Zimbra 8 zmprov (Provisioning)

zmprov (Provisioning)

Tool  zmprov melakukan semua tugas Provisioning/Pengadaan di Zimbra LDAP, Termasuk pembuatan account,alias,domain,COS, Distribution List, dan Calendar. Setiap operasi dipanggil/eksekusi melalui baris perintah/command line,  masing masing memiliki Long Name dan Short Name.

Syntax : zmprov [perintah] [argumen]

Syntax untuk modifikasi tambahkan prefix "+" atau "-".

• "+" untuk menambahkan instance baru tanpa merubah atribut yang ada.
• "-" untuk mengurangi / menghapus instance tertentu pada atribut

Short Name	Long Name	Syntax, Example, and Notes
-h	--help	display usage
-f	--file	use file as input stream
-s	--server	{host}[:{port}] server hostname and optional port
-l	--ldap	provision via LDAP instead of SOAP
-L	--log property file	log 4j property file, valid only with -l
-a	--account {name}	account name to auth as
-p	--password {pass}	password for account
-P	--passfile {file}	read password from file
-z	--zadmin	use Zimbra admin name/password from localconfig for admin/password
-y	--authtoken (authtoken)	use auth token string (has to be in JSON format) from command line
-Y	--authtoken (authtoken file)	use auth token string (has to be in JSON format) from command line
-v	--verbose	verbose mode (dumps full exception stack trace)
-d/	--debug	debug mode (dumps SOAP messages)
-m	--master	use LDAP master. This only valid with -l
-r	--replace	allow replacement of safe-guarded multi-value attribute configured in localconfig key zmprov_saveguarded_attrs

The commands in the following table are divided into the tasks types.

