Slashdot Mirror
Converting an Exchange Userbase to Unix?
Jwfulcher asks: "This is kind of backwards from what normal people do, which is why i'm having problems finding any documentation on it, but I have around 150 users on exchange, with distribution lists and a few custom recipients as well. The CEO wants to switch to a Unix based POP/IMAP mail solution for licensing reasons (we don't use the groupware functions anyway), I was wondering if anyone knew of a method to convert the exchange userbase and add the users on a FreeBSD system and possibly point to our Radius server (which is capable of doing NT authentication) for authentication on those accounts."
but if you're using exchange 2000 you could use adduser.exe from the nt/2000 server resource kit to dump the usernames to a text file, then hack something together to parse it and add the users. to wit, it doesn't dump the passwords so you'll have to enter those back in or create new ones :O
So, you want to exchange Exchange with little change for no change? Sorry I couldn't be more help...
I just finished my MCSE. All I have to say is GOOD LUCK. Mirco$ont makes is very difficult to export their data. PS Anyone looking for a CCNA with an MSCE????
KMail (part of KDE) can import Outlook address books and folders. I'm sure that Evolution can help you too, but I don't know if that runs on FreeBSD very well.
You should be able to use PAM to do authentication to the Radius server. As for converting the users, you will probably have to write a script to do that. If there are tools to convert from unix to exchange, then I'm sure you can use those as a reference to do the inverse.
Users consider Exchange's calendaring to be a critical feature. While there are many free competetitors, they are all of extremely poor - unusable, really - quality.
One thing most people don't consider is that Exchange 5.5 and 2000 run their own LDAP services.
One method would be to setup OpenLDAP as a slave to the exchange server to pull all the DLs and so forth to your unix platform. From there (with redhat at least) it is pretty strait forward to use Sendmail's integration with LDAP to use that OpenLDAP store.
If you don't want to leave OpenLDAP running you can use the MigrateTools from padl.com to see how you can convert that OpenLDAP store back to something usable. Or just export the sections you need via GQ.
The program isn't debugged until the last user is dead.
I'm not speaking from experience here, but here's a suggestion:
You can open an IMAP server in Outlook and open your Exchange server at the same time and just drag the mail across. For 150 people, you might need a little help to do this, but with a few helpers, it's not totally insurmountable.
Gentoo Sucks
The site here describes how to create an Exchange replacement. If you want to use RADIUS you can probably find a PAM-RADIUS module to substitute for PAM-LDAP, or conversely replace your Radius server with a FreeRADIUS instance which can be backed by the LDAP server.
For moving users, enable the LDAP directory service on the Exchange server and you should be able to script (or find) some LDAP-to-LDAP migration tools. At worst, do a full directory search and massage the data into an LDIF file to be imported. Moving the mail data would be harder but I imagine something could be rigged up using the Exchange IMAP service, fetchmail, procmail and the Cyrus deliver command.
If you can find a BackOffice resource CD you should be able to create a way to access the Exchange store without even going through the LDAP and IMAP services.
..has a listing for a script that converst Exchange .psts to some unix format. Look there.
Between that and the import utility that someone mentioned in KMAIL, there's probably a reasonable solution in here.
Also, Bob's mail server (if I remember correctly) purports to be an Exchange replacement, too.
"I assumed blithely that there were no elves out there in the darkness"
Split it into two problems.
.PST files, distribute them to the users.
.csv file with all the account info in, use that to make your new mail server accounts. Easier than fiddling with LDAP etc. You can get the directory export any field associated with a mailbox - hint: run exchadmin/raw to get raw properties of a mailbox, then you can find out what the fields you want are called.
One is moving all the data; the other is configuring the new server with all the account and address book information.
Assuming it is still proper Outlook, you can use exmerge (avaialable from Microsoft) to dump all the mail from the server into
Failing that, (and assuming Exchange 5.5 or later)as other users have suggested, configure IMAP on the server and have the users suck the data down into their IMAP clients. (IMAP, rather than POP, so you can get folders other than just the inbox)
Also you can do a directory export to get a
~~~~~ BigLig2? You mean there's another one of me?
Exchange, Outlook or both?
If it's Exchange you could do Outlook front-end to POP/SMTP/LDAP backend and go the cheap route. Or look into some of the offerings Oracle is going to have coming up which target to use Outlook as the front end with Oracle backend and save you money and give more security than Exchange.
If it's Outlook, good luck. Your choices of widely accepted front-ends are pretty much Outlook and Notes and any change requires training the userbase on the new software.
If it's both RUN! Conceptually it's not a bad thing, but in a Corporate environment someone wanting to do this is just suicide unless you're a very small shop with very educated users. And management will be looking for scapegoats when it fails.
