HAB configuration
Steps to Create a HAB
Hierarchy
┌─────────────┐ | ROOT | | Zimbra | └──────┬──────┘ | ┌───────┴────────┐ ┌────┴─────┐ ┌────┴─────┐ │Production| | Testing | └────┬─────┘ └──────────┘ | ┌───────────┐ ├────┤Development| | └───────────┘ | ┌─────────┐ └────┤ Support | └─────────┘
Create an organizational unit (OU)
zmprov createHABOrgUnit domain.com ZimbraOU
Create a group and assign an email address for each of the departments
- Allgroups will belong to the same HAB OU.
- Important to create the root node. This will be shown in the Add Book.
zmprov createHABGroup Zimbra ZimbraOU zimbra@domain.com zmprov createHABGroup Production ZimbraOU production@domain.com zmprov createHABGroup Testing ZimbraOU testing@domain.com zmprov createHABGroup Development ZimbraOU development@domain.com zmprov createHABGroup Support ZimbraOU support@domain.com
Each of these groups (except Zimbra) needs to be assigned a parent group to create a hierarchy
- Zimbra group is the root - Go bottom up - Go from leaf to child to root.
zmprov addHABGroupMember production@domain.com development@domain.com zmprov addHABGroupMember production@domain.com support@domain.com zmprov addHABGroupMember zimbra@domain.com production@domain.com zmprov addHABGroupMember zimbra@domain.com testing@domain.com
Add users to Groups
zmprov addHABGroupMember development@domain.com user1@domain.com zmprov addHABGroupMember support@domain.com user2@domain.com
Specify the root organization for the HAB
- Get Zimbra ID of the Root Node.
zmprov gdl zimbra@domain.com zimbraId zmprov md 'domain.com' zimbraHierarchicalAddressBookRoot xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxx (zimbraId)
Important
- In a multiserver environment, all commands should be run on the Mailbox server. Below error will prompt if the command ran on the LDAP server.
[zimbra@testlabldap ~]$ zmprov createHABGroup Production ZimbraOU production@domain.com ERROR: service.INVALID_REQUEST (invalid request: can only be used with SOAP)
- Make sure the group email address should not present on the server else below error will prompt "some attributes not unique".
[zimbra@testlabmailbox ~]$ zmprov createHABGroup Production ZimbraOU production@domain.com ERROR: ldap.INVALID_ATTR_VALUE (invalid attr value - unable to create entry: ldap host=testlabmailbox:389: some attributes not unique)
- Once you complete the HAB steps, a DL will be created with the email mentioned in the group email address.
Submitted by: Keshav Gaur |