Links2Linux Wiki

This is an old revision of the document!

---

How To install an OpenXchange server on Debian Sarge

Nice Iconset? OX on Sarge

Based on the above, a step-by-step manual:

edit /etc/apt/sources.list and add:

  -  OX related packages
  -  java
deb http:<nowiki>//</nowiki>ftp.debian-unofficial.org/debian sarge main contrib non-free restricted
deb-src http:<nowiki>//</nowiki>ftp.debian-unofficial.org/debian sarge main contrib non-free restricted

  -  Open-Xchange and JavaMail packages
deb http:<nowiki>//</nowiki>ox.cs.bme.hu/ ./


 aptitude update
 aptitude install postgresql tomcat4 tomcat4-webapps tomcat4-admin apache2 libapache2-mod-jk2 j2sdk1.5

 vi /var/lib/tomcat4/conf/tomcat-users.xml

add “manager” to the tomcate roles

change

 <user name="tomcat" password="tomcat" roles="tomcat" />

to

 <user name="tomcat" password="tomcat" roles="tomcat,manager" />

Set

 TOMCAT4_SECURITY=no
 JAVA_HOME=/usr/lib/sun-j2se5.0-jdk

in /etc/default/tomcat4

 /etc/init.d/tomcat4 start
 cp /usr/share/doc/libapache2-mod-jk2/examples/workers2.properties.minimal /etc/apache2/workers2.properties
 vi /etc/apache2/mods-enabled/jk2.conf

uncomment the line

 JkSet config.file /etc/apache2/workers2.properties

 vi /etc/apache2/workers2.properties

add:

[[uri:/servlet/*]]
worker=ajp13:localhost:8009

[[uri:/umin/*]]
worker=ajp13:localhost:8009

Enable apache2 mod-ssl

 a2enmod ssl

Create a new SSL cert:

 apache2-ssl-certificate

And then restart apache2

 /etc/init.d/apache2 force-reload

Configure postgreSQL

 vi /etc/postgresql/pg_hba.conf

Change:

 # All IPv4 connections from localhost
 host    all         all         127.0.0.1         255.255.255.255   ident sameuser

into

 # All IPv4 connections from localhost
 host    all         all         127.0.0.1         255.255.255.255   md5
 host    all         all         127.0.0.1         255.255.255.255   ident sameuser

Then

 /etc/init.d/postgresql reload

Install imap:

 aptitude install cyrus21-imapd

Install OpenLdap

 aptitude install slapd

Install OpenXchange:

The installation process is a bit complicated/buggy. The package wants to fill the ldap directory during install but slapd does not know the open-xchange schema at this time. So it does not work “the smooth way”.

This is maybe the most smooth way:

First only download all needed packages for open-xchange:

 aptitude -d install open-xchange

Now unpack open-xchange:

 dpkg --unpack /var/cache/apt/archives/open-xchange_0.8.0.5-2_i386.deb

so that we have the ldap schema file.

 cp /etc/ldap/schema/open-xchange.schema.dpkg-new /etc/ldap/schema/open-xchange.schema
 vi /etc/ldap/slapd.conf

add

 include         /etc/ldap/schema/open-xchange.schema

then set proper ACLs by doing

 cat /usr/share/doc/open-xchange/openLDAP2.2.conf.example | sed 's/dc=example,dc=org/dc=<your domain>,dc=<your tld>/g' >> /etc/ldap/slapd.conf 

and do a

 /etc/init.d/slapd restart

Now you can finish open-xchange installation:

DO NOT USE APTITUDE NOW! (because it will try to recover an error where we do not want it to do this!)

 apt-get install open-xchange

The process pauses at:

 Starting OXWebmail webmail module: done.

Go to a second console and restart open-xchange

 /etc/init.d/open-xchange restart

If the install process did not finish yet, abort it with ctrl-c, then:

 apt-get remove open-xchange

then again

  apt-get install open-xchange

Now answer the “Should I create/fill db” questions with “No!”

Then, when it hangs at “Starting OXWebmail webmail module: done.” the second time, go to the second console and do the

 /etc/init.d/open-xchange restart

again. Now the installprocess should really have finished.

What a mess….

Configure Cyrus:

 aptitude install sasl2-bin
 vi /etc/default/saslauthd

Set

 START=yes
 MECHANISMS="ldap"

Create /etc/saslauthd.conf

 vi /etc/saslauthd.conf

Content:

ldap_servers: ldap:<nowiki>//</nowiki>127.0.0.1/
ldap_version: 3
ldap_timeout: 10
ldap_time_limit: 10
ldap_cache_ttl: 30
ldap_cache_mem: 32768
ldap_scope: sub
ldap_search_base: ou=Users,ou=OxObjects,dc=<your domain>,dc=<your tld>
ldap_auth_method: bind
ldap_filter: uid=%u
ldap_bind_dn: cn=admin,dc=gaia-capital,dc=de
ldap_bind_pw: secret

In /etc/imapd.conf

enable

 allowplaintext: yes
 sasl_mech_list: PLAIN
 sasl_minimum_layer: 0
 sasl_pwcheck_method: saslauthd

–mschiff 19:30, 22 Jul 2005 (CEST)