Rolling Upgrades for ZCS

Rolling Upgrades for Zimbra Collaboration

   KB 2383        Last updated on 2015-07-11  




0.00
(0 votes)


This document gives an overview of the order to upgrade your servers when you are doing a rolling upgrade and lists the known issues.

Please read the latest release note, as it contains the up-to-date changes for ZCS.

Rolling upgrade for 7.2.x or later to 8.0.2

Rolling upgrade is a process of upgrading large ZCS deployments where an upgrade can not be accomplished in a single maintenance window. In most cases, ZCS services are available throughout the upgrade process.

Important: Accounts that have been moved to ZCS 8.0.x cannot be moved back to the previous release.

Prerequisites

See the System Requirements document for the latest supported operating systems. Make sure you are running the operating system version that is supported for ZCS 8.0 on all servers before starting the rolling upgrade.

ZCS 8 supports the following operating systems:

  • Red Hat® Enterprise Linux® 6.4, AS/ES (64-bit).
    • For 8.0.4 and later, RHEL 6.4 or later is required.
  • CentOS 6, 64-bit (Community ENTerprise Operating System).
  • SUSE Linux Enterprise Server 11, SP3 (64-bit) is recommended.
    • For 8.0.5 and later, SP3 is required.
    • For 8.0.4, SP2 is required.
  • Ubuntu 12.04 LTS Server Edition (64-bit)

Multi-Server Rolling Upgrade

In the multi-server rolling upgrade, you upgrade the servers one at a time, with the LDAP master servers first, then the LDAP replica servers, MTA servers, proxy servers, and then you upgrade the mailbox servers over a period of time.

Mixed versions of mailbox servers continue to work during the rolling upgrade. Note that sharing does not work between users on ZCS 7.2.x and users on ZCS 8.0.x. Follow the upgrade instructions in the latest release notes.

Upgrade the servers in this order:

1. LDAP Master Servers, upgrade one server at a time. During the upgrade of the LDAP master certain write functions will not work, including account provisioning, password changes, mail filter changes, or any other changes to the LDAP data.

IMPORTANT: When upgrading to ZCS 8.x, if self-signed certificates are used, after the LDAP master is upgraded, the self-signed certificates must be redeployed on all remaining nodes before they are upgraded, or the upgrade will fail.

2. LDAP replica servers, upgrade one server at a time.

3. MTA servers, upgrade one server at a time.

4. Dedicated proxy servers, upgrade one server at a time.

5. Mailbox servers, upgrade one server at a time.

Known Issues

Zimbra engineering has identified a number of issues with the rolling upgrade process. Usually these issues are displayed when you are working across servers that are at different versions. All known bugs are listed in Zimbra’s Bugzilla database, available on the Zimbra web site, at www.zimbra.com.

Issue #

Summary

73209

The preauth failed request does not lockout the account with lockout setting. This work correctly when the mailbox server is upgraded.

74851

You cannot move an account from a later version of ZCS to an earlier version. For example, an account is on a server at ZCS 8.0 cannot be moved to a ZCS server at 7.2.

74854

If a calendar resource is renamed while you are performing a rolling upgrade make sure the rename requests are sent to the LDAP server that has been upgraded to 8.0.x.

74941, 75474

Users on a mailbox server at 7.2.x cannot send a message “on-behalf-of” or “send as” for a user that is on a server upgraded to 8.0.x Make sure all users sending mail “on behalf of” or “sending as” are on ZCS 8.0

75254

Multinode configuration with self-signed certificates will not function in a rolling upgrade. If self-signed certificates are used, after the LDAP master is upgraded, the self-signed certificates must be redeployed on all remaining nodes before they are upgraded or the upgrade will fail. Workaround: Use commercial certificates with rolling upgrades.

75459, 75527, 72211, 75459

Cross version sharing does not work. Users on ZCS 7.x cannot access shares on ZCS 8.0.

75523

Address Book. While in rolling upgrade mode, contact Group members are not displayed when users on a 7.2 mailbox server share their address book with users on an 8.0.x mailbox server.

75553

While in rolling upgrade mode, cross mailbox search will not work for 7.2 or 8.0 versions from the admin console. Workaround: While in rolling upgrade mode, use the command line search across accounts. /opt/zimbra/bin/zmmboxsearch -m "*" -q "test"

78321

While in rolling upgrade mode, administrators should deploy the drag and drop zimlet for 7.X users during a rolling upgrade as this zimlet is no longer utilized in Zimbra 8 as functionality has moved into core product code.

