Instalasi Zimbra

Instalasi Zimbra+Samba PDC Untuk Menggantikan Windows Active Directory+MS !c"ange Server with 11 comments

Prolog Artikel ini menjelaskan bagaimana mengkonfigurasi ZCS ( Zimbra  Zimbra Collaboration Server ) dan Samba sebagai Server PDC ( Primary  Primary Domain Controller  Controller ) ang menggunakan !DAP ( Lightweight  Lightweight Directory Access Protocol ) sebagai database user ter"usat untuk autentikasi user !inu# mau"un $indows% &ungsi ini dica"ai dengan mengkonfigurasi Zimbra !DAP ang  bekerja sebagai database user ter"usat untuk PA' PA'  Pluggable  (Pluggable Authentication Modules) Modules) SS ( Name  Name Service Switch) Switch) dan Samba ldapsam password backend % Server !inu# menggunakan Cent*S +%, ang sudah diinstal mengikuti "anduan -nstalasi Server !inu# C!- dengan Cent*S +%,%% +%,

Proses integrasi ini akan memudahkan "ara Admin dalam mengelola account.account Zimbra 'ail Server dan Samba PDC/Active Director karena bisa langsung terintegrasi% 0ika ditera"kan  "ada lingkungan "erusahaan atau lembaga atau instansi ang selama ini menggunakan $indows Server "anduan ini bisa digunakan untuk menia"kan !inu# server menggantikanindows menggantikan indows  Active Directory Server  dan Micros  dan Microso!t o!t "#change Server %

Persia#an Panduan ini menggunakan Zimbra 'ail Server %2%13 43 bit ang diinstall "ada Cent*S +%, (5irtual6o#)% 7onfigurasi Domain 8 9ostname : 

Domain : centos%org



9ostname : vbo#.server%centos%org vbo#.server%centos%org



Zimbra(;) : server%centos%org

(;)

-ni adalah nama server
7onfigurasi -P: 

-P Address: Address: 1=3%1>%>?%124 1=3%1>%>? %124



@atewa : 1=3%1>%>?%=?

DS sudah dikonfigurasi mengikuti manual 7onfigurasi DS dengan 6ind

$e#erluan 

>4%B9!+%3211242212>43%tg<



sstat







Pre Instalasi Zimbra 1% Pastik Pastikan an servi service ce dns dns sudah sudah berja berjalan lan%% 2. [root@vb [root@vboxox-serv server er ~]# /etc/init.d/named status 3. numbe number r of zones zones: : 9 4. debu debug g leve level: l: 0 5. xfers xfers runn runnng: ng: 0 !. xfers xfers defer deferred red: : 0 ". so $ueres $ueres n %rog %rogress ress: : 0 &. $uer' $uer' log logg gng ng s s ()) ()) 9. re*ursv re*ursve e *len *lents: ts: 0+,000 0+,000 ,0. ,0. t*% t*% *le *lent nts: s: 0+,0 0+,00 0 ,,. ,,. serv server er s s u% nd nd run runn nng ng nmed %d ,4&5 s runnng...

13% idak ada service sendmail sendmail ang berjalan% 0alankan "erintah di bawah sebagai user root untuk mematikan service sendmail% ,3. [root [root@vb @vbox ox-se -serve rver r ~]# /etc/init.d/sendmail stop ,4. /utt /uttng ng do1n do1n sendm sendml l: : ,5. [root [root@vb @vbox ox-se -serve rver r ~]# cd /etc/init.d  [root@vbox-server nt.d]# chkconfig --del sendmail

[

(

]

1% idak ada service htt"d htt"d ang berjalan di tc" "ort >2% 0alankan "erintah di bawah sebagai user root untuk mematikan service htt"d% ,". [root [root@vb @vbox ox-se -serve rver r ~]# etc/init.d/httpd stop ,&. ,&. /to% /to%% %ng ng tt tt%d %d: : ,9. 20. [root [root@vb @vbox ox-se -serve rver r ~]# cd /etc/init.d  [root@vbox-server nt.d]# chkconfig --del httpd 

[

(

]

0ika masih memerlukan service htt"d edit file +et*+tt%d+*onf+tt%d.*onf dan ubah "ort default >2 ke "ort lain%

31% 'asukkan D5D Cent*S +%, mount D5D dan instal sstat% 22.  mkdir /media/Ce /media/CentOS ntOS 23. mount mount /dev /dev/dv /dvd d /media /media/C /Cent entOS OS 24. yum --disablerepo=! --enablerepo=c"-media install sysstat

Instalasi Zimbra 1% #tract #tract file @A3>>4%B9 >4%B9!+%321 !+%3211242212 1242212>43%tg >43%tg<< (asumsi (asumsi file source source ada di direktori +usr+lo*l+sr* )% 2. cd /usr/local/src 3. tar #$f #cs-%.&.'2()*(2++3.,".2&''&3&%&'&+32.tg#

