✎ Kopano Upgrade to 8.5.8 [ClearOS Documentation]

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

===== Kopano Upgrade to 8.5.8 =====
Kopano version 8.5.8 provides an important fix for two critical CVE's (CVE-2018-8950 and CVE-2018-8951).

Unfortunately, Kopano's recommend upgrade process to patch these vunerabilities makes it difficult or too risky to automatically deploy these packages via the regular ClearOS update process.

You can read more about the Kopano upgrade [[https://kopano.com/releases/kopanocore-8-5-7/?mc_cid=055d2566fc&mc_eid=179b39ae79|here]].

====== Kopano on ClearOS ======

If you are running Kopano on ClearOS 7, it is likely version 8.4.5.  You will need to upgrade to Kopano 8.5.8 (2018-04-20).

<note warning>There are different instructions depending on if you upgraded from Zarafa or if had a fresh Kopano installation. Please look at the mysql_database parameter in /etc/kopano/server.cfg e.g. <code>grep mysql_database /etc/kopano/server.cfg</code>For this article we'll call the mysql_database you find DATABASE. Most of the instructions are common using the DATABASE parameter. The mysql user is the same as the DATABASE.</note>
===== Stop incoming mail =====
Stop any incoming mail...close your firewall, port 25 from Webconfig.  New mail coming in will usually attempt re-delivery so you won't lose any messages.

===== Stop Kopano Services =====
  systemctl stop kopano-server kopano-gateway kopano-dagent

===== Backup the Database =====

If you don't have an up to date backup of the database, now is a good time to start.

==== DATABASE is kopano ====

Get the Kopano database password:

[root@system]# cat /var/clearos/system_database/kopano
Then dump the database:
    [root@system]# /usr/clearos/sandbox/usr/bin/mysqldump -ukopano -p"xxx" kopano > /tmp/kopano.dmp

Where xxx is the password retrieved from the first step.

==== DATABASE is zarafa ====

Get the Kopano database password:

[root@system]# cat /var/clearos/system_database/zarafa
Then dump the database:
    [root@system]# /usr/clearos/sandbox/usr/bin/mysqldump -uzarafa -p"xxx" zarafa > /tmp/kopano.dmp

Where xxx is the password retrieved from the first step.

===== Perform the Upgrade =====

ENABLE_BETA=True yum upgrade "*kopano*" "lib*" "python*" "zarafa-z-push"

<note imporant>The "ENABLE_BETA" flag allows you to access the repository where the 8.5.8 packages reside.  These packages are not considered to be of 'beta' quality.  They have been released by Kopano for production use and verified with their community/customers and ClearCenter's own internal QA team.</note>

===== Check Database =====

<note>If you have previously upgrade from Zarafa, your database and username may be 'zarafa' and not 'kopano'. Use the value of DATABASE looked up earlier in the instructions</note>

Login to the system database using the "xxx" password obtained above.

==== DATABASE is kopano ====
    /usr/clearos/sandbox/usr/bin/mysql -ukopano  -p"xxx" kopano

==== DATABASE is zarafa ====
    /usr/clearos/sandbox/usr/bin/mysql -uzarafa  -p"xxx" zarafa

==== Then, for either database: ===
Run:

MariaDB> SELECT MAX(id) from names;

If this returns a value of 31485 or higher, there are too many entries and the database needs to be cleaned.

Run:

MariaDB> select namestring, count(*) as c from names group by guid,nameid,namestring having c>=2;

If this returns any row(s), the database is inconsistent and needs to be cleaned.

Exit MariaDB:

MariaDB [kopano]> quit

If either of the two cases indicate areas for concern, run from the command line:

kopano-dbadm np-stat
    kopano-dbadm k-1216

<note>The clean-up can take a while depending on your database size and hardware configuration.</note>

If you have any issues, check Kopano's [[https://kb.kopano.io/display/WIKI/K-1216|troubleshooting guide]].

===== Check all cfg files exist =====
Check that following cfg files exist in /etc/kopano:
  gateway.cfg
  ical.cfg
  ldap.cfg
  presence.cfg
  search.cfg
  server.cfg
  spooler.cfg

If any are missing, copy in the config files template from /usr/share/doc/kopano/example-config.

