Ukuthunyelwa kweziteshi zokusebenza zehhovisi ze-Zextras/Zimbra ku-Yandex.Cloud

Isingeniso

Ukwenza ngcono ingqalasizinda yamahhovisi kanye nokufaka izindawo zokusebenza ezintsha kuyinselelo enkulu ezinkampanini zazo zonke izinhlobo nosayizi. Inketho engcono kakhulu yephrojekthi entsha ukuqasha izinsiza kumafu futhi uthenge amalayisense angasetshenziswa kokubili kumhlinzeki kanye nasesikhungweni sakho sedatha. Isixazululo esisodwa sesimo esinjalo siwukuthi I-Zextras Suite, okukuvumela ukuthi udale inkundla yokusebenzisana nokuxhumana kwebhizinisi kwebhizinisi kokubili endaweni yamafu nakungqalasizinda yakho.

Isixazululo sakhelwe amahhovisi anoma yimuphi usayizi futhi sinezimo ezimbili eziyinhloko zokuthunyelwa: uma unamabhokisi eposi afinyelela ezinkulungwaneni ze-3000 futhi azikho izidingo eziphakeme zokubekezelela amaphutha, ungasebenzisa ukufakwa kweseva eyodwa, kanye nenketho yokufaka iseva eminingi. isekela ukusebenza okuthembekile nokusabelayo kwamashumi nezinkulungwane ezingamakhulu zamabhokisi eposi. Kuzo zonke izimo, umsebenzisi uthola ukufinyelela kumeyili, amadokhumenti kanye nemilayezo ngoxhumano lwewebhu olulodwa endaweni yokusebenza esebenzisa noma iyiphi i-OS ngaphandle kokufaka nokumisa isofthiwe eyengeziwe, noma ngezinhlelo zokusebenza zeselula ze-iOS ne-Android. Kungenzeka ukusebenzisa amaklayenti ajwayelekile e-Outlook ne-Thunderbird.

Ukuze usebenzise iphrojekthi, uzakwethu we-Zextras - I-SVZ ikhethe i-Yandex.Cloud ngoba ukwakheka kwayo kufana ne-AWS futhi kukhona ukusekelwa kwesitoreji esihambisanayo se-S3, okuzonciphisa izindleko zokugcina inqwaba yemeyili, imilayezo kanye nemibhalo futhi kwandise ukubekezelelana kwamaphutha kwesixazululo.

Endaweni ye-Yandex.Cloud, amathuluzi ayisisekelo okuphatha umshini obonakalayo asetshenziselwa ukufaka iseva eyodwa "Compute Cloud" kanye namakhono okuphatha inethiwekhi ebonakalayo "Ifu eliyimfihlo elibonakalayo". Ukufakwa kwamaseva amaningi, ngaphezu kwamathuluzi acacisiwe, kuyadingeka ukusebenzisa ubuchwepheshe "Iqembu lokubeka", uma kunesidingo (kuye ngesilinganiso sohlelo) - futhi "I-Instance Groups", kanye nesilinganisi senethiwekhi I-Yandex Load Balancer.

Isitoreji sento ehambelana ne-S3 I-Yandex Object Storage ingasetshenziswa kuzo zombili izinketho zokufaka, futhi ingaxhunywa kumasistimu afakwe endaweni ukuze kugcinwe ukonga nokubekezelela iphutha kwedatha yeseva yemeyili ku-Yandex.Cloud.

Ukufakwa kweseva eyodwa, kuya ngenani labasebenzisi kanye/noma amabhokisi eposi, okulandelayo kuyadingeka: kuseva eyinhloko 4-12 vCPU, 8-64 GB vRAM (amanani athile we-vCPU kanye ne-vRAM ancike enambeni. yamabhokisi eposi kanye nomthwalo wangempela), okungenani i-80 GB yediski yohlelo lokusebenza nezinhlelo zokusebenza, kanye nesikhala sediski esengeziwe sokugcina imeyili, izinkomba, amalogi, njll., kuye ngenombolo nosayizi omaphakathi wamabhokisi eposi futhi angakwazi ukushintsha okuguquguqukayo ngesikhathi sokusebenza kwesistimu; kumaseva asizayo Amadokhumenti: 2-4 vCPU, 2-16 GB vRAM, 16 GB disk space (amanani ensiza ethile kanye nenani lamaseva kuncike emthwalweni wangempela); Ukwengeza, iseva ye-TURN/STUN ingase idingeke (isidingo sayo njengeseva ehlukile nezisetshenziswa zincike emthwalweni wangempela). Ukufakwa kwamaseva amaningi, inombolo nenjongo yemishini ebonakalayo edlala indima kanye nezinsiza ezabelwe yona kunqunywa ngakunye kuye ngezidingo zomsebenzisi.

Inhloso yesihloko

Incazelo yokusetshenziswa endaweni ye-Yandex.Cloud yemikhiqizo ye-Zextras Suite esekelwe kuseva yemeyili ye-Zimbra kunketho yokufaka iseva eyodwa. Ukufakwa okuwumphumela kungasetshenziswa endaweni yokukhiqiza (abasebenzisi abanolwazi bangenza izilungiselelo ezidingekayo futhi bengeze izinsiza).

Uhlelo lweZextras Suite/Zimbra luhlanganisa:

• I-Zimbra - I-imeyili yenkampani enekhono lokwabelana ngamabhokisi eposi, amakhalenda kanye nezinhlu zoxhumana nabo (izincwadi zamakheli).
• Zextras Amadokhumenti — ihhovisi elakhelwe ngaphakathi elisuselwe ku-LibreOffice eku-inthanethi ukuze lidale futhi lihlanganyele namadokhumenti, amaspredishithi, nezethulo.
• I-Zextras Drive - Isitoreji sefayela ngalinye esikuvumela ukuthi uhlele, ugcine futhi wabelane ngamafayela namafolda nabanye abasebenzisi.
• Iqembu leZextras - isithunywa esisekelwa inkomfa yomsindo nevidiyo. Izinguqulo ezitholakalayo i-Team Basic, evumela ukuxhumana okungu-1:1 kuphela, kanye ne-Team Pro, esekela izingqungquthela zabasebenzisi abaningi, iziteshi, ukwabelana ngesikrini, ukwabelana ngamafayela neminye imisebenzi.
• Zextras Mobile - Ukusekelwa kwamadivayisi eselula nge-Exchange ActiveSync ukuze uvumelanise imeyili namadivayisi eselula ngemisebenzi yokuphatha ye-MDM (Mobile Device Management). Ikuvumela ukuthi usebenzise i-Microsoft Outlook njengeklayenti le-imeyili.
• Zextras Admin - ukuqaliswa kokuphathwa kwezinhlelo ezinabaqashi abaningi ngokuthunywa kwabaphathi ukuphatha amaqembu amaklayenti kanye nezigaba zezinsizakalo.
• Zextras Backup -Umjikelezo ogcwele wokulondoloza idatha kanye nokululama ngesikhathi sangempela
• Zextras Powerstore - Ukugcinwa kwesigaba sezinto zesistimu yemeyili ngokusekelwa kwamakilasi okucubungula idatha, enekhono lokugcina idatha endaweni noma ezindaweni zokugcina amafu zezakhiwo ze-S3, okuhlanganisa i-Yandex Object Storage.

Lapho kuqedwa ukufakwa, umsebenzisi uthola uhlelo olusebenza endaweni ye-Yandex.Cloud.

