Novell GroupWise. www.novell.com 6.5 ADMINISTRATION GUIDE February 6, 2006 Novell. Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. Please refer to www.novell.com/info/exports/ for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals. Copyright © 2003-2005 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher. Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S. patents listed at http://www.novell.com/company/legal/patents/ and one or more additional patents or pending patent applications in the U.S. and in other countries. Novell, Inc. 404 Wyman Street, Suite 500 Waltham, MA 02451 U.S.A. www.novell.com GroupWise 6.5 Administration Guide February 6, 2006 Online Documentation: To access the online documentation for this and other Novell products, and to get updates, see www.novell.com/documentation. Novell Trademarks ConsoleOne is a trademark of Novell, Inc. GroupWise is a registered trademark of Novell, Inc. in the United States and other countries. IPX is a trademark of Novell, Inc. ManageWise is a registered trademark of Novell, Inc. in the United States and other countries. NDS is a registered trademark of Novell, Inc. in the United States and other countries. NetWare is a registered trademark of Novell, Inc. in the United States and other countries. NLM is a trademark of Novell, Inc. Novell is a registered trademark of Novell, Inc. in the United States and other countries. Novell Cluster Services is a trademark of Novell, Inc. Novell Storage Services is a trademark of Novell, Inc. Novell Technical Services is a service mark of Novell, Inc. OuickFinder is a trademark of Novell, Inc. SMS is a trademark of Novell, Inc. snAppShot is a trademark of Novell, Inc. SoftSolutions is a registered trademark of SoftSolutions Technology Corporation, a wholly owned subsidiary of Novell, Inc. Storage Management Services is a trademark of Novell, Inc. ZENworks is a registered trademark of Novell, Inc. in the United States and other countries. Third-Party Materials All third-party trademarks are the property of their respective owners. Contents About This Guide 29 Parti System 1 GroupWise System Administration 33 2 ConsoleOne Administration Tool 35 ConsoleOne‘on' WINdOWSs 208.4 sok fone bh Gia Ve we ay eee A ek Gee ee ee ee POR lS 35 Installing ConsoleOne on Windows. ......................................... 35 Starting ConsoleOne on Windows .......................................... 36 ConsoleOne on. LINUX... to 4k a. sw mi Se Gs Gee ae A Ge Sods Som Se ane OE ek 36 Installing ConsoleOne on Linux. ........................................... 36 Starting ConsoleOne on Linux... 36 3 GroupWise View 37 eDirectory View vs. GroupWise View. ........... a a 37 GroupWise Object: Icons: 240. E 8 m Se e Ge Pee itn oma Sa ie ESS t 38 Customizing the GroupWise View ............................................ 40 Changing the Column Display and Order. ...................................... 40 Changing the Column Widths. . ........................................... 41 Searching in the GroupWise View ........... 42 Performing Administrative Tasks from the GroupWise View. .............................. 42 4 System Operations 43 Select Domain: s Le Aa a Delais ee tee Aa eal de ke lä ER hes Dash 43 System Preferences: oe Sag eae A eG es ee A Eo 9 ee A 44 eDirectory User Synchronization. . . -a a e cea ee 49 Admin:-Befined'Fields: pora e eek % ame Gee be Eo ee durs a apte à a host bo ee 50 Pending: Operations. 414 22 Teg lr Wo Be AE Bh Eg a sak ae A A Bb Hal 51 Viewing Pending Operations . ............................................ 51 Rétrying:a Pending: Operation’. caia dl liite as mhm) dt oad poe va le M Ee Ree a 51 Cancelling a Pending Operation ............. a 52 Addressing: Rules sie a eek Ae Avia Bae Ae Ba Bho Ma Foe dm tt Brume dE qi 52 Mime :ZONCS irs eee e Sek eee eer ee ee ta ee, Pee E ee HE ee 52 Modifying a Time Zone Definition. . ......................................... 52 Adding ‘a. Time Zone Definition 1. s-r ucis ea 44 fau kph ee pa maa A a 53 Deleting a Time Zone Definition ........................................... 55 External System Synchronization. ........... a 55 Software Directory Management. ............................................ 57 Creating a Software Distribution Directory . ..................................... 57 Updating a Software Distribution Directory... ................................... 59 Deleting a Software Distribution Directory . ..................................... 60 Réstore Area Management: ++ lotos hat aed e dde E han mehelt oder aab hed le 61 Internet Addressihgi. mitm 2 are seai pin lol oe apr af (bleu, A ant pin date 61 Trusted Applications: sise 5 ak JAM sab hoes RÉ fl Ce PO EOE JE at Rue A nis ee ee den Seh R i 62 Editing a Trusted Application . . ........................................... 62 Contents 5 Deleting a Trusted Application. . . .. 22... 2% +... o... «e. rara 63 LDAP.Servers i, 5-2 Tin to da e oe E au Ah a ah na A pe de AR de a main Re RU ea Bae E 63 5 GroupWise Utilities 65 Mailbox/Library Maintenance .. 2... a 66 System Maintenance: tido ee Sek a de dE a eB a alge de ae di put ee 66 Backup/Restore Mailbox. :.: 244 a à 4 aus 24200 eR RE EA a ee Se a eo a ou à 66 Recover Deleted Account suidae se e LAA Bh Bk at Bae ee lee et des Ae a eo 66 Client Options: o sa i 2 EOE ee ee a ee ee Ee ee ee a ee a 66 Expired: Records. SE BAe sek A eet em be th i Re Ete hg oe ee BB EE ee Ee ti 67 Email: Address Lookup: see la. ear o Bee aoe dau 2 du ten) A BO i ait bE 67 SYNCNFONIZÉ W's wk Bey ans Ados bh hn ee E oe Br ce es he el PR a A ee OE À 67 User Mover SAUS: 4 sare eon ee A AA Oe Sea A Re Sn Se ee ee Ee ann ee ee 68 Link: Configuration: 45 ce Ses Bed Lo a A ee ee a AR e Soe dE delle Pear 68 Document Properties Maintenance... . 2... 5. ee ee ee ee 68 Impor ws 4220 474 ae ele HAUB Powers ek A ee ne A Be ee A A ES eek RAGE Auk aie Bee à 68 Loading or Saving a Configuration File . ....................................... 70 Delimiters®-< ¿ió a ty hy lio A head MJ a ees yey des Het hind Ae we ie de AE ds Re Er 70 EXPO: 450 Maja ge Ae tle, baa, Ede ath EM 08e JE ER ASS, B® Bee te, A the ie x 71 New: Systems- us hn Gye ner MS A ek ee, eo le eo oh Ew eel hob Ae a ed E dt À 72 Check eDirectory Schema (Linux Only). . 2... a 73 GW eDirectory ASSOCIOÍION::: «y cacas ae a ae Oe ea Boe her Bae al hee eae ee ds pars ar 73 Graft:GroupWise Objects: «+... sla : 4 44 aus à is a lag a a soa aot à did AD a ek Kol gl à 74 Invalid ASSOCIATIONS. Luv rs ck D late OR n Bo BS ja Ma Rk ER Pe ge mL ut Ra ms E 74 Associate: Objects ocio La nee mn ml A Be ee An A UV ue ee En 76 Disassociate GroupWise Attributes . . ........................................ 77 Convert External Entity to User... 440234, iaa lu nage aie a po lõin sõba op A pe à 77 Convert User ‘to External Entity sa m i teh E he Rw Be hee Ku Robot eb ut 78 GroupWise Check Utility (GWCheck) ........................................... 78 GroupWise Target Service Agent (GWTSA) ....................................... 78 GroupWise Backup Time Stamp Utility (GWTMSTMP).......... 0.0000 a 78 GroupWise Database Copy Utility (DBCOPY) ............. o... e... e... 78 GroupWise Generate CSR Utility (GWCSRGEN)... 2... 0.0.0... a 79 6 GroupWise Addressing 81 ‘Address: BOOK s-e cios LEUR ee a A a ale a ee ae oc Ee E dade E aTa Re ae ees 81 Determining Fields, Field Order, and Sort Order for the Address Book. ....................... 81 Controlling Object Visibility in the Address Book ................................... 86 Updating Address Book Information. .............. a 87 Internet-Style Addressing . . ............................................... 87 Planning: Internet Addressing) toto a A AS te ee een DP ui PE MALE ta 88 Setting Up Internet Addressing . ........................................... 91 Addressing Rules... 4 244,24 al kolle teel Lou nt E RUE ele hal À gars tete Re dE de 97 Creating an Addressing Rule ............................................. 98 Enabling-an; Addressing Rule: = cit a So eee done Bk Ee a Poe ee de t 99 Wildcard Addressing... 2 + 26 [04 m Liu A ee he ee ee ae s 100 Setting Wildcard Addressing Levels. ............... a 100 Wildcard Addressing Syntax. ............................................ 102 7 Multilingual GroupWise Systems 103 Client Languages ;: ceser ge ae A A A ee aiast t oe ay Ae A se ee BS 103 Administration Languages. ............................................... 104 International Character Considerations . ........................................ 104 Multi-Language Workstations . ............................................. 105 Part Il Domains 6 GroupWise 6.5 Administration Guide 10 Creating a New Domain Understanding the Purpose of Domains ........................ Planning a New Domain ................................ Determining When to Add a New Domain ..................... Deciding Who Will Administer the New Domain .................. Planning Post Offices in the New Domain ..................... Determining the Context for the Domain Object .................. Choosing the Domain Name ............................ Deciding Where to Create the Domain Directory . . ................ Deciding Where to Install the Agent Software ................... Deciding How to Link the New Domain. ...................... Selecting the Domain Language . . ....................... Selecting the Domain Time Zone. ......................... Setting Up the New Domain .............................. Creating the New Domain. ............................ Configuring the MTA for the New Domain ..................... Installing and Starting the New MTA ........................ Whats Next: kA eet ak eres Pele CEE ae Pe SBS ära Managing Domains Connecting to a Domain: :. : 104 omo a e Db a es Editing Domain Properties . . ............................. Converting a Secondary Domain to a Primary Domain. ................ Moving a Domain; 353 t ms da oP sie BAR EES e te ue Deleting: a: Domain tic cn teie RL ER te date Ba de able RO RÉ Changing MTA Configuration to Meet Domain Needs . ................ Managing the Links between Domains and Post Offices Understanding Link Configuration . .......................... Domain-to-Domain Links . ............................. Domain-to-Post Office Links . ........................... Link Protocols for Direct Links . ......................... Using the Link Configuration Tool . .......................... Starting the Link Configuration Tool ....................... Editing a Domain Link. .............................. Editing Multiple Domain Links. . .......................... Editing a Post Office Link. ............................. Viewing the Path of an Indirect Link between Domains. .............. Viewing the Indirect Links Passing through a Domain . .............. Viewing the Gateway Links Passing through a Gateway. ............. Saving and Synchronizing Link Configuration Information . ............ Interpreting Link Symbols. ............................... Link Type SymbölS sc. s 0 is Atan eo e a eh et i Link Status Symbols . .............................. Modifying Links: tut + ans hé ra blason Wek a aa A Part Ill Post Offices 11 Creating a New Post Office Understanding the Purpose of Post Offices . .................... Planning a New Post Office ............................. Determining When to Add a Post Office . .................... Selecting the Domain That the Post Office Will Belong To. . .......... Determining the Context for the Post Office Object. ............... Choosing the Post Office Name ......................... Contents 7 12 Deciding Where to Create the Post Office Directory... .............................. Deciding Where to Install the Agent Software. . .................................. Deciding How to Link the New Post Office. . .................................... Selecting the Post Office Language. ........................................ Selecting the Post Office Time Zone: . 1 c uoua 10304 aa did Ee a nd à Selecting a Software Distribution Directory . . ................................... Selecting a Post Office Security Level. ....................................... Deciding if You Want to Create a Library for the New Post Office . ........................ setting Up the New Post'Office =) = 10 d à garage es à a OS a à A Begins BRU po is 8 Creating the New Post Office . : . .:....:..,4444, 44444 di ed ae eu duree ue Configuring the POA for the New Post Office . ................................... Installing and Starting the New POA. .............. a Setting Up User Access to the New Post Office... ................................ Whats NõXt s das acy erutie ee Seok HRS AE ae, ae Gy Ree we ee wk Ree ee ek ae e cid Managing Post Offices Connecting to the Domain That Owns a Post Office . ................................. Editing Post:Office Properties. 4 4 à 4 ait gun a à aug ee a Managing Disk Space Usage in the Post Office. . ................................... Preparing to Implement Disk Space Management. . ................................ Setting Mailbox: Size: Limits: 4 +4 dion ica eke oR be nd a A are A Ro Enforcing Mailbox Size Limits . . . . ........................................ Restricting the Size of Messages That Users Can Send .............................. Preventing the Post Office from Running Out of Disk Space ............................ An Alternative to Disk Space Management in the Post Office. . . .. ....................... Forcing’Caching Mode iahon ooo ask (had a a tbe eG eo es BE Aa taal a Auditing Mailbox License Usage in the Post Office... ................................ Tracking and Restricting Client Access to the Post Office . .............................. Disabling:a:Post° Office’. a4.) ees ee as ee ae POG ir ae A ea ae EEE a ead Moving:a: Post: Oflde”. 31 ce ese à ani A D ee ee eee Be ee ld e ee ee ee 181 Deléting:a Post OffiCe +. s tuer y kG ek EON nan née ee ee BR oe le A ee Ee ase oe Changing POA Configuration to Meet Post Office Needs... 2... 2... e... . e... eo... Part IV Users 13 14 Creating GroupWise Accounts Establishing a Default Password for All New GroupWise Accounts. . ......................... Creating GroupWise Accounts for eDirectory Users . ................................. Creating a Single GroupWise Account. ....................................... Creating Multiple GroupWise Accounts ............ a Creating GroupWise Accounts by Importing Users ................................. Using a Template to Create GroupWise Accounts . ................................ Creating GroupWise Accounts for Non-eDirectory Users. ............................... Educating Your New: Users- T cece o he eae a Rw OES A Bek Be PRES E Managing GroupWise Accounts and Users Adding a User to a Distribution List... . o oaoa ee Moving GroupWise Accounts .............................................. Live Move vs. File Transfer Move . ......................................... Moves Between GroupWise 6.x Post Offices . . . ................................. Moves Between GroupWise 6.x and GroupWise 5.x PostOffices.......................... Preparing fora Move .......... a d a a E a a a a e Daa E aha aoa B E a ma a e a a a a a Moving a GroupWise Account to Another Post Office in the Same eDirectory Tree ................ Moving a GroupWise Account to Another Post Office in a Different eDirectoryTree................ Monitoring User Move Status . ........................................... GroupWise 6.5 Administration Guide Renaming Users and Their GroupWise Accounts . ......................... Managing Mailbox Passwords . ................................... Creating or Changing a Mailbox Password. ........................... Removing a Mailbox Password. ................................. Bypassing the GroupWise Password. .............................. Managing E-Mail Addresses . .................................... Changing a User's Internet Addressing Settings . . . . . . . . . . . . . . . . . . . . ..... Changing a User's Visibility in the Address Book. ........................ Creating a Nickname for a User. ................................. Checking GroupWise Account Usage ................................ Disabling and Enabling GroupWise Accounts ............................ Removing GroupWise Accounts ................................... Deleting a GroupWise Account. ................................. Expiring a GroupWise Account . ................................. Managing Expired or Expiring GroupWise Accounts . ...................... Part V Resources 15 Creating Resources Understanding Resources ...................................... Resource’ Objects. 225 4 15 à ee Ea Se a ee ee DM ne Resource TYPES: La. ttle ek ME eed E ee be a leet ns Pe UE ahta Resource: MailboXes:.: 2 2,2 Lust sua te an dt à Ba a a muse du RESOUrCe OWNËFS 4. ak eo hak Ron nan Wan ann ae Bh Roe ant els vä Planning'ReSOUrCes:.… 5,5 due ke gi upon EM OE ee t DU dpi dE M Md Creating:a New Resourcé -:. 4 eis hd sen a don a gas Pee ain die deg 16 Managing Resources Changing a Resource’s Owner. ................................... Adding a Resource to a Distribution List . . ............................. Moving a Resource... ....................................... Renaming a Resource ........................................ Déléting'a Resource: A aS i Re US re die ee 0 A de ER ee ee Managing E-Mail Addresses . .................................... Changing a Resource's Internet Addressing Settings . . .. . . . . . . . . . . . . . . . ... Changing a Resource's Visibility in the Address Book . ..................... Creating a Nickname for a Resource. .............................. Part VI Distribution Lists, Groups, and Organizational Roles 17 Understanding Distribution Lists, eDirectory Groups, and Organizational Roles Public vs. Personal Address Lists . ................................. 18 Creating and Managing Distribution Lists Creating a New Distribution List . . ................................. Adding Members to a Distribution List . . . . . . . . . . . . . . . ................. Removing Members from a Distribution List... . . . . . .. . . . . . . . . . .......... Moving a Distribution List. . . a 0... a Renaming a Distribution List. . . . . . . . . . . . ... . ..................... Deleting a Distribution List... . . .. ... . ... ........................ Managing E-Mail Addresses . .................................... Changing a Distribution List's Internet Addressing Settings . . . . . . . . . . . . . . . . . .. Changing a Distribution List's Visibility in the Address Book. .................. Creating a Nickname for a Distribution List. . . . . . . ..... ................ Adding External Users to a Distribution List . . . . . . . . . . . . . . . . ............. Contents 9 19 20 Creating an External Domain ............. a Creating an External Post Office. . ......................................... Creating an External User’... 22004 ee eee A ee el A ne ue M Un rue e 0 Using eDirectory Groups as Distribution Lists Setting Up an eDirectory Group for Use in GroupWise ................................. Seeing Which Members of an eDirectory Group Have GroupWise Accounts. . .................... Changing a Group’s Visibility in the Address Book ................................... Moving:a (Group's = tis sor pealt ae Ve Adi peus ek Roe eee ee Ce D CD ME ae tet Renaming:a; Group ve us cti ass hie PR den AE ec Dar Ae EA an ROME ds Ea E Removing a Group from GroupWise .......................................... Using Organizational Roles as GroupWise Distribution Lists Setting Up an Organizational Role as a GroupWise Distribution List. . . . . . . . . . . . . . ............ Seeing Which Members of an Organizational Role Have GroupWise Accounts . ................... Changing an Organizational Role’s Visibility in the Address Book ........................... Moving an Organizational Role . ....................................,....... Renaming an Organizational Role. ........................................... Removing an Organizational Group from GroupWise. ................................. Part VII Libraries and Documents 21 22 10 Document Management Services Overview Libraries. ie Juce bee hath e Sub Au du al dead à de puhh amt blah bob à Document Storage Areas ........... a Documents” e 20.3 s ah saite Len eae ha PE A eet donee a be ee Ee lue A Document:Properties: 242 ea Mk ea Ae EEA ee AE CERNE Gta seta AUX Document Types... Integrations: List o LAN AE del eee A A Slat Lite men a eae Ake Creating and Managing Libraries Plänning'a:BasiC Library 4 a2 5 sink e Bt St ee ae te ah af en es SB he Babe eS Selecting the Post Office That the Library Will Belong To. ............................. Determining the Context for the Library Object ................................... Choosing‘ the: Library Name >: 1% osae i use ee ed ee ae une de ee eh ee we alb od Deciding Where to Store Documents ........................................ setting Up:a Basic Library: 8 br aie met Dae A a ok ees eal Bee Sod eA Abaca te D ee a ee Creating the Basic Library. +. + + + «oon a mr cara a A di au ets 4 Planning Full=Service Libraries. + e 44: Ja 20408 ee olen lb koht dei Koja die pat ku era db «t out pa Deciding Which Libraries to Create ......................................... Selecting the Post Offices That Will Own Libraries . ................................ Determining the Contexts for Library Objects. ................................... Chôosing' Library Names: sosis 452404 salk 48 teele Su ee RE aed ph Peut a ee à Deciding Where to Store Documents ........................................ Setting Document Version Options. . s< 1 scs 44, www rre dada ue eu deu Figuring Maximum Archive Directory Size. . .................................... Designating Initial Librarians. . ................. a Restricting Initial Public Library Rights. . ...................................... Determining Your Indexing Needs. . ........................................ Determining If You Need to Set Up Integrations for DMS Users .......................... Setting.Up a Full-Service Library +... 5440404 cc o e da at ee ee ee eS Creating the Full-Service Library... a s os o... Other Things: You Can Do. ido je ee e E Ta ke ks Ba eee ae A ae Ge tn Re aE Be Viewing a New Library in Your GroupWise System. .................................. Seeing the New Library in ConsoleOne ....................................... Seeing the New Library in the GroupWise Windows Client . . ........................... GroupWise 6.5 Administration Guide Managing Libraries . . ................................. Editing Library Properties... ........................... Managing Document Storage Areas ........................ Managing Library Access. ............................. Adding and Training Librarians. . ......................... Maintaining Library Databases . .......................... Moving a Library: 2 1° ses ta OR Se OE a te la dE Deleting a Libra aii 2452) A eS a le Ge A Library Worksheets.) sv. «5 ae Amami di alul eee a a a a Basic Library Worksheet .............................. Full-Service Library Worksheet. .......................... 23 Creating and Managing Documents Adding Documents to Libraries... .......................... Creating New Documents in the GroupWise Windows Client ........... Importing Existing Documents into the GroupWise DMS System Managing Groups of Documents .......................... Organizing Documents. ................................ Customizing Document Properties . ........................ Defining Related Document Properties . . . .................... Indexing: Documents. 222,4 5 o Du té D dat dar Understanding DMS Indexing. ........................... Determining Your Indexing Needs ......................... Implementing Indexing ............................... Managing Documents ................................. Archiving and Deleting Documents. ........................ Backing Up and Restoring Archived Documents. ................. Handling Orphaned Documents .......................... 24 Integrations Setting Up Integrations during Windows Client Installation. .............. Setting Up Integrations Using the gwappintinfFile................... Understanding the Three Levels of Integration. . ................. Understanding the gwappint.inf File ........................ Editing the gwappint.inf File... . ... ...................... Controlling Integrations in the GroupWise Windows Client. . . ............ Part VIII Databases 25 Understanding GroupWise Databases Domain Databases. . ................................. Message Databases .................................. Library Databases ................................... Guardian Databases .................................. 26 Maintaining Domain and Post Office Databases Validating Domain or Post Office Databases. . .................... Recovering Domain or Post Office Databases . .................... Rebuilding Domain or Post Office Databases . . ................... Rebuilding Database Indexes . ............................ 27 Maintaining User/Resource and Message Databases Analyzing and Fixing User and Message Databases. ................. Performing a Structural Rebuild of a User Database. . ................ Re-creating a User Database. ............................. Contents 11 28 29 30 31 32 33 34 12 Maintaining Library Databases and Documents Analyzing and Fixing Databases for Libraries and Documents Analyzing and Fixing Library and Document Information Synchronizing Database Information Synchronizing Individual Users or Resources. . .................... Synchronizing a Post Office. .............................. Synchronizing a Library . . ............................... Synchronizing a Secondary Domain .......................... Synchronizing the Primary Domain from a Secondary Domain Managing Database Disk Space Gathering Mailbox Statistics. . . . . . . . . . . . . . . . . . . mn nn Reducing the Size of User and Message Databases . ................. Reclaiming Disk Space in Domain and Post Office Databases Reducing the Size of Libraries and Document Storage Areas Archiving and Deleting Documents ......................... Deleting Activity Logs . . . ............................. Backing Up GroupWise Databases Backing Up a Domain. ................................. Backing Up a Post Office ................................ Backing Up a Library and Its Documents . ....................... Backing Up Individual Databases . ........................... Restoring GroupWise Databases from Backup Restoring a Domain. .................................. Restoring a Post Office . ................................ Restoring a Library <: a uisk A as entre tete AS db ia Restoring an Individual Database. ........................... Restoring Deleted Mailbox Items . ........................... Setting Up a Restore Area. ............................. Restoring a User's Mailbox Items .......................... Letting Windows Client Users Restore Their Own Mailbox Items Recovering Deleted GroupWise Accounts ....................... Retaining User Messages How Message Retention Works. ............................ What GroupWise. Does. 4: iui ai eu ee eh A bed What the Message Retention ApplicatonDoes................... Acquiring a Message Retention Application. . . .................... Enabling Message Retention . ............................. Standalone Database Maintenance Programs GroupWise Check ssi a ina Sk ad E E e ae dan GWCheck Functionality . . ............................. Starting GWCheck on a Windows Workstation . .................. Starting GWCheck on a Linux Workstation . . ................... Using GWCheck on a Workstation. . ........................ Executing GWCheck from a Windows Batch File. . ................ Executing GWCheck from a Linux Script . ..................... Target Service Agents. . ................................ GroupWise Target Service Agent .......................... NetWare Target Service Agent for File Systems . ................. GroupWise Time Stamp Utility . ............................ GWTMSTMP Functionality. . ............................ Running GWTMSTMP on NetWare ......................... GroupWise 6.5 Administration Guide Running GWTMSTMP on Linux... 2... a 407 Running GWTMSTMP on Windows. ........... a 407 GWTMSTMP Startup Switches. . ......................................... 408 GroupWise Database Copy Utility . . . . .. . . . .................................. 412 Using DBCopy on Linux Servers... 24,148, 3444 usa dau au due ss 412 Using DBCopy on NetWare and Windows Servers. ................................ 413 Part IX Post Office Agent 35 Understanding Message Delivery and Storage in the Post Office 417 Post Office Representation in ConsoleOne. . ..................................... 417 Post Office Directory Structure. 1 à : 1 + 4 4 sen son da da dou pan ho de à bo des ae don de due Ban dis 418 Information Stored in the Post Office. . ........................................ 418 Post-Office Database. eto trikid dames AA a BAe te ME soe ETEA cin Ae we A 418 Message: Store’: siit wh) e matt gp pee väla tahu dou AE AA A hs bod ee 418 Guardian Databases. 4 o aa RUE eu ed E ap Gee ak eS be Rae le aed fe ee Pk OS 420 Agent Input/Output Queues in the Post Office . .................................. 421 Libraries:(Optional)) << 4:8 ar he Bed ed A ae GRR A we oe RPE dr PW Pee ER 422 Post Office Access Modèn: + ob oppi a a ek a a a a Ma 422 Role:of the:Post Office Agent: =s 5444 eche aime e Use A e e E, a re ee es ek RO a ao ae Me 423 Client/Server Processing: 2-4 224603 oe Lu Dig pond ne eg al HUE à pu dat du 423 Message File ProcésSsingr..5 e tosi rivis ar aies LÉ bee pu ae bee rike Ve ar Be a BA eR 424 Other: POA FUNCIONS:: 242 a one a ED A ee Ae rabat haine Bp ee 424 Message Flow in the Post Office i-s eoe e ee War he mate «rdt Bh bn rehe ee ee oe ce 425 Cross-Platform Issues in the Post Office. . ...................................... 425 Client/Post Office Platform Independence through Browser Technology. ..................... 426 Client/Post Office Platform Independence through Client/Server Mode ...................... 426 POA/Post Office Platform Dependencies Because of Direct Access Reguirements................ 426 36 Installing and Starting the POA 427 Installing the POA Software .............. na 427 Fine-Tuning Your NetWare POA Installation . . .................................. 427 Fine-Tuning Your Linux POA Installation . . .................................... 430 Fine-Tuning Your Windows POA Installation . . .................................. 430 Starting the POA-4, 6 oes A A d'etre bn met ne oe eee da EE Me Le DE D 431 Starting the NetWare PDA . : 1:44 484 mõh au ae ea ba een eu ben da he 431 Starting the Linux ROA: 15 oi A E Ges A ee ee A ee dE BY week 433 Starting the Windows POA... 2 2. a 434 Uninstalling the POA Software ............................................. 435 Uninstalling the NetWare or Windows POA. .................................... 436 Uninstalling: the- Linux POA: 1 2 ti ke e Sea ees EE Ae we eee ee oe ae 436 37 Configuring the POA 437 Performing Basic POA Configuration. ......................................... 437 Creating a POA Object in eDirectory . ....................................... 438 Configuring the POA in ConsoleOne ........................................ 439 Changing the Link Protocol between the Post Office and the Domain. ...................... 442 Moving the POA to a Different server. ....................................... 445 Adjusting the POA for a New Post Office Location . ................................ 445 Adjusting the POA Logging Level and Other Log Settings . . ........................... 446 Configuring User Access to the Post Office . .... ................................. 446 Using Client/Server Access to the Post Office . .................................. 447 Simplifying Client/Server Access with a GroupWise Name Server. ........................ 449 Supporting IMAP Clients s-a : ::. 24 254 4 4 4 Le ee ee Pe one eee De eee Bouche ha 450 Supporting: CAP Clients: 45. Lk ER Bee wom Se ae eine ge Me es ad ee ee te e tee 451 Checking What GroupWise Clients Are in Use. .................................. 452 Contents 13 38 39 14 Supporting Forced Mailbox Caching ........................................ 454 Restricting Message Size between Post Offices. . ................................. 455 Configuring Post Office Security. . ................ e 456 Securing Client/Server Access through a Proxy Server. .............................. 456 Controlling Client Redirection Inside and Outside Your Firewall... 2.2... 0. a 458 Enhancing Post Office Security with SSL Connections tothe POA......................... 458 Providing LDAP Authentication for GroupWise Users. ............................... 461 Enabling Intruder Detection: cr ee at ce Lt AE a Se ee A A eee Da 465 Configuring Trusted Application Support . ..................................... 466 Configuring Post Office Maintenance . ......................................... 467 Scheduling Database Maintenance. ........................................ 467 Scheduling Disk Space Management . ....................................... 469 Performing Nightly User Upkeep. .......................................... 472 Monitoring the POA 475 Using the POA Agent Console : . + ee 44 4 4 du sun ea e dd de da 475 Monitoring the POA from the POA Agent Console ................................. 475 Controlling the POA from the POA Agent Console ................................. 479 Using the:POA Web:Console: : 5 a s 50404 teab pepe ua m muula hors polo peen a Ep aula Ala à 489 Setting'Up'the POA Web:.Console:; fs. 2354 kar ay gen RAE Ok nt eea paate Uhh ot e a 489 Accessing the POA Web Console. ........... a 491 Monitoring the POA from the POA Web Console .................................. 492 Controlling the POA from the POA Web Console. ................................. 495 Using POA: Log Files h ios ie oe ne ee PR tal A as ok oe VL a Ae et Bt ón 497 Configuring POA Log Settings and Switches . ................................... 497 Viewing. POA; Log) Files =: +4 14444) & 2:48 fi oe Teal ae tk ee dE eng Mile an Re ha ae au lave a 498 Interpreting POA Log File Information. . ...................................... 498 Using GroupWise: Monitor... ++ 284 a tas oe ere RE bh on tale Pe ee eo né da 498 Using NetWare 6.5 Remote Manager. . ........................................ 498 Using SNMP Monitoring Programs . .......................................... 499 Setting Up SNMP Services for the POA. ............... a 499 Copying and Compiling the POA MIB File. ..................................... 502 Customizing Your ManageWise Installation to Monitor the POA .......................... 503 Configuring the POA for SNMP Monitoring . .................................... 503 Notifying the GroupWise Administrator . . ....................................... 503 Using the POA Error Message Documentation . .................................... 504 Employing POA Troubleshooting Techniques. ............... a 504 Using Platform-Specific POA Monitoring Tools . .................................... 505 NetWare Monitoring Tools. ............................................. 505 Linux Monitoring Tools: di ui a sild laine tee Re e a ani Bk ut eue es a 505 Windows Monitoring Tools. ............................................. 505 Optimizing the POA 507 Optimizing Client/Server Processing . ......................................... 507 Adjusting the Number of POA Threads for Client/Server Processing. ....................... 507 Adjusting the Number of Connections for Client/Server Processing. . . ...................... 508 Configuring a Dedicated Client/Server POA. ................ a 510 Optimizing Message File Processing . ............ a 511 Adjusting the Number of POA Threads for Message File Processing. . . ..................... 512 Configuring a Dedicated Message File Processing POA .............................. 513 Optimizing'Indexing.: 11404 1, 4 a dar o uba al LE LAN Larsen Et Dol num ae À Le 514 Régülating.Indexing.22 ee eee mrd OR a a a ea ee Be 514 Configuring a Dedicated Indexing POA ....................................... 516 Optimizing Database Maintenance ............... 517 Adjusting the Number of POA Threads for Database Maintenance. . . ...................... 517 Configuring a Dedicated Database Maintenance POA ............................... 518 GroupWise 6.5 Administration Guide 40 Optimizing CPU Utilization for the NetWare POA ................................... 520 Using POA Startup Switches 523 (OIIleRAME ins tec Bie eg Se Bb ee oe Bk BARE Pe ea BES 526 lattempisresetinterval y + 2.52 4 a EE Eee de eR Pa aR E ee dla 526 (Gapi kt (Ps MS Ed oe Ge Eri eee BOSS Feel hen eo nt even de ee we ods eae hee ee 527 (Capmaxthreads:. me cio ae at th ma Rub ed GAGS ay age pole Ree ar ke a 527 |CAPPOM i 525 eek tama ha mul Oe RE ek BN ek ut ae Beis 2h EIE da ok ja eB ee ob ae 527 A +. sone Sos alea name he ge ee EE oe 2S ee ee E ee oe ee ee Be t 528 ¡COMO HN RE a A eo he ttt at Sh octet Dg Me Py etd Maas he epee Ga Le mae ee ete ce erg ie da 528 (clusters 5 rr ma a pee AE AS ee ee eee oe eee pb À 528 (CPU ra Af Glee Bas Noe hk Rin Ga 2 ee ee i we eS Bh le Rh Ghee ee PRES 528 JONG ari e A a Ree eth ee eh he AA Ee A ee ee rk ee Be ee AP Me 529 /enforcecliGniversion: = 225045 434 eck een A AS A a ee ESO PaaS à 529 /externalclientss!” nn tom ewe jala sagas wha me BR A ee ges õpe) a tu eT a 529 /gwchkthte@ads 0.34 22 Gay ka Re Role Be RM ROR Be ee E fa Ee ek a N Pes dE 530 Igwelientreleasedate : o + 2,54 2004 à a a ee A ait 530 /gwelientreleaseversion.A.. 2 42 8 eA be amm Ae OR So ae ee ee ee SAE las Be eee 530 (help). 418,8 13 8 (8 patte Late Ges es eae ea EE AE hae ee heat a, BE I Rb rs 530 omeri i. eS ee es Be old ER ene, Poe Rls oR ER weet bo Be ed e i 531 /ntippassword:. < se a2 kta be A Gr E CE TA OP PE ee e eee 531 JARDON? e adds ee Bene hp Red alba GAS ARETE ee ID Ges eee wae Gr ee we as eee ee ee 531 (Nttpretresh sns gise o ada le sata des be a Reb Ree Gee ee salt and gee Roe ar de a a 531 A wi wk foe AU RR ot ee eek AM eek Ee Re oe RO RO ek ee ew ok W 532 INUPUSEM sw A en nn ant A ee oe ele ee, aos ee docs 532 TRE AE ae, he ea ch ce ee eee A ES ae eae ah fe dag ecm SA nse Taped, Tanie D ME AG? i or mak Seems taa Agen gy eas AA 532 /imapmaxthréads: sc. 44.02 notes a Ee a Pain ages beled ae a OS ae! a 533 /imapreadlimit’s, uta pois bb he ee oe a eo ee ce eas bh Ra eh A ee ee 533 AMAPPOTE 25% Gate Se er Ge a Rove Bale e A es ee ee ÈS nn ee es WU és 533 JIMAPSS I ances ain Moses e Pe RH Rp ee En eye de Sie ee Ue AEP BSS Ap ko wR a ae RE a E Y 533 /IMAPSSIPOMt:. + x assure armed À Sle gran Ske geo Bone ue ty ae Sur Dee SOS put up eT a 534 /incorrectloginattémpts: se sos -e 6 5 pe e A a E wh AB ek Ja aired ee de OE a Pe 2 a 534 /internalclientssl. >. 44375 2444 pa A oe ee a ee et ee ee QUES es 534 /intruderlOCkOut tio pate M ey, ale ee aa ee te a mk e RE ao es Ae Be 535 [Pie tectoyy see AS parte) AM) Peele chad Grae eee HE BO, Ba glee ee oe ee DE Ge à à I ee ae ye 535 Kylie da Be Ro ele hock Bee we Roe bb ha ee oe Re ee Bk a 535 IKeYpassWord': e ecte aor a he A saal SO RO ES ee Pa da Se Pe ea ee ee 536 ¡language tara hr cer be ep ee i ie Ee eo Pe Bee TB Ape ASA de oe Re Bs Wee ee ee 536 /Ildapdisablepwdchg.. : s 5 uane ee ee ae ks meh (lbs A a o aa ee ke fa ou 537 Adäpipäddl osi e hk Ss BS Ae ROR RK ae BR PR ROR RO Bk E eB i ok Be 537 Adapippooln Ez ee Waa Ap BO O ee ae a es ee E ca 537 Ildappoolresettmd; = 2414 ia dus vik Miao ae ot eh ae SE ee ta Reed See e hee we EE AEA ae eed fui 538 [Idappomts z a s mas ake 2 a ele ae a a ANS Tupla ata ur ee a Hal pin € 538 MAÄHPOMPOOMA- vies a Rl SE kk ea a ee A Ph le A oe ee né BO ES 538 MÄÄPPWA y ss. ese Soe A le SOR a OL od BES Ee ek ee ee ee Eee Se a 538 NOAaPSSI ie ahs meres o Sg Rp AE he ES Ee A a ERE Ba nr en 539 ¡Idapssipool soria a ee ue eB as See he aoa ly ahs sms pates, TR Be 539 Adäpssl keys = 4 144 E aod woes ol KOA eR täna Bak BS OR Bee hoe Oe ek eh a Bee ok ME 539 IldapsslkeypoolA p or eet ek BA Sn ok, a AL See ee eee eg AL SE eS 540 /ldaptimeout:, listas pbs A ee Ee ho i PP i ee Pe eh os ee? in 540 /IdAPUSER 44 M, ace ere a Bee tee ab Ge A AA Ae, bee ld A Be 540 Idäpuserauthmethod:. 1 sacrant 2k Rage ie aes Be Bee he eee BR eh ee ee ee So AS 541 Hockoütresetinterval! 4 xs 20 a be eR Ea ee OP ew be op ee deg ee 6 541 NO RD 541 MõgdayS: 2 ard. Bese ia teeta a a A Gee ele Be a AY ne Mag Po ee a nu 542 MogdisKORt inn 2 mld aS RE led Shem t Rs ea Beek ee alea 542 Contents 15 Moglevel caidos jäe BE ASS RS MR e's OS Gh dead Ak eda duel dd + AA à 542 MOMIA iii a ega nes e E Male ns ak da Ma eh Rae oe ok VR pre JA Mae Rk AS 542 IMAXAPPCONNS enc Se a aus Don eu A A aoe y be A uno ee 543 IMaxPhySCONAS EEE ae sies ee AO le BOR BS Sd ees a dr Te GAA Ge Be Aap ds a e 543 Imsgtransši! e", ita shot 4 kar ee bee a eee, Re Rate A ln ee Ee ERA A 543 Imtpinipaddré, $ 25. eG A Gre RUE RES BR Ce Pk Oe ke ee eek cae eS 544 (mtpinpOrt. 5 45 tl sk Se tet Ge bi Bale co eee s Oo Ge ed MANS eee ee Dre hp 544 imtpoutipaddr = a ams aoea Pe an ee ERS SE EI OD EE a Be EES ea ae Pee EEE Sy ee 544 Imtpõütpoht: ++ 50% gee kanal huh ls Aap AAA Beater um alu abo md ah al a 544 ImtpSendmax SE MAE e Ban els A eR SATU 545 NAME: vend E ete, ce eat de EE ee ee oP RR tea 545 [noada ess al Bebe dus BAe e Bet ee RB Mee hd ae os ad e A ee eth ee he as BAe 545 IMOCACHEs n 13 74 oe a A A A A A RA Be A ek à 546 IMOCONTG 2.02) Sak re ida Bo ch Rg Gr le, Be See AS e EE lg ede hoe eee ca Oe à 546 Inoërrormail ss kont eb ne a LÉ Re ao EA PS ee a ee POE Se ae 546 INOQWENK Saz da Brig aie Mods Head ap Paci RE IN whine on Sabri nated SS we teh oe rete ahh Spee eye: die i ee SESS toale Bed 546 MOME = eo eae a wes oe ee aoe ee as Be ps 20 sek lav ne ee eee ae ee ls 547 IOMA LE ese ik eR a an eee BORA en ofc 8 ce nae A ek dt ee 547 IMOMTOW sie eis Qo em AA ee eh UE ows pill ete. RU or ys ev a eue 547 (MOND gong A ees eee Ree es a ee elt, Ae ines Mee a ae I oe He harsh aia Kid 547 [NON listos we Be ae thy! yee Gee RG ee ee A ee the! DS, ec eee bE AG) GIA OG a 548 INOQE Sneed: won eae ARR Bk Eee oe AE oe Ae hes A AE el oe eo ee E 548 [NOA -nra eis BS ge Go ae a hobi ol DS Eee Ee Pe a A AE ee ee ie à 548 INOTECOVER le did e Aol Bee lee WS AA ey AE Rs E A A he de a ae BSS Sa ES 548 INOSNIMP? 02 ork, A a A ee Ae t de A ee alla a ake, fat ae ete ds 549 INGICPID’ s at Sk Ae he Oe hoe BR RS eb A Se a Bas hoe RO A a ee A A Ee use 549 [NULO SOL 20° 0s ace oe es ee ee E E A Ee ee ee il 549 IPASSWOMG EE Ge ho oy a RR a BA A ie Ae te ie, he Aas à Re 549 [POr see ey se JA A Shy Ge Boe es dE Ee ae oe thee ad eves (RE AS Win bay) a 550 /PEIMINGMAKG +, Uri Sh re i Mos he Ron ee eed, BO ee ce Ble MoE eR Ee ee hoe ee ca ee BO 550 /qtbaseofiset:. 1 34 bse ic et A a a E ee Ba ee ae 550 /gibaseoffsetinminute: +. Hiro kiisud Fe aay a Re ae hear ee ye des de die Ee Gok ew Eee 550 (qfinterval osos ee les à ie Ae a Be Este ah eh ee ee ee a els 551 /gtintervalinMinute ss + e ste Pk a ek ee ek Ree a koe eRe Ob ae a Rn ele ke a es 551 Indaboriset: >. aaas ecaro ca ccaa a tearc tacadura daca burro 558 Dômain Database’ 52 neni a A Beas he ed a eee ee E kh Ree ee a ee a né da 558 Agent Input/Output Queues in the Domain ..................................... 559 GAIEWAVS: “ect ee Mik Paik sd Ae Ae dials Se eh EAL ee a Pt de ar Bag eR es 559 Role of the Message Transfer Agent .......................................... 559 Link Configuration between Domains and Post Offices. . ............................... 560 Message Flow between Domains and Post Offices. . ................................. 560 Message Flow between Post Offices in the Same Domain. ............................ 560 Message Flow between Different Domains . .................................... 561 Cross-Platform Issues between Domains and Post Offices. . ............................. 561 GroupWise 6.5 Administration Guide 42 43 44 MTA Platform Dependencies Because of Direct Access Requirements to Post Offices . . . . .......... 562 MTA/Post Office Platform Independence through TCP/IP Links .......................... 562 MTA Platform Dependencies Because of Direct Access Requirements to the Domain .............. 562 MTA/Domain Platform Independence through TCP/IP Links. ........................... 563 MTA/Domain Platform Independence through the Transfer Pull Configuration................... 563 Installing and Starting the MTA 565 Installing the MTA Software: vob. bone ES ER a ah mon OR E dou bho ab KOE 565 Fine-Tuning Your NetWare MTA Installation . . .................................. 565 Fine-Tuning Your Linux MTA Installation . . .................................... 567 Fine-Tuning Your Windows MTA Installation. . . ................................. 567 Starting thé MTA + cactus ra e Sek, Whe it ee SR ba RE ve eh on eee UE RA 568 Starting the:NetWare MTA. 2 ametite a ES ee OE Se Tt ye Ee LR De à à 568 starting the Linux: MTA 4 siges ant heh oe AAA a ee ee ee eR a EAP Ae Pa ee 570 Starting the Windows: MTA: pafe k eeso ot oie be ae aa a Bae à ee A 571 Uninstalling the MTA Software ............................................. 573 Uninstalling the NetWare or Windows MTA. .................................... 573 Uninstalling the Linux MTA... . 2... 2 2 ee 573 Configuring the MTA 575 Performing Basic MTA Configuration. . ........................................ 575 Creating an MTA Object in eDirectory . ...................................... 575 Configuring the MTA in ConsoleOne ........................................ 577 Changing the Link Protocol between Domains . .................................. 579 Changing the Link Protocol between a Domain and Its Post Offices . . . . .... . . . . . . . ......... 583 Moving the MTA to a Different Server. ....................................... 586 Adjusting the MTA for a New Location of a Domain or Post Office. . ....................... 587 Adjusting the MTA Logging Level and Other Log Settings . . ........................... 588 Configuring User Access through the Domain . .................................... 588 Restricting Message Size between Domains. ................................... 588 Enñabling'Live Remote... 8 1.04 8 A den DU gli a dis E eA ie gts led jub ate Re 589 Enhancing Domain Security with SSL Connections to the MTA .......................... 589 Configuring Specialized Routing. - =. : 4: .:: o... 444, Lu un non mn da dé nn aA 591 Using Routing Domains. . ............................................. 591 Scheduling Direct Domain Links . ......................................... 593 Using a Transfer Pull Configuration. . ....................................... 596 Configuring Domain Maintenance . .......................................... 598 Using eDirectory User Synchronization. . ..................................... 598 Enabling MTA Message Logging . ......................................... 603 Monitoring the MTA 605 Using the MTA Agent Console. ............................................ 605 Monitoring the MTA from the MTA Agent Console ................................. 605 Controlling the MTA from the MTA Agent Console. ................................ 608 Using the MTA Web Console. . ............................................ 617 Setting Up the MTA Web Console ......................................... 617 Accessing the MTA Web Console .... 2... 2... . 83. 619 Monitoring the MTA from the MTA Web Console. ................................. 619 Controlling the MTA from the MTA Web Console. ................................. 623 Using MTA Eog Files a go eo rt speak Aa ee Pee hae a OG Le ac de tae lube a 625 Configuring MTA Log Settings and Switches. ................................... 625 Viewing MTA Log Files . ............. 626 Interpreting MTA Log File Information . ...................................... 626 Using GroupWise Monitor ............................................... 626 Using NetWare 6.5 Remote Manager ............ e a E aa e A e e aa a E i E a i 626 Using SNMP Monitoring Programs. .......................................... 627 Contents 17 45 46 18 Setting Up SNMP Services for the MTA....................................... 627 Copying and Compiling the MTA MIB File. ..................................... 630 Customizing Your ManageWise Installation to Monitor the MTA .......................... 631 Configuring the MTA for SNMP Monitoring . .................................... 631 Notifying the Domain Administrator . . ......................................... 632 Using the MTA Error Message Documentation . . ................................... 632 Employing MTA Troubleshooting Techniques. . .................................... 633 Using Platform-Specific MTA Monitoring Tools . .................................... 633 NetWare Monitoring Tools... +» «os non 4 2... 4 us à à à 88 a ga da ae au db pa 633 Linux Monitoring Tools 4.2 + wes sos dt jas m ati ann an an se tus õju PO Ba A un unes a 633 Windows Monitoring Tools. ............................................. 633 Using MTA Message Logging. ............................................. 633 Optimizing the MTA 635 Optimizing TCRIIPAEINKS:. 2 set ges orar ts Pä ko Aer ui Me po À Di un das ES Ubu la ja 635 Adjusting the Number of MTA TCP/IP Connections. . ............................... 635 Adjusting the MTA Wait Intervals for Slow TCP/IP Connections .......................... 636 Optimizing Mapped/UNC Links ............................................. 636 Using TCP/IP Links between Locations. ...................................... 636 Adjusting MTA Polling of Input Queues in the Domain, Post Offices, and Gateways . . .............. 636 Adjusting the Number of MTA Scanner Threads for the Domain and Post Offices . . ............... 638 Optimizing the Routing Queue... : 4 5 24 mt aR pou a see vu à net ee 639 Adjusting the Maximum Number of Active Router Threads ............................. 640 Adjusting the Maximum Number of Idle Router Threads . ............................. 640 Adjusting MTA Polling of Closed Locations . . ..................................... 640 Using MTA Startup Switches 643 @filenamer. E e fran E Aer id AR ee a a a eck eb ne a Bat ei D 645 lagtivelodi 48 aided er E ee dire AAA tal See Bu PRES S 645 ICONO. ori Hier des dk Po Aat ah eee de à, Sr ee tbe babe de bah Hep have à 645 EN LL RE ken e SO Ae SA Es ol nad A est ss a 2 645 [lO E A A Led e me bb at Arina 646 Idetaultroutingdomäln, > Al A A A uti a Bee eee te ls 646 (AR. ii Hoete al due teele ao pet etudiant mane ds 646 Hasta eksi wave eS halt eee seh LAS Sees terne ele EA AES 647 HAS ch oh ied. A Eas AMO al gh a A a eee AD he cha ee eye a at 647 [NED 28 e Boe E at A me See msg 5 As sa Be en te & E 647 [OM coi So a ag GB od de jä deh be fe eb D nee hu dure dr ae à 647 (httppasswordi's 32 ho We Pur AE DED A Sd DEA E e ted le NS 648 (httpport E aac) oe eae ea aie ee A Se ee el be hee ce ae 648 Mhttpretresh! ss kb Pans AA A ea a tia SE eea As 648 INTIPSSI > 4.4 Sb Bb on st lae a dodo tem, Ol ee ed ee an Mia dub Sb a RA) À 648 [NTÍPUSC s s CEE LL a Ba Pree SO olda bot ed ka se e /d ae RER EE is Aa 649 Kyo ah droit a BAR ae je Ee eee be E AR aaa bale Se eh a aS 649 (keypasSword)-., s-s mimi Aseesimees Sipe Som Se a ite TA € 649 language: à 204 t olek bebe ha Bo ch nb fe put de doe be pu anne da teg ee be ee ep à 649 IVETEMOtS 3 saksa de DELA ee diet Bee de oat Tokko Gee jas oe E e 650 NOGS ee e Gee ee eee aa Ge wae bee et Bb cake ea A TRAE ay 651 MogdayŠ-4 2.5, a PSS, us ga ee a Re Sek a Pe PES aR A OS SPS Me 651 MOgdISkOTF : 5.21 4 t mote ke dia ek stop a ee a ee ed we Bae ge og Bb ee aate 651 Hoglevel 24 86 ee nk LA A Barats ek be Rat ba hk De Aa Rea ee be ete a Aa Se 652 NOGMAX wee ahah ake. al ae He te a Ae A ee ae ek Ae A ale a ie ae a ae in 652 MP COMM oe 2 ee AR Sete TE te ae Se hs dee AN E Wed ds A ew, Bode aint ts ae 652 Iirwaitdata. : <0. 24 ad ok Kel de doe bp à dd Eo Longa ended ee a oe Keva à 652 imaxidlerouters®... kras) eke e A Be A A eS as Beh ee eee Sieh le bk Se 653 Imaxrouters: 1. 4 e ee a Bee LG ee ee ee Jop ea a eb ees a be ea be ale 653 GroupWise 6.5 Administration Guide Imessagelégdays..: i ia goa n LE Mis ea vb eee be ta db po ebook n eee eee les à Dune 653 Jmessagelogmaksizd + + coo sd meä kõmu E A laeb ea uen a ER populi ut ora jä jäeb AU Boe LS 654 Imessagelügpath:: soe au RM RSS E OMA Atla Oa M a Te ae ee Se e ek 654 Jmesšagelogsettings:-.+:4.-4 woe lim hea uns E A A MORE oe a ee aa ae) & eee 654 Imsgiranss! s « 4:4 ula LAN GAL osalt ee Eee ee ea be ee ae Bof a pure poh à 655 [NOAA 00 khk aus BAGS SE Rien Bee ee ES elab She A ld sd Bk ES 655 INOQNS: = do ts ons ME LEE RON En a Hs A e pant? A ea ee e a 655 (noemormalls oa e nv ok Ge PRE A EIR YE BAER a A EES 655 INONGSSYNG:... Ea par tt ne a nas MAS De Mi MAD E ne whee ges parures a 656 INGFECOVEN aise SO Lu he BR ho jne OA Pot ven eale JA Me LA Be e JA Ja Je e eh A a cube AE Ta 656 INOSAMP 19150 oe O ee ce i ee ee ne ete AAN Lt DM ad aS ee 656 /PASSWOMG A ner ag ER ted E ro eo el Se a eye Ge VA ee ane ale hee EE Be Aone? pets 656 /tCpINBOUNG::, d e xe a A Nae is ae es la 4 a pate tare AA Be Ee Rae ub ee 656 HERO Boire i Mäe Noe BR Rok ene let, Bh eee a Es le oe he Re dk SR ES 657 /icpwaitconnect:.. +4 sa Soe Bo pats ee ORS De ee a PS Be SOP o AAA à 657 ficpwaltdata nars m) mn ai ei eos Gad aed Sta de See Se as ee PB or Oe eee wie Se oe ee es ee Ee Pe ey 657 ftracelogin scope a Bee bea ar de fs n 658 JUS aR 288 A sa k AE ue ale IE 658 OK E a tr nat Sie aes oh bd MU AE a Meoma od DE ne ne oh ica ne 658 Part XI Internet Agent 47 48 Configuring Internet Agent Services 661 Configuring SMTP/MIME Services. .......................................... 661 Configuring Basic SMTP/MIME Settings . ..................................... 661 Using Extended SMTP (ESMTP) Options . .................................... 663 Configuring How the Internet Agent Handles E-Mail Addresses . ......................... 664 Determining Format Options for Messages. . ................................... 667 Protecting Against Unidentified Hosts and Mailbombs (Spam). .......................... 668 Configuring the SMTP Timeout Settings . ...... ......... ...................... 669 Determining What to Do with Undeliverable Messages. .............................. 670 Configuring SMTP Dial-Up Services ........................................ 671 Enabling SMTP: Relaying aes 194 4 Ss Lure aus us BEE Soe ai ee 4 M ooa ea ee Don ee e A 674 Configuring SMTP Host Authentication. . ..................................... 676 Using a Route Configuration Fil8:. 2.0.0: 202 44 à à bok à AA ar ee 676 Customizing Delivery Status Notifications .. ................................... 677 Managing MIME Messages. ............................................ 678 Configuring LDAP “Services. siii sa Gh fe BA ae nee ipo ae te e Ae 682 Enabling LDAP:Services: si £ gnc se a a la A he 682 Configuring Public ACCESS: sani moa eee ed, Bee ee sa ana ed keds A ee A Oe BOR AY 683 Configuring POP3/IMAP4 Services. ............ a 684 Enabling POP3/IMAP4 Services ............ cearca da aa raaa ecua araa ta 684 Configuring Post Office Links. : . 22432 4 4 à 4 masei ia epa à à das kopa op à do E Du deg bou wa 685 Giving POP3 or IMAP4 Access Rights to Users . ................................. 686 Setting Up an E-Mail Client for POP3/IMAP4 Services. . ............................. 686 Configuring’ Paging Services: «se aoe a RAE néant de eee he he EU md ua Gee Gia 688 Setting Üp/Pagingi 4» x kad Leds eau à ab RE a te ea) A Gen. à NÉ A eae ta) DAT de 688 Using ‘Paging #25 Lars Vos Sh haa an dede © ae eee ee os he SU et due né BARS 689 Configuring Simplified Addressing 691 Basic Addressing:Syntax 2.4 8 fee eo das ea ee SU ath a edit Bee ie dat Sales 691 Sending: Messages’ aias a 4 a D Lae eee ae be a ee ba ee ka 691 Receiving: Messages- eius Lei AA Be Era ae te BAM lee ee Se AA E A Ent 692 Receiving Replies to Sent Messages. . ...................................... 692 Simplifying Addressing s < san fo ete as ea oh a A Re eh a ees th A te BO eh Bele A ek Bt E as LOGGING! io pe ete e eee ee ee eee Te oe o ae to ae Me Tew. a, ST Menu: FUNCIONS: ;: 42 4. Ree ile oe Se a de Pts dd oe ote hae ae aye E Monitoring the Internet Agent through the Web Console ................................ Enabling the Web: Console: sre + hmm poore ohuna aE Eee ee robe e da Monitoring the Internet Agent... 2... 2 2 ee Monitoring the Internet Agent through NetWare 6.5 Remote Manager... ...................... Monitoring the Internet Agent through an SNMP Management Console ........................ Assigning Operators to Receive Warning and Error Messages. . ........................... Using Internet Agent Log Files .. ....:.:::., +0... uueneva ns Modifying Log Settings in ConsoleOne ....................................... Modifying Log Settings through Startup Switches. ................................. Modifying Log Settings through the NetWare Internet Agent Console. ....................... Modifying Log Settings through the Windows or Linux Internet Agent Console. .................. Viewing hog: FileS:s....-. 4: ee. ge cee ann RO ace de i A a A ED LE tk ea ae a ee cel Shutting Down the Internet Agent. ............ Using the:Console 27% 24 ees oh ok Wig ee A a RR RR a kk Rw OO JA ae EU Be fn GroupWise 6.5 Administration Guide 54 55 56 Using a Mail Message ............................................... 751 Using:a-Shutdown File... 2-5 e eE Puha AUD jen dan fn Jä OR ta ah oe jas, Peale AA eR AR eo eR a 751 Securing Internet Agent Connections Via SSL 753 Defining the: Certificate File; +. 204 5. sos Soe ones nn õpe a Re a ae e i 753 Defining Which Connections Will Use SSL. ...................................... 754 Connecting GroupWise Systems and Domains Using the Internet Agent 757 Connecting:GroupWise Systems... ic eek Eh ne Bari AE SR Ee ee LE tt 757 OVEIVIEW oand uh Jä mon D dat ou sete à de ee put ae de pub ee eee dpt pop dé pue 757 Creating an External Domain. .. 2... a 758 Linking to the External Domain . .......................................... 759 Checking the Link Status of the External Domain. . ................................ 761 Sending Messages Between Systems . ...................................... 762 Exchanging Information Between Systems. .................................... 762 Linking DOMAINS: 22202 rra et all tel te eee ee Pe ee Re E a 762 Using Internet Agent Startup Switches 765 Howto Use'Stärtup:Switéhés:. 52.2 mkm e OR p hi Get ee NE Se 765 Changing Internet Agent Settings in ConsoleOne ................................. 765 Modifying the Gwia.cfg File. . ................. a 766 Editing Guidelines: ici. vorst te be te ee ab ee UE ep ee ee ba eae be 766 Alphabetical List of:SWitéhes.. : 2.2.2: onm kütus LE ED Ae ee E D Rue 767 Required Switches ............ 4... 771 JAHOME! sa ie AA peste à Rue Rite han ADL ARMES Late mé Gk n Lire 771 ¡MAA sl ta Sele BO Re he bh are A a ti sO A D e, 200 ep a ae ae 772 NOMEA s a derstand at AA AS Oe DAA oe, ae ees EE PS 772 fuser (NetWare Only) -coi 2 4 ba. bd aort od ler at kald gba eee hoogu kol demie ee A 772 /password (NetWare Only)... =... 02 2 «ot nun le deh Mot sos moens e e 772 Console Switches: +. 1. ooo aus Dae A A a pms bee eh a oe be 772 [COLOR muna E e ea Se ERE AA AA E E 773 [el 14 Lu dise BAL ee Lan asd deh ol A Hee Al Et crise a 778 [MONO Liis Ga Ed Iran Des Aasias Soave ee ESR Se Lae SS ares 773 =show (Linux Only) o sos sa 6345 4G bale ee bbe ee ps lo eee a eb ee a 773 Environment Switche Sesetan 1.5 mimi uus it E te a teete e 773 LE ke o Sy Sigh teh eS, deck? dent valetab pk a dd dada Ate dee had Sk 2 ed 773 [cluster (NetWare Only). . + 1 si aos ee Deus ha ae de kn ele al no e 774 RP aya ce eh a et le dee ote et 774 Ismp(NetWare Only). tt A eee A s ei EE Bee BP de DOM ee 774 Inosmp (NetWare Only)... 2. 0 e a 774 ISMIPMOME: kink Sel S Saree hs Galt tee eke SDS Balkans eee ee he ed Se ares 774 IO Fai Ba bake ie eee ba ee a dh the oa oe wee ee e 775 IAS OG es xe ge se der etd ASS oe We A Bee A we ee MAT spa De eee SAE 775 SMTP/MIME Switches .......... ee 775 SMTP Enabled (/smtp Switch) . .......................................... 775 Address: Handling. viciosas et ee oy ba re M wee ek a eh we ee eas oe 4 776 Message Formatting and Encoding. ........................................ 780 Forwarded and Deferred Messages ........................................ 783 Extended SMTP: 2°84 late eG a ee Le baa D Durant Pe tt Id DS use 784 Send/Receive Cycle and Threads ......................................... 784 Dial-Up: Connections». inan a mt Sst ide ews Seb eines SS sel te ee e 785 Timeouts: 2 fhe ee log Be ke se dee tee ee beg bh bee eee ärtu kraad 786 Relay: Host: as bt oe 22805 AS a A eA ele eat See iba A oat 5 EE A 788 Host Authentication- : s-ra eiea 4 44 kaos da Pe ae a de ba ee ee 788 Undeliverable Message Handling. ......................................... 790 Mailbomb and Spam Security. ........... a 790 Contents 21 [POPS 2 ii Bae en Ark ceo sk A E LO eek Ee mt rene “bh as BB A alal Bo is Es 792 Ipopintrüderdetect.: < + 2 ce ee es Gl ae ORM a A A ES 792 IPOPPOM KT ge RNA a ane LS 792 IPOPSPOlL:: Go oa a 40) a Gees BE Gene PR AA EE Gin thy) ps 792 IPOPSS| 2 hi on Se bel Ole eb en E de A te be ee Een hath ed A ee le Ree 792 [DE wis read E ed O ie ete BOE pett Soe SIRE ee Gwe ma eS ol RS 793 IMAP4. ¿co ee ee ee nae ee Rod SA nee See Os SES ee RE 2 Modifying the addon.cfg File. . .......................................... Errornliog! Files 7.0858 Gt de eee s at Ee Gene A A ADR Saleen Balt Ba See ee eau Startup Switches for Administrator-Defined Setup. . ............................... Using ZENworks Desktop Management to Distribute the GroupWise Windows Client. . . ............. Understanding the GroupWise Windows Client aot Files. . . .......................... Creating a GroupWise Client Application Object ................................. Using Red Carpet to Distribute the GroupWise Cross-Platform Client . ....................... Supporting the GroupWise Client in Multiple Languages Providing the GroupWise Client Software in Multiple Languages. . ......................... Providing Post Office Support for Multiple Languages . ............................... Tools for Analyzing and Correcting GroupWise Client Problems GroupWise Exception Handler for the Windows Client . ............................... GroupWise: Check: 342: coy ah Se ee mesh EE ee A A ee ee ei Enabling GroupWise Check in the Windows Client . ............................... Using GroupWise Check with the Cross-Platform Client . ............................ Startup Switches for the GroupWise Client [QUR oak LO E A M Ad RE la eh ee eat 1@u-user IDs El Sa rs Bh ed a RIDE Sal a oe as nié baad bah a e LAAS LR ee Tet ei a dale ay dl ahve, Be aig Ca A eh A ah earn PRL gh AA ee ee GroupWise 6.5 Administration Guide hipä:lR::address-õr-hõstname 1, 2: Lines ain ey ee Me ee fee lae ce woke Bye dut Lipp-öört numbers, < ¿aia ds ape ale A UA à Se eles tue ee Bo E Ee Has à HG le MEN Oe a ae RO ben Re Green oe Serene eels Re ue ie ee MERE RE na (NU Pave ii teats RARA I E a ee a ee ER Pah lph-pathiname! mep tored a ee Aas ad pe ee oe Bernd hy A Ae a IpC:path:.16:.Caching: mailbox. + ==: jae 2 a ee RR OR Ra Be Ge BR A Ee te E ES Ipr-path_to_remote_mailbox ......... a eu ne e a a s a e e E a e e a e a e a Part XV Security 79 81 82 83 84 GroupWise Passwords Mailbox: PasSwordS:: «4 +214 ook Jamal ARG kh Se ee dE anne Re ae Res BS Using Post Office Security Instead of GroupWise Passwords . .......................... Requiring GroupWise Passwords. . ........................................ Managing GroupWise Passwords. ......................................... Using LDAP Passwords Instead of GroupWise Passwords . ........................... Bypassing Mailbox Passwords to Respond to Corporate Mandates ........................ Agent: Passwords. 4.2. foe A da See A © aA ieee e a iS ea E ar y ET Facilitating Access to Remote Servers . ...................................... Facilitating Access to eDirectory . : . : ek +: Lu 6... . e... a veeb à due à die à Kon de Protecting the Agent Web Consoles ........................................ Protecting the GroupWise Monitor Web Console. ................................. Encryption and Certificates Native GroupWise Encryption ............ 888. Personal Digital Certificates, Digital Signatures, and:S/MIME:Eneryptioni "+5 ce ge a tek SR ll ire an le io ho kh E let Server Certificates and SSL Encryption . ....................................... Generating a Certificate Signing Request and Private Key. . ........................... Submitting the Certificate Signing Request to a Certificate Authority. . . ..................... Creating Your Own Certificate . .......................................... Installing the Certificate on the Server ....................................... Configuring the Agents to Use SSL. ................ e A e a a E a a a E a a Ak LDAP Directories Accessing Public LDAP Directories from GroupWise ................................. Offering the GroupWise Address Book as an LDAP Directory... .......................... Authenticating to GroupWise with Passwords Stored in an LDAP Directory. ..................... Access Method << 3 males A Ei ee Ss A D Ee E KO Message Security Address Book Security eDirectory Information Displayed in the Address Book. ................................ Suppressing the Contents of the User Description Field... ............................. Controlling GroupWise Object Visibility in the Address Book. ............................. Controlling GroupWise Object Visibility between GroupWise Systems ........................ GroupWise Administrator Rights Setting Up a GroupWise Administrator as an Admin Equivalent. ........................... Assigning Rights Based on Administration Responsibilities . . . . . . . . . . . . . . . . .............. Contents 27 85 86 87 File:SystemiRightS:. vb 2.4 da 42 24-404 od 24 BE bbe 2 date Det et Rai à eDirectory Rights: 425 socorrer ane dm A Hu Qe RR) Boh ce ge de on Babe de JA OR OR den Common Types of GroupWise Administrators. . ................................. eDirectory Object and Properties Rights . ...................................... Granting or Removing Object and Property Rights . ................................. GroupWise Agent Rights GroupWise User Rights eDirectory Rights: 2 1 4 44 8 4.44. 2 dbase ete à doh te del us hed ada td kola Läheb obs baled Configuring ConsoleOne to Automatically Set eDirectory Rights When Creating User Accounts. ........ Manually Granting eDirectory Rights . ...................................... File System: Rights! ie m EA AAG we Pe a E AE BEE RE TERA Granting File System Rights to the Post Office Directory . ............................ Granting File System Rights to the Software Distribution Directory. . ...................... Granting File System Rights to the Mailbox Backup Directory . ......................... Spam Protection Configuring the Internet Agent for Spam Protection. . . ............................... Configuring the GroupWise Client for Spam Protection. . .............................. Virus Protection Part XVI Documentation Updates 28 February 6, 2006 (GroupWise 6.5 SP6). ....................................... October3 12005. 2 Mw E e noi SS eed RE Ch Eee SA NE Pot eed September 19, 2005 (GroupWise 6.5 SP5)...................................... February 28, 2005 (GroupWise 6.5 SP4)....................................... November 30, 2004 (GroupWise 6.5 SP3) ...................................... September s0; 2004F 142 stake NS ese Tani ad etn ee ae Een RRA A A ae BES June 25, 2004 (GroupWise 6.5 SP2 and GroupWise 6.5 for Linux SP2)....................... May 3, 2004 (GroupWise 6.5 for Linux). . ...................................... October 31-2003 ce tan A ho juh Sok Se ee ed, ae oe Se Bee eu da OE OR ee ee ue cea de July 16, 2003 (GroupWise 6.5 SP1).......................................... GroupWise 6.5 Administration Guide About This Guide This Novell? Group Wise? 6.5 Administration Guide helps you maintain all components of your Group Wise system. The guide is divided into the following sections: “System” on page 31 “Domains” on page 107 “Post Offices” on page 145 “Users” on page 187 “Resources” on page 221 “Distribution Lists, Groups, and Organizational Roles” on page 235 “Libraries and Documents” on page 261 “Databases” on page 339 “Post Office Agent” on page 415 “Message Transfer Agent” on page 555 “Internet Agent” on page 659 “WebAccess” on page 803 “Monitor” on page 901 “Client” on page 963 “Security” on page 1031 “Documentation Updates” on page 1077 Additional Documentation For additional GroupWise documentation, see the following guides at the Novell GroupWise 6.5 documentation Web site (http://www.novell.com/documentation/gw65): * Installation Guide + Multi-System Administration Guide ¢ Interoperability Guide + Troubleshooting Guides + GroupWise Client User Guides Documentation Updates For the most recent version of the GroupWise 6.5 Administration Guide, visit the Novell GroupWise 6.5 documentation Web site (http://www.novell.com/documentation/gw65). Documentation Conventions In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and items in a cross-reference path. A trademark symbol @, TM, etc.) denotes a Novell trademark. An asterisk denotes a third-party trademark. About This Guide 29 User Comments We want to hear your comments and suggestions about this manual and the other documentation included with this product. Please use the User Comment feature at the bottom of each page of the online documentation, or go to www.novell.com/documentation/feedback.html and enter your comments there. 30 GroupWise 6.5 Administration Guide System Chapter 1, “Group Wise System Administration,” on page 33 Chapter 2, “ConsoleOne Administration Tool,” on page 35 Chapter 3, “Group Wise View,” on page 37 Chapter 4, “System Operations,” on page 43 Chapter 5, “GroupWise Utilities,” on page 65 Chapter 6, “GroupWise Addressing,” on page 81 Chapter 7, “Multilingual Group Wise Systems,” on page 103 System 31 32 GroupWise 6.5 Administration Guide GroupWise System Administration Asa Group Wise” system administrator, it is your responsibility to keep your Group Wise system running smoothly for your Group Wise users. This Group Wise 6.5 Administration Guide provides a wealth of information to help you accomplish this task. This System section provides an overview of the GroupWise administration tool, ConsoleOne?, and its capabilities. It summarizes administrative tasks that affect your GroupWise system as a whole and provides links to more specialized instructions. The following sections of the Administration Guide detail the eDirectory™ objects where GroupWise information is stored. Instructions are provided for creating and managing all GroupWise object types. + “Domains” on page 107 + “Post Offices” on page 145 + “Users” on page 187 + “Resources” on page 221 + “Distribution Lists, Groups, and Organizational Roles” on page 235 + “Libraries and Documents” on page 261 The following sections of the Administration Guide detail the GroupWise software components that make your GroupWise system run. Instructions are provided for configuring, monitoring, and optimizing each software component. + “Post Office Agent” on page 415 + “Message Transfer Agent” on page 555 + “Internet Agent” on page 659 + “WebAccess” on page 803 + “Monitor” on page 901 The following additional sections of the Administration Guide provide supporting details and background information: + “Databases” on page 339 + “Security” on page 1031 + “Client” on page 963 GroupWise System Administration 33 34 GroupWise 6.5 Administration Guide ConsoleOne Administration Tool Group Wise” is administered using ConsoleOne*, a Java*-based tool for managing your network and its resources. When you create your Group Wise system, GroupWise snap-ins are added to your ConsoleOne installation and Group Wise objects are created in Novell? eDirectory™. As you manage your GroupWise system, you use ConsoleOne to create additional GroupWise objects, modify GroupWise object properties, and so on. IMPORTANT: Because the GroupWise snap-ins to ConsoleOne are required in order to work with GroupWise objects, you cannot use other network management tools, such as Novell iManager, to administer your GroupWise system. Also, you should not use older network management tools, such as NetWare Administrator, to administer your GroupWise system, unless your GroupWise system includes legacy gateways that require such tools to administer the corresponding Gateway objects and their properties. Because Group Wise is a cross-platform product, you might have components of your Group Wise system located on NetWare® servers, Linux servers, and Windows* servers. You can run ConsoleOne on Windows or Linux to manage Group Wise domains and post offices located on any of these platforms. + “ConsoleOne on Windows” on page 35 + “ConsoleOne on Linux” on page 36 NOTE: For a GroupWise system on NetWare, you cannot run ConsoleOne to administer GroupWise at the NetWare server console. The GroupWise Administrator snap-ins to ConsoleOne do not run in that environment. ConsoleOne on Windows You can run ConsoleOne on Windows on any Windows machine that meets the requirements listed in “GroupWise Administration Requirements” in the GroupWise 6.5 Installation Guide. + “Installing ConsoleOne on Windows” on page 35 + “Starting ConsoleOne on Windows” on page 36 Installing ConsoleOne on Windows When you create your initial GroupWise system using the GroupWise Installation program (install.exe) on Windows, the GroupWise snap-ins to ConsoleOne are installed to the ConsoleOne installation on that machine. If necessary, you can install ConsoleOne itself to the machine where you are ruming the GroupWise Installation program. You are also given the opportunity to copy the GroupWise snap-ins to ConsoleOne into a GroupWise software distribution directory for later use. After you have set up your GroupWise system, you can use the GroupWise Installation program to install ConsoleOne and the GroupWise snap-ins from the GroupWise 6.5 Administrator CD or you can run admin\install.exe to install the snap-ins from the software distribution directory to additional locations as needed. ConsoleOne Administration Tool 35 Starting ConsoleOne on Windows When you install ConsoleOne, a ConsoleOne icon is automatically created on your Windows desktop for starting ConsoleOne. ConsoleOne on Linux You can run ConsoleOne on Linux on any Linux machine that meets the reguirements listed in “Group Wise Administration Requirements” in the GroupWise 6.5 Installation Guide. + “Installing ConsoleOne on Linux” on page 36 + “Starting ConsoleOne on Linux” on page 36 Installing ConsoleOne on Linux When you create your initial Group Wise system using the Group Wise Installation program (install) on Linux, ConsoleOne should already be installed before you begin. Linux ConsoleOne is available on the Novell Downloads page (http://download.novell.com/index.jsp). After ConsoleOne is installed, the Group Wise Installation program on Linux installs the GroupWise snap-ins to ConsoleOne to the ConsoleOne installation on that machine. You are also given the opportunity to copy the Group Wise Administration RPM into a Group Wise software distribution directory for later use. After you have set up your GroupWise system, you can use the Group Wise Installation program to the Group Wise snap-ins from the Group Wise 6.5 Administrator CD or you can install the Group Wise Administration RPM from the admin subdirectory of the software distribution directory to install the snap-ins to additional locations as needed. Starting ConsoleOne on Linux 1 Inaterminal window, become root by entering su and the root password. 2 Enter the following command: /usr/ConsoleOne/bin/ConsoleOne 36 GroupWise 6.5 Administration Guide GroupWise View When administering Group Wise” in ConsoleOne®, you can use the standard Novell® eDirectory™ View or you can use the GroupWise View. The following sections discuss the GroupWise View and how to use it: + “eDirectory View vs. GroupWise View” on page 37 + “GroupWise Object Icons” on page 38 + “Customizing the GroupWise View” on page 40 + “Searching in the GroupWise View” on page 42 + “Performing Administrative Tasks from the GroupWise View” on page 42 NOTE: The ConsoleOne images used in the guide show ConsoleOne on Windows. ConsoleOne on Linux displays slightly differently but provides substantially the same functionality. eDirectory View vs. GroupWise View The eDirectory View displays the GroupWise objects in their contexts in the eDirectory tree, as shown in the following example. KR novell Consoleone i -lol x| File Edit view Tools Help ele] »|elejals shell i Console View & Help Desk 8 Usert 8 Usera & User? -QÀ DublinPo Conference Room 2012 H-A Facilities @ Dublin H-A Orem @ Orem #-@ Provo @ Provo ta A Research @ San Jose ta-Qh Sales AÀ DublinPo #-@ San Jose Qa Facilities aa Support QÀ Research [A Security Q sales YY GroupWise System QA Support [gi User 9 @ DublinPO Library ú Research Library 18items À | [User User 1.GroupWise.Provo free: GW_TREE The GroupWise View filters out all non-GroupWise objects and shows how the GroupWise objects relate to each other in the GroupWise system, as shown in the following example. GroupWise View 37 KR novell Consoleone = 101 x| File Edit View Tools Help TAERA] [8 veers + [io son y GroupWise View a a a. se EE 1 Research Provo y © Dublin A User2 2 User Support San Jose E Edit Columns to display the Select Group Wise View Columns dialog box. {select GroupWise View Columns Selected Columns Available Fields x OF Object ID Last Name Given Name Post Office Name Domain Name Account ID Admin Defined 1 Admin Defined 10 Admin Defined 11 Admin Defined 12 Admin Defined 13 Admin Defined 14 Admin Defined 15 Admin Defined 16 Admin Defined 17 Admin Defined 18 Admin Defined 19 Admin Defined 2 Admin Defined 20 Admin Defined 3 Cancel | Help | 4 To add a column, select the column in the Available Fields list, then click the left arrow to add it to the Selected Columns list. 5 To determine the display order, select a column in the Selected Columns list, then click the up arrow and down arrow to move it to the desired position. 6 To remove a column, select the column in the Selected Columns list, then click the right arrow to add it to the Available Fields list. 7 When you are finished, click OK to save your changes. Changing the Column Widths You can change column widths in a view by dragging the right or left edge of the column label. KR novell ConsoleOne E = 101. x File Edit View Tools Help @ Dublin @ Internet =) Orem H-Q Facilities E-S Provo El Q Research H-A Sales E-Q San Jose E % Support [8 Users x ||ID Sort e GroupWise View | Object iD [| ]Last Name 8 Research Provo Support Sales Sales Research Support Research Research San Jose Provo Provo Provo San Jose Provo Provo Novell Provo UCGWDOCISYSiproyol GroupWise View 41 Searching in the GroupWise View You can search for a specific entry in a view. The search is performed on the first column. For example, if the Resources view is displayed, you can search for a specific resource based on its object ID. If the Users view (with Last Name Sort selected) is displayed, you can search for a specific user based on the user's last name. With the Users view, if you have First Name Sort or Last Name Sort selected, you can search for a complete user name (both first and last name) by using a comma as a delimiter between the names. A space after the comma is optional. For example, ifthe User view displays first names in the first column and last names in the second column, you can type John,Smith to go directly to that user name. If the columns were reversed, you could use Smith,John. To perform a search: 1 Change to the view you want to search. 