Difference between revisions of "Howto - Change the default Scalix ldap port from 389"
(→How is it done?) |
|||
| Line 12: | Line 12: | ||
The LDAP port is specified in a number of files for Scalix, each used by different parts of the total solution. e.g. the mail server needs to know, so does the Admin Console, and so does the Web Appliciation. And, with the introduction of ldapmapper in Scalix 11, the ldapmapper needs to know what port its mapping to (it'll assume the default port, 389). | The LDAP port is specified in a number of files for Scalix, each used by different parts of the total solution. e.g. the mail server needs to know, so does the Admin Console, and so does the Web Appliciation. And, with the introduction of ldapmapper in Scalix 11, the ldapmapper needs to know what port its mapping to (it'll assume the default port, 389). | ||
| + | |||
| + | To actually do it, you need to edit the properties files for each major component in Scalix, as well as editing a config file that is used by the ldapmapper. The edits below can be made while Scalix is already running - but the changes won't propagate until a restart, as the properties files are only read on startup typically. | ||
| + | |||
| + | If you don't change the ldapmapper, then you'll get a lot of mail building up in the "Internet Mail Gateway" queue stuck on the outbound side. Your Scalix installation will receive mail just fine, and deliver locally, but Sendmail won't know how to contact the ldap server, and you'll get this error in /var/log/maillog | ||
| + | |||
| + | <code> | ||
| + | Jan 19 23:45:26 mail ldapmapper[4210]: cannot send search request to instance mail: No such object | ||
| + | Jan 19 23:45:26 mail sendmail[10458]: l0JCjQaa010458: SYSERR(root): Error getting LDAP results in map ldapsx: Unknown error 325 | ||
| + | </code> | ||
| + | |||
| + | The example below assumes you're changing it to port 3890 - good for lazy typists, and to make it easier to remember what runs on the port at a later date. | ||
==Files to edit== | ==Files to edit== | ||
Revision as of 06:48, 3 February 2007
Scalix 11
In Scalix 11, the switch to using the ldapmapper daemon rather than smtpd added a new requirement to running the LDAP daemon omslapd on a port other than 389.
Why do it?
So why does anyone want change the default LDAP port from port 389? There are a number of reasons for this, but the most common are:
- Co-hosting with another LDAP server (e.g. for running a Samba-LDAP (smbldap) server on the same host)
- Network or firewall restrictions
How is it done?
The LDAP port is specified in a number of files for Scalix, each used by different parts of the total solution. e.g. the mail server needs to know, so does the Admin Console, and so does the Web Appliciation. And, with the introduction of ldapmapper in Scalix 11, the ldapmapper needs to know what port its mapping to (it'll assume the default port, 389).
To actually do it, you need to edit the properties files for each major component in Scalix, as well as editing a config file that is used by the ldapmapper. The edits below can be made while Scalix is already running - but the changes won't propagate until a restart, as the properties files are only read on startup typically.
If you don't change the ldapmapper, then you'll get a lot of mail building up in the "Internet Mail Gateway" queue stuck on the outbound side. Your Scalix installation will receive mail just fine, and deliver locally, but Sendmail won't know how to contact the ldap server, and you'll get this error in /var/log/maillog
Jan 19 23:45:26 mail ldapmapper[4210]: cannot send search request to instance mail: No such object
Jan 19 23:45:26 mail sendmail[10458]: l0JCjQaa010458: SYSERR(root): Error getting LDAP results in map ldapsx: Unknown error 325
The example below assumes you're changing it to port 3890 - good for lazy typists, and to make it easier to remember what runs on the port at a later date.
Files to edit
The files you need to edit to make it all work with the new port are:
Note: The code snippets are not the complete files - they are just to highlight the relevant lines.
/var/opt/scalix/ml/s/sys/slapd.conf
- --OMSLAPDHEADER--
- server specific data
subschemaSubentry "cn=subSchema,o=Scalix" altServer "" portNum 3890
/var/opt/scalix/ml/caa/scalix.res/config/ubermanager.properties
- Port number for the Scalix LDAP servers. The default is 389.
- If you change this number make sure all the sladp.conf file on
- all Scalix LDAP servers are changed to the same port here.
ubermanager.query.server.port=3890
/var/opt/scalix/ml/webmail/swa.properties
NOTE: This file has two lines that specify port number.
swa.ldap.1.port=3890
swa.ldap.1.baseDN=o=scalix
.
.
swa.ldap.2.port=3890
swa.ldap.2.baseDN=o=MyContacts
/var/opt/scalix/ml/platform/platform.properties
- ldap port (since 10.0.1 this can be different from 389)
ldap.port=3890
/etc/sysconfig/ldapmapper
Finally, don't forget to change the ldapmapper. This is the complete file, as it only has one config line. Notice the ldapmapper(8) part - there's a man page, so go check it out too if you're interested!
- Scalix ldapmapper(8) options
LDAPMAPPER_OPTIONS="-L ldap://%s:3890"
After the edits
Restart the all the Scalix processes.
/etc/rc.d/init.d/scalix restart /etc/rc.d/init.d/scalix-tomcat restart
You can verify which port the LDAP server is running on. First, check its not on 389:
- lsof -i :389
That should return nothing, unless you've already jumped ahead and started openldap or some other LDAP server!
Then check the new port:
- lsof -i :3890
COMMAND PID USER FD TYPE DEVICE SIZE NODE NAME omslapd 20092 root 8u IPv4 725279 TCP *:ndsconnect (LISTEN)
And you're all done - you can then set up whatever else you want to, or retire happily for a quiet beer.
