Centos 5 Install Guide

[Toky]

Indeed It will help many people.

[netpro25]

Saved my butt. CentOS4 would not recognize my hardware but 5 did and I could not get zimbra working until I saw this guide thanks soo much!

Marcel

[newmember]

yum install gmp

Everything else worked well.

I have now installed a single server:

vmware server 1.0.3
Centos5.0
Zimbra Collaboration Suite 4.5 for Fedora 5

Install went well.
I will let you know how things make out.


Cheers

[netpro25]

I was getting this error

Starting spell...FAILED
/opt/zimbra/httpd-2.0.54/bin/httpd: error while loading shared libraries: libdb-4.2.so: cannot open shared object file: No such file or directory

and I did

yum install compat-db.i386

everything works great now. Thanks to all.

Marcel

[freefall]

After I did a "yum install compat-db" the spell checker started fine. That should fix your problem.

[freefall]

This install guide will work for the 64 bit edition as well but you must do one additional step. Edit /etc/redhat-release and change it to say:

Red Hat Enterprise Linux ES release 4 (Nahant Update 4)

(I think any number will work after "Update" but I'm using 4 and it works.)

[reckless2k2]

Hey this is just my 2 cents but killing SELinux and the Firewall is not optimal especially if this server is going to be out on a DMZ. At the very least you should enable the firewall and open the applicable ports for communication with the server:

example:

#nano /etc/sysconfig/iptables

-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 110 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 143 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 993 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 995 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 7071 -j ACCEPT

#/etc/init.d/iptables restart

Ultimately, you can open what ports you like but I was giving basic ports related to SMTP, POP, POP SSL, IMAP, IMAP SSL, and admin port.

Even if it's inside a LAN protected by a hardware firewall, you should still enforce the firewall rules on that box. You can open these ports in the GUI as well but port ranges are best configured in the command line.

[jholder]

Originally Posted by reckless2k2

Hey this is just my 2 cents but killing SELinux and the Firewall is not optimal especially if this server is going to be out on a DMZ. At the very least you should enable the firewall and open the applicable ports for communication with the server:

example:

#nano /etc/sysconfig/iptables

-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 25 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 110 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 143 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 993 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 995 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 7071 -j ACCEPT

#/etc/init.d/iptables restart

Ultimately, you can open what ports you like but I was giving basic ports related to SMTP, POP, POP SSL, IMAP, IMAP SSL, and admin port.

Even if it's inside a LAN protected by a hardware firewall, you should still enforce the firewall rules on that box. You can open these ports in the GUI as well but port ranges are best configured in the command line.

Absolutely-
As long as you have SELinux, and IPTables configured to accept on those ports, you're gonna be okay.

You also will need to add:
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 389 -j ACCEPT

For LDAP Replication.

jh

[reckless2k2]

Yeah I forgot about the LDAP port. Sorry. I was just giving a general idea of the iptables edit process and opening ports. For instance, I only have POP ports open because I do not use IMAP. etc.

The original post suggested disabling both SELinux and the firewall. I can agree with the SELinux issues but my point was not to disable the firewall and gave the process to edit the iptables as to avoid shutting down the firewall.

Thanks for the "add to" on the additional ports jholder.

[toyhippo]

I followed the suggestion and encounter the following error:

It is suggested that the domain name have an MX record configured in DNS
Change domain name? [Yes] no
Done
Checking for port conflicts



Main menu

1) Hostname: hippo1.toyhippo.com
2) Ldap master host: hippo1.toyhippo.com
3) Ldap port: 389
4) Ldap password: set
5) zimbra-ldap: Enabled
6) zimbra-store: Enabled
+Create Admin User: yes
+Admin user to create: admin@hippo1.toyhippo.com
******* +Admin Password UNSET
+Enable automated spam training: yes
+Spam training user: spam.ffn_pqrhd@hippo1.toyhippo.com
+Non-spam(Ham) training user: ham.u7tzt96bui@hippo1.toyhippo.com
+Global Documents Account: wiki@hippo1.toyhippo.com
+SMTP host: hippo1.toyhippo.com
+Web server HTTP port: 80
+Web server HTTPS port: 443
+Web server mode: http
+Enable POP/IMAP proxy: no
+IMAP server port: 143
+IMAP server SSL port: 993
+POP server port: 110
+POP server SSL port: 995
+Use spell check server: yes
+Spell server URL: http://hippo1.toyhippo.com:7780/aspell.php

7) zimbra-mta: Enabled
8) zimbra-snmp: Enabled
9) zimbra-logger: Enabled
10) zimbra-spell: Enabled
r) Start servers after configuration yes
s) Save config to file
x) Expand menu
q) Quit



Question:
==========
1. I already has the following in the DNS list in the domain name provider:

Host Name : hippo1.toyhippo.com
Priority: High
Mail Server: www.toyhippo.com

Host Name: toyhippo.com
Priority: Medium
Mail Server: www.toyhippo.com

Any probelm ?


2. Why the admin mail is admin@hippo1.toyhippo.com ?
It suppose is: admin@toyhippo.com

Many Many
Hippo