2 Select the first entry in the view. 3 Typethe text to search for. As you type text, a text box appears in the lower-right corner of the Group Wise View. KR novell Consoleone É tal x| File Edit View Tools Help GroupWise View Given Name | Last Name [Domain Name|Post Office N..| Object ID | 1 Provo Research User1 - 2 San Jose Support User 2 3 Provo Sales User 3 4 (GroupWise System] w- Dublin #-@ Internet E-Q Orem +) % Facilities [23-53 Provo E Q Research Qa Sales E-Q) San Jose &- Support Provo Sales User 4 Provo Research San Jose Support Provo Research Provo Research UGWDOCISYSiprovol Performing Administrative Tasks from the GroupWise View 42 You can perform many GroupWise administrative tasks from the GroupWise View as well as from the eDirectory View. For example, you can: + Create new objects. + Modify the properties of an object. + Move, rename, or delete an object from the Group Wise system. + Use the Group Wise utilities, system operations, and diagnostic options on the Tools menu. In addition, external objects must be created and managed in the GroupWise View because they are, by definition, external to eDirectory and have no eDirectory context. For example, if you install the GroupWise Internet Agent and want to simplify addressing for your users by adding the Internet as a non-GroupWise domain, you would need to perform the task in the GroupWise View. GroupWise 6.5 Administration Guide System Operations The Group Wise” system operations in ConsoleOne* allow you to perform various tasks to maintain and optimize your Group Wise system. The following sections provide information about the system operations included on the Tools menu (Tools menu > Group Wise System Operations): + “Select Domain” on page 43 + “System Preferences” on page 44 + “eDirectory User Synchronization” on page 49 + “Admin-Defined Fields” on page 50 + “Pending Operations” on page 51 + “Addressing Rules” on page 52 + “Time Zones” on page 52 + “External System Synchronization” on page 55 + “Software Directory Management” on page 57 + “Restore Area Management” on page 61 + “Internet Addressing” on page 61 + “Trusted Applications” on page 62 + “LDAP Servers” on page 63 NOTE: If the majority of the items on the GroupWise System Operations menu are dimmed, you are connected to a secondary domain in a GroupWise system where Restrict System Operations to Primary Domain has been selected under System Preferences. For more information, see “System Preferences” on page 44. Select Domain By default, ConsoleOne must be connected to a Group Wise domain in order for you to administer your Group Wise system. Being connected to a Group Wise domain ensures that information is replicated not only in Novell? eDirectory™ but also in the Group Wise domain and post office databases. You can be connected to any domain in the GroupWise system. As shown in the following example, the domain to which you are connected is indicated by a plug on the domain’s icon. In addition, the connected domain is listed at the bottom of the ConsoleOne window. System Operations 43 mixi File Edit view Tools Help rer# ec & Users yj)! Sort Ed GroupWise View Object ID Last Name User Research Provo #-@ Dublin 1 A User2 2 User Support San Jose € Internet A Usera 3 User Sales Provo Orem M A Usera 4 User Sales Provo -QÀ Facilities Qusers 5 User Research Provo 82 Provo A users 6 User Support San Jose 1 AR Research GG user7 7 User Research Provo E A Sales [gi User 9 g User Research Prova E-Q San Jose + Ga Support E Novell (Provo) NOWDOCISYSiprovol Some administrative tasks require you to be connected to a specific domain while others do not. In general, operations that create new GroupWise objects or delete GroupWise objects require you to be connected to the domain where the object resides. ConsoleOne uses the domains UNC path (Domain object > Group Wise tab > Identification page) to automatically connect you to the correct domain if possible; otherwise, you must manually connect to the domain. Operations that simply modify the properties of an existing object do not require you to be connected to the object’s domain. NOTE: When you connect to a domain on a Linux server, a UNC path is still used but, because it is a Linux server, the first item in the UNC path is interpreted as the Linux server's hostname, followed by the path to the domain directory. To change the domain to which you are connected: 1 In ConsoleOne, click the Tools menu > GroupWise System Operations > Select Domain. {Groupwise Administrator ae xi Domain Path: NGWisysiprova [=| Enter a valid path to a domain database and click OK, or click Cancel to continue. Cancel | 2 Browse to and select the domain directory, then click OK to connect to the domain. NOTE: You can also connect to a domain by right-clicking the domain in the GroupWise View and selecting Connect. System Preferences 44 You can use the GroupWise system preferences to configure the defaults for several GroupWise system settings, including: + Whether to assign the required eDirectory and file system rights to users when you create their GroupWise accounts. By default, rights are assigned automatically. + Whether to use the fully distinguished name or common name for a user's network ID. By default, the fully distinguished name is used. GroupWise 6.5 Administration Guide + The domain to assign as the default domain for any messages whose address cannot be resolved. By default, no domain is assigned. + Whether your Group Wise system allows Busy Search and status tracking information to be returned to users on external Group Wise systems. By default, information is not returned. + Whetherto create a nickname (representing the object’s old address) when moving an object from one post office to another. By default, nicknames are not automatically created. + On Linux, the mount directory where ConsoleOne can find mount points for mounted file systems where domains and post offices are located. To change the system preferences: 1 In ConsoleOne, click the Tools menu > Group Wise System Operations > System Preferences. KE Groupwise System Preferences xi | Default Password Admin Lockout Settings Routing Options External Access Rights Set access rights automatically: C When creating a Groupwise user When creating or modifying objects, for network ID use: E Full Distinguished Name C Common Name F Display DirXML warnings Cancel | Help The GroupWise System Preferences dialog box contains the following tabs: + Admin Preferences: Controls how rights are assigned and what network ID format is used when creating new Group Wise users. Routing Options: Controls default message routing for your Group Wise system. External Access Rights: Controls the access that users on external Group Wise systems have to your GroupWise users’ information. Nickname Settings: Controls what happens when you move a user from one post office to another. Default Password: Assigns a default password for new GroupWise user accounts. Admin Lockout Settings: Controls access to the Group Wise administration functions in ConsoleOne. Linux Settings (Linux Only): Establishes the mount directory where ConsoleOne can find mounted file systems where domains and post offices are located. 2 Click the Admin Preferences tab to modify any of'the following options: System Operations 45 46 | Clee System Preferences 4 x| Default Password Admin Lockout Settings Routing Options External Access Rights Set access rights automatically: C When creating a Groupwise user When creating or modifying objects, for network ID use: ( Full Distinguished Name C Common Name IV Display DirXML warnings Cancel Help Set Access Rights Automatically: Users require specific eDirectory and file system rights in order to use GroupWise (see Chapter 86, “GroupWise User Rights,” on page 1067). Select this option to automatically grant these rights when creating a GroupWise account for users. Appropriate eDirectory object rights enable the GroupWise client to log in to the user’s post office without prompting the user for the post office location (IP address, UNC path, or mapped drive.) Appropriate file system rights enable the GroupWise client to directly access the post office directory rather than use client/server access. When Creating or Modifying Objects, For Network ID Use: Select Full Distinguished Name (for example, paul.engineering.ny) when users’ mailboxes reside on a NetWare® 4. Lx server (or higher) and users have an eDirectory connection to the server where the post office resides. Select Common Name (for example, paul) under the following circumstances: + The users’ mailboxes reside on a NetWare 3.1 server. + The users’ mailboxes reside on a NetWare 4.1x server but users have a bindery emulation connection to the server where the post office resides. + Users’ GroupWise IDs are different from their NetWare IDs. Display DirXML Warnings: The DirXML® Driver for Group Wise provides data integration between GroupWise users and groups in eDirectory. For example, you can have an e-mail account automatically created as soon as an employee is hired. The same driver can also disable an e-mail account when a user is no longer active. If you are using the DirXML Driver for GroupWise, some GroupWise operations that you perform in ConsoleOne® require you to take preliminary actions with the driver. For example, if you recover a deleted account, you need to stop the driver before recovering the account and restart it after the operation is complete. This option enables you to receive a warning message whenever you perform a GroupWise operation in ConsoleOne that is affected by the DirXML driver. The warning message includes instructions about the actions you need to take with the driver before continuing with the Group Wise operation. If you are using the DirXML Driver for GroupWise, we strongly recommend that you enable this option. If you are not using the driver, you can disable the option to avoid receiving unnecessary messages. 3 Click the Routing Options tab to modify any of the following options: GroupWise 6.5 Administration Guide KE Groupwise System Preferences xÍ Nickname Settings | Default Password Admin Preferences Routing Options Admin Lockout Settings External Access Rights Default Routing Domain: D el Clear E For a T MTAs send directly to other GroupWise systems OK Cancel | Help Default Routing Domain: If a domain’s MTA cannot resolve a message’s address, the message is routed to this default domain’s MTA. The default domain’s MTA can then be configured to handle the undeliverable messages. This might involve routing the message to another Group Wise domain or to an Internet address (by performing a DNS lookup). Browse to and select the GroupWise domain you want to use as the default routing domain. Force All Messages to this Domain: This option applies only if you select a default routing domain. Select this option to force all messages to be routed through the default routing domain regardless of the links you have configured for your GroupWise system’s domains. MTAs Send Directly to Other GroupWise Systems: Select this option if you want all MTAs in your GroupWise system to perform DNS lookups and route messages out across the Internet. If you deselect this option, you can designate individual MTAs to perform DNS lookups and route messages to the Internet. 4 Click the External Access Rights tab to modify any of the following options: x Nickname Settings | Default Password | Admin Lockout Settinas Admin Preferences | Routing Options External Access Rights E Allow external status tracking OK Cancel | Help Allow External Busy Search: Select this option to enable users in other GroupWise systems to perform Busy Searches on your Group Wise users’ Calendars. Allow External Status Tracking: Select this option to enable users in other GroupWise systems to receive message status information (such as whether a message has been delivered, opened, and so on) when messages arrive in your GroupWise system. 5 Click the Nickname Settings tab to modify any of'the following options: System Operations 47 KE Groupwise System Preferences ] x| Admin Preferences | Routing Options External Access Rights Nickname Settings Default Password Admin Lockout Settings Auto-create on User Move C Always C Prompt Expire af | oga 0-365), OK Cancel | Help Auto-Create on User Move: A nickname is an alternative address that can be associated with a user. Whenever you move a user, Group Wise can automatically create a nickname with the user's old name and old post office. This enables messages sent to the old name to be automatically forwarded to the user's new address. Select whether or not you want Group Wise to never create nicknames, always create nicknames, or prompt you during the move process.: Expire After: This option applies only if you selected Always or Prompt. If you want the nickname to be automatically removed after a period of time, specify the time period (in days). Valid values range from 1 to 365 days. A setting of 0 indicates that the nickname will not be automatically removed after the specified time period. 6 Click the Default Password tab to modify any of the following options: KE Groupwise System Preferences i x| Admin Preferences | RoutinaOntions | External Access Rights Nickname Settings Default Password Admin Lockout Settings Default password for new users: OK Cancel | Help Default Password for New Users: Specify the default password you want assigned to new GroupWise user accounts. 7 Click the Admin Lockout Settings tab to modify any of the following options: Admin Preferences | Routing Options | External Access Riahts Nickname Settings Default Password Admin Lockout Settings Lock Out Older GroupWise Administration Snapins Minimum Snapin Release Version (000: Minimum Snapin Release Date: ok Cancel | Help Restrict System Operations to Primary Domain: Enable this option to allow an administrator to perform system operations (Tools menu > GroupWise System Operations) only when he or she is connected to the primary domain. All operations, except Select GroupWise 6.5 Administration Guide Domain, Pending Operations, and Restore Area Management are unavailable when connected to a secondary domain. Lock Out Older GroupWise Administration Snap-Ins: Enable this option to prevent administrators from using older GroupWise ConsoleOne snap-ins for accessing Group Wise objects in eDirectory. You can override these system lockout settings for individual domains (Domain object > GroupWise tab > Admin Lockout Settings page). There are four GroupWise snap-ins to ConsoleOne, one for general administration, one for Internet Agent administration, and two for WebAccess administration. The ability to lock out older GroupWise snap-ins starts with Group Wise 6.5. In the Minimum Snap-In Release Version (x.x.x) field, specify the version number of the oldest GroupWise snap-ins that can be used to administer your GroupWise system. In the Minimum Snap-in Release Date, select the date of the oldest GroupWise snap-ins that can be used to administer your GroupWise system. You can specify the minimum version, the minimum date, or both. If you specify both minimums, any administrator using snap-ins that are older than both minimums cannot use the GroupWise snap-ins. However, such an administrator can still run ConsoleOne for other purposes but must update the GroupWise snap-ins before GroupWise administration features are available again. 8 On Linux, click the Linux Settings tab to specify the mount directory. GroupWise System Preferences | Admin Lockout Settings | Linux Settings Nickname Settings y Default Password | Admin Preferences K Routing Options [i Bxternal Access Rights | Linux Mount Directory: hk [imm jai Enter a valid path to the mount directory and click OK, or click Cancel to continue. Mount Directory: Specify the mount directory where ConsoleOne can find mounted file systems where domains and post offices are located. Group Wise databases can be located on Linux servers, NetWare servers, or Windows servers. In the Linux mount directory, you create directories that have the same names as the servers that are mounted to those mount points. You do this for each server where a domain or post office is located that you want to access from ConsoleOne. Group Wise administrators can have different mounts points depending on the workstation or server where they are running ConsoleOne. The mount directory information is stored in a user-specific preferences file (.consoleone/SnapinPrefs.ser in each Group Wise administrator’s home directory). 9 Click OK to save the changes. eDirectory User Synchronization For user information to be displayed in the GroupWise Address Book, it must be stored not only in eDirectory but also in the GroupWise domain and post office databases. If you add or modify System Operations 49 user information using an installation of ConsoleOne with the Group Wise Administrator snap-in, the GroupWise Administrator snap-in adds the user information to the GroupWise databases. However, if you add or modify user information using a ConsoleOne installation that is not running the GroupWise Administrator snap-in, the user information is not changed in the Group Wise databases. This is also true if you add or modify user information using NetWare Administrator, NETADMIN, or NWDS API. To ensure that the user information stored in the Group Wise databases is always synchronized with the user information in eDirectory, you can set up eDirectory user synchronization. For detailed information see “Using eDirectory User Synchronization” on page 598. Admin-Defined Fields 50 eDirectory includes user information that is not associated to Group Wise user fields. For example, a User object includes Postal Address fields named "City," "State," and "Zip Code." By default, these fields are not included as Group Wise fields. However, you can use the Admin-Defined Fields feature to map eDirectory user fields to GroupWise fields so that they can be displayed in the GroupWise Address Book. 1 In ConsoleOne, click the Tools menu > GroupWise System Operations > Admin-Defined Fields to display the Administrator-Defined Fields dialog box. KS Administrator-Defined Fields E xl Current Field Mappings: OK GroupWise field eDirectory Property Admin Defined 1 sunused= Admin Defined 2 Admin Defined 3 sunused> Edit Admin Defined 4 = Admin Defined 5 Admin Defined 6 sunused> Admin Defined 7 sunused> Admin Defined 8 sunused> Admin Defined 9 sunused> Admin Defined 10 sunused> Admin Defined 11 Admin Defined 12 sunused> Admin Defined 13 sunused> Admin Defined 14 sunused> Admin Defined 15 Admin Defined 16 sunused> Admin Defined 17 sunused> Admin Defined 18 sunused> Admin Defined 19 sl 2 Select an Admin-definable field (for example, Admin Defined 1), then click Edit to display the Select eDirectory User Property dialog box. x User Properties: 7 i accessCardNumber = assistantPhone Cancel businessCategory carLicense Help City city co company costCenter costCenterDescription creatorsName departmentNumber Description displayName employeeStatus employeeType Full Name Generational Qualifier | GroupWise 6.5 Administration Guide 3 Select the eDirectory user property that you want to map to the Group Wise field, then click OK to create the mapping. 4 Repeat Step 2 and Step 3 to map additional fields. 5 When finished, click OK to close the Administrator-Defined Fields dialog box. 6 To use the field in the Group Wise Address Book, see “Determining Fields, Field Order, and Sort Order for the Address Book” on page 81. Pending Operations Pending operations are the results of administrative operations, such as adding Group Wise objects and modifying Group Wise object properties, that have not yet been permanently written to the appropriate Group Wise databases. While operations are pending, GroupWise data is not in a stable, consistent state. For example, you can maintain any domain’s objects you have administrative rights over. However, because a secondary domain owns its own objects, any operation you perform from the primary domain on a secondary domain’s objects must be validated by the secondary domain. While the operation is being validated, the Pending Operations dialog box displays object details and the pending operation. While the operation is pending, the object is marked Unsafe in the primary domain database. The Operation field in the dialog box displays the pending operation. An unsafe object can have other operations performed on it, such as being added to a distribution list; however, the object record is not distributed to other domains and post offices in the system until it is marked Safe. All pending operations require confirmation that the operation was either successfully performed or could not be performed. Ifthe operation was successful, the pending operation is removed from the list, the record is marked in the database as Safe, and the record is distributed to all other domains and post offices in your system. If the operation could not be performed, the pending operation remains in the list where you can monitor and manage it. + “Viewing Pending Operations” on page 51 + “Retrying a Pending Operation” on page 51 + “Cancelling a Pending Operation” on page 52 Viewing Pending Operations 1 In ConsoleOne, connect to the domain whose pending operations you want to view (see “Select Domain” on page 43), then click the Tools menu > Group Wise System Operations > Pending Operations. While an operation is being validated, the Pending Operations dialog box displays the object and the operation waiting completion and confirmation. 2 For more detailed information, select the pending operation, then click View. Retrying a Pending Operation 1 Make sure the agents are running for the domain and/or post office where the operation must take place. 2 Inthe Pending Operations dialog box, select the pending operation, then click Retry. System Operations 51 Cancelling a Pending Operation 1 Inthe Pending Operations dialog box, select the pending operation, then click Undo. Addressing Rules You can use the Addressing Rules feature to configure Group Wise so that users can enter shortened forms of e-mail addresses. For more information, see Chapter , “Addressing Rules,” on page 97. Time Zones When you create a domain or post office, you select the time zone in which it is located. This ensures that Group Wise users in other time zones receive Calendar events and tracking information adjusted for local time. The time zone list includes predefined definitions for each time zone. Most time zones include multiple definitions to account for different locations within the time zone. Each time zone definition allows you to specify the Daylight Saving Time dates and bias (1 hour, 30 minutes, etc.). You can modify existing time zone definitions, add new definitions, or delete definitions. + “Modifying a Time Zone Definition” on page 52 + “Adding a Time Zone Definition” on page 53 + “Deleting a Time Zone Definition” on page 55 Modifying a Time Zone Definition 1 In ConsoleOne, click the Tools menu > GroupWise System Operations > Time Zones. KR Configure Time Zones E; xj Time Zones: Close (GMT) Casablanca, Monrovia a (GMT) Greenwich Mean Time; Dublin, Edinburgh, Lisbon, m Add.. (GMT+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienr N (GMT+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague MET (GMT+01:00) Brussels, Copenhagen, Madrid, Paris, Vilnius Delete (GMT+01:00) Sarajevo, Skopje, Sofija, Warsaw, Zagreb (GMT+02:00) Athens, Istanbul, Minsk Help (GMT+02:00) Bucharest (GMT+02:00) Cairo (GMT+02:00) Harare, Pretoria of 4 | > Daylight Saving Time Start Date/Time: Last Sunday of March at 2:00 AM End Date/Time: Last Sunday of October at 3:00 AM 2 Select the time zone to modify, then click Edit to display the Edit Time Zone dialog box. 52 GroupWise 6.5 Administration Guide KRedit Time Zone E xj Time Zone Name: (GMT+02:00) fathens, Istanbul, Minsk Offset from GMT: 2 4 hours 0 E minutes Cancel Abbreviation: [GTB Help [Y Observe Daylight Savings Time Start Day: [Last x| [Sunday y] of [March | at [2:00AM LastDay: [Last x] [Sunday y] ot [October =] at [2:00am Bias: 1 Sours 0 Sfrinutes 3 Modify any of the following fields: Time Zone Name: Provide a name for the time zone definition (for example, some of the major cities in the time zone). We suggest you include a reference (+ or -) to GMT, for example (GMT-07:00). The time zone list is sorted by the GMT offset. Offset from GMT: Enter the hours and minutes that the time zone is offset from Greenwich Mean Time. The offset from GMT keeps your different locations synchronized. For example, if a conference call is scheduled for 4:00 p.m. June 1 in Salt Lake City, the call would appear on a schedule in Adelaide at 8:30 a.m. June 2. If you are in the western hemisphere (west of the Greenwich Meridian and east of the International Date Line) be sure the hour offset is negative (-). If you are in the eastern hemisphere (east of the Greenwich meridian and west of the International Date Line) be sure the hour offset is positive. Abbreviation: Enter an abbreviation for the time zone. For example, the abbreviation for Atlantic Standard Time could be AST; the abbreviation for Atlantic Daylight Time could be ADT. Observe Daylight Saving Time: If the time zone observes daylight saving time, click the Observe Daylight Saving Time box, then fill out the remaining fields: + Start Day: Select the day and time that daylight saving time starts. + Last Day: Select the day and time that daylight saving time ends. + Bias: Select the number of hours and minutes that the clock changes at the daylight saving time start day, such as1 hour or 1 hour 30 minutes. 4 Click OK to save the changes. Adding a Time Zone Definition 1 In ConsoleOne, click the Tools menu > GroupWise System Operations > click Time Zones. System Operations 53 Ka Configure Time Zones E xi Time Zones: = Close (GMT) Casablanca, Monrovia al (GMT) Greenwich Mean Time; Dublin, Edinburgh, Lisbon, Londi Add... (GMT+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vienr Edit (GMT+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague eal. | (GMT+01:00) Brussels, Copenhagen, Madrid, Paris, Vilnius Delete (GMT+01:00) Sarajevo, Skopje, Sofija, Warsaw, Zagreb (GMT+02:00) Athens, Istanbul, Minsk Help (GMT+02:00) Bucharest {GMT+02:00) Cairo (GMT+02:00) Harare, Pretoria xÍ 4 | » Daylight Saving Time Start Date/Time: Last Sunday of March at 2:00 AM End Date/Time: Last Sunday of October at 3:00 AM 2 Click Add to display the Add Time Zone dialog box. KR add Time Zone : -= xi Time Zone Name: (GMT) | Offset from GMT: 0 E hours 0 E| minutes Cancel | Abbreviation: Help | I Observe Daylight Savings Time Start Day: [First *| [Sunday x] of [April »| at [2:004M Last Day: |Last y Bias: 1 hours 0 = fminutes at (2:00AM 3 Fill in the following fields: Time Zone Name: Provide a name for the time zone definition (for example, some of the major cities in the time zone). We suggest you include a reference (+ or -) to GMT, for example (GMT-07:00). The time zone list is sorted by the GMT offset. Offset from GMT: Enter the hours and minutes that the time zone is offset from Greenwich Mean Time. The offset from GMT keeps your different locations synchronized. For example, if a conference call is scheduled for 4:00 p.m. June 1 in Salt Lake City, the call would appear on a schedule in Adelaide at 8:30 a.m. June 2. If you are in the western hemisphere (west of the Greenwich Meridian and east of the International Date Line) be sure the hour offset is negative (-). If you are in the eastern hemisphere (east of the Greenwich meridian and west of the International Date Line) be sure the hour offset is positive. Abbreviation: Enter an abbreviation for the time zone. For example, the abbreviation for Atlantic Standard Time could be AST; the abbreviation for Atlantic Daylight Time could be ADT. Observe Daylight Saving Time: If the time zone observes daylight saving time, click the Observe Daylight Saving Time box, then fill out the remaining fields: + Start Day: Select the day and time that daylight saving time starts. + Last Day: Select the day and time that daylight saving time ends. + Bias: Select the number of hours and minutes that the clock changes at the daylight saving time start day, such as! hour or 1 hour 30 minutes. 4 Click OK to add the definition to the time zone list. 54 GroupWise 6.5 Administration Guide Deleting a Time Zone Definition When you delete a time zone from the list, you can no longer select it for a domain or post office. To delete a time zone: 1 In ConsoleOne, click the Tools menu > Group Wise System Operations > Time Zones. Ka Configure Time Zones E ka Time Zones: Ñ Close (GMT) Casablanca, Monrovia a (GMT) Greenwich Mean Time; Dublin, Edinburgh, Lisbon, Londi Add... (GMT+01:00) Belgrade, Bratislava, Budapest, Ljubljana, Prague (GMT+01:00) Brussels, Copenhagen, Madrid, Paris, Vilnius Delete (GMT+01:00) Sarajevo, Skopje, Sofija, Warsaw, Zagreb (GMT+02:00) Athens, Istanbul, Minsk Help (GMT+02:00) Bucharest I(GMT+02:00) Cairo (GMT+02:00) Harare, Pretoria xÍ 4 | » Daylight Saving Time |(GMT+01:00) Amsterdam, Berlin, Bern, Rome, Stockholm, Vient E Start Date/Time: Last Sunday of March at 2:00 AM End Date/Time: Last Sunday of October at 3:00 AM 2 Select the time zone to remove from the list, click Delete, then click Yes to confirm the deletion. External System Synchronization The External System Synchronization feature lets you automatically synchronize information between your system and an external GroupWise system connected to your system (for information about connecting GroupWise systems, see “Connecting to GroupWise 5.x and 6.x Systems” in the GroupWise 6.5 Multi-System Administration Guide). This simplifies message addressing by enabling your users to select the other system’s users from the Address Book. Otherwise, your users are required to enter the recipient’s full address (userID.post_office.domain or user@host). IMPORTANT: The External System Synchronization feature exists in GroupWise 5.x and 6.x only. Therefore, you can use it to synchronize information between 5.x and 6.x systems only. You cannot use it to synchronize information between 6.x and 4.x or 3.x systems. External System Synchronization lets you control what information (domains, post offices, users, resources, and distribution lists) you send to the external system and what information you want to accept from the external system. Any user, resource, and distribution list information you receive from the external GroupWise system is displayed in the system Address Book. External synchronization must be set up in both GroupWise systems before it can work properly. To set up synchronization so that all future Address Book changes are propagated to external Group Wise systems: 1 In ConsoleOne, click the Tools menu > GroupWise System Operations > External System Synchronization to display the External System Synchronization dialog box. System Operations 55 56 Reguest Help 2 Click Add to display the Add External Group Wise System dialog box. (add External GroupWise System E xj External System Name: [ox] Description: Cancel ay Help External Domain: al Send to External System Receive from External System E Domains E Domains C Post Offices Post Offices C Users [ Users I Resources O Resources E Distribution Lists [ Distribution Lists 3 Fill in the following fields: External System Name: Enter the name of the external Group Wise system. The name needs to match the actual name of that GroupWise system. Description: If desired, enter a description for the external system. This is an optional field. External Domain: Click the External Domain (globe) icon to display a list of the external domains defined in your GroupWise system. Select the external domain that belongs to the external Group Wise system with which you are synchronizing information. Send to External System: Select the information (Domains, Post Offices, Users, Resources, and Distribution Lists) you want sent to the external Group Wise system during synchronization. Only the information that your system owns is sent. For example, if you've connected to another GroupWise system and its information is contained in your Group Wise system as external domains, post offices, users, resources, and distribution lists, that information is not sent. A user, resource, or distribution list from your system is added to the external Group Wise system only ifits domain and post office exist in the external system (as an external domain and post office in that system). Because of this, you*ll want to make sure that the Domains and Post Offices options are selected as well as the desired Users, Resources, and Distribution Lists options. After the initial synchronization takes place, the domains and post offices exist in the external system. You can then choose not to send domain and post office information. However, if you add domains or post offices or change the information for your existing domains and post offices, that information is not sent to the external system until you select Domains and Post Offices again. Receive from External System: Select the information (Domains, Post Offices, Users, Resources, and Distribution Lists) you are willing to receive from the external Group Wise GroupWise 6.5 Administration Guide system. As with sending information, a user, resource, or distribution list is added to your system only ifits domain and post office exist as an external domain and post office in your system. Therefore, you should make sure to select the Domains and Post Offices options for at least the initial synchronization. 4 Click OK to add the external Group Wise system to the list of external systems you are synchronizing information with. Ka External System Synchronization E xÍ External GroupWise Systems: (a Name Description External Domain = Edit Novell, Inc Provo Delete Reguest Help 5 Click Close to save your changes. After External System Synchronization is configured in both GroupWise systems, the two systems exchange information. After the initial synchronization, any time domain, post office, user, resource, or distribution list information in one system changes, the new information is sent to the other system (provided that information is flagged to be sent). Software Directory Management The Software Directory Management feature lets you manage Group Wise software distribution directories. A software distribution directory is simply an image of the Group Wise 6.5 CDs located on a network server. From this network location, you can distribute the Group Wise client software to users or install additional Group Wise software such as the Message Transfer Agent, Post Office Agent, Internet Agent, WebAccess, and Monitor. When you install GroupWise, one software distribution directory is created automatically. Using Software Directory Management, you can create new software distribution directories, update existing software distribution directories, or delete existing software distribution directories. + “Creating a Software Distribution Directory” on page 57 + “Updating a Software Distribution Directory” on page 59 + “Deleting a Software Distribution Directory” on page 60 To view the structure and contents of a software distribution directory, see “Software Distribution Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. Creating a Software Distribution Directory 1 Make sure the directory you want to use as the software distribution directory exists. All distribution subdirectories (tadmin, \agents, \client, and so forth) will be created under this directory. 2 Click the Tools menu > GroupWise System Operations > Software Directory Management to display the Software Distribution Directory Management dialog box. System Operations 57 Software Distribution Directories: Close UNC Path ÜGWDOCISYSigrpwiselsofiware Description: The Software Distribution Directories list includes all software distribution directories defined in your Group Wise system. 3 Click Create to display the Create Software Distribution Directory dialog box. Ki Create Software Distribution Directory EE x Description: Cancel Location UNC Path: AppleTalk Path (optional): UnixPath (optional): I Copy software from: 4 Fill in the following fields: Name: Enter a name to identify the software distribution directory within your GroupWise system. For example, whenever you create a post office, you associate it with a software distribution directory. The software distribution directory’s name, not its location, appears in the list of directories from which you can select. The name can include any characters; there are no restrictions. Description: Enter an optional description for the software distribution directory. You might want to use this description to indicate the software version or to give other pertinent information. Location: In the UNC Path field, enter the location where you want to create the software distribution directory. If you specify a path to a directory that does not exist, ConsoleOne creates the directory for you. The UNC path is also used by GroupWise software (running on Windows* workstations) to locate the software distribution directory when necessary. If you have GroupWise software running on Macintosh* or UNIX* workstations, you can use the optional AppleTalk* Path and UNIX Path fields to specify the directory location from the perspective of the Macintosh and UNIX workstations. 58 GroupWise 6.5 Administration Guide NOTE: On Linux, a Linux Path field is provided instead of the UNIX Path field for use by the GroupWise Cross-Platform client on Linux. Copy Software From: Select this option to copy Group Wise software to the new directory, then choose from the following source locations: + Software Distribution Directory: If you want to copy software from an existing software distribution directory, select this option, then select the software distribution directory. AII directories are copied. + Path: If you want to copy software from a location, such as the Group Wise 6.5 CDs, that is not defined as a software distribution directory in your Group Wise system, select this option, then browse for and select the correct path. 5 Click OK to create the software distribution directory and add it to the list. {software Distribution Directory Management Bese x| Software Distribution Directories: Close Description: 00 | For post offices in the Development domain 6 Click Close to exit the dialog box. Updating a Software Distribution Directory 1 Click the Tools menu > GroupWise System Operations > Software Directory Management to display the Software Distribution Directory Management dialog box. KR software Distribution Directory Management E x| Software Distribution Directories: Close UNC Path UGWDOCISYSigrpwiseisoftware Description: _ The Software Distribution Directories list includes all software distribution directories defined in your GroupWise system. 2 Select the software distribution directory to update, then click Update to display the Update Software Distribution Directory dialog box. System Operations 59 Ki Update Software Distribution Directory x Cancel Help T Force auto-update check by GroupWise components Fill in the following fields: Update by Copying From: Select this option, then choose from the following source locations: + Software Distribution Directory: If you want to copy software from an existing software distribution directory, select this option, then select the software distribution directory. All files and subdirectories are copied. + Path: If you want to copy software from a location, such as the GroupWise 6.5 CDs, that is not defined as a software distribution directory in your GroupWise system, select this option, then browse for and select the correct path. Force Auto-Update Check by GroupWise Components: This option causes the GroupWise Post Office Agent (in client/server access mode) or the GroupWise client (in direct access mode) to check the software distribution directory for a new version of the GroupWise client; ifa new version is found, the next time a user starts the GroupWise client, he or she is prompted to update the client software. The Force Auto-Update Check by GroupWise Components option is automatically selected when you select the Update by Copying From option. If you don't select the Update by Copying From option, you can still select this option and then click OK. This forces an auto- update check of the client software version, but the software distribution directory’s files are not updated. To determine the current client software version in ConsoleOne, click Tools > GroupWise Diagnostics > Record Enumerations to display a list of records types in the domain database. From the drop-down list, select Areas by ID, select a software distribution directory, then click Info to list detailed information about the software distribution directory. Check the Software Version field to determine the GroupWise client software version. 4 Click OK to update the directory’s software. Deleting a Software Distribution Directory 60 When you delete a software distribution directory, the directory is removed from the file system and no longer appears in the list of software distribution directories. Any post office that was assigned to that software distribution directory defaults to the first directory in the list. To delete a software distribution directory: 1 Click the Tools menu > GroupWise System Operations > Software Directory Management to display the Software Distribution Directory Management dialog box. GroupWise 6.5 Administration Guide Ka software Distribution Directory Management Software Distribution Directories: Close UNC Path ÜGW/DOCISYSigrpwiselsofiware Novell Description: The Software Distribution Directories list includes all software distribution directories defined in your GroupWise system. 2 Select the directory to delete, click Delete, then click Yes to confirm the deletion. Restore Area Management A restore area is a location you designate to hold a backup copy of a post office so that you or GroupWise client users can access it to retrieve mailbox items that are unavailable in your live GroupWise system. The Restore Area Management feature lets you manage your Group Wise systems restore areas. Detailed information for using restore areas is provided in “Restoring Deleted Mailbox Items” on page 381. Information about backing up post offices is provided in “Backing Up a Post Office” on page 375. Internet Addressing By default, Group Wise uses a proprietary address format consisting of a user's ID, post office, and domain (userID.post_office.domain). However, if you have the Group Wise Internet Agent installed (see “Internet Agent” on page 659), Group Wise also supports native Internet-style addressing consisting of a username and Internet domain name (username) Internet domain name). You use the Internet Addressing feature to do the following: + Define Internet domain names for your Group Wise system. You can have one or more domain names (for example, novell.com, gw.novell.com, and support.novell.com). + Set up the default Internet address format for use when displaying user addresses in the GroupWise Address Book and sent messages. There are six formats that can be assigned at the system, domain, post office, or user level. In addition, there is a free-form format that can be used at the user level. + Designate the address formats that can be used to address messages to your Group Wise users. There are five possible formats to choose from. You can allow all five formats, or only one. + Specify the default Internet Agent to be used when sending messages from your Group Wise system to the Internet. This becomes your system’s default Internet Agent for outbound messages sent from all domains; however, if you have multiple Internet Agents, you can override this setting by assigning Internet Agents at the domain level. For detailed information about Internet addressing, see Chapter , “Internet-Style Addressing,” on page 87. System Operations 61 Trusted Applications Trusted applications are third-party programs that can log into Post Office Agents (POAs) in order to access GroupWise mailboxes. Trusted applications might perform such services as virus scanning or content filtering within your GroupWise system, relying on Message Transfer Agents (MTAs) for message transport. The Trusted Application feature allows you to edit and delete trusted applications that are available in your Group Wise system. For information about creating and installing trusted applications, search for GroupWise Trusted Application API at the Novell Developer Kit (NDK) Web site (http://developer.novell.com/ndk). ¢ “Editing a Trusted Application” on page 62 + “Deleting a Trusted Application” on page 63 Editing a Trusted Application You can edit a trusted application’s description, IP address, port, and SSL settings. 1 Click the Tools menu > GroupWise System Operations > Trusted Applications to display the Configure Trusted Applications dialog box. Käi Configure Trusted Applications xÍ Trusted Applications: GREG [Trusted Application 1 [Trusted Application 10 [Trusted Application 2 Delete ¡Trusted Application 3 Beste | ‘Trusted Application 4 Help ¡Trusted Application 5 Trusted Application 6 [Trusted Application 7 [Trusted Application 8 [Trustad Snnlicatinn A = 2 In the Trusted Applications list, select the application you want to edit, then click Edit. [edit Trusted Application E x| Name: Trusted Application 1 Description: Trusted application for authentication number 1 TP Requires SSL Di TCP/IP Address: fwww.novell.com:1235 ok Cancel Help 3 Modify any of the following fields: Name: This field displays the trusted application’s name. You cannot change the name. Description: Enter a description for the trusted application. Requires SSL: Select this option to require a secure (SSL) connection between the trusted application and MTAs or POAs. Provides Message Retention Service: Select this option if the purpose of the trusted application is to retain GroupWise user messages by copying them from GroupWise mailboxes (user databases) into another storage medium. 62 GroupWise 6.5 Administration Guide Turning on this option only defines the trusted application as a Message Retention Service application. In order for Group Wise mailboxes to support message retention, you must turn on the Enable Message Retention Service option in the GroupWise Client Options (Tools menu> Group Wise Utilities> Client Options > Environment > Retention). You can enable individual mailboxes, all mailboxes in a post office, or all mailboxes in a domain by selecting the appropriate object (User, Post Office, or Domain) before selecting GroupWise Client Options. For more information, see Chapter 74, “Setting Defaults for the GroupWise Client Options,” on page 973. For information about the complete process required to use a trusted application for message retention, see Chapter 33, “Retaining User Messages,” on page 387. TCP/IP Address: If you want to restrict the location from which the trusted application can run, enter the IP address of the server from which the application can run. To do so, click the Edit (pencil) button, then enter the IP address or DNS hostname of the trusted application’s server. If you want to allow the trusted application to be run from any server, do not enter an IP address or DNS hostname. For information about how the POA handles trusted application processing of message files, see “Configuring Trusted Application Support” on page 466. Deleting a Trusted Application 1 Click the Tools menu > GroupWise System Operations > Trusted Applications to display the Configure Trusted Applications dialog box. Käi configure Trusted Applications x| Trusted Applications: car cl Trusted Application 1 2 Trusted Application 10 Trusted Application 2 Delete Trusted Application 3 Trusted Application 4 ¡Trusted Application 5 Trusted Application 6 Trusted Application 7 Trusted Application 8 Trustad Annliratinn A Y Help 2 In the Trusted Applications list, select the application you want to delete, click Delete, then click Yes to confirm the deletion. LDAP Servers The LDAP Servers feature lets you define the LDAP servers you want used for LDAP authentication to GroupWise mailboxes. For information about defining LDAP servers, see “Providing LDAP Server Configuration Information” on page 461. For information about using LDAP for user authentication to GroupWise mailboxes, see “Providing LDAP Authentication for GroupWise Users” on page 461. System Operations 63 64 GroupWise 6.5 Administration Guide GroupWise Utilities The Group Wise” utilities in ConsoleOne* are used to perform various maintenance and configuration tasks for your Group Wise system. The following sections provide information about the system utilities included on the Tools menu (Tools menu > Group Wise System Utilities): + + + + + “Mailbox/Library Maintenance” on page 66 “System Maintenance” on page 66 “Backup/Restore Mailbox” on page 66 “Recover Deleted Account” on page 66 “Client Options” on page 66 “Expired Records” on page 67 “Email Address Lookup” on page 67 “Synchronize” on page 67 “User Move Status” on page 68 “Link Configuration” on page 68 “Document Properties Maintenance” on page 68 “Import” on page 68 “Export” on page 71 “New System” on page 72 “GW / eDirectory Association” on page 73 In addition to the system utilities included on the Tools menu in ConsoleOne, Group Wise includes the following standalone utilities: + + + “Group Wise Check Utility (GWCheck)” on page 78 “Group Wise Target Service Agent (GWTSA)” on page 78 “Group Wise Backup Time Stamp Utility (GWTMSTMP)” on page 78 “GroupWise Database Copy Utility (DBCOPY)” on page 78 “Group Wise Generate CSR Utility (GWCSRGEN)” on page 79 GroupWise Utilities 65 Mailbox/Library Maintenance You can use the Mailbox/Library Maintenance utility to check the integrity of and repair user/ resource, message, and library databases, and to free disk space in post offices. For detailed information and instructions, see Chapter 27, “Maintaining User/Resource and Message Databases,” on page 353, Chapter 28, “Maintaining Library Databases and Documents,” on page 359, and Chapter 30, “Managing Database Disk Space,” on page 367. System Maintenance You can use the System Maintenance utility to check the integrity of and repair domain and post office databases. For detailed information and instructions, see Chapter 26, “Maintaining Domain and Post Office Databases,” on page 345. Backup/Restore Mailbox You can use the Backup/Restore Mailbox utility to restore an individual user’s Mailbox items from a backup copy of the post office database. For detailed information and instructions, see Chapter 32, “Restoring GroupWise Databases from Backup,” on page 379. Recover Deleted Account If you have a reliable backup procedure in place, you can use the Recover Deleted Account utility to restore recently deleted user and resource accounts from the backup version of the Group Wise primary domain database. After the account has been re-created, you can then restore the corresponding mailbox and its contents to complete the process. Membership in distribution lists and ownership of resources must be manually re-established. For complete instructions, see “Recovering Deleted Group Wise Accounts” on page 384. Client Options 66 You can use the Client Options utility to set the default options (preferences) for the GroupWise client. You can set options at the domain, post office, oruser level. Options set at the domain level apply to all users in the domain, and options set at the post office level apply to all users in the post office. If you don't want users to change options, you can lock the options. NOTE: The GroupWise Cross-Platform client does not yet support all of the client options that can be set in ConsoleOne. For detailed information and instructions, see Chapter 74, “Setting Defaults for the Group Wise Client Options,” on page 973. GroupWise 6.5 Administration Guide Expired Records You can use the Expired Records utility to view and manage the Group Wise user accounts that have an expiration date assigned to them. For detailed information and instructions, see Chapter , “Removing Group Wise Accounts,” on page 215. Email Address Lookup You can use the Email Address Lookup utility to search for the Group Wise object (User, Resource, Distribution List) that an e-mail address is associated with. You can then view the object’s information. 1 In ConsoleOne, click the Tools menu > GroupWise Utilities > Email Address Lookup to display the Email Address Lookup dialog box. | CEE Address Lookup E x Enter an email address to look up and press search. ott Domain Name Post Office Name Object ID Object Type 2 Inthe Email Address field, enter the e-mail address. You can enter the username only (for example, jsmith) or the entire address (for example, jsmith@novell.com). 3 Click Search. All objects whose e-mail address match the one you entered are displayed. 4 If desired, select an object, then click Info to see details about the object. Synchronize Group Wise automatically replicates information (domain, post office, user, resource, and so forth) to all domain and post office databases throughout your GroupWise system. This ensures that the information in each database is synchronized. Situations might occur, however, that result in information not being replicated to all domain and post office databases. If you think that some information has not been replicated correctly, you can cause the information to be replicated again so that it becomes synchronized throughout your entire GroupWise system. For example, if you notice that a user’s information is incorrect in the Address Book, you can synchronize that user’s eDirectory User object so that his or her information is replicated to all domain and post office databases again. For detailed information and instructions, see Chapter 29, “Synchronizing Database Information,” on page 363. GroupWise Utilities 67 User Move Status You can use the User Move Status utility to track progress as you move users from one post office to another. Using the User Move Status utility, you can: + List users that are currently being moved and filter the list by domain, post office, and object. + View the current status of the move for each object and see any errors that have occurred. + Immediately retry a move where some of the information on the user inventory list failed to arrive at the destination post office. By default, the POA retries automatically every 12 hours for seven days to move all the information included on the user inventory list. + Stop the POA from continuing its automatic retries. + Restart (from the beginning) a move that has stopped before successful completion. + Refresh the list to display current move status and clear completed moves from the list. For more information, see “Monitoring User Move Status” on page 203. Link Configuration Group Wise domains and post offices must be properly linked in order for messages to flow throughout your Group Wise system. You can use the Link Configuration utility to ensure that your domains and post offices are properly linked and to optimize the links if necessary. For detailed information and instructions, see Chapter 10, “Managing the Links between Domains and Post Offices,” on page 131. Document Properties Maintenance Import Each document stored in the Group Wise Document Management Services (DMS) has properties associated with it. These properties identify the document, determine its disposition (archive, delete, keep), set its level of security, and provide information for locating it in searches. Certain document properties are standard in Group Wise. You can also customize DMS for your organization by defining additional properties. For detailed information and instructions, see “Customizing Document Properties” on page 306. NOTE: On Linux, Document properties maintenance is not available in ConsoleOne. The Group Wise Import utility reads an ASCII-delimited text file created by the Group Wise Export utility or by a third-party export, and creates Novell? eDirectory™ and Group Wise objects with attributes from the file. The Import utility supports most eDirectory classes (including extensions) and GroupWise classes. You can specify the delimiters, eDirectory contexts, and file field positions to use during import. An important use of the Import utility is to give Group Wise accounts to new or existing eDirectory users. IMPORTANT: The Import utility is not included on the GroupWise 6.5 CDs. You can download the Import/ Export utility from TID 2960897 in the Novell Support Knowledgebase (http://support.novell.com/search/ kb_index.jsp). To install the Import/Export utility, follow the instructions provided with the download. The Import/ Export utility is not available for use on Linux. To import objects into Group Wise, the following conditions must be met: 68 GroupWise 6.5 Administration Guide + You must create an ASCII-delimited text file by using the Group Wise Export utility or another export utility. + The destination context for each eDirectory object must already exist. The Group Wise Import utility supports creating organizational units. Ifa large portion of'a tree needs to be reconstructed to support the objects, you can import organizational units before importing the objects. To import objects into Group Wise: 1 In ConsoleOne, select the eDirectory tree to which the objects will be imported, click the Tools menu > Group Wise Utilities > Import to display the Group Wise Import dialog box. x EE | Cancel Parent Import File: = | El Help Attributes: File Fields: >] Delimiters... Ka] | = Mandatory attribute Starting Destination Context: Configuration: [Root] El Load... I Skip the first line of the import file Gna 2 Ifyou have previously defined and saved a configuration file, click Load to fill in the fields from the configuration files, then click Run to perform the import. or Fill in the fields in the Import Dialog box. NDS/Group Wise Class: Select this option to import objects belonging to an eDirectory class or to a GroupWise-related eDirectory class. Choose the class from the list. GroupWise Class: Select this option to import objects belonging to a GroupWise class not represented in eDirectory. Choose external user, external domain, external post office, Document-Version, or Lookup Entry from the list Parent: If you are importing objects that belong to a GroupWise-related eDirectory class or a Group Wise-only class, the parent attribute is required unless: + The class is the eDirectory User class, in which case the object can be optionally associated with Group Wise by specifying a value here. + The value is in the import file and is explicitly imported by your positioning the NGW: Post Office attribute in the File Fields list box, explained below. In this case, if the value obtained from the file is blank, the Post Office field value, if any, is used. Import File: Specify the full path and file name of the ASCII text file. Attributes / File Fields: This list displays the attributes of the selected class. Move the attributes to correspond to the fields in the ASCII text file to the File Fields list. GroupWise Utilities 69 3 Some attributes are marked with an exclamation point (!), indicating that a value for that attribute must exist for a successful import. The import also reguires a value for either the object name or distinguished name. Starting Destination Context: Specify the destination eDirectory context for the objects to be imported. If DN or Context from Root is selected as an import field, the value in this field is ignored because both DN and Context from Root specify the destination context. An imported object’s position in the tree can be constructed in a flexible manner using the Context from Root, Context from Starting, DN, and Object Name class attribute fields and the Starting Destination Context field. The following combinations are valid: DN Each object's name and context are found in this field value. Object Name + Each object name in the Object Name field is added to the context Starting Destination entered in Starting Destination Context. Context Object Name + Each object name in the Object Name field is added to the context Context from Starting + obtained by concatenating the value in the Context from Starting field Starting Destination and the value entered in Starting Destination Context. Context Object Name + Each object name in the Object Name field is added to the context Context from Root read from the Context from Root field. Skip the First Line of the Import File: This directs the import to skip the first line if it contains the attribute names. Delimiters: Accept the defaults shown or change the delimiters to match those used by the export file. For more information, see “Delimiters” on page 70. For convenience, save the configuration for later user. See “Loading or Saving a Configuration File” on page 70. 4 Click Run to perform the import. An import.log file is created in the same directory as the import file and contains a list of the imported objects. Loading or Saving a Configuration File Delimiters An import or export configuration can be saved and loaded, saving you the trouble of manually filling in the fields for multiple imports or exports. A configuration saved from an export can be loaded for an import, helping ensure that the file field positions, for example, correspond for both the import and export. Delimiters are used in ASCII text files to separate items that represent fields and records in imported or exported data. Default delimiters are associated with each delimiter type. A delimiter can be set to None, but if so, and the export encounters a condition requiring a delimiter, the export reports an error. Between Fields: This delimiter is placed between each field. 70 GroupWise 6.5 Administration Guide Export Around Each Field: Use this delimiter to indicate the beginning and end of each field. After Each Record: This delimiter is placed at the end of each record. Between Values (Multi-Value Fields): Use this delimiter to separate the values in a multi-valued field. For example, an attribute such as "Group Membership" can have one or more values. Each Group Membership value is delimited by the multi-value field delimiter. Between Elements (Multi-Element Values): Use this delimiter to separate the elements of'a multi-element value. For example, an attribute having the syntax of SYN OBJECT. ACL has three elements: the protected attribute name, the subject name, and the privileges. Before Literal Characters: When you import an ASCII file created by a third-party export program, precede each literal character that is also a delimiter with the Before Literal Characters delimiter. If you use the Around Each Field delimiter, you do not need to precede literal characters within the field with the Before Literal Character delimiter. The Group Wise Export utility reads eDirectory and Group Wise object information from Group Wise databases and creates an ASCII-delimited text file containing the object attributes. The Export utility supports most eDirectory classes (including extensions) and Group Wise classes. You can specify the delimiters, eDirectory contexts, and file field positions during export. IMPORTANT: The Export utility is not included on the GroupWise 6.5 CDs. You can download the Import/ Export utility from TID 2960897 in the Novell Support Knowledgebase (http://support.novell.com/search/ kb_index.jsp). To install the Import/Export utility, follow the instructions provided with the download. The Import/ Export utility is not available for use on Linux. To export objects from Group Wise: 1 In ConsoleOne, select the eDirectory tree that contains the GroupWise objects you want to export, click the Tools menu > GroupWise Utilities > Export to display the GroupWise Export dialog box. Li x € ~ = == = == = Cancel Parent Export File: y ] El Help Attributes: Eile Fields: [>] Delimiters... Kal | = Mandatory attribute Starting Context: Configuration: [Root] El T Export from subordinate contexts Load... T Put attribute names in first line Save... I” Create file in WordPerfect format 2 If you have previously defined and saved a configuration, click Load to fill in the fields from the configuration file, then click Run to perform the export. or GroupWise Utilities 71 Fill in the fields in the Export dialog box. NDS/Group Wise Class: Select this option to export objects belonging to an eDirectory class or to a Group Wise-related eDirectory class. Choose the class from the list. GroupWise Class: Select this option to export objects belonging to a Group Wise class not represented in eDirectory. Choose external user, external domain, external post office, Document- Version, or Lookup Entry from the list. Parent: If you are exporting objects that belong to a Group Wise-related eDirectory class or a Group Wise-only class, and that class has a parent attribute, post office, or domain, this field allows you to export objects having only the parent attribute value you enter. The object selection process is still subject to the values in Starting Context, explained below, and the Export from Subordinate Contexts check box. Export File: Specify the full path and file name of the ASCII text file. Attributes / File Fields: This list displays the attributes of the selected class. Move the attributes to correspond to the fields in the ASCII text file to the File Fields list. Some attributes are marked with an exclamation point (!), indicating that a value for that attribute must exist. Starting Context: Specify the eDirectory context from which to begin the export. If the Export from Subordinate Contexts list box is checked, objects belonging to contexts subordinate to the context entered here is also exported. Export from Subordinate Contexts: Check this box to cause objects in subordinate contexts to be exported. If this box is left unchecked, only those objects in the immediate Starting Context context are exported. Put Attribute Names in First Line: Check this box to direct the export to put the attribute names as a comment in the first line of the export file. Create the File in WordPerfect Office Notebook Format: If you use this option, you might also want to check Put Attribute Names in First Line to permit WordPerfect* to display the attribute names for each merge field. Delimiters: Accept the defaults shown or change the delimiters. For more information, see “Delimiters” on page 70. 3 Click Run to perform the export. New System 72 You can use the New System utility to create a new GroupWise system. The process for creating a new GroupWise system is similar to the process of creating your initial Group Wise system (see “Installing a Basic Group Wise System” in the GroupWise 6.5 Installation Guide), except that you don’t install the software from the GroupWise 6.5 or GroupWise 6.5 for Linux CDs. Instead, during creation of the new system, you are asked to specify an existing software distribution directory to use in the new system. If you don’t want to share software distribution directories between systems, you should create a new distribution directory. For information about creating software distribution directories, see “Software Directory Management” on page 57. GroupWise 6.5 Administration Guide Check eDirectory Schema (Linux Only) Group Wise systems include Group Wise-specific objects that are not available in eDirectory until the eDirectory schema for your eDirectory tree has been extended for these objects. Schema extension takes place automatically when you create a GroupWise system using the GroupWise Setup Advisor. In the Linux version of ConsoleOne, you can check an eDirectory tree to determine whether its schema has been extended for GroupWise. In the Linux version of ConsoleOne: 1 Select a tree to check. 2 Click Tools > GroupWise Utilities > Check eDirectory Schema. If the eDirectory tree has not yet been extended for GroupWise, the eDirectory Schema Extension dialog box lists the changes that are required for GroupWise. eDirectory Schema Extension The eDirectory schema for the selected tree is not properly modified for use with GroupWise. eDirectory Schema Changes lada Attribute: NGW: Carbon Copy Member = Add Attribute: NGW: Blind Copy Member Add Attribute: NGW: GroupWise ID Add Attribute: NGW: Location Add Attribute: NGW: Language Add Attribute: NGW: Type Add Attribute: NGW: Time Zone ID Add Attribute: NGW: File ID Add Attribute: NGW: Version Add Attribute: NGW: Network Type «| Would you like to update the eDirectory schema at this time? | xes || no || Het | 3 Click Yes to extend the schema for GroupWise so that you can create GroupWise objects in the selected tree. or Click No if you decide you do not want to be able to create GroupWise objects in the selected tree. If the schema of the tree has already been extended for GroupWise objects, a messages notifies you of this and you can immediately create new GroupWise objects in the selected tree. GW / eDirectory Association The GW / eDirectory Association menu includes the following options: + + + + “Graft GroupWise Objects” on page 74 “Invalid Associations” on page 74 “Associate Objects” on page 76 “Disassociate Group Wise Attributes” on page 77 “Convert External Entity to User” on page 77 “Convert User to External Entity” on page 78 GroupWise Utilities 73 Graft GroupWise Objects You can use the Graft Group Wise Objects utility to create Group Wise objects in the eDirectory tree from the information in your Group Wise domain database. The utility creates Domain, Post Office, and Gateway objects as well as User, Resource, and Distribution List objects. When grafting Group Wise user information from the Group Wise database into eDirectory, you can create a new User object and assign the Group Wise user information (account) to the User object, or you can match the GroupWise user information to an existing User object. Grafting Group Wise objects from the Group Wise database into eDirectory can be useful in the following situations: + The Group Wise database includes information that is not included in eDirectory. + You want to move GroupWise information (domains, post offices, gateways, users, or resources) from one eDirectory tree to another. To graft Group Wise objects: 1 In ConsoleOne, select a container in the eDirectory view. 2 Click the Tools menu > Group Wise Utilities > GW / eDirectory Associations > Graft Group Wise Object to display the Graft Group Wise Objects dialog box. KE Graf Groupwise objects x Graft GroupWise Objects Novell. This advisor helps you create GroupWise objects in eDirectory from the information inthe GroupWise directory (domain © database). 48 Which GroupWise objects do you want to graft? 16 Domains, post offices, and gateways C Users, resources, distribution lists, and libraries 3 Follow the on-screen prompts. If you need information about a dialog box, click the Help button. Invalid Associations 74 Normally, a Group Wise object in eDirectory points to corresponding information in the Group Wise domain database. In turn, the information in the Group Wise domain database points back to its corresponding object in eDirectory. Occasionally, a situation might arise where information in the GroupWise domain database no longer points to the same eDirectory object that points to it. This results in an invalid association between the information in the two directories. You can use the Invalid Associations utility to correct invalid associations between information in the Group Wise domain database and eDirectory. GroupWise 6.5 Administration Guide To check for invalid associations: 1 Inthe eDirectory View in ConsoleOne, select the container whose objects you want to check for invalid associations (for example, an Organization, Organizational Unit, Domain, or Post Office). 2 Click the Tools menu > Group Wise Utilities > GW / eDirectory Associations > Invalid Associations to display the Invalid Associations dialog box. {Invalid Associations E | X —— I II Below is a list of the invalid associations of GroupWise. Select the eDirectory object(s) to disassociate or delete. TII l- Object in question Il- GroupWise object lll- Linked to object IGWDOC TREE/Orem.Gr... |Orem CORP TREE/Orem.novell GWDOC_TREE/Facilities...|Orem.Facilities CORP_TREE/Facilities.n.. The object in column | has an invalid association to the GroupWise object in column Il. The GroupWise abject is currently associated to the object in column Ill. Disassociate Delete Cancel | Help The dialog box lists each invalid association for the objects in the selected container. The dialog box fields are described below: + Object in Question (Column D): This field lists the eDirectory object that has an invalid association to a Group Wise object. The eDirectory object points to the GroupWise object listed in column II, but the GroupWise object, according to the GroupWise domain database, does not point back to the eDirectory object. + GroupWise Object (Column II): This field lists the GroupWise object to which the eDirectory object listed in column I is associated. + Linked to Object (Column III): This field lists the eDirectory object to which the Group Wise object listed in column II has a valid association. 3 To remove the invalid association by disassociating the eDirectory object in Column I with the GroupWise object in Column II, select the association, then click Disassociate. 4 To remove the invalid association by deleting the eDirectory object listed in Column I, select the association, then click Delete. GroupWise Utilities 75 Associate Objects You can use the Associate Objects utility to associate Group Wise information with an eDirectory object. For example, if you delete a user's eDirectory account but not his or her Group Wise account, the user's Group Wise information is retained as a Group Wise External User object in the Group Wise database and can be viewed in the GroupWise View. You can then associate the Group Wise External User object with another eDirectory User object. In essence, you are moving the Group Wise information from one eDirectory User object to another. In some circumstances, it is possible for the link between an eDirectory User object and its Group Wise information to be lost. If this occurs, the Group Wise information, which still exists in the GroupWise database, appears as a GroupWise External User object in the Group Wise View. You can use the Associate Objects utility to reassociate the GroupWise information with the eDirectory User object. The Associate Objects utility can be used to associate the following objects: + GroupWise User or External User objects with eDirectory User objects + GroupWise External Entity objects with eDirectory External Entity objects Associating GroupWise User or External User Objects with eDirectory User Objects 76 To associate a GroupWise User or External User object with an eDirectory User object: 1 In the GroupWise View in ConsoleOne, select the GroupWise User or External User object you want. or In the eDirectory View, select the eDirectory User object you want. 2 Click the Tools menu > GroupWise Utilities > GW / eDirectory Associations > Associate Objects. 3 Ifyou selected a Group Wise User or External User object in Step 1, select the eDirectory User object you want to associate with it. or If you selected an eDirectory User object in Step 1, select the GroupWise User object you want to associate with it. 4 Click OK to create the association. If the eDirectory User object is already associated with another GroupWise object, you receive a warning message indicating this. If you continue, the eDirectory User object is associated with the selected GroupWise object and its association with the other Group Wise object removed. If the GroupWise User or External User object is already associated with another eDirectory User object, you receive a warning message indicating this. If you continue, the Group Wise User object is associated with the selected eDirectory object and its association with the other eDirectory object removed. GroupWise 6.5 Administration Guide Associating GroupWise External Entity Objects with eDirectory External Entity Objects To associate a Group Wise External Entity object with an eDirectory External Entity object: 1 In the Group Wise View in ConsoleOne, select the GroupWise External Entity object you want. or In the eDirectory View, select the eDirectory External Entity object you want. 2 Click the Tools menu > GroupWise Utilities > GW / eDirectory Associations > Associate Objects. 3 If you selected a GroupWise External Entity object in Step 1, select the eDirectory External Entity object you want to associate with it. Or If you selected an eDirectory External Entity object in Step 1, select the Group Wise External Entity object you want to associate with it. 4 Click OK to create the association. If the eDirectory External Entity object is already associated with another Group Wise object, you receive a warning message indicating this. If you continue, the eDirectory External Entity object is associated with the selected Group Wise object and its association with the other Group Wise object removed. If the GroupWise External Entity object is already associated with another eDirectory External Entity object, you receive a warning message indicating this. If you continue, the Group Wise External Entity object is associated with the selected eDirectory object and its association with the other eDirectory object removed. Disassociate GroupWise Attributes You can use the Disassociate GroupWise Attributes utility to disassociate Group Wise information from an eDirectory User object. This results in two separate eDirectory objects: + The User object, which no longer includes any GroupWise information. + A GroupWise External User object, which represents the user's record in the GroupWise database and is displayed only in the GroupWise View. The External User object allows the user to continue to have access to GroupWise and also enables you to graft the user record to another eDirectory User object. For more information, see “Graft GroupWise Objects” on page 74. To disassociate the GroupWise attributes from an eDirectory User object: 1 In ConsoleOne, select the User object whose Group Wise attributes you want to remove. 2 Click the Tools menu > GroupWise Utilities > GW / eDirectory Associations > Disassociate GroupWise Attributes. Convert External Entity to User You can use the Convert External Entity to User utility to convert a GroupWise External Entity object to an eDirectory User object. 1 In ConsoleOne, select the GroupWise External Entity object that you want to convert to an eDirectory User object. GroupWise Utilities 77 2 Click the Tools menu > Group Wise Utilities > GW / eDirectory Associations > Convert External Entity to User. 3 Click Yes to confirm that you want the conversion performed. Convert User to External Entity You can use the Convert User to External Entity utility to convert a User object to a Group Wise External Entity object. 