There should be plenty of documentation about setting up Mail servers on UNIX, getting the data from exchange to the UNIX system may be a little harder though.
You best bets are fetchmail, A UNIX mail transport agent, this can pull all the mail accross (hopefully).
op failing that, setup you mail servers on UNIX and write some VB script (in outlook coes you have it already) to transfer the data/accounts accross using MAPI.
thank God the internet isn't a human right.
I guess the first question is:
Do you mind using windows for authentication?
You could use pam/radius or pam/ldap to talk from freebsd to windows, and do the login thing. You would have to use virtual mailboxes, and no real logins to the freebsd box. You probably want that last bit anyway. Webmail/imap can be good with this kind of setup.
Otherwise, AFAICT, you're going to have to force everyone to change their passwords. Best bet is to take a weekend. Friday, have everyone archive their email, and turn off exchange so incoming mail gets queued. Do your transition, and monday when they come in, they'll use webmail/pop/imap.
Zapman
You only have 150 users, if worse comes to worse you can just recreate accounts. As all of the others have suggested you can use LDAP. The big thing is the user data.
I don't know if outlook does this. But, using mozilla I was able to copy from one account to another by just highlighting all of the messages and then right clicking and doing a copy to.
My suggestion is setup up the new box with sendmail, imap, ldap enabled. Setup imap on the exhange box and give them a mail reader that do the move. I would think that Outlook would work. Then during the night redirect all incoming e-mail from to the new box. Turn off sending e-mail and receiving e-mail on exchange if it can be done.
One possibility is to setup a front line box and have it redirect mail for only certain users so that you can do a few users at a time. You may have to do some hand holding to them to move their e-mail.
Just a suggestion.
Hmmmm....
Well....
1) Export the exchange directory so you have a list of all the mailboxes you need.
2) You could write a script to parse the file and create user accounts on the Unix box
3) It would probably be best if you stuck with the Outlook client (unless you just have to switch), so get Exmerge and export everyones mailbox to PST files and give to them. Those will become the default delivery point (in Outlook) for incomming email.
I'm not sure how you'd handle passwords, etc, unless theres some way you can authenticate against NT (or whatever MS OS you are using).
Just my thoughts (being an Exchange admin).
--- I was far from home, and the spell of the Eastern sea was upon me. -Lovecraft-
There's a Texas company that makes a plugin for Outlook, called InsightConnector, that allows it to do all its groupware features over any IMAP4 server with ACL support. It's not OSS, and it's not free, but it's supposed to be cheaper than MS Exchange.
You can find a review of it here.
The company's website is here.
The practically have to have experience in moving servers like this to have any business. You might try contacting them and seeing what they cost.
If it's for-profit but free, you're not the customer -- you're the product (e.g., the Slashdot Beta's "audience").
use Exmerge a nifty exchange exporting tool that comes on the exchange install CD its under /tools/utilities/ Batch export all users folders to PST files from the Exchange database then follow his suggestion to import.
Rule of Life Number 2: Remember, it can all go to hell at any minute. --Jimmy Buffet
11? Man I wouldn't hire you if you paid me to. LOSER!
- create special user in exchange with read access to all folders
- write a script (storemessage) which would store a message in maildir folder
- write script, fetchmailbox, which, using fetchmail, opens user's mailbox and reads it,
message by message; use -s option to start a local delivery agent; use storemessage script above
- write third script, listmailboxes, which would fetch mailbox list from imap protocol; read map RFC for details
- do listmailboxes | xargs -n1 fetchmailbox
- now that you have messages on your file system, use your favourite maildir-capable server like courier-imap to serve them
Pay attention to attachments; those can require special processing (I have used mimetools for that; you can probably use perl.) As for calendar/meeting data, it actually fetches as some kind of messages too.I went through this not too long ago at an internet startup. Here's what I found..
Mail servers - sendmail, postfix, qmail all have or can have the ability to use an LDAP directory that specifies where the mail is going to. It gets rid of the use of alias lists to forward mail around.
