rau pib txheej txheem kev teeb tsa, koj yuav tsum tau teb "yes" rau cov lus nug hauv qab no:

Koj puas pom zoo nrog cov lus cog tseg ntawm daim ntawv tso cai software?
Koj puas xav kom Zextras Suite cia li rub tawm, nruab thiab hloov kho ZAL Library?

Tom qab ntawd, ceeb toom yuav tshwm sim kom koj nias Enter mus ntxiv:

Tom qab nias Enter, cov txheej txheem kev teeb tsa yuav pib, qee zaum cuam tshuam los ntawm cov lus nug, uas, txawm li cas los xij, peb teb los ntawm kev pom zoo nrog cov lus pom zoo ("yog"), uas yog:

Zextras Suite Core yuav tam sim no raug teeb tsa. Ua li cas?
Koj puas xav nres Zimbra Web Application (mailbox)?
Zextras Suite Zimlet tam sim no yuav raug ntsia. Ua li cas?

Ua ntej qhov kawg ntawm qhov kev teeb tsa pib, koj yuav raug ceeb toom kom teeb tsa DOS lim thiab hais kom koj nias Enter mus ntxiv. Tom qab nias Enter, qhov kawg ntawm qhov kev teeb tsa pib, thaum kawg qhov kev ceeb toom zaum kawg tau tshwm sim thiab lub installer tiav.

4.4. Pib kho qhov teeb meem thiab txhais ntawm LDAP configuration parameters

1) Txhua qhov kev ua tom ntej yog ua raws li tus neeg siv zimbra. Txhawm rau ua qhov no, koj yuav tsum khiav cov lus txib

sudo su - zimbra

2) Peb hloov DOS lim teeb nrog cov lus txib

zmprov mcf zimbraHttpDosFilterMaxRequestsPerSec 150

3) Txhawm rau nruab Zextras Docs, koj yuav xav tau cov ntaub ntawv hais txog qee qhov Zimbra configuration xaiv. Txhawm rau ua qhov no, koj tuaj yeem khiav cov lus txib:

zmlocalconfig –s | grep ldap

Hauv peb qhov piv txwv, cov ntaub ntawv hauv qab no yuav tshwm sim:

Txhawm rau siv ntxiv, koj yuav xav tau ldap_url, zimbra_ldap_password (thiab zimbra_ldap_userdn, txawm hais tias Zextras Docs installer feem ntau ua qhov tseeb kwv yees txog LDAP username).

4) Tawm raws li tus neeg siv zimbra los ntawm kev khiav cov lus txib
logout

5. Npaj Docs server rau kev teeb tsa

5.1. Uploading SSH tus yuam sij ntiag tug rau Zimbra server thiab nkag mus rau Docs server

Nws yog ib qho tsim nyog yuav tsum tso rau ntawm Zimbra server tus yuam sij ntiag tug ntawm SSH tus khub tseem ceeb, tus yuam sij pej xeem uas tau siv hauv kauj ruam 2.2.2 p.2.2 thaum tsim Docs virtual tshuab. Nws tuaj yeem xa mus rau tus neeg rau zaub mov ntawm SSH (piv txwv li, ntawm sftp) lossis muab tso rau ntawm daim ntawv teev lus (yog tias lub peev xwm ntawm SSH tus neeg siv tau siv thiab nws qhov chaw ua haujlwm tau tso cai).

Peb txiav txim siab tias tus yuam sij ntiag tug tau muab tso rau hauv cov ntaub ntawv ~/.ssh/docs.key thiab tus neeg siv nkag mus rau hauv Zimbra server yog nws tus tswv (yog tias tus neeg siv tau rub tawm / tsim cov ntaub ntawv no, nws tau los ua nws tus tswv).

Koj yuav tsum khiav cov lus txib ib zaug:

chmod 600 ~/.ssh/docs.key

Yav tom ntej, txhawm rau nkag mus rau Docs server, koj yuav tsum ua cov haujlwm hauv qab no:

1) Nkag mus rau Zimbra server

2) Khiav cov lus txib

ssh -i ~/.ssh/docs.key user@<внутренний ip-адрес сервера Docs>

Qhov twg tus nqi <internal IP chaw nyob ntawm Docs server> tuaj yeem pom hauv "Yandex.Cloud Console", piv txwv li, raws li qhia hauv kab lus 2.3.