1 In ConsoleOne, select the User object that you want to convert to an Group Wise External Entity object. 2 Click the Tools menu > Group Wise Utilities > GW / eDirectory Associations > Convert User to External Entity. 3 Click Yes to confirm that you want the conversion performed. GroupWise Check Ütility (GWCheck) Group Wise Check is a standalone version of the ConsoleOne Mailbox/Library Maintenance utility. Like the Mailbox/Library Maintenance utility, GroupWise Check checks and repairs GroupWise user, message, library, and resource databases. However, in addition to checking post office, user, and library databases, it also checks users’ remote, caching, and archive databases. For information about using Group Wise Check, see “GroupWise Check” on page 391. GroupWise Target Service Agent (GWTSA) The Group Wise Target Service Agent (GWTSA) works with software backup programs to provide reliable backups of a running GroupWise system. For information about using the GroupWise Target Service Agent, see “GroupWise Target Service Agent” on page 399. GroupWise Backup Time Stamp Utility (GWTMSTMP) The Group Wise Backup Time Stamp utility (GWTMSTMP) can be used to place a time stamp on a Group Wise user database to indicate the last time the database was backed up. If a user deletes an item from his or her mailbox and purges it from the Trash, the item is only deleted from the user’s database if the time stamp shows that the item would have already been backed up. Otherwise, the item remains in the user’s database until the database is backed up, at which time it is deleted from the working database. For information about using the GroupWise Backup Time Stamp utility, see “GroupWise Time Stamp Utility” on page 405. GroupWise Database Copy Utility (DBCOPY) The Group Wise Database Copy utility (DBCOPY) copies files from a live GroupWise system to a static location for backup. During the copy process, DBCOPY prevents the files from being modified, using the same locking mechanism used by other GroupWise programs that access 78 GroupWise 6.5 Administration Guide databases. This ensures that the backed-up versions are consistent with the originals even when large databases take a substantial amount of time to copy. For information about using the Group Wise Database Copy utility, see “Group Wise Database Copy Utility” on page 412. GroupWise Generate CSR Ütility (GWCSRGEN) To provide secure communication through an SSL (Secure Socket Layer) connection, the Group Wise Agents (MTA, POA, and Internet Agent) require access to a server certificate and private key. You can use the Group Wise Generate CSR utility (GWCSRGEN) to generate a Certificate Signing Reguest (CSR) file and a Private Key file. The CSR file, which is BASE64 encoded, contains the information reguired for a Certificate Authority (CA) to issue you a server certificate. This server certificate, when paired with the private key generated by the Group Wise Generate CSR utility, enables Group Wise agents to use SSL connections. For information about SSL and certificates, see “Server Certificates and SSL Encryption” on page 1041. GroupWise Utilities 79 80 GroupWise 6.5 Administration Guide GroupWise Addressing + “Address Book” on page 81 + “Internet-Style Addressing” on page 87 + “Addressing Rules” on page 97 + “Wildcard Addressing” on page 100 Address Book The Group Wise” Address Book contains information about all the addressable objects (users, resources, and distribution lists) that have been defined for your GroupWise system. Using the Address Book, Group Wise users can address items (messages, appointments, and so forth) or look up information about a user, resource, or distribution list. You can determine how information is displayed in the Address Book, control the visibility of users, resources, and distribution lists in the Address Book, and update information when it gets out of sync. The following sections provide details: + “Determining Fields, Field Order, and Sort Order for the Address Book” on page 81 + “Controlling Object Visibility in the Address Book” on page 86 + “Updating Address Book Information” on page 87 NOTE: In addition to the administrator-controlled changes you can make to the Address Book, GroupWise users can make individual changes such as creating personal address books, sharing personal address books, and accessing LDAP address books. For information about the Address Book functionality available to users, see: - “Using the Address Book” in the GroupWise 6.5 Windows Client User Guide - “Using the Address Book” in the GroupWise 6.5 WebAccess Client User Guide - “Using the Address Book” in the GroupWise 6.5 Cross-Platform Client User Guide Determining Fields, Field Order, and Sort Order for the Address Book The GroupWise Address Book is configured to display specific user fields such as Given Name and Last Name, but you can add additional fields or delete the default fields. You can also determine the order in which the fields appear in the Address Book and select whether the addresses is sorted by first name/last name or last name/first name. The Group Wise Address Book is configured at the domain level, which means that you can have different fields, field order, or sorting order for the Address Book in different domains. The Address Book configuration you establish for a domain becomes the default configuration. However, users can change which fields are displayed, change the field order, and change the address sort order. However, they cannot add fields that you have not added at the domain level. GroupWise Addressing 81 The following sections provide instructions for adding and deleting Address Book fields, changing the default sort order of the Address Book, and changing the default order of the fields in the Address Book: + + + + + “Adding Fields to the Address Book” on page 82 “Changing the Default Sort Order” on page 83 “Changing the Default Field Order” on page 83 “Removing Fields from the Address Book” on page 84 “Preventing the User Description Field from Displaying in the Address Book” on page 85 Adding Fields to the Address Book 82 Adding a field makes the field available in the Address Book. However, individual users can determine which available fields they want to display. 1 In ConsoleOne®, right-click the Domain object whose Address Book you want to modify, then click Properties. 2 Click GroupWise > Address Book to display the Address Book page. LITA = x NDS Rights + | Other | Rights to Files and Folders | Sort address book by: First Name, Last Name +] Address Book Fields: [Given Name (required) ¡Last Name (required) ¡Phone | Object ID Available Fields: Account ID Distinguished Name Middle Initial Personal Title |Post Office Name | 4 Qualifier [Domain Name |Department =» | Title | Network ID {File ID [Fax A+ Edit Labe’ Map Additional Fields *Administrator-defined field I Do Not Display User Comments Page Options... [ox] Cancel Apply | Help The Address Book Fields list shows all fields that are displayed by default in the Address Book. The Available Fields list shows additional predefined Group Wise user fields that can be added to the Address Book. Novell® eDirectory™ also includes user information that is not associated to GroupWise user fields. For example, a User object includes Postal Address fields named "City," "State," and "Zip Code." By default, these fields are not included as GroupWise fields. However, you can use the Map Additional Fields button to map eDirectory user fields to Group Wise fields so that they can be displayed in the GroupWise Address Book. To add a field that is not displayed in the Available Fields list, click Map Additional Fields, select an unmapped Admin-defined field, click Edit, select the eDirectory property to map to the Admin-defined field, then click OK twice to add it to the Available Fields list. In the Available Fields list, select the field you want to add to the Address Book, then click the left-arrow to move it to the Address Book Fields list. GroupWise 6.5 Administration Guide The field is added to the bottom of the list. The Address Book displays the fields in the order they are listed. 5 Ifnecessary, select the field, then use the up-arrow and down-arrow to move the field to the appropriate location in the list. 6 Ifthefield is an Administrator-defined field and you want to change how the field is labeled in the Address Book, select the field, click Edit Label, enter a new label in the Address Book Label field, then click OK. Administrator-defined fields are marked with an asterisk (*). You can only edit an Administrator-defined field that is in the Address Book Fields list. 7 When you are finished, click OK (in the Address Book page) to save your changes. Changing the Default Sort Order The sort order determines how addresses in the Address Book are sorted. The sort order you establish becomes the default for the Address Book and remains in effect until individual users change it. The preset default sort order for the Address Book is First Name/Last Name. You can change the default sort order to Last Name/First Name. 1 In ConsoleOne, right-click the Domain object whose Address Book you want to modify, then click Properties. 2 Click Group Wise > Address Book to display the Address Book page. Properties of Provo E xj DS Rights + | Other | Rights to Files and Folders | Sort address book by: First Name, Last Name há Address Book Fields: Available Fields: [Given Name (required) Account ID |Last Name (required) Distinguished Name |Phone Middle Initial |Object ID Personal Title ¡Post Office Name 4 Qualifier [Domain Name | [Department > [Title {Network ID | [File ID Fax A+ Edit Label Map Additional Fields *Administrator-defined field I” Do Not Display User Comments Page Options.. | Los] cancer | sw | He | 3 In the Sort Address Book By list, select the sort order you want to be the default. 4 Click OK to save your changes. Changing the Default Field Order The field order determines the order in which the GroupWise fields are displayed in the Address Book. The field order you establish becomes the default for the Address Book and remains in effect until individual users change the order. GroupWise Addressing 83 1 In ConsoleOne, right-click the Domain object whose Address Book you want to modify, then click Properties. 2 Click Group Wise > Address Book to display the Address Book page. Properties of Provo E x| | NDS Rights + | Other | Rights to Files and Folders | Sort address book by: [First name, Last Name +] Address Book Fields: Available Fields: Given Name (required) Account ID Last Name (reguired) Distinguished Name Phone Middle Initial Object ID Personal Title Post Office Name «| Qualifier Domain Name Department | Title Network ID File ID Fax ++] Edit Label Map Additional Fields *Administrator-defined field I Do Not Display User Comments Page Options... | Lx | Cancel | 3 In the Address Book Fields list, select a field whose position you want to change, then use the up-arrow and down-arrow to move the field to its new position. 4 Repeat Step 3 until you’ve established the field order you want. 5 Click OK to save your changes. Removing Fields from the Address Book Ifthere are fields in the Address Book that are not used or that you don't want displayed to users, you can remove them. 1 In ConsoleOne, right-click the Domain object whose Address Book you want to modify, then click Properties. 2 Click Group Wise > Address Book to display the Address Book page. 84 GroupWise 6.5 Administration Guide Properties of Provo $ xj | NDS Rights + | Other | Rights to Files and Folders | Sort address book by: [First Name, Last Name +] Address Book Fields: _ Available Fields: Given Name (required) Account ID Last Name (required) Distinguished Name Phone Middle Initial Object ID Personal Title Post Office Name el Qualifier Domain Name Department = [Tie Network ID File ID Fax t|] Map Additional Fields *Administrator-defined field E Do Not Display User Comments Page Options... | Lo] Cancel Apply | Help 3 Inthe Address Book Fields list, select the field you want to remove, then click the right-arrow to move the field to the Available Fields list. The fields in the Available Fields list are not displayed in the Address Book. 4 Repeat Step 3 to remove additional fields you don’t want to use. 5 Click OK to save your changes. Preventing the User Description Field from Displaying in the Address Book The GroupWise Address Book provides detailed user information as well as e-mail addresses. A user’s detailed information includes a comments field that displays the information stored in the User object Description field (User object > General tab > Identification page). If you have included information in the Description field that you don’t want displayed in the GroupWise Address Book, you can prevent the field’s contents from being displayed. TIP: To view a user's detailed information, including the comments field, in the Address Book, select the user's address, then click the View menu > Details. To prevent the user description from appearing the Address Book: 1 In ConsoleOne, right-click the Domain object whose Address Book you want to modify, then click Properties. 2 Click GroupWise > Address Book to display the Address Book page. GroupWise Addressing 85 Sort address book by: Address Book Fields: |Given Name (required) Last Name (required) Phone Object ID |Post Office Name Domain Name Department Title Network ID File ID Fax alal E Do Not Display User Comments First Name, Last Name +] Available Fields: Account ID Distinguished Name Middle Initial Personal Title = Qualifier F1 Map Additional Fields *Administrator-defined field Page Options... | [ox] Cancel Ap | Help 3 Enable the Do Not Display User Comments option. 4 Click OK to save your changes. Controlling Object Visibility in the Address Book An object’s visibility determines which post office databases the object’s information is distributed to. A post office’s users can only see an object’s information in the Address Book if the object’s information has been distributed to its post office. Visibility applies to the following objects: user, external user, external entity, resource, external resource, distribution list, eDirectory group, eDirectory organizational role, and nickname. IMPORTANT: Unlike the other objects listed above, nicknames that have been distributed to a post office do not actually appear in the post office’s Address Book. Users must type the nickname’s address in the message rather than select it from the Address Book. You can choose from the following visibility levels: + System: The object is visible in every post office Address Book throughout the system; if external system synchronization is turned on, it is also available for distribution to other Group Wise systems. This is the default for users, external users, resources, external resources, external entities, and nicknames. + Domain: The object is visible only in the Address Book of the post offices located in the object’s domain. + Post Office: The object is visible only in the Address Book of the object’s post office. This is the default for distribution lists, groups, and organizational roles. + None: The object is not visible in the Address Book of any post offices. For information about setting visibility, see: + “Changing a User’s Visibility in the Address Book” on page 212 + “Changing a Resource’s Visibility in the Address Book” on page 232 + “Changing a Distribution List’s Visibility in the Address Book” on page 246 + “Changing a Group’s Visibility in the Address Book” on page 253 + “Changing an Organizational Role’s Visibility in the Address Book” on page 257 86 GroupWise 6.5 Administration Guide Updating Address Book Information Each post office database includes all the information displayed in the Group Wise Address Book. By keeping the information on the post office, the post office’s users have quick access to it. Whenever changes are made in eDirectory that affect Address Book information, the information is replicated to each domain database and each post office database. If information in a post office’s Address Book is out-of-date or missing, you can synchronize the missing information with eDirectory or rebuild the post office database to update the information. The following sections provide details: + “Synchronizing Information” on page 87 + “Rebuilding the Post Office Database” on page 87 Synchronizing Information The information for each object (user, resource, distribution list, and so forth) in the GroupWise Address Book is contained in eDirectory. When an object’s information is incorrect in a post office’s Address Book, you can synchronize the object’s information in the Address Book with the information stored in eDirectory. This causes the correct information to be replicated to each domain and post office database in the GroupWise system. For information about how to do this, see Chapter 29, “Synchronizing Database Information,” on page 363. Rebuilding the Post Office Database If the post office Address Book is missing a lot of information, or you are having other difficulties with information in the Address Book, you might want to rebuild the post office’s database. This causes all information to be replicated to the post office database from the domain database. For information about rebuilding a post office database, see “Rebuilding Domain or Post Office Databases” on page 349. Internet-Style Addressing By default, GroupWise® uses a proprietary address format consisting of a user’s ID, post office, and domain (userID.post_office.domain). However, if you have the GroupWise Internet Agent installed (see “Internet Agent” on page 659), GroupWise also supports native Internet-style addressing consisting of a username and Internet domain name (for example, userID(dInternet domain name). Internet-style addressing is the preferred addressing format if you are connected to the Internet, because with Internet-style addressing, users have the same address within the Group Wise system as they do outside the Group Wise system. For example, if John Smith’s address at Novell? is jsmith@novell.com, this address can be used by users within the GroupWise system and users external to the system. The following sections provide information to help you plan, set up, and troubleshoot any problems that might occur: + “Planning Internet Addressing” on page 88 + “Setting Up Internet Addressing” on page 91 GroupWise Addressing 87 Planning Internet Addressing The following sections help you prepare to set up Internet-style addressing on your Group Wise system: + “Internet Agent Requirement” on page 88 + “Internet Agents Used for Outbound Messages” on page 88 ¢ “Internet Domain Names” on page 88 + “Preferred Address Format” on page 89 + “Allowed Address Formats” on page 91 + “Override Options” on page 91 Internet Agent Reguirement Internet addressing requires you to have the GroupWise Internet Agent installed in your Group Wise system. The Internet Agent connects your Group Wise system to the Internet. To install the Internet Agent, see “Installing the Group Wise Internet Agent” in the Group Wise 6.5 Installation Guide. Internet Agents Used for Outbound Messages Each domain in your Group Wise system must be assigned an Internet Agent for outbound messages. A domain’s assigned Internet Agent handle all outbound messages sent by the domain’s users. If your GroupWise system includes only one Internet Agent, that Internet Agent must be assigned to all domains and will be used for all outbound messages. If your GroupWise system includes multiple Internet Agents, you must decide which Internet Agent you want to be responsible for outbound messages for each domain. You must select one Internet Agent as your system’s default Internet Agent, but you can override the default at each domain. Internet Domain Names You must associate at least one Internet domain (novell.com, gw.novell.com, support.novell.com, or so forth) with your Group Wise system. These Internet domains need to exist in the domain name service (DNS). After you have associated Internet domains with your GroupWise system, all users in your system can be addressed using any of the domains (for example, jsmith@novell.com, jsmith@gw.novell.com, and jsmith@support.novell.com). The addresses can be used both internally and externally. Preferred Internet Domain Name You must assign each GroupWise user a preferred Internet domain. GroupWise uses the preferred Internet domain name when constructing the e-mail address that are displayed in the GroupWise Address Book and in the To field of sent messages. To make this process easier, GroupWise lets you assign a preferred Internet domain to be used as the default for your GroupWise system (for example, novell.com). The system’s preferred Internet domain is applied to all users in your GroupWise system. However, you can override the system’s preferred Internet domain at the domain, post office, or user level, meaning that different users GroupWise 6.5 Administration Guide within your Group Wise system can be assigned different preferred Internet domains. For example, users in one domain can be assigned gw.novell.com as their preferred Internet domain while users in another domain are assigned support.novell.com. Preferred Address Format You must choose a preferred address format for your Group Wise users. Group Wise uses the preferred address format, along with the preferred Internet domain, to construct the e-mail addresses that are published in the Group Wise Address Book and in the To field of sent messages. Group Wise supports the following address formats: useriD.post office.domain(internet domain name useriD.post office(Dinternet domain name userlD@internet domain name firstname.lastname(dinternet domain name lastname.firstname@internet domain name firstinital lastname(dinternet domain name As with the preferred Internet domain, you must assign a preferred address format to be used as the default for your GroupWise system. The system’s preferred address format is applied to all users in your GroupWise system. However, you can override the system’s preferred address format at the domain, post office, and user/resource level. The following sections explain some of the advantages and disadvantages of each address format: + “userID.post_office.domain@internet_domain_name” on page 89 + “userID.post_office@internet_domain_name” on page 89 + “userlD(dinternet domain name” on page 90 + “firstname.lastname(ginternet domain name” on page 90 + “lastname.firstname(ginternet domain name” on page 90 + “firstinitial lastname(@internet domain name” on page 90 userlD.post office.domainGdinternet domain name Advantages + Reliable format. Group Wise guarantees that each address is unique. + Identical usernames can be used in different post offices. Disadvantages + Addresses tend to be long and hard to remember. + Addresses might change over time as users are moved from one post office to another. userlD.post office(Dinternet domain name Advantages + Guarantees uniqueness if all your post offices have unique names. + Identical usernames can be placed in different post offices. GroupWise Addressing 89 Disadvantages + Addresses tend to be long and hard to remember. + Addresses might change over time as users are moved from one post office to another. userlDGinternet domain name Advantages + Addresses are short and easy to remember. + Backwards-compatible with previous versions of Group Wise. (Users won't need to update their business cards.) + Addresses do not change as users are moved. Disadvantages + Because GroupWise cannot guarantee unique user IDs, the system administrator is responsible for guaranteeing that the first and last names are unique. firstname.lastname@internet_domain_name Advantages + Addresses are intuitive and easy to remember. + Addresses do not change as users are moved. Disadvantages + Because GroupWise cannot guarantee unique first and last names, the system administrator is responsible for guaranteeing that the first and last names are unique. + Probability of conflicts increases if any user's first and last names match any GroupWise domain or post office name, if any two users have the same first and last names, or if any two users have the opposite first and last names (such as James Dean and Dean James). lastname.firstname@internet_domain_name Advantages + Addresses are intuitive and easy to remember. + Addresses do not change as users are moved. Disadvantages + Because GroupWise cannot guarantee unique first and last names, the system administrator is responsible for guaranteeing that the first and last names are unique. + Probability of conflicts increases if any user's first and last names match any GroupWise domain or post office name, if any two users have the same first and last names, or if any two users have the opposite first and last names (such as James Dean and Dean James). firstinitial lastname@internet_domain_name Advantages + Addresses are intuitive and easy to remember. + Addresses do not change as users are moved. GroupWise 6.5 Administration Guide Disadvantages + Because Group Wise cannot guarantee unique first initials and last names, the system administrator 1s responsible for guaranteeing that firstinitial lastname addresses are unique. Allowed Address Formats Override Options The preferred Internet domain and preferred address format apply to user addresses as displayed in the GroupWise Address Book or sent messages. The allowed address formats, on the other hand, determine which address formats are accepted by the Internet Agent. There are five possible allowed formats: useriD.post office(Dinternet domain name userlD@internet domain name firstname.lastname@internet domain name lastname.firstname@internet domain name firstinital lastname(dinternet domain name If you select all five formats, the Internet Agent accepts messages addressed to users in any of the formats. For example, John Peterson would receive messages sent using any of the following addresses: jpeterson.research@novell.com jpeterson@novell.com john.peterson@novell.com peterson.john@novell.com jpeterson@novell.com You must designate the allowed address formats to be used as the default formats for your GroupWise system. The system’s allowed address formats are applied to all users in your Group Wise system. However, you can override the system’s allowed address formats at the domain, post office, and user/resource level. For example, assume you have two John Petersons with userIDs of jpeterson and japeterson. The userID.post_office and userID address formats do not cause message delivery problems, but the firstname. lastname, lastname. firstname, and firstinitial lastname address formats do. To overcome this problem, you could disallow the three problem formats for these users at the user level. In spite of the best planning, some e-mail addresses do not fit the rules and are not processed correctly. You can handle such addresses by overriding the regular address processing, as described in “Overriding Internet Addressing Defaults” on page 94. Setting Up Internet Addressing The following sections help you to set up Internet addressing: + “Installing the Internet Agent” on page 92 + “Enabling Internet Addressing” on page 92 + “Overriding Internet Addressing Defaults” on page 94 GroupWise Addressing 91 Installing the Internet Agent Before you can set up Internet addressing, you must install the Group Wise Internet Agent. If you have not already installed the agent, see “Installing the GroupWise Internet Agent” in the Group Wise 6.5 Installation Guide. Enabling Internet Addressing 1 In ConsoleOne, click the Tools menu > Group Wise System Operations > Internet Addressing. Preferred Address format: ok | UserlD@internet domain name [+] AR FR 3 E z = Cancel | [7 Enable "First Initial Last Name" matching for incoming mail = Allowed Address Formats M UserlD.Post Ofice@internet domain name M UserlD@Internet domain name M Last Name.First Name@internet domain name M First Name.Last Name@internet domain name C First Initial Last Name@Internet domain name minternet Domain Names Internet Agent for outbound SMTP/MIME messages: Provo.GWIA = Note: You must choose a default Internet Agent before you can define Internet Domain names. 2 In the Internet Agent for Outbound SMTP/MIME Messages list, select the Internet Agent to use as the default Internet Agent for your system. By default, each domain uses this Internet Agent for outbound messages sent by users in the domain. If you have multiple Internet Agents in your Group Wise system, you can override the default setting at the domain level. For more information, see “Domain Overrides” on page 94. 3 To define an Internet domain, click Create to display the Internet Domain Name dialog box. {Internet domain name: ME" xi Internet Domain Name: [ox] Description: Cancel Help 4 Enter the Internet domain you want to define in your Group Wise system, then click OK to add it to the list of Internet domains. 5 Repeat Step 3 and Step 4 for each Internet domain you want to define. When you”ve finished, all Internet domains you want to define should be listed in the Internet Domain Names box. 92 GroupWise 6.5 Administration Guide Preferred Address format: ok UserlD@Internet domain name SA C Enable "First Initial Last Name" matching for incoming mail Allowed Address Formats M UserlD.Post Ofice@internet domain name UserlD@Internet domain name M Last Name.First Name@internet domain name M First Name.Last Name@internet domain name C First Initial Last Name@Internet domain name Internet Domain Names (7 novell.com gw.novell.com Internet Agent for outbound SMTP/MIME messages: [Provo.GWIA BA Note: You must choose a default Internet Agent before you can define Internet Domain names. The preferred Internet domain is indicated by a check mark. This is the Internet domain name that is used when Group Wise constructs a user's preferred e-mail address. A preferred e-mail address is the address that is published in the system address book and in the To field of sent messages. You can override the preferred Internet domain name at the domain, post office, and user/resource levels. For more information, see “Overriding Internet Addressing Defaults” on page 94. If the Internet domain you want to be the default preferred domain for your Group Wise system is not already selected, select the desired Internet domain, then click Set Preferred Name. In the Preferred Address Format list, select your system’s default Internet address format. This is the format that is used when displaying addresses in the Group Wise Address Book and in a message’s From box if it is not overridden at a lower level. For a list of the available addressing formats and their respective advantages and disadvantages, see “Preferred Address Format” on page 89. You can override the preferred address format at the domain, post office, and user/resource levels. For more information, see “Overriding Internet Addressing Defaults” on page 94. If desired, turn on the Enable "First Initial Last Name" Matching for Incoming Mail option. This option allows the Internet Agent to resolve addresses for incoming messages by performing "first initial last name" lookups on the username portion of the address. When doing so, the Internet Agent uses the first letter of the username as the first initial and the remainder of the username as the last name. It then resolves the address to any Group Wise users whose Last Name field (in their eDirectory User object record) contains the last name and whose Given Name field starts with the first initial. For example, if the recipient’s address is jpeterson@novell.com, the first initial would be J and the last name would be Peterson. The address would resolve to the user whose Last Name field is Peterson and Given Name field starts with J. If more than one user's given name starts with J (for example, John and Janice), the message is undeliverable. This option is useful if you want to be able to use the UserID@Internet domain name format but your userlDs do not really reflect your users’ actual names (for example, John Peterson’s user ID is 46789 so his address is 46789 (@novell.com). In this case, you could publish users” addresses as their first initial last name (for example, jpeterson@novell.com) and enable this option so that the Internet Agent resolves the addresses to the appropriate users. GroupWise Addressing 93 9 Inthe Allowed Address Formats list, select the address formats that you want to be supported for incoming messages. Group Wise will deliver a message to the recipient if any of the allowed formats have been used in the address. You can override the allowed address formats at the domain, post office, and user/resource levels. For more information, see “Overriding Internet Addressing Defaults” on page 94. 10 Click OK to save your changes. If you changed the preferred address format, you are prompted to update the Internet e-mail address (General tab > Identification page > E-Mail Address field) for all affected users. The Internet e-mail address is the address returned in response to LDAP queries to eDirectory. It is recommended that you allow this update; however, performing it for the entire Group Wise system might take a while. At this point, Internet addressing is enabled. Overriding Internet Addressing Defaults All domains, post offices, and users/resources in your Group Wise system inherit the defaults (Internet Agent for outbound messages, preferred Internet domain name, preferred address format, and allowed address formats) you established when enabling Internet addressing for your system. However, if desired, you can override these defaults for individual domains, post offices, or users/ resources. + “Domain Overrides” on page 94 + “Post Office Overrides” on page 95 + “User/Resource Overrides” on page 96 Domain Overrides At the domain level, you can override all Internet addressing defaults assigned to your Group Wise system. 1 In ConsoleOne, right-click a Domain object, then click Properties. 2 Click Group Wise > Internet Addressing. Properties of Provo E xi S Rights v | Other | Rights to Files and Folders | Override | Preferred Address format: LI UserlD@internet domain name Defined at: Novell Allowed Address Formats a M Use ost Office tdomain name [M First Ma Name@internet domain name F hitial Last f Defined at Novell Internet domain name: Defined at: Novell Dr ii | pient t ( jely By thi main nare Internet Agent for outbound SMTP/MIME messages: Defined at: Novell Page Options... [ox] Cancel à | Help GroupWise 6.5 Administration Guide 3 To override one of the options, select the Override box, then select the option you prefer for this domain. If you need additional information about any of the fields, click Help. 4 Click OK to save the changes. If you changed the preferred address format, you are prompted to update the Internet e-mail address (General tab > Identification page > E-Mail Address field) for all affected users. The Internet e-mail address is the address returned in response to LDAP gueries to eDirectory. We recommend that you allow this update; however, performing it for an entire Group Wise domain might take a while. Post Office Overrides At the post office level, you can override the preferred Internet domain name, preferred address format, and allowed address formats the post office has inherited from its domain. You cannot override the Internet Agent that is assigned to handle outbound messages. 1 In ConsoleOne, right-click a Post Office object, then click Properties. 2 Click Group Wise > Internet Addressing. Properties of Research xj DS Rights v | Other | Rights to Files and Folders | Override | Preferred Address format: Defined at: Novell Allowed Address Formats D user fem E (it L tf Defined at: Novell Internet domain name: novell.com 4 Defined at: Novell E mina mail Page Options... [ox ] Cancel Apply Help 3 To override one of the options, select the Override box, then select the option you prefer for this post office. If you need additional information about any of the fields, click Help. 4 Click OK to save the changes. If you changed the preferred address format, you are prompted to update the Internet e-mail address (General tab > Identification page > E-Mail Address field) for all affected users. The Internet e-mail address is the address returned in response to LDAP queries to eDirectory. We recommend that you allow this update; however, performing it for an entire GroupWise post office might take a while. GroupWise Addressing 95 96 User/Resource Overrides At the user and resource level, you can override the preferred Internet domain, preferred address format, and allowed address formats that the user/resource has inherited from its post office. You cannot override the Internet Agent that is assigned to handle outbound messages. 1 In ConsoleOne, right-click a User or Resource object, then click Properties. 2 Click Group Wise > Internet Addressing. Preferred Address format: UserlD@internet domain name Y @internet domain nam Defined at: Novell Allowed Address Formats Defined at: Novell Internet domain name: Defined at: Novell A Page Options... [ox] Cancel J | Help 3 To override one of the options, select the Override box, then select the option you prefer for this user or resource. At the user and resource level, the preferred address format can be completely overridden by explicitly defining the user portion of the address format (user@Internet domain name). The user portion can include any RFC-compliant characters (no spaces, commas, and so forth). For example, if you’ve selected First Name.Last Name@Internet domain name as your system’s preferred address format and you have two John Petersons, each on a different post office in your system, you would end up two users having the same address (John.Peterson@novell.com). You could use this field to differentiate them by including their middle initials in their address (John.S.Peterson@novell.com and John.A.Peterson@novell.com). If you need additional information about any of the fields, click Help. 4 Click OK to save the changes. If you changed the preferred address format for a user, you are prompted to update the user’s Internet e-mail address (General tab > Identification page > E-Mail Address field). The Internet e-mail address is the address returned in response to LDAP queries to eDirectory. We recommend that you allow this update. Nickname Overrides At the nickname level, you can override the preferred Internet domain, preferred address format, and allowed address formats that the user/resource has inherited from its post office. You cannot override the Internet Agent that is assigned to handle outbound messages. GroupWise 6.5 Administration Guide 1 In the Group Wise View of ConsoleOne, select Nicknames in the GroupWise Object list. 2 Right-click a nickname, then click Properties. 3 Click Group Wise > Internet Addressing. Properties of RogerS 4 i x| oupWise i ¿Internet Addressing i Preferred Address format: Preferred EMail ID: (internet domain name Not Defined Allowed Address Formats r M UserlD Post Office@Internet domain name M UserD@in M Lasth First Mei ina M Firsth Last Nar ain nan M First Initial Last Nan yain na Not Defined Internet domain name: B ~ Not Defined Page Options... OK Cancel Apply Help | 4 To override one of the options, select the Override box, then select the option you prefer for this nickname. 5 Click OK to save the changes. If you changed the preferred address format for a nickname, you are prompted to update the user’s Internet e-mail address (General tab > Identification page > E-Mail Address field). The Internet e-mail address is the address returned in response to LDAP queries to eDirectory. We recommend that you allow this update. For more information about nicknames, see “Creating a Nickname for a User” on page 213. Addressing Rules Addressing rules let you search for text in an address and replace it with other text. Most addressing rules are used in conjunction with GroupWise” gateways to simplify addressing syntax. For specific details, see your Group Wise gateway guide. For an example of an addressing rule used with the Internet Agent, see “Creating a Customized Addressing Rule” on page 700. Addressing rules are created at the system level and enabled by domain. + “Creating an Addressing Rule” on page 98 + “Enabling an Addressing Rule” on page 99 If you are using Internet-style addressing (see Chapter , “Internet-Style Addressing,” on page 87), any addressing rules that include an @ in the search string and a colon (:) in the replacement string is ignored. GroupWise Addressing 97 Creating an Addressing Rule 1 In ConsoleOne*, click the Tools menu > Group Wise System Operations > Addressing Rules. Define Addressing Rules E xj Addressing Rules OK zi Description: D [ox] Name: Cancel Search String: EL Help Replace With: D O Test Rule Enter an address and click Test. Test address: Results: | 3 Fill in the following fields: Description: Enter a short description for the rule. The description is what appears when the rule is listed in the Addressing Rules dialog box. Name: Enter the name you want to use for the rule. Search String: Enter the text string that determines which addresses the rule is applied to. You can use an asterisk as a wildcard to represent one or more characters. For example, if you want the rule to apply to all addresses with JSmith as the userID, enter jsmith.*.* (the first asterisk represents the post office and the second represents the domain). Replace With: Enter the replacement text. You can use variables (%1, %2, and so forth) to reference the wildcard text used in the search string. For example, if you use two wildcards in the search string, you could use two variables (%1 and %2) to insert the matched wildcard text into the replacement string. %1 (replace string 1) replaces the first wildcard in the search string, %2 replaces the second wildcard, and so on. The replacement variables must be placed in the string according to the order reguired for the explicit address, not according to their numerical order (for example, %2 could come before %1). Using the jsmith.*.* example, assume that you want to replace jsmith with jjones. You would enter jjones.%1.%2. The resulting addressing would include the same post office and domain but a different userID. 4 Ifdesired, you can test the rule on an address. To do so, enter an address in the Test Address dialog box (the address does not have to be real) > click Test to see the results. 98 GroupWise 6.5 Administration Guide 5 Click OK to add the rule to the list. The rule is automatically enabled, which means that it is available for use. To apply it to a domain, however, you need to enable it in the domain. For instructions, see “Enabling an Addressing Rule” on page 99. 6 Ifnecessary, select the rule, then use the up-arrow and down-arrow to move the rule to the position in which you want it executed. Addressing rules are executed in the order they are listed. When an addressing rule 1s applied to an address, no further addressing rules are applied. 7 When you are finished creating rules, click OK to close the Define Addressing Rules dialog box. Enabling an Addressing Rule After you create an addressing rule, you need to enable it in the domains where you want it applied. 1 In ConsoleOne, right-click the Domain object, then click Properties. Properties of Provo E : x| GroupWise + | NDS Rights + | Other | Rights to Files and Folders | Identification | Domain: Provo Description: UNC Path: mevdsvsiprovot 2] Language: English - US y] Domain Type: Primary Time Zone: (GMT-07:00) Mountain Time (US 8 Canada) v Database Version: 6 Network Type: Novell NetWare y] Administrator: E| | cea Page Options... | OK Cancel Apply | Help 2 Click GroupWise > Addressing Rules. The list displays all addressing rules that have been made available in the system. However, an addressing rule does not apply to the domain until you enable it. GroupWise Addressing 99 Properties of Provo E x| NDS Rights v | Other | Rights to Files and Folders | Addressing rules used by this domain: O Addressing Rule 1 Page Options... OK Cancel Apply | Help 3 Click the check box in front of an addressing rule to enable it. 4 When you are finished enabling rules, click OK to save your changes. Wildcard Addressing Wildcard addressing enables users to send items to all users in a post office, domain, Group Wise” system, or connected Group Wise system by inserting asterisks (*) as wildcards in e-mail addresses. You can limit wildcard addressing to a specific level (post office, domain, system) or allow unlimited wildcard addressing. The default is to limit the wildcard addressing to post office only, meaning that a user can use wild card addressing to send to all users on his or her post office only. You can change the default for individual users, post offices, or domains. When using wildcard addressing, the sender only sees whether the item was delivered to a domain, post office, or system (by viewing the item’s properties). The properties do not show the individual usernames or additional statuses. Recipients can reply to the sender only. Reply to All is unavailable. + “Setting Wildcard Addressing Levels” on page 100 + “Wildcard Addressing Syntax” on page 102 Wildcard addressing cannot be used for assigning shared folders or shared address books, granting proxy rights, performing busy searches, or sending routing slips. Setting Wildcard Addressing Levels By default, wildcard addressing is enabled at the post office level for all users in your Group Wise system. You can change the level (post office, domain, or system) or disable wildcard addressing. Wildcard addressing levels can be applied to a single user, to all users in a post office, or to all users in a domain. To set wildcard addressing defaults: 100 GroupWise 6.5 Administration Guide 1 n ConsoleOne®, select a Domain, Post Office, or User object. 2 Click the Tools menu > Group Wise Utilities > Client Options to display the Group Wise Client Options dialog box. GroupWise Client Options Be xi Environment Send Help | Ü Security Date and Time 3 Click Send to display the Send Options dialog box. x Send Options | Mail] Appt] Task] Note] Security| Disk Space Mami] Classification 1 Normal | $ [ Expiration date cv | Priority J C High S @ Standard [O Delay delivery in} | Low z EEE I Reply requested ni Wildcard Addressing By orvenient Limited to post office MINGI | Duy 3 re F Notify recipients Ji I Allow use of "Reply to all" in rules T° Convert attachments oy Allow use of “Internet mail" tracking [ Allow reply rules to loop [oli Restore Default Settings | Cancel Help 4 In the Wildcard Addressing list, select from the following options: + Not Allowed: Select this option to disable wildcard addressing. + Limited to Post Office (Default): Select this option to limit wildcard addressing to the user’s post office. The user can use wildcard addressing to send items to users in his or her post office only. ¢ Limited to Domain: Select this option to limit wildcard addressing to the user’s domain. The user can use wildcard addressing to send items to users in his or her domain only. + Limited to System: Select this option to limit wildcard addressing to the user's Group Wise system. The user can use wildcard addressing to send items to all users in his or her system only. This excludes external users (users from other systems) who have been added to your GroupWise address book. ¢ Unlimited: Select this option to allow unlimited use of wildcard addressing. The user can use wildcard addressing to send to all users (including external users and non-visible users) defined in the GroupWise address book. 5 Click OK to save the changes. GroupWise Addressing 101 Wildcard Addressing Syntax The following table shows the syntax that must be used when using wildcard addressing to send items. WildCard Addressing Setting Limited to Post Office Limited to Domain Limited to System Unlimited 102 GroupWise 6.5 Administration Guide To send an item to... All users in your post office All users in your post office All users in your domain All users in another post office in your domain All users in your post office All users in your domain All users in another post office in your domain All users in a post office in another domain All users in another domain All users in your GroupWise system All users in your post office All users in your domain All users in a different post office in your domain All users in a post office in another domain. You can also use this for external post offices and external domains. All users in a another domain. You can also use this for external domains. All users in the GroupWise address book (all users in the same system, all external users, and all non-visible users) Type in the To field... * *.post office *post_ office * post_office.domain * domain * kk * post_office * post_office.domain * domain kkk Multilingual GroupWise Systems Group Wise” is a multilingual e-mail product that meets the needs of users around the world. The following sections provide guidance if your Group Wise system includes users that speak a variety of languages: + “Client Languages” on page 103 + “Administration Languages” on page 104 + “International Character Considerations” on page 104 + “Multi-Language Workstations” on page 105 Client Languages You can run the Group Wise client in the following languages: Arabic Hungarian Czech Italian Chinese - Simplified Japanese Chinese - Traditional Korean Danish Norwegian Dutch Polish English Portuguese Finnish Russian French Spanish German Swedish Hebrew Users can select the languages they want when they install the GroupWise client. Ifusers have access to the Group Wise client media, they can choose from all languages. If users are installing from a software distribution directory, they can choose from the languages you installed in the software distribution directory, as described in “Group Wise Languages” in “Installing a Basic Group Wise System” in the Group Wise 6.5 Installation Guide. The maximum disk space required to store all the Group Wise software components for one language is approximately 500 MB. By default, the Group Wise client starts in the language of the operating system, if it is available. If the operating system language is not available, the next default language is English. When starting the Group Wise client, you can use the /| startup switch to override the English default and select an interface language from those that have been installed. Multilingual GroupWise Systems 103 The online help available in the Group Wise clients is provided in all languages into which the client software is translated. The Group Wise client user guides available from the Group Wise clients and on the Group Wise Documentation Web site are translated only into the administration languages. If you try to access a user guide from a client that is running in a language into which the user guide has not been translated, you can select any of the available languages. Administration Languages You can run the GroupWise Installation program, administer your Group Wise system in ConsoleOne*, and run the Group Wise agents in the following languages: English French German Spanish Portuguese AIl available administration languages are automatically installed. When you select a language for a domain, it determines the sorting order for items in the Group Wise Address Book. This language becomes the default for post offices that belong to the domain. You can override the domain language at the post office level 1f necessary. For example, if you set the domain and post office language to English-US, the Address Book items are sorted according to English-US sort order rules. This is true even if some users in the post office are running non-English-US Group Wise clients such as German or Japanese. Their client interface and Help files are in German or Japanese, but the sort order is according to English- US standards. By default, the agents start in the language selected for the domain. If that language has not been installed, the agents start in the language used by the operating system. If that language has not been installed, the agents start in English-US. The POA also includes language-specific files in all client languages so that information returned from the POA to the GroupWise client, such as message status and undeliverable messages, is displayed in the language of'the GroupWise client rather than the language in which the POA interface is being displayed. International Character Considerations Group Wise client users have complete flexibility in the characters they use in composing messages. Accented characters used by various European languages and double-byte characters used by various Asian and Middle Eastern languages are all acceptable in the GroupWise client and can even be combined in the same message text. As an administrator, the only limitation you need to be aware of is that double-byte Asian and Middle Eastern characters should not be used in directory names and filenames within your Group Wise system. This limitation is based on operating system capabilities. You should also not use double-byte characters in passwords. You are free to use double-byte characters in Group Wise usernames, domain names, post offices names, and so on. 104 GroupWise 6.5 Administration Guide Multi-Language Workstations If Group Wise users receive messages in multiple languages, their workstations need to be configured to handle the character sets used by these languages. On Windows XP: 1 From the Control Panel, double-click Regional and Language Options, then click Languages. 2 If you receive messages in Arabic, Hebrew, or other complex languages, select Install Files for Complex Script and Right-to-Left Languages. 3 If you receive messages in Chinese, Japanese, or other similar languages, select Install Files for East Asian Languages 4 Click OK to install the required language files. On Windows 2000: 1 Fromthe Control Panel, double-click Regional Options. 2 Selectthe languages you want to use on the workstation, then click OK to install the reguired language files. On Linux and Macintosh workstations, if users see the correct characters at the operating system and desktop levels, they see the correct characters in Group Wise as well. Multilingual GroupWise Systems 105 106 GroupWise 6.5 Administration Guide Domains Chapter 8, “Creating a New Domain,” on page 109 Chapter 9, “Managing Domains,” on page 123 Chapter 10, “Managing the Links between Domains and Post Offices,” on page 131 Domains 107 108 GroupWise 6.5 Administration Guide Creating a New Domain As your Group Wise” system grows, you might need to add new domains. + “Understanding the Purpose of Domains” on page 109 + “Planning a New Domain” on page 110 + “Setting Up the New Domain” on page 118 + “What's Next” on page 121 IMPORTANT: If you are creating a new domain in a clustered GroupWise system, see the appropriate section of the GroupWise 6.5 Interoperability Guide before you create the domain: - “Setting Up a Domain and Post Office in a Novell Cluster” in “Novell Cluster Services” - “Setting Up a Domain and Post Office in a Microsoft Cluster” in “Microsoft Clustering Services” Understanding the Purpose of Domains The domain functions as the main administrative unit for your GroupWise system. Each GroupWise system has one primary domain, which was created when you first installed GroupWise. All other domains that you add are secondary domains. The domain serves as a logical grouping of one or more post offices and is used for addressing and routing messages. Each GroupWise user has a GroupWise address that consists of a user ID, the user's post office name, the GroupWise domain name, and, optionally, an Internet domain name. The following diagram illustrates the logical organization of a GroupWise system with multiple domains and post offices. All of the objects under the domain belong to that domain. All of the objects under a post office belong to that post office. GroupWise System Primary Secondary Domain Domain Message Message 5) — Transfer ODO — Transfer Agent Agent Post re À Office ar Bl 4 # Office Office Agent Agent AAA aed GroupWise Users GroupWise Users Post ee (SR Office on i A 4 Office Office Agent Agent ¿223424 GroupWise Users GroupWise Users Creating a New Domain 109 Messages are moved from user to user through your Group Wise system by the Group Wise agents. As illustrated above, each domain must have a Message Transfer Agent (MTA) running for it. The MTA transfers messages between domains and between post offices in the same domain. Each post office must have at least one Post Office Agent (POA) running for it. The POA delivers messages to users’ mailboxes and performs a variety of post office and mailbox maintenance activities. When you add a new domain to your Group Wise system, links define how messages are routed from one domain to another. When you add the first secondary domain, the links between the primary and secondary domains are very simple. As the number of domains grows, the links among them can become quite complex. Links are discussed in detail in Chapter 10, “Managing the Links between Domains and Post Offices,” on page 131. Physically, a domain consists of a set of directories that house all the information stored in the domain. To view the structure of a domain directory, see “Domain Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. The domain directory does not contain mailboxes or messages, but it does contain other vital information. For an overview, see “Information Stored in the Domain” on page 558. Domain directories can be located on NetWare, Linux, and Windows servers. Planning a New Domain After you have your basic GroupWise system up and running, you might need to expand it by adding one or more domains. The GroupWise architecture lets you create a simple, single domain system, or a complex system that links dozens of domains across a campus, a city, or around the world. This section provides the information you need in order to decide when, where, and how to set up anew domain. The “Domain Worksheet” on page 122 lists all the information you need. You should print the worksheet and fill it out as you complete the tasks listed below. + “Determining When to Add a New Domain” on page 111 + “Deciding Who Will Administer the New Domain” on page 111 + “Planning Post Offices in the New Domain” on page 112 + “Determining the Context for the Domain Object” on page 112 + “Choosing the Domain Name” on page 114 + “Deciding Where to Create the Domain Directory” on page 114 + “Deciding Where to Install the Agent Software” on page 115 + “Deciding How to Link the New Domain” on page 117 + “Selecting the Domain Language” on page 118 + “Selecting the Domain Time Zone” on page 118 After you have completed the tasks and filled out the “Domain Worksheet” on page 122, you are ready to continue with “Setting Up the New Domain” on page 118. 110 GroupWise 6.5 Administration Guide Determining When to Add a New Domain How do you know when you should add a domain? The answer to this depends on your administration policies and on physical and logical network organization. Although a single domain can contain as many post offices and users as you want to add, there are some conditions that indicate the need for a new domain: + Administrative Convenience: To spread out the administrative workload, you can create one or more new domains with their own administrators. Each new domain can be managed by a different administrator as long as each administrator has sufficient rights to connect to it and write to the domain directory. + Remote Sites: Ifcommunication between servers is slow, or if you have remote sites, you can add a new domain to minimize mail traffic between the servers. For example, if you have locations inthree separate cities, you might have an organization that represents each location. You could then create a domain in each organization. You could administer all of the domains from one location or you could assign a different administrator for each one. + Demand on the MTA: Each domain has its own MTA that routes messages between post offices within its domain. If your current domain has many post offices that are placing a heavy workload on the MTA, you might want to create another domain to handle additional post offices. + Multiple eDirectory Trees: All of the objects that are logically subordinate to a Group Wise domain must be in the same Novell® eDirectory™ tree as the domain. If you have users in other eDirectory trees that need Group Wise accounts, you must create secondary domains and post offices in each tree. Deciding Who Will Administer the New Domain Any user who is an Admin equivalent can administer Group Wise. We recommend that whoever creates the new domain should be an Admin eguivalent so that he or she has the necessary rights to create objects and directories. You can then assign a different user as a domain administrator and limit rights to other objects if necessary. For more information, see Chapter 84, “Group Wise Administrator Rights,” on page 1053. Depending upon the size, complexity, and layout of your eDirectory tree, you might choose a centralized administration model with one person administering both eDirectory and Group Wise, or you might choose a distributed administration model with the administration workload shared by two or more individuals. With a distributed administration model, each administrator obtains rights to the Group Wise objects and directory structures over which he or she has jurisdiction. If you want to restrict access to some network operations or to certain domains, you can limit access rights to domains the user should not administer. The user assigned as the administrator must be able to create or modify objects in the domain and will receive an e-mail message whenever an agent encounters a problem. You can designate yourself, one or more other users, or a distribution list as an administrator. WORKSHEET Under Item 10: Domain Administrator, enter the ID ofthe user or distribution list that will administer this domain. The items in the worksheet are listed in the order you will enter them when setting up your domain. This planning section does not follow the same order as the worksheet, but all worksheet items are covered. Creating a New Domain 111 Planning Post Offices in the New Domain Before adding the new domain, you should plan the post offices that you want to belong to the domain. You should consider the following issues when planning post offices. + Physical Organization: If your network spans several sites, you might want to create post offices (if not domains) at each physical location. This reduces the demands on long-distance network links. Logical Organization: Grouping users who frequently send messages to each other is faster and generates less network traffic than if messages travel between different post offices and domains. Number of Users: A typical post office can serve from 1000 to 2500 users, depending on its configuration. Larger post offices are possible, but grouping similar users might be preferable. Demand on the POA: Each post office has at least one POA that delivers messages to users’ mailboxes and performs other post office maintenance tasks. It is possible to run multiple POAs, located on different servers, for the same post office, or you might prefer to create multiple post offices. For more details, see “Planning a New Post Office” on page 148. Determining the Context for the Domain Object When deciding where to place the new Domain object in the eDirectory tree, you should consider how you can most easily administer Group Wise and how the domain and its associated post offices fit into the logical organization of your eDirectory tree. Domains and their associated objects, including Post Offices, Users, Resources, and Distribution Lists, must be located in the same eDirectory tree. If you have multiple trees, you must create a separate domain in each tree. The domains can all belong to the same GroupWise system. You can place the domain in any context in an eDirectory tree. The following diagrams provide some examples of how domains can be placed in the eDirectory tree: + + + + “GroupWise Objects Reflect Physical Locations” on page 112 “GroupWise Objects Reflect Company Organization” on page 113 “GroupWise Objects Are Grouped with Servers” on page 113 “GroupWise Objects Are Located in a Separate GroupWise Container” on page 113 WORKSHEET Under Item 1: Tree Name, specify the name of the eDirectory tree where you plan to create the new domain. Under Item 2: eDirectory Container, specify the name of the eDirectory container where you plan to create the new domain. GroupWise Objects Reflect Physical Locations The Group Wise system below focuses on the physical layout of the company. Because most mail traffic is probably generated by users in the same location, the mail traffic across the WAN is minimized. An organizational unit was created for each site. A domain was created under each organizational unit, corresponding to the city. The sites can be administered centrally or at each site. Administrator rights can be assigned at the domain level. 112 GroupWise 6.5 Administration Guide 3- Corporate 5-8 Los Angeles 13 LA-Dom1 Qu LA-PO1-1 5-8 New York Qa NY-P01-1 1 NY-Dom' GroupWise Objects Reflect Company Organization The following Group Wise system focuses on departmental organization, as does the eDirectory tree. GroupWise domains and post offices parallel eDirectory organizational units, placing the domains and post offices within the organizational units containing the users that will belong to them. =) Corporate E-%8 Accounting H-A Acct-Dom H-A Acct-P01 5-8 Development H-Q Dev-Dom ca Qh DewP01 2-8 Manufacturing 1-8 Sales GroupWise Objects Are Grouped with Servers Because domains and post offices have directory structures on network servers, you could also choose to place the Domain and Post Office objects in the same context as the servers where the directories will reside, as shown in the following example. =) Corporate 28 Accounting 28 Development H-B Manufacturing 1-8 Sales [28 Servers H-A Acct-Dom t Acct-PO1 (8) Dev-Dom H-E PRV-GW NSSVOL pRw-ew sys GroupWise Objects Are Located in a Separate GroupWise Container Domains and post offices can also be created in their own organizational unit. Administratively, this approach makes it easier to restrict a Group Wise administrator’s object and property rights to Group Wise objects only. For information about Group Wise Administrator rights, see “Deciding Who Will Administer the New Domain” on page 111. a- Corporate 88 Accounting 28 Development 228 GroupWise &-@ Acct-Dom Qa Acct-Po1 #-@ Dev-Dom Qa Dew-P01 28 Manufacturing “8 Sales Creating a New Domain 113 Choosing the Domain Name The domain requires a unique name. The name is used as the Domain object’s name in eDirectory. It is also used for addressing and routing purposes within GroupWise, and might appear in the GroupWise Address Book. The domain name can reflect a location, company name or branch name, or some other element that makes sense for your organization. For example, you might want the domain name to be the location (for example, Provo) while the post office name is one of the company’s departments (for example, Research). Name the new domain carefully. After it is created, the name cannot be changed. The domain name can consist of one or more words. Use underscores (_) rather than spaces as separators between words to facilitate addressing across the Internet. Do not use any of the following invalid characters in the domain name: ASCII characters 0-13 Comma, Asterisk * Double quote " At sign @ Extended characters Braces { } Parentheses ( ) Colon : Period . WORKSHEET Under Item 3: Domain Name, specify the domain name. Under Item 8: Domain Description, provide a description for the new domain. Deciding Where to Create the Domain Directory Logically, the Domain object resides in eDirectory and is administered through ConsoleOne*. Physically, the domain has a directory structure for databases, message queues, and other files. The domain directory structure can be created on NetWare® servers (NetWare 6.x, NetWare 5.x, NetWare 4.2, or NetWare 3.12), Linux servers (SUSE Standard or Enterprise Server 8, Red Hat* Enterprise Linux 3 ES or AS), or Windows servers (Windows 2000 or Windows NT*). The server where you create the domain directory structure can be in the same tree as the Domain object or in another tree. Many different configurations are possible. When deciding where to create the domain directory, you should consider the following. + Domain Directory Space Requirements: The domain directory requires less than 10 MB of free disk space. However, this requirement could increase as your system grows. + Network Access by the MTA: Ifthe MTA is not installed on the same server with the domain directory, the MTA must have direct network access (mapped drive or file system mount) to the domain directory and, depending on link configuration, to the post office directories. This issue is discussed in detail in “Deciding Where to Install the Agent Software” on page 115. + Security from User Access: Users never need access to the domain directory so you should create it in a location you can easily secure; otherwise, you could have files inadvertently moved or deleted. 114 GroupWise 6.5 Administration Guide Choose an empty directory for the new domain. If you want, the directory can reflect the name of the domain, for example, res dev for the Research and Development domain. On NetWare and Windows, use a maximum of 8 characters in the directory name. On Linux, use only lowercase characters in the directory name. Choose the name and path carefully. After the domain directory is created, it is difficult to rename it. Ifthe directory you specify does not exist, it will be created when you create the domain. Do not create the domain directory under another domain or post office directory. WORKSHEET Under Item 4: Domain Database Location, enter the full path for the domain directory. Under Item 9: Network Type, enter the type of network in use at that location. Deciding Where to Install the Agent Software You mustrun a new instance ofthe MTA for each new domain. To review the functions ofthe MTA for the domain, see “Role of the Message Transfer Agent” on page 559. For complete installation instructions and system requirements, see “Installing Group Wise Agents” in the Group Wise 6.5 Installation Guide. When planning the installation of the MTA, you need to consider how the new domain links to existing domains and how the new domain will link to its post offices. For an overview of link configuration, see Chapter 10, “Managing the Links between Domains and Post Offices,” on page 131. The MTA requires direct network access to the domain directory and, depending on the link configuration, to each post office directory. Consider the following alternatives when selecting a location for the MTA relative to the domain and its post offices: + “MTA Access to the New Domain: Local vs. Remote” on page 115 + “MTA Access to New Post Offices: Mapped and UNC Links vs. TCP/IP Links” on page 116 + “Cross-Platform Access Issues” on page 117 WORKSHEET Under ltem 11: Agent Location, indicate whether you plan to run the MTA on the same server where the domain directory is located, or on a different server. Under ltem 12: Agent Platform, enter the platform of the server where the MTA will run (NetWare, Linux, or Windows). MTA Access to the New Domain: Local vs. Remote Running the MTA locally on the same server where the domain and post offices reside simplifies network connections (no login is required), reduces network traffic, and protects database integrity. In the following diagram, the agent software is installed on the same server where the domain and post office reside. POA MTA 2 POA MTA 2 hi Acct-Dom A Dev-Dom Acct-PO1 Dev-PO1 Creatinga New Domain 115 Running the MTA on a remote server allows you to place the heaviest processing load on your highest performing server. In the following diagram, the agent software is installed on a different server from where the domains and post offices reside. D $ al Lor Dev-Dom Dev-PO1 — $ POA A s When you run the MTA on a different server from where its directory structures and databases are located, you need to provide adequate access. + Ifthe NetWare® MTA needs direct network access to another NetWare server, you must add the /dn switch or the /user and /password switches to the MTA startup file to provide authentication information. + Ifthe Linux MTA needs direct network access to another Linux server, you must mount the file system where the domain is located before you start the Linux MTA. + Ifthe Windows MTA needs direct network access to another Windows server, you must map a drive to the other server before you start the Windows MTA. MTA Access to New Post Offices: Mapped and UNC Links vs. TCP/IP Links If the new domain will include multiple post offices, the post offices will probably reside on different servers from where the domain is located. If you plan to use mapped or UNC links between the domain and its post offices, the MTA requires the same access to the post office directories as it requires to the domain directory. NetWare Wi en 9 NetWare # # E Acct-Dom "à Lor Dev-Dom Acct- dias N Dev-PO1 + POA Ro + Ifthe NetWare MTA needs access to a post office on another NetWare server, you must add the /dn switch or the /user and /password switches to the MTA startup file to provide authentication information. + Ifthe Windows MTA needs access to a post office on another Windows server, you must map a drive to the other server before you start the Windows MTA. NOTE: The Linux MTA reguires TCP/IP links to the POA. To avoid these direct network access reguirements between the MTA and its post offices, you can use TCP/IP links between the domain and its post offices. gr M rail nee Acct- väita A Dev-Dom Acct-PO1 (el o > Dev-PO1 A on MKS a 116 GroupWise 6.5 Administration Guide When using TCP/IP links, the MTA does not write message files into message gueues in the post office directory structure. Instead, the MTA communicates the information to the POA by way of TCP/IP and then the POA uses its direct network access to write the information. Cross-Platform Access Issues In most cases, it is most efficient if you match the MTA platform with the network operating system where the domain resides. For example, if you create a new domain on a NetWare server, use the NetWare MTA. If you decide not to run the MTA on the same platform as the domain, the MTA must still have direct network access to the domain directory so that it can write to the domain database (wpdomain.db). For example, you could set up the new domain on a NetWare server and run the Windows MTA on an Windows server to service it. Windows NetWare 2 M A > À Dev-Dom Dev-PO1 POA ae However, the NetWare MTA could not service a domain located on an Windows server because Windows does not support the required cross-platform connection. If you are using mapped or UNC links to post offices, the MTA must also have direct network access to the post office directories so that it can write messages files into the post office message queues. You could, for example, run the agents on an Windows server while domains and post offices were located on NetWare servers. om Y E Acct-Dom Ly (SS Dev-Dom Dev-PO1 =_% Acct-PO1 PD > Again, the opposite combination of NetWare agents servicing domains and post offices on Windows servers is not an option because Windows does not support the required cross-platform connection. To avoid these cross-platform access issues, use TCP/IP links between a domain and its post offices. For more detailed information, see “Cross-Platform Issues between Domains and Post Offices” on page 561. Deciding How to Link the New Domain Domain links tell the MTAs how to route messages between domains. Properly configured links optimize message flow throughout your GroupWise system. For a review of link types, see “Domain-to-Domain Links” on page 131. Creating a New Domain 117 When you create the new domain, you link it to one existing domain. By default, this link is a direct link using TCP/IP as the link protocol, which means the new domain’s MTA communicates with the existing domain’s MTA through TCP/IP. If desired, you can configure the direct link to use a UNC path as the link protocol, which means the new domain’s MTA transfers information to and from the existing domain by accessing the existing domain’s directory WORKSHEET Under Item 7: Link to Domain, specify the existing domain that you want to link the new domain to, then specify the link protocol (TCP/IP or UNC path). After you create the new domain, you can configure links to additional domains as needed. See “Using the Link Configuration Tool” on page 136. Selecting the Domain Language The domain language determines how times, dates, and numbers are displayed in the GroupWise client and determines the sorting rules for items in the GroupWise Address Book. WORKSHEET Under Item 5: Domain Language, specify the domain language. Selecting the Domain Time Zone When a message is sent from a user in one time zone to a user in another time zone, GroupWise adjusts the message’s time so that it is correct for the recipient’s time zone. For example, if a user in New York (GMT -05:00, Eastern Time) schedules a user in Los Angeles (GMT -08:00, Pacific Time) for a conference call at 4:00 p.m. Eastern Time, the appointment is scheduled in the Los Angeles user’s calendar at 1:00 p.m. Pacific Time. The domain time zone becomes the default time zone for each post office in the domain. WORKSHEET Under Item 6: Domain Time Zone, enter the time zone. Setting Up the New Domain You should have already reviewed “Planning a New Domain” on page 110 and filled out the “Domain Worksheet” on page 122. Complete the following tasks to create the new domain. + “Creating the New Domain” on page 119 + “Configuring the MTA for the New Domain” on page 120 + “Installing and Starting the New MTA” on page 121 118 GroupWise 6.5 Administration Guide Creating the New Domain 1 Make sure you are logged in to the tree where you want to create the domain (worksheet item 1). 