Zimbra LDAP Multi Master Replication Untuk LDAP Master 2

Zimbra LDAP Multi Master Replication Untuk LDAP Master 2, Melanjutkan tutorial sebelumnya https://saad.web.id/2019/08/zimbra-ldap-multi-master-replication-untuk-ldap-master-1/ Berikut ini untuk LDAP Master 2

Cek Password LDAP Master 1, Jalankan di LDAP Master 1

su - zimbra
zmlocalconfig -s | grep passw | grep ldap
ldap_amavis_password = Password10@@@@
ldap_bes_searcher_password = Password10@@@@
ldap_nginx_password = Password10@@@@
ldap_postfix_password = Password10@@@@
ldap_replication_password = Password10@@@@
ldap_root_password = Password10@@@@
zimbra_ldap_password = Password10@@@@

Langkah-langkah Multi Master Replication

1. Buat A Record ldap2.saad.my.id pada cpanel, pointing ke ip public server ldap master 2
2. Ikuti langkah 1-5 pada tutorial ini https://saad.web.id/2019/04/membuat-mail-server-dengan-zimbra-8-8-12-di-centos-7/
3. Ubah /etc/resolv.conf

nano /etc/resolv.conf

tambahkan dns google atau dns ISP

nameserver 8.8.8.8

4. Install zimbra dengan seperti berikut:

Select the packages to install
Install zimbra-ldap [Y] y
Install zimbra-logger [Y] n
Install zimbra-mta [Y] n
Install zimbra-dnscache [N] n
Install zimbra-snmp [Y] n
Install zimbra-store [Y] n
Install zimbra-apache [Y] n
Install zimbra-spell [Y] n
Install zimbra-memcached [Y] n
Install zimbra-proxy [Y] n
Checking required space for zimbra-core

Installing:
    zimbra-core
    zimbra-ldap

The system will be modified.  Continue? [N] y

5. Masukkan domain yang digunakan, samakan dengan LDAP Master 1

DNS ERROR resolving MX for ldap2.saad.my.id
It is suggested that the domain name have an MX record configured in DNS
Change domain name? [Yes] yes
Create domain: [ldap2.saad.my.id] saad.my.id

DNS ERROR resolving MX for saad.my.id
It is suggested that the domain name have an MX record configured in DNS
Re-Enter domain name? [Yes] No

6. Pilih no 1

Main menu

   1) Common Configuration:
   2) zimbra-ldap:                             Enabled
   s) Save config to file
   x) Expand menu
   q) Quit

*** CONFIGURATION COMPLETE - press 'a' to apply
Select from menu, or press 'a' to apply config (? - help) 1

7. Pilih no 2, masukkan hostname LDAP Master 1

Common configuration

   1) Hostname:                                ldap2.saad.my.id
   2) Ldap master host:                        ldap2.saad.my.id
   3) Ldap port:                               389
   4) Ldap Admin password:                     set
   5) Store ephemeral attributes outside Ldap: no
   6) Secure interprocess communications:      yes
   7) TimeZone:                                America/Los_Angeles
   8) IP Mode:                                 ipv4
   9) Default SSL digest:                      sha256

Select, or 'r' for previous menu [r] 2

Please enter the ldap server hostname: [ldap2.saad.my.id] ldap1.saad.my.id

8. Pilih no 4, set password ldap master 1

Common configuration

   1) Hostname:                                ldap2.saad.my.id
   2) Ldap master host:                        ldap1.saad.my.id
   3) Ldap port:                               389
   4) Ldap Admin password:                     set
   5) Store ephemeral attributes outside Ldap: no
   6) Secure interprocess communications:      yes
   7) TimeZone:                                America/Los_Angeles
   8) IP Mode:                                 ipv4
   9) Default SSL digest:                      sha256

Select, or 'r' for previous menu [r] 4

Password for ldap admin user (min 6 characters): [RtX9sdARX] Password10@@@@

9. Kembali ke main menu

Common configuration

   1) Hostname:                                ldap2.saad.my.id
   2) Ldap master host:                        ldap1.saad.my.id
   3) Ldap port:                               389
   4) Ldap Admin password:                     set
   5) Store ephemeral attributes outside Ldap: yes
   6) Value for zimbraEphemeralBackendURL:     ldap://default
   7) Secure interprocess communications:      yes
   8) TimeZone:                                Asia/Bangkok
   9) IP Mode:                                 ipv4
  10) Default SSL digest:                      sha256