Long Name	Short Name	Syntax, Example, and Notes
Account Provisioning Commands
addAccountAlias	aaa	{name@domain|id|adminName} {alias@domain} zmprov aaa joe@domain.com joe.smith@engr.domain.com
checkPasswordStrength	cps	Syntax: {name@doman|id} {password} Note: This command does not check the password age or history. zmprov cps joe@domain.com test123
createAccount	ca	Syntax:{name@domain} {password} [attribute1 value1 etc] Type on one line. zmprov ca joe@domain.com test123 displayName JSmith
createDataSource	cds	{name@domain} {ds-type} {ds-name} zimbraDataSourceEnabled {TRUE|FALSE} zimbraDataSourceFolderId {folder-id} [attr1 value1 [attr2 value2...]]
createIdentity	cid	{name@domain} {identity-name} [attr1 value1 [attr2 value2...]]
createSignature	csig	{name@domain} {signature-name} [attr1 value1 [attr2 value2...]]
deleteAccount	da	Syntax:{name@domain|id|adminName} zmprov da joe@domain.com
deleteDataSource	dds	{name@domain|id} {ds-name|ds-id}
deleteIdentity	did	{name@domain|id} {identity-name}
deleteSignature	dsig	{name@domain|id} {signature-name}
getAccount	ga	Syntax:{name@domain|id|adminName} zmprov ga joe@domain.com
getAccountMembership	gam	{name@domain|id}
getAllAccounts	gaa	Must include -l/--ldap Syntax: [-v] [{domain}] zmprov -l gaa zmprov -l gaa -v domain.com
getAllAdminAccounts	gaaa	Syntax: gaaa zmprov gaaa
getDataSources	gds	{name@domain | id} [arg 1 [arg 2...]]
getIdentities	gid	{name@domain | id} [arg 1 [arg 2...]]
getSignatures	gsig	{name@domain | id} [arg 1 [arg 2...]]
modifyAccount	ma	{name@domain|id|adminName} [attribute1 value1 etc] zmprov ma joe@domain.com zimbraAccountStatus maintenance
modifyDataSource	mds	{name@domain | id} {ds-name |ds-id} [attr 1 value 1 [attr2 value 2...]]
modifyIdentity	mid	{name@domain |id} {identity-name} [attr 1 value 1 [attr 2 value 2...]]
modifySignature	msig	{name@domain |id} {signature-name | signature-id} [attr 1 value 1 [attr 2 value 2...]]
removeAccountAlias	raa	{name@domain|id|adminName} {alias@domain} zmprov raa joe@domain.com joe.smith@engr.domain.com
renameAccount	ra	{name@domain|id} {newname@domain} zmprov ra joe@domain.com joe23@domain.com Note: After you rename an account, you should run a full backup for that account. zmbackup -f - <servername.com> -a <newaccountname@servername.com>
setAccountCOS	sac	{name@domain|id|adminName} {cos-name|cos-id} zmprov sac joe@domain.com FieldTechnician
setPassword	sp	{name@domain|id|adminName} {password} Note: Passwords cannot included accented characters in the string. Example of accented characters that cannot be used: ã, é, í, ú, ü, ñ. zmprov sp joe@domain.com test321
Calendar Resource Provisioning Commands
createCalendarResource	ccr	{name@domain} [attr1 value1 [attr2 value2...]]
deleteCalendarResource	dcr	{name@domain|id}
getAllCalendarResources	gacr	[-v] [{domain}]
getCalendarResource	gcr	{name@domain|id}
modifyCalendarResource	mcr	{name@domain|id} [attr1 value1 {attr2 value2...]]
purgeAccountCalendarCache	pacc	{name@domain\id} [...]
renameCalendarResource	rcr	{name@domain|id} {newName@domain}
Free Busy Commands
getAllFbp	gafbp	[-v]
getFreebusyQueueInfo	gfbqi	[{provider-name}]
pushFreebusy	pfb	{domain | account-id} [account-id...]
pushFreebusyDomain	pfbd	{domain}
purgeFreebusyQueue	pfbg	[{provider-name}]
Domain Provisioning Commands
countAccount	cta	{domain|id} This lists each COS, the COS ID and the number of accounts assigned to each COS
createAliasDomain	cad	{alias-domain-name} {local-domain-name|id} [attr1 value1 [attr2 value2...]]
createDomain	cd	{domain} [attribute1 value1 etc] zmprov cd mktng.domain.com zimbraAuthMech zimbra
deleteDomain	dd	{domain|id} zmprov dd mktng.domain.com
getDomain	gd	{domain|id} zmprov gd mktng.domain.com
getDomainInfo	gdi	name|id|virtualHostname {value} [attr1 [attr2...]]
getAllDomains	gad	[-v]
modifyDomain	md	{domain|id} [attribute1 value1 etc] zmprov md domain.com zimbraGalMaxResults 500 Note: Do not modify zimbraDomainRenameInfo manually. This is automatically updated when a domain is renamed.
renameDomain	rd	{domain|id} {newDomain} Note: renameDomain can only be used with “zmprov -l/--ldap”
COS Provisioning Commands
copyCos	cpc	{src-cos-name|id} {dest-cos-name}
createCos	cc	{name} [attribute1 value1 etc] zmprov cc Executive zimbraAttachmentsBlocked FALSE zimbraAuthTokenLifetime 60m zimbraMailQuota 100M zimbraMailMessageLifetime 0
deleteCos	dc	{name|id} zmprov dc Executive
getCos	gc	{name|id} zmprov gc Executive
getAllCos	gac	[-v] zmprov gac -v
modifyCos	mc	{name|id} [attribute1 value1 etc] zmprov mc Executive zimbraAttachmentsBlocked TRUE
renameCos	rc	{name|id} {newName} zmprov rc Executive Business
Server Provisioning Commands
createServer	cs	{name} [attribute1 value1 etc]
deleteServer	ds	{name|id} zmprov ds domain.com
getServer	gs	{name|id} zmprov gs domain.com
getAllServers	gas	[-v] zmprov gas
modifyServer	ms	{name|id} [attribute1 value1 etc] zmprov ms domain.com zimbraVirusDefinitionsUpdateFrequency 2h
getAllMtaAuthURLs	gamau	Used to publish into saslauthd.conf what servers should be used for saslauthd.conf MTA auth
getAllMemcachedServers	gamcs	Used to list memcached servers (for nginix use).
Config Provisioning Commands