Imigomo nemikhawulo

1. Ukwaba isikhala sediski samabhokisi eposi, izinkomba, nezinye izinhlobo zedatha akumboziwe ngoba i-Zextras Powerstore isekela izinhlobo eziningi zesitoreji. Uhlobo nosayizi wesitoreji kuncike emisebenzini nemingcele yesistimu. Uma kunesidingo, lokhu kungenziwa kamuva ohlelweni lokuguqula ukufakwa okuchaziwe kube okokukhiqiza.
2. Ukwenza ukufakwa kube lula, ukusetshenziswa kweseva ye-DNS ephethwe umlawuli ukuze kuxazululwe amagama esizinda sangaphakathi (okungezona ezomphakathi) akucatshangwa; kusetshenziswa iseva evamile ye-Yandex.Cloud DNS. Uma isetshenziswa endaweni yokukhiqiza, kuyanconywa ukusebenzisa iseva ye-DNS, okungenzeka isivele ikhona kungqalasizinda yebhizinisi.
3. Kucatshangwa ukuthi i-akhawunti eku-Yandex.Cloud isetshenziswa nezilungiselelo ezizenzakalelayo (ikakhulukazi, lapho ungena ku-"Console" yesevisi, kukhona uhla lwemibhalo kuphela (ohlwini oluthi "Amafu Atholakalayo" ngaphansi kwegama elizenzakalelayo). Abasebenzisi ejwayelene nokusebenza ku-Yandex.Cloud, Bangakwazi, ngokubona kwabo, ukwakha uhla lwemibhalo oluhlukile lwebhentshi lokuhlola, noma basebenzise olukhona kakade.
4. Umsebenzisi kufanele abe nendawo ye-DNS yomphakathi lapho kufanele abe nokufinyelela kokuphatha.
5. Umsebenzisi kufanele abe nokufinyelela kuhla lwemibhalo ku-Yandex.Cloud “Console” okungenani enendima “yomhleli” (“Umnikazi Wefu” unawo wonke amalungelo adingekayo ngokuzenzakalela; kunemihlahlandlela yokunikeza ukufinyelela kwefu kwabanye abasebenzisi. : izikhathi, два, ezintathu)
6. Lesi sihloko asichazi ukufaka izitifiketi ze-X.509 zangokwezifiso ezisetshenziselwa ukuvikela ukuxhumana kwenethiwekhi kusetshenziswa izindlela ze-TLS. Uma ukufakwa sekuqediwe, kuzosetshenziswa izitifiketi ezizisayinele, ezivumela iziphequluli ukuthi zisetshenziswe ukufinyelela isistimu efakiwe. Ngokuvamile babonisa isaziso sokuthi iseva ayinaso isitifiketi esingaqinisekiswa, kodwa ikuvumela ukuthi uqhubeke nokusebenza. Kuze kube ukufakwa kwezitifiketi kuqinisekiswe amadivayisi eklayenti (esisayinwe iziphathimandla zokunikeza izitifiketi zomphakathi kanye/noma zebhizinisi), izicelo zamadivayisi eselula angase angasebenzi nesistimu efakiwe. Ngakho-ke, ukufakwa kwezitifiketi ezishiwo endaweni yokukhiqiza kuyadingeka, futhi kwenziwa ngemva kokuphothulwa kokuhlolwa ngokuhambisana nezinqubomgomo zokuphepha zenkampani.

Incazelo yenqubo yokufaka yohlelo lwe-Zextras/Zimbra enguqulweni “yeseva eyodwa”

1. Ukulungiselela kokuqala

Ngaphambi kokuqala ukufaka kufanele uqinisekise:

a) Ukwenza izinguquko endaweni ye-DNS yomphakathi (ukudala irekhodi A leseva ye-Zimbra kanye nerekhodi le-MX lesizinda semeyili esinikezwayo).
b) Ukusetha ingqalasizinda yenethiwekhi ebonakalayo ku-Yandex.Cloud.

Ngesikhathi esifanayo, ngemva kokwenza izinguquko endaweni ye-DNS, kuthatha isikhathi ukuthi lezi zinguquko zisakaze, kodwa, ngakolunye uhlangothi, awukwazi ukudala irekhodi A ngaphandle kokwazi ikheli le-IP elihlotshaniswa nalo.

Ngakho-ke, izenzo zenziwa ngokulandelana okulandelayo:

1. Gcina ikheli le-IP lomphakathi ku-Yandex.Cloud

1.1 Ku-“Yandex.Cloud Console” (uma kudingeka, ukukhetha amafolda “emafini atholakalayo”), yiya esigabeni se-Virtual Private Cloud, isigatshana samakheli e-IP, bese uchofoza inkinobho ethi “Gcina ikheli”, khetha indawo oyithandayo yokutholakala (noma uvume ngevelu ehlongozwayo; le ndawo yokutholakala kufanele ngokulandelayo isetshenziselwe zonke izenzo ezichazwe kamuva ku-Yandex.Cloud, uma amafomu ahambisanayo enenketho yokukhetha indawo etholakalayo), ebhokisini lengxoxo elivulayo, ungakwazi, uma uthanda, kodwa hhayi ngempela, khetha inketho ethi “DDoS Protection”, bese uchofoza inkinobho ethi “Gcina” (bheka futhi imibhalo).

Ngemva kokuvala ingxoxo, ikheli le-IP elimile elinikezwe uhlelo lizotholakala ohlwini lwamakheli e-IP, elingakopishwa futhi lisetshenziswe esinyathelweni esilandelayo.

1.2 Endaweni ye-DNS "yaphambili", yenza irekhodi elingu-A leseva ye-Zimbra ekhomba ekhelini le-IP elabelwe ngaphambilini, irekhodi elingu-A leseva ye-TURN ekhomba ikheli le-IP elifanayo, kanye nerekhodi le-MX lesizinda semeyili esamukelwe. Esibonelweni sethu, lokhu kuzoba i-mail.testmail.svzcloud.ru (iseva ye-Zimbra), i-turn.testmail.svzcloud.ru (i-TURN iseva), kanye ne-testmail.svzcloud.ru (isizinda se-imeyili), ngokulandelanayo.

1.3 Ku-Yandex.Cloud, endaweni ekhethiwe yokutholakala ye-subnet ezosetshenziswa ukuze kusetshenziswe imishini ebonakalayo, vumela i-NAT ku-inthanethi.

Ukuze wenze lokhu, esigabeni se-Virtual Private Cloud, isigatshana esithi “Amanethiwekhi Amafu”, khetha inethiwekhi yamafu efanelekile (ngokuzenzakalelayo, inethiwekhi ezenzakalelayo kuphela etholakala lapho), khetha indawo efanelekile yokutholakala kuyo bese ukhetha “Vumela i-NAT ku-inthanethi. ” ezilungiselelweni zayo.

Isimo sizoshintsha ohlwini lwama-subnets:

Ukuze uthole imininingwane eyengeziwe, bheka amadokhumenti: izikhathi и два.

2. Ukudala imishini ebonakalayo

2.1. Ukudala umshini obonakalayo we-Zimbra

Ukulandelana kwezenzo:

2.1.1 Ku-“Yandex.Cloud Console”, yiya esigabeni se-Compute Cloud, isigatshana esithi “Imishini ebonakalayo”, chofoza inkinobho ethi “Dala i-VM” (ukuthola ulwazi olwengeziwe ngokudala i-VM, bona imibhalo).

2.1.2 Lapho udinga ukusetha:

• Igama – liyazenzela (ngokuhambisana nefomethi esekelwa i-Yandex.Cloud)
• Indawo etholakalayo - kufanele ifane naleyo ekhethwe ngaphambilini yenethiwekhi ebonakalayo.
• Ku-“Izithombe Zomphakathi” khetha Ubuntu 18.04 lts
• Faka idiski yokuqalisa okungenani engu-80GB ngosayizi. Ngezinjongo zokuhlola, uhlobo lwe-HDD lwanele (futhi lusetshenziselwa ukukhiqiza, inqobo nje uma ezinye izinhlobo zedatha zidluliselwa kumadiski ohlobo lwe-SSD). Uma kunesidingo, amadiski engeziwe angangezwa ngemva kokudala i-VM.

Kusethi "yezinsiza zekhompyutha":

• I-vCPU: okungenani 4.
• Isabelo esiqinisekisiwe se-vCPU: ngesikhathi sezenzo ezichazwe esihlokweni, okungenani ama-50%; ngemuva kokufakwa, uma kunesidingo, kungancishiswa.
• RAM: Kunconyiwe 8GB.
• I-Subnet: khetha i-subnet lapho i-inthanethi ye-NAT inikwe amandla khona ngesikhathi sesigaba sokuqala sokulungiselela.
• Ikheli lomphakathi: khetha ohlwini ikheli lasesizindeni se-inthanethi ebelisetshenziswa ngaphambilini ukudala irekhodi A ku-DNS.
• Umsebenzisi: ngokubona kwakho, kodwa uhlukile kumsebenzisi wempande kanye nama-akhawunti esistimu ye-Linux.
• Kufanele ucacise ukhiye we-SSH osesidlangalaleni (ovuliwe).

→ Funda kabanzi mayelana nokusebenzisa i-SSH

Bheka futhi Isithasiselo 1. Ukudala okhiye be-SSH ku-openssh ne-putty nokuguqula okhiye kusuka ku-putty kuya kufomethi ye-openssh.

2.1.3 Lapho ukusetha sekuqediwe, chofoza okuthi “Dala i-VM”.

2.2. Ukudala umshini obonakalayo we-Zextras Docs

Ukulandelana kwezenzo:

2.2.1 Ku-“Yandex.Cloud Console”, yiya esigabeni se-Compute Cloud, isigatshana esithi “Imishini ebonakalayo”, chofoza inkinobho ethi “Dala i-VM” (ukuthola ulwazi olwengeziwe ngokudala i-VM, bona lapha).

