|
|
| Re: Mac OSX Upgrade from 10.11 to 10.15, Connect 9.2.7 to 9.2.12 [message #147913 is a reply to message #147910] |
Wed, 01 April 2020 01:07   |
j.a.duke
Messages: 239
Registered: October 2006
|
|
|
|
fishtech wrote on Tue, 31 March 2020 15:31Hi,
Current Mac server is running Connect 9.2.7 on Mac OS 10.11.6.
New Mac server will run Connect 9.2.12 (patch1) on Mac OS 10.15.4.
The mailstore is on an external Promise RAID.
Bearing in mind I will be switching from 32 bit to 64 bit, it looks like I can just switch the RAID to the new Mac, then follow the 'Method 2' directions here:
https://manuals.gfi.com/en/kerio/connect/content/server-conf iguration/export-and-migration/transferring-an-installation- of-kerio-connect-to-another-server-or-operating-system-360.h tml
Am I overlooking anything that will cause problems? Does anyone who has been here before have any advice?
Many thanks,
ft.
FT,
Install Kerio on the new machine but stop the mail server process immediately.
Then just copy a few files from the Kerio folder (/usr/local/kerio/mailserver/) on the old machine to the new:
mailserver.cfg
license (folder)
users.cfg
web/custom/webmail/img/ (if using a custom logo in Webmail)
plugins/spamserver/spamassassin/rules/ (any custom rules you might have created)
sslcert (folder)
Plug in your Promise RAID then reboot and check that Kerio comes up cleanly.
That should be everything you may need to bring up the new server identically to the old.
Cheers,
Jon
|
|
|
|
|
|
| Re: Mac OSX Upgrade from 10.11 to 10.15, Connect 9.2.7 to 9.2.12 [message #147923 is a reply to message #147922] |
Wed, 01 April 2020 19:58 |
j.a.duke
Messages: 239
Registered: October 2006
|
|
|
|
anarvey wrote on Wed, 01 April 2020 13:36You may also you have to enable Full Disk access for mailserver in Catalina Security & Privacy for external drives.
Thank you! I totally forgot about that.
I added KerioMailServer, kassist, kmsrecover, mailserver and sendmail (all from the mailserver folder) in my full disk access list.
Cheers,
Jon
|
|
|
|
|
|
| Re: Mac OSX Upgrade from 10.11 to 10.15, Connect 9.2.7 to 9.2.12 [message #147986 is a reply to message #147941] |
Sun, 19 April 2020 13:34 |
MacLab
Messages: 233
Registered: May 2012
|
|
|
|
I just did a move/upgrade from an Xserve to 2018 Mac Mini. Tip on Mac platform. Use Chronosync with ChronoAgent if you want a GUI way to copy crucial files across the network and are worried about permissions. Just stop the old server, copy the files from kerio/mailserver/ to new computer (instantly), then start up the new server. ChronoAgent allows copying with root permissions. I did a changeover with 15 minutes downtime including moving external storage.
[Updated on: Sun, 19 April 2020 13:34] Report message to a moderator |
|
|
|
|
|
| Re: Mac OSX Upgrade from 10.11 to 10.15, Connect 9.2.7 to 9.2.12 [message #148095 is a reply to message #148088] |
Mon, 11 May 2020 18:21 |
j.a.duke
Messages: 239
Registered: October 2006
|
|
|
|
fishtech wrote on Sun, 10 May 2020 05:06Thanks for the info.
I was unabale to find info about the Full Disk Access tweaks from Kerio/GFI. Is this definitely required?
A test install on a vanilla 10.15 Mac seems to be working wthout the FDA tweaks.(but has not been stress-tested).
Thanks,
ft.
FT,
18 months ago, when I installed Connect on 10.14, it needed FDA defined, but it's possible that the newer release can work correctly without that. As long as you can send/receive mail on your system, then I would think you're fine.
Cheers,
Jon
|
|
|
|
| Re: Mac OSX Upgrade from 10.11 to 10.15, Connect 9.2.7 to 9.2.12 [message #148096 is a reply to message #148095] |
Mon, 11 May 2020 19:31 |
fishtech
Messages: 609
Registered: September 2010
|
|
|
|
Many thanks.
I undertook this over the weekend and did apply the FDA changes just in case.
In addition to the helpful info above, I found some other things noteworthy & will record here in case need to look back.
In no particular order....
PREPARING MIGRATION
• If using Open Directory the Kerio Connect server MUST be bound to OD master at the OS level via Directory Utility tool. Otherwise OD users will be listed in Connect admin but will be unable to authenticate.
• If using Open Directory do a test install in advance to verify OD integration. Use existing users.cfg file and manually create the OD info in Domains section of Connect Admin.
• It is not possible to start Kerio Connect on the new server with the migrated mailserver.cfg file without the mailstore present. This sounds logical in retrospect but I was trying to confirm my Open Directory integration while mailstore was copying to new RAID. Using the migrated mailserver.cfg file results in 'server running' in System Prefs, but server admin is not accessible; server is unavailable in Safari. You CAN check OD integration by using the demo/trial install mailserver.cfg file with your migrated users.cfg file if you create the OD settings manually in the trial version.
• in 10.15 new behavior when logged in as root was a big surprise. Files cannot be created on desktop as root. sudo in Terminal does not give the same level of access as previous versoins of OS. i used the gui to migrate the files logged in as root. Is there a better way? This is the first time I've needed to dive this deep in 10.15... need to find a good resource on what sudo & root can now do.
TESTING BEFORE GOING LIVE
• While OD accounts listed correctly on the new server the existing LOCAL accounts were ALL deleted from my users.cfg file after migration. All these had to be recreated. However until I deactivated the Password Complexity checkbox I could not use the older, uncomplex passwords. I am wondering if these accounts were deactivated because of their uncomplex passwords. I was not aware of this problem until after the server went live, so I could not troubleshoot further and recreating the accounts was the fastest way to fix the problem.
• Secure http on port 9900 is not included in Kerio Control firewall's Kerio Connect settings and needs to be added.
hth,
ft.
|
|
|
|
Members
Search
Help
Register
Login
Home
