Zarafa DB to LDAP user plugin conversion - Revision history

Milo at 07:48, 24 December 2012

2012-12-24T07:48:06Z

← Older revision		Revision as of 07:48, 24 December 2012
Line 18:		Line 18:
	* Test if you can still reply internal emails from before the migration		* Test if you can still reply internal emails from before the migration
	* Test if access to shared mailboxes is still working		* Test if access to shared mailboxes is still working
		+	* Disable the safe_mode and reload the zarafa-server to activate the change

Milo at 07:47, 24 December 2012

2012-12-24T07:47:28Z

← Older revision		Revision as of 07:47, 24 December 2012
Line 10:		Line 10:
	'''Execution:'''		'''Execution:'''
	* Shutdown Zarafa (which is configured for DB plugin)		* Shutdown Zarafa (which is configured for DB plugin)
		+	* Set the user_plugin option in the server.cfg to ldap
		+	* Enable the safe mode by setting the option ''user_safe_mode = yes''
	* Run the db-to-ldap-plugin.pl script		* Run the db-to-ldap-plugin.pl script
	* Configure Zarafa for the LDAP plugin		* Configure Zarafa for the LDAP plugin

Msartor at 08:08, 29 March 2012

2012-03-29T08:08:03Z

← Older revision		Revision as of 08:08, 29 March 2012
Line 9:		Line 9:

	'''Execution:'''		'''Execution:'''
-	* Run ~~the first~~ the db-to-ldap-plugin.pl script	+	* Shutdown Zarafa (which is configured for DB plugin)
		+	* Run the db-to-ldap-plugin.pl script
		+	* Configure Zarafa for the LDAP plugin
		+	* Start Zarafa (with new LDAP plugin)
	* When this script is successfully executed, run the db-upgrade-addressbook-entryids.pl to fix all entries of all email items		* When this script is successfully executed, run the db-upgrade-addressbook-entryids.pl to fix all entries of all email items
	* Test if you can still reply internal emails from before the migration		* Test if you can still reply internal emails from before the migration
Line 15:		Line 18:


-	This is not officially supported. Zarafa Professional Services can help you with these upgrade processes.	+	<B>NOTE:</B> This is not officially supported. Zarafa Professional Services can help you with these upgrade processes. The order of execution is very important, the key is to have Zarafa not noticing that the "externid" of the "users" table have changed.
		+
		+
		+	<B>NOTE:</B> If you want to try this yourself, please try it first in a test environment if you don't then you might end up with all the mailstores unhooked on your production environment.

Admin at 11:31, 29 February 2012

2012-02-29T11:31:49Z

← Older revision		Revision as of 11:31, 29 February 2012
Line 1:		Line 1:
-	The following ~~script~~ allows you to convert the mailboxes from a local Zarafa DB plugin to an Active Directory environment.	+	The following scripts allows you to convert the mailboxes from a local Zarafa DB plugin to an Active Directory environment.

		+	[[File:Db-to-ldap.zip‎]]

	'''Requirements:'''		'''Requirements:'''
-	* Make sure all local Zarafa users are also available in the Active Directory	+	* Make sure all local Zarafa users are also available in the Active Directory or OpenLDAP directory. The usernames used with the DB plugin, should be the same as the username in AD/LDAP.
	* Install the perl module MIME::Base64 and DBI		* Install the perl module MIME::Base64 and DBI
	* Make sure you have a successful backup of the Zarafa database		* Make sure you have a successful backup of the Zarafa database

		+	'''Execution:'''
		+	* Run the first the db-to-ldap-plugin.pl script
		+	* When this script is successfully executed, run the db-upgrade-addressbook-entryids.pl to fix all entries of all email items
		+	* Test if you can still reply internal emails from before the migration
		+	* Test if access to shared mailboxes is still working

-	~~<pre>~~
-	~~#!/usr/bin/perl -w~~
-	~~use strict;~~
-	~~use DBI;~~
-	~~use Net::LDAP;~~

