Zimbra Overview

Expand / Collapse

Summary

This article provides the steps to create a domain, user, and lockout and secure password policies via the Class of Service option in Zimbra.

Steps

Adding a Domain to Zimbra

  1. To Add a new domain in Zimbra, you must first log into Zimbra Admin.  This should have been given to you during the intro call.  If not, please contact us.
  2. Once you have logged in click on @Domains on the left hand window pane.  This will display the domains currently configured in Zimbra.  
  3.  Click @New at the top to create a new domain.  The wizard for adding a domain will appear.  Choose a domain name and the maximum accounts allowed for the domain.  Also, make sure domain status is set to Active.  It is usually best to compare the settings to an existing domain to ensure that you are creating everything correctly.  The majority of settings can be kept default.  As you click through the wizard GAL, Authentication Mode, Virtual Hosts, Documents, etc. can all left as defaults unless otherwise specified.  Once you are done click finished and the domain will now be created.  Be sure to add the user to the specific class of service (COS) you need.  
  4.  

Viewing and Editing a Domain in Zimbra

  1. To Edit a domain in Zimbra, click @Domains on the left hand pane.  From here you can find the domain in the list or use the search option at the top to type in the domain manually. 
  2. Once you find the appropriate domain click Edit at the top.  This will pull up all of the settings related to the domain.  Edit whatever you to do here then click Save at the top.   If you want to exit without saving just click Close.  
 
Adding Users to Zimbra

  1. To add a new user in Zimbra, you must first log into the Zimbra administrative interface.
  2. Once you have logged into Zimbra, click on Accounts in the upper corner of the left window pane.  This will list all of the existing user accounts. 
  3. Click New at the top of the page and select Account
  4. Fill out the account name, with the appropriate domain after the @ symbol.  Fill in any info that has a star next to it including Last Name (also fill in first because this will effect the Display Name).  You can also compare to existing user accounts to make sure you have the appropriate settings but in most situations the defaults are fine.  Under the Account Setup sections make sure the account is Active.  If this is the first user you are configuring on the domain you must choose Administrator so the user can administer the domain.  When you do so, check the box "Assign default domain administrator views and rights".  Choosing Global Administrator will make the person an admin of all domains – i.e. a server admin.  Select a secure password and click Finish.  There are other options you can go through by clicking Next but these do not apply the majority of the time. 

Enforcing Secure Passwords and Lockout Policies
  1. To add a new user in Zimbra, you must first log into the Zimbra administrative interface.
  2. Once you have logged into Zimbra, click on Class of Service in the left window pane.  This will list all of the current classes of service on the server.  The steps below will need to be applied to each Class of Service.  If you need to determine how many users are in a Class of Service, log into the server via SSH and become the zimbra user.  Run the command below (replacing domain.com with the actual domain):
  3. su - zimbra
    zmprov cta domain.com 
    This will return something similar to the following:

    cos name cos id # of accounts

    ---------------- ----------------------------------------- --------------------

    default e00428a1-0c00-11d9-836a-000d93afea2a 341

    standard-user 262405da-e321-4c49-8dee-294ad97ece74 1

  4. Right-click and choose Edit on the specific Class of Service you wish to configure.
  5. Navigate to the Advanced tab and scroll down to the Password section. Edge Hosting recommends a password of at least 8 characters with a minimum of one uppercase, one lowercase, one punctuation character, and one numeric character.  
  6. Edge Hosting also recommends setting a default lockout policy for users such that if a user (or attacker) attempts to log into an email account on the server in a consecutive period of time with failed logins, the account will be locked. 



Rate this Article:


Details
Category: Zimbra

Last Modified:Thursday, August 23, 2012 12:22 PM

Type: HOWTO

Level: Intermediate

Rated 3 stars based on 2 votes.

Article has been viewed 3,745 times.

Options
Email Article Email Article


Social Bookmarks Social Bookmarks