{"id":7345,"date":"2018-11-26T20:50:02","date_gmt":"2018-11-26T17:50:02","guid":{"rendered":"https:\/\/www.howtoforge.com\/tutorial\/upgrade-zimbra-collaboration-suite-88-on-ubuntu\/"},"modified":"2018-11-26T20:50:02","modified_gmt":"2018-11-26T17:50:02","slug":"upgrade-zimbra-collaboration-suite-8-7-to-8-8-on-ubuntu","status":"publish","type":"post","link":"https:\/\/afaghhosting.net\/blog\/upgrade-zimbra-collaboration-suite-8-7-to-8-8-on-ubuntu\/","title":{"rendered":"Upgrade Zimbra Collaboration Suite 8.7 to 8.8 on Ubuntu"},"content":{"rendered":"

The Zimbra Collaboration Server is a mail server, collaborative web application and a web-based mail server admin console in a single application. It provides LDAP, antivirus, antispam, collaboration features and an ajax webmail client. Zimbra is easy to use for administrators as well as end users due to its fast Ajax-based web interface.<\/span><\/p>\n

Prerequisites<\/span><\/h2>\n

In this tutorial, we will see how to upgrade an installation of Zimbra 8.7.11 to Zimbra 8.8.10 (latest version available).<\/span><\/p>\n

Before starting the upgrade, here some advice, before start check your installation version simply going to your web interface at\u00a0https:\/\/IPADDRESS:7071\/, you should see immediately your version at the login dashboard<\/span><\/p>\n

\"Zimbra<\/a><\/span><\/p>\n

2FA check<\/span><\/h2>\n

First of all there is a\u00a0Bug 105056<\/a>\u00a0<\/span>noted a problem that can occur during a rolling upgrade if two factor authentication (2FA) is enabled before all mailbox servers have been upgraded to 8.7. In particular, pre-8.7 mailbox servers are not compatible with 2FA.\u00a0Accordingly, it is recommended that 2FA is not enabled until all mailbox servers have been upgraded to 8.7.<\/span><\/p>\n

Database integrity check<\/span><\/span><\/h2>\n

Before start the upgrade it is suggested to do a database integrity check, running the command\u00a0zmdbintegrityreport, wich wil be done entering with the zimbra user<\/span><\/span><\/p>\n