5.2. Txhim kho cov tshiab

Tom qab nkag mus rau hauv Docs server, khiav cov lus txib zoo ib yam li cov rau Zimbra server:

sudo apt update
sudo apt upgrade

(thaum ua tiav cov lus txib kawg, teb "y" thaum nug yog tias koj paub tseeb tias daim ntawv teev npe hloov tshiab raug teeb tsa)

Tom qab txhim kho qhov hloov tshiab, koj tuaj yeem (tab sis tsis tas) khiav cov lus txib:

sudo apt autoremove

Thiab thaum kawg ntawm cov kauj ruam, khiav cov lus txib

sudo shutdown –r now

5.3. Ntxiv kev teeb tsa ntawm daim ntawv thov

Koj yuav tsum tau nruab ib tus neeg siv NTP txhawm rau synchronize lub sijhawm system thiab daim ntawv thov tshuaj ntsuam, zoo ib yam li tib qho kev txiav txim rau Zimbra server, nrog rau cov lus txib hauv qab no:

sudo apt install ntp screen

(thaum ua tiav cov lus txib kawg, teb "y" thaum nug yog tias koj paub tseeb tias koj tau teeb tsa cov npe ntawm cov pob khoom)

Koj tseem tuaj yeem nruab cov khoom siv hluav taws xob ntxiv kom yooj yim rau tus thawj tswj hwm. Piv txwv li, Midnight Commander tuaj yeem nruab nrog cov lus txib:

sudo apt install mc

5.4. Hloov qhov system configuration

5.4.1. Hauv /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg cov ntaub ntawv, ib yam li rau Zimbra server, hloov tus nqi ntawm manager_etc_hosts parameter los ntawm qhov tseeb mus rau qhov tsis tseeb.

5.4.2. Kho kom raug /etc/hosts los ntawm kev ntxiv cov pej xeem FQDN ntawm Zimbra server, tab sis nrog qhov chaw nyob IP sab hauv muab los ntawm Yandex.Cloud. Yog tias koj muaj tus thawj coj tswj hwm sab hauv DNS server siv los ntawm cov tshuab virtual (piv txwv li, hauv ib puag ncig ntau lawm), thiab tuaj yeem daws cov pej xeem FQDN ntawm Zimbra server rau qhov chaw nyob IP sab hauv thaum nws tau txais kev thov los ntawm lub network sab hauv. (rau cov lus nug los ntawm Is Taws Nem, FQDN ntawm Zimbra server yuav tsum raug daws rau pej xeem IP chaw nyob ntawm Zimbra server). , qhov kev ua haujlwm no tsis tas yuav tsum tau ua.

Piv txwv li, hauv peb rooj plaub, cov ntaub ntawv hosts zoo li:

Tom qab editing nws zoo li no:

6. Txhim kho Zextras Docs

6.1. Nkag mus rau Docs server

Cov txheej txheem nkag mus rau Docs server tau piav qhia hauv kab lus 5.1.

6.2. Rub tawm Zextras Docs Distribution

Kev ua ntawm kev ua:

1) Los ntawm nplooj ntawv uas nyob rau hauv nqe lus 4.1.2. Downloading Zextras Suite Distribution Koj rub tawm Zextras Suite faib (hauv kauj ruam 3), luam qhov URL rau Ubuntu 18.04 LTS Docs tsim (yog tias tsis tau theej dhau los).

2) Rub tawm Zextras Suite faib rau Zimbra server thiab unzip nws. Txhawm rau ua qhov no, hauv kev sib tham ssh ntawm zimbra server, khiav cov lus txib

cd ~
mkdir zimbra
cd zimbra
wget <URL со страницы скачивания>

(hauv peb cov ntaub ntawv, cov lus txib "wget download.zextras.com/zextras-docs-installer/latest/zextras-docs-ubuntu18.tgz»)

tar –zxf <имя скачанного файла>

(hauv peb cov ntaub ntawv, cov lus txib "tar -zxf zextras-docs-ubuntu18.tgz" raug tua)

6.3. Kev teeb tsa ntawm Zextras Docs

Yog xav paub ntxiv txog kev txhim kho thiab teeb tsa Zextras Docs, saib. S, SѓS,.