,% Setu"
cd #cs-%.&.'2()*(2++3.,".2&''&3&%&'&+32 !. ./install.sh --platform-override (%ertons logged to +tm%+nstll.log.320&4 e*ng for exstng nstllton... zmbr-ld%...(6 )(78 zmbr-logger...(6 )(78 zmbr-mt...(6 )(78 zmbr-snm%...(6 )(78 zmbr-store...(6 )(78 zmbr-%*e...(6 )(78 zmbr-s%ell...(6 )(78 zmbr-*onvertd...(6 )(78 zmbr-mem**ed...(6 )(78 zmbr-%rox'...(6 )(78 zmbr-r*vng...(6 )(78 zmbr-*luster...(6 )(78 zmbr-*ore...(6 )(78 ;?/ <=;;A;6 <=;)7B C;)(=; 7/? 6>; /()6D<=;. E?AC=?/ /()6D<=; 6( B(7 ?) B(7 )?=/6 <;6 6>; 6;=A/ () 6>?/ <=;;A;6. CB 8(D(<8? (= ?/6<? 6>; /()6D<=;F (= 7/? 6>; =(876F B(7 <=; (/;6? 6( C; C(78 CB 6>?/ <=;;A;6. ?) B(7 8( (6 <=;; 6( < () 6>; 6;=A/ () 6>?/ <=;;A;6F 6>; 8( (6 8(D(<8F ?/6< (= 7/; 6>; =(876. *ense 6erms for te Embr ollborton /ute:   tt%:++111.zmbr.*om+l*ense+zmbrH%ubl*HeulH2.,.tml

8o 'ou gree 1t te terms of te soft1re l*ense greementI [] 0 e*ng for %rere$ustes... )(78: 6 )(78: sudo-,.!.9%,"-5 )(78: lbdn-0.!.5-,., )(78: gm%-4.,.4-,0 )(78: +usr+lb+lbstd*JJ.so.! e*ng for suggested %rere$ustes... )(78: %erl-5.&.& )(78: s'sstt rere$uste *e* *om%lete. e*ng for nstllble %*ges )ound )ound )ound )ound )ound )ound )ound )ound )ound )ound

zmbr-*ore zmbr-ld% zmbr-logger zmbr-mt zmbr-snm% zmbr-store zmbr-%*e zmbr-s%ell zmbr-mem**ed zmbr-%rox'

/ele*t te %*ges to nstll ?nstll zmbr-ld% [B] ?nstll zmbr-logger [B] ?nstll zmbr-mt [B] ?nstll zmbr-snm% [B] ?nstll zmbr-store [B] ?nstll zmbr-%*e [B] ?nstll zmbr-s%ell [B] ?nstll zmbr-mem**ed [] ?nstll zmbr-%rox' [] e*ng re$ured s%*e for zmbr-*ore *e*ng s%*e for zmbr-store ?nstllng:   zmbr-*ore   zmbr-ld%   zmbr-logger   zmbr-mt   zmbr-snm%   zmbr-store   zmbr-%*e   zmbr-s%ell

Bou %%er to be nstllng %*ges on  %ltform dfferent tn te %ltform for 1* te' 1ere bult. 6s %ltform s ent(/5 *ges found: =>;5 6s m' or m' not 1or. 7sng %*ges for  %ltform n 1* te' 1ere not desgned for m' result n n nstllton tt s (6 usble. Bour su%%ort o%tons m' be lmted f 'ou *oose to *ontnue. ?nstll n'1'I [] 0 6e s'stem 1ll be modfed. =emovng =emovng done. lenng lenng lenng lenng

ontnueI [] 0

+o%t+zmbr zmbr *rontb entr'...done. u% u% u% u%

zmbr nt s*r%ts...done. +et*+ld.so.*onf...done. +et*+%reln.*onf...done. +et*+se*urt'+lmts.*onf...done.

)nsed removng Embr ollborton /ute. ?nstllng %*ges   zmbr-*ore......zmbr-*ore-!.0.,2H;520,,030!0,0&32.3&!.r%m...done   zmbr-ld%......zmbr-ld%-!.0.,2H;520,,030!0,0&32.3&!.r%m...done   zmbr-logger......zmbr-logger-!.0.,2H;520,,030!0,0&32.3&!.r%m...done   zmbr-mt......zmbr-mt-!.0.,2H;520,,030!0,0&32.3&!.r%m...done   zmbr-snm%......zmbr-snm%-!.0.,2H;520,,030!0,0&32.3&!.r%m...done   zmbr-store......zmbr-store-!.0.,2H;520,,030!0,0&32.3&!.r%m...done   zmbr-%*e......zmbr-%*e-!.0.,2H;520,,030!0,0&32.3&!.r%m...done   zmbr-s%ell......zmbr-s%ell-!.0.,2H;520,,030!0,0&32.3&!.r%m...done (%ertons logged to +tm%+zmsetu%.020&20,3-,50930.log ?nstllng 8< *onfgurton dtbse...done.

6erikutna
/ettng defults...o results returned for < loou% of vboxserver.*entos.org e*ed nmeservers: ,92.,!&.&".,03 8/ ;==(= resolvng vbox-server.*entos.org ?t s suggested tt te ostnme be resolveble v 8/ nge ostnme [Bes] lese enter te log*l ostnme for ts ost [vbox-server.*entos.org]

server.centos.org ?nterf*e: ,92.,!&.&".,03 ?nterf*e: ,2".0.0., 8/ ;==(= - none of te AK re*ords for server.*entos.org resolve to ts ost nge domn nmeI [Bes] rete domn: [server.*entos.org] centos.org AK: ml.*entos.org ,92.,!&.&".,03 ?nterf*e: ,92.,!&.&".,03 ?nterf*e: ,2".0.0., done. e*ng for %ort *onfl*ts

