Help with openLDAP (quite Urgent!)

[mattnac]

Hello Everyone im new here,

I have an issue i need some help with. I usually took over the Sys Admin role for a company and we are running Scalix as our mail server.

It has been previously integrated to use our openLDAP servers as password backend.
The problem is now we are phasing out our old LDAP server due to ancient hardware and this server generally being in its last breath.

I have quite a bit of experience with LDAP and know it fairly well. The problem is i have never ever worked with Scalix before and for various reasons im unable to get in touch with the old sys admin to get more information.

Basically we have planned a maintenance window tomorrow when we are going to switch the entire network to the new LDAP server including Scalix.

So the information im looking for is basically:

What do i need to do to switch over Scalix to the new LDAP server? The new Ldap server has imported the old LDAP db and they should be 100% synchronized.

Could anyone write me down a step by step instruction for which config files i need to change to simply get Scalix to use the new LDAP server?

I've been looking in the admin console but cant find any option there to change the LDAP server.

The reason i dont wanna just dig down and find out myself is that the Scalix server is EXTREMELY mission critical at the company so i really need to know for sure, there is no room for experimentation.

Also, this will be done tomorrow evening so if you can help me, please reply as quickly as possible!!!


Many thanks!

[davidz]

The main config file for the ldap sync is in

Code: Select all

/var/opt/scalix/XX/s/ldapsync/SYNCNAME/sync.cfg

Where XX is the server initials and SYNCNAME is the name of the sync file that the previous admin had setup. I would also check cron jobs for something like:

Code: Select all

/opt/scalix/bin/omldapsync -u SYNCNAME

This should run often to keep the Scalix stuff sync'ed with the openLDAP stuff.

Good luck,
David

[mattnac]

excellent! Thanks alot.

Any other files that might need updating towards the new LDAP server?

And a general question, since im going to be administrating this server in the future:

If i understand it correctly Scalix runs its own restricted ldap server which it uses for authentication, and then what it does is sync its internal database towards the real ldap server and updates at a given interval?

So basically, adding a user on the standalone ldap with the given Scalix attributes will result in a mail account being created automatically on the scalix server once it synchronizes?

[davidz]

Any other files that might need updating towards the new LDAP server?

I'm no expert, but that's all I ever change for our server here that uses openLDAP.

If i understand it correctly Scalix runs its own restricted ldap server which it uses for authentication, and then what it does is sync its internal database towards the real ldap server and updates at a given interval?

Yes. Hence the need for a cron job.

So basically, adding a user on the standalone ldap with the given Scalix attributes will result in a mail account being created automatically on the scalix server once it synchronizes?

Correct again.


--David

[mattnac]

Excellent, thanks a ton!

We're doing to switch tonight, ill post back with the results