VMware Zimbra Collaboration Server Administrator’s Guide Release 7.1 Open Source Edition May 2011 Legal Notices Copyright ©2005-2011 VMware, Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. VMware products are covered by one or more patents listed at http://www.vmware.com/go/patents. VMware and Zimbra are registered trademarks or trademarks of VMware, Inc. in the United states and/ or other jurisdiction. All other marks and names mentioned herein may be trademarks of their respective companies. VMware, Inc. 3401 Hillview Avenue Palo Alto, California 94304 USA www.zimbra.com ZCS 7.1 Rev 2 for 7.1.2 July 2011 Table of Contents 1 Introduction . 9 Intended Audience . 9 Available Documentation . 9 Support for Recommended Third-Party Components . 10 Support and Contact Information . 10 2 Product Overview . 11 Core Functionality . 11 Zimbra Components . 13 System Architecture . 13 Zimbra Packages . 15 Zimbra System Directory Tree . 17 Example of a Typical Multi-Server Configuration . 19 3 Zimbra Mailbox Server . 23 Incoming Mail Routing . 23 Disk Layout . 23 Message Store . 24 Data Store. 24 Index Store . 24 Log . 25 4 Zimbra Directory Service. 27 Directory Services Overview . 27 LDAP Hierarchy . 28 Zimbra Schema . 29 Account Authentication . 30 Internal Authentication Mechanism. 30 External LDAP and External Active Directory Authentication Mechanism 30 Custom Authentication - zimbraCustomAuth . 31 Kerberos5 Authentication Mechanism . 33 Zimbra Objects . 33 Company Directory/GAL . 36 Flushing LDAP Cache . 38 Themes and Locales . 38 Accounts, COS, Domains, and Servers . 38 Global Configuration . 39 5 Zimbra MTA. 41 Zimbra MTA Deployment . 41 Postfix Configuration Files . 42 MTA Functionality . 43 SMTP Authentication . 43 SMTP Restrictions . 43 Relay Host Settings . 43 VMware Zimbra Collaboration Server Open Source Edition 7.1 iii Administrator’s Guide MTA-LDAP Integration . 44 Account Quota and the MTA . 44 MTA and Amavisd-New Integration . 44 Anti-Virus Protection . 45 Anti-Spam Protection . 45 Receiving and Sending Mail through Zimbra MTA . 48 Zimbra MTA Message Queues. 49 6 Working with Zimbra Proxy . 51 Zimbra Proxy Components . 51 Zimbra Proxy Architecture and Flow . 51 Customizing Zimbra Proxy Configuration . 52 Zimbra IMAP/POP Proxy . 52 Zimbra Proxy Ports for POP/IMAP . 53 Setting up IMAP/POP Proxy after HTTP Proxy . 53 Configuring ZCS HTTP Proxy . 55 Setting up HTTP Proxy after IMAP/POP Proxy is set up . 56 Setting Proxy Trusted IP Addresses. 58 Configuring Zimbra Proxy for Kerberos Authentication . 59 7 Using the Administration Console . 61 Logging In . 61 Changing Administrator Passwords . 62 About the Administration Console . 62 Managing Tasks from the Administration Console . 64 Tasks Not Available from Administration UI . 64 Creating Message of the Day for Administrators . 65 Checking for ZCS Software Updates . 66 Searching from the Administration Console . 67 8 Managing ZCS Configuration . 69 Managing Global Configurations . 69 General Global Settings . 70 Global Settings to Block Mail Attachments . 71 Global MTA Settings. 71 Global IMAP and POP Settings . 73 Anti-spam Settings . 73 Anti-virus Settings. 74 Zimbra Free/Busy Interoperability . 74 Briefcase. 76 Managing Domains . 76 General Information . 77 Global Address List (GAL) Mode . 78 Authentication Modes . 80 Virtual Hosts . 80 Briefcase. 81 Free/Busy Interoperability. 81 Zimlets on the Domain . 81 Renaming a Domain . 82 Adding a Domain Alias . ..