-	~~sub readconfig($) {~~	+	This is not officially supported. Zarafa Professional Services can help you with these upgrade processes.
-	~~my ($fn) = @_;~~	+
-	~~my %options;~~	+
-		+
-	~~open(CFG, $fn) or die("unable to open "~~.~~$fn." config file");~~	+
-	~~while (<CFG>) {~~	+
-	~~if ($_ =~ /^\s*[#!]/) {~~	+
-	~~next;~~	+
-	}	+
-	~~if ($_ =~ /^\s(\S+)\s=\s*([^\r]+)\r?$/) {~~	+
-	~~my $idx = $1;~~	+
-	~~my $val = $2;~~	+
-	~~chomp($val);~~	+
-	~~$val =~ s/\s+$//;~~	+
-	~~$options{$idx} = $val;~~	+
-	}	+
-	}	+
-	~~close(CFG);~~	+
-	~~return %options;~~	+
-	}	+
-		+
-	~~# @todo, differentiate between users/groups/etc.~~	+
-	~~sub get_extern_id($$$) {~~	+
-	~~my ($lo, $ldap, $db_username) = @_;~~	+
-	~~my $mesg = $ldap->search(filter => "($lo->{ldap_loginname_attribute}=$db_username)",~~	+
-	~~base => "$lo->{ldap_search_base}",~~	+
-	~~attrs => ["$lo->{ldap_loginname_attribute}", "$lo->{ldap_user_unique_attribute}"],~~	+
-	~~scope => "sub");~~	+
-		+
-	~~my @entries = $mesg->entries;~~	+
-	~~# if $mesg->count != 1 fallback on emailaddress lookup?~~	+
-	~~if ( $mesg->count == 0 ) {~~	+
-	~~print "Error updating $db_username. No entry found in ldap for ($lo->{ldap_loginname_attribute} = $db_username)\n";~~	+
-	~~return ($mesg->count, "");~~	+
-	}	+
-	~~if ( $mesg->count > 1 ) {~~	+
-	~~print "Error updating $db_username. Multiple entries found in ldap for ($lo->{ldap_loginname_attribute} = $db_username)\n";~~	+
-	~~return ($mesg->count, "");~~	+
-	}	+
-		+
-	~~return ($mesg->count, $entries[0]->get_value($lo->{ldap_user_unique_attribute}));~~	+
-	}	+
-		+
-		+
-		+
-	~~my $servercfg = $ARGV[0];~~	+
-	~~$servercfg = "/etc/zarafa/server.cfg" if (!defined($servercfg));~~	+
-		+
-	~~my %serveropt = readconfig($servercfg);~~	+
-	~~if (!defined($serveropt{user_plugin})) {~~	+
-	~~print "First argument must be the server configuration file\n";~~	+
-	~~exit(0);~~	+
-	}	+
-	~~if ($serveropt{user_plugin} ne "ldap") {~~	+
-	~~print "You only~~ can ~~change the unique attribute for the ldap user plugin, found: '".$serveropt{user_plugin}."'\n";~~	+
-	~~exit(0);~~	+
-	}	+
-	~~my %ldapopt = readconfig($serveropt{user_plugin_config});~~	+
-		+
-	~~my $ldapuri = $ldapopt{ldap_protocol}."://".$ldapopt{ldap_host}.":".$ldapopt{ldap_port};~~	+
-	~~my $ldap = Net::LDAP->new($ldapuri) or die ("LDAP connection failed");~~	+
-	~~my $msg = $ldap->bind($ldapopt{ldap_bind_user}, password => $ldapopt{ldap_bind_passwd});~~	+
-	~~$msg->code && die $msg->error;~~	+
-		+
-	~~my ($dbh, $query, $sth, $upd, $udh);~~	+
-	~~my @row;~~	+
-		+
-	~~$dbh = DBI->connect("dbi:mysql:database=".$serveropt{mysql_database}.";host=".$serveropt{mysql_host}, $serveropt{mysql_user}, $serveropt{mysql_password})~~	+
-	~~or die $DBI::errstr;~~	+
-		+
-	~~$query = "SELECT u.id AS user_id, op.value AS user_name, o.id FROM users AS u JOIN object AS o ON u.externid=o.externid JOIN objectproperty AS op ON o.id=op.objectid AND op.propname='loginname'";~~	+
-	~~$sth = $dbh->prepare($query) or die $DBI::errstr;~~	+
-	~~$sth->execute();~~	+
-		+
-	~~$dbh->begin_work();~~	+
-	~~$dbh->{AutoCommit} = 0;~~	+
-		+
-	~~while (@row = $sth->fetchrow_array) {~~	+
-	~~my $db_user_id = $row[0];~~	+
-	~~my $db_user_name = $row[1];~~	+
-	~~my $db_object_id = $row[2];~~	+
-	~~print "Found user '$db_user_name' in database~~ with ~~user_id '$db_user_id'\n";~~	+
-		+
-	~~my ($retval, $extern_id) = get_extern_id(\%ldapopt, $ldap, $db_user_name);~~	+
-	~~#print "$retval - $extern_id\n";~~	+
-	~~#print "$db_user_id - $db_user_name\n";~~	+
-	~~if ($retval == 1) {~~	+
-	~~$query = "UPDATE users SET externid=? WHERE id=?";~~	+
-	~~$upd = $dbh->prepare($query)~~	+
-	~~or die $DBI::errstr;~~	+
-	~~$upd->execute($extern_id, $db_user_id);~~	+
-	~~$query = "UPDATE object SET externid=? WHERE id=?";~~	+
-	~~$upd = $dbh->prepare($query)~~	+
-	~~or die $DBI::errstr;~~	+
-	~~$upd->execute($extern_id, $db_object_id);~~	+
-	}	+
-	}	+
-		+
-	~~print "Committing changes to database\n";~~	+
-	~~$dbh->commit();~~	+
-	~~$ldap->unbind;~~	+
-	~~print "Done~~.~~\n";~~	+
-	~~</pre>~~	+