Selanjutna adalah setu" "assword untuk admin m trnng user: Jlobl 8o*uments <**ount: J/A6 ost: JDeb server >66 %ort: JDeb server >66/ %ort:   JDeb server mode: J?A< server %ort: J?A< server // %ort:   J( server %ort: J( server // %ort: J7se s%ell *e* server: J/%ell server 7=: tt%:++server.*entos.org:""&0+s%ell.%% Jonfgure for use 1t ml %rox': Jonfgure for use 1t 1eb %rox':

;nbled ;nbled 'es dmn@*entos.org 7/;6 'es s%m.*uHul'd%@*entos.org m.l4vdngf"b@*entos.org 1@*entos.org server.*entos.org &0 443 tt% ,43 993 ,,0 995 'es

)</; )</;

J;nble verson J;nble verson JMerson u%dte server.*entos.org JMerson u%dte server.*entos.org 4 5 ! " & r s x $

u%dte *e*s: u%dte notf*tons: notf*ton eml:

6=7; 6=7; dmn@vbox-

sour*e eml:

dmn@vbox-

zmbr-mt: zmbr-snm%: zmbr-logger: zmbr-s%ell: 8efult lss of /erv*e onfgurton: /trt servers fter *onfgurton /ve *onfg to fle ;x%nd menu Nut


;nbled ;nbled ;nbled ;nbled 'es

I - el% 3

/tore *onfgurton , /ttus: 2 rete m trnng user: & lobl 8o*uments <**ount: 9 /A6 ost: ,0 Deb server >66 %ort: ,, Deb server >66/ %ort: ,2 Deb server mode: ,3 ?A< server %ort: ,4 ?A< server // %ort: ,5 ( server %ort: ,! ( server // %ort: ," 7se s%ell *e* server: ,& /%ell server 7=: tt%:++server.*entos.org:""&0+s%ell.%% ,9 onfgure for use 1t ml %rox':   20 onfgure for use 1t 1eb %rox': 2, ;nble verson u%dte *e*s: 22 ;nble verson u%dte notf*tons: 23 Merson u%dte notf*ton eml: server.*entos.org 24 Merson u%dte sour*e eml: server.*entos.org

;nbled 'es dmn@*entos.org 7/;6 'es s%m.*uHul'd%@*entos.org m.l4vdngf"b@*entos.org 1@*entos.org server.*entos.org &0 443 tt% ,43 993 ,,0 995 'es

)</; )</; 6=7; 6=7; dmn@vboxdmn@vbox-

/ele*tF or OrO for %revous menu [r] 1 ss1ord for dmn@*entos.org mn ! *r*ters: [3%82>Pr;]  passord  /tore *onfgurton , /ttus: 2 rete
;nbled 'es

3 m trnng user: & lobl 8o*uments <**ount: 9 /A6 ost: ,0 Deb server >66 %ort: ,, Deb server >66/ %ort: ,2 Deb server mode: ,3 ?A< server %ort: ,4 ?A< server // %ort: ,5 ( server %ort: ,! ( server // %ort: ," 7se s%ell *e* server: ,& /%ell server 7=: tt%:++server.*entos.org:""&0+s%ell.%% ,9 onfgure for use 1t ml %rox':   20 onfgure for use 1t 1eb %rox': 2, ;nble verson u%dte *e*s: 22 ;nble verson u%dte notf*tons: 23 Merson u%dte notf*ton eml: server.*entos.org 24 Merson u%dte sour*e eml: server.*entos.org

dmn@*entos.org set 'es s%m.*uHul'd%@*entos.org m.l4vdngf"b@*entos.org 1@*entos.org server.*entos.org &0 443 tt% ,43 993 ,,0 995 'es

)</; )</; 6=7; 6=7; dmn@vboxdmn@vbox-

/ele*tF or OrO for %revous menu [r] 2' /tore *onfgurton , /ttus: 2 rete m trnng user: & lobl 8o*uments <**ount: 9 /A6 ost: ,0 Deb server >66 %ort: ,, Deb server >66/ %ort: ,2 Deb server mode: ,3 ?A< server %ort: ,4 ?A< server // %ort: ,5 ( server %ort: ,! ( server // %ort: ," 7se s%ell *e* server: ,& /%ell server 7=: tt%:++server.*entos.org:""&0+s%ell.%% ,9 onfgure for use 1t ml %rox':   20 onfgure for use 1t 1eb %rox': 2, ;nble verson u%dte *e*s: /ele*tF or OrO for %revous menu [r] ' /tore *onfgurton

;nbled 'es dmn@*entos.org set 'es s%m.*uHul'd%@*entos.org m.l4vdngf"b@*entos.org 1@*entos.org server.*entos.org &0 443 tt% ,43 993 ,,0 995 'es )</; )</; )</;

, 2 3 4 5 ! " & 9 ,0 ,, ,2 ,3 ,4 ,5 ,! ," ,&   ,9 20

/ttus: rete m trnng user: lobl 8o*uments <**ount: /A6 ost: Deb server >66 %ort: Deb server >66/ %ort: Deb server mode: ?A< server %ort: ?A< server // %ort: ( server %ort: ( server // %ort: 7se s%ell *e* server: onfgure for use 1t ml %rox': onfgure for use 1t 1eb %rox': ;nble verson u%dte *e*s:

;nbled 'es dmn@*entos.org set 'es s%m.*uHul'd%@*entos.org m.l4vdngf"b@*entos.org 1@*entos.org server.*entos.org &0 443 tt% ,43 993 ,,0 995 no )</; )</; )</;

