Title: Author(s): BBKing Date: 28 Sep 2011 Version(s): 2.0 Zentyal profiles: Zarafa

The reason for creating this howto is to share my experiences with others (many of the topics covered here come up very often in then forum) and to document the changes I made to finally have a working sync groupware I've been dreaming of the last 5 years...;)

Enabling Zarafa is pretty straight forward. People, who used to access their mails through Roundcube, might be confused when it comes to enabling Zarafa. I recommend to disable the Webmail interface in "Module Status" and assign IMAP + IMAPS services to Zarafa under the "Groupware" menue.

The reason for this is as follows: to my understanding DoveCot serves you your mails over IMAP/IMAPS when you access them through RoundCube. The path to the mailboxes is /var/vmail/<domain>/<username> Zarafa stores the emails in MySQL, and because of a config dependency RoundCube relies on either IMAP or IMAPS and I haven't managed to configure it to access Zarafa.

Moving mails to Zarafa

So having activated IMAP+IMAPS for Zarafa, you can copy your old mails from your old server over to Zarafa (I recommend not to switch off the existing server until the new one is running perfectly!). Copying mails is covered well in Documentation/Community/HowTo/MigrateMailToZarafa , just don't forget that your old mailserver needs the user@… username format, while Zarafa is happy with the username only. If you have problems with imapsync, you can try  http://www.yippiemove.com/, they offer a mail migration service - it's not free and I haven't tried the service yet.

Migrating BlackBerry data over Outlook, moving Outlook .pst files to Zarafa

I had to backup my contacts from my BlackBerry to outlook and then export it from there to Zarafa. To do so, install the Zarafa client and the Zarafa Migration Tool on Windows, which used to reside in  http://download.zarafa.com/community/beta/6.40/6.40.11beta1-28776/windows/ but seem to be gone now? *fixme* You can also move your existing Outlook content (mails, contacts, calendars, notes) to Zarafa with the help of the migration tool. The only issues I discovered were, that from a German Outlook the calendar entries were imported to a folder called "Kalender" instead of "Calendar". Same for the contacts here. By using drag&drop you can pretty easily move the entries to the right folder.

To allow connection from the migration tool and Outlook, you have to change in the file /usr/share/ebox/stubs/zarafa/server.cfg.mas the line

server_bind = <% $server_bind %>

to

server_bind = 0.0.0.0

Save the file and install the Zarafa-licensed service by

sudo apt-get install zarafa-licensed

to enable access with Outlook and the migration tool. Afterwards do a

sudo /etc/init.d/ebox zarafa restart

and optionally a

sudo /etc/init.d/zarafa-licensed start

In the "Firewall" menue, you have to open up the port for Zarafa access, the standard port is 236, which we will change later on. Create a new service "Zarafa" under the menue "Services" and edit it. Enter these values: Protocol: TCP/UDP Protocol Source port: ANY Destionation port: 236

and save them. Now head over to the "Firewall" + "Packet filter" menue and under "Filtering rules from external networks to Zentyal" choose "Add new" and enter these values: Decision: Accept Source: ANY (or pre-define an object to grant access only to limited persons) Service: Zarafa

Save the changes and ebox will restart the firewall module. Now you should be able to connect to Zarafa (you can check this by using nmap to discover open ports). If you get the message "Cannot contact license server" in the migration tool or Outlook, you have to restart thezarafa-licensed service!

The migration is covered in the Zarafa docs in  http://www.zarafa.com/wiki/index.php/Zarafa_pst_migration,the only problem I discovered was the difference with an german Outlook and an english Zarafa profile. The contacts were imported to "Kontakte" so I had to manually drag&drop them to the "Contacts" folder. I haven't had too much appointments so I haven't taken care of the calendar yet - probably same problem here, too.

When the migration has worked you are all set to connect with Outlook to Zarafa - just create a new "Zarafa 6" account in Outlook (make sure it's the topmost account in the list if you have other accounts there - otherwise you won't see the content of your folders!!).

Outlook sync is finished with that.

Thunderbird + Lightning access

Coming to Thunderbird, I'll start with the calendar, that was the easiest way for me. I went straight with SSL, so just change in /usr/share/ebox/stubs/zarafa/ical.cfg.mas the port to 8444 (or whatever unused port number you like) insert this port under "Services" in the "Zarafa" entry we created above, save the changes and restart Zarafa+zarafa-ical if you changes the port number.

Install the Lightning extention with the help of your favourite package manager and open the calendar part in Thunderbird. Create a new network calendar, use CalDav as protocol and enter this link:  https://<your_ip_here>:<your_ical_ssl_port_here>/caldav/<your_username_here>/

In my case it's:  https://192.168.10.88:8444/caldav/bbking/

If everything went well, you shouldn't see the error symbol in the left frame in Lightning and optionally you should be able to enter a new appointment in the calendar, which is supposed to show up in Outlook and the Webaccess GUI of Zarafa under  http://<your_ip_here>/webaccess . Lately I experienced high IO loads (600-900k/s) when a Lightning client connected. MySQL was causing the high IO-Load - no solution on this issue yet.

Turning over to IMAP/IMAPS access: As we allowed IMAP+IMAPS services from Zarafa, it is possible to connect to Zarafa with Thunderbird. At first I had some trouble, because I changed the port number of the Zarafa-server and the Gateway could not connect. When I entered my username/password combo I kept getting "Login to server 192.168.10.88 failed" and can't log in. So pay attention to the line

server_socket =  http://localhost:236/zarafa

and change the port number accordingly.

Z-Push

Setting up z-push access with Android and iPhone4 was pretty straight forward, and it seems to be working. Enter the username, password and only the hostname for the exchange server (NOT  http://hostname/Microsoft-Server-ActiveSync !!)

Z-Sync

I ordered a licence for Z-Sync, created a file called z-sync in /etc/apache2/sites-available/ with this content:

Alias /z-sync /usr/share/z-sync

<Directory /usr/share/z-sync/>

DirectoryIndex index.php
Options -Indexes +FollowSymLinks
AllowOverride Options

Order allow,deny
Allow from all

</Directory>

Then copied the files from the .zip archieve to /usr/share/z-sync Did a

ln -s /etc/apache2/sites-available/z-sync /etc/apache2/sites-enabled/z-sync
/etc/init.d/ebox apache restart

and installed the .xpi file in Thunderbird. Unfortunatelly, after configuring the add-on, it did not work and exited with an error alert: "Server not found at: " So far, the reaction on the z-sync dev side was, that I should double check the install-howto - just what I did, before contacting them. Keep you posted on this.

Finished this howto for today, will continue in the next days. Will cover: Creating officially signed SSL-certificates and installing them for mail+web