2.2.2 Lapho udinga ukusetha:

• Igama – liyazenzela (ngokuhambisana nefomethi esekelwa i-Yandex.Cloud)
• Indawo etholakalayo - kufanele ifane naleyo ekhethwe ngaphambilini yenethiwekhi ebonakalayo.
• Ku-“Izithombe Zomphakathi” khetha Ubuntu 18.04 lts
• Faka idiski yokuqalisa okungenani engu-80GB ngosayizi. Ngezinjongo zokuhlola, uhlobo lwe-HDD lwanele (futhi lusetshenziselwa ukukhiqiza, inqobo nje uma ezinye izinhlobo zedatha zidluliselwa kumadiski ohlobo lwe-SSD). Uma kunesidingo, amadiski engeziwe angangezwa ngemva kokudala i-VM.

Kusethi "yezinsiza zekhompyutha":

• I-vCPU: okungenani 2.
• Isabelo esiqinisekisiwe se-vCPU: ngesikhathi sezenzo ezichazwe esihlokweni, okungenani ama-50%; ngemuva kokufakwa, uma kunesidingo, kungancishiswa.
• I-RAM: okungenani i-2GB.
• I-Subnet: khetha i-subnet lapho i-inthanethi ye-NAT inikwe amandla khona ngesikhathi sesigaba sokuqala sokulungiselela.
• Ikheli lomphakathi: alikho ikheli (lo mshini awudingi ukufinyelela kusuka ku-inthanethi, ukufinyelela okuphumayo kuphela kusuka kulo mshini kuya ku-inthanethi, okunikezwa inketho ethi "NAT kuya ku-inthanethi" ye-subnet esetshenzisiwe).
• Umsebenzisi: ngokubona kwakho, kodwa uhlukile kumsebenzisi wempande kanye nama-akhawunti esistimu ye-Linux.
• Kufanele nakanjani usethe ukhiye we-SSH osesidlangalaleni (ovuliwe), ungasebenzisa ofanayo noweseva ye-Zimbra, ungakha ipheya yokhiye ehlukile, njengoba ukhiye oyimfihlo weseva ye-Zextras Amadokhumenti uzodinga ukubekwa kuseva ye-Zimbra. idiski.

Bheka futhi Isithasiselo 1. Ukudala okhiye be-SSH ku-openssh ne-putty nokuguqula okhiye kusuka ku-putty kuya kufomethi ye-openssh.

2.2.3 Lapho ukusetha sekuqediwe, chofoza okuthi “Dala i-VM”.

2.3 Imishini ebonakalayo edaliwe izotholakala ohlwini lwemishini ebonakalayo, ebonisa, ikakhulukazi, isimo sayo namakheli e-IP asetshenziswayo, emphakathini nangaphakathi. Ulwazi olumayelana namakheli e-IP luzodingeka ezinyathelweni zokufaka ezilandelayo.

3. Ukulungiselela iseva yeZimbra ukuthi ifakwe

3.1 Ifaka izibuyekezo

Udinga ukungena kuseva ye-Zimbra ekhelini layo le-IP lomphakathi usebenzisa iklayenti lakho le-ssh olithandayo usebenzisa ukhiye we-ssh oyimfihlo futhi usebenzisa igama lomsebenzisi elishiwo lapho udala umshini obonakalayo.

Ngemva kokungena ngemvume, sebenzisa imiyalo:

sudo apt update
sudo apt upgrade

(lapho ukhipha umyalo wokugcina, phendula ngokuthi “y” embuzweni mayelana nokuthi uqinisekile ngokufaka uhlu oluhlongozwayo lwezibuyekezo)

Ngemva kokufaka izibuyekezo, ungakwazi (kodwa akudingekile) ukusebenzisa umyalo:

sudo apt autoremove

Futhi ekupheleni kwesinyathelo, sebenzisa umyalo

sudo shutdown –r now

3.2 Ukufakwa okwengeziwe kwezinhlelo zokusebenza

Udinga ukufaka iklayenti le-NTP ukuze uvumelanise isikhathi sohlelo nohlelo lwesikrini ngomyalo olandelayo:

sudo apt install ntp screen

(Lapho ukhipha umyalo wokugcina, phendula ngokuthi “y” lapho ubuzwa ukuthi uyaqiniseka yini ukuthi uyalufaka uhlu olunamathiselwe lwamaphakheji)

Ungakwazi futhi ukufaka izinsiza ezengeziwe ukuze kube lula umlawuli. Isibonelo, i-Midnight Commander ingafakwa ngomyalo:

sudo apt install mc

3.3. Ukushintsha ukucushwa kwesistimu

3.3.1 Kufayela /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg shintsha inani lepharamitha phatha_etc_hosts c weqiniso on bamanga.

Qaphela: ukuze uguqule leli fayela, umhleli kufanele asetshenziswe ngamalungelo omsebenzisi wezimpande, isibonelo, “sudo vi /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg” noma, uma iphakethe le-mc lifakiwe, ungasebenzisa umyalo “sudo mceedit /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg»

3.3.2 Hlela / njll / amabamba kanje, esikhundleni somugqa ochaza i-FQDN yosokhaya ikheli ukusuka ku-127.0.0.1 kuya ekhelini le-IP langaphakathi lale seva, kanye negama elisuka egameni eliphelele elisendaweni .yangaphakathi liye egameni lomphakathi leseva elishiwo ekuqaleni kwe-A. -irekhodi lezoni ye-DNS, kanye nokuhambisanayo ngokushintsha igama lomethuleli elifushane (uma lihlukile kunegama lomethuleli elifushane kurekhodi le-DNS A lomphakathi).

Isibonelo, esimweni sethu ifayela labasingathi lalibukeka kanje:

Ngemva kokuyihlela ibukeke kanje:

Qaphela: ukuze uguqule leli fayela, umhleli kufanele asetshenziswe ngamalungelo omsebenzisi wezimpande, isibonelo, “sudo vi /etc/hosts” noma, uma iphakethe le-mc lifakiwe, ungasebenzisa umyalo “sudo mceedit /etc/hosts»

3.4 Setha iphasiwedi yomsebenzisi

Lokhu kuyadingeka ngenxa yokuthi esikhathini esizayo i-firewall izolungiswa, futhi uma kukhona izinkinga eziphakama ngayo, uma umsebenzisi enephasiwedi, uzokwazi ukungena emshinini we-virtual usebenzisa i-serial console evela ku-Yandex. Ikhonsoli yewebhu yamafu futhi ukhubaze i-firewall kanye/noma ulungise iphutha. Lapho udala umshini we-virtual, umsebenzisi akanalo igama-mfihlo, ngakho-ke ukufinyelela kungenzeka kuphela nge-SSH usebenzisa ukufakazela ubuqiniso kokhiye.

Ukuze usethe iphasiwedi udinga ukusebenzisa umyalo:

sudo passwd <имя пользователя>

Isibonelo, kithi kuzoba umyalo othi “umsebenzisi we-sudo passwd".

4. Ukufakwa kweZimbra neZextras Suite

4.1. Ilanda ukusabalalisa kwe-Zimbra ne-Zextras Suite

4.1.1 Ilanda ukusabalalisa kwe-Zimbra

Ukulandelana kwezenzo:

1) Iya ku-URL ngesiphequluli www.zextras.com/download-zimbra-9 bese ugcwalisa ifomu. Uzothola i-imeyili enezixhumanisi zokulanda i-Zimbra yama-OS ahlukene.

2) Khetha inguqulo yamanje yokusabalalisa yesikhulumi se-Ubuntu 18.04 LTS bese ukopisha isixhumanisi

3) Landa ukusatshalaliswa kwe-Zimbra kuseva ye-Zimbra bese uyiqaqa. Ukuze wenze lokhu, sebenzisa imiyalo kuseshini ye-ssh kuseva ye-zimbra

cd ~
mkdir zimbra
cd zimbra
wget <url, скопированный на предыдущем шаге>
tar –zxf <имя скачанного файла>

(esibonelweni sethu lokhu "itiyela –zxf zcs-9.0.0_OSE_UBUNTU18_latest-zextras.tgz")

4.1.2 Ilanda ukusabalalisa kwe-Zextras Suite

Ukulandelana kwezenzo:

1) Iya ku-URL ngesiphequluli www.zextras.com/download

2) Gcwalisa ifomu ngokufaka idatha edingekayo bese uchofoza inkinobho ethi "KANDA MANJE".

3) Ikhasi lokulanda lizovuleka

Inama-URL amabili esiwathakaselayo: eyodwa iphezulu ekhasini le-Zextras Suite ngokwayo, esizoyidinga manje, kanti enye ingezansi ku-block ye-Docs Server ye-Ubuntu 18.04 LTS, okuzodingeka kamuva ukuze faka i-Zextras Docs ku-VM ye-Amadokhumenti.