su - zimbrazmdbintegrityreport<\/span><\/span><\/code><\/pre>\n
the output should be like this<\/p>\n
[email\u00a0protected]<\/a>:~$ \/opt\/zimbra\/libexec\/zmdbintegrityreport -r[email\u00a0protected]<\/a>:~$<\/code><\/pre>\n
if something went worng, you need to fix before upgrade.<\/p>\n
Update the operating system<\/h2>\n
Another check to complete, befaore start is to upgrade the operating system, in our case, we use ubuntu 16.04 so the steps are the following, to lunch as root user<\/p>\n
[email\u00a0protected]<\/a>:~# apt-get update && apt-get upgradeTrovato:1 http:\/\/it.archive.ubuntu.com\/ubuntu xenial InReleaseScaricamento di:2 http:\/\/it.archive.ubuntu.com\/ubuntu xenial-updates InRelease [109 kB]Scaricamento di:3 http:\/\/security.ubuntu.com\/ubuntu xenial-security InRelease [107 kB]Trovato:4 https:\/\/repo.zimbra.com\/apt\/87 xenial InReleaseScaricamento di:5 http:\/\/it.archive.ubuntu.com\/ubuntu xenial-backports InRelease [107 kB]Recuperati 323 kB in 0s (542 kB\/s)Lettura elenco dei pacchetti... FattoLettura elenco dei pacchetti... FattoGenerazione albero delle dipendenzeLettura informazioni sullo stato... FattoCalcolo dell'aggiornamento... FattoI seguenti pacchetti sono stati mantenuti alla versione attuale:linux-generic linux-headers-generic linux-image-generic ubuntu-minimal0 aggiornati, 0 installati, 0 da rimuovere e 4 non aggiornati.[email\u00a0protected]<\/a>:~#<\/code><\/pre>\n
Disable SSLv3 Support<\/h2>\n
If upgrading to ZCS 8.7.0, you need to completely disable SSLv3 support after the upgrade. Disabling SSLv3 is recommended as a result of the SSLv3 vulnerability described in\u00a0<\/span>Alert (TA14-290A)<\/a>.<\/span><\/p>\n
To do that, please refear to the procedure on officiali website\u00a0Disable SSLv3<\/a><\/p>\n
Update Default Proxy SSL Ciphers Attribute<\/h2>\n
Whenever upgrading, it is recommended that you check the values of the following attributes (zmprov gcf <attr>) and compare them with the current default values (zmprov desc -a <attr>).<\/p>\n
zimbraReverseProxySSLCiphers
\nzimbraReverseProxySSLProtocols
\nzimbraSSLExcludeCipherSuites
\nzimbraMailboxdSSLProtocols<\/pre>\n
In addition, it is recommended to make the following changes:<\/span><\/p>\n
–\u00a0Remove the following from\u00a0<\/span>zimbraReverseProxySSLCiphers<\/code>:<\/span><\/p>\n
ECDHE-RSA-RC4-SHA
\nECDHE-ECDSA-RC4-SHA
\nRC4-SHA<\/pre>\n
to do so run the command<\/p>\n
[email\u00a0protected]<\/a>:~# zmprov mcf zimbraReverseProxySSLCiphers 'ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128:AES256:HIGH:!aNULL:!eNULL:!EXPORT:!DES:!MD5:!PSK:!RC4'[email\u00a0protected]<\/a>:~# zmproxyctl restart<\/code><\/pre>\n
When you run the install script, if ZCS is already installed, you will be asked if you want to upgrade.\u00a0<\/span><\/p>\n
Zimbra Upgrade\u00a0<\/h2>\n
So now, we are prepared to perform the upgrade, in our case from 8.7.11 to\u00a08.8.10, so let’s start downloading the lates version<\/p>\n
[email\u00a0protected]<\/a>:~# wget https:\/\/files.zimbra.com\/downloads\/8.8.10_GA\/zcs-8.8.10_GA_3039.UBUNTU16_64.20180928094617.tgz[email\u00a0protected]<\/a>:~# tar -zxvf zcs-8.8.10_GA_3039.UBUNTU16_64.20180928094617.tgz[email\u00a0protected]<\/a>:~# cd zcs-8.8.10_GA_3039.UBUNTU16_64.20180928094617\/[email\u00a0protected]<\/a>:~# .\/install.sh<\/code><\/pre>\n
As you can see, some of the service will be found, as in the output below<\/p>\n
Operations logged to \/tmp\/install.log.FwDVflaWChecking for existing installation...zimbra-drive...FOUND zimbra-drive-1.0.10+1504081761-1.u16zimbra-imapd...NOT FOUNDzimbra-patch...NOT FOUNDzimbra-license-tools...NOT FOUNDzimbra-license-extension...NOT FOUNDzimbra-network-store...NOT FOUNDzimbra-network-modules-ng...NOT FOUNDzimbra-chat...FOUND zimbra-chat-1.0.11+1509959286-2.u16zimbra-talk...NOT FOUNDzimbra-ldap...FOUND zimbra-ldap-8.7.11.GA.1854.UBUNTU16.64zimbra-logger...FOUND zimbra-logger-8.7.11.GA.1854.UBUNTU16.64zimbra-mta...FOUND zimbra-mta-8.7.11.GA.1854.UBUNTU16.64zimbra-dnscache...FOUND zimbra-dnscache-8.7.11.GA.1854.UBUNTU16.64zimbra-snmp...FOUND zimbra-snmp-8.7.11.GA.1854.UBUNTU16.64zimbra-store...FOUND zimbra-store-8.7.11.GA.1854.UBUNTU16.64zimbra-apache...FOUND zimbra-apache-8.7.11.GA.1854.UBUNTU16.64zimbra-spell...FOUND zimbra-spell-8.7.11.GA.1854.UBUNTU16.64zimbra-convertd...NOT FOUNDzimbra-memcached...FOUND zimbra-memcached-1:1.4.37-2.u16zimbra-proxy...FOUND zimbra-proxy-8.7.11.GA.1854.UBUNTU16.64zimbra-archiving...NOT FOUNDzimbra-core...FOUND zimbra-core-8.7.11.GA.1854.UBUNTU16.64ZCS upgrade from 8.7.11 to 8.8.10 will be performed.Validating ldap configurationLDAP validation succeeded. Continuing.
----------------------------------------------------------------------PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING THE SOFTWARE.SYNACOR, INC. (\"SYNACOR\") WILL ONLY LICENSE THIS SOFTWARE TO YOU IF YOUFIRST ACCEPT THE TERMS OF THIS AGREEMENT. BY DOWNLOADING OR INSTALLINGTHE SOFTWARE, OR USING THE PRODUCT, YOU ARE CONSENTING TO BE BOUND BYTHIS AGREEMENT. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THISAGREEMENT, THEN DO NOT DOWNLOAD, INSTALL OR USE THE PRODUCT.License Terms for this Zimbra Collaboration Suite Software:https:\/\/www.zimbra.com\/license\/zimbra-public-eula-2-6.html----------------------------------------------------------------------Do you agree with the terms of the software license agreement? [N]<\/p><\/code><\/pre>\n