Kev ua ntawm kev ua:

1) Mus rau hauv phau ntawv qhia uas cov ntaub ntawv tau ntim rau hauv kauj ruam 4.1.1 (tuaj yeem saib nrog cov lus txib ls thaum nyob hauv ~/zimbra directory).

Hauv peb qhov piv txwv, qhov no yuav yog:

cd ~/zimbra/zextras-docs-installer

2) Khiav Zextras Docs installation siv cov lus txib

sudo ./install.sh

3) Peb teb tus installer cov lus nug

Qhov system yuav raug hloov kho, koj puas xav mus ntxiv? - lees txais qhov kev xaiv ua ntej ("yog").

Tom qab no, kev teeb tsa ntawm kev vam khom yuav pib: tus installer yuav qhia cov pob twg nws xav tau rau nruab thiab nug kom paub meej rau lawv. Nyob rau hauv txhua rooj plaub, peb pom zoo nrog lub default muab.

Piv txwv li, nws yuav nug "python 2.7 tsis pom. Koj puas xav nruab nws?»,«python-ldap tsis pom. Koj puas xav nruab nws?"lwm.

Tom qab txhim kho tag nrho cov pob tsim nyog, tus installer thov kev tso cai rau nruab Zextras Docs:

Koj puas xav nruab Zextras DOCS? - lees txais qhov kev xaiv ua ntej ("yog").

Tom qab ntawd, rau qee lub sijhawm, cov pob khoom raug teeb tsa, qhov tseeb, Zextras Docs thiab hloov mus rau cov lus nug ntawm tus neeg teeb tsa.

4) Peb teb cov lus nug los ntawm configurator

Lub configurator thov configuration parameters ib tug los ntawm ib tug, nyob rau hauv teb, cov nqi tau txais nyob rau hauv cov kauj ruam 3 nyob rau hauv nqe lus 4.4 yog nkag. Pib kho qhov teeb meem thiab txhais ntawm LDAP configuration parameters.

Hauv peb qhov piv txwv, cov kev teeb tsa zoo li:

5) Ua kom tiav lub installation ntawm Zextras Docs

Tom qab teb cov lus nug configurator, tus installer ua tiav Docs configuration hauv zos thiab sau npe cov kev pab cuam ntsia ntawm lub ntsiab Zimbra server ntsia ua ntej.

Rau kev teeb tsa ib lub server, qhov no feem ntau yog txaus, tab sis qee zaum (yog tias cov ntaub ntawv yuav tsis qhib hauv Docs hauv web tus neeg siv khoom ntawm Drive tab), koj yuav tsum ua qhov kev txiav txim uas yuav tsum tau ua rau ntau lub server. kev teeb tsa - hauv peb qhov piv txwv, ntawm lub ntsiab Zimbra server, koj yuav tsum tau ua los ntawm cov neeg siv Zimbra cov lus txib /opt/zimbra/libexec/zmproxyconfgen и zmproxyctl rov pib dua.

7. Kev teeb tsa pib ntawm Zimbra thiab Zextras Suite (tshwj tsis yog Pab Pawg)

7.1. Pib nkag mus rau admin console

Nkag mus rau hauv browser siv URL: https:// ib: 7071

Optionally, koj tuaj yeem nkag mus rau hauv lub vev xaib neeg siv lub URL: https: //

Thaum nkag rau hauv, browsers qhia cov lus ceeb toom tsis ruaj ntseg vim tias tsis muaj peev xwm txheeb xyuas daim ntawv pov thawj. Nws yog ib qho tsim nyog los teb rau qhov browser nrog kev tso cai mus rau lub xaib txawm tias qhov lus ceeb toom no. Qhov no yog vim qhov tseeb tias tom qab kev teeb tsa, daim ntawv pov thawj X.509 tus kheej tau siv rau TLS kev sib txuas, uas tuaj yeem tom qab ntawd (hauv kev siv tau zoo - tsim nyog) hloov nrog daim ntawv pov thawj kev lag luam lossis lwm daim ntawv pov thawj lees paub los ntawm browsers siv.

Hauv daim ntawv lees paub, sau tus neeg siv lub npe hauv hom admin@ <koj tus email lees paub> thiab Zimbra tus thawj coj lo lus zais uas tau teeb tsa thaum lub sijhawm teeb tsa ntawm Zimbra server hauv kauj ruam 4.3 hauv ntu 4.2.

