Install open-xchange on debian 12

From Daxtech

Source: https://oxpedia.org/wiki/index.php?title=AppSuite:Open-Xchange_Installation_Guide_for_Debian_11.0

Dax 2024

Dependencies

Add gpg key

wget -qO - https://packages.adoptium.net/artifactory/api/gpg/key/public | apt-key add -


Create JAVA source repository

cat << EOF > /etc/apt/sources.list.d/adoptopenjdk.list deb https://packages.adoptium.net/artifactory/deb/ buster main EOF


Create OX source repository

NOTE: meanwhile check if was deployed the debian 12 version 

cat << EOF >> /etc/apt/sources.list.d/open-xchange.list

deb https://software.open-xchange.com/products/appsuite/stable/appsuiteui/DebianBullseye/ /
deb https://software.open-xchange.com/products/appsuite/stable/backend/DebianBullseye/ / 

# if you have a valid maintenance subscription, please uncomment the 
# following and add the ldb account data to the url so that the most recent
# packages get installed
# deb https://[CUSTOMERID:PASSWORD]@software.open-xchange.com/products/appsuite/stable/appsuiteui/updates/DebianBullseye /
# deb https://[CUSTOMERID:PASSWORD]@software.open-xchange.com/products/appsuite/stable/backend/updates/DebianBullseye /
EOF

Add key

wget https://software.open-xchange.com/0xDFD4BCF6-oxbuildkey.pub -O - | apt-key add -

Set root password for mysql

mysql -u root -p

ALTER USER 'root'@'localhost' IDENTIFIED BY 'PASSWORD!';
flush privileges;

Install OX

apt-get install gnupg2 apache2 mariadb-server open-xchange open-xchange-authentication-database open-xchange-grizzly open-xchange-admin open-xchange-appsuite open-xchange-appsuite-backend open-xchange-appsuite-manifest


Init OX database

/opt/open-xchange/sbin/initconfigdb --configdb-pass=oxp4ss -a --mysql-root-passwd=PASSWORD!

/opt/open-xchange/sbin/oxinstaller --no-license --servername=oxserver --configdb-pass=OXPASSWORD! --master-pass=PASSWORD! --network-listener-host=localhost --servermemory 2048


full email address to log in

edit /opt/open-xchange/etc/mail.properties and set 

com.openexchange.mail.loginSource=mail

Then restart ox 

systemctl restart open-xchange

Register server

/opt/open-xchange/sbin/registerserver -n oxserver -A oxadminmaster -P PASSWORD!

Init file store

mkdir /var/opt/filestore
chown open-xchange:open-xchange /var/opt/filestore
/opt/open-xchange/sbin/registerfilestore -A oxadminmaster -P ADMINPASSWORD! -t file:/var/opt/filestore -s 1000000

Register database

/opt/open-xchange/sbin/registerdatabase -A oxadminmaster -P ADMINPASSWORD! -n oxdatabase -p oxp4ss -m true


Create OX context

/opt/open-xchange/sbin/createcontext -A oxadminmaster -P PASSWORD! -c 1 -u oxadmin -d "Context Admin" -g Admin -s User -p PASSWORD! -L defaultcontext -e oxadmin@daxtech.net -q 1024 --access-combination-name=groupware_standard


Create an OX user

/opt/open-xchange/sbin/createuser -c 1 -A oxadmin -P ADMINPASSWORD! -u testuser -d "Daniele Callari" -g Daniele -s Callari -p USERPASSWORD -e danielecallari@daxtech.net --imaplogin danielecallari@daxtech.net --imapserver vps02.daxtech.net --smtpserver vps02.daxtech.net

Apache

Enable necessary apache modules 

a2enmod proxy proxy_http proxy_balancer expires deflate headers rewrite mime setenvif lbmethod_byrequests

Configure proxy

edit /etc/apache2/conf-available/proxy_http.conf 

<IfModule mod_proxy_http.c>
   ProxyRequests Off
   ProxyStatus On
   # When enabled, this option will pass the Host: line from the incoming request to the proxied host.
   ProxyPreserveHost On
   # Please note that the servlet path to the soap API has changed:
   <Location /webservices>
       # restrict access to the soap provisioning API
       Order Deny,Allow
       Deny from all
       Allow from 127.0.0.1
       # you might add more ip addresses / networks here
       # Allow from 192.168 10 172.16
   </Location>

   # The old path is kept for compatibility reasons
   <Location /servlet/axis2/services>
       Order Deny,Allow
       Deny from all
       Allow from 127.0.0.1
   </Location>

   # Enable the balancer manager mentioned in
   # https://oxpedia.org/wiki/index.php?title=AppSuite:Running_a_cluster#Updating_a_Cluster
   <IfModule mod_status.c>
     <Location /balancer-manager>
       SetHandler balancer-manager
       Order Deny,Allow
       Deny from all
       Allow from 127.0.0.1
     </Location> 
   </IfModule>