2 In ConsoleOne, browse to and right-click the eDirectory container where you want to create the domain (worksheet item 2), then click New > Object. fem obiet x Create object in: “8 CORP TREE/GroupWise.Provo OK | BEES Z Cancel | © GroupWise Distribution List GroupWise Domain [ai GroupWise External Entity Si GroupWise Library QA GroupWise Post Office GroupWise Resource 3 Double-click GroupWise Domain, then fill in the fields in the Create GroupWise Domain dialog box (worksheet items 3 through 7). [Create GroupWise Domain xi Domain name: [ox | Domain Database Location: _ Cancel | Language: English - US +] Time Zone: (GMT-07:00) Mountain Time (US 8 Canada) Éd Link To Domain: San Jose +] FN Configure link C Define additional properties E Create another domain 4 Make sure the Configure Links and Define Additional Properties options are selected, then click OK to display the Link Configuration Wizard. Link Configuration Wizard MTA Link The Message Transfer Agent (MTA) can link to the other domain through a TCPAP connection to the other domain's MTA ora direct connection to the other domain's directory. Novell. How do you want the MTA to link to the other domain? C Direct link © TCPIIP link aux | | Cancel Finish Help | Creating a New Domain 119 5 Followthe on-screen instructions to define how the new domain links to the existing domain (listed in the Link to Domain field). When you’ve finished defining the link, ConsoleOne creates the Domain object and displays the domain Identification page. Properties of Provo1 E E xl NDS Rights + | Other | Rights to Files and Folders | Domain: Provo1 Description: y UNC Path: [PRv-owisyStgwsystemiprovo 1 al Language: [English - US +] Domain Type: Primary Time Zone: (GMT-07:00) Mountain Time (US € Canada) = Database Version: 6.5 Network Type: [Novell NetWare >] Administrator: o] Clear Page Options... | (6) Cancel | Apply | Help 6 Fill in the fields that have not been filled in for you (worksheet items 8 through 10). 7 Click OK to save the domain information. Configuring the MTA for the New Domain 120 Although there are many MTA settings, the default settings are sufficient to get your domain operational. However, there are a few important settings that you can conveniently modify before you install the agent software. 1 In ConsoleOne, double-click the new Domain object. 2 Right-click the MTA object, then click Properties to display the MTA Identification page. x Domain: Provo1 Distinguished Name: MTA.Provo1.GroupWise Name: MTA Agent Type: Message Transfer Description: GroupWise Message Transfer Agent Platform: [Netware Loadable Module +] Page Options... | o Cancel | Apply | Help GroupWise 6.5 Administration Guide Enter a description for the MTA. This description displays on the MTA agent console as the MTA runs. Select the platform where the MTA will run (worksheet item 12). If you have multiple domains in your system and want to use TCP/IP to link to the other domains (worksheet item 7), follow the instructions in “Using TCP/IP Links between Domains” on page 579. If you have created the domain in a clustered environment, follow the instructions in the appropriate section of the Group Wise 6.5 Interoperability Guide: + “Installing and Configuring the MTA and the POA in a Cluster” in “Novell Cluster Services” + “Installing and Configuring the MTA and the POA in a Cluster” in “Microsoft Clustering Services” To ensure that user information in the new domain stays synchronized with user information in eDirectory, follow the instructions in “Using eDirectory User Synchronization” on page 598. For more MTA configuration options, see “Changing MTA Configuration to Meet Domain Needs” on page 130. Click OK to save the MTA configuration information. Installing and Starting the New MTA To install the MTA for the new domain to the location recorded under worksheet item 11, follow the instructions in “Installing Group Wise Agents” in the Group Wise 6.5 Installation Guide. For additional MTA-specific instructions, see Chapter 42, “Installing and Starting the MTA,” on page 565. Continue with What's Next. What's Next After you have added the new domain and started its MTA, you are ready to continue to expand and enhance your Group Wise system by: + + + Adding post offices to the new domain. See “Post Offices” on page 145. Configuring the MTA for optimal performance. See “Message Transfer Agent” on page 555. Setting up Group Wise Monitor to monitor the Group Wise agents. See “Monitor” on page 901. Connecting domains and Group Wise systems across the Internet using the Group Wise Internet Agent. See “Internet Agent” on page 659. Connecting domains and Group Wise systems using gateways. For a list of gateways, see Group Wise 6.x Gateways (http://www.novell.com/documentation/gw6xgate/index.html). GroupWise 5.5 gateways can be used with GroupWise 6.x. Creating a New Domain 121 Domain Worksheet Use this worksheet as you complete the tasks described in “Planning a New Domain” on page 110. Item 1) Tree Name: 2) eDirectory Container: 3) Domain Name: 4) Domain Database Location: 5) Domain Language: 6) Domain Time Zone: 7) Link to Domain: Link Protocol: + UNC path + TCP/IP Address: Port: 8) Domain Description: 9) Network Type: 10) Domain Administrator: 11) Agent Location: + MTA on the same server as the domain (local) + MTA on a different server from the domain (remote) 12) Agent Platform: + NetWare MTA + Linux MTA + Windows MTA Explanation Specify the name ofthe eDirectory tree where you want to create the secondary domain. For more information, see “Determining the Context for the Domain Object” on page 112. Specify the name of the eDirectory container where you want to create the new domain. For more information, see “Determining the Context for the Domain Object” on page 112. Specify a name for the new domain. Choose the name carefully. After the domain is created, it cannot be renamed. For more information, see “Choosing the Domain Name” on page 114. Specify the path for the domain directory. Choose the domain directory carefully. After it is created, it is difficult to rename. For more information, see “Deciding Where to Create the Domain Directory” on page 114. Specify a default language for the domain. For more information, see “Selecting the Domain Language” on page 118. Specify the time zone where the domain is located. For more information, see “Selecting the Domain Time Zone” on page 118. Specify the existing domain that you want to link the new domain to, then specify the link protocol. If you select TCP/IP, enter the IP address or hostname of the server where the MTA will run and the port number that the MTA will listen on. For more information, see “Deciding How to Link the New Domain” on page 117. Enter a description for the domain to help you identify its function in the system. Specify the network type in use on the server where this domain will be located. For more information, see “Deciding Where to Create the Domain Directory” on page 114. Enter the ID of the user or distribution list that will administer this domain. For more information, see “Deciding Who Will Administer the New Domain” on page 111. Mark the location of the MTA relative to the domain. For more information, see “Deciding Where to Install the Agent Software” on page 115. Specify the platform on which you plan to run the MTA. For more information, see “Deciding Where to Install the Agent Software” on page 115. 122 GroupWise 6.5 Administration Guide Managing Domains As your Group Wise” system grows and evolves, you might need to perform the following maintenance activities on domains: + + + + + + “Connecting to a Domain” on page 123 “Editing Domain Properties” on page 124 “Converting a Secondary Domain to a Primary Domain” on page 126 “Moving a Domain” on page 127 “Deleting a Domain” on page 128 “Changing MTA Configuration to Meet Domain Needs” on page 130 See also Chapter 26, “Maintaining Domain and Post Office Databases,” on page 345. Connecting to a Domain Whenever you change domain information, it is most efficient to connect directly to the domain before you begin making modifications. To change your domain connection: 1 In ConsoleOne* in the Console View, click Tools > Group Wise System Operations, click Select Domain, browse to and select the domain directory, then click OK. or In the GroupWise View, right-click the Domain object, then click Connect. The Group Wise view identifies the domain to which you are connected by adding a plug symbol to the domain icon. Q Manufacturing QA RED E-S Provo2 QA Accounting Sales The domain marked with the red underscore is the primary domain. Managing Domains 123 Editing Domain Properties After creating a domain, you can change some domain properties. Other domain properties cannot be changed. 1 In ConsoleOne, browse to and right-click a Domain object, then click Properties to display the domain Identification page. x Domain: Provo1 Description: UNO Path: [uPRV-GWiSYStgwsysteriprovot\ (=) Language: [Engiisn- US +] Domain Type: Primary Time Zone: (GMT-07:00) Mountain Time (US 8 Canada) bal Database Version: 6.5 Network Type: [Novell NetWare +] Administrator: [ el Clear Page Options... | (6) Cancel | Apply | Help 2 Change editable fields as needed. For information about individual fields, see “Planning a New Domain” on page 110 or use online help when editing the domain information. 3 Click GroupWise > Post Offices to display the Post Offices page. Properties of Provo1 1 x| GroupWise + | NDS Rights + | Other | Rights to Files and Folders | Post Offices GroupWise Post Offices: Development Gro! E Manufacturing.GroupWise.Provo Page Options... | OF Cancel | Apply | Help All post offices in the domain are listed, no matter where their Novell® eDirectory™ objects are placed in the tree. This is a convenient place to delete post offices from the domain. 4 Click GroupWise > Address Book to display the Address Book page. 124 GroupWise 6.5 Administration Guide Properties of Provo1 x| GroupWise + | NDS Rights + | Other | Rights to Files and Folders | Address Book Sort address book by: [First Name, Last Name +] Address Book Fields: Available Fields: Given Name (required) Account ID Last Name (required) Description Phone Distinguished Name Object ID Middle Initial Post Office Name «| Personal Title Domain Name Qualifier Department > Title Network ID File ID Fax t|] Editi apel *Administrator-defined field [7 Do Not Display User Comments Page Options... | OK | Cancel | Apply | Help | 5 Use this page to configure the Address Book to control how it appears to Group Wise client users in all post offices in the domain. See Chapter , “Address Book,” on page 81 for more information. 6 Click GroupWise > Addressing Rules to display the Addressing Rules page. Properties of Provol 4] xj Addressing rules used by this domain: Page Options... | OP | Cancel | Apply | Help | This page lists all addressing rules that have been set up for the domain. See Chapter , “Addressing Rules,” on page 97 for more information. 7 Click GroupWise > Internet Addressing to display the Internet Addressing page. Managing Domains 125 Override | Addressing format: E UserlD.Post Office. Domain@internet domain name Internet domain name: A y OF ning tral ipien nawn exc aly By thi Internet Agent for outbound SMTP/MIME messages: Page Options... p Cancel Apply | Help Use this page to override any Internet addressing settings established at the system level. See Chapter , “Internet-Style Addressing,” on page 87 for more information. 8 Click Group Wise > Default WebAccess to display the Default WebAccess page. Properties of Provol xi IDS Rights v | Other | Rights to Files and Folders | Override | Default WebAccess Gateway: 0 | Om... A Page Options... 0 Cancel Apply | Help Use this page to designate the default WebAccess Agent (gateway) for the domain. See “WebAccess” on page 803 for more information. 9 Click OK to save the new domain settings. Converting a Secondary Domain to a Primary Domain You can change which domain is primary if it becomes more convenient to administer the primary domain from a different location. You can, however, have only one primary domain at a time. When you convert a secondary domain to primary, the old primary domain becomes a secondary domain. 126 GroupWise 6.5 Administration Guide To convert a secondary domain to primary: 1 In ConsoleOne, connect to the primary domain, as described in “Connecting to a Domain” on page 123. 2 Make sure there are no pending operations for the current primary domain. See “Pending Operations” on page 51. 3 In ConsoleOne, browse to and select the secondary domain you want to convert. 4 Click Tools > Group Wise Utilities > System Maintenance. [E Groupwise System Maintenance xÍ C Validate Database Run C Recover Database Close C Rebuild Database Hel C Reclaim Unused Space He | C Rebuild Indexes for Listing C Sync Primary with Secondary C Release Secondary Cu C Re 2 f any with Secondar Description: Convert to primary promotes a secondary domain to primary. The existing primary domain for the system becomes a secondary domain. 5 Click Convert Secondary to Primary. 6 Enter the path to the secondary domain database, then click OK. The GroupWise View in ConsoleOne displays the primary domain with a red underscore. Groupwyis E-Q Provot Q Manufacturing QA RED E-3) Provo2 QA Accounting Qh Sales Moving a Domain You cannot use ConsoleOne to move a Domain object to a different location in the eDirectory tree because it is a container object. Only leaf objects can be moved. If you need to change the context, graft the GroupWise domain to its corresponding eDirectory object in the new container location. See “GW / eDirectory Association” on page 73 for more information about grafting objects. You can, however, move the domain directory and the domain database (wpdomain.db) by copying the domain directory structure and all its contents to the new location. IMPORTANT: Follow these instructions if you want to move a domain on a NetWare or Windows server to another directory on the same server or to a different NetWare or Windows server. If you want to move a domain located on a NetWare or Windows server onto a Linux server, see “Moving a Domain to Linux” in “Update” in the GroupWise 6.5 Installation Guide. 1 Back up the domain. See Chapter 31, “Backing Up Group Wise Databases,” on page 375. Managing Domains 127 2 In ConsoleOne, browse to and right-click the domain to move, then click Properties to display the domain Identification page. 3 Inthe UNC Path field, change the UNC path to the location where you want to move the domain, then click OK to save the new location. The location change will be propagated throughout your Group Wise system. 4 Stop the MTA and any gateways running for the domain. 5 Use xcopy with the /s and /e options to copy the domain directory and database to the new location. These options re-create the same directory structure even if directories are empty. Example: xcopy domain directory /s /e destination 6 Give rights to all objects that need to access the domain database. For example, the NetWare® MTA needs rights if the new location is on a different server. 7 Edit the MTA and gateway startup files to reflect the changes, then restart the MTA and gateways. See “Adjusting the MTA for a New Location of a Domain or Post Office” on page 587. 8 When you are sure the domain is functioning properly in its new location, delete the original domain directory and its contents. If you need to move the MTA along with its domain, see “Moving the MTA to a Different Server” on page 586. Deleting a Domain You can delete a domain only when it no longer owns subordinate Group Wise objects. For example, you cannot delete the primary domain of your Group Wise system if it still owns secondary domains. You cannot delete a secondary domain if it still owns post offices. However, MTA and Gateway objects are automatically deleted along with the Domain object. 1 In ConsoleOne, connect to the primary domain of your GroupWise system, as described in “Connecting to a Domain” on page 123. 2 Browse to and right-click the Domain object you want to delete, then click Properties to display the domain Identification page. 128 GroupWise 6.5 Administration Guide Properties of Provol x| [GroupWise + || NDS Rights + | Other | Rights to Files and Folders | Domain: Provo1 Description: | L _ | UNC Path: [iPRv-6wSYSigwsystemprovon S ë Language: [Engiisn-us | Domain Type: Primary Time Zone: (GMT-07:00) Mountain Time (US & Canada) hd Database Version: 6.5 Network Type: [Noven Netware >| Administrator: [ el Clear | Page Options... | Op Cancel | Apply | Help 3 Verify that the current directory path displayed on the domain Identification page is correct. 4 Click Post Offices, then move or delete any post offices that belong to this domain. See “Moving a Post Office” on page 183 and “Deleting a Post Office” on page 184. Properties of Provol 4 x| GroupWise + | NDS Rights + | Other | Rights to Files and Folders | Post Offices GroupWise Post Offices: Development GroupWise. Prova Manufacturing.GroupWise.Provo Delete | Page Options... | Op Cancel | Apply | Help | 5 Right-click the Domain object, then click Delete to delete the Domain object from eDirectory. 6 When prompted, click Yes to delete the corresponding domain directory structure. 7 Stop the MTA for the domain and uninstall the MTA software if applicable. See “Stopping the MTA” on page 609 and “Uninstalling the MTA Software” on page 573. Managing Domains 129 Changing MTA Configuration to Meet Domain Needs Because the MTA transfers messages between domains and between post offices in the same domain, its functioning affects the domain itself, local users in post offices belonging to the domain, and users who exchanges messages with local users in the domain. Proper MTA configuration is essential for a smoothly running Group Wise system. Complete details about the MTA are provided in “Message Transfer Agent” on page 555. As you create and manage domains, you should keep in mind the following aspects of MTA configuration: + “Enhancing Domain Security with SSL Connections to the MTA” on page 589 + “Restricting Message Size between Domains” on page 588 + “Scheduling Direct Domain Links” on page 593 + “Optimizing TCP/IP Links” on page 635 130 GroupWise 6.5 Administration Guide Managing the Links between Domains and Post Offices When you create a new secondary domain in your Group Wise? system or a new post office in a domain, you configure one direct link to connect the new domain or post office to a domain in your Group Wise system. For simple configurations, this initial link might be adequate. For more complex configurations, you must modify link types and protocols to achieve optimum message flow throughout your Group Wise system. The following topics help you manage links between domains and post offices: + “Understanding Link Configuration” on page 131 + “Using the Link Configuration Tool” on page 136 + “Interpreting Link Symbols” on page 143 + “Modifying Links” on page 144 Understanding Link Configuration In GroupWise, a link is defined as the information reguired to route messages between domains, post offices, and gateways in a Group Wise system. Initial links are created when domains, post offices, and gateways are created. The following topics help you understand link configuration: + “Domain-to-Domain Links” on page 131 + “Domain-to-Post Office Links” on page 134 + “Link Protocols for Direct Links” on page 134 Domain-to-Domain Links The primary role of'the MTA is to route messages from one domain to another. Domain links tell the MTA how to route messages between domains. Domain links are stored in the domain database (wpdomain.db). There are three types of links between source and destination domains: + “Direct Links” on page 132 + “Indirect Links” on page 132 + “Gateway Links” on page 134 Asan alternative to configuring individual links between individual domains throughout your GroupWise system, you can establish a system of one or more routing domains. See “Using Routing Domains” on page 591. Managing the Links between Domains and Post Offices 131 Direct Links Indirect Links In a direct link between domains, the source domain’s MTA communicates directly with the destination domain’s MTA. If it is using a TCP/IP link, the source domain MTA communicates messages to the destination domain MTA by way of TCP/IP, which does not require disk access by the source MTA in the destination domain. If it is using a mapped or UNC link, the source domain MTA writes message files into the destination domain MTA input queue, which does require disk access by the source MTA in the destination domain. For additional details about the configuration options for direct links, see “Link Protocols for Direct Links” on page 134. Domain A Domain B Q UNC Path Q ————— Mapped Drive TCP/IP Direct links can be used between all domains. This is a very efficient configuration but might not be practical in a large system. Domain 1 FRS Domain 5 Domain 2 va Domain 4 ~ Domain 3 In an indirect link between domains, the source domain’s MTA routes messages through one or more intermediate MTAs in other domains to reach the destination domain’s MTA. In other words, an indirect link is a series of two or more direct links. In large systems, direct links between each pair of domains might be impractical, so indirect links can be common. A variety of indirect link configurations are possible, including: + “Simple Indirect Links” on page 133 + “Star Configuration” on page 133 + “Two-Way Ring Configuration” on page 133 + “Combination Configuration” on page 134 Properly configured links optimize message flow throughout your Group Wise system. 132 GroupWise 6.5 Administration Guide Simple Indirect Links In simplest form, an indirect link can be used to pass messages between two domains that are not directly linked. Domain A UNC Path UNC Path Mapped Drive /,v +, NX Mapped Drive TCP/IP + Indirect 5, N TCP/IP e Link ` Domain B Domain C Star Configuration In a star configuration, one central domain is linked directly to all other domains in the system. All other domains are indirectly linked to each other through the central domain. Domain 2 Domain 6 [| Domain 3 See Q IN Ro 5 © 4 If you have more than ten domains, you might want to designate the central domain as a routing domain. The sole function of a routing domain is to transfer messages between other domains; it has no post offices of its own. See “Using Routing Domains” on page 591. The major drawback of the star configuration is that the central domain is a single point of failure. Two-Way Ring Configuration In a two-way ring configuration, each domain is directly linked to the next and previous domains in the ring and indirectly linked to all other domains in the system. Domain 1 PK Domain 5 Domain 2 Q Q Q ET Domain 4 ~ Domain 3 Managing the Links between Domains and Post Offices 133 An advantage of'the two-way ring configuration is that it has no single point of failure. A disadvantage is that, depending on the size of the system, a message might go through several domains before arriving at its destination. A two-way ring works well in a system with five domains or less because transferring a message never reguires more than two hops. Combination Configuration These three basic link configurations can be combined in any way to meet the needs of your Group Wise system. Gateway Links In a gateway link between domains, the sending domain’s MTA must route the message through a gateway to reach its destination. Gateways can be used to: + Link domains within your Group Wise system. See “Using Gateway Links between Domains” on page 583. + Link your Group Wise system to another GroupWise system through an external domain. See “Using Direct Links” in “Connecting to GroupWise 5.x and 6.x Systems” in the Group Wise 6.5 Multi-System Administration Guide + Link your Group Wise system to a different e-mail system through a non-Group Wise domain. See “Connecting to Non-Group Wise Messaging Systems” in the Group Wise 6.5 Multi-System Administration Guide. A variety of Group Wise gateways are available. For a list of gateways, see GroupWise 6.x Gateways (http://www.novell.com/documentation/gw6xgate/index.html). GroupWise 5.5 gateways can be used with GroupWise 6.x. You cannot locate a post office across a gateway link from its domain. This would preclude locating a post office across a modem connection. Domain-to-Post Office Links Between a domain and its post offices, all links must be direct links. There are no alternative link types between a domain and its post offices. Link Protocols for Direct Links The link protocol of a direct link between domains determines how the MTAs for the domains communicate with each other across the link. When you create a new domain, you must link it to an existing domain. This creates the initial domain-to-domain link. Between a domain and a post office, the link protocol determines how the MTA transfers messages to the post office. Messages do not flow directly from one post office to another within a domain. Instead, they are routed through the domain. When you create a new post office, you must specify which domain it belongs to. This creates the initial domain-to-post office link. There are three link protocols for direct links between domains and between a domain and its post offices: + “TCP/IP Links” on page 135 + “Mapped Links” on page 135 + “UNC Links” on page 135 NOTE: On Linux, TCP/IP links are required. 134 GroupWise 6.5 Administration Guide TCP/IP Links Mapped Links UNC Links Domain-to-Domain TCP/IP Links Ina TCP/IP link between domains, the source MTA and the destination MTA communicate by way of TCP/IP rather than by writing message files. The source MTA establishes a TCP/IP link with the destination MTA and transmits whatever messages need to go to that domain. The destination MTA receives the messages and routes them on to local post offices or to other domains as needed. During the process, message files are created in the gwinprog directory for backup purposes and are deleted when the TCP/IP communication process is completed. Domain-to-Post Office TCP/IP Links In a TCP/IP link between a domain and a post office, you must configure both the POA and the MTA for TCP/IP. The source MTA establishes a TCP/IP link with the destination POA and transmits whatever messages need to go to that post office. The destination POA receives the messages and delivers them into mailboxes in the post office. During this process, message files are created in the POA input queue for backup purposes and are deleted when delivery is completed. Domain-to-Domain Mapped Links In a mapped link between domains, the location of the destination domain is specified in the following format: drive:\domain directory The source MTA writes message files into its output queue at the location: drive:\domain_directory\wpcsin as input for the destination domain’s MTA. Because drive mappings are changeable, you could move the domain directory structure, map its new location to the original drive letter, and the domain-to-domain link would still be intact. Domain-to-Post Office Mapped Links In a mapped link between a domain and a post office, the location of the post office is specified in the following format: drive:\post_office directory The MTA writes message files into its output queue at the location: drive:\post office directory\wpcsout as input for the post office’s POA. Because drive mappings are changeable, you could move the post office directory structure, map its new location to the original drive letter, and the domain-to- post office link would still be intact. Domain-to-Domain UNC Links In a UNC link between domains, the location of the destination domain is specified in the following format: Managing the Links between Domains and Post Offices 135 \\server\volume\domain directory The source MTA writes message files into its output gueue at the location: \\server\volume\domain directory\wpcsin as input for the destination domain’s MTA. Because UNC paths represent absolute locations on your network, if you move the domain to a new location, you would need to edit the link to match. Domain-to-Post Office UNC Links In a UNC link between a domain and a post office, the location of the post office is specified in the following format: \\server\volume\post office directory The MTA writes message files into its output queue at the location: \\server\volume\post office directory\wpcsout as input for the post office’s POA. Because UNC paths represent absolute locations in your network, if you move the post office to a new location, you would need to edit the link to match. Using the Link Configuration Tool The Link Configuration tool helps you manage the links between the domains and post offices in your Group Wise system. The following topics help you perform basic link management tasks: + “Starting the Link Configuration Tool” on page 136 + “Editing a Domain Link” on page 138 + “Editing Multiple Domain Links” on page 139 + “Editing a Post Office Link” on page 140 + “Viewing the Path of an Indirect Link between Domains” on page 141 + “Viewing the Indirect Links Passing through a Domain” on page 141 + “Viewing the Gateway Links Passing through a Gateway” on page 142 + “Saving and Synchronizing Link Configuration Information” on page 143 Starting the Link Configuration Tool 136 The Link Configuration tool is provided to help you change from default links to whatever link configuration best suits your GroupWise system. 1 In ConsoleOne*, select the Domain object whose links you want to modify. 2 Click Tools > Group Wise Utilities > Link Configuration to display the Link Configuration Tool window. GroupWise 6.5 Administration Guide File Edit Search View Window Help Ka Groupwise Link Configuration Tool - \\PR¥-GW\SYS\gwsystem\provol | oomai Links from Provo2 El LL 2] AIS] # E el] rDirect Indirect % Provo1 *£ Prov03 (Provo1) % Provo4 rDirect rGateway Undefined: % Provo5 (GWA) % Provoi % Provo4 rindirect ‘1 Prov03 (Provo1) °$ Provos (Provo1) The most frequently used features of the Link Configuration tool are available on the toolbar: Menu Button Eguivalent El File > Open Ey File > Save [S| Edit > Undo Help > Help Search > Find Double-click object View > Domain Links a E (E Asa View > Post Office Links Function Open adifferent domain database (wpdomain.db) to modify links in a different domain Save the current link configuration information to the domain database Undo your changes to the link configuration (since the last save) Display online Help for the Link Configuration tool Search for a specified domain Display details of the selected object View domain links for the selected domain View post office links for the selected domain 3 Continue with a specific link management task: + “Editing a Domain Link” on page 138 + “Editing Multiple Domain Links” on page 139 + “Editing a Post Office Link” on page 140 + “Viewing the Path of an Indirect Link between Domains” on page 141 + “Viewing the Indirect Links Passing through a Domain” on page 141 + “Viewing the Gateway Links Passing through a Gateway” on page 142 Managing the Links between Domains and Post Offices 137 Editing a Domain Link After starting the Link Configuration tool: 1 From the drop-down list, select the domain whose links you want to edit. 2 Click View > Domain Links to display domain links. Outbound and inbound links for the selected domain are listed. KE Groupwise Link Configuration Tool - \\PRY-GW\SYS\gwsystemi\provol) a jol. x| File Edit Search View Window Help se] a] 2) AS] R| Pro Geconsam A =w Ki Domain: Provo2 E Õutbound Links from Provo2 Direct Indirect rGateway Undefined: % Provo1 e$ Provo3(Provo1) | %, Provo5 (GMA) % Provo4 rindirect °$ Provo3 (Provo1) *? Provo5 (Provo1) 3 Double-click a domain in the Outbound Links list to edit the link to that domain from the selected domain. or Double-click a domain in the Inbound Links list to edit the link from that domain to the selected domain. Edit Domain Link EL Description: How Provo1 connects to Provo2 Link Type: [Direct y] Cancel | ; Settings Help | Protocol: TCP/IP y] Address: — [123.45.678461 MTPort: [7100 2| ene Colino”. E Override Maximum send message size: [ 0 = MBytes Delay message size [ 0 E MBytes Transfer Pull Info... | External Link Info... | TIP: You can also open the Edit Domain Link dialog box by dragging a domain from one link type to another. 4 Select the link type. + “Direct Links” on page 132 + “Indirect Links” on page 132 + “Gateway Links” on page 134 138 GroupWise 6.5 Administration Guide 5 Foradirect link, select the link protocol. + “Mapped Links” on page 135 + “UNC Links” on page 135 + “TCP/IP Links” on page 135 6 Provide the location of the domain in the format appropriate to the selected protocol. 7 Click OK. 8 Repeat Step 1 through Step 7 for whatever links you need to modify. As a time-saving measure, you can make a new domain’s links the same as an existing domain’s links. Click Edit > Default Links, then click the domain whose links you want to use as a pattern for the new domain. Select Outbound and/or Inbound as needed, then click OK. To look at the same link information from different points of view, you can start the Link Configuration tool multiple times to open multiple Link Configuration Tool windows. 9 To exit the Link Configuration Tool and save your changes, click File > Exit > Yes. Editing Multiple Domain Links When your Group Wise system includes indirect links, it is not unusual for several domains to link to the same domain. As a time-saving measure, you can create links from multiple domains to the same domain in one operation. After starting the Link Configuration tool: 1 Click Edit > Multiple Link Edits. Multiple Link Edits - Outbound Links E xl Domains to be linked: Indirect link through: Link to: F E Provo1 Provo1 Provo1 Provo2 Provo2 Provo2 Cancel | Provo3 Provo3 Provo3 Help Provo4 Provo4 Provo4 — Select All Select All | 2 In the Domains to Be Linked column, select the source domains whose outgoing links you want to modify. 3 Inthe Indirect Link Through column, select the intermediate domain through which you want the indirect links to pass. 4 In the Link To column, select one or more destination domains. 5 Click OK. Managing the Links between Domains and Post Offices 139 6 Fillin the fields in the Edit Domain Link dialog box for each direct link between a source domain and the intermediate domain, as described in “Editing a Domain Link” on page 138, then click OK. Edit Domain Link Description: How Provo1 connects to Provo2 Link Type: [Direct y] Cancel | Settings Help | Protocol: TCP/IP y] IPAddress: [12345678161 MTPort [7100 2] scheduiing..| E Override Maximum send message size: [ 0 = MBytes Delay message size [ 0 E MBytes Transfer Pull Info... | External Link Info... | The Edit Domain Link dialog box continues to appear until you have defined all the direct links between the source domains and the intermediate domain. IMPORTANT: After defining links from the source domains to the intermediate domain, make sure the links from the intermediate domain to other domains are set up correctly. Editing a Post Office Link After starting the Link Configuration tool: 1 From the drop-down list, select the domain whose post office link you want to edit. 2 Click View > Post Office Links to display post office links. KE Groupwise Link Configuration Tool - \\PRY-GW\sys\gwsystemipro ol = (5) x} File Edit Search View Window Help se het a 2?) AIN REIS [Provo (Primary) +] 5 uu) CIS] Office Links for Provo 1 Post Office Links for Provo1 Post Office Domain | Link % Manufacturing |Provo1 123.45.678.136:1677,7101 % R&D Provo1 123.45.678.136: 1677,7201 3 Double-click a post office to edit the link from the domain to the post office. KE Groupwise Link Configuration Tool - \\PRY-GW\sys\gwsystemipro ol -lol x| File Edit Search View Window Help $| MM 2] WIS) RE Poo emo a elm [XI KE Post Office Links for Provo1 BE Post Office Links for Provo1 Post Office Domain | Link % Manufacturing Provo1 123.45.678.136 1677,7101 a R&D Provo1 123.45.678.136 1677,7201 4 Select the link protocol for the direct link. + “Mapped Links” on page 135 + “UNC Links” on page 135 + “TCP/IP Links” on page 135 140 GroupWise 6.5 Administration Guide 5 Provide the location of the post office in the format appropriate to the selected protocol. 6 For a TCP/IP link, provide the message transfer port number where you want the POA to listen for incoming messages from the MTA. The default message transfer port for the POA is 7101. 7 Click OK. 8 To exit the Link Configuration tool and save your changes, click File > Exit > Yes. Viewing the Path of an Indirect Link between Domains The more hops between two indirectly linked domains, the longer it takes a message to travel between them. To make sure the number of hops between two indirectly linked domains is as small as possible, you can list the route a message would take from one domain to the other in ConsoleOne. After starting the Link Configuration tool: 1 Select a domain from the drop-down list. 2 Select a domain in the Indirect links list. 3 Click View > Link Path to see a list of the hops between the two domains. {GroupWise Link Configuration Tool - \PR¥-GWDOC5B\SYS\gwsystem\prova File Edit Search View Window Help El LIM TT TT) e - JE lol x! Provo3 Provo2 Provo4 You can also use GroupWise Monitor to trace the path a message would take between two domains. See “Link Trace Report” on page 931 and “Tracing a Link at the Monitor Web Console” on page 950. Viewing the Indirect Links Passing through a Domain If a domain serves as a hop in an indirect link, making changes to that domain could affect all indirect links passing through that domain. You can list all the indirect links that pass through a domain in ConsoleOne. After starting the Link Configuration tool: 1 Click View > Link Hop to list all domains in your system. x Domain Lo Provo! Provo2 Cancel Provo3 Provo4 Help 2 Double-click a domain to list the indirect links passing through it. Managing the Links between Domains and Post Offices 141 | Clee Link Configuration Tool - \\PRY-GW\SYS\gwsystemi\provol, -ioj x/ File Edit Search View Window Help PRI) 2) WIA] 9/5] Provo Primary +] wm | CI Domain Name: Provo2 Hop Domain Name | Dest Domain Name Provo4 Provo2 3 If you need to reroute a link, right-click the link, then click Edit to open the Edit Domain Link dialog box and make changes as needed. You can also use GroupWise Monitor to check the links passing through a selected domain. See “Link Configuration Report” on page 932 and “Checking Links Configuration at the Monitor Web Console” on page 950. However, you cannot change link information using Monitor. Viewing the Gateway Links Passing through a Gateway Before making changes to a gateway, you can list all the links that pass through the gateway. After starting the Link Configuration tool: 1 Click View > Gateway Hop to list all gateways in your system. Select a Gateway Post Office Domain (GMA Provo1 x Cancel | Help | 2 Double-click a gateway to list the domains linked through that gateway. | Clee Link Configuration Tool - \\\PR¥-GW\SYS\gwsystem\provol |, -lol x File Edit Search View Window Help se] js] 2] AIS] RIT Jen] KE Gateway Hop: GWIA 3 If you need to reroute a link, right-click the link, then Edit to open the Edit Domain Link dialog box and make changes as needed. 142 GroupWise 6.5 Administration Guide Saving and Synchronizing Link Configuration Information Whenever you modify link configuration information, a cautionary symbol (see “Link Status Symbols” on page 143) appears next to the modified link until you save the current link configuration by clicking Edit > Save. If you are making extensive changes to link configuration information, you should save regularly. When you save, the information is written out to the domain database (wpdomain.db) for the domain to which you are currently connected. You can change to a different domain database without exiting the Link Configuration tool by clicking File > Open. The MTA routinely synchronizes the information in the domain databases throughout your Group Wise system. If you are making extensive changes to link configuration information, you can synchronize the information immediately by clicking Edit > Synchronize. Interpreting Link Symbols As you modify links, you see symbols that represent the various link types. Along with the link type symbols, you sometimes see link status symbols. + “Link Type Symbols” on page 143 + “Link Status Symbols” on page 143 Link Type Symbols Link Type Meaning Symbol a, Direct link "1 Indirect link & Gateway link + TCP/IP link to domain ys TCP/IP link to post office > Undefined link Link Status Symbols Link Status Meaning Symbol t Link modification not yet saved x Link modification not yet synchronized 7 Insufficient rights to modify link 7 Rights not yet checked Managing the Links between Domains and Post Offices 143 Modifying Links In “Post Office Agent” on page 415 and “Message Transfer Agent” on page 555, detailed instructions for changing link types are provided as outlined below: Changing the Link Protocol between the Post Office and the Domain + “Using TCP/IP Links between the Post Office and the Domain” on page 443 + “Using Mapped or UNC Links between the Post Office and the Domain” on page 444 Changing the Link Protocol between Domains + “Using TCP/IP Links between Domains” on page 579 + “Using Mapped or UNC Links between Domains” on page 582 + “Using Gateway Links between Domains” on page 583 Customizing Link Configuration + “Using Routing Domains” on page 591 + “Scheduling Direct Domain Links” on page 593 + “Using a Transfer Pull Configuration” on page 596 144 GroupWise 6.5 Administration Guide Post Offices Chapter 11, “Creating a New Post Office,” on page 147 Chapter 12, “Managing Post Offices,” on page 165 Post Offices 145 146 GroupWise 6.5 Administration Guide Creating a New Post Office As your GroupWise? system grows, you typically need to add new post offices. + “Understanding the Purpose of Post Offices” on page 147 + “Planning a New Post Office” on page 148 + “Setting Up the New Post Office” on page 158 + “What's Next” on page 162 IMPORTANT: |f you are creating a new post office in a clustered GroupWise system, see the appropriate section of the GroupWise 6.5 Interoperability Guide before you create the post office: - “Setting Up a Domain and Post Office in a Novell Cluster” in “Novell Cluster Services” - “Setting Up a Domain and Post Office in a Microsoft Cluster” in “Microsoft Clustering Services” Understanding the Purpose of Post Offices The post office serves as an administrative unit for a group of users and is used for addressing messages. Each GroupWise user has an address that consists of a user ID, the user's post office name, the GroupWise domain name, and, optionally, an Internet domain name. The following diagram illustrates the logical organization of a GroupWise domain with multiple post offices. The two post offices belong to the domain. All of the objects under each post office belong to that post office. Domain Message Q— Transfer A (9 S Gs Gs Gs E E © 3 Gs Gs Gs E E Y GroupWise GroupWise GroupWise GroupWise GroupWise GroupWise GroupWise Resources Users Distribution Resources Users Distribution Library Lists Lists As illustrated above, each post office must have at least one Post Office Agent (POA) running for it. The POA delivers messages to users’ mailboxes and performs a variety of post office and mailbox maintenance activities. Creating a New Post Office 147 When you add a new post office, you must link it to a domain. The link defines how messages travel between the post office and its domain. Links are discussed in detail in Chapter 10, “Managing the Links between Domains and Post Offices,” on page 131. Physically, a post office consists of a set of directories that house all the information stored in the post office. To view the structure of the post office directory, see “Post Office Directory” in Group Wise 6.5 Troubleshooting 3: Message Flow and Directory Structure. The post office directory contains users’ mailboxes and messages, as well as other vital information. For an overview, see “Information Stored in the Post Office” on page 418. Planning a New Post Office This section provides the information you need in order to decide when, where, and how to create a new post office. The “Post Office Worksheet” on page 163 lists all the information you need as you setup your post office. You should print the worksheet and fill it out as you complete the tasks listed below. + “Determining When to Add a Post Office” on page 148 + “Selecting the Domain That the Post Office Will Belong To” on page 149 + “Determining the Context for the Post Office Object” on page 150 + “Choosing the Post Office Name” on page 151 + “Deciding Where to Create the Post Office Directory” on page 152 + “Deciding Where to Install the Agent Software” on page 153 + “Deciding How to Link the New Post Office” on page 156 + “Selecting the Post Office Language” on page 156 + “Selecting the Post Office Time Zone” on page 156 + “Selecting a Software Distribution Directory” on page 156 + “Selecting a Post Office Security Level” on page 157 + “Deciding if You Want to Create a Library for the New Post Office” on page 157 After you have completed the tasks and filled out the “Post Office Worksheet” on page 163, you are ready to continue with “Setting Up the New Post Office” on page 158. Determining When to Add a Post Office 148 After you have your basic Group Wise system up and running, you might need to expand it. How do you know when you should add a post office? The answer to this depends on your company organization, the number of users on your network, and the physical limitations of your network Servers. + “Physical Organization” on page 149 + “Logical Organization” on page 149 + “Number of Users” on page 149 + “Demand on the POA” on page 149 GroupWise 6.5 Administration Guide Physical Organization If your network spans several sites, you might want to create post offices (if not domains) at each physical location. This reduces the demands on long distance network links. Logical Organization Processing messages within a post office is faster and typically generates less network traffic than messages traveling between different post offices. As you expand Group Wise, you might find it useful to add post offices in order to group users who freguently send mail to each other. Grouping users into post offices, based upon company organization or job function, makes administrative tasks, such as creating distribution lists, limiting Address Book visibility, and distributing shared folders, easier. For example, some employees might work in corporate functions like accounting and human resources. Other employees might be involved in sales and marketing and freguently attend meetings together, reguiring freguent busy searches. Some areas, for example the production floor, might not need a workstation or user account for each individual. Number of Users Although a GroupWise post office can support more than 10,000 users, you should consider adding a post office when an existing post office has more than about 1000 to 2500 users and you expect it to keep growing. There are several reasons for this: + It minimizes the impact if you have a problem with a server. * Itkeepsthe time reguired to perform post office and mailbox maintenance activities including backups from becoming excessive. * Itallows room to grow while maintaining best performance. Therefore, a good post office size is about 1000 to 2500 users and include all ofthe resources (such as eguipment, company cars, and conference rooms) and distribution lists they might need. Demand on the POA The POA is a very flexible component of your Group Wise system. Many aspects of its functioning are configurable, to meet the particular needs of the post office it services, no matter what the size. In addition, you can choose to run multiple POAs for the same post office, in order to specialize its functioning, as described in: + “Configuring a Dedicated Client/Server POA” on page 510 + “Configuring a Dedicated Message File Processing POA” on page 513 + “Configuring a Dedicated Indexing POA” on page 516 + “Configuring a Dedicated Database Maintenance POA” on page 518 As a result, the choice is up to you whether you prefer a single, large post office, perhaps with multiple POAs, or multiple smaller post offices, each with its own POA. Selecting the Domain That the Post Office Will Belong To A post office is associated with a specific domain, even though it might reside in a different organizational unit in the Novell® eDirectory™ tree. If you have just one domain, the new post office will belong to it. If you want to create a new domain as well as a new post office, see Chapter 8, “Creating a New Domain,” on page 109. Creating a New Post Office 149 In a multiple post office system, the domain organizes post offices into a logical grouping for addressing and routing purposes. Each user in the domain has a Group Wise address that consists of the user's GroupWise ID, the post office name, the Group Wise domain name, and optionally, an Internet domain name. Domains function as the main administration units for the Group Wise system. Post office information is stored in the domain database, as well as in the post office database. Changes are distributed to each post office database from the domain. WORKSHEET Under Item 3: GroupWise Domain, specify the Group Wise domain that the new post office will belong to. The items in the worksheet are listed in the order you enter them when setting up your post office. This planning section does not follow the same order as the worksheet, but all worksheet items are covered. Determining the Context for the Post Office Object The eDirectory context of'the Post Office object determines how you administer the post office. The post office can be created in any organization or organizational unit as long as it is in the same tree as the domain. The following diagrams provide some examples of how domains can be placed in the eDirectory tree: + “GroupWise Objects Reflect Physical Locations” on page 150 + “GroupWise Objects Reflect Company Organization” on page 151 + “GroupWise Objects Are Grouped with Servers” on page 151 + “GroupWise Objects Are Located in a Separate GroupWise Container” on page 151 WORKSHEET Under Item 1: eDirectory Container, specify the name of the eDirectory container where you want to create the new post office. GroupWise Objects Reflect Physical Locations 150 The Group Wise system below focuses on the physical layout of the company. Because most mail traffic is generated by users in the same location, the mail traffic across the WAN is minimized. An organizational unit was created for each site. A domain and post office were created under each organizational unit, corresponding to the city. The sites can be administered centrally or at each site. Administrator rights can be assigned at the domain level. E- Corporate E-%8 Los Angeles +) LA-Domi À LA-PO1-1 =-28 New York =)-Qa Nv-P01-1 H- NY-Dom1 GroupWise 6.5 Administration Guide GroupWise Objects Reflect Company Organization The following Group Wise system focuses on departmental organization, as does the eDirectory tree. Group Wise domains and post offices parallel eDirectory organizational units, placing the domains and post offices within the organizational units containing the users that belong to them. S- Corporate =)" Accounting a- Acct-Dom -QA AcctPO1 5-8 Development H- Dev-Dom ta Qh DewP01 Manufacturing 18-28 1-98 Sales GroupWise Objects Are Grouped with Servers Because domains and post offices have directory structures on network servers, you could also choose to place the Domain and Post Office objects in the same context as the servers where the directories reside, as shown in the following example. =) Corporate 28 Accounting 28 Development 1-8 Manufacturing 1-8 Sales [28 Servers &-@ Acct-Dom Qa AcctPO1 &-@ Dev-Dom Qa Dev-Pot B Prv-ow H-E PRV-GW. NSSVOL E) PRv-GW_5Ys GroupWise Objects Are Located in a Separate GroupWise Container Domains and post offices can also be created in their own organizational unit. Administratively, this approach makes it easier to restrict a Group Wise administrator’s object and property rights to GroupWise objects only. =- Corporate 88 Accounting 28 Development (228 GroupWise 18) Acct-Dom -QA AcctPO1 +) Dev-Dom &-Q DewP01 28 Manufacturing 28 Sales Choosing the Post Office Name The post office must be given a unique name. The name is used for addressing and routing purposes within GroupWise, and might appear in the GroupWise Address Book. The post office name can reflect a location, organization, department, and so on. For example, you might want the domain name to be the location (for example, Provo) while the post office name is one of the company’s departments (for example, Research). Name the new post office carefully. After it is created, the name cannot be changed. Creating a New Post Office 151 The post office name can consist of one or more words. Use underscores ( ) rather than spaces as separators between words to facilitate addressing across the Internet. Do not use any of the following invalid characters in the post office name: ASCII characters 0-13 Comma , Asterisk * Double quote " At sign @ Extended characters Braces { } Parentheses ( ) Colon : Period . WORKSHEET Under Item 2: Post Office Name, specify the post office name. Under Item 9: Post Office Description, provide a description for the post office to help you identify its function in the system. Deciding Where to Create the Post Office Directory Logically, the Post Office object resides in eDirectory and is administered through ConsoleOne®. Physically, the post office has a directory structure for databases, message queues, and other files. The post office directory structure can be created on NetWare® servers (NetWare 6.x, NetWare 5.x, NetWare 4.2, or NetWare 3.12), Linux servers (SUSE Standard or Enterprise Server 8, Red Hat* Enterprise Linux 3 ES or AS), or Windows servers (Windows 2000 or Windows NT). The server where you create the post office directory structure can be in the same tree as the Post Office object or in another tree. Databases and directories in the post office are updated as messages are sent. Because the POA typically makes these updates, we recommend that you place the post office directory on a server that can be easily accessed by the POA and, depending on configuration, the MTA. Users typically need a TCP/IP connection to the POA in order to access their mailboxes. When you are planning the post office directory location and which users will belong to the post office, consider the following: + Post Office Directory Space Requirements: You need a minimum of 50 MB for each user. Because the message store can require considerable disk space, we recommend you allow each user at least 200 MB of storage space. You should also take into consideration the size of attachments, and your archive and delete policies. If message attachments are large and you are not planning to require users to archive or delete old messages, allow more storage. If you are creating libraries you need even more, depending on the size and number of documents. For details about managing post office disk space, see “Managing Disk Space Usage in the Post Office” on page 171. + Network Access by the POA: The POA must have direct network access (mapped drive or file system mount) to the post office directory. This issue is discussed in detail in “Deciding Where to Install the Agent Software” on page 153. + Security from User Access: Users typically access their mailboxes through a TCP/IP comnection to the POA. Therefore, users do not need access to the post office directory. You should create it in a location you can easily secure; otherwise, you could have files inadvertently moved or deleted. 152 GroupWise 6.5 Administration Guide Choose an empty directory for the new post office. If you want, the directory can reflect the name ofthe post office, for example research for the Research post office. On NetWare, use a maximum of 8 characters in the directory name. On Linux, use only lowercase characters in the directory name. Choose the name and path carefully. After the post office directory is created, it is difficult to rename it. If the directory you specify does not exist, it is created when you create the post office. Do not create the post office directory under another domain or post office directory. WORKSHEET Under Item 4: Post Office Database Location, specify the full path for the post office directory. Under Item 10: Network Type, record the network type in use at that location. Deciding Where to Install the Agent Software You must run a new instance of the POA for each new post office. To review the functions of the POA forthe post office, see “Role ofthe Post Office Agent” on page 423. For complete installation instructions and system requirements, see “Installing Group Wise Agents” in the Group Wise 6.5 Installation Guide. When planning the installation of the POA, you need to consider how the new post office links to its domain. For an overview of link configuration, see Chapter 10, “Managing the Links between Domains and Post Offices,” on page 131. The POA reguires direct network access (mapped drive or file system mount) to the post office directory. Consider the following alternatives when selecting a location for the POA: + “POA Access to the New Post Office: Local vs. Remote” on page 153 + “MTA Access to the New Post Office: Mapped and UNC Links vs. TCP/IP Links” on page 154 + “Cross-Platform Issues” on page 155 WORKSHEET Under Item 12: Agent Location, indicate whether you plan to run the POA on the same server where the post office directory is located, or on a different server. Under Item 13: Agent Platform, specify the platform where the POA will run (NetWare, Linux, or Windows). POA Access to the New Post Office: Local vs. Remote Running the POA locally on the same server where the post office resides simplifies network connections (no login is required), reduces network traffic, and protects database integrity. In the following diagram, the agent software is installed on the same server where the domain and post office reside. 245, ¿AZ SL MTA > Sar MTA> ka Ecco SI z Dev-Dom Acct-PO1 Dev-PO1 Creating a New Post Office 153 Running the POA on a remote server allows you to place the heaviest processing load on your highest performing server. In the following diagram, the agent software is installed on a different server from where the domains and post offices reside. Windows NetWare 2 E Pp. A > s Dev-Dom Dev-PO1 sii When you run the POA on a different server from where its directory structure and databases are located, you need to provide adeguate access. + Ifthe NetWare® POA needs direct network access to another NetWare server where the post office is located, you must add the /dn switch or the /user and /password switches to the POA startup file to provide authentication information. Username and password information can also be provided in the Remote File Server Settings box of the Post Office Settings page in ConsoleOne. + Ifthe Linux POA needs direct network access to another Linux server, you must mount the file system where the post office is located before you start the Linux POA. + Ifthe Windows POA needs direct network access to another Windows server where the post office is located, you must map a drive to the other server before you start the Windows POA. MTA Access to the New Post Office: Mapped and UNC Links vs. TCP/IP Links Ifa domain includes multiple post offices, the new post office will probably reside on different server from where the domain is located. If you plan to use mapped or UNC links between the domain and the new post office, the MTA reguires the same access to the post office directory as it reguires to the domain directory. T 2 N Acct-Dom wa ji on | Dev-Dom Acct-PO1 = 4 > Dev-PO1 + Ifthe NetWare MTA needs direct network access to a new post office on another NetWare server, you must add the /dn switch or the /user and /password switches to the MTA startup file to provide authentication information. + Ifthe Windows MTA needs direct network access to a new post office on another Windows server, you must map a drive to the post office directory before you start the MTA. NOTE: The Linux MTA reguires TCP/IP links to the POA. To avoid these direct network access reguirements between the MTA and a new post office, you can use TCP/IP links between the domain and the new post office. 154 GroupWise 6.5 Administration Guide È È wwe dns Acct-Dom < > Dev-Dom Acct-PO1 BA KA Dev-PO1 TANT, NP When using TCP/IP links, the MTA does not write message files into message queues in the post office directory structure. Instead, the MTA communicates the information to the POA by way of TCP/IP and then the POA uses its direct network access to write the information. Cross-Platform Issues In most cases, it is most efficient if you match the POA platform with the network operating system where the post office resides. For example, if you create a new post office on a NetWare server, use the NetWare POA. Ifyou decide not to run the POA on the same platform as the post office, the POA must still have direct network access to the post office directory so that it can write to user databases (userxxx.db) and message databases (msgnn.db). For example, you could set up the new post office on a NetWare server and run the Windows POA on an Windows server to service it. Windows NetWare 2 B > Dev-Dom Dev-PO1 AE sil However, the NetWare POA could not service a post office located on an Windows server because Windows does not support the reguired cross-platform connection. If you are using mapped or UNC links to the new post office, the MTA must also have direct network access to the post office directory so that it can write message files into the post office message gueues. You could, for example, run the agents on an Windows server while domains and post offices were located on NetWare servers. NetWare Wi o NetWare J d 4 4 4 Acct-Dom Postil a > ~ A Acct-PO1 Dev-PO1 ~ 2 POA A Again, the opposite combination of NetWare agents servicing domains and post offices on Windows servers is not an option because Windows does not support the required cross-platform connection. To avoid these cross-platform access issues, use TCP/IP links between a domain and its post offices. For more detailed information, see “Cross-Platform Issues between Domains and Post Offices” on page 561. Creating a New Post Office 155 Deciding How to Link the New Post Office When you create a new post office, you have the opportunity to choose the type of link to use between the new post office and its domain. Based on issues discussed in the preceding section, you might decide to set up a TCP/IP link between the new post office and its domain. WORKSHEET Under Item 14: Link to Domain, indicate the type of link you plan to setup between the new post office and its domain. Selecting the Post Office Language The post office language determines how times, dates, and numbers are displayed in the Group Wise client and determines the sorting rules for items in the Group Wise Address Book. The post office defaults to the same language as its domain unless you specify otherwise. For example, ifyou set the domain and post office language to English-US, all time, date, and numbers are formatted according to English-US standards, and the Address Book items are sorted according to English-US sort order rules. This is true even if some users on the post office are running non- English GroupWise clients such as German or Japanese. Their client interface and Help files would be in German or Japanese, but the Address Book sort order would be according to English- US standards. Time, date, and number formats for the non-English clients defaults to the workstation language. Status tracking information depends on the language ofthe POA for the post office. WORKSHEET Under Item 5: Post Office Language, specify the post office language. Selecting the Post Office Time Zone When a message is sent from a user in one time zone to a user in another time zone, Group Wise adjusts the message’s time so that it is correct for the recipient’s time zone. For example, if a user in New York (GMT -05:00, Eastern Time) schedules a user in Los Angeles (GMT -08:00, Pacific Time) for a conference call at 4:00 p.m. Eastern Time, the appointment is scheduled in the Los Angeles user's calendar at 1:00 p.m. Pacific Time. The domain time zone becomes the default time zone for each post office in the domain. WORKSHEET Under Item 6: Time Zone, specify the time zone for the new post office. Selecting a Software Distribution Directory A software distribution directory was created when your GroupWise system was initially set up. The software distribution directory contains files that users need in order to set up the GroupWise Windows or Cross-Platform client on their workstations. Additional software distribution directories might have been created since that time to accommodate users in various locations. You can select the most convenient software distribution directory for the new post office. 156 GroupWise 6.5 Administration Guide WORKSHEET Under Item 7: Software Distribution Directory, specify the name of the software distribution directory from which users in the new post office will install the GroupWise client software on their Windows, Linux, or Macintosh workstations. Selecting a Post Office Security Level Post office security settings affect two types of Group Wise users: + Users who do not set passwords on their mailboxes + Users who use LDAP passwords instead of Group Wise passwords to access their mailboxes After a user sets a Group Wise password on his or her mailbox, the post office security level no longer applies. The user is always prompted for the password unless the administrator has set certain client options in ConsoleOne to prevent the password prompt, as described in “Managing Group Wise Passwords” on page 1034. In the absence of passwords on users’ mailboxes, the post office security level takes effect. By default, a new post office is created with low security. In a low security post office, mailboxes are completely unprotected. Without a password, any user's mailbox could be accessed by another user who knows how to use the @u-user/D startup switch. By increasing the post office security level to high, you provide protection to GroupWise mailboxes through other types of passwords. In a high security post office, you can choose between eDirectory authentication and LDAP authentication: + eDirectory Authentication: If you use eDirectory authentication for a post office, users must be logged in to eDirectory in order to access their Group Wise mailboxes. Users cannot access other users’ mailboxes unless they know the other users’ network passwords. + LDAP Authentication: If you use LDAP authentication for a post office, users must be successfully authenticated to an LDAP server before they can access their GroupWise mailboxes. WORKSHEET Under Item 11: Post Office Security Level, mark the security level for the post office. If you choose high security, indicate the type of authentication you plan to use. Deciding if You Want to Create a Library for the New Post Office If you anticipate that users on this post office will require document management services, you can create a library at the same time you create the post office. The library will be created with all of the default library options including Store Documents at Post Office. Using a document storage area is preferable to storing documents at the post office because a document storage area can be moved. You should appropriately configure the library immediately after it is created, before users begin to store documents there. See “Libraries and Documents” on page 261. WORKSHEET Under Item 8: Create Library, indicate whether or not you want to immediately create a library for the new post office. You can always add a library to the post office at a later time. Creating a New Post Office 157 Setting Up the New Post Office You should have already reviewed “Planning a New Post Office” on page 148 and filled out the “Post Office Worksheet” on page 163. Complete the following tasks to create a new post office. + “Creating the New Post Office” on page 158 + “Configuring the POA for the New Post Office” on page 161 + “Installing and Starting the New POA” on page 161 + “Setting Up User Access to the New Post Office” on page 162 + “What's Next” on page 162 Creating the New Post Office 1 Make sure you are logged in to the tree where you want to create the post office. This must be the same tree as the domain that the post office belongs to (worksheet item 3). 2 In ConsoleOne, browse to and right-click the eDirectory container where you want to create the post office (worksheet item 1), then click New > Object. New Object E xi Create object in: 23 CORP_TREE/GroupWise.Provo OK see E Cancel © GroupWise Distribution List IK) GroupWise Domain Help [B GroupWise External Entity | = Gi GroupWise Library Sk, GroupWise Post Office | GroupWise Resource RS LDAP Group [BE LDAP Server 3 Double-click GroupWise Post Office, then fill in the fields in the Create GroupWise Post Office dialog box (worksheet items 2 through 8). Ki Create GroupWise Post Office E | Post office name: Lx J Cancel GroupWise Domain: Cancel | Provo1.GroupWise El Help Post Office Database Location: 2 Language: English - US Ed Time Zone: (GMT-07:00) Mountain Time (US £ Canada) ha Software Distribution Directory: Corporate Mail E Configure link Ü Create Library Define additional properties E Create another post office 4 Make sure the Configure Links and Define Additional Properties options are selected, then click OK to display the Link Configuration Wizard. 158 GroupWise 6.5 Administration Guide | Link Configuration Wizard Novell. 5 Follow the on-screen instructions to define how the post office links to its domain. When you’ ve finished defining the link, ConsoleOne creates the Post Office object and displays the post office Identification page. Properties of Development NPRV-GWISYSigwsystemidev, = English - US (GMT-07:00) Mountain Time (US 8 Canada) AS 6 Fill in the Description field (worksheet item 9). 7 Click GroupWise > Post Office Settings to display the Post Office Settings page. Creating a New Post Office 159 Properties of Development ] xl Memberships v | NDS Rights v | Other | Rights to Files and Folders | Network Type: [Noven Netware >| Software Distribution Directory: [Corporate Mai >| Access Mode: [clienvSewerOny | Delivery Mode: [Use App Threshotds >| I Disable Live Move [> Exempt this post office from the Trusted Application routing requirement Restore Area: (Not Set) Remote File Server Settings Remote User Name: Remote Password: Set Password Page Options... | Cancel | Apply | Help 8 Provide the network type for the post office location (worksheet item 10). 9 Select the software distribution directory for the post office (worksheet item 7). 10 Ifthe POA will run on a different server from where the post office directory, a library, or a document storage area is located, provide a username and password that enables the POA to access the remote location (worksheet item 12). 11 Click GroupWise > Security to display the Security page. Properties of Development = xl GroupWise + | Memberships v | NDS Rights v | Other | Rights to Files and Folders | Security Security Level: C Low € High High Security Options C eDirectory Authentication LDAP User Name: El LDAP Password: Set Password | E Disable LDAP Password Changing Inactive Connection Timeout: 30 4 seconds LDAP Pool Server Reset Timeout: 5 y minutes Select Servers | Page Options... | Cancel | Apply | Help 12 Provide the post office security level and authentication type for the post office (worksheet item 11). For additional LDAP instructions, see “Providing LDAP Authentication for GroupWise Users” on page 461. 13 Click OK to save the post office information. 160 GroupWise 6.5 Administration Guide Configuring the POA for the New Post Office Although there are many POA settings, the default settings are sufficient to get your post office operational. However, there are a few important settings that you can conveniently modify before you install the agent software. 1 In ConsoleOne, double-click the new Post Office object. 2 Right-click the POA object, then click Properties to display the POA Identification page. 7 x IDS Rights + | Other | Rights to Files and Folders | Domain.PO: Provo1.Development Distinguished Name: POA.Development GroupWise Name: POA Agent Type: Post Office Description: GroupWise Post Office Agent Platform: NetWare Loadable Module Y Page Options... k Cancel JAE Hep | Enter a description for the POA. The description displays on the POA agent console as the POA runs. Select the platform where the POA will run (worksheet item 12). If you have created the post office in a clustered environment, follow the instructions in the appropriate section of the Group Wise 6.5 Interoperability Guide: + “Installing and Configuring the MTA and the POA in a Cluster” in “Novell Cluster Services” + “Installing and Configuring the MTA and the POA in a Cluster” in “Microsoft Clustering Services” For more POA configuration options, see “Changing POA Configuration to Meet Post Office Needs” on page 185. Click OK to save the POA configuration information. Installing and Starting the New POA To install the POA forthe new post office to the location recorded under worksheet item 11, follow the instructions in “Installing Group Wise Agents” in the Group Wise 6.5 Installation Guide. Creating a New Post Office 161 Setting Up User Access to the New Post Office The post office access mode determines how GroupWise client users access their mailboxes. By default, the Group Wise Windows and Cross-Platform clients use client/server access to the post office. Client/server access provides the following benefits: + Client/server access provides the greatest level of security. Users do not need rights to the post office directory because the GroupWise client does not write directly to databases in the post office. All database updates are performed by the POA. + Client/server access eliminates the need for separate network logins and passwords. This avoids problems with login restrictions, changing passwords, and insufficient network rights. + Client/server access allows the GroupWise client to maintain multiple simultaneous connections to the post office. + With client/server access mode, proxy rights can be granted to any user visible in the Address Book. Historical Note: In GroupWise 5.x, the GroupWise client allowed the user to enter a path to the post office directory to facilitate direct access mode. The Group Wise 6.x client no longer offers the user that option. However, you can force the GroupWise 6.x client to use direct access mode by starting it with the /ps switch and providing the path to the post office directory. For information about alternatives to client/server access mode, see the GroupWise 5.5 Agent Setup Guide (http:// www.novell.com/documentation/gw55/index.html). Continue with “What’s Next” on page 162. What’s Next After you have created the new post office and started its POA, you are ready to expand the post office by: + Adding users to the post office. See “Users” on page 187. + Defining groups of users (distribution lists) that Group Wise users can select when addressing messages. See “Distribution Lists, Groups, and Organizational Roles” on page 235. ¢ Defining resources (for example, conference rooms or company cars) that users can schedule. See “Resources” on page 221. ¢ Defining libraries and setting up Document Management Services. See “Libraries and Documents” on page 261. + Setting up the GroupWise Windows or Cross-Platform client software so that GroupWise users can run the client from Windows, Linux, or Macintosh workstations. See “Client” on page 963. + Configuring the POA for optimal performance. See “Post Office Agent” on page 415. 162 GroupWise 6.5 Administration Guide Post Office Worksheet Use this worksheet as you complete the tasks in “Planning a New Post Office” on page 148. Item Explanation 1) eDirectory Container Specify the name ofthe eDirectory container where you plan to create the new post office. For more information, see “Determining the Context for the Post Office Object” on page 150. 2) Post Office Name Specify a name for the new post office. Choose the name carefully. After the post office is created, it cannot be renamed. For more information, see “Choosing the Post Office Name” on page 151. 3) GroupWise Domain Specify the domain this post office will belong to. For more information, see “Selecting the Domain That the Post Office Will Belong To” on page 149. 4) Post Office Database Location Specify the path for the post office directory. Choose the post office directory carefully. After it is created, it is difficult to rename. For more information, see “Deciding Where to Create the Post Office Directory” on page 152. 5) Post Office Language Specify the post office language ifit is different from the domain language. For more information, see “Selecting the Post Office Language” on page 156. 6) Post Office Time Zone Specify the time zone for the post office ifit is different from the domain time zone. For more information, see See “Selecting the Post Office Time Zone” on page 156. 7) Software Distribution Directory: Specify the name of the software distribution directory for the new post office. For more information, see “Selecting a Software Distribution Directory” on page 156. 8) Create Library: Mark whether or not you want to create a library for the new post office at the same time you create the new post office. + Yes + No For more information, see “Deciding if You Want to Create a Library for the New Post Office” on page 157. 9) Post Office Description Enter a description for the new post office to help you identify its function in the system. 10) Network Type Specify the network type in use on the server where the new post office will be located. For more information, see “Deciding Where to Create the Post Office Directory” on page 152. 11) Post Office Security Level: Mark the security level for the post offices. For high security, mark the type of authentication you plan to use. + Low + High For more information, see “Selecting a Post Office Security Level” on page 157. - eDirectory authentication - LDAP authentication Creating a New Post Office 163 Item 12) Agent Location + POAonthe same server asthe post office (local) + POA on a different server from the post office (remote) - Username - Password 13) Agent Platform + NetWare POA + Linux POA + Windows POA 14) Link to Domain + TCP/IP + Mapped + UNC Explanation Mark the location of the POA relative to the post office. If the POA will run on a different server from where the post office, a library, or a document storage area is located, provide a username and password to enable the POA to access the remote location. For more information, see “Deciding Where to Install the Agent Software” on page 153. Specify the platform where you plan to run the POA. For more information, see “Deciding Where to Install the Agent Software” on page 153. Mark how you plan to link the new post office to its domain. For more information, see “Deciding How to Link the New Post Office” on page 156. 