Hauv peb qhov piv txwv, nws zoo li no:

Admin Console:

Web client:

Nco ntsoov 1. Yog tias koj tsis qhia meej txog qhov lees paub sau npe thaum nkag mus rau hauv admin console lossis tus neeg siv lub vev xaib, cov neeg siv yuav raug lees paub tawm tsam tus xa ntawv sau tsim thaum lub Zimbra server raug teeb tsa. Tom qab kev teeb tsa, qhov no tsuas yog lees txais xa ntawv sau uas muaj nyob rau ntawm tus neeg rau zaub mov no, tab sis cov ntawv xa ntawv ntxiv tuaj yeem raug ntxiv thaum lub sijhawm ua haujlwm ntawm lub kaw lus, thiab tom qab ntawd qhia meej meej cov npe hauv tus neeg siv lub npe yuav ua rau muaj qhov sib txawv.

Nco ntsoov 2. Thaum koj nkag mus rau hauv tus neeg siv lub vev xaib, koj tus browser yuav thov kev tso cai los tso saib cov ntawv ceeb toom los ntawm lub xaib. Koj yuav tsum pom zoo kom tau txais cov ntawv ceeb toom los ntawm qhov chaw no.

Nco ntsoov 3. Tom qab nkag mus rau hauv lub console admin, koj yuav raug ceeb toom tias muaj cov lus rau tus thawj tswj hwm, feem ntau ceeb toom kom teeb tsa Zextras thaub qab thiab / lossis yuav daim ntawv tso cai Zextras ua ntej daim ntawv tso cai sim ua tiav. Cov kev ua no tuaj yeem ua tau tom qab, thiab yog li cov lus muaj nyob rau lub sijhawm nkag tuaj yeem tsis quav ntsej thiab / lossis cim raws li nyeem hauv Zextras ntawv qhia: Zextras Alert.

Nco ntsoov 4. Ntawm qhov kev ceeb toom tshwj xeeb, hauv kev saib xyuas tus neeg rau zaub mov, cov xwm txheej ntawm Docs cov kev pabcuam tau tshwm sim "tsis muaj" txawm tias Docs hauv web tus neeg siv khoom ua haujlwm raug:

Qhov no yog ib qho ntawm cov kev sim version thiab tsuas yog kho tau tom qab kev yuav daim ntawv tso cai thiab hu rau kev txhawb nqa.

7.2. Deploying Zextras Suite Components

Hauv Zextras: Cov ntawv qhia zaub mov tseem ceeb, koj yuav tsum nyem rau ntawm lub pob "Deploy" rau tag nrho cov zimlets uas koj xav siv.

Thaum xa cov winterlets, ib qho kev sib tham tshwm nrog cov txiaj ntsig ntawm kev ua haujlwm raws li hauv qab no:

Hauv peb qhov piv txwv, tag nrho Zextras Suite winterlets raug xa mus, tom qab ntawd Zextras: Core daim ntawv yuav siv daim ntawv hauv qab no:

7.3. Hloov chaw nkag

7.3.1. Hloov chaw thoob ntiaj teb

Hauv cov ntawv qhia zaub mov Chaw: Cov chaw thoob ntiaj teb, submenu Proxy server, hloov cov chaw hauv qab no:

Web proxy hom: redirect
Pab kom tswj hwm console proxy server: kos lub thawv.
Tom qab ntawd, nyob rau sab xis sab xis ntawm daim ntawv, nyem rau ntawm "Txuag".

Hauv peb qhov piv txwv, tom qab hloov pauv, daim ntawv zoo li no:

7.3.2. Hloov mus rau lub ntsiab Zimbra server nqis

Hauv cov ntawv qhia zaub mov: Cov servers: <npe ntawm lub ntsiab Zimbra server>, submenu Proxy server, hloov cov chaw hauv qab no:

Web proxy hom: nyem rau ntawm lub pob "Reset to default value" (nyob rau hauv cov ntaub ntawv no, tus nqi nws tus kheej yuav tsis hloov, vim nws twb teem lub sij hawm installation). Ua kom lub npe neeg rau zaub mov ntawm cov tswj hwm console: xyuas tias lub checkbox tau kuaj xyuas (tus nqi qub yuav tsum tau thov, yog tias tsis yog, koj tuaj yeem nyem lub pob "Pib rov qab rau tus nqi qub" thiab / lossis teeb tsa manually). Tom qab ntawd, nyob rau sab xis sab xis ntawm daim ntawv, nyem rau ntawm "Txuag".