4) Landa ukusatshalaliswa kwe-Zextras Suite kuseva ye-Zimbra bese uyiqaqa. Ukuze wenze lokhu, sebenzisa imiyalo kuseshini ye-ssh kuseva ye-zimbra

cd ~
mkdir zimbra
cd zimbra

(uma uhla lwemibhalo lwamanje lungakashintshi ngemuva kwesinyathelo esedlule, imiyalo engenhla ingashiywa)

wget http://download.zextras.com/zextras_suite-latest.tgz
tar –zxf zextras_suite-latest.tgz

4.2. Ukufakwa kweZimbra

Ukulandelana kwezenzo

1) Iya kuhla lwemibhalo lapho amafayela akhishwe khona esinyathelweni 4.1.1 (angabukwa ngomyalo we-ls ngenkathi iku- ~/zimbra directory).

Esibonelweni sethu kungaba:

cd ~/zimbra/zcs-9.0.0_OSE_UBUNTU18_latest-zextras/zimbra-installer

2) Qalisa ukufakwa kwe-Zimbra usebenzisa umyalo

sudo ./install.sh

3) Siphendula imibuzo yomfaki

Ungakwazi ukuphendula imibuzo yesifaki ngokuthi “y” (ihambisana nokuthi “yebo”), “n” (ihambisana nokuthi “cha”), noma ushiye isiphakamiso sesifaki singashintshiwe (sinikeza izinketho, ukuzibonisa kubakaki abayisikwele, isibonelo, “ [Y]” noma “[N].”

Ingabe uyavumelana nemibandela yesivumelwano selayisensi yesofthiwe? - Yebo.

Sebenzisa inqolobane yephakheji ye-Zimbra? - ngokuzenzakalelayo (yebo).

"Faka i-zimbra-ldap?","Faka i-zimbra-logger?","Faka i-zimbra-mta?” – okuzenzakalelayo (yebo).

Faka i-zimbra-dnscache? - cha (isistimu yokusebenza ineseva yayo ye-caching ye-DNS enikwe amandla ngokuzenzakalela, ngakho le phakheji izoba nokungqubuzana nayo ngenxa yamachweba asetshenzisiwe).

Faka i-zimbra-snmp? - uma uthanda, ungashiya inketho ezenzakalelayo (yebo), akudingeki ukuthi ufake le phakheji. Esibonelweni sethu, inketho ezenzakalelayo isele.

"Faka i-zimbra-store?","Faka i-zimbra-apache?","Faka i-zimbra-spell?","Faka i-zimbra-memcached?","Faka i-zimbra-proxy?” – okuzenzakalelayo (yebo).

Faka i-zimbra-snmp? – cha (iphakheji empeleni alisekelwe futhi lisebenza esikhundleni se-Zextras Drive).

Faka i-zimbra-imapd? - okuzenzakalelayo (cha).

Faka i-zimbra-chat? - cha (ifakwe esikhundleni iQembu leZextras)

Ngemva kwalokho isifaki sizobuza ukuthi siqhubeke yini ukufaka?

Siphendula ngokuthi “yebo” uma singaqhubeka, ngaphandle kwalokho siphendula ngokuthi “cha” futhi sithole ithuba lokushintsha izimpendulo zemibuzo ebuzwe ngaphambilini.

Ngemva kokuvuma ukuqhubeka, isifaki sizofaka amaphakheji.

4.) Siphendula imibuzo evela kumhleli oyinhloko

4.1) Njengoba esibonelweni sethu igama le-DNS leseva yemeyili (Igama lerekhodi) kanye negama lesizinda semeyili esikhonjisiwe (igama lerekhodi le-MX) lihlukile, umhleli ubonisa isexwayiso futhi uyakushukumisela ukuthi usethe igama lesizinda semeyili esikhonjisiwe. Siyavumelana nesiphakamiso sakhe futhi sifaka igama lerekhodi le-MX. Esibonelweni sethu kubonakala kanje:

Qaphela: ungasetha futhi isizinda semeyili esinikezwayo ukuthi sihluke egameni leseva uma igama leseva linerekhodi le-MX legama elifanayo.

4.2) I-configurator ibonisa imenyu enkulu.

Sidinga ukusetha iphasiwedi yomqondisi we-Zimbra (into yemenyu 6 esibonelweni sethu), ngaphandle kwalokho okungenakwenzeka ukuqhubeka nokufaka, futhi ushintshe ukulungiselelwa kwe-zimbra-proxy (into yemenyu 8 esibonelweni sethu; uma kunesidingo, lesi silungiselelo singashintshwa. ngemva kokufakwa).

4.3) Ukushintsha izilungiselelo zesitolo se-zimbra

Emyalweni we-configurator, faka inombolo yento yemenyu bese ucindezela u-Enter. Sifika kumenyu yezilungiselelo zesitoreji:

lapho esimemweni somhleli sifaka inombolo yento yemenyu ye-Admin Password (esibonelweni sethu sesi-4), cindezela u-Enter, ngemva kwalokho isilungisi sinikeza iphasiwedi ekhiqizwa ngokungahleliwe, ongavumelana nayo (uyikhumbula) noma ufake eyakho. Kuzo zombili izimo, ekugcineni kufanele ucindezele u-Enter, ngemva kwalokho into ethi “Iphasiwedi Yomlawuli” izosusa umaka ukuze ulinde ukufakwa kolwazi kumsebenzisi:

Sibuyela kumenyu yangaphambilini (sivumelana nesiphakamiso somhleli).

4.4) Ukushintsha izilungiselelo ze-zimbra-proxy

Ngokufanisa nesinyathelo sangaphambilini, kumenyu eyinhloko, khetha inombolo yento ethi "zimbra-proxy" bese uyifaka ku-configurator prompt.

Kumenyu yokucushwa kommeleli evulayo, khetha inombolo yento ethi "Imodi yeseva elibamba" bese uyifake ekwazisweni kwesilungisi.

I-configurator izonikela ngokukhetha enye yezindlela, faka "ukuqondisa kabusha" ekwazisweni kwayo bese ucindezela u-Enter.

Ngemva kwalokho sibuyela kumenyu eyinhloko (sivumelana nesiphakamiso somhleli).

4.5) Iqalisa ukucushwa

Ukuze uqale ukucushwa, faka u-“a” emyalezweni we-configurator. Ngemuva kwalokho izobuza ukuthi ingabe igcina ukucushwa okufakiwe efayeleni (elingasetshenziselwa ukufakwa kabusha) - ungavumelana nesiphakamiso esimisiwe, uma ukugcinwa kwenziwa - izobuza ukuthi yiliphi ifayela ozogcina ukucushwa (wena). futhi ingavumelana nesiphakamiso esimisiwe noma ufake igama lakho lefayela).

Kulesi sigaba, usenganqaba ukuqhubeka nokwenza izinguquko ekucushweni ngokuvumelana nempendulo ezenzakalelayo yombuzo othi "Isistimu izolungiswa - qhubeka?"

Ukuze uqale ukufaka, kufanele uphendule ngokuthi "Yebo" kulo mbuzo, ngemva kwalokho umhleli uzosebenzisa izilungiselelo ezifakwe ngaphambilini isikhathi esithile.

4.6) Iqedela ukufakwa kwe-Zimbra

Ngaphambi kokuqedwa, isifaki sizobuza ukuthi yazise yini i-Zimbra mayelana nokufakwa. Ungavumelana nesiphakamiso esimisiwe noma wenqabe (ngokuphendula ngokuthi “Cha”) isaziso.

Ngemva kwalokho isifaki sizoqhubeka nokwenza imisebenzi yokugcina isikhathi esithile futhi sibonise isaziso sokuthi ukulungiselelwa kwesistimu kuqedile ngokwaziswa kokucindezela noma yimuphi ukhiye ukuze uphume kusifaki.

4.3. Ukufakwa kwe-Zextras Suite

Ukuze uthole ulwazi olwengeziwe mayelana nokufaka i-Zextras Suite, bheka imiyalelo.

Ukulandelana kwezenzo:

1) Iya kuhla lwemibhalo lapho amafayela akhishwe khona esinyathelweni 4.1.2 (angabukwa ngomyalo we-ls ngenkathi iku- ~/zimbra directory).

Esibonelweni sethu kungaba:

cd ~/zimbra/zextras_suite

2) Qalisa ukufakwa kwe-Zextras Suite usebenzisa umyalo

sudo ./install.sh all

3) Siphendula imibuzo yomfaki

Isimiso sokusebenza kwesifaki sifana nesifaki se-Zimbra, ngaphandle kokungabikho komcuphi. Ungakwazi ukuphendula imibuzo yesifaki ngokuthi “y” (ihambisana nokuthi “yebo”), “n” (ihambisana nokuthi “cha”), noma ushiye isiphakamiso sesifaki singashintshiwe (sinikeza izinketho, ukuzibonisa kubakaki abayisikwele, isibonelo, “ [Y]” noma “[N].”