164 GroupWise 6.5 Administration Guide Managing Post Offices As your Group Wise? system grows and evolves, you might need to perform the following maintenance activities on post offices: + + + + + + “Connecting to the Domain That Owns a Post Office” on page 165 “Editing Post Office Properties” on page 166 “Managing Disk Space Usage in the Post Office” on page 171 “Auditing Mailbox License Usage in the Post Office” on page 180 “Tracking and Restricting Client Access to the Post Office” on page 181 “Disabling a Post Office” on page 183 “Moving a Post Office” on page 183 “Deleting a Post Office” on page 184 “Changing POA Configuration to Meet Post Office Needs” on page 185 See also “Maintaining Domain and Post Office Databases” on page 345 and “Backing Up Group Wise Databases” on page 375. Proper database maintenance and backups allow recovery from accidental deletions, as described in “Restoring Deleted Mailbox Items” on page 381 and “Recovering Deleted GroupWise Accounts” on page 384. Connecting to the Domain That Owns a Post Office Whenever you change post office information, it is most efficient to connect directly to the domain that the post office belongs to before you begin making modifications. Performing administrative tasks on a post office while not connected to the post office’s domain increases the amount of administrative message traffic sent between domains. To change your domain connection: 1 In ConsoleOne® in the Console View, click Tools > GroupWise System Operations. Click Select Domain, browse to and select the domain directory, then click OK. or In the GroupWise View, right-click the Domain object, then click Connect. The GroupWise view identifies the domain that you are connected to by adding a plug symbol to the domain icon. E- Provot Q Manufacturing QA RED à Provo2 QA Accounting Sales The domain marked with the red underscore is the primary domain. Managing Post Offices 165 Editing Post Office Properties After creating a post office, you can change some post office properties. Other post office properties cannot be changed. 1 In ConsoleOne, browse to and right-click the Post Office object, then click Properties to display the post office Identification page. Properties of Development Y x| || Memberships + | NDS Rights + | Other | Rights to Files and Folders | į Identification Post Office: [Provon .Development Description: Í UNC Path: fuPRv-GwiSySigwsystemidevt E Language: [English - US +] Time Zone: (GMT-07:00) Mountain Time (US £ Canada) bd Database Version: 6.5 Configure Non-DOS Name Space Access Page Options... | OF Cancel | Apply | Help 2 Change editable fields as needed. For information about individual fields, see “Setting Up the New Post Office” on page 158 or use online help when editing the post office. 3 Click GroupWise > Post Office Settings to display the Post Office Settings page. kk x E a Memberships v | NDS Rights v | Other | Rights to Files and Folders | $ Network Type: [Noven Netware >| Software Distribution Directory: [Corporate Mat >| Access Mode: [clienvSewerOny | Delivery Mode: [Use App Threshotds >| C Disable Live Move (> Exempt this post office from the Trusted Application routing requirement Restore Area: (Not Set) Remote File Server Settings Remote User Name: Remote Password: Set Password Page Options... | These post office settings are discussed in the following sections: 166 GroupWise 6.5 Administration Guide + “Selecting a Software Distribution Directory” on page 156 + “Setting Up User Access to the New Post Office” on page 162 4 Click GroupWise > Client Access Settings to display the Client Access Settings page. Properties of Development F x| GroupWise + | Memberships + | NDS Rights + | Other | Rights to Files and Folders | Client Access Settings Lock Out Older GroupWise Clients C Minimum Client Release Version (xx): 6.0 y TF Minimum Client Release Date: [ Lo) TP Disable Logins Incorrect Logins Allowed: 5 = (3-10) Incorrect Login Reset Time: 30 = minutes (15-60) Lockout Reset Time: 30 H minutes (15+) Page Options... | Cancel | Apply | Help | The client access settings are discussed in the following sections: + “Tracking and Restricting Client Access to the Post Office” on page 181 + “Disabling a Post Office” on page 183 + “Enabling Intruder Detection” on page 465 5 Click GroupWise > Membership to display the Membership page. Properties of Development | NDS Rights + | Other | Rights to Files and Folders | ADharmapalan.Development.Provo a AMendenhall.Development.Provo ARarnirez. Development Provo ¡ASkoczylas.Development Provo BGelsomino.Development.Provo CBalton.Development.Provo FHaughey.Development.Provo FThompson.Development Provo Hvong.Development.Provo JDeSoto.Development Provo JStevens.Development.Provo JYacoub.Development.Provo KHuang.Development.Provo LTanaka. Development. Provo MJones Development. Provo MLamaroux.Development.Provo MdelaTorre.Development.Provo RSteadman.Development.Provo SMurphy.Development.Provo Page Options... | OF Cancel | Apply | Help | All users in the post office are listed, no matter where their Novell® eDirectory™ objects are located in the tree. Here you can add, delete, and move users in the post office. See “Users” on page 187. Managing Post Offices 167 6 Click Group Wise > Resources to display the Resources page. Properties of Development i xl Resources: Conference Room 1.GroupWise.Provo Page Options... | (6) Cancel | Apply. | Help All resources in the post office are listed, no matter where their eDirectory objects are located in the tree. This is a convenient place to delete resources from the post office. See “Resources” on page 221 7 Click GroupWise > Distribution Lists to display the Distribution Lists page. Properties of Development E x DS Rights + | Other | Rights to Files and Folders | Distribution Lists: Engineers.GroupWise.Provo Page Options... | Op Cancel | Apply | Help All distribution lists in the post office are listed, no matter where their eDirectory objects are located in the tree. This is a convenient place to delete distribution lists from the post office. See “Distribution Lists, Groups, and Organizational Roles” on page 235. 8 Click Group Wise > Libraries to display the Libraries page. 168 GroupWise 6.5 Administration Guide | Properties of Manufacturing | Other | Rights to Fies and Folders | All libraries belonging to the post office are listed, no matter where their eDirectory objects are located in the tree. This is a convenient place to delete libraries. See “Libraries and Documents” on page 261. 9 Click GroupWise > Aliases to display the Aliases page. | Properties of Manufacturing a You need to set up aliases for a post office only if you are using GroupWise gateways. For a list of gateways, see GroupWise 6.x Gateways (http://www.novell.com/documentation/ gw6xgate/index.html). GroupWise 5.5 gateways can be used with GroupWise 6.5. 10 Click GroupWise > Internet Addressing to display the Internet Addressing page. Managing Post Offices 169 Properties of Manufacturing xl NDS Rights + | Other | Rights to Files and Folders | Override | Addressing format: E UserlD.Post Office.Domain@internet domain name y Internet domain name: El y ] E For incoming mail, recipients are known exclusively by this Internet domain name Page Options... | OF Cancel | Apply. | Help Here you provide information used to determine the Internet addressing settings for the post office. See “Internet-Style Addressing” on page 87 for more information. 11 Click Group Wise > Security to display the Security page. Properties of Development Š E xi GroupWise + | Memberships v | NDS Rights v | Other | Rights to Files and Folders | Security Security Level: C Low @ High High Security Options E eDirectory Authentication - LDAP Server LDAP User Name: El LDAP Password: SetPassword | Disable LDAP Password Changing Inactive Connection Timeout: 30 E seconds LDAP Pool Server Reset Timeout: 5 4 minutes Select Servers | Page Options... | Cancel | Apply | Help For instructions on setting the security level for the post office, see “Selecting a Post Office Security Level” on page 157. 12 Click GroupWise > Default WebAccess to display the Default WebAccess page. 170 GroupWise 6.5 Administration Guide Properties of Manufacturing i xj IDS Rights v | Other | Rights to Files and Folders | Override Default WebAccess Gateway: [JA [KK Not Defined Page Options... ( Cancel Help Use this page to designate the default WebAccess gateway for the post office. See “WebAccess” on page 803 for more information. 13 Click OK to save changes to the post office properties. Managing Disk Space Usage in the Post Office Many users are prone to save every message and attachment they ever receive. You can moderate this behavior by implementing disk space management: + “Preparing to Implement Disk Space Management” on page 171 + “Setting Mailbox Size Limits” on page 172 + “Enforcing Mailbox Size Limits” on page 174 + “Restricting the Size of Messages That Users Can Send” on page 175 + “Preventing the Post Office from Running Out of Disk Space” on page 176 + “An Alternative to Disk Space Management in the Post Office” on page 179 NOTE: The Cross-Platform client does not currently respect the mailbox size limits established in ConsoleOne. Preparing to Implement Disk Space Management If you are implementing disk space management in an existing Group Wise system, you must begin by setting the initial size information on all users’ mailboxes. If you are implementing disk space management in a new Group Wise system, skip to “Setting Mailbox Size Limits” on page 172. To establish current mailbox size: 1 In ConsoleOne, browse to and select a Post Office object. 2 Click Tools > Group Wise Utilities > Mailbox/Library Maintenance. Managing Post Offices @ GroupWise Objects: Action: E xl Post Offices X Analyze/Fix Databases M Close [O Structure a Indexch Retrieve... Contents Save... E Collect statistics = Fix problems Help i Reset user disk space totals kile ji C Object Type [ON EE Databases | Logging | Results| Misc | Exclude | T Message C Document Options file: 3 In the GroupWise Objects field, select Post Offices. 4 In the Action field, select Analyze/Fix Databases. 5 As options to the action, select Contents, Fix Problems, and Reset User Disk Space Totals. Make sure all other options are deselected. 6 On the Databases tab, select User. Make sure all other types of databases are deselected. 7 Click Run > OK to acknowledge that the Mailbox/Library Maintenance task has been sent to the POA. After the POA has performed the task, current mailbox size information becomes available on each user’s mailbox. The information is updated regularly as the user receives and deletes messages. 8 To generate a report of current mailbox information, follow the instructions in “Gathering Mailbox Statistics” on page 367. 9 Repeat Step | through Step 8 for each post office where you want to implement disk space management. 10 Continue with “Setting Mailbox Size Limits” on page 172. Setting Mailbox Size Limits After initial size information is recorded on each user’s mailbox, you can establish a limit on the amount of disk space each user’s mailbox is allowed to occupy. You can set a single limit for an entire domain. You can set different limits for each post office. You can even set individual user limits if necessary. If you are implementing disk space management in an existing GroupWise system where users are accustomed to unlimited disk space, you should warn them about the coming change. After you establish the mailbox size limits as described in this section, users whose mailboxes exceed the established limit cannot send messages until the size of their mailboxes is reduced. Users might want to manually delete and archive items in advance in order to avoid this interruption in their use of GroupWise. 172 GroupWise 6.5 Administration Guide To establish mailbox size limits: 1 In ConsoleOne, browse to and select a Domain, Post Office, or User object. 2 Click Tools > Group Wise Utilities > Client Options. GroupWise Client Options i xj Environment Send Hp | Ö Security Date and Time 3 Click Send > Disk Space Management. x Send Options | Mail] Apt] Task] Note | Security Disk Space Mgmt | User Limits [57 Mailbox size limit: 200 E MB Threshold for warning users: [eo à % Maximum send message size: 1000 El KB Restore Default Settings Cancel | Hei 4 Select User Limits. 5 Specify the maximum number of megabytes allowed for each user's mailbox. Unless disk space is extremely limited, 200 MB is a comfortable mailbox size to enforce. 6 Specify as a percentage the point where you want to warn users that their mailboxes are getting full. After a user receives a warning message, he or she cannot send additional messages until mailbox cleanup has been performed and the mailbox size is brought below the warning percentage. 7 Optionally, specify in kilobytes the largest message that users can send. By restricting message size, you can influence how fast users’ mailboxes fill up. However, if users have valid reasons for sending messages that exceed this limit, the limit can become a hindrance to users getting their work done. 8 Click OK > Close to save the disk space management settings. Managing Post Offices 173 9 If you are adding disk space management to an existing Group Wise system where users’ mailboxes are already over the desired size limit, continue with “Enforcing Mailbox Size Limits” on page 174. Or If you are implementing disk space management in a new system where users have not yet begun to use their mailboxes, see “Using Mailbox Storage Size Information” in “Managing Your Mailbox” in the Group Wise 6.5 Windows Client User Guide to see how setting a mailbox size limit affects users’ activities in the Group Wise client. Enforcing Mailbox Size Limits If existing Group Wise users are having difficulty fitting their mailboxes into the established mailbox size limits, you can assist them by reducing their mailboxes for them. Users should be warned before this action is taken. 1 In ConsoleOne, select a Post Office object. 2 Click Tools > Group Wise Utilities > Mailbox/Library Maintenance. ove oup e Mailbo bra a ance F xl @ GroupWise Objects: Action: Post Offices + Expire/Reduce Messages v Close C Reduce only Retrieve... A M items older than 60 E days SI [ items larger than 1000 E KB Help [Y Trash older than 60 E days T° Reduce mailbox to 100 E| KB FM Reduce mailbox to limited size Include M Received items EA i [el ee | M Sentitems Calendar items fag a SHARE) IV Only backed-up items @ User —| Databases | Logging| Results| misc] Exclude | © Library M User Fort Options file: 3 Inthe Action field, select Expire/Reduce. 4 Set the Expire and Reduce options as desired, making sure that Reduce Mailbox to Limited Size is selected. 5 Click Run > OK to acknowledge that the Mailbox/Library Maintenance task has been sent to the POA. After the POA has performed the task, users mailboxes fit within the mailbox size limit you have established. 6 Repeat Step 1 through Step 5 for each post office where you want to reduce users’ mailboxes to the established mailbox size limit. See “Using Mailbox Storage Size Information” in “Managing Your Mailbox” in the GroupWise 6.5 Windows Client User Guide to see how setting a mailbox size limit affects user's activities in the Group Wise client. 174 GroupWise 6.5 Administration Guide Restricting the Size of Messages That Users Can Send By restricting message size, you can influence how fast users* mailboxes fill up. However, ifusers have valid reasons for sending messages that exceed this limit, the limit can become a hindrance to users getting their work done. There are three levels at which you can restrict message size: + “Within the Post Office” on page 175 + “Between Post Offices” on page 176 + “Between Domains” on page 176 + “Between Your Group Wise System and the Internet” on page 176 NOTE: Although the Cross-Platform client does not respect the message size limits established in ConsoleOne using Tools > GroupWise Utilities > Client Options > Send > Disk Space Management, messages originating from the Cross-Platform client can be restricted by the POA and MTA as they pass between post offices and domains. Within the Post Office You can use Client Options to restrict the size of messages that users can send within their local post office. 1 In ConsoleOne, browse to and select a Domain, Post Office, or User object. 2 Click Tools > Group Wise Utilities > Client Options. GroupWise Client Options x| Environment Send o | Y Security Date and Time 3 Click Send > Disk Space Management. [CES a Send Options | Mail] Appt] Task] Note | Security Disk Space Mort | User Limits oc | Mailbox size limit: 200 = MB Threshold for warning users: [oo à % Maximum send message size: 1000 4 KB Restore Default Settings Managing Post Offices 175 4 Select User Limits. 5 Specify in kilobytes the largest message that users can send. 6 Click OK > Close to save the maximum message size setting. Between Post Offices You can configure the POA to restrict the size of messages that it allows to pass outside the local post office. See “Restricting Message Size between Post Offices” on page 455 for setup instructions. Between Domains You can configure the MTA to restrict the size of messages that it allows to pass outside the local domain. See “Restricting Message Size between Domains” on page 588 for setup instructions. Between Your GroupWise System and the Internet You can configure the Internet Agent to restrict the size of messages that it allows to pass outside your Group Wise system. See “Controlling User Access” on page 705 for setup instructions. Preventing the Post Office from Running Out of Disk Space In spite of the best disk space management plans, it is still possible that some unforeseen situation could result in a post office running out of disk space. To prevent this occurrence, you can configure the POA to stop processing messages, so that disk space usage in the post office cannot increase until the disk space problem is resolved. 1 In ConsoleOne, double-click a Post Office object, right-click its POA object, then click Properties. 2 Click Group Wise > Agent Settings, then adjust the settings in the Disk Check Interval and Disk Check Delay fields as described in “Scheduling Disk Space Management” on page 469. 3 Click Group Wise > Scheduled Events. Scheduled events used by this agent: IF. Default POA Disk Check Event m Default POA MailbowLibrary Maintenance Event Page Options... L Cancel | Amv | Her | 176 GroupWise 6.5 Administration Guide 4 Click Create to create a new scheduled event to handle an unacceptably low disk space condition. x Name: Type: Disk Check y] ¡Trigger C Percent Trigger actions at: [ 0 E MB MB Stop mail processing at: [ 0 4 MB p Actions - — [> Default POA Disk Check Actions Create Edit 5 Type a unique name for the new scheduled event, then select Disk Check as the event type. 6 In the Trigger Actions At field, specify the amount of free post office disk space at which to take preventive measures. 7 Click Create to define your own disk check actions, then give the new action a unique name. Scheduled Event Action E x| Name: |Low Disk Space Actions Action: |Expire/Reduce Messages +] Cancel | C Reduce only E 4 Help | [Y items older than [ e + days M Downloaded items older than [ e 4 days E items largerthan [ 1000 4 KB [Y Trash older than | 6 < days J” Reduce mailbox to | 100 # KB T Reduce mailbox to limited size Include Received items IV Sentitems [Y Calendar items [Y Only backed-up items Databases | Logging Results | Misc | Exclude | Notification | Send results to: [Y Administrator [— Individual users cc | Message... | 8 Configure the actions for the POA to take in order to relieve the low disk space condition. Use the Results or Notification tab if you want to receive notification about the POA’s response to the low disk space condition. 9 Click OK to return to the Create Scheduled Event dialog box. Managing Post Offices 177 Edit Scheduled Event ESI Name: Stop Mail Processing Type: [Disk Check y] ¡Trigger C Percent Trigger actions at: [ 50 4 MB E MB Stop mail processing at: [ 20 | MB pActions [mi Default POA Disk Check Actions Create | M Low Disk Space Actions a Edi | Delete | coma | Heo | For additional instructions, see “Scheduling Disk Space Management” on page 469. 10 Select the new set of actions. 11 Inthe Stop Mail Processing At field, specify the amount of free post office disk space at which you want the POA to stop processing messages. 12 Click OK to create the new disk space management event and return to the Scheduled Events page. Properties of POA 3 xl GroupWise + | NDS Rights + | Other | Rights to Files and Folders | Scheduled Events Scheduled events used by this agent: O Default POA Disk Check Event [> Default POA MailbowLibrary Maintenance Event M Stop Mail Processing Create | Edit Page Options... | OK | Cancel | Apply | Help | 13 Select the new disk space management event. 14 Click OK to close the Scheduled Events page. ConsoleOne then notifies the POA to restart so the new disk space management event can be put into effect. 178 GroupWise 6.5 Administration Guide An Alternative to Disk Space Management in the Post Office If you want to place more responsibility for disk space management onto Group Wise client users, you can reguire that they run the client in Caching mode, where all messages can be stored on users’ workstations, or other personal locations, rather than in the post office. For an overview of Caching mode, see: + “Using Caching Mode” in the GroupWise 6.5 Windows Client User Guide + “Using Caching Mode” in the GroupWise 6.5 Cross-Platform Client User Guide IMPORTANT: Do not force Caching mode for a post office that supports Outlook clients along with GroupWise clients. Forcing Caching Mode You can force Caching mode for an entire domain. You can force Caching mode for specific post offices. You can even force Caching mode for an individual user if necessary. When you initially force caching mode, users’ Caching mailboxes are identical with their Online mailboxes. However, as you employ disk space management processes in the post office and reduce the size of users’ Online mailboxes, more and more of the users’ mailbox items exist only in their Caching mailboxes. Make sure that users understand their responsibilities to back up their Caching mailboxes, as described in: + “Backing Up Your Mailbox” in “Managing Your Mailbox” in the GroupWise 6.5 Windows Client User Guide + “Backing Up Your Mailbox” in “Managing Your Mailbox” in the GroupWise 6.5 Cross- Platform Client User Guide To force Caching mode: 1 In ConsoleOne, browse to and select a Domain, Post Office, or User object. 2 Click Tools > GroupWise Utilities > Client Options. $ Y (7 Environment end Ö Security Date and Time 3 Click Environment > General. Client Login Mode M Allow use of "Remote" mode IV Allow use of "Caching" mode F By default, show login made drop-down list on client toolbar 4 In the Client Login Mode box, select Force Use of Caching Mode. 5 Click OK > Close to save the Caching mode setting. If you are helping existing users, who might have sizeable mailboxes, to start using Caching mode exclusively, you can configure the POA to respond efficiently when multiple users need to download their entire mailboxes for the first time. See “Supporting Forced Mailbox Caching” on page 454 for setup instructions. Managing Post Offices 179 Auditing Mailbox License Usage in the Post Office You can run an audit report on a post office to see 1) which mailboxes reguire full client licenses and which mailboxes reguire limited client licenses, and 2) which mailboxes are active (have been accessed at least one time), which ones have never been active, and which ones have been inactive for a specified period of time. A mailbox requires a full client license (and is marked as a full client license mailbox) if it has been accessed by any of the following: + The Group Wise Windows client (grpwise.exe) + GroupWise Notify (notify.exe) or Group Wise Address Book (addrbook.exe) + The GroupWise Cross-Platform client (groupwise) + A third-party plug-in to the GroupWise client API + The Microsoft Outlook Plug-In for GroupWise 5.5 + Microsoft Outlook with the GroupWise client for Windows installed A mailbox requires a limited client license only (and is marked as a limited client license mailbox) if access to it has been limited to the following: * The GroupWise WebAccess client (including wireless devices) + A GroupWise Windows or WebAccess client via the Proxy feature + Any GroupWise client via the Busy Search feature + A POP or IMAP client To generate an audit report for the post office: 1 In ConsoleOne, browse to and select the Post Office object. 2 Click Tools > GroupWise Utilities > Mailbox/Library Maintenance. ovell GroupWise Mailbox/Libra a a xj @ GroupWise Objects: Action: Post Offices + [AnalyzeiF ix Databases | Close [O Structure J Index che Retrieve... Contents Save... E Collect statistics Sato. | M Fix problems Help M Reset user disk space totals AAA © Object Type @ Use — Databases | Logging | Results| Misc | Exclude | c ; F User [> Message C Document Options file: 3 In the Action field, select Audit Report. 180 GroupWise 6.5 Administration Guide lx © GroupWise Objects: Action: [kun | Post Offices X Audit Report Close Show accounts without activity for previous = Retrieve... 60 4 days Save... Ss Provo.Manufacturin: Help lil Object Type [Gi —" Databases | Logging | Results| Misc | Options file: 4 Inthe Show Accounts without Activity for nn Days field, select the number of days you want to use for the inactivity report. Using the default setting (60 days) causes the Mailbox/Library Maintenance program to indicate the mailboxes that have not had any activity within the last 60 days. 5 If you want write the report to a log file, click the Logging tab, then specify a name for the log file. 6 Ifyou want to send the results as an e-mail message to the domain’s GroupWise administrator or to another individual, click the Results tab, then select the appropriate options. 7 Click Run > OK to acknowledge that the Mailbox/Library Maintenance task has been sent to the POA. After the POA has performed the task, the audit report is generated in the format (log file or e-mail message) you specified. Audit reports are stored as part of the information available on Post Office and Domain objects in ConsoleOne. Right-click a Domain or Post Office object, then click Tools > GroupWise Diagnostics > Information. The information stored on the Domain object is cumulative for all post office in the domain for which audit reports have been run. Audit reports can also be scheduled to run on a regular basis by properly configuring the POA to perform a Mailbox/Library Maintenance event. See “Scheduling Database Maintenance” on page 467. Tracking and Restricting Client Access to the Post Office By default, the post office allows multiple versions of the GroupWise Windows and Cross- Platform clients to access it. Using the Web console available for the post office’s POA, you can see the version number of each GroupWise client that logs in to the post office in client/server access mode (TCP/IP to the POA). This information is displayed on the POA Web console’s C/S Users page. For more information, see “Using the POA Web Console” on page 489. Managing Post Offices 181 IMPORTANT: Because the POA provides the version tracking and enforces the client lockout, this functionality applies only to GroupWise clients that are accessing the post office in client/server mode (not direct access mode). To help you better monitor and track which versions of the Group Wise client are being used to access the post office, you can specify a preferred GroupWise client version for the post office. Any version that does not match the preferred version is highlighted on the POA Web console’s C/S Users page. Older versions are shown in red, and newer versions are shown in blue. In addition, to restrict which versions of the Group Wise client can access the post office, you can choose to lock out any Group Wise clients that are older than the preferred version. If you want to lock out all Group Wise clients (for example, to rebuild the post office database), see “Disabling a Post Office” on page 183. To specify a preferred Group Wise client version for the post office and to enable the POA to lock out specific Group Wise client versions: 1 In ConsoleOne, right-click the Post Office object, then click Properties. 2 Click Group Wise > Client Access Settings to display the Client Access Settings page. Properties of Development 28 xÍ GroupWise + | Memberships + | NDS Rights + | Other | Rights to Files and Folders | Client Access Settings Lock Out Older GroupWise Clients C Minimum Client Release Version 6009: 6.0 = [ Minimum Client Release Date: [ Ed] D Disable Logins Incorrect Logins Allowed: 5 F (3-10) Incorrect Login Reset Time: 30 = minutes (15-60) Lockout Reset Time: 30 4 minutes (15+) Page Options... Cancel Apply | Help 3 Fill in the following fields: Minimum Client Release Version: Enter the version to use as the post office’s preferred GroupWise client version. Any version that does not match the preferred version is highlighted on the POA Web console’s C/S Users page. Older versions are shown in red, and newer versions are shown in blue. The version number syntax should match what is displayed in the Group Wise client’s About GroupWise dialog box. Only version 5.5 Enhancement Pack SP1 and newer are supported. Minimum Client Release Date: This field is available only if you specify a release version. You can use this field to associate an expected release date with the release version. The C/S Users page would highlight any dates that do not match the one entered here. Lock Out Older GroupWise Clients: Select this option for either or both of the above options to lock out any GroupWise clients (client/server mode only) that are older than the version and/or date specified in the Release Version and Release Date fields. For example, if you entered 6.0.0 in the Release Version field and April 6, 2001 12:00 AM in the Release Date 182 GroupWise 6.5 Administration Guide field and selected this option for both, any GroupWise client that is older than version 6.0 or is dated before April 6, 2001 12:00 AM would not be allowed access to the post office. 4 Click OK to save the changes. Disabling a Post Office Disabling a post office restricts users from starting the Group Wise Windows or Cross-Platform client and accessing the post office. However, users who are already running the Group Wise client can continue to access the post office; after they exit, they cannot access the post office again until the post office is enabled. A post office must be disabled if you are rebuilding the post office database (wphost.db). You might also want to disable a post office when you are doing a complete Group Wise system backup. That ensures that all data is consistent at the time of the backup. 1 In ConsoleOne, browse to and right-click the Post Office object, then click Properties. 2 Click GroupWise > Client Access Settings to display the Client Access Settings page. Properties of Development á xj GroupWise + | Memberships + | NDS Rights + | Other | Rights to Files and Folders | Client Access Settings Lock Out Older GroupWise Clients F Minimum Client Release Version 6000: 6.0 = [ Minimum Client Release Date: El I Disable Logins Incorrect Logins Allowed: 5 4 (3-10) Incorrect Login Reset Time: 30 4 minutes (15-60) Lockout Reset Time: 30 4 minutes (15+) Page Options... Cancel | apo | Hen | 3 Select Disable Logins, then click OK to disable the post office. 4 To re-enable logins, deselect Disable Logins so that it is blank. Moving a Post Office You cannot move a Post Office object in ConsoleOne because it is a container object. Only leaf objects can be moved. If you need to change the context, graft the Group Wise post office to its corresponding eDirectory object in the new container location. See “GW / eDirectory Association” on page 73 for more information on grafting objects. You can, however, move the post office directory, the post office database (wphost.db), and the other databases that reside in the post office by copying the post office directory structure and all its contents to the new location. IMPORTANT: Follow these instructions if you want to move a post office on a NetWare or Windows server to another directory on the same server or to a different NetWare or Windows server. If you want to move a post Managing Post Offices 183 office located on a NetWare or Windows server onto a Linux server, see “Moving a Post Office to Linux” in “Update” in the GroupWise 6.5 Installation Guide. To move a post office directory structure and all its contents: 1 Make sure all users are out ofthe post office, then disable logins to the post office. See “Disabling a Post Office” on page 183. 2 Back up the post office. See Chapter 31, “Backing Up GroupWise Databases,” on page 375. 3 In ConsoleOne, display the Identification page of'the post office to move. 4 Inthe UNC Path field, change the UNC path to the location where you want to move the post office, then click OK to save the new location. The location change is then propagated up to the domain. 5 Stop the POA for the post office. 6 Use xcopy with the /s and /e options to move the post office directory and its contents. These options re-create the same directory structure even if directories are empty. Example: xcopy post office directory /s /e destination 7 Give rights to objects that need to access the post office database. For example, the NetWare® POA needs rights if the new location is on a different server. 8 Edit the POA startup file by changing the setting of the /home switch, then restart the POA. See “Adjusting the POA for a New Post Office Location” on page 445. 9 When you are sure the post office is functioning properly, delete the original post office directories. If you need to move the POA along with its post office, see “Moving the POA to a Different server” on page 445. Deleting a Post Office You cannot delete a post office until you have deleted or moved all objects that belong to it. 1 In ConsoleOne, right-click the Post Office object to delete, then click Properties. 184 GroupWise 6.5 Administration Guide Properties of Manufacturing F xj "| NDS Rights + | other | Rights to Files and Folders | v Identification Post Office Settings Membership Provo1.Manufacturing Resources Distribution Lists o [env oms rs gueystemmanata E Aliases Internet Addressing [English - US x Security (GMT-07:00) Mountain Time (US & Canada) v Default WebAccess 6.5 Configure Non-DOS Name Space Access Page Options... 2 Click GroupWise > Resources, then delete any resources that still belong to the post office. See “Deleting a Resource” on page 230. You must delete resources before users, because users who own resources cannot be deleted without assigning a new owner in the same post office. 3 Click GroupWise > Membership, then delete or move any users that still belong to the post office. See “Removing GroupWise Accounts” on page 215 and “Moving GroupWise Accounts” on page 198. 4 Click GroupWise > Distribution Lists, then delete any distribution lists that still belong to the post office. See “Deleting a Distribution List” on page 244. 5 Click GroupWise > Libraries, delete any libraries that still belong to the post office. See “Deleting a Library” on page 299. 6 Click OK to perform the deletions. It is easy to perform such deletions in the GroupWise View. Select the Post Office object in the GroupWise View, then use the drop-down list of objects to display objects of each type that still belong to the post office. Delete any residual objects in the Console View. 7 In ConsoleOne, browse to and right-click the Domain object that owns the post office to delete, then click Properties. 8 Click GroupWise > Post Offices, select the post office to delete, then click Delete. 9 Stop the POA for the post office and uninstall the POA software if applicable. See “Stopping the POA” on page 480 and “Uninstalling the POA Software” on page 435. Changing POA Configuration to Meet Post Office Needs Because the POA delivers messages to mailboxes, responds in real time to client/server users, and maintains all databases located in the post office, its functioning affects the post office and all users who belong to the post office. Proper POA configuration is essential for a smoothly running GroupWise system. Complete details about the POA are provided in “Post Office Agent” on page 415. As you create and manage post offices, you should keep in mind the following aspects of POA configuration: Managing Post Offices 185 + “Enhancing Post Office Security with SSL Connections to the POA” on page 458 + “Providing LDAP Authentication for Group Wise Users” on page 461 + “Enabling Intruder Detection” on page 465 + “Supporting IMAP Clients” on page 450 + “Optimizing Client/Server Processing” on page 507 + “Scheduling Database Maintenance” on page 467 + “Performing Nightly User Upkeep” on page 472 + “Restricting Message Size between Post Offices” on page 455 186 GroupWise 6.5 Administration Guide Users Chapter 13, “Creating Group Wise Accounts,” on page 189 Chapter 14, “Managing GroupWise Accounts and Users,” on page 197 Users 187 188 GroupWise 6.5 Administration Guide Creating GroupWise Accounts For users to be able to use GroupWise®, you must give them GroupWise accounts. A GroupWise account defines the user in the GroupWise system by providing the user with a GroupWise user ID and GroupWise mailbox. You can give GroupWise accounts to Novell® eDirectory™ users during or after their creation in eDirectory. You can also give Group Wise accounts to users who do not have eDirectory accounts. Refer to the following sections for details: + “Establishing a Default Password for All New GroupWise Accounts” on page 189 + “Creating GroupWise Accounts for eDirectory Users” on page 190 + “Creating GroupWise Accounts for Non-eDirectory Users” on page 195 + “Educating Your New Users” on page 196 Establishing a Default Password for All New GroupWise Accounts To save time and energy when you are creating new GroupWise accounts, you can establish a default password to use for all new accounts. 1 In ConsoleOne*, click Tools > Group Wise System Operations > System Preferences > Default Password. KE Groupwise System Preferences x) Admin Preferences | Routina Ontions | External Access Rights Nickname Settings Default Password Admin Lockout Settings Default password for new users: OK Cancel Help 2 Typethe password you want to use as the default, then click OK. 3 Explain to users how to set their own passwords in the GroupWise client, as described in “Assigning Passwords to Your Mailbox” in the GroupWise 6.5 Windows Client User Guide. Creating GroupWise Accounts 189 Creating GroupWise Accounts for eDirectory Users Depending on your needs, you can choose from the following methods to create GroupWise accounts for eDirectory users: + Creating a Single Group Wise Account: You can create a Group Wise account for a single eDirectory user by editing the Group Wise information on his or her User object. This method lets you create the Group Wise account on any post office, select the Group Wise user ID, and configure optional Group Wise information. It provides the most flexibility in creating a user's GroupWise account. + Creating Multiple GroupWise Accounts: You can create GroupWise accounts for multiple eDirectory users by editing the membership information on a Post Office object. This method allows you to guickly add multiple users to the same post office at one time. However, you cannot select the user's Group Wise user ID; instead, the user's eDirectory username is automatically used as his or her Group Wise user ID. In addition, to configure other optional Group Wise information for a user, you need to modify each User object. + Creating GroupWise Accounts by Importing Users: You can import information from ASCII- delimited text files. + Using a Template to Create Group Wise Accounts: You can create a template to apply to new eDirectory User objects you create. The template can be configured to automatically assign the user to a post office. Creating a Single GroupWise Account To create a Group Wise account for an eDirectory user: 1 In ConsoleOne, right-click the User object, then click Properties. 2 Click Group Wise > Account to display the Account page. Properties of User 1 xÍ General -| GroupWise + | ZENworks ~] Application Launcher | Applications | Commerce | Remote Management | | Account Post Office: Mailbox ID: Visibility: External Syne Override: Account ID: File ID: Expiration Date: [enable [May 16, 2001 11:42:00 AM MDT Bl Gateway Access: LA JÄÄ JJ | A D 1 LDAP Authentication: [ Restore Area: (Not Set) Page Options... OK Cancel Apply | Help 3 Fill in the following fields: Post Office: Select the post office where you want the user’s mailbox created. 190 GroupWise 6.5 Administration Guide Mailbox ID: The Mailbox ID (also referred to as the GroupWise user ID) defaults to the eDirectory username. You can change it ifnecessary. IMPORTANT: GroupWise mailbox IDs cannot contain periods. Ifthe eDirectory username contains one or more periods, you must provide a mailbox ID that does not contain periods. Click Apply to create the account. You must create the account by clicking Apply (or OK) before you can modify any ofthe other fields, including the GroupWise password. If desired, modify any of the following optional fields: Visibility: Select the level at which you want the user to be visible in the Address Book. System enables the user to be visible to all users in your Group Wise system. Domain enables the user to be visible to all users in the same domain as the user. Post Office enables the user to be visible to all users on the same post office as the user. Setting the visibility level to None means that no users will see the user in the Address Book. However, even if the user is not displayed in the Address Book, other users can send messages to the user by typing the user's ID (mailbox ID) in a message’s To field. External Sync Override: This option applies only if your GroupWise system links to and synchronizes with an external system. Select the Synchronize According to Visibility setting if you want the user information to be provided to the other system only if the user’s visibility is set to System. Select the Synchronize Regardless of Visibility setting if you always want the user information provided to the other system regardless of the user’s visibility level. Select the Don’t Synchronize Regardless of Visibility setting if you never want the user information provided to the other system. Account ID: This option applies only if you have a GroupWise gateway that supports accounting. For more information about gateway accounting, see your GroupWise gateway documentation (http://www.novell.com/documentation/gw65/index.html). File ID: This three-letter ID is randomly generated and is non-editable. It is used for various internal purposes within the Group Wise system, including ensuring that files associated with the user have unique names. Expiration Date: If you want the user’s GroupWise account to no longer work after a certain date, specify the expiration date. This date applies to the user’s Group Wise account only; it is independent of the eDirectory account expiration date (User object > Restrictions tab > Login Restrictions page). Gateway Access: This option applies only if you have GroupWise gateways that support access restrictions. For more information, see your gateway documentation (http:// www.novell.com/documentation/gw6/index.html). Disable Logins: Select this option to prevent the user from accessing his or her GroupWise mailbox. LDAP Authentication: This option applies only if you are using LDAP to authenticate users to Group Wise (see “Providing LDAP Authentication for GroupWise Users” on page 461) and the LDAP server is not the Novell LDAP server. If this is the case, enter the user’s LDAP authentication ID. Restore Area: This field applies only if you are using the GroupWise backup and restore features. If so, this field indicates the location where the user’s mailbox is being backed up. For details, see Chapter 32, “Restoring GroupWise Databases from Backup,” on page 379. Creating GroupWise Accounts 191 Change GroupWise Password: Click this option to assign a password to the user's GroupWise account or change the current password. The user will be prompted for this password each time he or she logs in to GroupWise. To be able to skip this option by setting a default password, see “Establishing a Default Password for All New GroupWise Accounts” on page 189. Delete GroupWise Account: Click this option to delete the user’s GroupWise account. This includes the user’s mailbox and all items in the mailbox. The user’s eDirectory account is not affected. 6 Click Apply to save the changes. 7 Click GroupWise > General > Identification to display the user’s current eDirectory information. This information will appear in the GroupWise Address Book, as described in Chapter , “Address Book,” on page 81. If you keep private information in the Description field of the User object, you can prevent this information from appearing the GroupWise Address Book. See “Preventing the User Description Field from Displaying in the Address Book” on page 85. 8 Make sure that the user’s eDirectory information is current, then click OK. Creating Multiple GroupWise Accounts 192 If you have multiple eDirectory users who will have Group Wise accounts on the same post office, you can use the Post Office object’s Membership page to quickly add the users and create their accounts. Each user’s GroupWise user ID will be the same as his or her eDirectory username. To create Group Wise accounts for multiple eDirectory users: 1 In ConsoleOne, right-click the Post Office object, then click Properties. 2 Click GroupWise > Membership to display the Membership page. Properties of Research xÍ GroupWise v | Memberships v | NDS Rights v | Other | Rights to Files and Folders | Membership Users: User 1.GroupWise.Provo User 2.GroupWise.Provo Page Options... Cancel j | Help 3 Click Add, select the eDirectory user you want to add to the post office, then click OK to add the user to the post office’s membership list. GroupWise 6.5 Administration Guide By default, the user’s eDirectory username is used as the Group Wise ID. IMPORTANT: GroupWise IDs cannot contain periods. If the any of the eDirectory usernames contain periods, you must provide GroupWise IDs that do not contain periods on the GroupWise Account page of each User object. Properties of Research 4 xj GroupWise v | Memberships + | NDS Rights v | Other | Rights to Files and Folders | Membership | Users: | User 1.GroupWise.Provo User 2.GroupWise.Provo User 3.GroupWise.Provo Page Options... | OK Cancel Apply Help 4 Repeat Step 3 to create additional GroupWise accounts in the post office. 5 When finished, click OK to save the changes. Creating GroupWise Accounts by Importing Users You can quickly create multiple GroupWise users by importing ASCII-delimited text files created by the GroupWise Export utility or by a third-party export. The text files provide the eDirectory and Group Wise attributes necessary for creating users. For information about using the GroupWise Import utility, see “Import” on page 68. For information about using the Group Wise Export utility, see “Export” on page 71. Using a Template to Create GroupWise Accounts If you frequently create new users, you might want to create Template objects with the necessary GroupWise properties. This makes creating a new eDirectory user with GroupWise access a one- step process. However, you cannot use a Template object to give Group Wise properties to existing eDirectory users. The steps to create a template with Group Wise properties include assigning the post office and setting up directory rights. Because a user can have membership in only one post office, a different template should be created for each existing post office. Further, for each post office, a template can be created for different categories of users, such as secretarial, accounting, administrative, human resources, development, sales, and manufacturing. After one template has been created with eDirectory properties and post office directory rights, you can use it to quickly create templates for subsequent post offices. + “Creating a Template” on page 194 + “Creating a User Account from a Template” on page 194 Creating GroupWise Accounts 193 Creating a Template 1 In ConsoleOne, right-click the Organizational Unit object where you want to create the Template object, then click New > Object to display the New Object dialog box. Templates should be placed in the same organizational unit where they will be used because the browser first lists any templates in the current context. The template will also inherit rights from the container the template is created in, further simplifying its setup. 2 Inthe Class list, select Template, then click OK to display the New Template dialog box. 3 Entera name that describes the purpose for which the template will be used. 4 If you want to base the template on another Template or User object, select Use Template or User, then browse to and select the desired Template or User object. 5 Select Define Additional Properties. 6 Click Create to display the properties pages for the Template object. 7 Click Group Wise > Information. 8 Fillin the following fields: Post Office: Select the post office the user will be assigned to. Visibility: Select the level at which the user will be visible in the Address Book. System enables the user to be visible to all users in your Group Wise system. Domain enables the user to be visible to all users in the same domain as the user. Post Office enables the user to be visible to all users on the same post office as the user. Setting the visibility level to None means that no users will see the user in the Address Book. However, even if the user is not displayed in the Address Book, other users can send messages to the user by typing the user's ID (mailbox ID) in a message’s To field. Account ID: This field supports accounting for GroupWise gateways. For more information about gateway accounting, see your gateway documentation. Expiration Date: Use this to set a date when the user’s account will expire. The user will not be able to access the account after that date. For more information, see “Expiring a Group Wise Account” on page 217. Gateway Access: This is used to grant or restrict access to some GroupWise gateways. See your gateway documentation (http://www.novell.com/documentation/gw65/index.html) to determine if this field applies. 9 Modify information on any of the other tabs to configure the template, then click OK to save the template changes. Creating a User Account from a Template 1 In ConsoleOne, right-click the container where you want to create a new eDirectory user, then click New > User. 2 Enter a Name, Surname, and Unique ID (all three are required). 3 Select the Use Template option, then browse to and select the template you want applied to this user. 4 Modify any of the other options you want. 5 Click OK to create the user’s eDirectory and GroupWise accounts. 194 GroupWise 6.5 Administration Guide Creating GroupWise Accounts for Non-eDirectory Users If you have users who do not have eDirectory accounts, you can still assign them Group Wise accounts by defining them as GroupWise external entities in eDirectory. Defining a user as a Group Wise external entity provides the user with access to GroupWise only; it does not enable the user to log in to eDirectory. External entities have eDirectory objects, but they are not considered eDirectory users for licensing purposes. To create a GroupWise account for a non-eDirectory user: 1 In ConsoleOne, right-click the eDirectory container where you want to create the user's GroupWise External Entity object, then click New > Object to display the New Object dialog box. 2 Select GroupWise External Entity, then click OK to display the Create GroupWise External Entity dialog box. x GroupWise Object ID: [ox] A Last Name: Cancel Help GroupWise Post Office: External Network ID: [ Define additional properties TÜ Create another External Entity 3 Fill in the following fields: GroupWise Object ID: Enter the user's GroupWise ID. The user’s ID along with the user’s post office and domain, provide the user with a unique name within the GroupWise system (userID.po.domain). The GroupWise object ID cannot include periods. Last Name: Enter the user’s last name. GroupWise Post Office: Select the post office where you want the user’s mailbox. External Network ID: Enter the user’s network ID for the network that he or she logs in to. 4 Select Define Additional Properties, then click OK to display the GroupWise Identification page. Creating GroupWise Accounts 195 Properties of External Entity k xi GroupWise + | General vl Restrictions v | Memberships: -| Security Equal To Me | Login Script | NDS Rights v |! Identification Network ID: [JSprat@hotmaicom SS Description: Given Name: FO O Last Name: [Spratt Title: FO Department: O Phone: Y Fac Y Page Options... OK Cancel Apply | Help 5 If desired, fill in any of the fields on the Identification page. This information will appear in the GroupWise Address Book, as described in Chapter , “Address Book,” on page 81. If you want to keep private information in the Description field, you can prevent this information from appearing the GroupWise Address Book. See “Preventing the User Description Field from Displaying in the Address Book” on page 85. 6 Click OK to save the information. The user is given a GroupWise mailbox in the post office you selected and can access his or her mailbox through the GroupWise client. Educating Your New Users After users can log in to their GroupWise accounts, all of the GroupWise client’s features are at their fingertips, but some new users do not know how to get started. You can give your users the following suggestions to encourage them to explore the Group Wise client: + Click Help > Help Topics > Contents > How Do I to learn to perform common GroupWise tasks + Click Help > What’s New to learn about the latest new Group Wise features + Click Help > User Guide to view the GroupWise 6.5 Windows Client User Guide in HTML format + Print “Getting Started” in the GroupWise 6.5 Windows Client User Guide to keep handy by the workstation as a quick reference For convenience in printing, the GroupWise 6.5 Windows Client User Guide is available in PDF format at the GroupWise 6.5 Documentation Web site (http://www.novell.com/documentation/ gw65/index.html). 196 GroupWise 6.5 Administration Guide Managing GroupWise Accounts and Users As your Group Wise” system grows, you will need to add users and manage their Group Wise accounts. + + + + + “Adding a User to a Distribution List” on page 197 “Moving GroupWise Accounts” on page 198 “Renaming Users and Their Group Wise Accounts” on page 206 “Managing Mailbox Passwords” on page 206 “Managing E-Mail Addresses” on page 210 “Checking Group Wise Account Usage” on page 214 “Disabling and Enabling Group Wise Accounts” on page 214 “Removing GroupWise Accounts” on page 215 See also “Maintaining Domain and Post Office Databases” on page 345, Chapter 27, “Maintaining User/Resource and Message Databases,” on page 353, and “Backing Up GroupWise Databases” on page 375. Proper database maintenance and backups allow recovery from accidental deletions, as described in “Restoring Deleted Mailbox Items” on page 381 and “Recovering Deleted GroupWise Accounts” on page 384. Adding a User to a Distribution List Group Wise” distribution lists are sets of users and resources that can be addressed as a single entity. When a Group Wise user addresses an item (message, appointment, task, or note) to a distribution list, each user or resource that is a member receives a copy of the item. To add a user to a distribution list 1 In ConsoleOne, right-click the User object, then click Properties. 2 Click Group Wise > Distribution Lists to display the Distribution Lists page. Managing GroupWise Accounts and Users 197 Properties of User 1 E xÍ eneral v | Restrictions + | Memberships v | Security Equal To Me | Login Script | NDS Rights v t Membership Participation Page Options... | 3 Click Add, select the distribution list that you want to add the user to, then click OK. Properties of User 1 E x| GroupWise + | General + | Restrictions + | Memberships + | Security Equal To Me | Login Script | NDS Rights + | Distribution Lists Membership Participation Product Documentation Development@Provo.Research To Page Options... | OK Cancel | Apply | Help By default, the user is added as a primary recipient (To: recipient). 4 If you want to change the resource’s recipient type, select the distribution list, click Participation, then click To, CC, or BC. 5 Click OK to save your changes. Moving GroupWise Accounts Expansion or consolidation of your GroupWise system can make it necessary for you to move GroupWise accounts from one post office to another. When you move a Group Wise account, the user’s mailbox is physically moved from one post office directory to another. The user's Novell? eDirectory™ object, including the Group Wise account information, remains in the same eDirectory container. 198 GroupWise 6.5 Administration Guide The following sections provide information you should know before performing a move and instructions to help you perform the move. + “Live Move vs. File Transfer Move” on page 199 + “Moves Between Group Wise 6.x Post Offices” on page 199 + “Moves Between GroupWise 6.x and GroupWise 5.x Post Offices” on page 199 + “Preparing for a Move” on page 200 + “Moving a GroupWise Account to Another Post Office in the Same eDirectory Tree” on page 200 + “Moving a GroupWise Account to Another Post Office in a Different eDirectory Tree” on page 201 + “Monitoring User Move Status” on page 203 Live Move vs. File Transfer Move Group Wise 6.x supports two types of moves: a live move and a file transfer move. A live move uses a TCP/IP connection between Post Office Agents (POAs) to move a user from one post office to another. In general, a live move is significantly faster (approximately 5 to 10 times) than a file transfer move. However, it does require that both POAs are version 6.x and that TCP/IP is functioning efficiently between the two POAs. A file transfer move uses the transfer of message files (using POAs and MTAs) rather than a TCP/IP connection between POAs. A file transfer move is required if you are moving a user to a post office that is not using a Group Wise 6.x POA or if you are moving a user across a WAN link where TCP/IP might not be efficient. By default, when you initiate a move from a GroupWise 6.x post office, the post office’s POA attempts to establish a live move session with the destination post office’s POA. If it cannot, a file transfer move is used instead. If desired, you can disable the live move capability on a GroupWise 6.x post office (Post Office object > GroupWise tab > Identification page). Any moves to or from the post office would be done by file transfer. Moves Between GroupWise 6.x Post Offices When you move a user’s account from one Group Wise 6.x post office to another, all items are moved correctly and all associations (proxy rights, shared folder access, and so forth) are resolved so that the move is transparent to the user. Occasionally, some client options the user has set (GroupWise client > Tools menu > Options) might be lost and must be re-created for the new mailbox. Moves Between GroupWise 6.x and GroupWise 5.x Post Offices Moves that include a GroupWise 5.x post office are performed at the level supported by the 5.x post office. This means that users might experience the following: + Rules need to be re-created. + Folders do not appear in the same order as in the original mailbox. + The Address Book contains more than one Frequent Contacts list or system address books. Managing GroupWise Accounts and Users 199 Folders and personal address books shared with others will no longer be shared. They will need to be shared again. Shared folders and personal address books received from others will no longer be available. They will need to be shared again. Proxy rights to other mailboxes are lost. The rights will need to be reestablished. Folders’ sort order and column settings are lost. They will need to be reset. Ouery folders no longer work. The guery will need to be performed again. Replies (from other users) to items sent by the moved user before the user moved will be undeliverable. Messages sent to the moved user from Remote client users will be undeliverable until the Remote client users download the Address Book again. Preparing for a Move Consider the following before moving a user’s Group Wise account: + Make sure the POAs for the user's current post office and destination post office are running. Make sure the Message Transfer Agent (MTA) for the user's current domain and destination domain (if different) are running. A user who owns a resource cannot be moved. Ifthe user owns a resource, reassign ownership of the resource to another user who is on the same post office as the resource. You can do this beforehand (see “Changing a Resource’s Owner” on page 227) or when initiating the move. (Optional) To reduce the number of mailbox items that must be moved, consider asking the user to clean up his or her mailbox by deleting or archiving items. (Optional) Have the user exit Group Wise and Group Wise Notify before you initiate the move. When the move is initiated, the user’s POA first creates an inventory list of all information in the user’s mailbox. This inventory list is sent to the new post office’s POA so that it can verify when all items have been received. If the user remains logged in, any changes to the mailbox (received items, sent items, and so forth) after the inventory list is created will not be moved to the user’s new mailbox. After the move has been initiated, the user can log in to his or her new mailbox even if the move is not complete. Moving a GroupWise Account to Another Post Office in the Same eDirectory Tree 200 The following steps apply only if the user’s current post office and destination post office are located in the same eDirectory tree. If not, see “Moving a GroupWise Account to Another Post Office in a Different eDirectory Tree” on page 201. To move a user’s GroupWise account to a different post office in the same eDirectory tree: 1 InConsoleOne®, right-click the User object or Group Wise External Entity (in the GroupWise view) > click Move to display the GroupWise Move dialog box. If you want to move multiple users from the same post office to another post office, select all the User objects, right-click the selected objects > click Move. GroupWise 6.5 Administration Guide x Move to post office: Cancel | Help 2 Select the post office to which you want to move the user’s account, then click OK. If the user owns a resource, the following dialog box appears. x Provo.Research.User 1. The user owns resources. Please choose another user to be the owner for these resources. al p Cancel Help Owner: | 3 Select a new owner for the resource, then click OK. 4 Keep track of the user move process using the User Move utility. See “Monitoring User Move Status” on page 203 Resolving Addressing Issues Caused By Moving an Account The user’s new address information is immediately replicated to each post office throughout your system so that the system address book contains the user’s updated address. Any user who selects the moved user from the system address book will be able to successfully send messages to the user. However, some users might have the user’s old address (GroupWise user ID) in their Address Book’s Frequent Contacts list. In this case, if the sender types the moved user’s name in the To field rather than selecting it from the system address book, GroupWise uses the old address stored in the Frequent Contacts list instead of the new address in the system address book. This will result in the message being undeliverable. The POA automatically resolves this issue when it performs its nightly user upkeep (see “Performing Nightly User Upkeep” on page 472). During the nightly user upkeep process, the POA ensures that all addresses in a user’s Frequent Contacts list are valid addresses in the system address book. If you want to ensure that messages sent to the user’s old address are delivered even before the POA cleans up the Frequent Contacts List, you can create a nickname using the old Group Wise user ID. For information about creating a nickname, see “Creating a Nickname for a User” on page 213. To have a nickname created automatically when the user is moved, see “System Preferences” on page 44. Moving a GroupWise Account to Another Post Office in a Different eDirectory Tree A GroupWise system can span multiple eDirectory trees, provided that all components for a single domain (post offices, users, resources, and so forth) are all in the same eDirectory tree. For example, a user cannot be located in one tree and his or her post office in another. If necessary, you can move a user’s account from a post office in one eDirectory tree to a post office in another eDirectory tree as long as the post offices are in the same Group Wise system. This requires the user to have a User object (or Group Wise External Entity object) in the eDirectory tree to which his or her GroupWise account is being moved. To move a user’s GroupWise account to a post office in a different eDirectory tree: Managing GroupWise Accounts and Users 201 1 Make sure the user has a User object or Group Wise External Entity object in the eDirectory tree to which his or her Group Wise account is being moved. 2 In ConsoleOne, right-click the User object or Group Wise External Entity object (in the Group Wise View) > click Move to display the Group Wise Move dialog box. If you want to move multiple users from the same post office to another post office, select all the User objects, right-click the selected objects > click Move. Move to post office: al 3 Select the post office to which you want to move the user's account, then click OK. If the user owns a resource, the following dialog box appears. CET Provo.Research.User 1. The user owns resources. Please choose another user to be the owner for these resources. Owner: OO) Of Cancel Help 4 Select a new owner for the resource, then click OK. 5 Keep track of the user move process by using the User Move utility to determine when the user has been successfully moved. See “Monitoring User Move Status” on page 203 6 In the destination eDirectory tree, right-click the User object or Group Wise External Entity object where the GroupWise account will be assigned. This is the object referred to in Step 1. 7 Click GroupWise > Account to display the Account page. TT x» General v | ZENworks v | Application Launcher | Applications | Commerce | Remote Management | Post Office: Mailbox ID: Visibility: External Syne Override: Account ID: File ID: Expiration Date: Gateway Access: El Disable Logins LDAP Authentication: Restore Area: Page Options... | 8 Inthe Post Office field, select the post office that the user’s GroupWise account was moved to. 202 = GroupWise 6.5 Administration Guide 9 In the Mailbox ID field, make sure that the mailbox ID is the same as the user's mailbox ID (Group Wise user ID) on his or her original post office. 10 Click OK. A dialog box appears asking if you want to match the Group Wise account to this eDirectory user. 11 Click Yes. Resolving Addressing Issues Caused By Moving an Account The user’s new address information is immediately replicated to each post office throughout your system so that the system address book contains the user’s updated address. Any user who selects the moved user from the system address book will be able to successfully send messages to the user. However, some users might have the moved user’s old address (Group Wise user ID) in their Address Book’s Frequent Contacts list. In this case, if the sender types the moved user’s name in the To field instead of selecting it from the system address book, GroupWise uses the old address stored in the Frequent Contacts list instead of the new address in the system address book. This will result in the message being undeliverable. The POA automatically resolves this issue when it performs its nightly user upkeep (see “Performing Nightly User Upkeep” on page 472). During the nightly user upkeep process, the POA ensures that all addresses in a user’s Frequent Contacts list are valid addresses in the system address book. If you want to ensure that messages sent to the user’s old address are delivered even before the POA cleans up the Frequent Contacts List, you can create a nickname using the old Group Wise user ID. For information about creating a nickname, see “Creating a Nickname for a User” on page 213. To have a nickname created automatically when the user is moved, see “System Preferences” on page 44. Monitoring User Move Status The User Move Status utility helps you track progress as you move users and resources from one post office to another. It displays the user moves associated with the object you selected before displaying the User Move Status dialog box. For example, if you selected a Domain object, all user moves for the selected domain are displayed, but not user moves for other domains. While a Group Wise user account is being moved, the POA in the source post office and the POA in the destination post office communicate back and forth. You can track the move process progresses through various steps and statuses: 1 In ConsoleOne, select a Post Office or Domain object. All moves occurring within the selected location will be listed. 2 Click Tools > GroupWise Utilities > User Move Status. Managing GroupWise Accounts and Users 203 Filter: Domain Post Office Object ID Provo1 Manufacturing = sjones ore pee | Last Move Status Error Destination domain updated Refresh Cancel Help At the beginning of the move process, most button are dim, because it would not be safe for you to perform those actions at that point in the move process. When those actions become safe, the buttons become active. Käuser Move Status E xÍ Filter: E | | | | ¡EE Domain Post Office Object ID Last Move Status RetryRestart... Manufacturing Retrieve mailbox items EES. Clear Status Cancel Help 3 To restrict the number of users and resources in the list, type distinguishing information in any of the Filter fields, then press Enter to filter the list. 4 During the move, click Refresh to update the status information. IMPORTANT: The list does not refresh automatically. During the move, you might observe some of the following statuses: + Destination post office updated: The destination POA has updated the destination post office database with the user's account information. At this point, the user account exists in the new location and appears in the Address Book with the new location information. + Source post office updated: The source POA has removed the user from the source post office database. At this point, the user can no longer access the mailbox at the old location. + Moving mailbox information: The POAs have finished exchanging administrative information and are ready to move items from the old mailbox to the new mailbox. + Sending mailbox inventory list: The source POA sends the destination POA a list of all the mailbox items that it should expect to receive. + Send item request: The destination POA starts requesting items from the source POA and the source POA responds to the requests + Retry mailbox item retrieval: The destination POA was unable to retrieve an item and is retrying. The POA continues to retry every 12 hours for 7 days, then considers the 204 GroupWise 6.5 Administration Guide move complete. To complete the move without waiting, click Force Complete. Typically, items that cannot be moved were not accessible to the user in the first place, so nothing is missed in the destination mailbox. + Completed retrieving items: The destination POA has received all of the items on its mailbox inventory list. + Move completed: After all of the user's mailbox items have arrived in the destination post office, the user’s original account in the source post office is deleted and the user move is finished. Kauser move seans x Filter: | | EX i L | Domain Post Office Object ID Last Move Status Error Provo1 Manufacturing sjones Move completed Fo implet Clear All Complete Cancel Help The User Move Status utility cannot gather status information for destination post offices that are running POASs older than GroupWise 6.5. Status information for users moving to older post offices displays as Unavailable. If something disrupts the user move process, select the problem user or resource, then click Retry/Restart. Retry/Restart on User Move 3 xj € Retry the last step of the mailbox move © Skip retry on the current mailbox item Stop deferred retries © Restart the entire mailbox move | Cancel Help Select the option appropriate to the problem you are having, then click OK. Retry the Last Step of the Mailbox Move: Select this option to retry whatever step the user move process has stopped on. This is equivalent to performing one of the POA’s automatic retries manually and immediately. Ideally, the step will complete successfully on the retry and processing will continue normally. Skip Retry on the Current Mailbox Item: Select this option to skip a particular mailbox item that cannot be successfully moved. The need for this action can usually be avoided by running Mailbox/Library Maintenance on the mailbox before moving the user account. Ideally, the user move processing should continue normally after skipping the problem item. Stop Deferred Retries: Select this option to stop the POA from retrying to send items that have not been successfully received. This completes the user move process even though some individual items have not been moved successfully. Restart the Entire Mailbox Move: Select this option if something major disrupts the user move process and you want to start over from the beginning. Because nothing is deleted from the source mailbox until everything has been received in the destination mailbox, you can safely restart a move at any time for any reason. Managing GroupWise Accounts and Users 205 Renaming Users and Their GroupWise Accounts When you rename a user, the user's Group Wise user ID (mailbox ID) changes but the user remains in the same post office. All of the user’s associations remain unchanged. For example, the user retains ownership of any documents and resources while other users who had proxy rights to the user's mailbox retain proxy right. 1 Make sure the user has exited Group Wise and Group Wise Notify. 2 Make sure the domain’s MTA and post office’s POA are running. 3 Inthe Group Wise View, right-click the User object > click Rename to display the Group Wise Rename dialog box. KE Groupwise Rename User 1 xj New GroupWise name: ja PO Cancel Help 4 Enter the GroupWise user ID. 5 Click OK to rename the user. Resolving Addressing Issues Caused By Renaming a User The user’s new information is immediately replicated to each post office throughout your system so that the system address book contains the user’s updated address. Any user who selects the renamed user from the system address book will be able to successfully send messages to the renamed user. However, some users might have the user’s old address (GroupWise user ID) in their Address Book’s Frequent Contacts List. In this case, if the sender types the renamed user’s name in the To field instead of selecting it from the system address book, GroupWise uses the old address stored in the Frequent Contacts List instead of the new address in the system address book. This will result in the message being undeliverable. The POA automatically resolves this issue when it performs its nightly user upkeep (see “Performing Nightly User Upkeep” on page 472). During the nightly user upkeep process, the POA ensures that all addresses in a user’s Frequent Contacts List are valid addresses in the system address book. If you want to ensure that messages sent to the user’s old address are delivered even before the POA cleans up the Frequent Contacts List, you can create a nickname using the old Group Wise user ID. For information about creating a nickname, see “Creating a Nickname for a User” on page 213. Managing Mailbox Passwords 206 The following sections provide information to help you manage GroupWise mailbox passwords: + “Creating or Changing a Mailbox Password” on page 207 + “Removing a Mailbox Password” on page 208 + “Bypassing the GroupWise Password” on page 208 For background information about GroupWise passwords, see Chapter 79, “Group Wise Passwords,” on page 1033. GroupWise 6.5 Administration Guide Creating or Changing a Mailbox Password As administrator, you can use ConsoleOne to create a user’s mailbox password or change a users existing password. If a user can log in to Group Wise, he or she can also change the mailbox password through the Security Options dialog box (Group Wise Windows client > Tools menu > Options > Security) or on the Passwords page (Group Wise WebAccess client > Options > Password. To create or change a user’s mailbox password: 1 In ConsoleOne, right-click the User object (or Group Wise External Entity object), then click Properties. 2 Click Group Wise > Account to display the Account page. Properties of User 1 E x| General v | GroupWise + | Account ZENworks v | Application Launcher | Applications | Commerce | Remote Management | Post Office: Mailbox ID: Visibility: External Sync Override: Account ID: File ID: Expiration Date: Gateway Access: [A Disable Logins LDAP Authentication: Restore Area: Page Options... | OK Cancel Apply | Help 3 Click Change GroupWise Password to display the Security Options dialog box. KaSecurity Options Enter new password: OK Cancel Retype password: A [00 |] Help D Clear user's password M Allow password caching Allow eDirectory authentication instead of password M Enable single sign-on 4 Enter and reenter a new password. The other options in this dialog box are explained in following sections. 5 Click OK. Managing GroupWise Accounts and Users 207 Removing a Mailbox Password If you want to remove a user's mailbox password but not assign a new password, you can clear the password. 1 In ConsoleOne, right-click the User object (or Group Wise External Entity object), then click Properties. 2 Click Group Wise > Account to display the Account page. Properties of User 1 E xi ZENworks v | Application Launcher | Applications | Commerce | Remote Management | General v | GroupWise + | Account Post Office: Mailbox ID: Visibility: External Sync Override: Account ID: File ID: Expiration Date: DC Enable [May 16, 2001 11:42:00 AM MDT Bl Gateway Access: D O O M Disable Login LDAP Authentication: OoOo O Restore Area: (Not Set) E oK Cancel | Apply | Help Page Options... | 3 Click Change GroupWise Password to display the Security Options dialog box. Enter new password: OK Cancel Retype password: EEE Help > Clear user's password M Allow password caching Allow eDirectory authentication instead of password M Enable single sign-on 4 Select the Clear User’s Password option. The other options in this dialog box are explained in following sections. 5 Click OK. Bypassing the GroupWise Password By default, if a user must enter a password when logging in to GroupWise, he or she is prompted for the password. The GroupWise client includes several options that users can choose from to enable them to log in without providing a password. These options, located on the Security Options dialog box (GroupWise client > Tools menu > Options > Security), are described in the following table. 