Hauv peb qhov piv txwv, tom qab hloov pauv, daim ntawv zoo li no:

Nco tseg: (tej zaum yuav tsum rov pib dua yog tias nkag rau ntawm qhov chaw nres nkoj no tsis ua haujlwm)

7.4. Tshiab nkag rau admin console

Nkag mus rau admin console hauv browser siv qhov URL: https:// ib: 9071
Yav tom ntej, siv qhov URL no los nkag rau hauv

Nco tseg: rau kev teeb tsa ib lub server, qhov kev hloov pauv hauv cov kauj ruam dhau los feem ntau yog txaus, tab sis qee zaum (yog tias nplooj ntawv server tsis tshwm sim thaum nkag mus rau qhov URL teev), koj yuav tsum ua qhov kev txiav txim uas yuav tsum tau ua. kev teeb tsa ntau lub server - hauv peb qhov piv txwv, ntawm lub ntsiab Zimbra server koj yuav tsum tau ua cov lus txib los ntawm hauv qab tus neeg siv Zimbra /opt/zimbra/libexec/zmproxyconfgen и zmproxyctl rov pib dua.

7.5. Default COS Editing

Los ntawm Teeb: Chav Kawm Kev Pabcuam Menyuam, xaiv COS lub npe hu ua "default".

Nyob rau hauv "Cov Sijhawm" submenu, uncheck "Portfolio" muaj nuj nqi, ces nyem "Txuag" nyob rau sab xis sab xis ntawm daim ntawv.

Hauv peb qhov piv txwv, tom qab kev teeb tsa, daim ntawv zoo li no:

Nws kuj tseem pom zoo kom kuaj xyuas "Qhib kev sib koom ntawm cov ntaub ntawv thiab cov folders" teeb tsa hauv Drive submenu, tom qab ntawd nyem "Txuag" nyob rau sab xis sab xis ntawm daim ntawv.

Hauv peb qhov piv txwv, tom qab kev teeb tsa, daim ntawv zoo li no:

Hauv ib puag ncig kev sim hauv tib chav kawm, koj tuaj yeem ua rau Pab Pawg Pro ua haujlwm los ntawm kev ua kom lub checkbox nrog tib lub npe nyob rau hauv pab pawg submenu, tom qab uas daim ntawv teeb tsa yuav siv daim ntawv hauv qab no:

Thaum Team Pro nta yog neeg xiam oob qhab, cov neeg siv tsuas tuaj yeem nkag mus rau Team Basic nta.
Thov nco ntsoov tias Zextras Team Pro tau ntawv tso cai ywj pheej los ntawm Zextras Suite, uas tso cai rau koj los yuav nws rau tsawg lub thawv ntawv dua Zextras Suite nws tus kheej; Team Basic nta muaj nyob rau hauv Zextras Suite daim ntawv tso cai. Yog li ntawd, thaum siv nyob rau hauv ib puag ncig ntau lawm, tej zaum yuav tsim nyog los tsim ib chav cais ntawm kev pab cuam rau Team Pro cov neeg siv uas yuav pab kom tsim nyog functionality.

7.6. Kev teeb tsa firewall

Yuav tsum tau rau lub ntsiab Zimbra server:

a) Tso cai nkag los ntawm Is Taws Nem mus rau ssh, http/https, imap/imaps, pop3/pop3s, smtp chaw nres nkoj (qhov chaw nres nkoj loj thiab cov chaw nres nkoj ntxiv rau kev siv los ntawm cov neeg siv xa ntawv) thiab chaw nres nkoj tswj hwm console.

b) Tso cai rau txhua qhov kev sib txuas los ntawm lub network sab hauv (rau qhov twg NAT rau Is Taws Nem tau qhib hauv qib 1.3 hauv kauj ruam 1).

Tsis tas yuav teeb tsa lub firewall rau Zextras Docs server, vim nws tsis yog siv tau los ntawm Internet.