Ukuze uqale inqubo yokufaka, kufanele uphendule ngokungaguquki ngokuthi “yebo” kule mibuzo elandelayo:

Ingabe uyavumelana nemibandela yesivumelwano selayisensi yesofthiwe?
Uyafisa ukuthi i-Zextras Suite izidawunilode, ifake futhi ithuthukise umtapo wolwazi we-ZAL?

Ngemuva kwalokho kuzovezwa isaziso esikucela ukuthi ucindezele u-Enter ukuze uqhubeke:

Ngemva kokucindezela u-Enter, inqubo yokufaka izoqala, ngezinye izikhathi iphazanyiswa imibuzo, okuyinto, nokho, esiyiphendulayo ngokuvumelana neziphakamiso ezizenzakalelayo ("yebo"), okungukuthi:

I-Zextras Suite Core manje izofakwa. Qhubeka?
Ingabe uyafisa ukumisa i-Zimbra Web Application (ibhokisi leposi)?
I-Zextras Suite Zimlet manje isizofakwa. Qhubeka?

Ngaphambi kokuthi ingxenye yokugcina yokufaka iqale, uzokwaziswa ukuthi udinga ukulungisa isihlungi se-DOS futhi ukucele ukuthi ucindezele u-Enter ukuze uqhubeke. Ngemva kokucindezela u-Enter, ingxenye yokugcina yokufaka iyaqala, ekugcineni kuboniswa isaziso sokugcina futhi isifaki siyaqeda.

4.4. Ukushuna kokusetha kokuqala nokunqunywa kwemingcele yokumisa ye-LDAP

1) Zonke izenzo ezilandelayo zenziwa ngaphansi komsebenzisi we-zimbra. Ukuze wenze lokhu udinga ukusebenzisa umyalo

sudo su - zimbra

2) Shintsha isilungiselelo sesihlungi se-DOS ngomyalo

zmprov mcf zimbraHttpDosFilterMaxRequestsPerSec 150

3) Ukuze ufake i-Zextras Amadokhumenti, uzodinga ulwazi mayelana nezinketho zokucushwa kwe-Zimbra. Ukuze wenze lokhu ungasebenzisa umyalo:

zmlocalconfig –s | grep ldap

Esibonelweni sethu, ulwazi olulandelayo luzoboniswa:

Ukuze usebenzise futhi, uzodinga i-ldap_url, zimbra_ldap_password (kanye ne-zimbra_ldap_usrdn, nakuba isifaki se-Zextras Amadokhumenti sivame ukuqagela okulungile mayelana negama lomsebenzisi le-LDAP).

4) Yeka njengomsebenzisi we-zimbra ngokusebenzisa umyalo
Phuma

5. Ukulungiselela iseva ye-Amadokhumenti ukuze ifakwe

5.1. Ilayisha ukhiye oyimfihlo we-SSH kuseva ye-Zimbra nokungena kuseva ye-Amadokhumenti

Kuyadingeka ukubeka kuseva ye-Zimbra ukhiye oyimfihlo wokubhanqwa kokhiye we-SSH, ukhiye wawo osesidlangalaleni osetshenziswe esinyathelweni 2.2.2 sesigaba somthetho 2.2 lapho kwakhiwa umshini wokubuka we-Amadokhumenti. Ingalayishwa kuseva nge-SSH (isibonelo, nge-sftp) noma inamathiselwe ngebhodi lokunamathisela (uma amakhono eklayenti le-SSH esetshenzisiwe nendawo yokusebenza yalo ivumela).

Sicabanga ukuthi ukhiye oyimfihlo ubekwe efayelini ~/.ssh/docs.key futhi umsebenzisi osetshenziswe ukungena kuseva ye-Zimbra ungumnikazi wayo (uma ukudawuniloda/ukwakhiwa kwaleli fayela kwenziwa ngaphansi kwalo msebenzisi, uzenza ngokuzenzakalelayo. waba ngumnikazi wayo).

Udinga ukusebenzisa umyalo kanye:

chmod 600 ~/.ssh/docs.key

Ngokuzayo, ukuze ungene kuseva ye-Amadokhumenti, kufanele wenze ukulandelana kwezenzo ezilandelayo:

1) Ngena ngemvume kuseva ye-Zimbra

2) Qalisa umyalo

ssh -i ~/.ssh/docs.key user@<внутренний ip-адрес сервера Docs>

Lapho inani <ikheli le-IP langaphakathi leseva ye-Amadokhumenti> lingatholakala “ku-Yandex.Cloud Console”, isibonelo, njengoba kuboniswe esigabeni 2.3.

5.2. Ifaka izibuyekezo

Ngemva kokungena kuseva ye-Amadokhumenti, sebenzisa imiyalo efana naleyo yeseva ye-Zimbra:

sudo apt update
sudo apt upgrade

(lapho ukhipha umyalo wokugcina, phendula ngokuthi “y” embuzweni mayelana nokuthi uqinisekile ngokufaka uhlu oluhlongozwayo lwezibuyekezo)

Ngemva kokufaka izibuyekezo, ungakwazi (kodwa akudingekile) ukusebenzisa umyalo:

sudo apt autoremove

Futhi ekupheleni kwesinyathelo, sebenzisa umyalo

sudo shutdown –r now

5.3. Ukufakwa okwengeziwe kwezinhlelo zokusebenza

Udinga ukufaka iklayenti le-NTP ukuze uvumelanise isikhathi sohlelo nohlelo lokusebenza lwesikrini, okufana nesenzo esifanayo seseva ye-Zimbra, ngomyalo olandelayo:

sudo apt install ntp screen

(Lapho ukhipha umyalo wokugcina, phendula ngokuthi “y” lapho ubuzwa ukuthi uyaqiniseka yini ukuthi uyalufaka uhlu olunamathiselwe lwamaphakheji)

Ungakwazi futhi ukufaka izinsiza ezengeziwe ukuze kube lula umlawuli. Isibonelo, i-Midnight Commander ingafakwa ngomyalo:

sudo apt install mc

5.4. Ukushintsha ukucushwa kwesistimu

5.4.1. Efayelini /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg, ngendlela efanayo neyeseva ye-Zimbra, shintsha inani lepharamitha ye-manage_etc_hosts ukusuka kweqiniso kuya kumanga.

Qaphela: ukuze uguqule leli fayela, umhleli kufanele asetshenziswe ngamalungelo omsebenzisi wezimpande, isibonelo, “sudo vi /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg” noma, uma iphakethe le-mc lifakiwe, ungasebenzisa umyalo “sudo mceedit /etc/cloud/cloud.cfg.d/95-yandex-cloud.cfg»

5.4.2. Hlela /etc/hosts, wengeza i-FQDN yomphakathi yeseva ye-Zimbra, kodwa ngekheli le-IP langaphakathi elinikezwe i-Yandex.Cloud. Uma uneseva ye-DNS yangaphakathi elawulwa umlawuli esetshenziswa imishini ebonakalayo (isibonelo, endaweni yokukhiqiza), futhi ekwazi ukuxazulula i-FQDN yomphakathi yeseva ye-Zimbra ngekheli le-IP langaphakathi lapho ithola isicelo esivela kunethiwekhi yangaphakathi (sokuthi izicelo ezivela ku-inthanethi, i-FQDN yeseva ye-Zimbra kufanele ixazululwe ngekheli le-IP lomphakathi, futhi iseva ye-TURN kufanele ihlale ixazululwa ngekheli le-IP lomphakathi, okuhlanganisa lapho ufinyelela kusuka kumakheli angaphakathi), lokhu kusebenza akudingeki.

Isibonelo, esimweni sethu ifayela labasingathi lalibukeka kanje:

Ngemva kokuyihlela ibukeke kanje:

Qaphela: ukuze uguqule leli fayela, umhleli kufanele asetshenziswe ngamalungelo omsebenzisi wezimpande, isibonelo, “sudo vi /etc/hosts” noma, uma iphakethe le-mc lifakiwe, ungasebenzisa umyalo “sudo mceedit /etc/hosts»

6. Ukufakwa kwe-Zextras Amadokhumenti

6.1. Ngena ngemvume kuseva ye-Amadokhumenti

Inqubo yokungena kuseva ye-Amadokhumenti ichazwe esigatshaneni 5.1.

6.2. Ilanda ukusabalalisa kwe-Zextras Amadokhumenti

Ukulandelana kwezenzo:

1) Kusukela ekhasini okuvela kulo esigabeni 4.1.2. Ilanda ukusabalalisa kwe-Zextras Suite Landa ukusabalalisa kwe-Zextras Suite (esinyathelweni sesi-3), kopisha i-URL yokwakha Amadokhumenti e-Ubuntu 18.04 LTS (uma ingazange ikopishwe ngaphambili).

