Skip to content

Ephemeral Data Storage Support

Jump to bottom
Gren Elliot edited this page Feb 13, 2017 · 2 revisions

Installing Zimbra with SSDB Support

SSDB has been selected as an alternative to storing short lived data inside the LDAP directory. If SSDB is not available or un-configured the {product-name} will continue to store the following types of short-lived data in LDAP:

  • Authentication tokens

  • CSRF tokens

  • Last Login Timestamps

Storing these types of data in LDAP has been reported to cause LDAP instability when an installation has large numbers of active accounts. The number of accounts necessary to cause an issue varies with the size of the machines running the {product-name} platform.

There are two methods of enabling SSDB support in {product-name}:

  • During {product-name} installation

  • Post-installation configuration

Note: SSDB server installation is outside of the scope of this document. It must be installed and running before completing the configuration steps.

During {product-name} Installation

The Ephemeral data storage method is configured during the post-install configuration menu underneath the zimbra-ldap section.

Procedure

  1. From the main menu select option #2 for zimbra-ldap.

  2. Choose option #4 to enable Store ephemeral attributes outside Ldap

  3. Provide the SSDB connection string

  4. The installer will attempt to connect to the SSDB server specified and if successful will save the configuration.

SSDB Connection String Example
ssdb:<ip address|hostname>:<port>
ssdb:127.0.0.1:8888
ssdb:ssdb-server.local:8888

Post {product-name} Install configuration

Configuring an already running {product-name} installation to utilize SSDB instead of LDAP for short lived data storage through the following process:

  1. Install SSDB and note the ip address and port configured since you will need this data for the next steps.

  2. Configure the {product-name} to utilize SSDB.

  3. Migrate any existing short-lived data to SSDB using the /opt/zimbra/bin/zmmigrateattrs command.

Migration Procedure

The migration procedure will start from step #2 above:

  1. Access the command prompt on one of the machines in the installation.

  2. Configure the {product-name} to use SSDB:

You may use either an ip address or a hostname for the host portion of the configuration item. In this case you will need to ensure it resolves to the proper ip address.

sudo su - zimbra
zmprov mcf zimbraEphemeralBackendURL ssdb:<ip address|hostname>:port # subsituting your server values

  1. Migrate any existing attributes from LDAP → SSDB

sudo su - zimbra
# Specify -r for a dry run
/opt/zimbra/bin/zmmigrateattrs zimbraAuthTokens zimbraCsrfTokenData zimbraLastLogonTimestamp -n 4
Clone this wiki locally