The zmprov tool performs all provisioning tasks in Zimbra LDAP, including creating accounts, aliases, domains, COS, distribution lists, and calendar resources. Each operation is invoked through command-line options, each of which has a long name and a short name.
The syntax for modify can include the prefix “+” or “
-” so that you can make changes to the attributes affected and do not need to reenter attributes that are not changing.
The following example would add the attribute zimbraZimletUserProperties with the value “blue” to user 1 and would not change the value of any other instances of that attribute.
The commands in the following table are divided into the tasks types - Account, Calendar Resources, Config, COS, Distribution List, Documents, Domain, Server, and Miscellaneous.
|
|
|
|
|
|
|
|
|
zmprov aaa joe@domain.com joe.smith@engr.domain.com
|
|
|
|
Note: This command does not check the password age or history.
|
|
|
|
|
|
|
|
{name@domain} {ds-type} {ds-name} [attr1 value1 [attr2 value2...]]
|
|
|
|
|
|
|
|
{name@domain} {signature-name} [attr1 value1 [attr2 value2...]]
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
zmprov ma joe@domain.com zimbraAccountStatus maintenance
|
|
|
|
{name@domain | id} {ds-name |ds-id} [attr 1 value 1 [attr2 value 2...]]
|
|
|
|
|
|
|
|
{name@domain |id} {signature-name | signature-id} [attr 1 value 1 [attr 2 value 2...]]
|
|
|
|
zmprov raa joe@domain.com joe.smith@engr.domain.com
|
|
|
|
{name@domain|id} {newname@domain}
Note: After you rename an account, you should run a full backup for that account. zmbackup -f - <servername.com> -a <newaccountname@servername.com>
|
|
|
|
|
|
|
|
Note: Passwords cannot included accented characters in the string. Example of accented characters that cannot be used: ã, é, í, ú, ü, ñ.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
{name@domain|id} {newName@domain}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
This lists each COS, the COS ID and the number of accounts assigned to each COS
|
|
|
|
{alias-domain-name} {local-domain-name|id} [attr1 value1 [attr2 value2...]]
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
zmprov md domain.com zimbraGalMaxResults 500
Note: Do not modify zimbraDomainRenameInfo manually. This is automatically updated when a domain is renamed.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
zmprov cc Executive zimbraAttachmentsBlocked FALSE zimbraAuthTokenLifetime 60m zimbraMailQuota 100M zimbraMailMessageLifetime 0
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
zmprov mc Executive zimbraAttachmentsBlocked TRUE
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
zmprov ms domain.com zimbraVirusDefinitionsUpdateFrequency 2h
|
|
|
|
Used to publish into nginx.conf what servers should be used for reverse proxy lookup.
|
|
|
|
Used to publish into saslauthd.conf what servers should be used for saslauthd.conf MTA auth
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
get DistributionListmembership
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Before importing files, any file that will become a Documents page (wiki-style page), must be renamed to include the extension “.wiki”. If not it is imported as a file, accessed either as an attachment or an image.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
When unread message count and quota usage are out of sync with the data in the mailbox, use this command to immediately recalculate the mailbox quota usage and unread messages count.
Important: Recalculating mailbox quota usage and message count should be schedule to run in off peak hours and used on one mailbox at a time.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[-s/--server hostname] {name@domain|id} {logging-category} {debug|info|warn|error}
|
|
|
|
|
|
|
|
[-s/ --server hostname] {name@domain|id} {logging-category}
When name@domain is specified, removes the custom logger created for the account otherwise removes all accounts all account loggers from the system.
|
See the zmprov Log Categories for a list of logging categories.
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
[-v] {ldap-query} [limit] [offset] [sortBy {attribute} [sortAscending 0|1] [domain {domain}]
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
{+|-} {dl-name@domain|id} {owner-name|owner-id} [{folder-path|folder-id}]
|
|
|
|
|
|
|
|
|
|
Generates a pre-authentication key to enable a trusted third party to authenticate to allow for single-sign on. Used in conjunction with GenerateDomainPreAuth.
|
|
|
|
{domain|id} {name} {name|id|foreignPrincipal} {timestamp|0} {expires|0}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
Used to publish into nginx.conf the servers that should be used for reverse proxy lookup
|
|
|
|
Used to publish into saslauthd.conf the servers that should be used for saslauthd.conf MTA auth
|
|
|
|
|
You can specify which of the above variables appear in the Subject,
From, or
Body of the email. The following example is changing the appearance of the message in the body of the notification email that is received at
name@domain.com. You can also change the template in a class of service, use
zmprov mc. The command is written on one line.