/ele*tF or OrO for %revous menu [r] r An menu , 2 3 4 5 ! " & r s x $

ommon onfgurton: zmbr-ld%: zmbr-store: zmbr-mt: zmbr-snm%: zmbr-logger: zmbr-s%ell: 8efult lss of /erv*e onfgurton: /trt servers fter *onfgurton /ve *onfg to fle ;x%nd menu Nut

;nbled ;nbled ;nbled ;nbled ;nbled ;nbled 'es

LLL ()?7=<6?( (A;6; - %ress OO to %%l' /ele*t from menuF or %ress OO to %%l' *onfg I - el% a /ve *onfgurton dt to  fleI [Bes] /ve *onfg n fle: [+o%t+zmbr+*onfg.!,54] /vng *onfg n +o%t+zmbr+*onfg.!,54...done. 6e s'stem 1ll be modfed - *ontnueI [o] 0es (%ertons logged to +tm%+zmsetu%.020&20,3-,50930.log /ettng lo*l *onfg vlues...done. /ettng u% <...done. 8e%lo'ng < to +o%t+zmbr+*onf+* ...done. retng // *ertf*te...done. ?nstllng mlboxd // *ertf*tes...done. ?ntlzng ld%...done. /ettng re%l*ton %ss1ord...done. /ettng ostfx %ss1ord...done. /ettng mvs %ss1ord...done. /ettng ngnx %ss1ord...done. retng server entr' for server.*entos.org...done. /vng < n ld% ...done.

/vng // ertf*te n ld% ...done. /ettng serv*e %orts on server.*entos.org...done. ostool n defult (/...done. ?nstllng 1eb*lent sns... snd...done. be*...done. zml...done. bones...done. bre...done. 1ves...done. s'...done. 'oo...done. otrod...done. le...done. t1lgt...done. oss...done. steel...done. %ebble...done. lemongrss...done. tree...done. lvender...done. smoe...done. )nsed nstllng 1eb*lent sns. /ettng zmbr)eture?A;nbledQ)</;...done. /ettng zmbr)eture6ss;nbledQ6=7;...done. /ettng zmbr)etureCref*ses;nbledQ6=7;...done. /ettng zmbr)etureoteboo;nbledQ6=7;...done. /ettng A6< ut ost...done. /ettng 6meEone referen*e...done. ?ntlzng mt *onfg...done. /ettng serv*es on server.*entos.org...done. retng domn *entos.org...done. /ettng defult domn nme...done. retng domn *entos.org...lred' exsts. retng dmn **ount dmn@*entos.org...done. retng root ls...done. retng %ostmster ls...done. retng user 1@*entos.org...done. retng user s%m.*uHul'd%@*entos.org...done. retng user m.l4vdngf"b@*entos.org...done. /ettng s%m trnng **ounts...done. ?ntlzng store s$l dtbse...done. /ettng zmbr/mt%>ostnme for server.*entos.org...done. onfgurng /A...done. e*ng for defult ?A *onferen*e room...not %resent. ?ntlzng defult ?A *onferen*e room...done. /ettng u% s'slog.*onf...done. Bou ve te o%ton of notf'ng Embr of 'our nstllton. 6s el%s us to tr* te u%te of te Embr ollborton /ute. 6e onl' nformton tt 1ll be trnsmtted s: 6e M;=/?( of z*s nstlled !.0.,2H
?nstllng *ommon zmlets... *omHzmbrH'memot*ons...done. *omHzmbrHdte...done. *omHzmbrHurl...done. *omHzmbrH*ertHmnger...done. *omHzmbrHbul%rovson...done. *omHzmbrHeml...done. *omHzmbrHdmnverson*e*...done. *omHzmbrH%one...done. *omHzmbrHdnd...done. )nsed nstllng *ommon zmlets. ?ntlzng 8o*uments...done. =estrtng mlboxd...done. /ettng u% zmbr *rontb...done. Aovng +tm%+zmsetu%.020&20,3-,50930.log to +o%t+zmbr+log onfgurton *om%lete - %ress return to ext

?% Cek a"akah
su - #imbra 9. #mcontrol status >ost server.*entos.org nts%m ntvrus ld% logger mlbox mt snm% s%ell stts

=unnng =unnng =unnng =unnng =unnng =unnng =unnng =unnng =unnng

12% Selanjutna adalah tuning  
#mprov ms server.centos.org -#imbraServicenabled snmp ,2. #mprov ms server.centos.org -#imbraServicenabled spell ,3. #mprov ms server.centos.org -#imbraServicenabled logger ,4. #mcontrol restart >ost server.*entos.org /to%%ng stts...8one. /to%%ng mt...8one. /to%%ng s%ell...8one. /to%%ng snm%...8one. /to%%ng r*vng...8one. /to%%ng ntvrus...8one. /to%%ng nts%m...8one. /to%%ng m%%rox'...8one. /to%%ng mem**ed...8one.

