CentOS 7.x Configure cbpolicyd for Zimbra 8.7

<yambe:breadcrumb>CentOS_7.x_Zimbra_configuration|CentOS 7.x Zimbra configuration</yambe:breadcrumb>

CentOS 7.x Configure cbpolicyd for Zimbra 8.7

For older Zimbra versions please refer Zimbra Policyd configuration or specifically Configure and enable policyd on Zimbra

From Zimbra 8.7 onwards cbpolicyd access-lists are disabled by default. To enable and use them use following steps:

1. Activate Policyd WebUI. As root run:

   cd /opt/zimbra/data/httpd/htdocs/ && ln -s ../../../common/share/webui

2. Edit '/opt/zimbra/common/share/webui/includes/config.php' and change DB_DSN from mysql value to

   $DB_DSN="sqlite:/opt/zimbra/data/cbpolicyd/db/cbpolicyd.sqlitedb";

3. Enable the cbpolicyd service as Zimbra user

   zmprov ms `zmhostname` +zimbraServiceInstalled cbpolicyd +zimbraServiceEnabled cbpolicyd

4. Enable ACLs for policyd

   zmprov mcf +zimbraMtaRestriction 'check_policy_service inet:127.0.0.1:10031'
   zmprov ms mail.domainname.com zimbraCBPolicydAccessControlEnabled TRUE

5. Restart zimbra

   su - zimbra -c "zmcontrol restart"
   su - zimbra -c "zmapachectl restart"

6. You can access cbpolicyd using below link http://<zimbraserver>:7780/webui/index.php

Refer:

• https://github.com/sangamc/policyD_zimbra87/blob/master/automatic-policyd-zcs8.7.sh
• http://haffi.is/wp/?p=38

How to enable debug logs for cbpoliyd

To enable debug logs for cbpolicyd use following:

1. su - zimbra
2. vim /opt/zimbra/conf/cbpolicyd.conf.in and set log_level to 4.

   Better would be to do

   su - zimbra
   zmprov ms mail.radiantcorpn.in zimbraCBPolicydLogLevel 4
   zmcbpolicydctl restart

<yambe:breadcrumb>CentOS_7.x_Zimbra_configuration|CentOS 7.x Zimbra configuration</yambe:breadcrumb>