   <Proxy balancer://oxcluster>
       Order deny,allow
       Allow from all
       # multiple server setups need to have the hostname inserted instead localhost
       BalancerMember http://localhost:8009 timeout=100 smax=0 ttl=60 retry=60 loadfactor=50 route=APP1
       # Enable and maybe add additional hosts running OX here
       # BalancerMember http://oxhost2:8009 timeout=100 smax=0 ttl=60 retry=60 loadfactor=50 route=APP2
      ProxySet stickysession=JSESSIONID|jsessionid scolonpathdelim=On
      SetEnv proxy-initial-not-pooled
      SetEnv proxy-sendchunked
   </Proxy>

   # The standalone documentconverter(s) within your setup (if installed)
   # Make sure to restrict access to backends only
   # See: https://httpd.apache.org/docs/$YOUR_VERSION/mod/mod_authz_host.html#allow for more infos
   #<Proxy balancer://oxcluster_docs>
   #    Order Deny,Allow
   #    Deny from all
   #    Allow from backend1IP
   #    BalancerMember http://converter_host:8009 timeout=100 smax=0 ttl=60 retry=60 loadfactor=50 keepalive=On  route=APP3
   #    ProxySet stickysession=JSESSIONID|jsessionid scolonpathdelim=On
   #       SetEnv proxy-initial-not-pooled
   #    SetEnv proxy-sendchunked
   #</Proxy>
   # Define another Proxy Container with different timeout for the sync clients. Microsoft recommends a minimum value of 15 minutes.
   # Setting the value lower than the one defined as com.openexchange.usm.eas.ping.max_heartbeat in eas.properties will lead to connection
   # timeouts for clients.  See https://support.microsoft.com/?kbid=905013 for additional information.
   #
   # NOTE for Apache versions < 2.4:
   # When using a single node system or using BalancerMembers that are assigned to other balancers please add a second hostname for that
   # BalancerMember's IP so Apache can treat it as additional BalancerMember with a different timeout.
   #
   # Example from /etc/hosts: 127.0.0.1    localhost localhost_sync
   #
  # Alternatively select one or more hosts of your cluster to be restricted to handle only eas/usm requests
  <Proxy balancer://eas_oxcluster>
     Order deny,allow
     Allow from all
     # multiple server setups need to have the hostname inserted instead localhost
     BalancerMember http://localhost_sync:8009 timeout=1900 smax=0 ttl=60 retry=60 loadfactor=50 route=APP1
     # Enable and maybe add additional hosts running OX here
     # BalancerMember http://oxhost2:8009 timeout=1900  smax=0 ttl=60 retry=60 loadfactor=50 route=APP2
     ProxySet stickysession=JSESSIONID|jsessionid scolonpathdelim=On
     SetEnv proxy-initial-not-pooled
     SetEnv proxy-sendchunked
   </Proxy>

  # When specifying additional mappings via the ProxyPass directive be aware that the first matching rule wins. Overlapping urls of
  # mappings have to be ordered from longest URL to shortest URL.
  # 
  # Example:
  #   ProxyPass /ajax      balancer://oxcluster_with_100s_timeout/ajax
  #   ProxyPass /ajax/test balancer://oxcluster_with_200s_timeout/ajax/test
  #
  # Requests to /ajax/test would have a timeout of 100s instead of 200s 
  #   
  # See:
  # - https://httpd.apache.org/docs/current/mod/mod_proxy.html#proxypass Ordering ProxyPass Directives
  # - https://httpd.apache.org/docs/current/mod/mod_proxy.html#workers Worker Sharing
  ProxyPass /ajax balancer://oxcluster/ajax
  ProxyPass /appsuite/api balancer://oxcluster/ajax
  ProxyPass /drive balancer://oxcluster/drive
  ProxyPass /infostore balancer://oxcluster/infostore
  ProxyPass /realtime balancer://oxcluster/realtime
  ProxyPass /servlet balancer://oxcluster/servlet
  ProxyPass /webservices balancer://oxcluster/webservices

  #ProxyPass /documentconverterws balancer://oxcluster_docs/documentconverterws

  ProxyPass /usm-json balancer://eas_oxcluster/usm-json
  ProxyPass /Microsoft-Server-ActiveSync balancer://eas_oxcluster/Microsoft-Server-ActiveSync

</IfModule>

Configure virtual host

edit /etc/apache2/sites-enabled/000-default.conf 

<VirtualHost *:80>
       ServerAdmin webmaster@localhost

       DocumentRoot /var/www/html
       <Directory /var/www/html>
               Options -Indexes +FollowSymLinks +MultiViews
               AllowOverride None
               Order allow,deny
               allow from all
               RedirectMatch ^/$ /appsuite/
       </Directory>

       <Directory /var/www/html/appsuite>
               Options None +SymLinksIfOwnerMatch
               AllowOverride Indexes FileInfo
       </Directory>
</VirtualHost>

Enable new config and restart 

a2enconf proxy_http.conf
systemctl restart apache2
Retrieved from "https://wiki.daxtech.net:443/index.php?title=Install_open-xchange_on_debian_12&oldid=19"