/to%%ng mlbox...8one. /to%%ng logger...8one. /to%%ng ld%...8one. >ost server.*entos.org /trtng ld%...8one. /trtng mlbox...8one. /trtng nts%m...8one. /trtng ntvrus...8one. /trtng mt...8one. /trtng stts...8one. [zmbr@vbox-server ~]R #mcontrol status >ost server.*entos.org nts%m =unnng ntvrus =unnng ld% =unnng mlbox =unnng mt =unnng stts =unnng

$on%igurasi Zimbra &DAP Fang dilakukan dalam "roses ini adalah: 

'enambahkan -S Schema kedalam Zimbra !DAP



'enambahkan Samba Schema kedalam Zimbra !DAP



'enambahkan -ndeks kedalam !DAP Schema



Bestart Service Zimbra



'enambahkan 3 user (


'engubah AC! !DAP



'enambahkan Admin #tension Zimbra Posfi# Account dan Zimbra Samba #tension

6erikut langkah.langkahna: 1% 6uat direktori +tm%+z*s-smb % 2.

 mkdir /tmp/#cs-samba

4% #tract file
cp #cs-samba-auto.sh /tmp cp samba-schema.tar.g# /tmp/#cs-samba cp posi$users.ldif /tmp/#cs-samba cp inde$es.ldif /tmp/#cs-samba chon -, #imbra. /tmp/#cs-samba

=% dit file +tm%+z*s-smb-uto.s % @anti variable PASS$*BD gid6ase dan uid6ase home director serta samba schema jika "erlu% ,0. .. ,,. # <=;A;A
3,% Gbah format file +tm%+z*s-smb-uto.s  menjadi uni# dan set file mode ke ?++% 2". cd /tmp 2%. dos2uni$ #cs-samba-auto.sh 2". chmod "" #cs-samba-auto.sh

3>% ksekusi H 29. 30. 3,. 32. 33. 34. 35. 3!. 3". 3&. 39. 40.

[root@vbox-server tm%]# su - #imbra [zmbr@vbox-server ~]R cd /tmp [zmbr@vbox-server tm%]R ./#cs-samba-auto.sh QQU ettng Embr %rmeter... 8omn : *entos.org >ostnme : vbox-server.*entos.org Embr 8< ss1ord : 70sv&Me 8< refx : d*Q*entosFd*Qorg EA(/?KH8<H
4,. QQU onfgurng ?/ /*em... 42. llng sl%d 1t %d 2&"0 done. 43. /trted sl%d: %d 2453! 44. 45. QQU onfgurng /mb /*em... 4!. .+ 4". .+*nQ*onfg.ldf 4&. .+test.*onf 49. .+s*em+ 50. .+s*em+smb.s*em 5,. .+*nQ*onfg+ 52. .+*nQ*onfg+ol*8tbseQV-,Wfrontend.ldf 53. .+*nQ*onfg+ol*8tbseQV0W*onfg.ldf 54. .+*nQ*onfg+*nQs*em+ 55. .+*nQ*onfg+*nQs*em+*nQV,,Wsmb.ldf 5!. .+*nQ*onfg+*nQs*em+*nQV,W*osne.ldf 5". .+*nQ*onfg+*nQs*em+*nQV2Wnetorg%erson.ldf 5&. .+*nQ*onfg+*nQs*em+*nQV0W*ore.ldf 59. .+*nQ*onfg+*nQs*em.ldf !0. llng sl%d 1t %d 2453! done. !,. /trted sl%d: %d 24!22 !2. !3. QQU

$on%igurasi Samba Server untuk menggunakan Zimbra &DAP sebagai Centralized Database dan Primary Domain Controller  dit file konfigurasi samba +et*+smb+smb.*onf % Sim"an file konfigurasi sebelumna menjadi +et*+smb+smb.*onf.defult % @anti bebera"a "arameter di bawah ini sesuai dengan kebutuhan anda% 

1orgrou% Q Y



netbos nme Q Y



%ssdb b*end Q ld%sm:ld%:++mH/erverHEmbr+



logon ome Q ZZ?H
-si file +et*+smb+smb.*onf [globl] 1orgrou% Q 8(A
# logon %t Q ZZ,92.,!&.&".,03ZT7Z%rofle logon %t Q ld% ssl Q no logon drve Q : logon ome Q ZZ,92.,!&.&".,03ZT7 logon s*r%t Q logon.*md dd user s*r%t Q +usr+sbn+userdd GTuG -n -g users dd grou% s*r%t Q +usr+sbn+grou%dd GTgG dd m*ne s*r%t Q +usr+sbn+userdd -n -* GDorstton TuG -A -d +noome -s +bn+flse GTuG delete user s*r%t Q +usr+sbn+userdel GTuG delete user from grou% s*r%t Q +usr+sbn+userdel GTuG GTgG delete grou% s*r%t Q +usr+sbn+grou%del GTgG so*et o%tons Q 6H(8;ome 8re*tores bro1seble Qno red onl' Q o vld users Q T/ [netlogon] *omment Q et1or ogon /erv*e %t Q +vr+lb+smb+netlogon guest o Q 'es lo*ng Q no [%rofles] *omment Q 7sers %rofles %t Q +vr+lb+smb+%rofles red onl' Q o store dos ttrbutes Q Bes *rete ms Q 0!00 dre*tor' ms Q 0"00 bro1seble Q no guest o Q no %rntble Q no [%rofdt] *omment Q rofle 8t /re %t Q +vr+lb+smb+%rofdt red onl' Q o %rofle *ls Q Bes [%rnters] *omment Q
$on%igurasi Server &inu! untuk menggunakan Zimbra &DAP sebagai Centralized Database 1% Sebagai user root lihat resources ang digunakan untuk autentikasi sistem dengan  "erintah autcon%ig 'test % 2. [root@vbox-server ~]# authconfig --test 3. **ng s enbled 4. nssHfles s l1's enbled 5. nssH*om%t s dsbled !. nssHdb s dsbled ". nssHesod s dsbled &. esod >/ Q GG 9. esod =>/ Q GG ,0. nssHld% s enbled ,,. 8<J6/ s dsbled ,2. 8< server Q Gld%:++,2".0.0.,+G ,3. 8< bse 8 Q Gd*Qexm%leFd*Q*omG ,4. nssHns s dsbled ,5. ?/ server Q GG ,!. ?/ domn Q GG ,". nssHns%lus s dsbled ,&. nssH1nbnd s dsbled ,9. /AC 1orgrou% Q G8(A
4". /AC 1orgrou% Q G8(A
1% 6aku" dahulu file +et*+nss1t*.*onf  dan +et*+%m.d+s'stem-ut-* % %2. cp /etc/nssitch.conf /etc/nssitch.conf.default !3. cp /etc/pam.d/system-auth-ac /etc/pam.d/system-auth-ac.default