getAllConfig	gacf	[-v] All LDAP settings are displayed
getConfig	gcf	{name}
modifyConfig	mcf	attr1 value1 Modifies the LDAP settings.
createXMPPComponent	cxc	{short-name} {domain} {server} {classname} {category} {type} [attr value1 [attr2 value2...]]
deleteXMPPComponent	dxc	{xmpp-component-name}
getXMPPComponent	gxc	{name@domain} [attr1 [attr2 value2]]
modifyXMPPComponent	mxc	{name@domain} [attr1 [attr2 value2]]
Distribution List Provisioning Commands
createDistributionList	cdl	{list@domain} zmprov cdl needlepoint-list@domain.com
addDistributionListMember	adlm	{list@domain|id} {member@domain} zmprov adlm needlepoint-list@domain.com singer23@mail.free.net
removeDistributionListMember	rdlm	{list@domain|id} zmprov rdlm needlepoint-list@domain.com singer23@mail.free.net
getAlldistributionLists	gadl	[-v]
get DistributionListmembership	gdlm	{name@domain|id}
getDistributionList	gdl	{list@domain|id} zmprov gdl list@domain.com
modifyDistributionList	mdl	{list@domain|id} attr1 value1 {attr2 value2...} zmprov md list@domain.com
deleteDistributionList	ddl	(list@domain|id}
addDistributionListAlias	adla	{list@domain|id} {alias@domain}
removeDistributionListAlias	rdla	{list@domain|id} {alias@domain}
renameDistributionList	rdl	{list@domain|id} {newName@domain}
Mailbox Commands
getMailboxInfo---	gmi	{account}
getQuotaUsage---	gqu	{server}
reIndexMailbox	rim	{name@domain|id} {start|status|cancel} [{reindex-by} {value1} [value2...]]
RecalculateMailboxCounts	rmc	{name@domain|id} When unread message count and quota usage are out of sync with the data in the mailbox, use this command to immediately recalculate the mailbox quota usage and unread messages count. Important: Recalculating mailbox quota usage and message count should be schedule to run in off peak hours and used on one mailbox at a time.
reIndexMailbox	rim	{start|status|cancel} [{types|ids} {type or id} [,type or id...]]
compactIndexMailbox	cim	{name@domain|id} {start|status}
verifyIndex	vi	{name@domain|id}
getIndexStats	gis	{name@domain|id}
selectMailbox	sm	{account-name} [{zmmailbox commands}]
Logs
addAccount Logger	aal	{name@domain|id} {logging-category} {debug|info|warn|error} Creates custom logging for a single account
getAccountLoggers	gal	[-s/--server hostname] {name@domain|id} {logging-category} {debug|info|warn|error}
getAllAccountLoggers	gaal	[-s/--server hostname] Shows all individual custom logger account
removeAccountLogger	ral	[-s/ --server hostname] {name@domain|id} {logging-category} When name@domain is specified, removes the custom logger created for the account otherwise removes all accounts all account loggers from the system.
resetAllLoggers	rlog	This command removes all account loggers and reloads /opt/zimbra/conf/log4j.properties. [-s/--server hostname]
See the zmprov Log Categories for a list of logging categories.
Search
searchGAL	sg	{domain} {name} zmprov sg joe
autoCompleteGal	acg	{domain} {name}
searchAccounts	sa	[-v] {ldap-query} [limit] [offset] [sortBy {attribute} [sortAscending 0|1] [domain {domain}]
searchCalendarResources	scr	[-v] domain attr op value {attr op value...]
Share Provisioning Commands
getShareInfo	gsi	{owner-name|owner-id}
Miscellaneous Provisioning Commands
countObjects	cto	{type} [-d {domain|id}]. countObjects can only be used with zmprov -l/--ldap
createBulkAccounts	cabulk	{domain} {namemask} {number of accounts to create}
describe	desc	[[-v] [-ni] [{entry-type}]] | [-a {attribute-name}] Prints all attribute names (account, domain, COS, servers, etc.).
flushCache	fc	[-a] {acl|locale|skin|uistrings|license|all|account|config|globalgrant| cos|domain|galgroup|group|mime|server|zimlet|<extension-cache-type>} [name1|id1 [name2|i d2...]] Flush cached LDAP entries for a type. See Zimbra LDAP Service, Flushing LDAP Cache
generateDomainPreAuthKey	gdpak	{domain|id} Generates a pre-authentication key to enable a trusted third party to authenticate to allow for single-sign on. Used in conjunction with GenerateDomainPreAuth.
generateDomainPreAuth	gdpa	{domain|id} {name} {name|id|foreignPrincipal} {timestamp|0} {expires|0} Generates preAuth values for comparison.
syncGal	syg	{domain} [{token}]
getAccountLogger	gal	[-s /--server hostname] {name@domain | id}
UnfiedCommunication Service Commands
createUCService	cucs	{name} [attr1 value1 [attr2 value2...]]
deleteUCService	ducs	{name|id}
getAllUCServices	gaucs	[-v]
getUCService	gucs	[-e] {name|id} [attr1 [attr2...]]
modifyUCService	mucs	{name|id} [attr1 value1 [attr2 value2...]]
renameUCService	rucs	{name|id} {newName}
The following are zmprov commands that are specific to Zimbra IMAP/POP proxy.
--getAllReverseProxyURLs	-garpu	Used to publish into nginx.conf the servers that should be used for reverse proxy lookup.
--getAllReverseProxyBackends	-garpb	Returns the list of servers that have zimbraReverseProxyLookupTarget=TRUE. Basically if a mailbox server is available for lookup requests from the proxy.
--getAllReverseProxyDomains	-garpd	Returns a list of all domains configured with ZimbraSSLCertificate zimbraVirtualHostname and zimbraVirtualIPAddress configured. This allows the proxy to configure a list of domains to serve customized/domain certificates for.