Select, or 'r' for previous menu [r] r

10. Pilih no 2

Main menu

   1) Common Configuration:
        +Hostname:                             ldap2.saad.my.id
        +Ldap master host:                     ldap1.saad.my.id
        +Ldap port:                            389
        +Ldap Admin password:                  set
        +Store ephemeral attributes outside Ldap: yes
        +Value for zimbraEphemeralBackendURL:  ldap://default
        +Secure interprocess communications:   yes
        +TimeZone:                             Asia/Bangkok
        +IP Mode:                              ipv4
        +Default SSL digest:                   sha256

   2) zimbra-ldap:                             Enabled
        +Create Domain:                        yes
        +Domain to create:                     saad.my.id
        +Ldap replication type:                replica
        +Ldap root password:                   set
******* +Ldap replication password:            Not Verified

   s) Save config to file
   x) Expand menu
   q) Quit

Address unconfigured (**) items and enable ldap replication on ldap master  (? - help) 2

11. Pilih no 4, masukkan mmr

Ldap configuration

   1) Status:                                  Enabled
   2) Create Domain:                           yes
   3) Domain to create:                        saad.my.id
   4) Ldap replication type:                   replica
   5) Ldap root password:                      set
** 6) Ldap replication password:               Not Verified

Select, or 'r' for previous menu [r] 4

Please enter the LDAP replication type (replica, mmr) [replica] mmr

12. Masukkan password LDAP Master 1 di menu 6 sampai 11

Ldap configuration

   1) Status:                                  Enabled
   2) Create Domain:                           yes
   3) Domain to create:                        saad.my.id
   4) Ldap replication type:                   mmr
   5) Ldap Server ID:                          2
   6) Ldap root password:                      set
** 7) Ldap replication password:               Not Verified
   8) Ldap postfix password:                   set
   9) Ldap amavis password:                    set
  10) Ldap nginx password:                     set
  11) Ldap Bes Searcher password:              set

Select, or 'r' for previous menu [r] 6

Password for ldap root user (min 6 characters): [RtX9sdARX] Password10@@@@

13. Lakukan dulu di ldap master 1

su - zimbra
/opt/zimbra/libexec/zmldapenablereplica

14. Kembali ke main menu

Ldap configuration

   1) Status:                                  Enabled
   2) Create Domain:                           yes
   3) Domain to create:                        saad.my.id
   4) Ldap replication type:                   mmr
   5) Ldap Server ID:                          2
   6) Ldap root password:                      set
   7) Ldap replication password:               set
   8) Ldap postfix password:                   set
   9) Ldap amavis password:                    set
  10) Ldap nginx password:                     set
  11) Ldap Bes Searcher password:              set

Select, or 'r' for previous menu [r] r

15. Apply Konfigurasi

Main menu

   1) Common Configuration:
   2) zimbra-ldap:                             Enabled
   s) Save config to file
   x) Expand menu
   q) Quit

*** CONFIGURATION COMPLETE - press 'a' to apply
Select from menu, or press 'a' to apply config (? - help) a
Save configuration data to a file? [Yes] yes
Save config in file: [/opt/zimbra/config.11827]
Saving config in /opt/zimbra/config.11827...done.
The system will be modified - continue? [No] yes

16. Pilih no tanpa notify ke zimbra

You have the option of notifying Zimbra of your installation.
This helps us to track the uptake of the Zimbra Collaboration Server.
The only information that will be transmitted is:
        The VERSION of zcs installed (8.8.15_GA_3829_RHEL7_64)
        The ADMIN EMAIL ADDRESS created (admin@saad.my.id)

Notify Zimbra of your installation? [Yes] no

17. Lakukkan di LDAP 1 Master, Agar ketika LDAP Master 1 Down dialihkan ke LDAP Master 2

su - zimbra
/opt/zimbra/libexec/zmldapenable-mmr -s 1 -m ldap://ldap2.saad.my.id:389/
/opt/zimbra/libexec/zmldapmmrtool -q

18. Update ldap_master_url dan ldap_url di semua server mailbox dan MTA

su - zimbra
zmlocalconfig -e ldap_master_url="ldap://ldap1.saad.my.id:389 ldap://ldap2.saad.my.id:389"
zmlocalconfig -e ldap_url="ldap://ldap1.saad.my.id:389 ldap://ldap2.saad.my.id:389"
zmcontrol restart

Selamat Mencoba

Berikut layanan yang ada di saadwebid terkait zimbra
Layanan Jasa Maintenance Zimbra
Layanan Jasa Migrasi Zimbra Mail Server
VPS/Cloud Zimbra
SSL Zimbra Mail Server
SMTP Relay
Layanan Antivirus, Antispam dan Antimalware