,% Sebelum menjalankan "erintah authconfig sebagai user root untuk rekonfigurasi sumber autentikasi sistem da"atkan dahulu "assword
sudo -u #imbra /opt/#imbra/bin/#mlocalconfig -s #imbra(ldap(passord  !!. zmbrHld%H%ss1ord Q 70sv&Me

Perintah authconfig akan memodifikasi file +et*+nss1t*.*onf  dan +et*+%m.d+s'stem-ut-*  untuk menggunakan resource !DAP sebagai autentikasi% authconfig --enableldap --enableldapauth --disablenis --enablecache --ldapserver=server.centos.org --ldapbasedn=dc=centos5dc=org --updateall /to%%ng ns*d: /trtng ns*d:

[

(

]

?% !ihat kembali resources ang digunakan untuk autentikasi sistem dengan "erintah autcon%ig'test % !&. !9. "0. ",. "2. "3. "4.

[root@vbox-server ~]# authconfig --test **ng s enbled nssHfles s l1's enbled nssH*om%t s dsbled nssHdb s dsbled nssHesod s dsbled esod >/ Q GG

"5. esod =>/ Q GG "!. nssHld% s enbled "". 8<J6/ s dsbled "&. 8< server Q Gld%:++server.*entos.org+G "9. 8< bse 8 Q Gd*Q*entosFd*QorgG &0. nssHns s dsbled &,. ?/ server Q GG &2. ?/ domn Q GG &3. nssHns%lus s dsbled &4. nssH1nbnd s dsbled &5. /AC 1orgrou% Q G8(A
13+% Selanjutna edit file +et*+ld%.*onf  secara manual gunakan "assword
,2!. bnddn *nQ*onfg ,2". bnd%1 6&Csv+7e ,2&. ur ld%:++server.centos.org + ,29. bse dc=centos5dc=org ,30. ssl no ,3,. tlsH**ertdr +et*+o%enld%+**erts ,32. %mH%ss1ord md5 ,33. bndH%ol*' soft ,34. tmelmt ,20 bndHtmelmt ,20

14+% Setu" koneksi samba ke Zimbra !DAP menggunakan "assword root dalam hal ini menggunakan "assword
8*SS9*8=:sudo -u #imbra /opt/#imbra/bin/#mlocalconfig -s #imbra(ldap(passord ; ak <print >3?<: ,3". smbpassd - >8*SS9*8

Selain itu tambahkan user root ke dalam file lokal smb"asswd% Password sama se"erti ang digunakan user root untuk login ke server% smbpassd -a root

Start samba dan lihat status samba ang sedang running% [root@vbox-server ~]# /etc/init.d/smb start /trtng /AC serv*es: /trtng AC serv*es:

[ [

( (

] ]

[root@vbox-server ~]# /etc/init.d/smb status smbd ded but %d fle exsts nmbd %d ",&4 s runnng... [root@vbox-server ~]# tail /var/log/samba/log.smbd  [20,3+02+,2 09:2&:2!F 3] smbd+se*H*tx.*:%usHse*H*tx20& %usHse*H*tx0F 0 : se*H*txHst*Hndx Q , [20,3+02+,2 09:2&:2!F 3] smbd+ud.*:%usH*onnH*tx35& %usH*onnH*tx0 : *onnH*txHst*Hndx Q 0 [20,3+02+,2 09:2&:2!F 3] smbd+se*H*tx.*:setHse*H*tx24, settng se* *tx 0F 0 - se*H*txHst*Hndx Q , [20,3+02+,2 09:2&:2!F 3] smbd+se*H*tx.*:%o%Hse*H*tx35! %o%Hse*H*tx 0F 0 - se*H*txHst*Hndx Q 0 [20,3+02+,2 09:2&:2!F 0] smbd+server.*:mn,059 ;==(=: fled to setu% guest nfo.

9m ru"ana samba masih errorI 0angan kuatir masalah ini akan solve sebentar lagi :)%

Menamba"kan user ( grou# linu! dan samba menggunakan utility lda#add Dalam taha"an ini kita tidak menggunakan Zimbra Admin $ser %nter!ace untuk mmenambahkan user 8 grou" linu# dan samba melainkan menggunakan lda#add % 

Da"atkan Samba S-D (Security %Denti!ier )%





[root@vbox-server ~]# /usr/bin/net )@OC*SA9 ;cut -f% -d< < /-,-5-2,-,50&!4&254-32&&"353"3-2&5&9"2520

Atau jika menggunakan nama domain [root@vbox-server ~]# /usr/bin/net )@OC*SA9 9OB*A41;cut -f% -d< < /-,-5-2,-,50&!4&254-32&&"353"3-2&5&9"2520

Catatan: Samba S-D ini bilangan unik% 

               