zmprov Log Categories

zimbra.account	Account operations
zimbra.acl	ACL operations
zimbra.backup	Backup and restore
zimbra.cache	Inmemory cache operations
zimbra.calendar	Calendar operations
zimbra.dav	DAV operations
zimbra.dbconn	Database connection tracing
zimbra.extensions	Server extension loading
zimbra.filter	Mail filtering
zimbra.gal	GAL operations
zimbra.imap	IMAP protocol operations
zimbra.index	Index operations
zimbra.io	Filesystem operations
zimbra.ldap	LDAP operations
zimbra.lmtp	LMTP operations (incoming mail)
zimbra.mailbox	General mailbox operations
zimbra.misc	Miscellaneous
zimbra.op	Changes to mailbox state
zimbra.pop	POP protocol operations
zimbra.redolog	Redo log operations
zimbra.security	Security events
zimbra.session	User session tracking
zimbra.smtp	SMTP operations (outgoing mail)
zimbra.soap	SOAP protocol
zimbra.sqltrace	SQL tracing
zimbra.store	Mail store disk operations
zimbra.sync	Sync client operations
zimbra.system	Startup/shutdown and other system messages
zimbra.wiki	Wiki operations
zimbra.zimlet	Zimlet operations

Tip tip untuk mempermudah installasi Zimbra 8

Tip tip untuk memudahkan installasi Zimbra 8

Firewall

Server server memiliki firewals yang terkonfigurasi setelah system terinstall untuk tujuan keamanan, Rekomendasi, sementara waktu ketika zimbra di install lebih baik firewall dimatikan. Alternatif lain adalah hanya membolehkan port-port tertentu saja dari zimbra yang di buka. Berikut ini Zimbra Port yang harus dibuka. :

DNS

Konfigurasi Zimbra menyimpan hostname. Zimbra tidak menyimpan informasi alamat IP di konfigurasinya. Keuntungan dari hal ini administrator dapat merubah ip address di zimbra tanpa merubah konfigurasi aplikasi.
Skenarionya, semua hostname yang akan digunakan harus di definisikan terlebih dahulu di DNS servernya. MX dan A record harus di definisikan terlebih dahulu sebelum memulai installasinya.

FQDN Fully Qualified Hostnames

Sangat penting menggunakan FQDN ketika konfigurasi zimbra. Misalnya, Anda harus memasukkan smtp.xolusi.web.id bukan smtp. Hal ini untuk menghindari salah alamat DNS lookup dan memastikan bahwa klien akan menghubungkan ke aplikasi yang tepat.

 Konflik pada Port

Konfigurasi server standar dilengkapi dengan dukungan untuk berbagai port seperti POP, IMAP, dan HTTP (lihat Gambar). Oleh karena itu, Pastikan Anda menonaktifkan semua layanan ini sebelum instalasi. Zimbra skrip instalasi akan memeriksa salah satu konflik dan memberitahu Anda untuk mengubah port ini tidak ada sebelum melanjutkan.

Zimbra 8: Contoh contoh penggunaan Zmprov

Accounts

Membuat sebuah account dengan password yang terpasang di Default COS

zmprov ca name@domain.com password

Membuat sebuah account dengan password yang terpasang berdasarkan spesifikasi COS, Kita harus mengetahui COS ID. Untuk mencari COS ID, ketikkan zmprov gc <COSname>.:

zmprov ca name@domain.com <password> zimbraCOSid <cosIDnumberstring>

Merubah administrator password, 

zmprov sp admin@domain.com password

List semua COS.

zmprov gac -v

List semua COS.

zmprov gaa domain.com

List semua account dan konfigurasi nya:

zmprov gaa -v domain.com

Untuk membuat multiple account silahkan baca link ini http://pandusolusi.blogspot.com/2013/04/zimbra-8-create-multiple-user-create.html

Aliases

Membuat sebuah alias ke sebuah account

zmprov aaa accountname@domain.com aliasname@domain.com

Distribution Lists

Membuat distribution list. :

zmprov cdl listname@domain.com

Menambahkan anggota Add a member to a distribution list. Tip: dapat menambahkan multiple member di console CLI.

zmprov adlm listname@domain.com member@domain.com

Misc

Create a domain that authenticates against Zimbra OpenLDAP:

zmprov cd marketing.domain.com zimbraAuthMech zimbra

Set default domain:

zmprov mcf zimbraDefaultDomainName domain1.com

Disable imapproxy service:

zmprov ms `zmhostname` -zimbraServiceEnabled imapproxy

Enable logger di single server:

zmprov +zimbraServiceEnabled logger

Ketikkan zmloggerctl start , untuk start logger.

lihat distribution list zmprov gadl

Forward Email

zmprov ma lindu@smtp.xolusi.web.id zimbraPrefMailForwardingAddress lindu@act.co.id

Untuk menghapus
zmprov ma lindu@smtp.xolusi.web.id zimbraPrefMailForwardingAddress lindu@act.co.id