pop/imap servers - there's quite a few pop servers that can authenticate off LDAP but only a few imap servers worth mentioning. Cyrus is the best free one that I have tried. At the time I tested it there was a bug in the code that caused certain outlook clients to not see which mails were read and unread correctly. I'm sure this has likely been fixed now. The mail store for Cyrus is nice and in my opinion a bit faster than the mbox or maildir formats (YMMV). UW Imap is great as long as you don't need to do any virtual hosting support, there's some hacks and patches to provide virtual hosting support but they aren't what I'd consider production quality. UW Imap does however have the best support for MS Outlook of any imap server I have tested (I've tested a lot). Courier is also nice but because the author deviated from the standards somewhat I wasn't very comfortable with it and was told by the CTO it was not an option. Mirapoint Messaging servers are a commercial "version" of cyrus. It's basically cyrus on freebsd with ldap capabilities minus all the good stuff. No ability to really customize it, it's fairly idiotproof, however I disliked the fact that it felt underpowered and the anti-spam features was not what I considered very good. I used a gateway to filter spam before it got to the mirapoint otherwise I had load issues on the mirapoint. (Using a bastion host/ gateway to filter spam outside a firewall is a good idea no matter what mail server you run)
LDAP Directories - OpenLDAP is free but it's not what I'd call "for beginners". It takes a fair understanding of the ldap schemas before you can create a schema which can be used by Outlook. iPlanet is great but isn't free. The gui is very nice and the replication is probably the easiest to configure out of all the ones I tried. Active Directory is fairly good (don't kill me) but it doesn't conform to some of the standard schemas. Exchange has it's own pseudo directory server built in and the later versions can use active directory but I dislike how for some of the givenName and surName fields you can't have a multi record field unlike what the standards says should be allowed.
Calendar - MS Outlook CAN have calendar support without the use of Exchange. You have to set the system up for publishing the calendars to a web page and it's a little bit of a pain. It took me a bit of scripting to get outlook to automate the process of actually publishing the calendars and times.
Radius server - I actually wrote code for a radius server to authenticate off the LDAP directory. The server I used was XTRadius. I published the source for the extension so I'm sure it's available somewhere.
As for pulling users out of exchange and onto a unix server. I never did find an easy way of doing it. I did it by hand for 130 employees but we weren't running exchange 2000 with active directory. If you are using active directory then you can pull the schema and do lookups. I'm sure I could write a tool in perl without much trouble that's capable of doing that. If you'd like it, I don't have much to do right now so email me personally wh@perlhacker.net and we'll work on it.
As far as a web client.. I've tried everything and I can definitely say without a doubt the horde.org project is *the best*. They're the only thing I've seen that really pulls email, calendar, to-do, etc like exchange into a very useable GUI.
Gotta run.. going fishin'
WH
I've set up an email system for our student foundation, Overflow, which is located at http://www.overflowers.nl. It was built from scratch, but I suggest you look into qmail/LDAP.
If I remember correctly, Exchange is capable of serving LDAP, so you _could_ just do a ldap search on it and import that in the LDAP system. If you use the qmail/LDAP system, you don't need local accounts. Plus, it's all opensource, so you can pass the authentication towards another system if you like.
First make sure all users have the new POP3/SMTP services set up, and set as defaults. You can do this by hand, by sending them instructions (yeah, right) or more Perl and VBScript deployed using a group policy or as signed code using the scripting stuff in the resource kit.
This includes setting up Personal Folders (outlook.pst) files for each user.
My recommendation for POP3 settings is (advanced tab):
Do you need to take the current contents of their mailboxes too?
If so, the easiest way is to tell them you will be turning Exchange off, and that they must copy any mails they want to keep to their personal folders file. After some time has passed, and you have reminded everyone several times, turn Exchange off and wait to see if you get any complaints. If you do, you can turn it back on temporarily to let them do the copy.
Finally, I really suggest something like Netmeeting or SMS (or PCAnywhere or VNC... but I tend to go with vendor products, particularly when they are free, as Netmeeting is) to allow you to assist users who can't do it themselves.
Good luck!
NO ID: BEING FREE MEANS NOT HAVING TO PROVE IT
I've a set of perl script, procedures and stuff to do exactly this.... Did it for a 400 ppl network, from exchange to vpopmail/qmail/phpgw ...
Ive not realesed this stuff but will do it as part of axisgroupware [www.axisgroupware.org]....
NO SIG
If you can get the account info out of the domain/ad via LDAP etc, your halfway there.
Given that IMAP can be enabled for Exchange 5.5/2k, you should then be able to automate the moving of data from Exchange into your new IMAP server (throughly recommend Cyrus), atleast for mail anyways, contacts & calendar info is next to useless outside exchange (but retrievable via IMAP).
and know an outstanding programmer that works with a number of OS platforms that I would call an expert on OCR, forms recognition, etc. Check out http://www.microimagesys.com and contact Mr. Lunglhofer. Also, look at Kofax for your Image and OCR retrieval from scanned documents. I am not 100% sure Adobe has a *nix version; but I create a considerable number of e-forms in Adobe (and learned this from Mr. Lunglhofer). These forms are used in an enormous variety of electronic, web-based, and non-web applications. Ask him what he would suggest and see what kind of product he could provide for you.
I think with the interesting people, their lives can't possibly be wrapped up into a nice little package.