6uat file ldif ( Lightweight Directory %nterchange &ormat ) dengan vi atau nano% 7ita namakan filena smb8omnme.ldf  dan sim"an di folder +tm%% dit bagian ang bercetak tebal% dn: smb8omnmeQ 9OB*A415dc=centos5dc=org smb8omnme: 9OB*A41 smb/?8: S-'-"-2'-'"&+%1+2"1-32++3"33-2+"+2"2& smbstor'engt: 0 smbext=d: ,252

Selanjutna tambahkan data ldif ke Zimbra !DAP dengan "erintah lda#add % Gntuk ini login sebagai user
su - #imbra 8*SS9*8=:#mlocalconfig -s #imbra(ldap(passord ; ak <print >3?<: ldapadd -v - ldapD//server.centos.org/ -$ - >8*SS9*8 -c -9 Euid=#imbra5cn=admins5cn=#imbraE -f /tmp/samba9omain4ame.ldif ld%Hntlze ld%:++server.*entos.org:3&9+IIbse  dd smb8omnme: 8(Astor'engt: 0 dd smbext=d: ,252 ddng ne1 entr' Gsmb8omnmeQ8(A
6erikutna berturut.turut buat file grou"s%ldif mach ines%ldif DomainAdmins%ldif dan DomainGsers%ldif% Sim"an ketigana di folder /tm"% dit bagian ang bercetak tebal% SambaS-D berturut.turut untuk Domain Admins dan Domain $sers adalah SambaS-D. +13 dan SambaS-D.+14%

+tm%+grou%s.ldf   

dn: ouQgrou%sF dc=centos5dc=org *n: grou%s obXe*tlss: orgnztonl=ole ou: grou%s

+tm%+m*nes.ldf dn: ouQm*nesF dc=centos5dc=org *n: m*nes obXe*tlss: orgnztonl=ole ou: m*nes

+tm%+8omn
+tm%+8omn7sers.ldf dn: *nQ8omn 7sersFouQgrou%sF dc=centos5dc=org *n: 8omn 7sers des*r%ton: 8omn 7sers ds%l'me: 8omn 7sers gdumber: ,2002 member7d: 2 obXe*tlss: %osxrou% obXe*tlss: smbrou%A%%ng smbrou%6'%e: 2 smb/?8: S-'-"-2'-'"&+%1+2"1-32++3"33-2+"+2"2& -5,3

Selanjutna tambahkan ke., data ldif tersebut ke Zimbra !DAP dengan "erintah lda#add % 8*SS9*8=:#mlocalconfig -s #imbra(ldap(passord ; ak <print >3?<: ldapadd -v - ldapD//server.centos.org/ -$ - >8*SS9*8 -c -9 Euid=#imbra5cn=admins5cn=#imbraE -f /tmp/groups.ldif ld%Hntlze ld%:++server.*entos.org:3&9+IIbse  dd *n: grou%s dd obXe*tlss: orgnztonl=ole dd ou: grou%s ddng ne1 entr' GouQgrou%sFd*Q*entosFd*QorgG modf' *om%lete

8*SS9*8=:#mlocalconfig -s #imbra(ldap(passord ; ak <print >3?<: ldapadd -v - ldapD//server.centos.org/ -$ - >8*SS9*8 -c -9 Euid=#imbra5cn=admins5cn=#imbraE -f /tmp/machines.ldif ld%Hntlze ld%:++server.*entos.org:3&9+IIbse  dd *n: m*nes dd obXe*tlss: orgnztonl=ole dd ou: m*nes ddng ne1 entr' GouQm*nesFd*Q*entosFd*QorgG modf' *om%lete

8*SS9*8=:#mlocalconfig -s #imbra(ldap(passord ; ak <print >3?<: ldapadd -v - ldapD//server.centos.org/ -$ - >8*SS9*8 -c -9 Euid=#imbra5cn=admins5cn=#imbraE -f /tmp/9omain*dmins.ldif ld%Hntlze ld%:++server.*entos.org:3&9+IIbse  dd *n: 8omn
8*SS9*8=:#mlocalconfig -s #imbra(ldap(passord ; ak <print >3?<: ldapadd -v - ldapD//server.centos.org/ -$ - >8*SS9*8 -c -9 Euid=#imbra5cn=admins5cn=#imbraE -f /tmp/9omain6sers.ldif ld%Hntlze ld%:++server.*entos.org:3&9+IIbse  dd *n: 8omn 7sers dd des*r%ton: 8omn 7sers dd ds%l'me: 8omn 7sers dd gdumber: ,2002 dd member7d: 2 dd obXe*tlss: %osxrou% smbrou%A%%ng dd smbrou%6'%e: 2 dd smb/?8:

/-,-5-2,-,50&!4&254-32&&"353"3-2&5&9"2520-5,3 ddng ne1 entr' G*nQ8omn 7sersFouQgrou%sFd*Q*entosFd*QorgG modf' *om%lete 

    

Bestart samba% [root@vbox-server ~]# /etc/init.d/smb restart /uttng do1n /AC serv*es: /uttng do1n AC serv*es: /trtng /AC serv*es: /trtng AC serv*es:

[)
  

[root@vbox-server ~]# /etc/init.d/smb status smbd %d 953, s runnng... nmbd %d 9534 s runnng...

Setelah itu jalankan "erintah di bawah menggunakan hak akses root untuk memberi kewenangan "ada grou" Domain Admins% @unakan "assword root dan ganti nama domain centos'org  dengan ang sesuai: net rpc rights grant Ecentos.org9omain *dminsE Se*dd6sers8rivilege SeBachine*ccount8rivilege Se8rintOperator8rivilege ss1ord: /u**essfull' grnted rgts.