<note tip>You can copy and paste the following into the command line to check and correct:
<code>KOPANO_CFG="gateway.cfg ical.cfg ldap.cfg presence.cfg search.cfg server.cfg spooler.cfg presence.cfg"
for cfg in $KOPANO_CFG; do
    if [ ! -f "/etc/kopano/$cfg" ]; then
        cp "/usr/share/doc/kopano/example-config/$cfg" "/etc/kopano/"
        chown root.kopano "/etc/kopano/$cfg"
        chmod 640 "/etc/kopano/$cfg"
    fi
done;

# The last line is intentionally blank to allow an easy copy and paste
</code></note>
===== Run ClearOS Upgrade Script =====

Run the following script to fix systemctl unit files for Kopano:

/usr/clearos/apps/kopano/deploy/upgrade

This should be unnecessary as it has already run as part of the yum upgrade, but let's do it anyway.
===== Start up Services =====

Run:

systemctl restart kopano-dagent kopano-server kopano-gateway kopano-ical kopano-monitor kopano-spooler kopano-search httpd

===== Open Your Firewall =====

Re-Open Port 25 on your firewall to allow new mail to come in.

====== Zarafa on ClearOS ======

===== ClearOS 6 =====
Unfortunately, if you are running Zarafa on ClearOS 6, you have no alternative to patch these vulnerabilities other than upgrading to ClearOS 7 and Kopano.

Follow the upgrading 6 to 7 knowledge base article [[https://www.clearos.com/resources/documentation/clearos/content:en_us:kb_o_upgrading_from_clearos_6.x_to_clearos_7.x|here]].

===== ClearOS 7 =====

If you on ClearOS 7, an upgrade to Kopano will work. Follow the Zarafa to Kopano upgrade documentation [[https://www.clearos.com/resources/documentation/clearos/content:en_us:7_kb_zarafa_to_kopano_upgrade|here]].

<note>On completed upgrade, follow the steps at the start of this knowledgbase article to upgrade to 8.5.8.</note>

===== Troubleshooting =====
==== libxapian22 dependency issue====
This can be an issue for **ex-Zarafa users**. If you see an error message performing the upgrade:
<code>Transaction check error:

file /usr/lib64/libxapian.so.22 from install of xapian-core-libs-1.2.22-1.el7.x86_64 conflicts with file from package libxapian22-1.2.21-1.7.x86_64</code>

Please do an:
<code>rpm -e libxapian22 --nodeps</code>

**Do not use "yum" to uninstall.**

==== libtcmalloc.so.4 error ====
If you see an installation error referencing libtcmalloc.so.4 blocking the upgrade, please do an:<code>rpm -e --nodeps libtcmalloc4</code>The installation should proceed and you should notice gperftools-libs being installed from the centos repos.

**Do not use "yum" to uninstall.**

==== Ex-zarafa users ====
Please check you fully completed the [[:content:en_us:7_kb_zarafa_to_kopano_upgrade|Zarafa to Kopano Upgrade instructions]] so you have removed all zarafa* packages and disabled the Zarafa repos. You can check with:<code>rpm -qa | grep zarafa</code>The only zarafa package you should have is zarafa-z-push.

==== Outlook shows Disconnected after upgrade ====
If Outlook shows the black warning triangle and "Disconnected" in the status bar, please check the log file /var/log/z-push/z-push-error.log. If you see errors like:<code>08/10/2019 13:20:35 [ 4610] [FATAL] [test] Fatal error: /usr/share/zarafa-z-push/lib/utils/utils.php:1144 - Call to undefined function mb_detect_encoding() (1)</code>Please install php-mbstring and php-soap with a:<code>yum install php-mbstring php-soap -y
systemctl restart httpd</code>
====== Related links ======
 * https://www.kopano.com

{{keywords>clearos, kb, howtos, tiki, skunkworks, maintainer_dloper, maintainerreview_dloper, wikisuite}}

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Noncommercial-Share Alike 4.0 International

CLEAROS DOCUMENTATION

Sitemap

Foundation

Company

Partners

Purchase

Contact Us