208 = GroupWise 6.5 Administration Guide GroupWise Client Option Remember My Password No Password Reguired with eDirectory Use Novell Single Sign-On Description This option is available only when running the GroupWise client on Windows 95/98. The GroupWise password is stored in the Windows password list. When GroupWise starts, it pulls the password from the list. This option is available only when logged in to Novell eDirectory. When GroupWise starts, it automatically logs in to the GroupWise account associated with the user who is logged in to eDirectory at the workstation. No GroupWise password is reguired. This option is available only when using the Novell Single Sign- on product. When GroupWise starts, it uses the GroupWise password stored by Novell Single Sign-on. As shown in the table, these options will appear only if certain conditions are met, such as the user running on a Windows 95/98 workstation or having Novell Single Sign-on installed. If you don't want the option available to users even if the condition is met, you can disable the option. Doing so removes it from the Group Wise client’s Password dialog box. To disable one or more of the password options: 1 In ConsoleOne, click a Domain object if you want to disable password options for all users in the domain. or Click a Post Office object if you want to disable password options for all users in the post office. or Click a User object or GroupWise External Entity object if you want to disable password options for the individual user. With the appropriate GroupWise object selected, click Tools menu > GroupWise Utilities > Client Options to display the GroupWise Client Options dialog box. GroupWise Client Options x| Environment Send teo | Ö Security Date and Time 3 Click Security to display the Security Options dialog box. Managing GroupWise Accounts and Users 209 Security Options: User 1 E xj Password | Macros | Notify| Enter new password: Retype password: TT Clear user's password M Allow password caching IV Allow NDS authentication instead of password Enable Novell Single Sign-on Cancel Help 4 On the Password tab, deselect Allow Password Caching if you don’t want Windows 95/98 users to be able to use the Group Wise client’s Remember My Password option. 5 Deselect Allow eDirectory Authentication Instead of Password if you don’t want eDirectory users to be able to use the Group Wise client’s No Password Required with eDirectory option. 6 Deselect Allow Novell Single Sign-on if you don’t want Single Sign-on users to be able to use the Group Wise client's Use Novell Single Sign-on option. 7 Click OK to save your changes. For more information about addressing formats, see Chapter , “Internet-Style Addressing,” on page 87. Managing E-Mail Addresses To ensure that user addresses meet your needs, GroupWise enables you to determine the format and visibility of addresses, as well as create additional names for users. The following sections provide details: + “Changing a User’s Internet Addressing Settings” on page 210 + “Changing a User’s Visibility in the Address Book” on page 212 + “Creating a Nickname for a User” on page 213 Changing a User’s Internet Addressing Settings By default, a user inherits his or her Internet address settings (preferred Internet address format, allowed address formats, and Internet domain name) from the user’s post office, domain, or Group Wise system. If necessary, you can override these settings for individual users. 1 In ConsoleOne, right-click the User object (or GroupWise External Entity object), then click Properties. 2 Click GroupWise > Internet Addressing to display the Internet Addressing page. 210 GroupWise 6.5 Administration Guide Override LI - @internet domain name Defined at: Novell Allowed Address Formats a F | F F Vv i A In Defined at Novell Internet domain name: r Defined at: Novell mal aming ma Page Options... Lo] Cancel f Help 3 To override one of the settings, select the Override box, then change the setting. Preferred Address Format: The preferred address format determines how the user’s address will be displayed in the GroupWise Address Book and in sent messages. At the user and resource level, the preferred address format can be completely overridden by explicitly defining the user portion of the address format (user@Internet domain name). The user portion can include any RFC-compliant characters (no spaces, commas, and so forth). For example, if you’ ve selected First Name.Last Name@Internet domain name as your system’s preferred address format and you have two John Petersons, each on a different post office in your system, you would end up two users having the same address (John.Peterson@novell.com). You could use this field to differentiate them by including their middle initials in their addresses (John.S.Peterson@novell.com and John.A.Peterson@novell.com). Allowed Address Formats: The allowed address formats determine which address formats can be used to send messages to the user. For example, using John Peterson as the user, Research as the post office, and novell.com as the Internet domain, if you select all five formats, John Peterson would receive messages sent using any of the following addresses: jpeterson.research@novell.com jpeterson@novell.com john.peterson@novell.com peterson.john@novell.com jpeterson@novell.com Internet Domain Name: The Internet domain name, along with the preferred address format, is used when constructing the e-mail address that is displayed in the GroupWise Address Book and in the To field of sent messages. Only the Internet domain names that have been defined are displayed in the list. Internet domain names must be defined at the system level (Tools menu > GroupWise System Operations > Internet Addressing). For more information, see “Internet-Style Addressing” on page 87. If you override the Internet domain name, the For Incoming Mail, Recipients are Known Exclusively by This Internet Domain Name becomes available. Enable this option if you only Managing GroupWise Accounts and Users 211 want the user to be able to receive messages addressed with this Internet domain name. If you don’t enable this option, the user will receive messages addressed using any of the Internet domain names assigned to your GroupWise system. 4 Click OK to save your changes. Changing a User’s Visibility in the Address Book A user's visibility level determines the extent to which the user's address is visible throughout your GroupWise system. You can make the user visible in the Address Book throughout your entire GroupWise system, you can limit visibility to the user's domain or post office only, or you can make it so that no users can see the user in the Address Book. Making a user visible in the Address Book simply makes it easier to address items to the user. However, regardless of a user's visibility, other users can send items to the user if they know the user’s Group Wise user ID. 1 In ConsoleOne, right-click the User object (or Group Wise External Entity object), then click Properties. 2 Click Group Wise > Account to display the Account page. Properties of User 1 E xi General -| GroupWise + | Account ZENworks v | Application Launcher | Applications | Commerce | Remote Management | Post Office: Mailbox ID: Visibility: External Sync Override: Account ID: File ID: Expiration Date: Gateway Access: A ble Login LDAP Authentication: [ Restore Area: (Not Set) AAA AAA 2 r) Page Options... OK Cancel Apply | Help 3 Inthe Visibility field, select the desired visibility level. System (Default): All users in your GroupWise system will be able to see the user's information in the Address Book. Domain: Only users in the same domain as the user will be able to see the user's information in the Address Book. Post Office: Only users in the same post office as the user will be able to see the user's information in the Address Book. None: No users will be able to see the user's information in the Address Book. Users will need to know the user's GroupWise user ID to send items to him or her. 4 Click OK to save your changes. 212 GroupWise 6.5 Administration Guide Creating a Nickname for a User Each user has a specific GroupWise address consisting of the user's ID, post office, and domain (user ID.post office.domain). You can assign one or more nicknames to auserto give the user an alternate address. Each part ofthe address (user ID, post office, and domain) can be different than the user's actual address. For example, you might want to create a nickname for a user you have just moved (see “Moving Group Wise Accounts” on page 198) or renamed (see “Renaming Users and Their Group Wise Accounts” on page 206). The nickname, which would be the user's old address, would ensure that any use ofthe old address would result in the new address being used instead. Nicknames are not displayed in the Address Book, which means users will need to know the nickname to use it. To manually create a nickname for a user: 1 In ConsoleOne, right-click the User object or Group Wise External Entity object, then click Properties. 2 Click Group Wise > Nicknames to display the Nicknames page. Properties of User 1 E xj General v | Gr ZENworks v | Application Launcher | Applications | Commerce | Remote Management | {ini Object ID Domain Post Office Page Options... | ( Cancel Apply | Help 3 Click Add to display the Create Nickname dialog box. Create Nickname E xÍ Creating nickname for User 1.GroupWise.Provo Domain.PO: Po H Object ID: ELL Visibility: yate Given Name: Last Name: Expiration Date: 4 Fill in the following fields: Managing GroupWise Accounts and Users 213 Domain.PO: Select the post office where you want to assign the nickname. This can be any post office in your Group Wise system; it does not have to be the user's post office. Object ID: Enter the name to use as the user. ID portion of the nickname. The nickname must be unigue. Visibility: This field does not apply to nicknames. Nicknames are not displayed in the Address Book. To use a nickname, a message sender must enter the nickname’s address. Given Name: Enter the user's given (first) name. Last Name: Enter the user's last name. Expiration Date: If you want the nickname to no longer work after a certain date, click Enable and then select the desired date. 5 Click OK to add the nickname to the list. 6 Click OK to save the changes to the User object or GroupWise External Entity object. To have nicknames created automatically whenever you move a user, see “System Preferences” on page 44. Checking GroupWise Account Usage You can identify Group Wise accounts that have been inactive for a specified period of time. See “Auditing Mailbox License Usage in the Post Office” on page 180. You can measure message traffic from individual Group Wise mailboxes. See “User Traffic Report” on page 933. Disabling and Enabling GroupWise Accounts You can disable a Group Wise account so that the user cannot access his or her mailbox until you enable the account again. This might be necessary if you need to perform database maintenance on the user's mailbox or when a user leaves the company and no longer needs access to the mailbox. 1 In ConsoleOne, right-click the User object (or Group Wise External Entity object), then click Properties. 2 Click Group Wise > Account to display the Account page. 214 GroupWise 6.5 Administration Guide Properties of User 1 E E x| General -| GroupWise v | Account ZENworks -| Application Launcher | Applications | Commerce | Remote Management | Post Office: a] Mailbox ID: Juser1 Visibility: System y External Sync Override: Account ID: File ID: Expiration Date: D Ena May 16, 2001 11:42:00 AM MDT BI Gateway Access: pS SSS ll Disable Logins LDAP Authentication: D Restore Area: {Not Set) ———————————————————— Page Options... | OK Cancel Apply Help 3 Select Disable Logins, then click OK. 4 To enable the user’s account when access is again permitted, deselect Disable Logins, then click OK. While a user’s account is disabled, other users to whom proxy rights have been granted can still access the mailbox. This is convenient for reviewing the contents of the mailbox of a departed employee and pulling out those messages that are of use to the incoming employee. Removing GroupWise Accounts You can remove a user’s GroupWise account by deleting or expiring it. Deleting an account removes the entire account (address, mailbox, items, and so forth) from the GroupWise system. Expiring an account deactivates the account so that it cannot be accessed, but does not remove if from the system. The following sections provide information to help you delete or expire Group Wise accounts + “Deleting a GroupWise Account” on page 215 + “Expiring a GroupWise Account” on page 217 * “Managing Expired or Expiring GroupWise Accounts” on page 218 If you delete a Group Wise account by accident, or need to retrieve a deleted account for some other reason, see “Recovering Deleted GroupWise Accounts” on page 384. NOTE: When you remove a GroupWise account, any personal databases, such as an archive, a Caching mailbox, or a Remote mailbox, that are associated with the account are unaffected by the account deletion. Such databases are not located where ConsoleOne could delete them, so they must be deleted manually. Deleting a GroupWise Account When you delete a user’s GroupWise account, the user’s mailbox is deleted and the user is removed from the GroupWise system. If the user owns library documents, see “Ensuring that a User’s Library Documents Remain Accessible” on page 216 before deleting the user. Otherwise, refer to one of the following sections: + “Deleting an eDirectory User’s GroupWise Account” on page 216 + “Deleting a Non-eDirectory User’s GroupWise Account” on page 217 Managing GroupWise Accounts and Users 215 Ensuring that a User’s Library Documents Remain Accessible When you delete a user's Group Wise account, Group Wise does not delete any library documents to which the user has Author or Creator status. These documents remain in the library as "orphaned" documents, meaning that no one can access the documents. If you or other users need access to the documents, you have the following choices: + Rather than deleting the user, change the user's Group Wise mailbox password so that he or she can't log in. Other users will be able to continue accessing the documents, and you can log in as the user to manage the documents. For information about changing a user's password, see “Creating or Changing a Mailbox Password” on page 207. + Rather than deleting the user or changing the user's password, disable the user’s ability to log in. This is done on the user’s GroupWise Account page (User object > GroupWise tab > Accounts page > Disable Logins). + Delete the user, then reassign the orphaned documents to another user. For information, see “Analyzing and Fixing Library and Document Information” on page 360. Deleting an eDirectory User’s GroupWise Account 1 Make sure the user has exited GroupWise and Group Wise Notify. 2 Make sure the POA (for the user’s post office) is running. If the POA is not running, the user’s mailbox will not be deleted until the next time the POA runs. 3 In ConsoleOne, right-click the User object, then click Delete. or Select multiple User objects, right-click the selected object, then click Delete. 4 Click Yes to display the Delete User Options dialog box. | CLES xi JPeterson.Users.GroupWise has GroupWise and eDirectory accounts. Please indicate your delete preferences below: Cancel Help Groupise Account M Delete J” Expire eDirectory Account IV Delete 5 In the GroupWise Account box, select Delete. 6 In the eDirectory Account box, deselect Delete. 7 Click OK to delete the eDirectory user's GroupWise account. or If you selected multiple User objects, click OK to All to apply the same deletion options to all accounts. If you click OK rather than OK to All, you can select deletion options for each account individually as it is deleted. 8 Ifauser was a resource owner, the following dialog box appears. Select a new user to be the resource’s owner, then click OK. 216 GroupWise 6.5 Administration Guide x Provo.Research.User 1. The user owns resources. Please choose another user to be the owner for these resources. Owner: | | | 0 Cancel Help Deleting a Non-eDirectory User's GroupWise Account Non-eDirectory users are given GroupWise accounts by adding the users to eDirectory as GroupWise external entities (see “Creating GroupWise Accounts for Non-eDirectory Users” on page 195). You remove a non-eDirectory user's GroupWise account by deleting the user's GroupWise External Entity object from eDirectory. (Remember that external entities do have eDirectory objects, but they are not considered eDirectory users for licensing purposes.) As with eDirectory users, when you remove a non-eDirectory user's GroupWise account, the user’s mailbox is deleted and the user is removed from the Group Wise system. To delete a non-eDirectory user's Group Wise account: 1 Make sure the user has exited Group Wise and Group Wise Notify. 2 Make sure the POA (for the user's post office) is running. If the POA is not running, the user's mailbox will not be deleted until the next time the POA runs. 3 In ConsoleOne, right-click the user’s GroupWise External Entity object, then click Delete. 4 Click Yes to confirm the deletion. Expiring a GroupWise Account Rather than delete a user’s Group Wise account, you can expire the account. The account, including the user’s mailbox and all items, remains in GroupWise but cannot be accessed by the user. If necessary, the user’s account can be reactivated at a later date (see “Managing Expired or Expiring GroupWise Accounts” on page 218). This option is useful for providing GroupWise accounts to temporary or contract employees who come and go. You can set a user’s GroupWise account to expire immediately or at a future date and time. 1 Make sure the user has exited GroupWise and GroupWise Notify. 2 In ConsoleOne, right-click the User object or GroupWise External Entity object with the account you want to expire, then click Properties. 3 Click GroupWise > Account to display the Account page. Managing GroupWise Accounts and Users 217 Properties of User 1 i xÍ General -| GroupWise + | Account ZENworks v | Application Launcher | Applications | Commerce | Remote Management k Post Office: Mailbox ID: visibility: External Sync Override: Account ID: File ID: Expiration Date: P Ena May 16, 2001 11:42:00 AM MDT Bl Gateway Access: EE OO D Disable Login LDAP Authentication: o Restore Area: (Not Set) E] Page Options... OK Cancel Apply | Help 4 In the Expiration Date field, select the Enable check box to turn on the option. 5 If you want the account to expire immediately, leave the date and time set to the current date and time. or If you want the account to expire at a later date, select the desired date and time. 6 Click OK. NOTE: To immediately expire an account assigned to an eDirectory user, you can also right-click the User object, click Delete, select the Expire GroupWise Account option, then click OK. This method is not available for non-eDirectory (GroupWise External Entity) users. Managing Expired or Expiring GroupWise Accounts Expired Group Wise accounts remain expired until you reactivate them or delete them. Refer to the following sections for information to help you manage expired accounts: ¢ “Identifying Expired or Expiring Accounts” on page 218 + “Changing an Account’s Expiration Date” on page 219 + “Reactivating an Expired Account” on page 220 Identifying Expired or Expiring Accounts Rather than search through all your User or GroupWise External Entity objects in eDirectory to identify which ones have expired or expiring accounts, you can use the Expired Records option to quickly list expired accounts for your entire system, a single domain, or a single post office. Depending on the date you choose, you can see expired accounts only or both expired and expiring accounts. 1 Inthe GroupWise View, select the post office, domain, or GroupWise system that contains the accounts you want to view. 2 Click Tools > GroupWise Utilities > Expired Records to display the Expired Records dialog box. 218 GroupWise 6.5 Administration Guide xl Expired Records On: __ cs | Expired As Of. 6/6/01 Expired Users: Delete LastName | FirstName | ObjectiD | Expiration Date: | Object Type eerie User9 6/6/01 User View Date... | Help | Select All The Expired As Of field defaults to the current date. Only accounts that have expired as of this date are displayed in the list. To see accounts that will expire in the future, you need to change the date in the Expired As Of field. 3 To change the date in the Expired As Of field, click View Date, enter the desired date, then click OK. For example, in the dialog box shown above, the current date is 6/6/01 (June 6, 2001). To see what accounts will expire by June 30, 2001, you would change the Expired As Of date to 6/ 30/01. 4 When finished viewing expired or expiring accounts, click OK to close the Expired Accounts dialog box. Changing an Account’s Expiration Date 1 In ConsoleOne, right-click the User object or GroupWise External Entity object, then click Properties. 2 Click GroupWise > click Account to display the Account page. Properties of User 1 x| General v | GroupWise + | ZENworks w | Application Launcher | Applications | Commerce | Remote Management | | Account Post Office: Mailbox ID: Visibility: External Sync Override: Account ID: File ID: Expiration Date: Gateway Access: JA Disable Logins LDAP Authentication: Restore Area: Page Options... | oK Cancel Apply | Help Managing GroupWise Accounts and Users 219 3 Inthe Expiration Date field, change the time and date. 4 Click OK. Reactivating an Expired Account 1 In ConsoleOne, right-click the User object or Group Wise External Entity object with the expired GroupWise account, then click Properties. 2 Click Group Wise > Account to display the Account page. Properties of User 1 | General v | GroupWise + | ZENworks v | Application Launcher | Applications | Commerce | Remote Management | | Account Post Office: [SI Mailbox ID: fuUert Visibility: Bam TI External Sync Override: Synchronize according to visibility Account ID: File ID: Expiration Date: Gateway Access: [S| Disable Logins LDAP Authentication: Restore Area: (Not Set) Change Groupivise Passware Page Options... | OK | Cancel | Apply | Help | 3 In the Expiration Date field, deselect the Enable check box to turn off the option. 4 Click OK. 220 GroupWise 6.5 Administration Guide Resources Chapter 15, “Creating Resources,” on page 223 Chapter 16, “Managing Resources,” on page 227 Resources 221 222 GroupWise 6.5 Administration Guide Creating Resources A resource is an item or place, such as a computer, company vehicle, or conference room, that users can schedule or check out. + “Understanding Resources” on page 223 + “Planning Resources” on page 224 + “Creating a New Resource” on page 224 Understanding Resources The following sections provide information to help you learn about GroupWise? resources: + “Resource Objects” on page 223 + “Resource Types” on page 223 + “Resource Mailboxes” on page 223 + “Resource Owners” on page 224 Resource Objects Each resource you want to make available must be added as a Resource object in Novell? eDirectory™. The name that you give the Resource object becomes the name by which the resource is displayed in the GroupWise Address Book. Resource objects can be located in any eDirectory container that is in the same tree as the resource’s domain. Resource Types You can identify the resource as a general resource or as a place. When a user schedules a resource that is defined as a place, the resource description is automatically added to the Place field in the appointment. Resource Mailboxes Like a user, a resource must be assigned to a post office so that it can be given an account (address, mailbox, and so forth). You assign the resource to a post office when you create the Resource object. A resource’s account enables it to receive scheduling requests (sent as appointments). The owner assigned to the resource can go into the resource’s mailbox to accept or decline the requests. For example, you might want to have all your conference rooms defined as resources. When sending a meeting appointment, users could schedule the conference room as well as the meeting attendees. Creating Resources 223 The resource, just like the other users scheduled for the meeting, would receive an appointment in its mailbox which could be accepted or declined by the owner. When scheduling a resource, users can perform a busy search to see when the resource is available. Even though a resource is assigned to a single post office, all users in your Group Wise system can schedule the resource. Resources can receive all item types (mail messages, phone messages, appointments, tasks, and notes). Generally, if your purpose in defining resources is to allow them to be scheduled through Group Wise, they will only receive appointments. Resource Owners When you create a resource, you assign an owner to it. The owner must belong to the same post office as the resource and will be responsible for accepting or declining reguests to schedule the resource. The owner can do this by proxying the resource’s mailbox and physically opening the scheduling requests, or by setting up rules to manage the resource automatically. The owner automatically receives proxy rights to the resource’s mailbox. The owner can also grant proxy rights to another user to manage the resources. For information about how owners can manage resources, see “Owning Resources” in “Managing Your Mailbox” in the GroupWise 6.5 Windows Client User Guide. Planning Resources Before creating a new resource, make sure that the user who will own the resource has been created and belongs to the same post office where you are planning to create the resource. Creating a New Resource 1 In ConsoleOne®, right-click the container where you want to create the Resource object > click New > Resource to display the Create Group Wise Resource dialog box. Ki Create GroupWise Resource E xÍ Resource Name: [« ] GroupWise Post Office: Cancel Poo Help Owner A le Ü Define additional properties T Create another resource 2 Fill in the following fields: Resource Name: Enter a descriptive name. Because the name is used as part of the resource’s GroupWise address, do not use any of the following invalid characters in the resource name: ASCII characters 0-13 Comma, Asterisk * Double quote " At sign @ Extended characters Braces { } Parentheses ( ) Colon : Period . 224 GroupWise 6.5 Administration Guide GroupWise Post Office: Select the post office where the resource will be located. Owner: Select the user who will be responsible for accepting or declining reguests to use the resource. The owner must have a Group Wise account on the same post office as the resource. 3 Select Define Additional Properties, then click OK. Properties of Conference Room 2012 E xj GroupWise v | General | NDS Rights v | Other | Rights to Files and Folders | Distinguished Name: Conference Room 2012.GroupWise.Provo Post Office: Provo.Research Owner: User1 @ Description: Visibility: System w Resource Type: Resource v Phone: Page Options... | í Cancel EIA Hein 4 Onthe Identification page, fill in the following fields: Description: Enter a description that will help users identify the use of the resource. The description will be displayed if the user chooses to view information about the resource in the Address Book. If you define the resource type as a place, the description is automatically added to the Place field in the appointment. A good description can help users locate the place more easily. Visibility: Select the level at which the resource will be visible in the Address Book. System causes the resource to be visible to all users in your GroupWise system. Domain causes the resource to be visible to all users in the same domain as the resource. Post Office causes the resource to be visible to all users on the same post office as the resource. None causes the resource to not be visible at any level. However, even if the resource is not displayed in a user's Address Book, he or she can schedule the resource by typing the resource name in an appointment’s To field. Type: You can identify the resource as a general resource or as a place. When a user schedules a resource that is defined as a place, the resource description is automatically added to the Place field in the appointment. Phone: If the resource has a telephone number associated with it, such as a conference room with a telephone number, enter the phone number. 5 Click OK to save the resource information. Creating Resources 225 226 GroupWise 6.5 Administration Guide Managing Resources The following sections provide information to help you manage the resources in your Group Wise” system: + “Changing a Resource’s Owner” on page 227 + “Adding a Resource to a Distribution List” on page 228 + “Moving a Resource” on page 229 + “Renaming a Resource” on page 230 + “Deleting a Resource” on page 230 + “Managing E-Mail Addresses” on page 230 A resource’s mailbox, just like a user’s mailbox, is a combination of the information stored in its user database and the message databases located at its post office. Occasionally, you might want to perform maintenance tasks on the resource’s mailbox to ensure the integrity of the databases. For details about performing maintenance on a resource’s mailbox, see Chapter 27, “Maintaining User/Resource and Message Databases,” on page 353. Changing a Resource’s Owner You can change a resource’s owner whenever necessary. The owner must be a user assigned to the same post office as the resource. If you need to give ownership of the resource to a user on a different post office, you must move the resource to that post office. For details, see “Moving a Resource” on page 229. The new owner automatically receives proxy rights to the resource’s mailbox. Proxy rights are removed for the old owner. 1 In ConsoleOne®, right-click the Resource object, then click Properties. Managing Resources 227 Properties of Conference Room 2012 4 xÍ GroupWise + | General | NDS Rights + | other | Rights to Files and Folders | Identification Distinguished Name: Conference Room 2012.GroupWise.Provo Post Office: Provo.Research Owner: User2 Description: Visibility: System y Resource Type: Resource ie Phone: Page Options... | OK Cancel | Apply | Help 2 On the Identification page, browse to and select the new owner, then click OK to display the user’s name in the Owner field. 3 Click OK to save your changes. Adding a Resource to a Distribution List Just like users, resources can be added to distribution lists. 1 In ConsoleOne, right-click the Resource object, then click Properties. 2 Click GroupWise > Distribution Lists to display the Distribution Lists page. Properties of Conference Room 2012 3 p xl eneral | NDS Rights v | Other | Rights to Files and Folders | Membership Participation Page Options... | (6) Cancel | 3 Click Add, select the distribution list that you want to add the resource to, then click OK. 228 GroupWise 6.5 Administration Guide Properties of Conference Room 2012 k xj GroupWise v | General | NDS Rights ~ | Other | Rights to Files and Folders | Distribution Lists Membership Participation Engineering Team 7@Provo.Research To Page Options... | OK Cancel Apply Help By default, the resource is added as a primary recipient (To: recipient). 4 Ifyou want to change the resource’s recipient type, select the distribution list, click Participation, then click To, CC, or BC. 5 Click OK to save your changes. Moving a Resource If necessary, you can move a resource from one post office to another. For example, you might need to move a resource if you are removing the resource’s post office or if you need to reassign ownership of the resource to a user on another post office. The resource retains the same name in the new post office as it has in the current post office. If another user, resource, or distribution list assigned to the new post office has the same name, you will need to rename one of them before you move the resource. For details, see “Renaming a Resource” on page 230. When you move the resource, all items in its mailbox are moved to the new post office, which means that all schedules for the resource are kept intact. To move a resource: 1 In ConsoleOne, right-click the Resource object in the GroupWise View, then click Move to display the GroupWise Move dialog box. IMPORTANT: You must select the Resource object in the GroupWise View. If you select the object in the standard ConsoleOne View, you will move the Resource object from one container to another, not the resource from one post office to another. KE Groupwise Move Conference Room 2012 j xl Move to post office: a JK Cancel Help 2 Selectthe post office to which you want to move the resource, then click OK to display the Choose New Owner dialog box. Managing Resources 229 x Provo.Research.Conference Room 2012. Please choose another user to be the owner for this resource. Owner: Po || Cancel Help 3 Select the user who will be the resource’s owner, then click OK to move the resource. Renaming a Resource Situations might arise where you need to give a resource a new name. For example, you might need to move the resource to another post office that already has a user, resource, or distribution list with the same name. 1 In ConsoleOne, right-click the Resource object in the Group Wise View, then click Rename to display the Rename dialog box x New name: Ea Conference Room 2012 | Cancel I Save old name Help | 2 Inthe New Name field, enter the new name for the resource. 3 Make sure the Save Old Name box is not checked. Saving the old name will cause duplicate resources to appear in the Address Book. 4 Click OK to rename the resource. Deleting a Resource When you delete a resource, all information is removed for the resource, including any schedules that have been established for the resource. 1 In ConsoleOne, right-click the Resource object, then click Delete. 2 Click Yes to confirm the deletion. Managing E-Mail Addresses To ensure that resource addresses meet your needs, GroupWise enables you to determine the format and visibility of addresses, as well as create additional names for resources. The following sections provide details: + “Changing a Resource’s Internet Addressing Settings” on page 231 + “Changing a Resource’s Visibility in the Address Book” on page 232 + “Creating a Nickname for a Resource” on page 233 230 GroupWise 6.5 Administration Guide Changing a Resource's Internet Addressing Settings By default, a resource inherits its Internet address settings (preferred Internet address format, allowed address formats, and Internet domain name) from its post office, domain, or Group Wise system. If necessary, you can override these settings. 1 In ConsoleOne, right-click the Resource object, then click Properties. 2 Click Group Wise, then click Internet Addressing to display the Internet Addressing page. Properties of Conference Room 2012 E xj General | NDS Rights v | Other | Rights to Files and Folders | Override | Preferred Address format: B y @internet domain name Defined at: Provo Allowed Address Formats D | M Usen A In Defined at: Novell Internet domain name: Page Options... Lo] Cancel A CIA 3 To override one of the settings, select the Override box, then change the setting. Preferred Address Format: The preferred address format determines how the resource’s address will be displayed in the GroupWise Address Book and in sent messages. At the resource level, only three preferred address formats are available. The address formats that include first name, last name, and first initial do not apply to resource, so they are not available. You can completely override the address format by explicitly defining the user portion of the address (user@IJnternet domain name). The user portion can include any RFC-compliant characters (no spaces, commas, and so forth). Allowed Address Formats: The allowed address formats determine which address formats can be used to send messages to the resource. Only the UserID.Post Office@Internet domain name and UserID@Jnternet domain name formats are valid for resources. The formats that include first name, last name, and first initial are not valid. For example, using R1 as the resource ID, Research as the post office, and novell.com as the Internet domain, if you select the two valid formats, the resource would receive messages sent using either of the following addresses: rl.research@novell.com r1@novell.com Managing Resources 231 Internet Domain Name: The Internet domain name, along with the preferred address format, is used when constructing the e-mail address that is displayed in the Group Wise Address Book and in the To field of sent messages. Only the Internet domain names that have been defined are displayed in the list. Internet domain names must be defined at the system level (Tools menu > Group Wise System Operations > Internet Addressing). For more information, see “Internet-Style Addressing” on page 87. If you override the Internet domain name, the For Incoming Mail, Recipients are Known Exclusively by This Internet Domain Name becomes available. Enable this option if you only want the resource to be able to receive messages addressed with this Internet domain name. If you don’t enable this option, the resource will receive messages addressed using any of the Internet domain names assigned to your Group Wise system. 4 Click OK to save your changes. Changing a Resource's Visibility in the Address Book A resource’s visibility level determines which users see the resource in their Address Books. You can control the availability of a resource by displaying it in the Address Books of all users in your GroupWise system, in the Address Books of those users in the resource’s domain only, in the Address Books of those users on the resource’s post office only, or in no Address Books. Even if the resource is not displayed in their Address Books, users can schedule the resource if they know the resource’s name. To change a resource’s visibility: 1 In ConsoleOne, right-click the Resource object, then click Properties. Properties of Conference Room 2012 xi GroupWise + | General | NDS Rights ~| Other | Rights to Files and Folders | Identification Distinguished Name: Conference Room 2012.GroupWise.Provo Post Office: Provo.Research Owner: User1 © Description: Visibility: System + Resource Type: [Resource y] Phone: Page Options... Cancel AR | Help 2 In the Visibility field, select the desired visibility level. System: The resource will be displayed in the Address Books of all users in your GroupWise system. Domain: The resource will be displayed in the Address Books of all users in the resource’s domain. 232 GroupWise 6.5 Administration Guide Post Office: The resource will be displayed in the Address Books of all users on the resource’s post office. None: The resource will not be displayed in any Address Books. Users will need to know the resource’s name to schedule it. 3 Click OK to save your changes. Creating a Nickname for a Resource Each resource has a specific Group Wise address consisting of the resource’s name, post office, and domain (resource_name.post_office.domain). You can assign one or more nicknames to a resource to give it an alternate address. Each part of the address (resource_name, post_office, and domain) can be different than the resource’s actual address. For example, you might want to create a nickname for a resource you have just moved (see “Moving a Resource” on page 229) or renamed (see “Renaming a Resource” on page 230). The nickname, which would be the resource’s old address, would ensure that any appointments sent to the old address would be routed to the new address. Nicknames are not displayed in the Address Book, which means users will need to know the nickname to use it. In addition, nicknames are not valid Internet addresses. For example, Internet users cannot schedule a resource by sending a message to nickname@host. To create a nickname for a resource: 1 In ConsoleOne, right-click the Resource object, then click Properties. 2 Click GroupWise > Nicknames to display the Nicknames page. Properties of Conference Room 2012 KK xj GroupWise v | General | NDS Rights v | Other | Rights to Files and Folders | Nicknames Object ID Domain Post Office Page Options... | OK Cancel Apply Help 3 Click Add to display the Create Nickname dialog box. Managing Resources 233 Create Nickname E x Creating nickname for Conference Room 2012.GroupWise.Provo Domain.PO: D Object ID: Poo visibility: [System | Given Name: Y Last Name: ELE Expiration Date: DO Enable [May 10, 2001 3:19:00 PM MDT LA ok | cancel | Help | 4 Fill in the following fields: Domain.PO: Select the post office to which you want to assign the nickname. This can be any post office in your GroupWise system; it does not need to be the resource’s post office. Object ID: Enter the name to use as the resource name portion of the nickname. Visibility: Ignore this field. It is not used for nicknames. Given Name: Ignore this field. It is not used for resource nicknames. Last Name: Ignore this field. It is not used for resource nicknames. Expiration Date: If you want the nickname to no longer work after a certain date, click Enable and then select the desired date. 5 Click OK to add the nickname to the list. 6 Click OK to save the changes to the Resource object. 234 GroupWise 6.5 Administration Guide Distribution Lists, Groups, and Organizational Roles Chapter 17, “Understanding Distribution Lists, eDirectory Groups, and Organizational Roles,” on page 237 Chapter 18, “Creating and Managing Distribution Lists,” on page 239 Chapter 19, “Using eDirectory Groups as Distribution Lists,” on page 251 Chapter 20, “Using Organizational Roles as Group Wise Distribution Lists,” on page 255 Distribution Lists, Groups, and Organizational Roles 235 236 GroupWise 6.5 Administration Guide Understanding Distribution Lists, eDirectory Groups, and Organizational Roles Group Wise distribution lists and Novell? eDirectory™ groups are sets of users and resources that can be addressed as a single entity. When a Group Wise user addresses an item (message, appointment, task, or note) to a distribution list, eDirectory group, or organization role, each user or resource that is a member receives a copy of the item. The following sections provide information to help you learn about distribution lists, eDirectory groups, and organizational roles: + “Public vs. Personal Address Lists” on page 237 + “Distribution Lists” on page 237 + “eDirectory Groups and Organizational Roles” on page 238 Public vs. Personal Address Lists Distribution lists and eDirectory groups are public address lists, meaning that they are administrator-defined lists available to all users in your GroupWise system. If users want to create personal address lists, they can create personal groups in the GroupWise client. When a user creates personal groups, the groups are saved in his or her mailbox and are available for use only by that user. They cannot be shared by, or transferred to, other users. If a user wants to send to all users in a particular post office or domain, he or she can use wildcard addressing, if it has been enabled. See “Wildcard Addressing” on page 100. Distribution Lists A distribution list is specific to GroupWise. It is a public address list that you, as the GroupWise administrator, can create to facilitate easier addressing within your GroupWise system. Distribution lists can only contain users that have GroupWise accounts. Each distribution list you want to create must be added as a Distribution List object in eDirectory. The name that you give the Distribution List object becomes the name by which the distribution list is displayed in the GroupWise Address Book. Distribution list objects can be located in any eDirectory container that is in the same tree as the distribution list’s domain. Because a distribution list is an addressable entity, you must assign it to a post office when you create it. This ensures that the distribution list has a standard GroupWise address (distribution_list_name.post_office.domain). Understanding Distribution Lists, eDirectory Groups, and Organizational Roles 237 Regardless of the distribution list's post office, all Group Wise users can use the distribution list when addressing a message. You can determine which users see the distribution list in the Address Book. System visibility enables all users in your Group Wise system to see the distribution list. Domain visibility enables all users in the distribution list’s domain to see the distribution list. Post Office visibility enables all users in the distribution list’s post office to see the distribution list. Setting the visibility level to None means that no users will see the distribution list in the Address Book. Users who cannot see the distribution list in the Address Book can still use the distribution list by typing the distribution list name in the To field of the message. A distribution list can contain users and resources as well as other distribution lists, groups, and organizational roles. Members do not need to be on the same post office as the distribution list's post office. For details about distribution lists, see Chapter 18, “Creating and Managing Distribution Lists,” on page 239. eDirectory Groups and Organizational Roles eDirectory groups and organizational roles are general eDirectory objects that can be created to facilitate easier administration of eDirectory users who have common needs or who share a common role or responsibility. If you have eDirectory groups or organizational roles that you want Group Wise users to be able to address messages to, you need to make them available in your GroupWise system. When doing so, you can choose the groups and roles that you want available, and choose which users they will be available to. If a group or role contains both eDirectory users with Group Wise accounts and eDirectory users without Group Wise accounts, only those users with Group Wise accounts will receive messages addressed to the group or role. As mentioned previously, Group and Organizational Role objects are not specific to Group Wise. For information about creating these objects, see your eDirectory documentation. The name given to the Group object or Organizational Role object becomes the name by which the itis displayed in the Group Wise Address Book when you make it available. You make a group or role available in your GroupWise system by assigning it to a post office. This ensures that the group or role has a standard Group Wise address (name.post office.domain). Regardless of the post office where the group or role is assigned, all GroupWise users can use it when addressing a message. You can determine which users see the group or role in the Address Book. System visibility enables all users in your Group Wise system to see the group or role. Domain visibility enables all users in the distribution list’s domain to see the group or role. Post Office visibility enables all users in the distribution list’s post office to see the group or role. Setting the visibility level to None means that no users will see the group or role in the Address Book. Users who cannot see the group or role in the Address Book can still use it by typing the name in the To field of the message. 238 GroupWise 6.5 Administration Guide Creating and Managing Distribution Lists A GroupWise” distribution list can contain GroupWise users, resources, and other distribution lists. When creating the distribution list, you can determine each entry’s participation in the list (primary recipient, carbon copy recipient, or blind copy recipient). + “Creating a New Distribution List” on page 239 + “Adding Members to a Distribution List” on page 242 + “Removing Members from a Distribution List” on page 243 + “Moving a Distribution List” on page 243 + “Renaming a Distribution List” on page 244 + “Deleting a Distribution List” on page 244 + “Managing E-Mail Addresses” on page 244 + “Adding External Users to a Distribution List” on page 248 Creating a New Distribution List 4 In ConsoleOne®, right-click the eDirectory container where you want to create the Distribution List object, then click New > Distribution List. [Create GroupWise Distribution List x| Distribution List Name: Cx] GroupWise Post Office: Cancel [ Define additional properties Help [ Create another distribution list 2 Fill in the following fields: Distribution List Name: Enter a descriptive name. Because the name is used as part of the distribution list's Group Wise address, do not use any of the following invalid characters in the distribution list name: ASCII characters 0-13 Comma , Asterisk * Double quote " At sign @ Extended characters Braces { } Parentheses ( ) Colon : Period . Creating and Managing Distribution Lists 239 GroupWise Post Office: Select the post office the distribution list will be assigned to. The distribution list can contain members of other post offices. 3 Select Define Additional Properties, then click OK. Properties of Product Documentation Development 3 xÍ GroupWise + | NDS Rights + | Other | Rights to Files and Folders | Identification Distinguished Name: Product Documentation Development. GroupWise.Provo Post Office: Provo. Research Description: Visibility: Post Office +] Page Options... Cancel A | Help 4 On the Identification page, fill in the following fields: Description: Enter a description that will help you identify the purpose or members of the distribution list. Visibility: Select the level at which the distribution list will be visible in the Address Book. System enables the distribution list to be visible to all users in your Group Wise system. Domain enables the distribution list to be visible to all users in the same domain as the distribution list. Post Office enables the distribution list to be visible to all users on the same post office as the distribution list. Setting the visibility level to None means that no users will see the distribution list in the Address Book. However, even if the distribution list is not displayed in a user’s Address Book, he or she can use the distribution list by typing the distribution list’s name in a message’s To field. 5 Click GroupWise > Membership to display the Membership page. 240 GroupWise 6.5 Administration Guide Properties of Product Documentation Development a x| S Rights + | other | Rights to Files and Folders | Membership: Members Participation Page Options... | Op Cancel | Apply | Help | 6 Click Add, select the user, resource, distribution list, eDirectory group, or organizational role you want to add as a member, then click OK to add the member to the list. Properties of Product Documentation Development E x| GroupWise + | NDS Rights + | Other | Rights to Files and Folders | USED | Membership: Members Participation User 1.Research.Provo To Page Options... | oK Cancel | Apply | Help | By default, the member is added as a primary recipient (To: recipient). 7 Ifyou wantto change the member”s recipient type, select the member, click Participation, then click To, CC, or BC. 8 Repeat Step 6 and Step 7 to add additional members. 9 Click OK to save your changes. Creating and Managing Distribution Lists 241 Adding Members to a Distribution List Distribution lists can contain users, resources, groups, organizational roles, and other distribution lists. 1 In ConsoleOne®, right-click the Distribution List object, then click Properties. 2 Click Group Wise > Membership to display the Membership page. Properties of Product Documentation Development xl DS Rights + | Other | Rights to Files and Folders | Membership: Members Participation Page Options... | 3 Click Add, select the user, resource, distribution list, group, or organizational role you want to add as a member, then click OK to add the member to the list. If you want to add an external user that is not listed for selection, see “Adding External Users to a Distribution List” on page 248. Properties of Product Documentation Development E xj GroupWise + | NDS Rights + | Other | Rights to Files and Folders | Membership Membership: Members Participation User 1.Research.Provo To Page Options... | OK Cancel | Apply | Help By default, the selected member is added as a primary recipient (To: recipient). 242 GroupWise 6.5 Administration Guide 4 Ifyou want to change the members recipient type, select the member, click Participation, then click To, CC, or BC. 5 Repeat Step 3 and Step 4 to add additional members. 6 Click OK to save your changes. Distribution lists much be managed by an administrator in ConsoleOne. However, Group Wise client users can create shared address books and then create groups within those shared address books so that the groups are available to all users with whom the address book is been shared. The creator of the shared address book can give other users read only rights, or can choose to grant them additional rights for adding, editing, and deleting information. For more information about shared address books, see “Sharing an Address Book with Another User” in “Using the Address Book” in the Group Wise 6.5 Windows Client User Guide. Removing Members from a Distribution List When you remove users’ or resources’ GroupWise accounts, delete groups, delete organizational roles, or delete distribution lists, they are automatically removed from any distribution lists in which they have membership. To manually remove members from a distribution list: 1 In ConsoleOne, right-click the Distribution List object, then click Properties. 2 Click GroupWise > Membership to display the Membership page. 3 Select the member you want to remove from the list, then click Delete. Moving a Distribution List If necessary, you can move a distribution list from one post office to another. For example, you might need to move a distribution list from a post office you are removing. The distribution list retains the same name on the new post office as it has on the current post office. If another user, resource, or distribution list assigned to the new post office has the same name, you will need to rename one of them before you move the distribution list. For details, see “Renaming a Distribution List” on page 244. To move a distribution list: 1 In ConsoleOne, right-click the Distribution List object in the GroupWise View, then click Move to display the GroupWise Move dialog box. IMPORTANT: You must select the Distribution List object in the GroupWise View. If you select the object in the standard Console View, you will move the Distribution List object from one container to another, not the distribution list from one post office to another. | Claes Move Product Documentation De vel x| Move to post office: Cancel | Help 2 Select the post office to which you want to move the distribution list, then click OK to move the distribution list. Creating and Managing Distribution Lists 243 Renaming a Distribution List Situations might arise where you need to give a distribution list a new name. For example, you might need to move the distribution list to another post office that already has a user, resource, or distribution list with the same name. To rename a distribution list: 1 In ConsoleOne, right-click the Distribution List object in the Group Wise View, then click Rename to display the Rename dialog box. x Cancel [ Save old name Help New name: L Product Documentation Development 2 Inthe New Name field, enter the new name for the distribution list. 3 Make sure the Save Old Name box is not checked. Saving the old name will cause duplicate distribution lists to appear in the Address Book. 4 Click OK to rename the distribution list. Deleting a Distribution List To delete a single distribution list: 1 In ConsoleOne, right-click the Distribution List object, then click Delete. 2 Click Yes to confirm the deletion. To delete multiple distribution lists that belong to the same post office: 1 In ConsoleOne, right-click the Post Office object, then click Properties. 2 Click Group Wise > Distribution Lists. 3 Select one or more distribution lists, then click Delete. 4 Click OK to complete the deletion. Managing E-Mail Addresses To ensure that distribution list addresses meet your needs, Group Wise enables you to determine the format and visibility of addresses, as well as create additional names for distribution lists. The following sections provide details: + “Changing a Distribution List’s Internet Addressing Settings” on page 245 + “Changing a Distribution List’s Visibility in the Address Book” on page 246 + “Creating a Nickname for a Distribution List” on page 247 244 GroupWise 6.5 Administration Guide Changing a Distribution List's Internet Addressing Settings By default, a distribution list inherits its Internet address settings (preferred Internet address format, allowed address formats, and Internet domain name) from its post office, domain, or Group Wise system. If necessary, you can override these settings for a distribution list. 1 In ConsoleOne, right-click the Distribution List object, then click Properties. 2 Click Group Wise, then click Internet Addressing to display the Internet Addressing page. Properties of Product Documentation Development S xj IDS Rights + | Other | Rights to Files and Folders | Override | Preferred Address format: D + @internet domain name Defined at: Provo Allowed Address Formats A Í Defined at: Novell Internet domain name: Page Options... Lo] Cancel _ trey | Hein | 3 To override one of the settings, select the Override box, then change the setting. Preferred Address Format: The preferred address format determines how the distribution list’s address will be displayed in the GroupWise Address Book and in sent messages. At the distribution list level, only three preferred address formats are available. The address formats that include first name, last name, and first initial do not apply to distribution lists, so they are not available. You can completely override the address format by explicitly defining the user portion of the address (user@IJnternet domain name). The user portion can include any RFC-compliant characters (no spaces, commas, and so forth). Allowed Address Formats: The allowed address formats determine which address formats can be used to send messages to the distribution list. Only the UserlD.Post Office@Internet domain name and UserI[D@Internet domain name formats are valid for distribution lists. The formats that include first name, last name, and first initial are not valid. For example, using DL] as the distribution list ID, Research as the post office, and novell.com as the Internet domain, if you select the two valid formats, members of the distribution list would receive messages sent using either of the following addresses: dll.research@novell.com dll(Anovell.com Creating and Managing Distribution Lists 245 Internet Domain Name: The Internet domain name, along with the preferred address format, is used when constructing the e-mail address that is displayed in the Group Wise Address Book and in the To field of sent messages. Only the Internet domain names that have been defined are displayed in the list. Internet domain names must be defined at the system level (Tools menu > Group Wise System Operations > Internet Addressing). For more information, see “Internet-Style Addressing” on page 87. If you override the Internet domain name, the For Incoming Mail, Recipients are Known Exclusively by This Internet Domain Name becomes available. Enable this option if you only want the distribution list to be able to receive messages addressed with this Internet domain name. If you don’t enable this option, the distribution list will receive messages addressed using any of the Internet domain names assigned to your Group Wise system. 4 Click OK to save your changes. Changing a Distribution List’s Visibility in the Address Book 246 A distribution list’s visibility level determines which users see the distribution list in the Address Books. You can control the availability of a distribution list by displaying it in the Address Book for all users in your GroupWise system, in the Address Book for those users in the distribution list’s domain only, in the Address Book for those users on the distribution list’s post office only, or not displaying it at all. Even if the distribution list is not displayed in the Address Book, users can use the distribution list if they know its name. To change a distribution list’s visibility: 1 In ConsoleOne, right-click the Distribution List object, then click Properties. Properties of Product Documentation Development A E xi GroupWise v | nos Rights v | Other | Rights to Files and Folders | Identification | Distinguished Name: Product Documentation Development.GroupWise.Provo Post Office: Provo.Research Description: Visibility: Post Office mi Page Options... Cancel J | Help 2 In the Visibility field, select the desired visibility level. System: The distribution list will be displayed in the Address Book for all users in your Group Wise system. Domain: The distribution list will be displayed in the Address Book for all users in the distribution list’s domain. GroupWise 6.5 Administration Guide Post Office: The distribution list will be displayed in the Address Book for all users on the distribution list’s post office. None: The distribution list will not be displayed in the Address Book. Users will need to know the distribution list’s name to use it. 3 Click OK to save your changes. Creating a Nickname for a Distribution List Each distribution list has a specific Group Wise address consisting of the distribution list's name, post office, and domain (distribution list name.post office.domain). You can assign one or more nicknames to a distribution list to give it an alternate address. Each part of the address (distribution list name, post office, and domain) can be different than the distribution list's actual address. For example, you might want to create a nickname for a distribution list you have just moved (see “Creating a Nickname for a Distribution List” on page 247) or renamed (see “Renaming a Distribution List” on page 244). The nickname, which would be the distribution list’s old address, would ensure that any use of'the old address would result in the new address being used instead. Nicknames are not displayed in the Address Book, which means users will need to know the nickname to use it. In addition, nicknames are not valid Internet addresses. For example, Internet users cannot address a message to nickname@host. To create a nickname for a distribution list: 1 In ConsoleOne, right-click the Distribution List object, then click Properties. 2 Click Group Wise > Nicknames to display the Nicknames page. Properties of Product Documentation Development xj IDS Rights + | Other | Rights to Files and Folders | Object ID Domain Post Office Page Options... ( Cancel FFT __ Hem | 3 Click Add to display the Create Nickname dialog box. Creating and Managing Distribution Lists 247 Create Nickname E x| Creating nickname for Product Documentation Development GroupWise.Provo Domain.PO: Fo a Object ID: [ Visibility [system] Given Name: D O Last Name: | Expiration Date: O Enable [May 11, 2001 4:44:00 PM MDT LT Cancel | Help 4 Fill in the following fields: Domain.PO: Select the post office where you want to assign the nickname. This can be any post office in your GroupWise system; it does not have to be the distribution list’s post office. Object ID: Enter the name to use as the distribution list name portion of the nickname. Visibility: Ignore this field. Nicknames are not displayed in the Address Book. Given Name: Ignore this field. It is not used for distribution list nicknames. Last Name: Ignore this field. It is not used for distribution list nicknames. Expiration Date: If you want the nickname to no longer work after a certain date, click Enable and then select the desired date. 5 Click OK to add the nickname to the list. 6 Click OK to save the changes to the Distribution List object. Adding External Users to a Distribution List Members of distribution lists must have corresponding eDirectory objects. If you want to add user to a distribution list that do not belong to your GroupWise system, you must create objects to represent these external users within your GroupWise system. + “Creating an External Domain” on page 248 + “Creating an External Post Office” on page 248 + “Creating an External User” on page 249 Creating an External Domain You create an external domain to represent the world outside your Group Wise system. 1 In ConsoleOne, right-click Group Wise System, then click New > External Domain. 2 Provide a unigue name for the domain, then click OK. Creating an External Post Office You create an external post office in the external domain to hold External User objects. 1 In ConsoleOne, right-click the External Domain object, then click New > External Post Office. 2 Provide a unigue name for the post office, then click OK. 248 = GroupWise 6.5 Administration Guide Creating an External User You create an external user so that it can be selected when adding members to a distribution list. 1 NO oF AO N In ConsoleOne, right-click the External Post Office object, then click New > External User. Provide a unique name for the user, then click OK. Right-click the new External User object, then click Properties. On the Identification page, fill in at least the first and last names. Click GroupWise > Internet Addressing. Select Override. Select the preferred addressing format depending on how you want e-mail to this user to be addressed. or Provide a custom address format. Click OK to save the user information. Follow the instructions in “Adding Members to a Distribution List” on page 242 to add the external user to a distribution list. Creating and Managing Distribution Lists 249 250 GroupWise 6.5 Administration Guide Using eDirectory Groups as Distribution Lists Novell? eDirectory™ groups can be configured to function as Group Wise” distribution lists. + “Setting Up an eDirectory Group for Use in Group Wise” on page 251 + “Seeing Which Members of an eDirectory Group Have Group Wise Accounts” on page 252 + “Changing a Group’s Visibility in the Address Book” on page 253 + “Moving a Group” on page 253 + “Renaming a Group” on page 254 + “Removing a Group from Group Wise” on page 254 Setting Up an eDirectory Group for Use in GroupWise By default, eDirectory groups are not automatically available for use as distribution lists in Group Wise. To make an eDirectory group available, you need to assign it to a Group Wise post office. 1 In ConsoleOne*, right-click the Group object, then click Properties. 2 Click Group Wise > Account to display the Account page. Properties of Help Desk E xi General v | Members: | Security Equal To Me | ZENworks | Applications |: | nos Rights v | Other | Right Ie] Post Office: al Visibility: Post Office v Page Options... Cancel TN] Hep | 3 Fill in the following fields: Post Office: Select the post office where you want to assign the group. You can choose any post office you want. If you plan to limit visibility of the group to users on a specific post Using eDirectory Groups as Distribution Lists 251 office or in a specific domain, you should select that post office or a post office in the desired domain. Visibility: Select the level at which the group will be visible in the Address Book. System enables the group to be visible to all users in your GroupWise system. Domain enables the group to be visible to all users in the same domain as the group. Post Office enables the group to be visible to all users on the same post office as the group. Setting the visibility to None means that the group will not be visible at any level. However, even if the group is not displayed in a user’s Address Book, he or she can use the group by typing the group’s name in a message’s To field. 4 Click OK to save the changes. The group is now treated like a GroupWise distribution list and is visible in the GroupWise View when you filter on distribution lists. When Group Wise users send messages to the group, only those group members who have GroupWise accounts will receive messages. Seeing Which Members of an eDirectory Group Have GroupWise Accounts eDirectory groups can include members who have GroupWise accounts and members who do not have Group Wise accounts. When the group is used to address a message, only those members who have GroupWise accounts will receive the message. To see which members have GroupWise accounts and which ones do not: 1 In ConsoleOne, select the Group object, then click Tools > Group Wise Diagnostics > Display Object. KE Groupwise Debug = Description GDS information for selected abject Value Last Modified At Last Modified By Hemisphere Members To GUID Custom Index Flag rinin Help Desk a 1 Provo (GW _TREE) User 1.GroupWise.Provo D 2 1 Provo.Research.User 1 Provo.Research.User 2 256DD5E0-0B7E-0000-B45E-2E00E700DC00 1 ben E NDS information for selected object Description NGW: Post Office NG: GroupWise ID Equivalent To Me Access Control List Member Value Research.GroupWise.Provo a Provo.Research.Help Desk{110}01B8D9880-1580-0000-8E77-290022004C00 User 1.GroupWise.Provo User 2.GroupWise.Provo User 3.docdev.Novell User 4.docdev.Novell Member[Root]2 User 1.GroupWise.Provo User 2.GroupWise.Provo User 3.docdev.Novell Lines A dando hinnall sf The top window displays the members who have GroupWise accounts. The bottom window displays all members. 2 When you’ve finished viewing the information, click OK. 252 GroupWise 6.5 Administration Guide Changing a Group's Visibility in the Address Book An eDirectory group’s visibility level determines which users see the group in the Address Books. You can control the availability of a group by displaying it in the Address Book for all users in your Group Wise system, in the Address Book for those users in the group’s domain only, in the Address Book for those users on the group’s post office only, or not displaying it at all. Even ifthe group is not displayed in the Address Book, users can use the group if they know its name. To change an eDirectory group’s visibility in the Group Wise Address Book: 1 In ConsoleOne, right-click the Group object, then click Properties. 2 Click Group Wise > Account to display the Account page: Properties of Help Desk 3 xj General v | Members | Security Egual To Me | ZENworks | Applications S Rights y | Other | Right Post Office: e] Visibility: Post Office v Page Options... 3 Inthe Visibility field, select the desired visibility level. System: The group will be displayed in the Address Book for all users in your Group Wise system. Domain: The group will be displayed in the Address Book for all users in the group’s domain. Post Office: The group will be displayed in the Address Book for all users on the group’s post office. None: The group will not be displayed in the Address Book. Users will need to know the group’s name to use it. 4 Click OK to save your changes. Moving a Group If necessary, you can move an eDirectory group from one post office to another. For example, you might need to move a group from a post office you are removing. The group retains the same name on the new post office as it has on the current post office. If another object (user, resource, distribution list, group, or organizational role) assigned to the new post office has the same name, you will need to rename one of them before you move the group. For details, see “Renaming a Distribution List” on page 244. Using eDirectory Groups as Distribution Lists 253 To move an eDirectory group from one post office to another: 1 In ConsoleOne, right-click the Group object in the Group Wise View, then click Move to display the GroupWise Move dialog box. IMPORTANT: You must select the Group object in the GroupWise View. If you select the object in the standard Console View, you will move the Group object from one eDirectory container to another, not the group from one post office to another. LS Groupwise Move Help Desk xj Move to post office: 28) Cancel Help 2 Selectthe post office to which you want to move the group, then click OK to move the group. Renaming a Group Situations might arise where you need to give an eDirectory group a new name. For example, you might need to move the group to another post office that already has an object (user, resource, distribution list, group, or organizational unit) with the same name. When you rename an eDirectory group, you rename the Group object. This means that not only are you changing the name in GroupWise, but also in eDirectory. 1 In ConsoleOne, right-click the Group object, then click Rename to display the Rename dialog box. x New name: | Cancel T° Save old name Help 2 In the New Name field, enter the new name for the group. 3 Make sure the Save Old Name box is not checked. Saving the old name will cause duplicate groups to appear in the Address Book. 4 Click OK to rename the group. Removing a Group from GroupWise If you decide that you no longer want an eDirectory group to be a distribution list in GroupWise, you can remove its association with a Group Wise post office, so that it returns to being just an eDirectory group. 1 In ConsoleOne, right-click the Group object, click Delete, then click Yes to confirm that you want to delete the object. 2 In the eDirectory Account box, deselect Delete to retain the Group object in eDirectory. The Delete option in the GroupWise Account box is selected by default and cannot be deselected. 3 Click OK twice to complete the deletion. 254 = GroupWise 6.5 Administration Guide Using Organizational Roles as GroupWise Distribution Lists Organizational roles can be configured to function as GroupWise distribution lists. + “Setting Up an Organizational Role as a Group Wise Distribution List” on page 255 + “Seeing Which Members of an Organizational Role Have Group Wise Accounts” on page 256 + “Changing an Organizational Role’s Visibility in the Address Book” on page 257 + “Moving an Organizational Role” on page 258 + “Renaming an Organizational Role” on page 258 + “Removing an Organizational Group from Group Wise” on page 259 Setting Up an Organizational Role as a GroupWise Distribution List By default, Novell? eDirectory™ organizational roles are not automatically available for use as distribution lists in Group Wise*. To make an organizational role available, you need to assign it to a Group Wise post office. 1 In ConsoleOne*, right-click the Organizational Role object, then click Properties. 2 Click the Group Wise tab to display the Identification page. Properties of GroupWise Administrators = xj e | NDS Rights + | Other | Rights to Files and Folders | General v | Security Egual To Me | Post Office: el Visibility: Post Office v Page Options... Cancel memm] _ Hem | 3 Fill in the following fields: Using Organizational Roles as GroupWise Distribution Lists 255 Post Office: Select the post office where you want to assign the organizational role. You can choose any post office you want. If you plan to limit visibility ofthe organizational role to users on a specific post office or in a specific domain, you should select that post office or a post office in the desired domain. Visibility: Select the level at which the role will be visible in the Address Book. System enables the role to be visible to all users in your Group Wise system. Domain enables the role to be visible to all users in the same domain as the role. Post Office enables the role to be visible to all users on the same post office as the role. Setting the visibility to None means that the role will not be visible at any level. However, even if the role is not displayed in a user's Address Book, he or she can use the role by typing the role’s name in a message’s To field. 4 Click OK to save the changes. The organizational role is now treated like a Group Wise distribution list and is visible in the Group Wise View when you filter on distribution lists. When Group Wise users send messages to the organization role, only those role members who have Group Wise accounts will receive messages. Seeing Which Members of an Organizational Role Have GroupWise Accounts eDirectory organizational roles can include members who have Group Wise accounts and members who do not have Group Wise accounts. When the organizational role is used to address a message, only those members who have GroupWise accounts will receive the message. To see which members have Group Wise accounts and which ones do not: 1 In ConsoleOne, select the Organizational Role object, then click Tools > Group Wise Diagnostics > Display Object. GDS information for selected object Description Value Help Desk e 1 Provo (GW_TREE) User 2.GroupWise.Provo D 2 1 Provo.Research.User 1 Provo.Research.User 2 GUID 256DD5E0-0B7E-0000-B45E-2E00E700DC00 Custom Index Flag 1 el NDS information for selected object Description Value NGW: Post Office Research.GroupWise.Provo + NGW: GroupWise ID Provo.Research.Help Desk(110)01BD98B0-15B0-0000-8E77-290022004C00 Equivalent To Me User 1.GroupWise.Provo User 2.GroupWise.Provo User 3.docdev.Novell User 4.docdev.Novell Access Control List Member[Root]2 Member User 1.GroupWise.Provo User 2.GroupWise.Provo User 3.docdev.Novell 5 Laar 4 dando howell sl » 256 GroupWise 6.5 Administration Guide The top window displays the members who have Group Wise accounts. The bottom window displays all members. 2 When you’ve finished viewing the information, click OK. Changing an Organizational Role’s Visibility in the Address Book An organizational role’s visibility level determines which users see the role in the Address Books. You can control the availability of a role by displaying it in the Address Book for all users in your GroupWise system, in the Address Book for those users in the role’s domain only, in the Address Book for those users on the role’s post office only, or not displaying it at all. Even if the organizational role is not displayed in the Address Book, users can use the role if they know its name. To change an organizational role’s visibility in the GroupWise Address Book: 1 In ConsoleOne, right-click the Organizational Role object, then click Properties. 