G"date Profile Gser admin 0alankan "erintah berikut untuk memodifikasi membershi" dan "rofile account admin ang "ernah dibuat sebelumna saat Zimbra belum digabungkan dengan Samba% Sesuaikan nama domain% Gser admin diberi uidumber 11222 dan gidumber 13221% SambaS-D.na adalah angka SambaS-D domain dalam hal ini D*'A-, dikombinasikan dengan (uidumber;3)J1222%





 hoami



root



/usr/bin/net )@OC*SA9 ;cut -f% -d< <



/-,-5-2,-,50&!4&254-32&&"353"3-2&5&9"2520

 





su - #imbra #mprov ma adminFcentos.org GobHectClass posi$*ccount uid4umber ''&&& gid4umber '2&&' home9irectory /home/admin loginShell /bin/false #mprov ma adminFcentos.org GobHectClass sambaSam*ccount samba9omain4ame 9OB*A41 sambaSA9 ES-'-"-2'-'"&+%1+2"1-32++3"33-2+"+2"2&-23&&&E samba*cctIlags J6KL

est dengan getent  dan #dbedit

      

   

[root@vbox-server ~]# getent passd;tail nmed:x:25:25:med:+vr+nmed:+sbn+nologn ssd:x:"4:"4:rvlege-se%rted //>:+vr+em%t'+ssd:+sbn+nologn r%*user:x:29:29:= /erv*e 7ser:+vr+lb+nfs:+sbn+nologn nfsnobod':x:!5534:!5534:< demon:+:+sbn+nologn v-uto%d:x:,00:,04:v-uto%d:+vr+lb+vuto%d:+sbn+nologn xfs:x:43:43:K )ont /erver:+et*+K,,+fs:+sbn+nologn zmbr:x:500:500::+o%t+zmbr:+bn+bs %ostfx:x:50,:50,::+o%t+zmbr+%ostfx:+bn+bs dmn:L:,,000:,200,:dmn:+ome+dmn:+bn+flse

           

[root@vbox-server ~]# getent group;tail r%*user:x:29: nfsnobod':x:!5534: ldemon:x:!&: v-uto%d:x:,04: xfs:x:43: zmbr:x:500: %ostfx:x:50,:zmbr %ostdro%:x:502: 8omn
 

[root@vbox-server ~]#  pdbedit -v admin

 

  

                

smbld%Hser*HdomnHnfo: /er*ng for:[SobXe*tlssQsmb8omn smb8omnmeQ8(Aome 8re*tor': ZZ,92.,!&.&".,03Zdmn >ome8r 8rve: : ogon /*r%t: logon.*md rofle t: 8omn: 8(A
         

Dorsttons: Aunged dl: ogon tme: ogoff tme: *off tme: ss1ord lst set: ss1ord *n *nge: ss1ord must *nge: st bd %ss1ord : Cd %ss1ord *ount : ogon ours :

0 never never 0 0 0 0 0 ))))))))))))))))))))))))))))))))))))))))))

Instalasi )imbraSambaPassword -ni di"erlukan a"abila kita menginginkan "assword samba terintegrasi dengan "assword user
Download


#tract


-kuti "etunjuk di BAD'%t#t

[root@vbox-server ~]# cd /tmp [root@vbox-server tm%]# un#ip #imbraSamba8assord.#ip [root@vbox-server tm%]# ls nstll.s mnt%1d.tr.gz =;<8A;.txt smb%ss1ord.Xr [root@vbox-server tm%]# chmod "" install.sh [root@vbox-server tm%]# ./install.sh ;==(=: 7nno1n o%ton .+nstll.s -[u] ---el% ---nstll -u--unnstll

7sge ?nstll extenson 7nnstll extenson

[root@vbox-server tm%]# ./install.sh -i e*ng for exstng nstllton... /uttng do1n Embr >ost server.*entos.org /to%%ng stts...8one. /to%%ng mt...8one. /to%%ng s%ell...8one. /to%%ng snm%...8one. /to%%ng r*vng...8one. /to%%ng ntvrus...8one. /to%%ng nts%m...8one. /to%%ng m%%rox'...8one. /to%%ng mem**ed...8one.

/to%%ng mlbox...8one. /to%%ng logger...8one. /to%%ng ld%...8one. ?nstllng zmbr/mbss1ord extenson ?nstllng mnt%1d bnr' g** -(2 -8A7&0&! -* -o geto%t.o geto%t.* g** -(2 -8A7&0&! -* -o md4.o md4.* md4.*: ?n fun*ton \mdfour: md4.*:,44: 1rnng: n*om%tble m%l*t de*lrton of bult-n fun*ton \mem*%' g** -(2 -8A7&0&! -* -o mnt%1d.o mnt%1d.* mnt%1d.*: ?n fun*ton \mn: mnt%1d.*:3": 1rnng: return t'%e of \mn s not \nt g** -(2 -8A7&0&! -* -o smbdes.o smbdes.* g** -(2 -8A7&0&! -o mnt%1d geto%t.o md4.o mnt%1d.o smbdes.o /trtng u% Embr >ost server.*entos.org /trtng ld%...8one. /trtng mlbox...8one. /trtng nts%m...8one. /trtng ntvrus...8one. /trtng mt...8one. /trtng stts...8one. =egsterng zmbr/mbss1ord extenson

Screens"ot