Txhawm rau ua qhov no, koj yuav tsum ua cov haujlwm hauv qab no:

1) Nkag mus rau hauv cov ntawv nyeem console ntawm lub ntsiab Zimbra server. Thaum nkag los ntawm SSH, koj yuav tsum khiav "screen" hais kom ua kom tsis txhob cuam tshuam ntawm kev ua tiav yog tias kev sib txuas nrog cov neeg rau zaub mov poob ib ntus vim muaj kev hloov pauv hauv firewall.

2) Khiav cov lus txib

sudo ufw allow 22,25,80,110,143,443,465,587,993,995,9071/tcp
sudo ufw allow from <адрес_вашей_сети>/<длина CIDR маски>
sudo ufw enable

Hauv peb qhov piv txwv, nws zoo li no:

7.7. Tshawb xyuas nkag mus rau Web Client thiab Admin Console

Txhawm rau saib xyuas firewall qhov ua tau zoo, koj tuaj yeem mus rau qhov browser ntawm qhov URLs hauv qab no

Admin console: https:// ib: 9071
Web client: http:// (yuav muaj kev hloov pauv tsis siv neeg mus rau https:// )
Tib lub sijhawm, siv lwm qhov URL https:// :7071 admin console yuav tsum tsis txhob qhib.

Tus neeg siv lub vev xaib hauv peb qhov piv txwv zoo li no:

Nco tseg. Thaum koj nkag mus rau hauv tus neeg siv lub vev xaib, koj tus browser yuav thov kev tso cai los tso saib cov ntawv ceeb toom los ntawm lub xaib. Koj yuav tsum pom zoo kom tau txais ntawv ceeb toom los ntawm qhov chaw no.

8. Ua kom muaj kev ua haujlwm ntawm kev sib tham hauv suab thiab video hauv Zextras Team

8.1. Cov lus qhia dav dav

Cov kev ua hauv qab no tsis tas yuav tsum yog txhua tus neeg siv Zextras Team sib txuas lus nrog ib leeg yam tsis siv NAT ( tib lub sijhawm, kev sib cuam tshuam nrog Zimbra server nws tus kheej tuaj yeem ua tiav siv NAT, piv txwv li qhov tsis muaj NAT ntawm cov neeg siv khoom tseem ceeb), lossis yog tias tsuas yog ntawv yog siv messenger.

Txhawm rau kom muaj kev sib cuam tshuam ntawm cov neeg siv khoom hauv hom kev sib tham hauv suab thiab video:

a) Koj yuav tsum nruab lossis siv TURN server uas twb muaj lawm.

b) Vim TURN server feem ntau kuj muaj qhov ua haujlwm ntawm STUN server, nws raug nquahu kom siv nws hauv lub peev xwm no (raws li lwm txoj hauv kev, pej xeem STUN servers tuaj yeem siv, tab sis STUN functionality ib leeg feem ntau tsis txaus).

Nyob rau hauv ib qho chaw tsim khoom, vim tias muaj peev xwm thauj khoom siab, nws raug nquahu kom txav lub TURN server mus rau lub tshuab virtual cais. Rau kev sim thiab / lossis lub teeb load, TURN server tuaj yeem koom nrog lub ntsiab Zimbra server.

Hauv peb qhov piv txwv, peb yuav nruab TURN server ntawm lub ntsiab Zimbra server. Txhim kho TURN ntawm ib tus neeg rau zaub mov standalone zoo ib yam, nrog qhov sib txawv uas cov kauj ruam cuam tshuam rau kev txhim kho thiab teeb tsa TURN software tau ua ntawm TURN server, thaum cov kauj ruam los teeb tsa Zimbra server siv cov neeg rau zaub mov no tau ua ntawm lub ntsiab Zimbra server.

8.2. Txhim kho TURN server

Tom qab nkag mus rau hauv dhau los ntawm SSH mus rau lub ntsiab Zimbra server, khiav cov lus txib

sudo apt install resiprocate-turn-server

8.3. Teem lub TURN server

Nco tseg. Tus editor hloov kho tag nrho cov ntaub ntawv teeb tsa hauv qab no yuav tsum tau khiav raws li hauv paus, piv txwv li, "sudo vi /etc/reTurn/reTurnServer.config"los yog, yog tias lub pob mc raug teeb tsa, koj tuaj yeem siv cov lus txib "sudo mcedit /etc/reTurn/reTurnServer.config»

Simplified neeg siv creation

Txhawm rau ua kom yooj yim rau kev tsim thiab kev debugging ntawm qhov kev sib txuas mus rau TURN server, peb yuav lov tes taw kev siv tus password hashed hauv tus neeg siv lub hauv paus ntawm TURN server. Hauv qhov chaw tsim khoom, nws raug nquahu kom siv cov passwords hashed; Nyob rau hauv cov ntaub ntawv no, tiam ntawm lo lus zais hashes rau lawv yuav tsum tau ua raws li cov lus qhia muaj nyob rau hauv lub /etc/reTurn/reTurnServer.config thiab /etc/reTurn/users.txt cov ntaub ntawv.