2 Click GroupWise > Identification to display the Identification page: Post Office: Visibility: Post Office w Page Options... ( Cancel JT _ Hem | 3 In the Visibility field, select the desired visibility level. System: The organizational role will be displayed in the Address Book for all users in your GroupWise system. Domain: The organizational role will be displayed in the Address Book for all users in the role’s domain. Post Office: The organizational role will be displayed in the Address Book for all users on the role’s post office. None: The organizational role will not be displayed in the Address Book. Users will need to know the role’s name to use it. 4 Click OK to save your changes. Using Organizational Roles as GroupWise Distribution Lists 257 Moving an Organizational Role If necessary, you can move an organizational role from one post office to another. For example, you might need to move an organizational role from a post office you are removing. The organizational role retains the same name on the new post office as it has on the current post office. If another object (user, resource, distribution list, group, or organizational role) assigned to the new post office has the same name, you will need to rename one of them before you move the organizational role. For details, see “Renaming a Distribution List” on page 244. To move an organizational role from one post office to another: 1 In ConsoleOne, right-click the Organizational Role object in the Group Wise View, then click Move to display the Group Wise Move dialog box. IMPORTANT: You must select the Organizational Role object in the GroupWise View. If you select the object in the standard Console View, you will move the Organizational Role object from one eDirectory container to another, not the group from one post office to another. KE Groupwise Move Group Wise Administrators x| Move to post office: a Cancel | Help 2 Select the post office to which you want to move the organizational role, then click OK to move the organizational role. Renaming an Organizational Role Situations might arise where you need to give an organizational role a new name. For example, you might need to move the organizational role to another post office that already has an object (user, resource, distribution list, group, or organizational unit) with the same name. When you rename an organizational role, you rename the Organizational Role object. This means that you are not only changing the name in GroupWise, but also in eDirectory. To rename an organizational role: 1 In ConsoleOne, right-click the Organizational Role object, then click Rename to display the GroupWise Rename dialog box. | Clee Rename GroupWise Administrators xÍ New GroupWise name: f Cancel Help 2 Inthe New Name field, enter the new name for the organizational role. 3 Click OK to rename the organizational role. 258 GroupWise 6.5 Administration Guide Removing an Organizational Group from GroupWise If you decide that you no longer want an organizational role to be a public address list in Group Wise, you can remove its association with a Group Wise post office, so that it returns to being just an eDirectory organizational role. 1 In ConsoleOne, right-click the Organizational Role object, click Delete, then click Yes to confirm that you want to delete the object. 2 In the eDirectory Account box, deselect Delete to retain the Organizational Role object in eDirectory. The Delete option in the GroupWise Account box is selected by default and cannot be deselected. 3 Click OK twice to complete the deletion. Using Organizational Roles as GroupWise Distribution Lists 259 260 GroupWise 6.5 Administration Guide Libraries and Documents + Chapter 21, “Document Management Services Overview,” on page 263 + Chapter 22, “Creating and Managing Libraries,” on page 269 + Chapter 23, “Creating and Managing Documents,” on page 303 + Chapter 24, “Integrations,” on page 331 Libraries and Documents 261 262 GroupWise 6.5 Administration Guide Libraries Document Management Services Overview Group Wise” Document Management Services (DMS) lets users create documents with integrated applications, save them, then easily locate a specific document later without knowing the application, a specific document name, or the document’s physical location. Users can create, share, locate, edit, view, and check out documents that are created under the management of Group Wise DMS. A GroupWise DMS system consists of the following components: + “Libraries” on page 263 + “Document Storage Areas” on page 265 + “Documents” on page 265 + “Integrations” on page 268 A library is a set of documents and a database that allows the set of documents to be managed as a unit. A library must belong to a specific post office but can be accessed by users in other post offices. The Group Wise client enables users to store and manage their documents in the library. The GroupWise Post Office Agent (POA) transfers documents between the GroupWise client and the library. Library Post Office POA % —— o a a GroupWise GroupWise GroupWise Client Client Client Integrated Integrated Integrated Application Application Application [oo | a 8 à User User User Document Management Services Overview 263 In ConsoleOne®, a library can be viewed where it resides in the Novell® eDirectory™ tree. [Novell ConsoleOne lo x) File Edit View Tools Help Console View $ ES Engineers Q Development =! CORP. TREE O Conference Room 1 Q Manufacturing By Corporate @ Provot GA sales ¿a Novell ® Provoz i Manufacturing Library B- Provo i @ Provo3 [È GroupWiseMonitor %8 Accounting @ Provo4 483 MonitorProvider H-B Development @ Provos L Q Accounting "3 Manufacturing a Pg Sales a lilo >) 14 items À User admin.docdev.Novell free: CORP. TREE Trovet consoieone © Mix File Edit View Tools Help ( Libraries M EY Groupwise System GroupWise View 5 & Provot @ Manufacturing Library Qa Development TETE © Provo2 © Provo3 © Provo4 @ Provos GroupWise System: Corporate Mail [Connected to Domain: Provo1 [Location: UPRY-GWI In the GroupWise Windows client, users can view a list of all the libraries to which they have access by clicking Tools > Options > Documents. Documents Setup E | x} Library Configuration | Integrations | General | Library names: _Propertes.. | ¡Accounting Library Set Default al | Development Librar Manufacturing Library (Default) Research Library NOTE: This feature is not available in the Cross-Platform client. Physically, a library consists of a set of directories and databases stored in the gwdms subdirectory of the post office, as illustrated in “Post Office Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. For complete information on libraries, see Chapter 22, “Creating and Managing Libraries,” on page 269 264 = GroupWise 6.5 Administration Guide Document Storage Areas Documents Documents can be stored at the post office, as illustrated in “Post Office Directory” in Group Wise 6.5 Troubleshooting 3: Message Flow and Directory Structure. This is the simplest configuration, but it is not recommended for libraries where substantial growth is anticipated because documents stored at the post office cannot easily be moved to a different location where additional storage space is available. Preferably, documents should be stored outside the post office, in document storage areas. Document storage areas are physical locations, such as drive volumes, optical devices, hard drives on other servers, and so on. Document storage areas can be located anywhere that the POA can access them locally or using direct network access (mapped drive or mounted file system). A document storage area has the same internal directory structure that is used to store documents at the post office. The only difference is that a document storage area can be located anywhere in your system. Therefore, a document storage area can be moved easily, so it is easy to expand your document storage capacity if you store documents in a document storage area rather than at the post office. For complete information on document storage areas, see “Managing Document Storage Areas” on page 290. Documents created using Group Wise DMS are not stored as individual files. Instead, documents are stored in database structures called binary large objects (BLOBs). A document and all of its versions are stored in the separate BLOB files. BLOBs are compressed (50% or more) to conserve storage space. BLOBs are encrypted to provide security. Because documents are stored in a database structure, information can be associated with each document that is not part of the document itself, such as: + “Document Properties” on page 265 + “Document Types” on page 266 For complete information on documents, see Chapter 23, “Creating and Managing Documents,” on page 303. Document Properties Document properties are attributes that determine what users see on the document property sheets when they create DMS documents. In the GroupWise Windows client, the default document properties for a new document appear like this: Document Management Services Overview 265 Document | Version | Sharing | Activity Log| Library: Development Library Document number: Subject: | Document type: Document El Author: [ang an LE Creator: Date created: 06/11/01 10:314M Official version: 0 Current version: Open document now Cancel NOTE: In the Cross-Platform client, you cannot create new documents in GroupWise. In ConsoleOne, the default document properties for a library are defined like this: “a Document Properties Maintenance File Edit Help E +[2|=] EP PROVO1. DEVELOPMENT Er A Libraries Author String Yes No No 256 Mixed kp (use LD evelopment ER [creator String No Yes No 256 Mixed -- F Research Library Current Ver # Number No Yes No - - E- -§ Lookup Tables Date Created Date No Yes No Document Number Number No Yes No - - Document Type String Document Type ‘Yes No No 65535 Mixed Official Ver # Number No Yes No Subject String No No No 65535 Mixed ‘ 4 [CAPs The default document properties are often adequate, but for some libraries, additional customized document properties can be very useful. For example, the legal department might want Client and Matter fields to be required for most documents created by anyone in that department. NOTE: Document properties cannot be set in ConsoleOne on Linux. However, you can use ConsoleOne on Windows to set document properties for libraries that are located on Linux. Document Types The Document Type property defines how a document is disposed of when its "life" in the system has expired. It is a required field. Users select a document type each time they create a new document. 266 GroupWise 6.5 Administration Guide Document type Document Maximum versions: 100 Life: 365 days Action: Archive Cancel A number of default document types are provided, as shown above. If needed, you can set up additional document types. For example, you could set up Pleading for the legal department, Spreadsheet for accounting, Correspondence for administration, RFP for marketing, White Paper for R&D, and so on. The document type establishes the following document characteristics: + “Maximum Versions” on page 267 + “Expiration Actions” on page 268 + “Document Life” on page 268 The following table lists some of the default document types and their default characteristics: Document Type Maximum Versions Expiration Action Document Life Agenda 100 Archive 99 days Document 100 Archive 365 days Memo 1 Delete 99 days Minutes 100 Archive 99 days Misc 10 Archive 30 days Proposal 100 Archive 99 days Report 100 Archive 99 days Template 100 Archive 365 days Maximum Versions Users can create new versions of their documents when they revise them. Version numbers are automatically incremented. Any version of a document can be designated as the official version by the user. The official version, which is not necessarily the most recently-edited version, is the one located in searches. Group Wise users have the right to designate an official version if they have Edit rights to the document. Each document type property has a maximum number of versions (up to 50,000 per document). Most types have a default of 99 versions. A maximum of 0 (zero) versions means that documents of that type cannot have versions. Document Management Services Overview 267 Document Life Expiration Actions Integrations Document life is the number of days that must pass between the time when a document is last accessed and when it is ready for archival or deletion. A document life value of 0 (zero) indicates that the document will never be available for archival or deletion. When a document’s life expires, its associated expiration action takes place: Archive: The document will be archived when it reaches its document life date. This is useful for important documents because archived documents can be unarchived. Delete: The document will be automatically deleted when its document life date is reached. This is useful for documents that are temporary in nature. Retain: The document will not be deleted or archived, and will remain in the system indefinitely. This option is practical for documents that have a recurring use, such as template documents. Integrations serve as the "glue" between document-producing applications and your GroupWise DMS system. Integrations provide code specifically designed to allow function calls, such as Open or Save, to be redirected to the GroupWise Windows client. This allows Group Wise dialog boxes to be displayed instead of the application’s normal dialog boxes for the integrated functions. Integrations also allow GroupWise to pull documents from a library and deliver them to applications for modification. Then, integrations enable Group Wise to return modified documents to the library so that other users can access them. NOTE: The Cross-Platform client does not include integrations, which is why you cannot create and edit documents from the Cross-Platform client. For complete information on the integrations available for the Windows client, see Chapter 24, “Integrations,” on page 331. 268 = GroupWise 6.5 Administration Guide Creating and Managing Libraries When you first set up a new Group Wise” system, a basic library is automatically created for the first post office. A basic library is adeguate when: + Document management is not a primary activity of your GroupWise users. + The library will store documents created and used by members of the post office that owns the library, or, if you do not need one basic library per post office, by all users within a domain. + All documents will be stored at the post office or in a single document storage area external to the post office that owns the library. If your anticipated document management needs are more demanding than those listed above, you can setup one or more full-service libraries, where you can implement the full range of document management capabilities offered by Group Wise Document Management Services (DMS). NOTE: The Linux version of ConsoleOne allows you to create libraries, but it does not allow you to set document properties as described in “Organizing Documents” on page 306. As you plan for libraries on Linux, keep in mind that the Cross-Platform client has only basic document management capabilities when compared with the Windows client, as described in “Working with Documents” in the GroupWise 6.5 Cross-Platform Client User Guide. To use one or more libraries as part of your Group Wise system, perform the following tasks as needed: + “Planning a Basic Library” on page 269 + “Setting Up a Basic Library” on page 272 + “Planning Full-Service Libraries” on page 273 + “Setting Up a Full-Service Library” on page 284 + “Managing Libraries” on page 288 + “Library Worksheets” on page 300 IMPORTANT: If you are creating a new library in a clustered GroupWise system, see the appropriate section of the GroupWise 6.5 Interoperability Guide before you create the library - “Planning a New Library for a Clustered Post Office” in “Novell Cluster Services” - “Planning a Library for a New Clustered Post Office” in “Microsoft Clustering Services” Planning a Basic Library An initial basic library was created along with the first post office when you set up your GroupWise system. That initial basic library is available for immediate use. However, you might want to change the location where documents are stored, as described in “Deciding Where to Store Documents” on page 271. You can also create additional basic libraries as needed. Creating and Managing Libraries 269 This section provides the information you need in order to set up a new basic library. The “Basic Library Worksheet” on page 300 lists all the information you need as you set up a basic library. You should print the worksheet and fill it out as you complete the tasks listed below: + “Selecting the Post Office That the Library Will Belong To” on page 270 + “Determining the Context for the Library Object” on page 270 + “Choosing the Library Name” on page 270 + “Deciding Where to Store Documents” on page 271 After you have completed the tasks and filled out the worksheet, you are ready to continue with “Setting Up a Basic Library” on page 272. Selecting the Post Office That the Library Will Belong To If you are creating a basic library for each post office in your Group Wise system, print a copy of the “Basic Library Worksheet” on page 300 for each post office. Ifusers in several post offices will store documents in the same basic library, you must decide which post office should own the library. A library can never be reassigned to a different post office, so you should choose the owning post office carefully. You should consider which users will use the library most frequently and where you might want to create additional libraries in the future. BASIC LIBRARY WORKSHEET Under Item 3: Post Office, specify the name of the post office that will own the new basic library. Determining the Context for the Library Object Generally, you should create the Library object in the same context as its post office. You cannot move a Library object after you have created it. BASIC LIBRARY WORKSHEET Under Item 1: eDirectory Container, specify the container for the Library object. Choosing the Library Name When you create the Library object, you must give the library a name. This is the name that is displayed in ConsoleOne®. After you have specified the library’s name and created the Library object, the name cannot be changed. Therefore, if you have or will have other libraries, you should pick a name that uniquely identifies the library. For example, use the name to identify the post office it is assigned to. Do not use any of the following characters in the library’s name: ASCII characters 0-13 Comma , Asterisk * Double quote " At sign @ Extended characters Braces { } Parentheses ( ) Colon : Period . 270 = GroupWise 6.5 Administration Guide By default, the library name that users see in the Group Wise client is the same as the Library object name. However, you can change the display name if you want it to be different from the Library object name. BASIC LIBRARY WORKSHEET Under Item 2: Library Name, specify the Library object name. Under Item 7: Library Description, provide a brief description of the planned use forthe library. Under Item 8: Display Name, specify the library name you want users to see in the GroupWise client, if it is different from the Library object name. Deciding Where to Store Documents You can store documents at the post office in the post_office\gwdms\library\docs subdirectory of the post office. You can later add document storage areas outside the post office if DMS usage grows. However, the documents stored at the post office can never be moved. A document storage area has the same internal directory structure that is used to store documents at the post office, but it can be located anywhere in your system. Document storage areas can be moved easily, so it is easy to expand your document storage capacity when you store documents in document storage areas rather than at the post office. You might want to set up a document storage area on the same server where the POA runs so as not to increase network traffic. The POA can index and serve documents to users most efficiently if the document storage area is located locally. BASIC LIBRARY WORKSHEET Under Item 4: Store Documents at the Post Office?, mark Yes or No. (No is recommended for permanent document storage). To define a document storage area, you must know its direct access path. For example, a UNC path specifies the absolute location of the document storage directory. Syntax: \WetWare_server\volume\storage directory \\Windows_server\sharename\storage directory Example: \\nw6\gwdocs\docs \\win2k\c$\docs NOTE: On Linux, ConsoleOne interprets a UNC path so that the first item in the UNC path is the Linux server hostname, followed by a Linux path to the document storage area. BASIC LIBRARY WORKSHEET If you entered No for Item 4, specify the direct access path under Item 6: Document Storage Area Path. Under Item 5: Document Storage Area Description, enter a useful description of the document storage area. (This description is displayed only in ConsoleOne.) Creating and Managing Libraries 271 If you need to add a document storage area to the initial library that was created with the first post office in your Group Wise system, use the Storage Areas properties page of the Library object in ConsoleOne to provide the direct access path, as described in “Adding a Document Storage Area” on page 290. Setting Up a Basic Library You should already have reviewed “Planning a Basic Library” on page 269 and filled out the “Basic Library Worksheet” on page 300. Complete the following tasks to set up a new basic library: + “Creating the Basic Library” on page 272 + “Viewing a New Library in Your Group Wise System” on page 287 Creating the Basic Library To create a new library: 1 Make sure the POA is running for the post office that will own the new basic library. 2 In ConsoleOne, browse to and right-click the Novell® eDirectory™ container where you want to create the library (worksheet item 1), then click New > Object. New Object xj Create object in: 28 CORP_TREE/GroupWise.Provo OK Class: JA Cancel (98 GroupWise Distribution List | |) GroupWise Domain lai GroupWise External Entity $. GroupWise Library CR GroupWise Post Office A GroupWise Resource BE LDAP Group [SE LDAP Server 3 Double-click GroupWise Library, then fill in the fields in the Create GroupWise Library dialog box (worksheet items 2 through 6). Ki Create GroupWise Library xi Library Name: Cx] GroupWise Post Office: Cancel E Help Document Storage Area Documents may be stored at the post office orin one or more storage areas. Storage areas can also be added once the library has heen created. F Store documents at post office Define additional properties T Create another Library 4 Click Define Additional Properties, then click OK to create the Library object and display the library Identification page. 272 GroupWise 6.5 Administration Guide Properties of Manufacturing Library E xj eneral | NDS Rights + | Other | Rights to Files and Folders | Post Office: [Provot Manufacturing = Description: Start Version Number: 1 v Maximum Archive Size: [so Sf Bytes Display Name: [Manufacturing Libray 00 Distinguished Name: Manufacturing Library.GroupWise.Provo Page Options... | 0 Cancel a Help 5 Fill in the Description field (worksheet item 7). 6 Ifnecessary, edit the Display Name field (worksheet item 8). 7 Click OK to save the library information. 8 Test the new library. See “Viewing a New Library in Your Group Wise System” on page 287. Although there are many configuration options for libraries and documents, as described in “Planning Full-Service Libraries” on page 273, no additional setup is reguired for a basic library. GroupWise client users can begin to store documents in the new library at once. Planning Full-Service Libraries If your document management requirements go beyond basic libraries, you can create one or more full-service libraries. You might or might not need to make use of all document management features in order to meet your DMS users’ needs. This section covers everything you should consider when you set up full-service libraries. The “Full-Service Library Worksheet” on page 301 lists all the information you need as you setup a full-service library. You should print a copy of the worksheet for each library you plan to create. Fill out the worksheet for each library as you complete the tasks listed below. + “Deciding Which Libraries to Create” on page 274 + “Selecting the Post Offices That Will Own Libraries” on page 278 + “Determining the Contexts for Library Objects” on page 278 + “Choosing Library Names” on page 278 + “Deciding Where to Store Documents” on page 279 + “Setting Document Version Options” on page 281 + “Figuring Maximum Archive Directory Size” on page 281 + “Designating Initial Librarians” on page 282 + “Restricting Initial Public Library Rights” on page 283 Creating and Managing Libraries 273 + “Determining Your Indexing Needs” on page 284 + “Determining If You Need to Set Up Integrations for DMS Users” on page 284 After you have completed the above tasks and filled out the worksheets, you are ready to continue with “Setting Up a Full-Service Library” on page 284. Deciding Which Libraries to Create When designing a system of libraries for your Group Wise system, you should review the following considerations: + “Library Access for DMS Users” on page 274 + “Centralized vs. Decentralized Library Configurations” on page 274 + “Library Specialization” on page 277 Library Access for DMS Users Client/server access is the preferred access mode for GroupWise client users. It is the best access mode for DMS users because it enables them to access libraries outside their own post offices. For information about access modes, see “Post Office Access Mode” on page 422. If some GroupWise users have direct access reguirements, see the Group Wise 5.5 Document Management Services Guide (http://www.novell.com/documentation/gw55/index.html). Centralized vs. Decentralized Library Configurations Reorganizing existing libraries is not a simple process. Therefore, you should determine whether you want a centralized or decentralized library configuration before you start creating libraries. + “Centralized Libraries” on page 274 + “Decentralized Libraries” on page 276 + “Comparative Scenarios” on page 277 Centralized Libraries Centralized libraries are located in a post office that is dedicated to libraries (no users). Centralized libraries are serviced by the POA in the dedicated DMS post office, as shown in the following illustration: 274 GroupWise 6.5 Administration Guide DMS Accounting Library Post Office Manufacturing Library P— Development Library va | Sales Library VD” 2 NÒ Development Manufacturing Post Office Post Office POA POA Sales Post Office Accounting Post Office GroupWise GroupWise GroupWise GroupWise Clients Clients Clients Clients Integrated Integrated Integrated Integrated Applications Applications Applications Applications Accounting Development Manufacturing Sales Users Users Users Users In the illustration, notice that all libraries belong to the DMS post office, which has no users. All GroupWise client users are using client/server access mode, which is required because there are no libraries in their local post offices. Each user has access to all four libraries through TCP/IP links to the DMS POA. The following table lists some advantages and disadvantages of centralized libraries: Creating and Managing Libraries 275 Advantages Disadvantages + Administration can be consolidated, allowing one administrator to specialize in document management. Backup can be easier with hardware dedicated to one DMS post office, such as optical drives, RAID, fast backup units, and so on. If a post office server other than the one dedicated to libraries goes down, DMS access is unaffected for users in the remaining post offices i the whole GroupWise system. Decentralized Libraries + You must create and maintain a post office that is dedicated to libraries only (no users). This configuration guarantees that all document searching and accessing is back and forth between users’ post offices and the libraries’ post office, possibly degrading network performance. If the post office server dedicated to libraries goes down, DMS is unusable for Decentralized libraries are located along with users in different post offices. Decentralized libraries are serviced by their own local POAs as shown in the following illustration: Accounting Development Manufacturing Sales Post Office Post Office Post Office Post Office Accounting i Development > Manufacturing 7 Sales kg Library Library Library Library $ $ $ A $ A I, È È "4 NA È GroupWise GroupWise GroupWise GroupWise Clients Clients Clients Clients Integrated Integrated Integrated Integrated Applications Applications Applications Applications Accounting Development Manufacturing Sales Users Users Users Users In the illustration, notice that each post office has its own library. Users can see each others” libraries as well as their own because of client/server access mode. The following table lists some advantages and disadvantages of decentralized libraries 276 GroupWise 6.5 Administration Guide Advantages Disadvantages + Network traffic is minimized because + Libraries and their documents are scattered most document accessing are in users’ over different servers, adding to your local post offices. administrative workload (such as doing backups). + You do not need to maintain an extra DMS post office dedicated to libraries only. + Users in a post office where a library resides can use direct access mode if necessary. Comparative Scenarios The following scenarios further illustrate the differences between centralized and decentralized libraries: + Assume that you assigned your first library to the same post office your users have membership in. By initially assigning a library to the same post office as your users, you establish a decentralized configuration for future libraries. You now want a centralized library configuration. However, because you cannot reassign the library to another post office, you must do one of the following: - Create one or more new libraries under a DMS post office, export all of the documents from the first library and import them to the new libraries, delete the first library, and then ensure that users can locate their documents. - Create one or more new libraries under a DMS post office and have your librarian use mass document operations to move the documents from the first library to the other libraries, delete the first library, and then ensure that users can locate their documents. + Assume that you assigned your first library to a DMS post office that is used only for libraries. Now you can use either the centralized or decentralized library configuration for your additional libraries. The DMS post office can be used for all future libraries to create a centralized configuration, or you could assign future libraries to other post offices and leave that first one where it is, giving you a decentralized configuration. Setting up your first library on a post office server dedicated to only libraries allows you to use either configuration option. However, this method initially requires additional hardware and administration. Library Specialization You can create libraries for such user specialties as administration, accounting, development, human resources, legal, marketing, manufacturing, payroll, R&D, sales, shipping, and so on. You can also specialize libraries by such functions as general (for all users), administration (including legal and payroll), engineering and documentation development (R&D), marketing and sales, manufacturing and shipping, and so on. You can also use specialization to provide security for sensitive libraries. You do this by setting up access restrictions for the libraries. The default is for all DMS users to have access to all libraries in the GroupWise system. For more information about restricting library access, see “Managing Library Access” on page 293. Restricting library access can also improve users’ search time. When users install the Group Wise client on their workstations, they are either automatically assigned a default library (if there is one on their post office), or they are asked to select one from the libraries they have access to. By Creating and Managing Libraries 277 default, DMS searches are performed only on the user's default library. To search other libraries ("global" search), users can select other libraries using the Look In list in the Find dialog box. If you limit users’ access to libraries (perhaps by department), their global searches would also be faster. Another reason for creating specialized libraries could be for different library configuration needs. For example, each library could have specialized document types and document properties that would not be needed in other libraries. For a review of document types and properties, see “Documents” on page 265. For more detailed information, see “Customizing the Default Document Type Property” on page 307 and “Customizing Document Properties” on page 306. Specialization can also facilitate library management activities, such as controlling library accessibility for individual users or groups of users, or managing different uses of document types, document properties, or field label naming schemes. Selecting the Post Offices That Will Own Libraries As a result of deciding whether you want to use a centralized or decentralized configuration for your libraries and whether or not you need specialized libraries, you should have a good idea of what post offices you want to create libraries in. If you are using a centralized configuration, create the DMS post office by following the instructions in Chapter 11, “Creating a New Post Office,” on page 147, then return to this point. FULL-SERVICE LIBRARY WORKSHEET Under Item 3: Post Office, specify the name of the post office that will own the new library. Determining the Contexts for Library Objects You can create a Library object in any container in the eDirectory tree. For example, you could create the Library object in the same container as its Post Office object. Or you could create it in a special container just for Library objects: The containers in which you place the Library objects have no bearing on whether your libraries are centralized or decentralized. Library objects can be located anywhere in the tree, no matter which post offices the libraries belong to. FULL-SERVICE LIBRARY WORKSHEET Under Item 1: eDirectory Container, specify the name of the eDirectory container where you want to create the new library. Choosing Library Names A library’s name must be unique within the post office; it also must be unique within its container. You should devise a naming scheme that will help to identify all libraries in the Group Wise system. It can be useful to include within the library name an indication of which post office it belongs to. After you have specified the library’s name and created the Library object, the name cannot be changed. Do not use any of the following characters in the library’s name: 278 GroupWise 6.5 Administration Guide ASCII characters 0-13 Comma, Asterisk * Double quote " At sign @ Extended characters Braces { } Parentheses ( ) Colon : Period . By default, the library name that users see in the GroupWise client is the same as the Library object name. However, you can change the display name if you want it to be different from the Library object name. FULL-SERVICE LIBRARY WORKSHEET Under Item 2: Library Name, specify the Library object name. Under Item 7: Library Description, provide a brief description of the planned use for the library. Under Item 10: Display Name, specify the library name you want users to see in the GroupWise client, if itis different from the Library object name. Deciding Where to Store Documents When deciding where to store documents, you should review the following considerations: + “Document Storage Location” on page 279 + “Disk Space Requirements” on page 279 + “Direct Access Paths to Document Storage Areas” on page 280 Document Storage Location Documents belonging to full-service libraries should not be stored at the post office. Instead, they should be stored in document storage areas. For a review, see “Document Storage Areas” on page 265. A library can have more than one document storage area. The only requirement is that the POA that services the library must have direct network access (mapped drive or mounted file system) to each storage area. You can set up one document storage area for each library as you create the Library object. Additional document storage areas can be set up using the Storage Areas properties page of the Library object, as described in “Adding a Document Storage Area” on page 290. Disk Space Requirements You will need to know the disk space requirements for your libraries in order to choose appropriate locations for document storage areas. If you have chosen a centralized library configuration, your document storage areas will all be serviced by the POA of the DMS post office. Therefore, you can calculate the disk space requirements for your GroupWise system as a whole. If you have chosen a decentralized configuration, document storage areas will be located throughout your GroupWise system. Therefore, disk space requirements must be calculated separately for each library. Creating and Managing Libraries 279 If your current document storage statistics are an accurate indicator for a given library or for your system, use them for calculating your disk space reguirements. Otherwise, use the following formula for determining DMS storage needs: Number of Users x Average Number of Documents per User x Average Document Size x Average Number of Versions per Document Disk Space Reguired for Library Example: 250 Users x 200 Documents per User x 50 KB per Document x 10 Versions per Document 25 GB of Disk Space Users might create a new version of a document any time they revise it. Because all versions of a document are saved in BLOB storage with the original document, disk space can be used up quickly! If you know how many versions per document your users average, use that value in the formula; otherwise, allow for an average of at least ten versions per document. If your Average Document Size value for the formula is based on non-Group Wise documents, they will be compressed by about 50% after they have been imported into GroupWise and stored in BLOBs. You should research your current or expected document usage before deciding where to store documents. FULL-SERVICE LIBRARY WORKSHEET Under Item 7: Document Usage Estimate, enter the requested values and calculate the resulting disk space requirements. If your values are calculated for the system (rather than per library), enter this information on only one of the worksheets. Direct Access Paths to Document Storage Areas To define a document storage area, you will need to know its direct access path. For example, a UNC path specifies the absolute location of the document storage directory. Syntax: \WetWare_server\volume\storage directory \\Windows_server\sharename\storage directory Example: \\nw5\gwdocs\docs \\win2k\c$\docs NOTE: On Linux, ConsoleOne interprets a UNC path so that the first item in the UNC path is the Linux server hostname, followed by a Linux path to the document storage area. 280 = GroupWise 6.5 Administration Guide You might want to set up a document storage area on the same server where the POA runs so as not to increase network traffic. The POA can index and serve documents to users most efficiently if the document storage area is located locally. FULL-SERVICE LIBRARY WORKSHEET Under Item 6: Document Storage Area Path, specify the direct access path. Under Item 5: Document Storage Area Description, provide a useful description of the document storage area. (This description is displayed only in ConsoleOne.) Setting Document Version Options When you create a new library, you can establish how document versions are handled. For an overview of document versioning, see “Maximum Versions” on page 267. + “Official Version” on page 281 + “Start Version Number” on page 281 Restricting the maximum number of versions should be done after the library has been created, as described in “Editing Library Properties” on page 289. Official Version By default, any user can establish the official version of a document. However, you can remove that right from one or more users if needed. FULL-SERVICE LIBRARY WORKSHEET Under Item 11: Restrict Public Access Rights, cross out Designate Official Version if you want to eliminate that right for all users. You can later grant the Designate Official Version to specific users or distribution lists, as described in “Managing Library Access” on page 293. Start Version Number You must set the start number for each library to either 0 (zero) or 1. The default is 1. This number identifies the original document. Version numbers are automatically increased from the number you select. If you select 0, the first version of a document will be 000. If you select 1, the first version will be 001. FULL-SERVICE LIBRARY WORKSHEET Under Item 8: Start Version Number, select 0 or 1. Figuring Maximum Archive Directory Size Documents created with GroupWise DMS can be archived, depending on their Document Type properties. A document’s type determines its disposition, such as archiving or deleting. For more information, see “Customizing the Default Document Type Property” on page 307. Creating and Managing Libraries 281 When you archive documents, their BLOB files are moved into archive directories. Each library in a document storage area has its own set ofarchive directories that are automatically created as needed. They are named arxxxxxx (where xxxxxx is an incremental integer with leading zeros). A document storage area has the same archive directory structure as the gwdms subdirectory in the post office, as illustrated in “Post Office Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. When a document is archived, Group Wise determines if the document’s BLOB file will fit in the current archive directory. If it will not fit, another archive directory is created and the BLOB is archived there. An archive set consists of all documents in one archive directory. The Maximum Archive Size property on the Library object establishes in bytes each archive directory’s size limit. You should set this to mirror the capacity of your archival medium (such as a CD). It should not be more than your archival medium’s capacity. It is usually better to keep archive sets small in comparison to the size of the backup medium. This lets you back up archive directories often enough to keep your hard disk space from being used up too quickly between backups. For example, if your backup medium has 1 GB capacity, you could limit your archive sets to a maximum archive size of 200 MB. If your archival system only lets you back up in one pass (in other words, you cannot perform consecutive backups to the medium), the Maximum Archive Size would need to match the archival medium’s capacity. Some archival mediums require extra space for recording file storage data, such as an index of the files stored to tape. Ten percent is usually sufficient. For example, a tape system with 100 MB capacity means you should set your Maximum Archive Size to 90 MB. Consult your archival medium documentation for information on setting up an effective backup strategy. Include in your strategy such concepts as multiple archive sets per backup medium, or allowing extra space for the medium’s file storage data. ADDITIONAL LIBRARIES WORKSHEET Under Item 9: Maximum Archive Size, enter a number (in bytes, with no abbreviations or commas). Designating Initial Librarians A librarian has full rights to the properties of every document in the library, and can therefore perform management tasks on all library documents. You can assign yourself as a librarian. You can also delegate these tasks by assigning responsible users in each library as librarians. Any GroupWise user who normally has access to the library can be a librarian. You can also have multiple librarians for each library. When you first create a new library, you might want to simply designate yourself as the librarian and assign other users later. For more detailed information, see “Adding and Training Librarians” on page 295. ADDITIONAL LIBRARIES WORKSHEET Under Item 12: Librarians, list any users that you want to function as librarians for the new library. 282 GroupWise 6.5 Administration Guide Restricting Initial Public Library Rights The rights to documents in a library apply to the library as a whole; therefore, they are referred to as public rights. By default, all public rights are granted to all users in a new library. You can restrict which Group Wise library features individual users or distribution lists should have by removing the public rights and then restoring them for selected users or distribution lists. The following table summarizes the public library rights: Public Right Add Change Delete View Designate Official Version Reset In-Use Flag Description Allows users to add new documents to the library. Allows users to make changes to existing documents in the library. Allows users to delete documents, regardless of who else created them or has rights to the documents. However, to be able to delete a document, users must also have rights to locate and modify the document (View and Change rights), in addition to the Delete right. By itself, this right allows searching, viewing, or copying documents, but does not permit editing them. Copies can be edited, because a copy is saved as a separate document. Therefore, editing a copy will not affect the original document or any of its versions. Allows any version of a document to be designated as the official version. The official version, which is not necessarily the most recently-edited version, is the one located in searches. The official version is usually determined by the creator or author of the document. However, the official version can be designated by the last user to edit the document (if the user has this right). A user also needs the Change right to the document to be able to designate an official version. However, you might still want to deselect this as an initial public right. The In-Use flag protects against data loss by preventing multiple users from concurrently opening the same document. The purpose of the Reset In-Use Flag right is to allow a user or librarian to reset a document’s status when the document is in use by someone else or when it is erroneously flagged as in use. Because you can manually reset the In-Use flag to change a documents status, even if the documentis currently open, you should use prudence in allowing users the public right to change the In-Use flag. You might want to deselect this as a public right. FULL-SERVICE LIBRARY WORKSHEET Under Item 11: Restrict Public Access Rights, cross out any public rights you want to eliminate for all users. You can later grant the rights to specified users or groups, as described in “Managing Library Access” on page 293. Rights to individual documents in a library can be modified at any time by the user listed as the creator or author of the document. Just because users might have public rights in a library does not mean that they will have the equivalent rights to every document in the library. For additional information on rights, see “Sharing Documents” in “Creating and Working with Documents” in the GroupWise 6.5 Windows Client User Guide. Creating and Managing Libraries 283 Determining Your Indexing Needs The POA performs many tasks in the post offices, as described in “Role of the Post Office Agent” on page 423. Indexing documents is just one of'its many functions. If necessary, you can configure an extra POA on another server to handle indexing. Separating POA functions can optimize the processing load for the respective POAs, particularly if your Group Wise system will regularly search and index a large number of documents. If you feel you might need dedicated indexing for DMS documents, see “Indexing Documents” on page 319 for in-depth information on different configurations. Then determine whether you will need dedicated indexing. FULL-SERVICE LIBRARY WORKSHEET Under Item 11: Dedicated POA for Indexing, mark whether or not you plan to set up a separate indexing POA. Determining If You Need to Set Up Integrations for DMS Users For an overview of integrations, see “Integrations” on page 268. To determine if you will need to set up integrations for a given application, see Chapter 24, “Integrations,” on page 331. NOTE: This item does not apply if all of your users use the Cross-Platform client, where integrations are not available. ADDITIONAL LIBRARIES WORKSHEET Under Item 14: Set Up Integrations, mark whether or not you need to manually set up integrated applications for your DMS users. Setting Up a Full-Service Library You should have already reviewed “Planning Full-Service Libraries” on page 273 and filled out the “Full-Service Library Worksheet” on page 301 for each new library. Before starting to create new libraries, be sure your system meets the following prerequisites: + Make sure the eDirectory contexts exist where you will create new Library objects. + Make sure the post offices exist that will own the new libraries. If you are using a centralized configuration, make sure you have created the DMS post office that will own all the libraries by following the instructions in Chapter 11, “Creating a New Post Office,” on page 147. + Make sure the POA is running for each post office that will own a new library. + Make sure you have access to the physical locations where you will set up document storage areas. After the prerequisites are met, you are ready set up one or more full-service libraries. + “Creating the Full-Service Library” on page 285 + “Viewing a New Library in Your GroupWise System” on page 287 + “Other Things You Can Do” on page 287 284 GroupWise 6.5 Administration Guide Creating the Full-Service Library To create a new library: 1 Make sure you are logged in to the eDirectory tree where you want to create the library. This must be the same tree as the post office the library will belong to (worksheet item 3). 2 In ConsoleOne, browse to and right-click the eDirectory container where you want to create the library (worksheet item 1), then click New > Object. CCS x Create object in: %8 CORP. TREE/GroupWise.Provo ok BEEE Cancel 8 GroupWise Distribution List af (Y GroupWise Domain Help (2) GroupWise External Entity = =. GroupWise Library CR GroupWise Post Office A GroupWise Resource BE LDAP Group [SE LDAP Server x 3 Double-click GroupWise Library, then fill in the fields in the New Library dialog box (worksheet items 2 through 6). Library Name: GroupWise Post Office: Cancel | pretes tomes o o - Document Storage Area Documents may be stored atthe post office orin one or more storage areas. Storage areas can also be added once the library has been created. EU x o 3 IV Store documents at post office T Define additional properties I Create another Library 4 Click Define Additional Properties, then click OK to create the new Library object and display the library Identification page. Creating and Managing Libraries 285 Properties of Manufacturing Library Post Office: [Provot Manufacturing Description: Start Version Number: fi vl Maximum Archive Size: [ 0 E Bytes Display Name: [manufacturing Library Distinguished Name: Page Options... | Manufacturing Library.GroupWise.Provo õi Cancel | apply | Hee | 5 Fill in the fields (worksheet items 7 through 10). 6 Click GroupWise > Rights to display the Rights page. Properties of Development Library Public Rights M Add M View M Change Set official version Delete Reset in-use flag - Individual or Distribution List Rights D manage (Librarian Add | Delete O Add O vie [A Chang IG cial version M Delete D Resetin-use flag Page Options... | õi | Cancel | apply | Hep | 7 In the Public Rights box, deselect any rights you want to remove from all library users (worksheet item 11). 8 Ifyou want to set up one or more librarians, click Add, browse to and select one or more users or distribution lists (worksheet item 12), then click OK. Select the users and distribution lists, then select Manage (Librarian) to give them rights to the properties of all documents in the library. 9 Click OK to save the library information. 10 Test the library. See “Viewing a New Library in Your Group Wise System” on page 287 286 = GroupWise 6.5 Administration Guide Other Things You Can Do After you have created the new library, you can expand its capabilities as needed: * Import and manage documents. See Chapter 23, “Creating and Managing Documents,” on page 303 + Set up integrated applications for DMS users (worksheet item 14). See Chapter 24, “Integrations,” on page 331 + Grant library rights to specific users or distribution lists. See “Managing Library Access” on page 293. + Assign librarians. See “Adding and Training Librarians” on page 295. + Set up multiple document storage areas. See “Adding a Document Storage Area” on page 290. + Set up a dedicated indexing POA (worksheet item 13). See “Indexing Documents” on page 319 Viewing a New Library in Your GroupWise System After you create a new library, you can see it in ConsoleOne and GroupWise client users can see it in the GroupWise client. + “Seeing the New Library in ConsoleOne” on page 287 + “Seeing the New Library in the GroupWise Windows Client” on page 288 Seeing the New Library in ConsoleOne In the Console View in ConsoleOne, you can see the new Library object in the context of its eDirectory container object. CRETE a File Edit View Tools Help lse oleo] Console View ES Engineers qQ Development @ Conference Room 1 qQ Manufacturing =) CORP_TREE H- Corporate @ Provo1 Q sales H- Novell @ Provo2 @ Manufacturing Library =| By Provo || @ Provo3 E GroupWiseMonitor 1-8 Accounting 1-28 Development 2-8 ERIE 1-28 Manufacturing 1-8 Sales “| || @ Provos 4 MonitorProvider ise | 4 2| 14 items À | [User admin.docdev.Novell free: CORP TREE In the GroupWise View, you can see the relationship between the new library and the post office it belongs to. To locate the library in the GroupWise view: 1 Expand the GroupWise System object. 2 Expand the Domain object where the owning post office resides. 3 Select the owning post office. 4 In the drop-down list of objects, select Libraries. Creating and Managing Libraries 287 KR novell Consoleone 3 lai x| File Edit View Tools Help EJ Jää Libraries M A GroupWise View E-Y Groupwise System E-S Provo1 ca-Qh Development @ Manufacturing Library Manufacturing @ Provo2 @ Provo3 @ Provo4 &-@ Provo5 GroupWise System: Corporate Mail [Connected to Domain: Provo1 |Location: ÜPRY-GWI Seeing the New Library in the GroupWise Windows Client Group Wise Windows client users can see that a new library has been created. They can set it as their default library if desired. In the Group Wise client: 1 Click Tools > Options > Documents. Documents Setup 8 21x) Library Configuration | integrations | General | Library names: Properties... | Accounting Library Development Librar Set Default | Manufacturing Library (Default) Research Library The Library Configuration tab should include the new library. 2 Select the new library, click Set as Default, then click OK to use the new library as the default location for storing documents and searching for documents. Managing Libraries As your GroupWise DMS system grows and evolves, you might need to perform the following activities: ¢ “Editing Library Properties” on page 289 + “Managing Document Storage Areas” on page 290 + “Managing Library Access” on page 293 ¢ “Adding and Training Librarians” on page 295 + “Maintaining Library Databases” on page 299 + “Moving a Library” on page 299 + “Deleting a Library” on page 299 288 GroupWise 6.5 Administration Guide Editing Library Properties After creating a library, you can change some library properties. Other library properties cannot be changed. 1 In ConsoleOne, browse to and right-click the Library object, then click Properties to display the library Identification page. Properties of Manufacturing Library i x| General | NDS Rights + | other | Rights to Files and Folders | Post Office: [Provot Manufacturing = Description: Start Version Number: fi Maximum Archive Size: Po 03 Bytes Display Name: [Manufacturing Libray 00 Distinguished Name: Manufacturing Library.GroupWise.Provo Page Options... | GF Cancel Apply. | Help 2 Change editable fields as needed. For information about individual fields, click Help. 3 Click Group Wise > Storage Areas to display the Storage Areas page. Properties of Development Library E x| GroupWise y | General | NDS Rights + | Other | Rights to Files and Folders | Storage Areas Click a check box to use a storage area. To prevent data loss, a storage area record should never be deleted if data is stored at its path location. Storage Areas: M Development Document Storage Area I Store documents at post office Page Options... | OK Cancel Apply | Help All document storage areas associated with the library are listed, no matter where they are located. On this page, you can add, move, and delete document storage areas. See “Managing Document Storage Areas” on page 290. 4 Click GroupWise > Rights to display the library Rights page. Creating and Managing Libraries 289 Properties of Accounting Library - xÍ GroupWise + | General | NDS Rights + | other | Rights to Files and Folders | Rights -Public Rights M Add M view M Change M Set official version IV Delete D Resetin-use flag Individual or Distribution List Rights ADharmapalan.Development.Provo1 KHuang.Development.Provo1 ITMatijakovich.Develo pment.Provoi C Manage (Librarian) Delete M) Add Mie M Change [4 Set oficial version M Delete [Y Resetin-use flag Page Options... | OK Cancel | Apply | Help Public library rights granted to all users are selected in the Public Rights box. The Individual and Distribution List Rights box shows any additional rights that have been granted to specific users. See “Managing Library Access” on page 293 and “Adding and Training Librarians” on page 295. 5 Click OK to save changes to the library properties. Managing Document Storage Areas For a review, see “Document Storage Areas” on page 265 and “Deciding Where to Store Documents” on page 271. Typically, the initial document storage area for a library is set up when the library is created. Thereafter, you can create additional document storage areas as the library grows. You can move a document storage area to a location where more storage is available. You can delete a document storage area if it is no longer used. + “Adding a Document Storage Area” on page 290 + “Moving a Document Storage Area” on page 292 + “Deleting a Document Storage Area” on page 292 Adding a Document Storage Area To help you plan where to create the new document storage area, see “Deciding Where to Store Documents” on page 271. To create a new document storage area for a library: 1 In ConsoleOne, browse to and right-click the Library object, then click Properties. 2 Click Group Wise > Storage Areas to display the Storage Areas page. 290 GroupWise 6.5 Administration Guide Properties of Development Library 3 ES x| GroupWise v | General | NDS Rights + | Other | Rights to Files and Folders | Storage Areas Click a check box to use a storage area. To prevent data loss, a storage area record should never be deleted if data is stored at its path location. Storage Areas: M Development Document Storage Area T Store documents at post office Directory Page Options... | OK Cancel Apply | Help Existing document storage areas are listed. 3 Click Add to create a new document storage area. Create Document Storage Area =: E A storage area's path must be used by only one library and should never be modified unless the storage area is empty. Description: — O UNC Path: ft | Apple Talk Zone: [TY Unix Path: (OAO | ol cancel | Hem | 4 Provide a description for the document storage area. 5 Specify the UNC path to the directory where you want to create the document storage area. If the directory does not exist, it will be created as the document storage area is set up. As an alternative, you can specify an AppleTalk zone to store documents on an Apple* computer, or you can specify a UNIX path to store documents on a UNIX server. On Linux, you can specify a Linux path. The POA that will service the library must have direct access to the location you specify. 6 Click OK to create the new document storage area and add it to the list of storage areas for the library. If you have multiple document storage areas selected in the Storage Areas list, new and modified documents could be added to any one of them. 7 If you want to stop storing documents in the previous document storage area, deselect it in the Storage Areas list. 8 Click OK to save the document storage area information. Creating and Managing Libraries 291 Moving a Document Storage Area You might choose to move a document storage area if'it is close to exceeding the available disk space at its current location and you do not want to create an additional document storage area. To move a document storage area: 1 2 3 Stop the POA that services the library. See “Stopping the POA” on page 480. Copy the document storage area directory and all of'its contents to the desired location. Make sure that the POA will have access to the new location so that it can read and write documents in the document storage area. In ConsoleOne, browse to and right-click the Library object, then click Properties. Click Group Wise > Storage Areas to display the Storage Areas page. AA x GroupWise + | General | NDS Rights “| Other | Rights to Files and Folders | Storage Areas Click a check box to use a storage area. To prevent data loss, a storage area record should never be deleted if data is stored at its path location. Storage Areas: MF Development Document Storage Area T Store documents at post office Page Options... OK Cancel Apply | Help Existing document storage areas are listed. 6 Select a document storage area, then click Edit. 7 Provide the new location for the document storage area, then click OK twice to save the new document storage information. 8 Restart the POA. See “Starting the POA” on page 431. Deleting a Document Storage Area When you delete a document storage area, any documents in the document storage area are moved to other valid document storage areas for the library. If you want to move documents to a specific location before deleting the document storage area, see “Managing Groups of Documents” on page 305. To delete a document storage area: 1 In ConsoleOne, browse to and right-click the Library object that owns the document storage area, then click Properties. 2 Click Group Wise > Storage Areas to display the Storage Areas page. 292 GroupWise 6.5 Administration Guide Properties of Development Library E xj GroupWise v Storage Areas | General | NDS Rights v | Other | Rights to Files and Folders | Click a check box to use a storage area. To prevent data loss, a storage area record should never be deleted if data is stored at its path location. Storage Areas: M Development Document Storage Area TT Store documents at post office Page Options... OK Cancel Apply Help 3 Select a document storage area, then click Delete. 4 Click OK to close the Storage Areas page If the above steps are not successful in deleting a document storage area, perhaps because one or more documents were in use during the deletion process, you can use the Analyze/Fix Library action of Mailbox/Library Maintenance, with the Remove Deleted Storage Areas and Move Documents First options selected, to finish cleaning up the deleted document storage area. For more information, see Chapter 28, “Maintaining Library Databases and Documents,” on page 359. Managing Library Access Access to libraries is controlled by the rights users have to the Library object. By default, when a new library is created, all of the following rights are granted: Public Right Add Description Allows users to add new documents to the library. Change Delete View Allows users to make changes to existing documents in the library. Allows users to delete documents, regardless of who created them or has rights to the documents. However, to be able to delete a document, users must also have rights to locate and modify the document (View and Change rights), in addition to the Delete right. By itself, this right allows searching, viewing, or copying documents, but does not permit editing them. Copies can be edited, because a copy is saved as a separate document. Therefore, editing a copy will not affect the original document or any of its versions. Creating and Managing Libraries 293 Public Right Description Designate Official Allows any version of a document to be designated as the official version. The Version official version, which is not necessarily the most recently-edited version, is the one located in searches. The official version is usually determined by the creator or author of the document. However, the official version can be designated by the last user to edit the document (if the user has this right). A user also needs the Change right to the document to be able to designate an official version. Reset In-Use Flag The In-Use flag protects against data loss by preventing multiple users from concurrently opening the same document. The purpose of the Reset In-Use Flag right is to allow a user or librarian to reset a document's status when the document is in use by someone else or when it is erroneously flagged as in use. In the GroupWise client the document properties Status field displays the current In-Use flag setting for a document. The Status field is automatically set to In Use when a document is opened and reset to Available when a document is closed. There can also be other values, such as Checked Out. A document cannot be checked out when its status is In Use. There are a variety ofreasons for which you might want to restrict certain library rights, including: + Your libraries are specialized by department and you want to restrict access to sensitive libraries, such as a payroll library. + Your libraries are distributed across multiple post offices and you want to restrict the scope of user searches to only the libraries they should use, thereby speeding up searches. + Your libraries are distributed across multiple servers and you want to minimize network traffic. + You have some users who should have more rights than other users to certain libraries. To restrict public rights while granting individual rights: 1 In ConsoleOne, browse to and right-click the Library object, then click Properties. 2 Click Group Wise > Rights to display the Rights page. 3 Inthe Public Rights box, deselect the rights that you want to remove from all users. 4 Click Add, then browse to and select the users who need to have rights to the library. Ifthe number is large, you might find it easier to create a distribution list for users who need rights. Then you can select one distribution list rather than multiple users. See Chapter 18, “Creating and Managing Distribution Lists,” on page 239 5 In the Individual or Distribution List Rights box, select the users or distribution lists to grant rights to. 6 Below the list, select the rights that you want to grant. 294 GroupWise 6.5 Administration Guide Properties of Accounting Library M a xl GroupWise + Rights General | NDS Rights + | other | Rights to Files and Folders | fia Rights M Add View | M Change F Set official version IV Delete TO Resetin-use flag | [SE or Distribution List Rights E alan.Develop me nt.Provo1 |KHuang.Development.Provo1 [TM atijakovich.Development.Provo1 [> Manage (Librarian) Delete M Add M View M Change M Set official version M Delete M Resetin-use flag Page Options... | OK | Cancel | Apply | Help | In the first example, only two users are granted the Reset In-Use Flag right. Properties of Development Library ey xj General | NDS Rights + | other | Rights to Files and Folders | GroupWise v Rights Es Rights O Add O view | T Change E Set official version TO Delete I Resetin-use flag pl or Distribution List Rights E | | Engineers.Development.Provo1 T Manage (Librarian) [Y Add M View [Y Change Set official version Delete [Y Resetin-use flag Page Options... | oK | Cancel | Apply | Help | In the second example, only members of the Engineers group are granted any rights to the Development Library. 7 Click OK to save the updated library rights information. Adding and Training Librarians When you first create a library, you might for convenience assign yourself as the initial librarian. As library activity increases you can add librarians, and if desired, remove yourself as a librarian. + “Understanding the Role of the Librarian” on page 296 + “Setting Up a Librarian Group Wise Account (Optional)” on page 298 + “Assigning Librarians” on page 298 Creating and Managing Libraries 295 Understanding the Role of the Librarian Keep in mind the following when assigning librarians: + “Librarian Identity” on page 296 + “Librarian Functions” on page 296 + “Librarian Rights” on page 297 Librarian Identity Any Group Wise user with access to a library can be a librarian for the library. You can have multiple librarians for a single library. You can also assign a single user as a librarian for multiple libraries. Because being a librarian entails additional functions and rights in the library, you should choose responsible users as librarians. Librarian Functions A librarian can perform the following actions: + Check out a document without a copy. + Modify the properties of any document in the library. + Copy documents to another library. + Delete both documents and properties. + Reset a document’s status (change the In-Use flag). + View all activity log records of any document in the library. + Restore document BLOBs from backup. + Perform mass operations, such as moving, deleting, archiving, and changing properties. + Perform searches (but not full-text searches) on documents that are not available for searching by regular users. + Use GroupWise third-party APIs to generate reports on all library documents. All operations available to a normal user are also available to a librarian, as long as the security reguirement discussed under “Librarian Rights” on page 297 is not compromised. The intention is that librarians will be able to modify their own documents and document properties. All actions taken by a librarian are written to a document’s activity log. Unless the librarian’s own Group Wise user ID is in the Author or Security fields, a librarian cannot perform the following functions: + Open a document + View a document + Save a document + Check out a document with a copy To help new librarians get started, you should explain these librarian functions to them. You can also refer new librarians to the "librarian users" topic in the Group Wise client help. 296 GroupWise 6.5 Administration Guide Librarian Rights In addition to the six public rights, libraries also have a Manage right. When you grant the Manage right to a Group Wise user, you designate that user as a librarian. The Manage right gives the librarian full access to the properties of every document in the library. However, the Manage right does not grant the librarian direct access to the content of any document. Because a librarian has full access to document properties, the librarian could add his or her own personal Group Wise user ID to the Author or Security field of a document, thus gaining access to the document*s content. However, a high-priority e-mail notification would automatically be sent to the original person listed in the Author field informing him or her of the action by the librarian. Therefore, document privacy is maintained. The following table lists the various librarian functions, and whether an e-mail notification is sent if the function is performed. Librarian Function Notification? Modify the Author or Security fields High-priority e-mail to the author Copy a document High-priority e-mail to the author Delete a document High-priority e-mail to the author Replace a document with a copy from backup High-priority e-mail to the author Perform a mass document operation (copy, move, delete, or Mass operation e-mails archive documents; modify document properties) Reset a documents status (In-Use flag) None Check out a document without a copy None View the activity log of any document None Generate reports on any documents (using GroupWise third-party None APIs) Note that mass operation notifications do not specify what action was taken by the librarian; they only specify that an action was taken. The following table lists the document property fields which the librarian has rights to modify, and whether an e-mail notification is sent if the field is modified. Property Field Notification? Subject No Author Yes Security (sharing list) Yes Document Type No Version Description No Custom Fields No Creating and Managing Libraries 297 Property Field Notification? File Extension No Official Version No Current Version No If you remove the Manage right from a user, you will need to manually un-check any rights that the user gained from being made a librarian that the user did not previously have. Setting Up a Librarian GroupWise Account (Optional) The Manage right will always be in effect for those users who have been assigned as librarians. However, there might be times librarians will want to act on their own accord without the possibility of seeing or modifying documents that belong to other users. To allow users assigned as librarians to act as normal GroupWise users, you could create a single librarian account for a library and have users who need to perform librarian tasks log in using the librarian Group Wise account and password instead of their own. If users assigned as librarians log in under a librarian Group Wise account, they will not have access to any documents they would normally have access to under their own accounts, except by altering the Author or Security fields. Assigning Librarians 298 To add librarians to a library: 1 In ConsoleOne, browse to and right-click the Library object, then click Properties. 2 Click Group Wise > Rights to display the Rights page. 3 Click Add, browse to and select the users that you want to assign as librarians, then click OK to return to the Rights page. Properties of Accounting Library E E xj GroupWise v | General | NDS Rights + | Other | Rights to Files and Folders | Rights ¡Public Rights MF Add M View [Y Change Set official version Delete M Resetin-use flag Individual or Distribution List Rights ADharmapalan. Development Provoi | KHuang.Development.Provo1 Tmatijakovich.Development.Provo1 MV Manage (Librarian) Add Delete Add F vie [Z Bele F Page Options... OK Cancel Apply | Help 4 In the Individual or Distribution List Rights box, select the librarian users, select Manage (Librarian), then click OK to save the library rights changes. GroupWise 6.5 Administration Guide Maintaining Library Databases The Mailbox/Library Maintenance feature of ConsoleOne offers database maintenance features to keep your library and document databases in good condition. See Chapter 28, “Maintaining Library Databases and Documents,” on page 359. It also helps you manage the disk space occupied by library and document databases and document storage areas. See “Reducing the Size of Libraries and Document Storage Areas” on page 371. When document creators or authors are removed from your GroupWise system, orphaned documents might be left behind. See “Handling Orphaned Documents” on page 329. To supplement your library maintenance procedures, you should back up your libraries and documents regularly. See “Backing Up a Library and Its Documents” on page 376. Moving a Library You cannot move a Library object from one location to another in the eDirectory tree. To accomplish the equivalent, you would need to create a new library in the desired location, use a mass move operation in the Group Wise client to move the library’s documents from the old library into the new library, and then delete the old library. As an alternative to moving the library, you could move just its document storage areas. See “Moving a Document Storage Area” on page 292. Deleting a Library You should not delete a library until you make sure that all documents still in the library are no longer needed. 1 In ConsoleOne, browse to and right-click the Post Office object that owns the library to delete, then click Properties. 2 Click GroupWise > Libraries to display the Libraries page. Properties of Manufacturing = xj IDS Rights + | Other | Rights to Files and Folders | Libraries: Manufacturing Library. GroupWise.Provo Page Options... ( Cancel ; Help 3 Select the library to delete, then click Delete. All document storages areas and documents are deleted along with the library. 4 Click OK to close the Libraries page and complete the deletion of the library. Creating and Managing Libraries 299 Library Worksheets + “Basic Library Worksheet” on page 300 + “Full-Service Library Worksheet” on page 301 Basic Library Worksheet For instructions on how to use this worksheet, see “Planning a Basic Library” on page 269. Item 1) eDirectory Container: 2) Library Name: 3) Post Office: 4) Store Documents atthe Post Office? + No + Yes 5) Document Storage Area Description: 6) Document Storage Area Path: 7) Library Description: 8) Display Name: Explanation Specify the eDirectory container where you will create the Library object. This could be the same container as the post office that the library is assigned to. The Library object cannot later be moved to a different location. For more information, see “Determining the Context for the Library Object” on page 270. Specify a name for the new library. Choose the name carefully. After the library is created, it cannot be renamed. For more information, see “Choosing the Library Name” on page 270. Indicate which post office the library will belong to. A library cannot later be assigned to a different post office. For more information, see “Selecting the Post Office That the Library Will Belong To” on page 270. Mark No unless you are absolutely certain you will never need to move the documents stored at the post office For more information, see “Deciding Where to Store Documents” on page 271. Enter a brief description for the document storage area, including such information as to which post office it belongs, its current capacity in megabytes, and the types of documents that might be stored in it. For more information, see “Deciding Where to Store Documents” on page 271. If you are not storing documents at the post office, specify the document storage area for the library. For more information, see “Deciding Where to Store Documents” on page 271. Provide a description for the library to help you identify its function in the system. For more information, see “Choosing the Library Name” on page 270. Specify the library name you want users to see in the GroupWise client, ifit is different from the Library object name. For more information, see “Choosing the Library Name” on page 270. 300 GroupWise 6.5 Administration Guide Full-Service Library Worksheet For instructions on how to use this worksheet, see “Planning Full-Service Libraries” on page 273. Item Explanation 1) eDirectory Container: Specify the name ofthe eDirectory container where you will create the Library object. This could be the same container as for the post office that owns the library. The Library object cannot later be moved to a different context. For more information, see “Determining the Contexts for Library Objects” on page 278. 2) Library Name: Specify a name for the new library. Choose the name carefully. After the library is created, it cannot be renamed. For more information, see “Choosing Library Names” on page 278. 3) Post Office: Specify the post office that the library will belong to. A library cannot later be assigned to a different library. If you will using a centralized library configuration and you have not yet created the DMS post office, follow the instructions in Chapter 11, “Creating a New Post Office,” on page 147 before you begin creating libraries. For more information, see “Deciding Which Libraries to Create” on page 274. 