2) Landa ukusatshalaliswa kwe-Zextras Suite kuseva ye-Zimbra bese uyiqaqa. Ukuze wenze lokhu, sebenzisa imiyalo kuseshini ye-ssh kuseva ye-zimbra

cd ~
mkdir zimbra
cd zimbra
wget <URL со страницы скачивания>

(kithina umyalo othi “wget” uyasetshenziswa download.zextras.com/zextras-docs-installer/latest/zextras-docs-ubuntu18.tgz»)

tar –zxf <имя скачанного файла>

(kithi, umyalo othi “tar -zxf zextras-docs-ubuntu18.tgz” uyasetshenziswa)

6.3. Ukufakwa kwe-Zextras Amadokhumenti

Ukuze uthole ulwazi olwengeziwe mayelana nokufaka nokulungisa i-Zextras Amadokhumenti, bona lapha.

Ukulandelana kwezenzo:

1) Iya kuhla lwemibhalo lapho amafayela akhishwe khona esinyathelweni 4.1.1 (angabukwa ngomyalo we-ls ngenkathi iku- ~/zimbra directory).

Esibonelweni sethu kungaba:

cd ~/zimbra/zextras-docs-installer

2) Qalisa ukufakwa kwe-Zextras Amadokhumenti usebenzisa umyalo

sudo ./install.sh

3) Siphendula imibuzo yomfaki

Ungakwazi ukuphendula imibuzo yesifaki ngokuthi “y” (ihambisana nokuthi “yebo”), “n” (ihambisana nokuthi “cha”), noma ushiye isiphakamiso sesifaki singashintshiwe (sinikeza izinketho, ukuzibonisa kubakaki abayisikwele, isibonelo, “ [Y]” noma “[N]”).

Uhlelo luzolungiswa, ungathanda ukuqhubeka? – yamukela inketho emisiwe (“yebo”).

Ngemuva kwalokhu, ukufakwa kokuncika kuzoqala: isifaki sizobonisa ukuthi yimaphi amaphakheji afuna ukuwafaka futhi acele ukuqinisekiswa ukuwafaka. Kuzo zonke izimo, siyavumelana nokunikezwayo okuzenzakalelayo.

Isibonelo, angase abuze "i-python2.7 ayitholakali. Ungathanda ukuyifaka?","I-python-ldap ayitholakali. Ungathanda ukuyifaka?"njll.

Ngemva kokufaka wonke amaphakheji adingekayo, isifaki sicela imvume yokufaka i-Zextras Amadokhumenti:

Ungathanda ukufaka i-Zextras DOCS? – yamukela inketho emisiwe (“yebo”).

Emuva kwalokho kuchithwa isikhathi esithile kufakwa amaphakheji, i-Zextras Amadokhumenti ngokwayo, nokudlulela emibuzweni ye-configurator.

4) Siphendula imibuzo evela kumhleli

I-configurator icela imingcele yokumisa ngayinye ngayinye; ngokuphendula, amanani atholwe esinyathelweni sesi-3 esigatshaneni 4.4 afakiwe. Ukushuna kokuqala kwezilungiselelo nokunqunywa kwamapharamitha wokumisa we-LDAP.

Esibonelweni sethu, izilungiselelo zibukeka kanjena:

5) Iqedela ukufakwa kwe-Zextras Amadokhumenti

Ngemva kokuphendula imibuzo yomhleli, isifaki siqedela ukucushwa kwasendaweni kwe-Amadokhumenti bese sibhalisa isevisi efakiwe kuseva enkulu ye-Zimbra efakwe ngaphambili.

Ekufakweni kweseva eyodwa, ngokuvamile lokhu kwanele, kodwa kwezinye izimo (uma amadokhumenti engeke avulwe kokuthi Amadokhumenti kuklayenti lewebhu kuthebhu yeDrayivu) ungase udinge ukwenza isenzo esidingekayo ukuze kufakwe amaseva amaningi. - esibonelweni sethu, kuseva enkulu ye-Zimbra, uzodinga ukuyenza ngaphansi kwabasebenzisi beZimbra Teams /opt/zimbra/libexec/zmproxyconfgen и zmproxyctl qala kabusha.

7. Ukusethwa kokuqala kwe-Zimbra ne-Zextras Suite (ngaphandle kweThimba)

7.1. Ngena ngemvume kukhonsoli yomqondisi okokuqala ngqa

Ngena ngemvume kusiphequluli usebenzisa i-URL: https:// :7071

Uma uthanda, ungangena kwiklayenti lewebhu usebenzisa i-URL: https://

Lapho ungena, iziphequluli zibonisa isexwayiso mayelana noxhumo olungaphephile ngenxa yokungakwazi ukuqinisekisa isitifiketi. Kufanele uphendule isiphequluli mayelana nemvume yakho yokuya kusayithi ngaphandle kwalesi sexwayiso. Lokhu kungenxa yokuthi ngemva kokufaka, isitifiketi se-X.509 esizisayinele sona sisetshenziselwa uxhumo lwe-TLS, okungase kamuva (ekusetshenzisweni okukhiqizayo - okufanele) kushintshwe isitifiketi sokuthengisa noma esinye isitifiketi esibonwa iziphequluli ezisetshenzisiwe.

Efomini lokufakazela ubuqiniso, faka igama lomsebenzisi ngefomethi admin@<isizinda sakho semeyili esamukelwe> kanye nephasiwedi yomlawuli we-Zimbra eshiwo lapho ufaka iseva ye-Zimbra esinyathelweni 4.3 esigatshaneni 4.2.

Esibonelweni sethu kubonakala kanje:

Ikhonsoli yomlawuli:

Iklayenti lewebhu:

Inothi 1. Uma ungasicacisi isizinda semeyili esamukelwe lapho ungena kukhonsoli yomqondisi noma iklayenti lewebhu, abasebenzisi bazoqinisekiswa kusizinda semeyili esidalwe lapho kufakwa iseva ye-Zimbra. Ngemva kokufaka, lesi ukuphela kwesizinda semeyili esamukelwe esikhona kule seva, kodwa njengoba uhlelo lusebenza, izizinda zemeyili ezengeziwe zingase zengezwe, bese ukucacisa ngokusobala isizinda egameni lomsebenzisi kuzokwenza umehluko.

Inothi 2. Uma ungena kwiklayenti lewebhu, isiphequluli sakho singase sikucele imvume yokubonisa izaziso ezivela kusayithi. Kufanele uvume ukuthola izaziso ezivela kule sayithi.

Inothi 3. Ngemva kokungena kukhonsoli yomqondisi, ungase waziswe ukuthi kunemilayezo eya kumlawuli, ngokuvamile okukhumbuza ukuthi umise i-Zextras Backup kanye/noma uthenge ilayisensi ye-Zextras ngaphambi kokuphelelwa yisikhathi kwelayisensi yesilingo esizenzakalelayo. Lezi zenzo zingenziwa kamuva, ngakho-ke imilayezo ekhona ngesikhathi sokufakwa ingashaywa indiva futhi/noma imakwe njengefundiwe kumenyu ye-Zextras: Isaziso se-Zextras.

Inothi 4. Kubaluleke kakhulu ukuqaphela ukuthi kusimo seseva ukuqapha isimo sesevisi ye-Amadokhumenti sikhonjiswa “njengesingekho” ngisho noma Amadokhumenti kuklayenti lewebhu esebenza kahle:

Lesi isici senguqulo yesilingo futhi singalungiswa kuphela ngemva kokuthenga ilayisensi nokuxhumana nosekelo.

7.2. Ukuthunyelwa kwezingxenye ze-Zextras Suite

Ku-Zextras: Imenyu eyinhloko, kufanele uchofoze inkinobho ethi "Faka" kuwo wonke ama-zimlet ohlose ukuwasebenzisa.

Lapho kuthunyelwa ama-winterlets, ibhokisi lengxoxo livela nomphumela wokusebenza ngale ndlela elandelayo:

Esibonelweni sethu, wonke ama-winterlets e-Zextras Suite asetshenziswa, ngemva kwalokho i-Zextras: Ifomu eliyinhloko lizothatha ifomu elilandelayo:

7.3. Ukushintsha izilungiselelo zokufinyelela

7.3.1. Ukushintsha Izilungiselelo Zomhlaba

Kumenyu Yezilungiselelo: Izilungiselelo zomhlaba wonke, imenyu engaphansi yeseva elibamba, shintsha amapharamitha alandelayo:

Imodi yommeleli wewebhu: qondisa kabusha
Nika amandla iseva elibamba lekhonsoli yokulawula: khetha ibhokisi.
Bese uchofoza ku-"Londoloza" engxenyeni engenhla kwesokudla sefomu.