Kev ua ntawm kev ua:

1) Kho kom raug cov ntaub ntawv /etc/reTurn/reTurnServer.config

Hloov tus nqi ntawm "UserDatabaseHashedPasswords" parameter los ntawm "true" mus rau "false".

2) Kho kom raug /etc/reTurn/users.txt cov ntaub ntawv

Teem lub username, password, realm (arbitrary, tsis siv thaum teeb tsa Zimbra kev twb kev txuas) hauv nws thiab teeb tsa tus as-qhauj account rau "AUTHORIZED".

Hauv peb qhov piv txwv, cov ntaub ntawv pib zoo li:

Tom qab kho nws zoo li:

3) Thov ib tug configuration

Khiav cov lus txib

sudo systemctl restart resiprocate-turn-server

8.4. Firewall configuration rau TURN server

Nyob rau theem no, cov cai ntxiv firewall tsim nyog rau kev ua haujlwm ntawm TURN server raug teeb tsa. Koj yuav tsum tso cai nkag mus rau thawj qhov chaw nres nkoj uas tus neeg rau zaub mov lees txais kev thov, thiab mus rau qhov ntau ntawm cov chaw nres nkoj siv los ntawm tus neeg rau zaub mov los npaj cov kwj tawm.

Cov chaw nres nkoj tau teev tseg hauv cov ntaub ntawv /etc/reTurn/reTurnServer.config, hauv peb rooj plaub nws yog:

Txhawm rau txhim kho firewall cov cai, koj yuav tsum khiav cov lus txib

sudo ufw allow 3478,49152:65535/udp
sudo ufw allow 3478,49152:65535/tcp

8.5. Configuring siv TURN server hauv Zimbra

Txhawm rau teeb tsa, FQDN ntawm tus neeg rau zaub mov yog siv, TURN server, tsim nyob rau hauv kauj ruam 1.2 ntawm kab lus 1, thiab uas yuav tsum tau daws los ntawm DNS servers nrog tib tus IP chaw nyob rau ob qho kev thov hauv Is Taws Nem thiab kev thov los ntawm cov chaw nyob sab hauv.

Saib tam sim no "zxsuite pab pawg iceServer tau" kev sib txuas teeb tsa khiav hauv qab tus neeg siv zimbra.

Yog xav paub ntxiv txog kev teeb tsa kev siv TURN neeg rau zaub mov, saib ntu "Nruab Zextras Pab Pawg siv TURN server" hauv cov ntaub ntawv.

Txhawm rau teeb tsa, koj yuav tsum khiav cov lus txib hauv qab no ntawm Zimbra server:

sudo su - zimbra
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478?transport=udp
zxsuite team iceServer add turn:<FQDN вашего сервера TURN>:3478?transport=udp credential <пароль> username <имя пользователя>
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478?transport=tcp
zxsuite team iceServer add turn:<FQDN вашего сервера TURN>:3478?transport=tcp credential <пароль> username <имя пользователя>
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478
logout

Cov txiaj ntsig ntawm tus neeg siv lub npe thiab tus password, raws li tau teev tseg hauv kauj ruam 2 hauv kab lus 8.3 yog siv los ua <username> thiab <password>.

Hauv peb qhov piv txwv, nws zoo li no:

9. Tso cai xa ntawv hla dhau SMTP raws tu qauv

Raws li cov ntaub ntawv, hauv Yandex.Cloud, cov tsheb khiav tawm mus rau TCP chaw nres nkoj 25 hauv Is Taws Nem thiab rau Yandex Compute Cloud virtual tshuab yeej ib txwm raug thaiv thaum nkag los ntawm pej xeem IP chaw nyob. Qhov no yuav tsis tiv thaiv koj los ntawm kev txheeb xyuas qhov kev lees paub ntawm kev xa ntawv xa los ntawm lwm tus xa ntawv xa mus rau lub chaw xa ntawv lees paub, tab sis nws yuav tiv thaiv koj ntawm kev xa ntawv sab nraud Zimbra server.