78334

In Zimbra 8 the checklists feature is off by default. If the behavior for users in ZCS 7.2 was to have checklist enabled, administrators will need to change COS settings or users can modify their preferences to maintain the same behavior.

77452

Zmupdateauthkeys does not update all serves during installation of a new mailbox in a mixed environment between 7.x and 8.x.


Multi-Server Rolling Upgrade for 4.5.x to 5.0.x

Note: The rolling upgrade should work for ZCS versions 4.5.x and later to ZCS versions 5.0.2 or later (meaning the latest version). Note that it was only tested from 4.5.10 and 4.5.11 to 5.0.2 and 5.0.3. (Also a 5.0.18 > 6.0RC1 test case listed here.)

Rolling upgrades are intended to enable large deployments where you are unable to upgrade the entire site in a single maintenance window. This allows you to upgrade the LDAP master and replica servers as well as the MTA server first, and then upgrade your mailbox servers over a period of time. '''Note''': Our preferred upgrade path remains upgrading all at once.

Mixed versions of mailbox servers will continue to work with the exception of the known limitations listed in the Known Issues section. Because of these known issues, we do not recommend running in the mixed mode for any longer than necessary.

Follow the upgrade instructions in the latest release notes. These can be found on at www.zimbra.com. Update the servers in the following order:

All LDAP servers must be updated in the same downtime window. Update in the following order and one at a time. For example you must upgrade the ldap master first, then ldap replicas, then the mta, and then the proxy systems.

Upgrade the servers in this order:

1. LDAP Master Servers, upgrade one server at a time. During the upgrade of the LDAP master certain write functions will not work, including account provisioning, password changes, mail filter changes, or any other changes to the LDAP data.

2. LDAP replica servers, upgrade one server at a time.

3. MTA servers, upgrade one server at a time.

4. Dedicated proxy servers, upgrade one server at a time.

5. At this point you should test basic mailstore functions (and schedule their upgrades as soon as possible of course).

The first mailbox server to upgrade is the server where the notebook documents wiki account was created. If you do not upgrade and get this server working first, you will need to manually install the Documents templates on each of the other servers.

Known Issues

Zimbra engineering has identified a number of issues with the rolling upgrade process. Usually these issues are displayed when you are working across servers that are at different versions. All known bugs are listed in Zimbra’s Bugzilla database, available on the Zimbra web site, at www.zimbra.com.

Issue #

Summary

24662

In rolling upgrades, the administration console does not show the certs for the 4.5.x nodes. This feature was not available before ZCS 5.0.

24607 (23805)

When users, who have accounts still on a 4.5.x server, log in from the URL for a server that has been upgraded to 5.0.x, they are redirected to their 4.5.x server and are logged in. The second time they try to log in, this time from the URL for their 4.5.x server, the log in fails.While you have servers at two different versions, it is recommended that users log in directly to their server to avoid this issue.

24620

If calendars are shared between users on 4.5.x servers and users on 5.0.x servers, appointments do not display.

23203

The Documents feature does not work on 4.5.x servers after the rolling upgrade of servers begins.

24682

Instant Messaging is in Beta for 5.0 and some preliminary work was done in 4.5 that was not exposed in the software. If during this rolling upgrade, you enable IM, a "chat" tab displays with the other tabs in the mailbox for 4.5.x users. IM does not work.

24684

Backing up accounts on 4.5. x servers fails when the backup is run from an administration console already upgraded to 5.0.2 or later.The normal scheduled backups work. If you need to do an interactive backup of a server, perform the backup from the administration console that is of the same ZCS version, preferably local.

24689

During a rolling upgrade, users on 4.5.x servers will see a list of 5.0.x themes. If they try to change to one of these 5.0 themes, they will get an error "No theme available" and they cannot use their account.The user will need to close the browser and log back in. But before logging back in they may need to update their URL to remove the reference to the theme in the URL address. In an URL, the theme can be represented by a number, for example, https: //example.com/zimbra/mail#14. The user will need to delete the #14 from the URL.

24729

When you log in to an admin console and change the default domain to be a domain that is not on the same version, you will need to use the fully qualified user name (sam@example.com/password) to log on.

28280

Users on 4.5.x servers won't be able to login to the web client if IM is enabled. zimbraXMPPEnabled has to be set to FALSE. (Fixed 5.0.7)

Verified Against: ZCS 5.0.2 or later Date Created: 2/29/2008
Article ID: https://wiki.zimbra.com/index.php?title=Rolling_Upgrades_for_ZCS Date Modified: 2015-07-11



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Jump to: navigation, search