Esibonelweni sethu, ngemuva kwezinguquko ezenziwe, ifomu libukeka kanje:

7.3.2. Izinguquko kuzilungiselelo zeseva ye-Zimbra enkulu

Kumenyu Yezilungiselelo: Amaseva: <igama leseva eyinhloko ye-Zimbra>, imenyu engaphansi kweseva elibamba, shintsha amapharamitha alandelayo:

Imodi yommeleli wewebhu: chofoza inkinobho ethi "Setha kabusha kunani elimisiwe" (inani ngokwalo ngeke lishintshe, njengoba lalivele limisiwe ngesikhathi sokufakwa). Nika amandla iseva elibamba lekhonsoli yokulawula: hlola ukuthi ibhokisi lokuhlola likhethiwe yini (inani elizenzakalelayo bekufanele lisetshenziswe, uma kungenjalo, ungachofoza inkinobho ethi “Setha kabusha kube inani elimisiwe” kanye/noma ukulisethe mathupha). Bese uchofoza ku-"Londoloza" engxenyeni engenhla kwesokudla sefomu.

Esibonelweni sethu, ngemuva kwezinguquko ezenziwe, ifomu libukeka kanje:

Qaphela: (ukuqalisa kabusha kungase kudingeke uma ukungena kule port kungasebenzi)

7.4. Ukungena ngemvume kwekhonsoli entsha yomqondisi

Ngena ngemvume kukhonsoli yomqondisi esipheqululini sakho usebenzisa i-URL: https:// :9071
Ngokuzayo, sebenzisa le URL ukuze ungene ngemvume

Qaphela: ekufakweni kweseva eyodwa, njengomthetho, izinguquko ezenziwe esinyathelweni sangaphambilini zanele, kodwa kwezinye izimo (uma ikhasi leseva lingaboniswa lapho kufakwa i-URL eshiwo), kungase kudingeke wenze isenzo esidingekayo. ukufakwa kwamaseva amaningi - esibonelweni sethu, imiyalo eyinhloko yeseva ye-Zimbra izodinga ukwenziwa njengomsebenzisi we-Zimbra /opt/zimbra/libexec/zmproxyconfgen и zmproxyctl qala kabusha.

7.5. Ukuhlela i-COS ezenzakalelayo

Kumasethingi: Imenyu Yekilasi Lesevisi, khetha i-COS enegama elithi “okuzenzakalelayo”.

Kumenyu engaphansi ethi “Amathuba”, susa ukumaka umsebenzi we-“Portfolio”, bese uchofoza okuthi “Londoloza” engxenyeni engenhla kwesokudla sefomu.

Esibonelweni sethu, ngemuva kokucushwa, ifomu libukeka kanje:

Kuphinde kunconywe ukuthi uhlole isilungiselelo esithi “Vumela ukwabelana kwamafayela namafolda” kumenyu engaphansi yeDrayivu, bese uchofoza okuthi “Londoloza” engxenyeni engenhla kwesokudla yefomu.

Esibonelweni sethu, ngemuva kokucushwa, ifomu libukeka kanje:

Esimeni sokuhlola, esigabeni esifanayo sesevisi, ungakwazi ukunika amandla imisebenzi ye-Team Pro ngokuvula ibhokisi lokuhlola elinegama elifanayo kumenyu engaphansi Yethimba, ngemva kwalokho ifomu lokumisa lizothatha ifomu elilandelayo:

Uma izici ze-Team Pro zikhutshaziwe, abasebenzisi bazokwazi ukufinyelela izici eziyisisekelo zeThimba kuphela.
Sicela wazi ukuthi i-Zextras Team Pro inikezwe ilayisense ngaphandle kweZextras Suite, ekuvumela ukuthi uyithengele amabhokisi eposi ambalwa kuneZextras Suite ngokwayo; Izici Eziyisisekelo Zethimba zifakiwe kwilayisensi ye-Zextras Suite. Ngakho-ke, uma isetshenziswa endaweni yokukhiqiza, kungase kudingeke ukuthi udale ikilasi lesevisi elihlukile labasebenzisi be-Team Pro elihlanganisa izici ezifanele.

7.6. Ukusethwa kwe-firewall

Iyadingeka kuseva enkulu ye-Zimbra:

a) Vumela ukufinyelela kusuka ku-inthanethi kuya ku-ssh, http/https, imap/imaps, pop3/pop3s, smtp port (imbobo enkulu kanye nezimbobo ezengeziwe ezisetshenziswa amaklayenti eposi) kanye nembobo yekhonsoli yokuphatha.

b) Vumela konke ukuxhumana okusuka kunethiwekhi yangaphakathi (okuvulwe i-NAT ku-inthanethi kusinyathelo 1.3 esinyathelweni 1).

Asikho isidingo sokumisa i-firewall yeseva ye-Zextras Amadokhumenti, ngoba ayitholakali ku-inthanethi.

Ukuze wenze lokhu, kufanele wenze ukulandelana kwezenzo ezilandelayo:

1) Ngena kukhonsoli yombhalo yeseva eyinhloko ye-Zimbra. Uma ungena nge-SSH, kufanele usebenzise umyalo "wesikrini" ukuze ugweme ukuphazamiseka kokukhishwa komyalo uma uxhumano neseva lulahleka okwesikhashana ngenxa yezinguquko kuzilungiselelo zohlelo lokuvikela.

2) Qalisa imiyalo

sudo ufw allow 22,25,80,110,143,443,465,587,993,995,9071/tcp
sudo ufw allow from <адрес_вашей_сети>/<длина CIDR маски>
sudo ufw enable

Esibonelweni sethu kubonakala kanje:

7.7. Ihlola ukufinyelela kuklayenti lewebhu nekhonsoli yomqondisi

Ukuze ugade ukusebenza kwe-firewall, ungaya ku-URL elandelayo esipheqululini sakho

Ikhonsoli yomlawuli: https:// :9071
Iklayenti lewebhu: http:// (kuzoba nokuqondisa kabusha okuzenzakalelayo ku-https:// )
Ngesikhathi esifanayo, usebenzisa enye i-URL https:// :7071 Ikhonsoli yomqondisi akufanele ivuleke.

Iklayenti lewebhu esibonelweni sethu libukeka kanje:

Qaphela. Uma ungena kwiklayenti lewebhu, isiphequluli sakho singase sikucele imvume yokubonisa izaziso ezivela kusayithi. Kufanele uvume ukuthola izaziso ezivela kule sayithi.

8. Ukuqinisekisa ukusebenza kwezingqungquthela zomsindo nevidiyo kuQembu le-Zextras

8.1. Ulwazi jikelele

Izenzo ezichazwe ngezansi azidingeki uma wonke amaklayenti eQembu le-Zextras esebenzisana ngaphandle kokusebenzisa i-NAT (kulokhu, ukusebenzisana neseva ye-Zimbra ngokwayo kungenziwa kusetshenziswa i-NAT, okungukuthi kubalulekile ukuthi kungabikho i-NAT phakathi kwamaklayenti), noma uma kusetshenziswa umbhalo kuphela isithunywa.

Ukuqinisekisa ukusebenzisana kwamaklayenti ngenkomfa yomsindo nevidiyo:

a) Kufanele ufake noma usebenzise iseva ekhona ye-TURN.

b) Ngoba iseva ye-TURN ngokuvamile nayo inokusebenza kweseva ye-STUN, kuyanconywa ukuthi uyisebenzise kulesi sikhundla futhi (njengenye indlela, ungasebenzisa amaseva omphakathi we-STUN, kodwa ukusebenza kwe-STUN kukodwa ngokuvamile akwanele).

Endaweni yokukhiqiza, ngenxa yomthwalo onamandla amakhulu, kunconywa ukuhambisa iseva ye-TURN emshinini ohlukile we-virtual. Ukuze kuhlolwe kanye/noma ukulayisha okulula, iseva ye-TURN ingahlanganiswa neseva eyinhloko ye-Zimbra.

Isibonelo sethu sibheka ukufaka iseva ye-TURN kuseva enkulu ye-Zimbra. Ukufaka i-TURN kuseva ehlukile kuyafana, ngaphandle kokuthi izinyathelo ezihlobene nokufaka nokulungisa isofthiwe ye-TURN zenziwa kuseva ye-TURN, futhi izinyathelo zokumisa iseva ye-Zimbra ukuze isebenzise leyo seva zenziwa kuseva enkulu ye-Zimbra.