Cov ntaub ntawv hais tias Yandex.Cloud tuaj yeem qhib TCP chaw nres nkoj 25 raws li kev thov los ntawm kev txhawb nqa yog tias koj ua raws Cov cai siv tau, thiab muaj txoj cai los thaiv qhov chaw nres nkoj dua thaum ua txhaum txoj cai. Txhawm rau qhib qhov chaw nres nkoj, koj yuav tsum hu rau Yandex.Cloud kev txhawb nqa.

Daim ntawv thov

Tsim SSH cov yuam sij hauv openssh thiab putty thiab hloov cov yuam sij los ntawm putty rau openssh hom

1. Tsim cov khub tseem ceeb rau SSH

Hauv Windows siv putty: khiav cov lus txib puttygen.exe thiab nyem lub pob "Tsim".

Ntawm Linux: khiav qhov hais kom ua

ssh-keygen

2. Hloov cov yuam sij los ntawm putty rau openssh hom

Hauv Windows:

Kev ua ntawm kev ua:

Khiav lub program puttygen.exe.
Load tus yuam sij ntiag tug hauv ppk hom, siv cov ntawv qhia zaub mov Cov ntaub ntawv → Load private key.
Sau tus lej (passphrase) yog tias xav tau rau tus yuam sij no.
Tus yuam sij pej xeem hauv OpenSSH hom yog tso tawm hauv puttygen nrog "Public key rau pasting rau hauv OpenSSH authorized_keys file field"
Txhawm rau xa tus yuam sij ntiag tug rau OpenSSH hom ntawv, xaiv Conversions → Export OpenSSH tus yuam sij hauv cov ntawv qhia zaub mov tseem ceeb
Txuag tus yuam sij ntiag tug rau cov ntaub ntawv tshiab.

Hauv Linux

1. Nruab PuTTY cov cuab yeej pob:

hauv Ubuntu:

sudo apt-get install putty-tools

ntawm Debian zoo li kev faib tawm:

apt-get install putty-tools

hauv RPM-raws li kev faib tawm raws li yum (CentOS, thiab lwm yam):

yum install putty

2. Txhawm rau hloov tus yuam sij ntiag tug, khiav cov lus txib:

puttygen <key.ppk> -O private-openssh -o <key_openssh>

3. Tsim kom muaj tus yuam sij rau pej xeem (yog tias tsim nyog):

puttygen <key.ppk> -O public-openssh -o <key_openssh.pub>

tshwm sim

Tom qab kev teeb tsa raws li cov lus pom zoo, tus neeg siv tau txais Zimbra mail server teeb tsa hauv Yandex.Cloud infrastructure nrog Zextras txuas ntxiv rau kev sib txuas lus thiab kev koom tes nrog cov ntaub ntawv. Cov kev teeb tsa tau tsim nrog qee qhov kev txwv rau ib puag ncig kev sim, tab sis nws tsis yooj yim los hloov lub installation mus rau hom ntau lawm thiab ntxiv kev xaiv rau kev siv Yandex.Cloud khoom cia thiab lwm yam. Rau cov lus nug txog kev xa mus thiab siv cov kev daws teeb meem, thov hu rau koj tus khub Zextras - SVZ los yog cov neeg sawv cev Yandex.Cloud.

Rau tag nrho cov lus nug ntsig txog Zextras Suite, koj tuaj yeem tiv tauj Tus Neeg Sawv Cev ntawm Zextras Ekaterina Triandafilidi los ntawm e-mail [email tiv thaiv]

Tau qhov twg los: www.hab.com

Kev xa tawm ntawm Zextras / Zimbra chaw ua haujlwm chaw ua haujlwm hauv Yandex.Cloud

Lub hom phiaj ntawm tsab xov xwm

Cov xwm txheej thiab kev txwv

Kev piav qhia ntawm cov txheej txheem kev teeb tsa ntawm Zextras / Zimbra system hauv "ib qho server" version

Daim ntawv thov

tshwm sim

Ntxiv ib saib Отменить ответ