Ddebyttere at 12:22, 16 August 2011

2011-08-16T12:22:42Z

← Older revision		Revision as of 12:22, 16 August 2011
Line 7:		Line 7:
	* Make sure you have a successful backup of the Zarafa database		* Make sure you have a successful backup of the Zarafa database

-
-	~~Note: this is only possible with version before 6.30!~~

	<pre>		<pre>

Ddebyttere at 08:53, 16 August 2011

2011-08-16T08:53:44Z

Show changes

Admin at 11:50, 23 July 2009

2009-07-23T11:50:07Z

← Older revision		Revision as of 11:50, 23 July 2009
Line 7:		Line 7:
	* Make sure you have a successful backup of the Zarafa database		* Make sure you have a successful backup of the Zarafa database

		+
		+	Note: this is only possible with version before 6.30!

	<pre>		<pre>

Admin at 17:51, 25 February 2009

2009-02-25T17:51:13Z

← Older revision		Revision as of 17:51, 25 February 2009
Line 1:		Line 1:
	The following script allows you to convert the mailboxes from a local Zarafa DB plugin to an Active Directory environment.		The following script allows you to convert the mailboxes from a local Zarafa DB plugin to an Active Directory environment.
		+

	'''Requirements:'''		'''Requirements:'''

Admin at 17:51, 25 February 2009

2009-02-25T17:51:05Z

← Older revision		Revision as of 17:51, 25 February 2009
Line 2:		Line 2:

	'''Requirements:'''		'''Requirements:'''
-	- Make sure all local Zarafa users are also available in the Active Directory	+	* Make sure all local Zarafa users are also available in the Active Directory
-	- Install the perl module MIME::Base64 and DBI	+	* Install the perl module MIME::Base64 and DBI
-	- Make sure you have a successful backup of the Zarafa database	+	* Make sure you have a successful backup of the Zarafa database

Admin at 17:50, 25 February 2009

2009-02-25T17:50:52Z

← Older revision		Revision as of 17:50, 25 February 2009
Line 2:		Line 2:

	'''Requirements:'''		'''Requirements:'''
-	- Make sure all local Zarafa users are also available in the Active Directory	+	- Make sure all local Zarafa users are also available in the Active Directory
-	- Install the perl module MIME::Base64 and DBI	+	- Install the perl module MIME::Base64 and DBI
-	- Make sure you have a successful backup of the Zarafa database	+	- Make sure you have a successful backup of the Zarafa database