8.2. Ifaka iseva ye-TURN

Ngemva kokungena ngemvume nge-SSH kuseva enkulu ye-Zimbra, sebenzisa umyalo

sudo apt install resiprocate-turn-server

8.3. Isetha iseva ye-TURN

Qaphela. Ukushintsha wonke amafayela okucushwa alandelayo, umhleli kufanele asetshenziswe ngamalungelo omsebenzisi wezimpande, isibonelo, “sudo vi /etc/reTurn/reTurnServer.config” noma, uma iphakethe le-mc lifakiwe, ungasebenzisa umyalo “sudo mceedit /etc/reTurn/reTurnServer.config»

Ukudalwa komsebenzisi okwenziwe lula

Ukuze kube lula ukudalwa nokulungisa iphutha kokuxhumeka kokuhlola kuseva ye-TURN, sizokhubaza ukusetshenziswa kwamaphasiwedi asheshayo kusizindalwazi somsebenzisi weseva ye-TURN. Endaweni yokukhiqiza, kuyanconywa ukuthi usebenzise amaphasiwedi asheshayo; kulesi simo, ukukhiqizwa kwama-hashi ephasiwedi kubo kufanele kwenziwe ngokuhambisana nemiyalelo equkethwe kumafayela /etc/reTurn/reTurnServer.config kanye /etc/reTurn/users.txt.

Ukulandelana kwezenzo:

1) Hlela ifayela /etc/reTurn/reTurnServer.config

Shintsha inani lepharamitha ye-"UserDatabaseHashedPasswords" isuke kokuthi "iqiniso" iye kokuthi "amanga".

2) Hlela ifayela /etc/reTurn/users.txt

Isethe egameni lomsebenzisi, igama-mfihlo, indawo (ngokungafanele, engasetshenziswa lapho kusethwa uxhumano lwe-Zimbra) bese usetha isimo se-akhawunti ukuze sithi "KUGUNYAZIWE".

Esibonelweni sethu, ifayela ekuqaleni lalibukeka kanje:

Ngemva kokuhlela kubukeke kanje:

3) Isebenzisa ukumisa

Qalisa umyalo

sudo systemctl restart resiprocate-turn-server

8.4. Isetha i-firewall yeseva ye-TURN

Kulesi sigaba, imithetho eyengeziwe ye-firewall edingekayo ekusebenzeni kweseva ye-TURN ifakiwe. Kufanele uvumele ukufinyelela embobeni eyinhloko lapho iseva yamukela izicelo, kanye nobubanzi obuguquguqukayo bezimbobo ezisetshenziswa iseva ukuhlela ukusakazwa kwemidiya.

Izimbobo zicaciswe kufayela /etc/reTurn/reTurnServer.config, kithina yilokhu:

и

Ukufaka imithetho ye-firewall, udinga ukusebenzisa imiyalo

sudo ufw allow 3478,49152:65535/udp
sudo ufw allow 3478,49152:65535/tcp

8.5. Ilungiselela ukusebenzisa iseva ye-TURN e-Zimbra

Ukuze ulungiselele, i-FQDN yeseva isetshenziswa, iseva ye-TURN, edalwe esinyathelweni 1.2 sesigaba 1, futhi okufanele ixazululwe amaseva e-DNS anekheli le-IP lomphakathi elifanayo kuzo zombili izicelo ezivela ku-inthanethi kanye nezicelo ezivela kumakheli angaphakathi.

Buka ukucushwa kwamanje koxhumano lwe-“zxsuite iceServer get” olusebenza ngaphansi komsebenzisi we-zimbra.

Ukuze uthole ulwazi olwengeziwe mayelana nokusetha ukusetshenziswa kweseva ye-TURN, bona isigaba "Ukufaka Ithimba le-Zextras ukusebenzisa iseva ye-TURN" imibhalo.

Ukuze ulungiselele, udinga ukusebenzisa imiyalo elandelayo kuseva ye-Zimbra:

sudo su - zimbra
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478?transport=udp
zxsuite team iceServer add turn:<FQDN вашего сервера TURN>:3478?transport=udp credential <пароль> username <имя пользователя>
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478?transport=tcp
zxsuite team iceServer add turn:<FQDN вашего сервера TURN>:3478?transport=tcp credential <пароль> username <имя пользователя>
zxsuite team iceServer add stun:<FQDN вашего сервера TURN>:3478
logout

Amanani egama lomsebenzisi nephasiwedi, ngokulandelana, ashiwo esinyathelweni sesi-2 esigatshaneni 8.3 asetshenziswa njengokuthi <igama lomsebenzisi> kanye <nephasiwedi>.

Esibonelweni sethu kubonakala kanje:

9. Ukuvumela imeyili ukuthi idlule kuphrothokholi ye-SMTP

Ngokuhambisana imibhalo, ku-Yandex.Cloud, ithrafikhi ephumayo eya embobeni ye-TCP 25 ku-inthanethi futhi ku-Yandex Compute Cloud imishini ebonakalayo ihlale ivinjiwe uma ifinyelelwa ngekheli le-IP lomphakathi. Lokhu ngeke kukuvimbele ekuhloleni ukwamukelwa kwemeyili ethunyelwe isuka kwenye iseva yemeyili eya esizindeni semeyili esamukelwe, kodwa kuzokuvimbela ekuthumeleni imeyili ngaphandle kweseva ye-Zimbra.

Amadokhumenti athi i-Yandex.Cloud ingavula imbobo ye-TCP 25 ngesicelo sosekelo uma uthobela Izinkombandlela Zokusebenzisa Ezamukelekile, futhi igodla ilungelo lokuvimba ichweba futhi uma kwenzeka kwephulwa imithetho. Ukuze uvule imbobo, udinga ukuxhumana nosekelo lwe-Yandex.Cloud.

Uhlelo lokusebenza

Ukudala okhiye be-SSH ku-openssh ne-putty nokuguqula okhiye kusuka ku-putty kuya kufomethi ye-openssh

1. Idala amapheya okhiye we-SSH

Ku-Windows usebenzisa i-putty: sebenzisa umyalo we-puttygen.exe bese uchofoza inkinobho ethi "Khiqiza".

Ku-Linux: sebenzisa umyalo

ssh-keygen

2. Ukuguqula okhiye kusuka ku-putty kuya kufomethi ye-openssh

Ku-Windows:

Ukulandelana kwezenzo:

1. Qalisa uhlelo lwe-puttygen.exe.
2. Layisha ukhiye oyimfihlo ngefomethi ye-ppk, sebenzisa into yemenyu ethi Ifayela → Layisha ukhiye oyimfihlo.
3. Faka umushwana wokungena uma kudingeka kulo khiye.
4. Ukhiye osesidlangalaleni ngefomethi ye-OpenSSH uboniswa ku-puttygen nombhalo othi “Ukhiye osesidlangalaleni wokunamathisela kunkambu yefayela le-OpenSSH authorized_keys”
5. Ukuze uthumele ukhiye oyimfihlo kufomethi ye-OpenSSH, khetha Ukuguqulwa → Khipha ukhiye we-OpenSSH kumenyu enkulu
6. Londoloza ukhiye oyimfihlo efayeleni elisha.

Ku-Linux

1. Faka iphakheji yamathuluzi e-PuTTY:

ku-Ubuntu:

sudo apt-get install putty-tools

ekusabalazweni okufana ne-Debian:

apt-get install putty-tools

ekusakazweni okusekelwe ku-RPM okusekelwe ku-yum (i-CentOS, njll.):

yum install putty

2. Ukuze uguqule ukhiye oyimfihlo, sebenzisa umyalo:

puttygen <key.ppk> -O private-openssh -o <key_openssh>

3. Ukukhiqiza ukhiye womphakathi (uma kunesidingo):

puttygen <key.ppk> -O public-openssh -o <key_openssh.pub>

Umphumela

Ngemva kokufaka ngokuhambisana nezincomo, umsebenzisi uthola iseva yemeyili ye-Zimbra elungiselelwe kungqalasizinda ye-Yandex.Cloud ngesandiso se-Zextras sokuxhumana kwebhizinisi nokusebenzisana namadokhumenti. Izilungiselelo zenziwe ngemikhawulo ethile yendawo yokuhlola, kodwa akunzima ukushintsha ukufakwa kumodi yokukhiqiza futhi wengeze izinketho zokusebenzisa isitoreji sento ye-Yandex.Cloud nokunye. Ngemibuzo emayelana nokuphakela nokusetshenziswa kwesixazululo, sicela uxhumane nozakwenu we-Zextras - I-SVZ noma abameleli I-Yandex.Cloud.

Kuyo yonke imibuzo ehlobene ne-Zextras Suite, ungathinta Ummeleli we-Zextras Ekaterina Triandafilidi nge-imeyili [i-imeyili ivikelwe]

Source: www.habr.com