Accept the license Agreement, saying “Y”.<\/p>\n
Checking current number of databases...<\/code><\/pre>\n
say “Y” to\u00a0check message store integrity<\/p>\n
Do you want to verify message store database integrity? [Y]Verifying integrity of message store databases. This may take a while.mysqld is aliveNo errors found<\/code><\/pre>\n
say “Y” to use zimbra repository<\/p>\n
Use Zimbra's package repository [Y]<\/code><\/pre>\n
At this point install should find you installation ad ask for upgrade, obviouslly say “Y”\u00a0<\/p>\n
Configuring package repositoryChecking for installable packagesFound zimbra-core (local)Found zimbra-ldap (local)Found zimbra-logger (local)Found zimbra-mta (local)Found zimbra-dnscache (local)Found zimbra-snmp (local)Found zimbra-store (local)Found zimbra-apache (local)Found zimbra-spell (local)Found zimbra-memcached (repo)Found zimbra-proxy (local)Found zimbra-drive (repo)Found zimbra-imapd (local)Found zimbra-patch (repo)
The Zimbra Collaboration Server appears to already be installed.It can be upgraded with no effect on existing accounts,or the current installation can be completely removed priorto installation for a clean install.Do you wish to upgrade? [Y]<\/p><\/code><\/pre>\n
Ath this point you’ll be prompted to upgrade the packages he can find, in my installation here’s what is fouond<\/p>\n
Scanning for any new or additional packages available for installationExisting packages will be upgradedUpgrading zimbra-coreUpgrading zimbra-ldapUpgrading zimbra-loggerUpgrading zimbra-mtaUpgrading zimbra-dnscacheUpgrading zimbra-snmpUpgrading zimbra-storeUpgrading zimbra-apacheUpgrading zimbra-spellUpgrading zimbra-memcachedUpgrading zimbra-proxyUpgrading zimbra-drive<\/code><\/pre>\n
When asked to install zimbra-impad (BETA), say no<\/p>\n
Install zimbra-imapd (BETA - for evaluation only) [N]<\/code><\/pre>\n
At this point upgrade will start<\/p>\n
Upgrading zimbra-chatChecking required space for zimbra-coreChecking space for zimbra-storeChecking required packages for zimbra-storezimbra-store package check complete.Installing:zimbra-corezimbra-ldapzimbra-loggerzimbra-mtazimbra-dnscachezimbra-snmpzimbra-storezimbra-apachezimbra-spellzimbra-memcachedzimbra-proxyzimbra-drivezimbra-patchzimbra-chatThe system will be modified. Continue? [N]<\/code><\/pre>\n
Say “Y” and upgrade will start. Pay attention that during upgrade all services will be stopped until end of upgrade, so don’t do it during working hours.<\/p>\n
After a bit of time, upgrade will end succesfully, you can choose, to notify or not Zimbra about your installation<\/p>\n
Skipping creation of default domain GAL sync account - existing install detected.You have the option of notifying Zimbra of your installation.This helps us to track the uptake of the Zimbra Collaboration Server.The only information that will be transmitted is:The VERSION of zcs installed (8.8.10_GA_3039_UBUNTU16_64)The ADMIN EMAIL ADDRESS created ([email\u00a0protected]<\/a>)Notify Zimbra of your installation? [Yes] No<\/code><\/pre>\n
if all is gone right you should arrive at the end<\/p>\n
Notification skippedChecking if the NG started running...done.Setting up zimbra crontab...done.
Moving \/tmp\/zmsetup.20181119-132152.log to \/opt\/zimbra\/logConfiguration complete - press return to exit<\/p><\/code><\/pre>\n
Now try to login to the administration interface and check if the version is changed<\/p>\n
\"Check<\/a><\/p>\n
In my case, all went fine, and the upgrade process as worked fine.<\/p>\n","protected":false},"excerpt":{"rendered":"
The Zimbra Collaboration Server is a mail server, collaborative web application and a web-based mail server admin console in a single application. It provides LDAP, antivirus, antispam, collaboration features and an ajax webmail client. Zimbra is easy to use for administrators as well as end users due to its fast Ajax-based web interface. Prerequisites In […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[36],"tags":[],"class_list":["post-7345","post","type-post","status-publish","format-standard","hentry","category-36"],"_links":{"self":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/7345","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/comments?post=7345"}],"version-history":[{"count":0,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/posts\/7345\/revisions"}],"wp:attachment":[{"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/media?parent=7345"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/categories?post=7345"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/afaghhosting.net\/blog\/wp-json\/wp\/v2\/tags?post=7345"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}