4) Document Usage Estimate: Calculate how much disk space the new library will need in order to help you a) Number of DMS users: select a location where you will store documents. b) Average number of documents per user: c) Average document size (bytes): d) Average number of versions per document: For more information, see “Deciding Where to Store Documents” on page 279. e) Total: (multiply a times b times c times d) 5) Document Storage Area Description: Provide a brief description for the document storage area, including such information as which library it belongs to, its current capacity in megabytes, and the types of documents stored in it. For more information, see “Deciding Where to Store Documents” on page 279. 6) Document Storage Area Path: Specify the UNC path to the location where you want to create the initial document storage area for the post office. For more information, see “Deciding Where to Store Documents” on page 279. 7) Library Description: Provide a brief description for the new library, including what post office it belongs to, what types of documents will be stored in it, and so on. For more information, see “Deciding Which Libraries to Create” on page 274. 8) Start Version Number: Select 0 or 1. 29 For more information, see “Setting Document Version Options” on page 281. + 1 Creating and Managing Libraries 301 Item 9) Maximum Archive Size: 10) Display Name: 11) Restrict Public Library Rights: + Add * Change + Delete + View + Designate Official Version + Reset In-Use Flag 12) Librarians: 13) Dedicated POA for Indexing + Yes + No 14) Set Up Integrations + Yes + No Explanation Specify the maximum number of bytes to allow per archive directory. Use a size that conforms with your backup strategy and backup medium requirements. For more information, see “Figuring Maximum Archive Directory Size” on page 281. Specify the library name you want users to see in the GroupWise client, if it is different from the Library object name. For more information, see “Choosing Library Names” on page 278. Cross out any public library rights you do not want all users to have. For more information, see “Deciding Which Libraries to Create” on page 274 or “Setting Document Version Options” on page 281. List any users you want to have full rights to all documents in the library. For more information, see “Designating Initial Librarians” on page 282. Mark whether or not you want to configure and run a separate POA dedicated to indexing documents. For more information, see “Determining Your Indexing Needs” on page 284. Mark whether or not you will need to manually set up integrations. For more information, see Chapter 24, “Integrations,” on page 331. 302 GroupWise 6.5 Administration Guide Creating and Managing Documents Group Wise” Document Management Services (DMS) lets Windows client users create documents with integrated applications, save them, then easily locate a specific document later without knowing the application, a specific document name, or the document’s physical location. Windows client users can create, share, locate, edit, view, and check out documents that are created under the management of Group Wise DMS. + “Adding Documents to Libraries” on page 303 + “Organizing Documents” on page 306 + “Indexing Documents” on page 319 * “Managing Documents” on page 328 NOTE: Cross-Platform client users have only basic DMS capabilities, as described in “Working with Documents” in GroupWise 6.5 Cross-Platform Client User Guide. Adding Documents to Libraries After you set up one or more libraries, users can add new documents to any library to which they have rights. They can also import existing documents into the Group Wise DMS system. + “Creating New Documents in the GroupWise Windows Client” on page 303 + “Importing Existing Documents into the Group Wise DMS System” on page 304 * “Managing Groups of Documents” on page 305 Creating New Documents in the GroupWise Windows Client To create a new document in the Group Wise Windows client: 1 Click File > New > Document. (° Select an application C Select a GroupWise template C Select a file Cancel Applications: Adobe FrameMaker Document Bitmap Image Microsoft Excel Worksheet Microsoft Office Binder Microsoft PowerPoint Presentation Microsoft Word Document Netscape Hypertext Document Netscape Hypertext Document Library where document will be stored: [Development Library 2 Select the program you want to use to create the document, select the library where you want to store the document, then click OK. Creating and Managing Documents 303 3 In the New Document dialog box, type a brief description of the document. Document subject: El FP Open document now Cancel Properties... 4 To set document properties, click Properties. Document | Version | Sharing | Activity Log| Library: Development Library Document number: Subject: FE Document type: [Document = Author fHaywWong gi Creator: Date created: 06/11/01 10:314M Official version: 0 Current version: I Open document now Cancel 5 Set the document properties as needed, then click OK. The selected program starts so you can create a new document. For more detailed information about creating documents in the GroupWise client, see “Creating Documents” in “Creating and Working with Documents” in the GroupWise 6.5 Windows Client User Guide. You can also look up "documents" in the GroupWise client help. Importing Existing Documents into the GroupWise DMS System Some users might have existing documents that they want to manage by adding them to a Group Wise library. To import documents using the GroupWise Windows client: 1 Click File > Import Documents. 304 GroupWise 6.5 Administration Guide Select Files to Import E E xj Novell. Files to import: B Add Individual Files... Add Entire Directory... [Y Quick import (Recommended) Copies documents to your default library and creates document references in the folder you specify. Bac Newt | i 2 Click Add Individual Documents, browse to and select the documents to add, then click OK. or Click Add Entire Directory, browse to and select a directory containing documents to import, then click OK. For additional instructions about creating documents in the Group Wise client, see “Importing Documents into a GroupWise Library” in “Creating and Working with Documents” in the GroupWise 6.5 Windows Client User Guide. You can also look up "import documents" in the GroupWise client help. Managing Groups of Documents As users add documents and your Group Wise DMS system grows, your librarians might need to assist users in managing large groups of documents. If you have not yet assigned librarians to your Group Wise libraries, see “Adding and Training Librarians” on page 295. To manage large groups of documents in the GroupWise Windows client: 1 Click Tools > Mass Document Operations. x Select the operation you want to perform. The operation will affect all versions of a document. Operation C Change properties C Change sharing E C Copy C Delete Selection method @ Use Find/Advanced Find to select documents C Use Find by Example to select documents C Use currently selected documents C Use documents listed in a file 2 Select the operation to perform on the group of documents: + Change properties + Move Creating and Managing Documents 305 + Delete + Change sharing + Copy 3 Select the method for identifying the group of documents to perform the operation on: + Use Find/Advanced Find to select documents + Use Find by Example to select documents + Use currently selected documents + Use documents listed in a file. For additional instructions about creating documents in the GroupWise client, see “Managing Groups of Documents” in “Creating and Working with Documents” in the GroupWise 6.5 Windows Client User Guide. You can also look up "mass document operations" in the Group Wise client help. Organizing Documents Because documents are stored in a database structure, information can be associated with each document that is not part of the document itself. This additional information is stored as document properties. + “Customizing Document Properties” on page 306 + “Defining Related Document Properties” on page 314 NOTE: Document properties cannot be set in ConsoleOne on Linux. However, you can use ConsoleOne on Windows to set document properties for libraries that are located on Linux. Customizing Document Properties For a summary of document properties, see “Document Properties” on page 265. To review, the following document properties are provided by default: Author Creator Current Version Number Date Created Document Number Document Type Official Version Number Subject The default document property types cannot be deleted. Except for the Document Type property, they cannot be modified. However, you can add custom document types as needed. + “Customizing the Default Document Type Property” on page 307 + “Planning Custom Document Properties” on page 308 + “Adding Custom Document Properties” on page 310 + “Planning Custom Lookup Tables for Custom Document Properties” on page 312 + “Adding Custom Lookup Tables” on page 313 306 GroupWise 6.5 Administration Guide Customizing the Default Document Type Property The Document Type property is the only default document property that you can modify. For a review of document types, see “Document Types” on page 266. You must have at least one document type, because it is a reguired document property field. To modify the Document Type property for all libraries in a post office: 1 InConsoleOne* on Windows, browse to and select the post office that has libraries where you want to modify the Document Type property. 2 Click Tools > Group Wise Utilities > Document Properties Maintenance. ‘a Document Properties Maintenance EME File Edit Help E #/21= EP PROVOT.DEVELOPMENT + PEE E- -G Lookup Tables If you expand Libraries and select each library, you will see that each library has the Document Type property. It is required. 3 Expand Lookup Tables, then select Document Type. “a Document Properties Maintenance Eile Edit Help Td +l2|=| 7 PROVO1.DEVELOPMENT 99 E- -H Libraries Archive |<... Development Library Archive 33 oa P Research Library Archive 99 E- - Lookup Tables Archive tee [Document Types Archive 99 Archive 33 Archive 99 Archive 99 Delete 99 Archive 99 Archive 30 The lookup table defines the list of choices offered to users when they select a document type, no matter which library in the post office they are creating the document in. 4 To add a new document type, click Edit > Add. In the Value field, type the new document type, click Add, then click Close. Lookup Entry: Document Type Expiration Action Maximum Versions: 100 Archive Document Life (days) [365 © Retain © Delete Close Help 5 To edit an existing document type, click Edit > Edit. Change the settings as needed, click Update, then click Close. Creating and Managing Documents 307 Lookup Entry Document tye Value: Expiration Action Maximum Versions: 100 | @ Archive | Document Life (days) [99 C Retain C Delete Cancel Help For more details about the fields associated with the Document Type property, see “Document Types” on page 266. 6 To delete a document type, select the document type, click Edit, then click Delete. Planning Custom Document Properties When you need to add custom document properties, print the “Custom Document Properties Worksheet” on page 309. One copy of the worksheet accommodates three new document properties. The following table describes the fields and values associated with custom document properties: Document Property Field Values Field Property Field: The document property field is the label that GroupWise client users will see in the document Properties dialog box. When you create a new document property, you can provide a description as well. However, the description displays only in ConsoleOne, not in the GroupWise client. Read-Only? Yes: The document property field will display information, but it will not be accessible to users. No: Users can type in the document property field. Required? Yes: The user must supply a value for the document property. No: The user can leave the document property field blank. Hidden? Yes: The document property field is not displayed in the GroupWise client interface. No: The document property field is displayed in the GroupWise client interface. Lookup Table: A lookup table is required for a custom document property only when you want to offer the user a list of choices, rather than having the user type in the setting. The lookup table guarantees that the user provides a valid setting. For more information, see “Planning Custom Lookup Tables for Custom Document Properties” on page 312. Related Property: A related property is required for a custom document property only when you create a lookup table that references a related lookup table. For more information, see “Defining Related Document Properties” on page 314. 308 GroupWise 6.5 Administration Guide Document Property Field Data Type: Maximum Length: Case: Minimum Value: Maximum Value: Parent: Field Values Binary: An Object API reads and writes this information Date: Displayed in the Windows format selected by the user Number: Numerical only String: Alphanumeric For the String data type, you can specify the maximum number of characters allowed in the string. The longest possible string is 65535 alphanumeric characters. For the String data type, you can control how the user's input is handled: Upper: Forces entries to display in uppercase Lower: Forces entries to display in lowercase Mixed: Allows alphabetical characters to be displayed as typed For the Number data type, you can specify a minimum acceptable value. For the Number data type, you can specify a maximum acceptable value. If the new document property is related to an existing document property in a parent-child relationship, you must specify the parent document property. For more information, see “Defining Related Document Properties” on page 314. Use copies of the “Custom Document Properties Worksheet” on page 309 to plan the custom document properties you want to add to libraries. If you need to create one or more lookup tables for your custom document properties, follow the instructions in “Planning Custom Lookup Tables for Custom Document Properties” on page 312 and “Adding Custom Lookup Tables” on page 313. Lookup tables used by new document properties should exist before you create custom document properties. Then continue with “Adding Custom Document Properties” on page 310. Custom Document Properties Worksheet For instructions on how to use this worksheet, see “Planning Custom Document Properties” on page 308. Item 1) Post Office: 2) Libraries: 3) Property Label: Custom Document Custom Document Custom Document Property Property Property Creating and Managing Documents 309 Item Custom Document Custom Document Custom Document Property Property Property 4) Description: 5) Read-Only? + Yes * No 6) Reguired? + Yes * No 7) Hidden? + Yes + No 8) Lookup Table: 9) Data Type: + Binary + Date + Number + String 10) Maximum Length: 11) Case: + Mixed + Upper + Lower 12) Minimum Value: 13) Maximum Value: 14) Parent: Adding Custom Document Properties After you have determined what new document properties will meet the needs of your DMS system, as described in “Planning Custom Document Properties” on page 308, and if necessary you have created lookup tables for your new document properties, as described in “Planning Custom Lookup Tables for Custom Document Properties” on page 312 and “Adding Custom Lookup Tables” on page 313, you are ready to add new custom document properties. To add new custom document properties: 310 GroupWise 6.5 Administration Guide 1 In ConsoleOne on Windows, browse to and select the Post Office object that owns the library for which you are creating custom document properties (worksheet item 1). 2 Click Tools > Group Wise Utilities > Document Properties Maintenance. Wa Document Properties Maintenance Mr ee. = Bj xj Eile Edit Help E +|2|= ©? PROVO1.DEVELOPMENT ET Libraries} 6- -E Lookup Tables 3 Expand Libraries, then select the library for which you are creating custom document properties (worksheet item 2). “a Document Properties Maintenance File Edit Help +|2|= ‘Bp PROVOT.DEVELOPMENT E a) Libraries [Property Field [Data Type | Lookup Table _ [Required Read-only | Hidden | Max Length Text Case Author String Yes No No 256 Mixed Creator String No Yes No 256 Mixed Current Ver # Number No Yes No - : Date Created Date No Yes No Document Number Number No Yes No - 5 Document Type String Document Type ‘Yes No No 65535 Mixed Official Ver # Number No Yes No : : String No No No 65535 Mixed 1 ka Ff Research Library 6- -§ Lookup Tables + [CAPs 4 Click Edit > Add to display the Document Property Definition dialog box. Document Property Definition y xl Property Label: [ Description: | Cancel | T Read-only F Required Help T Hidden Lookup Table: [oO E Related Property: — | (none) + Data Type: [String y ] Maximum Length: [65535 Case: [Mixed y ] Fields vary according to data type. 5 Fill in the fields (worksheet items 3 through 14). 6 Click OK to create the new custom document property. In the Document Properties Maintenance window, the new document property is listed in alphabetical order. In the GroupWise client, custom document properties are listed after default document properties, in the order in which they are added to the library. 7 Repeat Step 4 through Step 6 for each new custom document property. When users next create documents in the library, the new custom document properties will be available to them. Creating and Managing Documents 311 Planning Custom Lookup Tables for Custom Document Properties A lookup table is required for a custom document property only when you want to offer the user a list of choices, rather than having the user type in the setting. The lookup table guarantees that the user provides a valid setting. Lookup tables are defined for the post office, so that multiple libraries in the post office can reference the same lookup tables. When you need to provide lookup tables for custom document properties, print the “Custom Lookup Tables Worksheet” on page 313. One copy of the worksheet accommodates three new lookup tables. The following table describes the fields and values associated with lookup tables: Look Up Table Field Field Values Lookup Table Name: The lookup table name identifies the lookup table when you are assigning it to a property field. If the lookup table pertains to only one document property, you can name the lookup table the same as the document property. For example, the default property Document Type uses a lookup table named Document Type. However, lookup tables can be used by multiple document properties. For example, you could have a lookup table named Project used by document properties named Primary Project and Secondary Project. When you create a new lookup table, you can provide a description as well. If the lookup table name does not match a document property, you could indicate what document properties use the lookup table. Related Table: A related table is required for a lookup table only when you want to define related properties. For more information, see “Defining Related Document Properties” on page 314. Data Type: Binary: An Object API reads and writes this information Date: Displayed in the Windows format selected by the user Number: Numerical only String: Alphanumeric Maximum Length: For the String data type, you can specify the maximum number of characters allowed in the string. The longest possible string is 65535 alphanumeric characters. Case: For the String data type, you can control how the user’s input is handled: Upper: Forces entries to display in uppercase Lower: Forces entries to display in lowercase Mixed: Allows alphabetical characters to be displayed as typed Minimum Value: For the Number data type, you can specify a minimum acceptable value. Maximum Value: For the Number data type, you can specify a maximum acceptable value. Lookup Table The lookup table entries are the settings that users will choose from when they Entries: set the custom document property. 312 GroupWise 6.5 Administration Guide Use copies of the “Custom Lookup Tables Worksheet” on page 313 to plan the lookup tables you need in order to provide values for new custom document properties. If you need to use related properties, follow the instructions in “Defining Related Document Properties” on page 314. Then continue with “Adding Custom Lookup Tables” on page 313. Custom Lookup Tables Worksheet For instructions on how to use this worksheet, see “Planning Custom Lookup Tables for Custom Document Properties” on page 312. Item Custom Custom Custom Lookup Table Lookup Table Lookup Table 1) Post Office: 2) Property Label: 3) Lookup Table Name: 4) Description: 5) Related Table: 6) Data Type: + Binary + Date + Number + String 7) Maximum Length: 8) Case: + Mixed + Upper + Lower 9) Minimum Value: 10) Maximum Value: 11) Lookup Table Entries: Adding Custom Lookup Tables After you have determined what new lookup tables and lookup table entries you need to accommodate your new custom document properties, as described in “Planning Custom Lookup Tables for Custom Document Properties” on page 312, you are ready to add new lookup tables. Creating and Managing Documents 313 1 In ConsoleOne on Windows, browse to and select the Post Office object that owns the libraries for which you are creating lookup tables (worksheet item 1). 2 Click Tools > Group Wise Utilities > Document Properties Maintenance. ' Document Properties Maintenance ici i File Edit Help EH tll P PROVO1.DEVELOPMENT 6- -§ Lookup Tables 3 Select Lookup Tables, then click Edit > Add to display the Lookup Table Definition dialog box. Lookup Table Definition x Table Name: | Description: Cancel Related Table: — [inone) ja Help Data Type: String +] Maximum Length: [65535 Case: Mixed y ] Fields vary depending on data type. 4 Fill in the fields (worksheet items 3 through 10). 5 Click OK to create the new lookup table. 6 Select the new lookup table, then click Edit > Add to display the Lookup Entry dialog box. x Close Help 7 Inthe Value field, type one of the document property settings you want to offer to users (worksheet item 11), then click Add. 8 Repeat Step 7 for all the lookup table entries listed on your worksheet for this lookup table, then click Close. 9 Click OK to create the custom lookup table. Defining Related Document Properties When document properties are related, your choice for the first property determines the settings you are offered for the second property. For example, in the Development Library, custom document properties could be set up to indicate product and component information about every document in the library. Then, when users create new documents, Product and Component fields appear on the document Properties page. 314 GroupWise 6.5 Administration Guide Document | Version | Sharing | Activity Log| Library: Development Library Document number: Subject: J Document type: [Document | = Author: [Hany Wong O ë Creator: Date created: 06/12/01 04:24PM Official version: 0 Current version: Product: | = Component: b rn E T Open document now Cancel The user’s selection in the Product field would determine what choices were offered in the Component field. Related document properties are set up by creating related lookup tables. Complete the following tasks to set up related document properties: + “Planning Related Document Properties” on page 315 + “Creating Related Lookup Tables” on page 317 + “Setting Up Related Document Properties” on page 318 Planning Related Document Properties Related document properties use a parent-child relationship. A parent property can have multiple child properties, but a child property can belong to only one parent. The relationship can include only two levels. A parent property cannot function as a child and a child property cannot function as a parent. The default document properties cannot participate as related properties. In the Development Library example above, the Product document property would be the parent property and the Component document property would be the child property. If the Development Library belonged to Novell®, products would include GroupWise, NetWare®, ZENworks®, and so on. When users selected GroupWise as the product, listed components could include the Group Wise client, the agents, Group Wise system administration, and so on. Or you could let users type in whatever components they wanted. When you need to set up related document properties, print the “Related Document Properties Worksheet” on page 317. One copy of the worksheet accommodates one pair of related property fields, one parent lookup table, and one child lookup table (optional). The following table describes the document properties and lookup tables that are required in order to set up related document properties: Properties and Tables Description Parent Document Property The parent document property is the user's first selection. In the Development Library example above, the parent document property is Product. Creating and Managing Documents 315 Properties and Tables Description Child Document Property The child document property is the user's second selection, based on the first selection. In the Development Library example above, the child document property is Component. Parent Lookup Table The entries in the parent lookup table provide the choices offered to the user in the parent document property field. In the Development Library example above, the user could select from GroupWise, NetWare, and ZENworks in the Product field. Child Lookup Table The entries in the child lookup table provide the choices offered to the user after a choice from the parent lookup table has been selected. In the Development Library example above, if the user selected GroupWise in the Product field, the child lookup table would provide choices such as Agents, Client, and Admin in the Component field. The child lookup table is not required if you want to allow the user to type in anything they want in the child document property field. Use copies ofthe “Related Document Properties Worksheet” on page 317 to plan the related document properties you want to use. One copy ofthe worksheet accommodates one pair ofrelated properties. Continuing with the Development Library example, a filled-in worksheet might look like this: Item Setting Item Setting 1) Parent Property Name: 4) Child Property Name: Document Property Product Document Property Component 2) Parent Table Name: 5) Child Table Name: Lookup Table Product Lookup Table Component 3) Parent (required) 6) Child (optional) Lookup Entries Lookup Entries Parent Entry: Child Entries: GroupWise Admin Agents Client Parent Entry: Child Entries: NetWare Client eDirectory Servers Parent Entry: Child Entries: ZENworks Desktops Servers When you have finished planning related properties and their associated lookup tables, you should print and fill in a worksheet for each for each new related property, as described in “Planning Custom Document Properties” on page 308, and for each new lookup table, as described in “Planning Custom Lookup Tables for Custom Document Properties” on page 312. Then you are ready to continue with “Creating Related Lookup Tables” on page 317. 316 GroupWise 6.5 Administration Guide Related Document Properties Worksheet For instructions on how to use this worksheet, see “Planning Related Document Properties” on page 315. Item 1) Parent Document Property 2) Parent Lookup Table 3) Parent Lookup Entries Creating Related Lookup Tables Setting Name: Name: (reguired) Entry: Entry: Entry: Item Setting 4) Child Name: Document Property 5) Child Name: Lookup Table 6) Child (optional) Lookup Entries Entries: Entries: Entries: If you are supplying the choices for both related fields, you need both a parent lookup table and a child lookup table. If you are going to have users type information into the child property field, then you only need to create the parent lookup table. You should create lookup tables before creating the document properties that use them. + “Creating the Parent Lookup Table” on page 317 + “Creating the Child Lookup Table (Optional)” on page 318 Creating the Parent Lookup Table 1 Create a new lookup table, as described in Step 1 through Step 5 in “Adding Custom Lookup Tables” on page 313. Use worksheet item 2 in the Table Name field. Leave the Related Table field set to (none). 2 Add entries to the new lookup table, as described in Step 6 through Step 8 in “Adding Custom Lookup Tables” on page 313. Use the entries listed under worksheet item 3 in the Value field. 3 Continue with “Creating the Child Lookup Table (Optional)” on page 318 or Creating and Managing Documents 317 If you are going to have users type information into the child property field, rather than selecting from a predefined list, skip to “Setting Up Related Document Properties” on page 318 Creating the Child Lookup Table (Optional) 1 Create a new lookup table, as described in Step 1 through Step 5 in “Adding Custom Lookup Tables” on page 313. Use worksheet item 5 in the Table Name field. Use worksheet item 2 in the Related Table field to link the child table to the parent table. 2 Select the new lookup table, click Edit, then click Add to display the Lookup Entry dialog box. Lookup Entry E xj This table is a child in a relationship. Select a value from the parent table, then enter the child table's values. Parent Value: [ECM Close Help 3 Select a Parent value. 4 Inthe Value field, type one of the child lookup table entries for the selected parent value (worksheet item 6), then click Add. 5 Repeat Step 4 for each entry listed under worksheet item 6. 6 Repeat Step 3 through Step 5 for each parent value listed under worksheet item 3. 7 Continue with “Setting Up Related Document Properties” on page 318 Setting Up Related Document Properties After you have created related lookup tables, you are ready to set up the related document properties that use them. A few document property fields are required settings in the context of related properties: + Read-Only must be set to No. + Hidden must be set to No. + Required must be set the same on the child property as it is on the parent property. To set up related document properties: 3 1 Create the parent document property as described in “Adding Custom Document Properties” on page 310. Use worksheet item 1 in the Property Label field. Use worksheet item 2 in the Lookup Table field. Leave the Related Property field set to (none). 2 Create the child document property using the same procedure. Use worksheet item 4 in the Property Label field. Use worksheet item 5 in the Lookup Table field. The Related Property field should automatically display as worksheet item 1, showing that the child property is related to the parent property. 318 GroupWise 6.5 Administration Guide Indexing Documents Documents stored in GroupWise libraries need to be indexed so users can locate documents using the Find feature in the Group Wise Windows client. Your organization might need dedicated indexing to minimize performance degradation and network congestion. You might also need dedicated indexing so users can have prompt access to newly-created documents. + “Understanding DMS Indexing” on page 319 + “Determining Your Indexing Needs” on page 326 + “Implementing Indexing” on page 327 Understanding DMS Indexing Index Storage Index Content Before determining if you will need dedicated indexing, you should have a basic understanding of how indexing works in GroupWise. + “Index Storage” on page 319 + “Index Content” on page 319 + “Indexing Performed by the POA” on page 320 + “Indexing Cycle” on page 320 + “Bandwidth Considerations” on page 320 + “Indexer Configurations” on page 321 When documents are indexed, the information is stored in QuickFinder™ indexes, which are located in a library’s index subdirectory. A library’s QuickFinder index is partitioned into ten *.idx files. Additionally, temporary *.inc (incremental) files are created that contain each day’s new index information. The *.inc files are combined once per day into the *.idx files (usually at midnight). In a system with multiple libraries, each library has its own set of QuickFinder index files. Depending on how many libraries belong to a post office, and how many post offices with libraries are in your Group Wise system, there can be many sets of QuickFinder index files. Indexing can include a document’s full text (depending on its document type), and always includes the document’s property sheet information (subject, author, version descriptions, and so on). Both newly-edited and newly-created documents are indexed, which means indexing volume is determined by how many existing documents are edited as well as how many new documents are created. Newly-created documents must be indexed before users can search for them. In setting up your indexing strategy, you must know how quickly users will need access to newly-created documents. The standard search is limited to the QuickFinder indexes in the user’s default library. But users can choose to search for documents in other libraries to which they have access. Creating and Managing Documents 319 Indexing Performed by the POA Indexing Cycle Indexing is among the many functions of the Post Office Agent (POA). To learn more about POA functions, see “Role of the Post Office Agent” on page 423. You can configure the POA for a post office to meet basic indexing needs. See “Regulating Indexing” on page 514. To support greater indexing needs, you can set up an additional POA that is dedicated to indexing. See “Configuring a Dedicated Indexing POA” on page 516. Not all libraries need dedicated POAs for indexing documents because indexing needs vary widely: + [na small GroupWise system that has only one post office and one library, indexing can easily be done by the one POA. + Ina post office with heavy DMS usage, one or more additional POAs can be dedicated to indexing the documents. + Ina large system that has a DMS post office housing all libraries in the Group Wise system, indexing can be done by the DMS post office’s POAs. A library can have more than one POA dedicated to indexing its documents. Because the library’s QuickFinder index is partitioned into ten separate *.idx files, an organization that is extremely document-intensive can boost indexing performance by using up to ten POAs dedicated to indexing. These POAs will not conflict with each other in performing indexing because the *.idx and *.inc files are locked during the indexing process. You can temporarily use multiple indexing POAs for importing documents to speed up importing time. The frequency of indexing is determined by the POA QuickFinder Interval setting. The default is once every 24 hours at 8:00 p.m. This might be often enough in an organization where document usage 1s minimal, or where searching for newly-created documents is not mission-critical. You can specify the QuickFinder Interval setting in one-hour increments. For example, a setting of 1 would allow users to find documents created as recently as an hour ago. Whether you should use a dedicated indexer at this frequency would depend on the volume (per hour) of documents that get queued for indexing. You can set the QuickFinder Interval to 0 (zero) for continuous indexing. This is recommended for organizations where document usage is intensive, or where users routinely need to find documents that have just been created. If document usage is intensive in your organization, you might need a separate indexer server dedicated to continuous indexing because the post office server’s performance could become unacceptably slow if continuous indexing is performed on it. Bandwidth Considerations A primary factor in network speed is bandwidth. This is the amount of data that can be passed through the network per second. If a network’s bandwidth is not sufficient for handling heavy traffic, intensive document indexing can degrade network performance. A number of elements affect network bandwidth: cable types, transmission protocols, and hardware. Ethernet networks are susceptible to wide fluctuations in transmission speed during periods of heavy traffic. WANs can benefit from reduced network traffic. 320 GroupWise 6.5 Administration Guide If you locate a post office in close proximity to its users, you will have less traffic through routers, bridges, and other network hardware. Running GroupWise in client/server access mode also reduces network traffic. Group Wise users can add heavy messaging traffic to your existing network. DMS usage will add document indexing traffic as well. These factors could create much more network bandwidth usage than you have previously experienced. Indexer Configurations Following are five basic examples of how dedicated indexers can be configured. The examples do not cover all possibilities. You can combine elements from these configurations to customize indexing for your organization. In all configuration examples, the post office can contain multiple libraries, although the Single Server with One POA configuration is best suited to only one library. In the other configuration examples, one or more POAs can be set up for indexing documents for all libraries in the post office. + “Single Server with One POA” on page 321 + “Single Server with Multiple POAs” on page 322 + “Dedicated Indexer Server” on page 322 + “Dedicated Indexer Server on an Isolated Network Segment” on page 324 + “Dedicated DMS Post Office” on page 325 Single Server with One POA One POA runs on the post office server and performs all POA functions for the post office and its libraries. This basic configuration is best suited for a small system, or a decentralized library configuration with small post offices that each have a library. For more information, see “Centralized vs. Decentralized Library Configurations” on page 274. Post Office $ Library T Y Message User Library Document Database Database Database Database GroupWise Client GroupWise Client GroupWise Client GroupWise Client Workstation Workstation Workstation Workstation Creating and Managing Documents 321 Advantages + Default configuration; no additional setup is reguired. Disadvantages + Alloperations are performed on one server, which can cause performance degradation if your + Troubleshooting is limited to a single organization does enough DMS operations. server. + If you increase QuickFinder intervals to lessen the load on the POA, you lengthen the time users must wait to search for new files, or find modified information through new searching keywords. Single Server with Multiple POAs It is possible to run more than one POA for the same post office on the same server. Post Office jä Library ge ogge Message User Library Document Database Database Database Database POA POA È SP Production | | Network Segment & GroupWise Client GroupWise Client GroupWise Client GroupWise Client Workstation Workstation Workstation Workstation Advantages Disadvantages None. * Many processes running on one server can slow it down. + Single point of failure can cause the server to shut down when a problem is encountered. There are no advantages to running multiple POAs on the same server. If you need more than one POA, run it on a separate server, as described in “Dedicated Indexer Server” on page 322 Dedicated Indexer Server You can have the post office on one server and a POA dedicated to indexing DMS documents on another server. This configuration is useful for systems of any size with heavy DMS usage. 322 GroupWise 6.5 Administration Guide Post Office P Library ge MMM) Message User Library Document eH Database Database Database Database POA 1 È Production Network Segment GroupWise Client GroupWise Client GroupWise Client GroupWise Client Workstation Workstation Workstation Workstation Advantages Disadvantages + Dedicated server for quicker DMS indexing. This is useful for organizations that are document-intensive. + Network traffic can increase significantly during periods of intense indexing. + Multiple server hardware is required. + Messaging post office is not hampered by DMS indexing. Creating and Managing Documents 323 Dedicated Indexer Server on an Isolated Network Segment You can have the post office on one server and a POA dedicated to indexing documents on another server that is on an isolated network segment. This configuration minimizes bandwidth congestion for the production network segment. Post Office Library a d Isolated Network Message User Library Document Database Database Database Database POA 1 È Production | Network Segment GroupWise Client GroupWise Client GroupWise Client GroupWise Client Workstation Workstation Workstation Workstation Advantages Disadvantages + Dedicated server for quicker DMS + Multiple server hardware is required. indexing. This is useful for organizations that are document-intensive. Dedicated network segment is required (including second network interface card that + Messaging post office is not hampered is directly linked to the indexer server). by DMS indexing. + For multiple indexing servers, a dedicated + The large amount of information that is hub might be needed. passed between the post office server and the indexing server does not congest the bandwidth of the production network segment. 324 GroupWise 6.5 Administration Guide Dedicated DMS Post Office You can have one post office that is dedicated to messaging and another to DMS. This configuration is useful for post offices that have heavy DMS usage. For a review of this configuration, see “Centralized Libraries” on page 274. User DMS Post Office Post Office Library Q Library oo à N =f - Library Document Database Database User Message Database Database POA 1 POA 2 È Production SP | Network Segment | & GroupWise Client GroupWise Client GroupWise Client GroupWise Client Workstation Workstation Workstation Workstation Advantages Disadvantages + Dedicated POA for quicker DMS ¢ High-end hardware is required for DMS indexing. This is useful for organizations server. ALAN MENS + Additional post office and POA to be + Messaging post office is not hampered maintained. By DMS afic ang:inaexing, + Client/server is required for searching and + Logical separation of messaging and accessing documents. DMS databases. Processes such as ; A + Remote access is required for users who backing up databases are easier. cannotuse client/server mode. This ensures + This configuration is ideal for creating a that the slower store-and-forward process centralized library configuration. will be used for remote searching and accessing of documents. Creating and Managing Documents 325 Determining Your Indexing Needs The following table presents some indexing considerations and suggests an indexing configuration based on how the considerations pertain to your indexing needs: Consideration Single Server Dedicated Indexer with One POA Server Does the post office No Yes or No own multiple libraries? Whatis the expected Light Light or Moderate indexing volume (per hour)? Is hardware available No Yes for a dedicated indexer server? Could bandwidth No Maybe congestion be a problem? Dedicated Indexer Dedicated DMS Server on an Isolated Post Office Network Segment Yes or No Yes Moderate or Heavy Heavy Yes Yes Maybe or Yes Yes Use the “Indexing Worksheet” on page 327 to estimate the indexing needs of the libraries in your GroupWise system. Each worksheet accommodates three libraries. Identify each library (worksheet items 1 and 2). Estimate the impact of each consideration in each library (worksheet items 3 through 6). Then compare your estimates for each library to the values in the table above to determine the indexing configuration for each library (worksheet item 7). 326 GroupWise 6.5 Administration Guide Indexing Worksheet For instructions on how to use this worksheet, see “Determining Your Indexing Needs” on page 326. Library Library Library 1) Library: 2) Library's Post Office: 3) Multiple Libraries per Post Office? + Yes + No 4) Expected Indexing Volume (per hour): + Light + Moderate + Heavy 5) Additional Server Available? + Yes + No 6) Bandwidth Congestion Possible? + Yes + Maybe + No 7) Indexer Configuration: + Single server with one POA + Dedicated indexer server + Dedicated indexer server on an insolated network segment + Dedicated DMS post office Implementing Indexing For libraries where a single POA running on the post office server will provide adequate indexing support for the post office’s libraries, follow the instructions in “Regulating Indexing” on page 514 to implement indexing. For libraries where additional POAs running on separate servers are required to support the indexing needs of the post office’s libraries, follow the instructions in “Configuring a Dedicated Indexing POA” on page 516 to implement indexing. Creating and Managing Documents 327 Managing Documents As more and more documents are added to your Group Wise libraries, you will need to manage the disk space occupied by libraries and respond to various changes in your Group Wise system. + “Archiving and Deleting Documents” on page 328 + “Backing Up and Restoring Archived Documents” on page 328 + “Handling Orphaned Documents” on page 329 See also “Managing Document Storage Areas” on page 290. Archiving and Deleting Documents The Document Type property determines what happens to documents whose document life in your Group Wise system has expired. For a review of the document types and document life, see “Document Types” on page 266. You can use the Mailbox/Library Maintenance feature in ConsoleOne to archive and delete documents on demand, as described in “Reducing the Size of Libraries and Document Storage Areas” on page 371. You can also configure the POA to archive and delete documents on a regular schedule, as described in “Scheduling Disk Space Management” on page 469. Backing Up and Restoring Archived Documents When documents are archived, they are physically moved to a directory in the post office, where disk space can be limited. You should move archived documents to your backup medium regularly. + “Moving Archived Documents to Backup” on page 328 + “Restoring Archived Documents” on page 329 Moving Archived Documents to Backup When documents are archived, they are placed in automatically created archive directories. Each library has a set of archive directories. For example, gwdms (Group Wise Document Management Services) is one of the post office’s directories. The library directories exist under it, named 11b0001-/f. Under each library directory is an archive directory, under which are the sequentially- numbered archival directories, named arnnnnnn (where nnnnnn is an integer with leading zeros). Each arnnnnnn directory is an archive set. To view the gwdms directory, see “Post Office Directory” in Group Wise 6.5 Troubleshooting 3: Message Flow and Directory Structure. To move archived documents to backup: 1 Make sure you have a backup medium (such as tape or CD) operating with your system. 2 Make sure you have already archived documents that have reached their expiration dates. Documents that have not been archived cannot be removed to a backup medium. 3 Startthe software for your backup medium. 4 When the backup software asks for the location of your archive files, give the full path. Example: j:\vost_office\gwdms\lib0\archive\ar000001 If users need the backed-up documents in the future, see “Restoring Archived Documents” on page 329. 328 GroupWise 6.5 Administration Guide Restoring Archived Documents When a user tries to access a document that has been archived, one of two things will happen: + If the document is in the post office archive set, and has not yet been physically moved from the archive location, the document opens normally. The user will not realize it was archived. The document is unarchived from the archive set at that time; that is, it is moved back to the library document directory from which it was archived. It is also given a new archive date according to the document type. The user will see a message indicating the document cannot be opened. In this case, the archive set containing the document has been physically moved to a backup medium. Therefore, the document cannot be automatically unarchived. In this case, the user might contact you, asking you to locate or recover the document. You can restore either the document’s BLOB or the archive set that contains the BLOB. After the document is restored to its archive directory, the user will be able to open the document normally. To restore archived documents from a backup medium: 1 Obtain the Document Number for the document the user was trying to access. 2 Inthe GroupWise Windows client, click Tools > Find. h Enter the Document Number, then click OK. Right-click the document in the Find Results listing, then click Properties > Version. Note the archive directory in the path listed in the Current Location field. The subdirectory listed after the . archive directory is the archive set containing the document, for example, \ar000001. If you have the ability to recover individual files from your backup medium, also note the BLOB filename listed in the Current Filename field. Determine where you backed up the archive set, then copy either the archive set or the individual BLOB file to the archive directory specified in the Current Location field that you noted earlier. You can now notify the user that the requested document is available. When you are sure the user has opened the document (causing it to be unarchived), you should delete any files remaining in that archive directory because you have already backed them up. Handling Orphaned Documents If you remove public rights for a library, some documents might become inaccessible. For example, if a user who has been denied access to the library is the only user that had access to certain documents, those documents become orphaned. No other user can access or search for those orphaned documents. This is because document security is controlled by the user listed in the Author and Creator fields in the document’s properties. In other words, if the author or creator no longer has access to a document, neither will anyone else. However, orphaned documents can be reassigned to another author so that someone can access them again. This can be done in one oftwo ways: + In ConsoleOne, the Analyze/Fix Library action in Mailbox/Library Maintenance can reassign orphaned documents to a specified user. Then, the new user will have access to all orphaned documents in that library. For more information, see “Analyzing and Fixing Library and Document Information” on page 360. Creating and Managing Documents 329 + A librarian has the ability to alter the Author field of documents. Therefore, a librarian can replace the previous user's Group Wise ID with his or her own ID. In doing so, the librarian becomes the new author of the document. This can also be done as a mass operation for multiple documents with varying user IDs in the Author field. For more information, see “Adding and Training Librarians” on page 295. 330 GroupWise 6.5 Administration Guide Integrations Document-producing applications can be integrated with GroupWise” Document Management Services (DMS) to allow GroupWise management control over files produced by the integrated applications. Integrations provide code specifically designed to allow function calls, such as Open or Save, to be redirected to the GroupWise Windows client. This allows Group Wise dialog boxes to be displayed instead of the application’s normal dialog boxes for the integrated functions. NOTE: The Cross-Platform client does not include integrations, which is why you cannot create and edit documents from the Cross-Platform client. GroupWise DMS includes standard integrations for the following applications: + + + + + Corel* Presentations* 7.x through 9.x Corel Ouattro Pro* 7.x and 8.x Corel WordPerfect 6.1 through 9.x Lotus* Word Pro* 96 and 97 Microsoft Binder 97 Microsoft Excel 95 and 97 Microsoft PowerPoint* 97 Microsoft Word 95 and 97 Other applications can be integrated manually using the gwappint.inf file. + + + “Setting Up Integrations during Windows Client Installation” on page 331 “Setting Up Integrations Using the gwappint.inf File” on page 332 “Controlling Integrations in the Group Wise Windows Client” on page 336 Setting Up Integrations during Windows Client Installation The Group Wise Windows client installation program can offer users the opportunity to integrate their document-producing applications during client installation. Integrations 331 Software Integrations E xj Choose applications for integration with Groupwise Document N ove Il Management to save and retrieve files from within GroupWise. == Microsoft Excel OK = Microsoft PowerPoint OK [ Microsoft Word OK x => > Select All Clear All < Back Next> Cancel This dialog box lists the applications that can be integrated with GroupWise that are currently installed on users’ workstations. Therefore, it is important to make sure that the applications to integrate are installed before the GroupWise client is installed. However, it does not matter whether GroupWise and the applications are installed to run from the network or from the users’ workstations. The integrations work with any combination of installation choices. After selecting applications to integrate during Group Wise client integration, users can manage their integrations in the GroupWise client, as described in “Integrating GroupWise with Your Applications” in “Creating and Working with Documents” in the GroupWise 6.5 Windows Client User Guide. If users need to install and integrate applications after installing the GroupWise client, they can install the new applications, then reinstall the Group Wise client so that they can select the new applications during Group Wise client installation. If reinstalling the GroupWise client is not an option, you might need to assist them in setting up additional integrations, as described in “Setting Up Integrations Using the gwappint.inf File” on page 332. Setting Up Integrations Using the gwappint.inf File The gwappint.inf file controls how document-producing applications are integrated with GroupWise. During GroupWise client installation, it is installed in the Windows system32 subdirectory. It is a text file that can be viewed and modified in a text editor such as Notepad. You might want to print the gwappint.inf file from a user workstation to help you understand how integrations have been set up for your users during Group Wise client installation. + “Understanding the Three Levels of Integration” on page 332 + “Understanding the gwappint.inf File” on page 333 + “Editing the gwappint.inf File” on page 336 Understanding the Three Levels of Integration 332 The gwappint.inf file provides for three different levels of integration, to meet the needs of different types of document-producing applications: + “ODMA Integration” on page 333 + “Point-to-Point Integration” on page 333 + “No Integration” on page 333 GroupWise 6.5 Administration Guide ODMA Integration The Open Document Management API (ODMA) is an industry standard for applications and document management programs to use in achieving seamless integration. ODMA is platform- independent. GroupWise DMS is 32-bit ODMA-compliant, and can automatically integrate with all 32-bit ODMA-compliant applications. Applications that are not 32-bit ODMA-compliant must have integrations created for them to be used with GroupWise DMS. The 16-bit ODMA integration standards are not 100% compatible with the 32-bit ODMA integration in Windows 95/98/2000. Therefore, 16-bit applications that are ODMA-compliant must still have integrations created for them to be used with the GroupWise DMS. Point-to-Point Integration No Integration This integration involves applications that are not 32-bit ODMA-compliant. Novell® has written macros for various applications, such as Microsoft Word, which allow them to be integrated with Group Wise. This provides the same functionality as for 32-bit ODMA-integrated applications. These applications can be selected for integration when the Group Wise client is installed. Integration macros are written in the macro language of the application being integrated with Group Wise. Macro calls are made to GroupWise dialog boxes to replace access of the application’s own dialog boxes (for example, Open and Save). Non-integrated applications rely on Windows 95/98/2000 associations. When a reference icon is selected in GroupWise, the file’s extension is examined to determine which application to use. The application is launched and the file is opened. Functions performed in a non-integrated application are not managed by GroupWise. So, if the file is renamed or saved to a different location, the file will not be part of a GroupWise library. When the file is opened later, a message will be displayed reminding the user that the file is not under management of GroupWise. However, if you simply edit the file and re-save it without changing the name or location, GroupWise will continue to provide management of the file. Understanding the gwappint.inf File The gwappint.inf file includes the following sections and lines: + [executable name] sections - Integration= line - DualExe= line - AppName= line - AppKey= line + [ODMA Application Extensions] section + [Integration State] section + [Non-Integrated Defaults] section - Waitlnterval= line - ShowMessage- line Integrations 333 [executable name] Sections Application Corel Presentations Corel Auattro Pro Corel WordPerfect The gwappint.inf file contains one [executable name] section for each integrated application. It supplies the name of the executable for the program being integrated. Integration= Line Each [executable name] section must have an Integration= line, where digits identify the type of integration employed for the executable: Integration = 0 (No Integration) Integration = 1 (Point-to-Point Integration) Integration = 2 (ODMA Integration) DualExe= Line Some programs, such as Lotus Word Pro, use a small startup executable that, in turn, calls the main program. Use the DualExe= line to specify the name of'the main executable. You can specify the full path to the main executable, or you can specify the path relative to the startup executable. AppName= Line The AppName= line assigns the application an arbitrary name for use in the [ODMA Application Extensions] and [Integration State] sections. AppKey= Line The AppKey= line is used only with point-to-point integrations (Integration=1). It specifies a value used by Group Wise to pass information to and from the integrated application. The value must be unique among the point-to-point integrations defined in the gwappint.inf file. Examples Based on Standard Integrations The table below shows how the standard integrations are implemented in the gwappint.inf file: Executable Version Comments prwin.exe 3 Ifitis already installed on the workstation, GroupWise installation will change the Integrations= line to 0 and the application will be available for selection as a non- integrated application. 7 For ODMA integration, change the DualExe= line to SYSTEM\PRWIN70.EXE and the Integrations= line to 2. 8 For ODMA integration, change the Integrations= line to 2. qpw.exe 6.1 If it is already installed on the workstation, the GroupWise client installation will change the Integrations= line to 0 and the application will be available for selection as a non-integrated application. 7 For ODMA integration, change the Integrations= line to 2 wpwin.exe 6.1 If it is already installed on the workstation, the GroupWise client installation will change the Integrations= line to 0 and the application will be available for selection as a non-integrated application. 7 For ODMA integration, change the DualExe= line to SYSTEM\WPWIN7.EXE and the Integrations= line to 2. 334 GroupWise 6.5 Administration Guide Comments Application Executable Version Lotus wordpro.exe 96 Word Pro 97 Microsoft binder.exe 97 Binder Microsoft excel.exe 95and Excel 97 Microsoft powerpnt.exe 97 PowerPoint Microsoft winword.exe 95 Word 97 This application is 32-bit ODMA-compliant. Therefore, if installed before GroupWise, it will be available for selection as an ODMA-integrated application. For ODMA integration, change the DualExe= line to SYSTEM\WORDPRO.EXE and the Integrations= line to 2. This application is 32-bit ODMA-compliant. Therefore, if installed before GroupWise, it will be available for selection as an ODMA-integrated application. The Integrations= line will be set to 1 for both versions. This application is 32-bit ODMA-compliant. Therefore, if installed before GroupWise, it will be available for selection as an ODMA-integrated application. If it is already installed on the workstation, GroupWise installation will change the Integrations= line to 1 and the application will be available for selection for point-to-point integration. For ODMA integration, change the Integrations= line to 2. [ODMA Application Extensions] Section The [ODMA Application Extensions] section lists the file extensions GroupWise associates with particular document-producing applications. Examples include: Application Corel WordPerfect Microsoft Excel Microsoft PowerPoint Microsoft Word [Integration State] Section File Extension .wpd xls ppt .doc The [Integration State] section records whether the user has turned integrations on or off for integrated applications. [Non-Integrated Defaults] Section The [Non-Integrated Defaults] section provides two configuration settings that apply to all non- integrated applications: + Waitlnterval= line + ShowMessage= line Waitlnterval= Line The WaitInterval= line specifies a number of milliseconds for the Group Wise client to wait before it attempts to communicate with a non-integrated process. The wait interval allows the application to start completely before GroupWise contacts it. The default wait interval is 1000 milliseconds (one second). Integrations 335 The default setting supplied in the [Non-Integrated Defaults] section can be overridden for specific applications by including a WaitInterval= line in the application’s [executable name] section. ShowMessage= Line The ShowMessage= line indicates whether or not to display a message to the GroupWise client user if Group Wise cannot contact a non-integrated application. Use ShowMessage=1 to display the message or ShowMessage=0 to suppress the message. The default setting supplied in the [Non-Integrated Defaults] section can be overridden for specific applications by including a ShowMessage= line in the application’s [executable name] section. Editing the gwappint.inf File The gwappint.inf file is a text file that can be modified using any text editor (Notepad, for example). By editing the gwappint.inf file, you can add integrations for applications for which Novell has not provided integrations. Controlling Integrations in the GroupWise Windows Client 336 For the convenience of GroupWise Windows client users, some settings in the gwappint.inf file can be modified from the client. In the GroupWise client: 1 Click Tools > Options > Documents > Integrations. Library Configuration Integrations | General] Registered applications Adobe FrameMaker Document Bitmap Image Microsoft Excel Worksheet Microsoft PowerPoint Presentation Microsoft Word Document Text Document Wave Sound WinZip File € Enabled @ Disabled Advanced... Cancel The Integrations tab of the Documents Setup dialog box lets users turn integrations on and off for the listed registered applications. If the application that users want to integrate is does not appear in the registered applications list, users must first make sure the application is installed on their workstations. They they can either reinstall the Group Wise client or modify the gwappint.inf file as described in “Setting Up Integrations Using the gwappint.inf File” on page 332. The users’ selections on the Integrations tab are recorded in the [Integration State] section of the gwappint.inf file. 2 Select an application to configure integration for, then click Advanced. GroupWise 6.5 Administration Guide Adobe FrameMaker Document KE Non-ntegrated | Executable | r Message Display message for all non-integrated applications that cannot be tracked by GroupWise. F Di r Wait Setfor © This application @ Default for all applications ‘Wait time to detect application: fi = seconds. The Non-Integrated tab enables users to set values for the ShowMessage= and WaitInterval= lines in the gwappint.inf file. 3 Click Executable. Adobe FrameMaker Document ax Nomintegrated Executable | A small number of applications use a dual-executable model. In this model, the first executable is invoked by the user. That executable then invokes the second executable, which is the actual application. In order to track an application that uses this model, Group Wise must know the name of the second executable. Dual-executable filename: The Executable tab enables users to set the DualExe= line in the gwappint.inf file. 4 Click OK twice to save the updated integration information. If users check the contents of the gwappint.inf file in the Windows system32 subdirectory, they will see their integration configuration changes reflected there. Integrations 337 338 GroupWise 6.5 Administration Guide VI i Ll... + Chapter 25, “Understanding GroupWise Databases,” on page 341 + Chapter 26, “Maintaining Domain and Post Office Databases,” on page 345 + Chapter 27, “Maintaining User/Resource and Message Databases,” on page 353 + Chapter 28, “Maintaining Library Databases and Documents,” on page 359 + Chapter 29, “Synchronizing Database Information,” on page 363 + Chapter 30, “Managing Database Disk Space,” on page 367 + Chapter 31, “Backing Up GroupWise Databases,” on page 375 + Chapter 32, “Restoring GroupWise Databases from Backup,” on page 379 + Chapter 33, “Retaining User Messages,” on page 387 + Chapter 34, “Standalone Database Maintenance Programs,” on page 391 Databases 339 340 GroupWise 6.5 Administration Guide Understanding GroupWise Databases Your Group Wise” system includes numerous databases where vital information is stored. + “Domain Databases” on page 341 + “Post Office Databases” on page 341 + “User Databases” on page 342 + “Message Databases” on page 342 + “Library Databases” on page 342 + “Guardian Databases” on page 343 Domain Databases The domain database (wpdomain.db) in each domain contains all administrative information for the domain, including: + Address information about all GroupWise objects (such as users and resources), post offices, and gateways in the domain + System configuration and linking information for the domain’s MTA + Address and message routing information to other domains The first domain you create is the primary domain. In the primary domain, the wpdomain.db file contains all administrative information for your entire GroupWise system (all domains, post offices, users, and so on). Because the wpdomain.db file in the primary domain is so crucial, you should back it up regularly and keep it secure. See “Backing Up a Domain” on page 375. You can re-create your entire Group Wise system from the primary domain wpdomain.db file; however, ifthe primary domain wpdomain.db file becomes unusable, you can no longer make administrative updates to your Group Wise system. In a secondary domain, the wpdomain.db file contains administrative information about that secondary domain only. For the location of the domain database, see “Domain Directory” in Group Wise 6.5 Troubleshooting 3: Message Flow and Directory Structure. For additional domain information, see “Information Stored in the Domain” on page 558. Post Office Databases The post office database (wphost.db) in each post office contains all administrative information for the post office, including a copy of the Group Wise Address Book. This information is necessary for users to send messages to others in the Group Wise system. Understanding GroupWise Databases 341 For the location of the post office database, see “Post Office Directory” in Group Wise 6.5 Troubleshooting 3: Message Flow and Directory Structure. For more post office information, see “Information Stored in the Post Office” on page 418. User Databases Each member of the post office has a personal database (userxxx.db) which represents the user's mailbox. The user database contains the following: + Message header information + Pointers to messages + Personal groups + Personal address books + Rules When a member of another post office shares a folder with one or more members of the local post office, a “prime user” database (puxxxxx.db) is created to store the shared information. The “prime user” is the owner of the shared information. Local user databases and prime user databases are stored in the ofuser directory in the post office. Because resources are addressable just like users, resources also have user databases. For the location of user databases in the post office, see “Post Office Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. For more post office information, see “Information Stored in the Post Office” on page 418. Message Databases Each member of the post office is assigned to a message database (msgnn.db) where the body portions ofmessages are stored. Many users ina post office share a single message database. There can be as many as 25 message databases in the post office. Message databases are stored in the ofmsg directory in the post office. Outgoing messages from local senders are stored in the message database assigned to each sender. Incoming messages from users in other post offices are stored in the message database with the same name as the message database assigned to the sender in his or her own post office. In each case, only one copy ofthe message is stored in the post office, no matter how many members of the post office it is addressed to. For the location of message databases in the post office, see “Post Office Directory” in Group Wise 6.5 Troubleshooting 3: Message Flow and Directory Structure. For more post office information, see “Information Stored in the Post Office” on page 418. Library Databases A library is a collection of documents and document properties stored in a database system that can be managed and searched. You do not need to set up libraries unless you are using Group Wise Document Management Services (DMS). See “Libraries and Documents” on page 261. The databases for managing libraries are stored in the gwdms directory and its subdirectories in the post office. 342 GroupWise 6.5 Administration Guide The dmsh.db file is a database shared by all libraries in the post office. It contains information about where each library in the post office is located. Each library has its own subdirectory in the gwdms directory. In each library directory, the dmxxnn01-FF.db files contain information specific to that library, such as document properties and what users have rights to access the library. For the location of library databases in the post office, see “Post Office Directory” in Group Wise 6.5 Troubleshooting 3: Message Flow and Directory Structure. For more post office information, see “Information Stored in the Post Office” on page 418. The actual documents in a library are not kept in the library databases. They are kept in a document storage area, which consists of a series of directories for storing documents. Documents are encrypted and stored in BLOBs (binary large objects) to make document management easier. A document, its versions, and related objects are stored together in the same BLOB. A document storage area might be located in the post office itself, or in some other location where more storage space is available. If it is located in the post office, the document storage area can never be moved. Therefore, storing documents in the post office directory structure is not usually recommended. If it is stored outside the post office, a document storage area can be moved when additional disk space is required. See Chapter 22, “Creating and Managing Libraries,” on page 269 and Chapter 23, “Creating and Managing Documents,” on page 303 for more information about Document Management Services. Guardian Databases The guardian database (ngwguard.db) serves as a reference for the following subordinate databases in the post office: + User databases (userxxx.db) + Message databases (msgnn.db) + Prime user databases (puxxxxx.db) + Library databases (dmsh.db and dmxxnn01-FF.db) The guardian database stores information that is common among all databases, thus eliminating duplication of information. The subordinate databases reference information stored in the guardian database. The benefits of the guardian database include the following: + Single Reference Point: The guardian database stores information for each post office. Instead of storing the dictionary information in multiple dictionary databases, it is stored once in the guardian database. + Increased Performance: When the information in the guardian database is accessed, it is written to cache memory. Each subsequent request can be handled with information already available in cache memory, which is faster than disk access. ¢ Tracking Attachments and Documents: When an attachment or document becomes orphaned (loses pointers to the message or profile), the guardian database is used to re-locate the origination of the attachment or document. + GroupWise Remote Management: When a user starts GroupWise Remote, a local guardian database is created on the remote workstation to store information similar to the guardian database in the remote user's post office in the master system. Understanding GroupWise Databases 343 The guardian database is vital to Group Wise functioning. Therefore, the POA has an automated back-up and roll-forward process to protect it. The POA keeps a known good copy of the guardian database called ngwguard.fbk. Whenever it modifies the ngwguard.db file, the POA also records the transaction in the roll-forward transaction log called ngwguard.rfl. If the POA detects damage to the ngwguard.db file on startup or during a write transaction, it goes back to the ngwguard.fbk file (the “fall back” copy) and applies the transactions recorded in the ngwguard.rfl file to create a new, valid and up-to-date ngwguard.db. In addition to the POA back-up and roll-forward process, you should still back up the ngwguard.db, ngwguard.fbk, and ngwguard.rfl files regularly to protect against media failure. Without a valid ngwguard.db file, you cannot access your e-mail. With current ngwguard.fbk and ngwguard.rfl files, you can rebuild a valid ngwguard.db file should the need arise. The ngwguard.dc file is the structural template for building the guardian database and its subordinate databases. Also called a dictionary file, the ngwguard.dc file contains schema extension information, such as administrator-defined fields, data types, and record indexes. If this dictionary file is missing, no additional databases can be created in the post office. 344 GroupWise 6.5 Administration Guide Maintaining Domain and Post Office Databases Occasionally, it is necessary to perform maintenance tasks on domain databases (wpdomain.db) or post office databases (wphost.db). The freguency depends on the reliability of your network and your own experience of how often problems are likely to occur. The following tasks help you maintain the integrity of your domain and post office databases: + “Validating Domain or Post Office Databases” on page 345 + “Recovering Domain or Post Office Databases” on page 346 + “Rebuilding Domain or Post Office Databases” on page 349 + “Rebuilding Database Indexes” on page 351 NOTE: Unfortunately, damage to databases cannot be prevented. A power outage can occur in the middle of a write to a database. A hard drive can fail. However, the GroupWise tools for repairing damaged databases are very effective and should be able to resolve most damage to GroupWise databases. To further protect your GroupWise” system against loss of domain and post office information, see Chapter 31, “Backing Up GroupWise Databases,” on page 375 and Chapter 32, “Restoring Group Wise Databases from Backup,” on page 379. To ensure that the same information exists in all domain and post office databases throughout your Group Wise system, see “Synchronizing the Primary Domain from a Secondary Domain” on page 366, “Synchronizing a Secondary Domain” on page 365, and “Synchronizing a Post Office” on page 364. Validating Domain or Post Office Databases You can validate the data in the domain and post office databases at any time without interrupting normal GroupWise operation. The frequency can vary depending on the size of your system and the number of changes you make to users, resources, and distribution lists. 1 Make sure you have full administrative rights to the domain and post office database directories you are validating. 2 In ConsoleOne®, browse to and select the Domain object or Post Office object where you want to validate the database. 3 Click Tools > GroupWise Utilities > System Maintenance. Maintaining Domain and Post Office Databases 345 C Recover Database Close C Rebuild Database Hel C Reclaim Unused Space He | C Rebuild Indexes for Listing Description: | Validate checks for physical consistency. If problems are | found, you should perform a Recover or a Rebuild. 4 Click Validate Database > Run. 5 When prompted, make sure the Path to Database is correct. If an incorrect path is displayed, browse to and select the path to the database being validated. Click OK. You will be notified if there are any physical problems, so you can then recover or rebuild the database. See “Recovering Domain or Post Office Databases” on page 346 and “Rebuilding Domain or Post Office Databases” on page 349. Recovering Domain or Post Office Databases The database recover process corrects physical problems in the database structure, but does not update incorrect information contained in the database. If you receive an administrative message informing you that an internal database error has occurred, or if you detect database damage and don’t want to take users out of GroupWise, you can recover the database. If no errors are reported after the recover process, you will not need to take further action. The recover process is run against a copy of the domain database (wpdomain.db) or post office database (wphost.db). Therefore, while the recover process is being run, you can continue to access the database through ConsoleOne and you do not need to stop the MTA or the POA. As the copy of the database is created, the recover process skips invalid records. If the number of records in the original wpdomain.db file or wphost.db file is different from the number in the new, valid copy, Group Wise will send an administrative message informing you that data has been lost. When the recover process is completed, the backup database will be deleted. 346 GroupWise 6.5 Administration Guide wpdomain.db Check the number of records (X) in wpdomain.db. © wpdomain. db creating.ddb Rename wpdomain.db to recover. ddb. creating.ddb Read and copy records from recover.ddb into creating.ddb. Skip invalid records. Check the number of records (Y) in creating.ddb. EDS MEA secon ae Delete creating.ddb. X SS Delete recover.ddb. E recover.ddb G creating.ddb wpdomain.db Rename recover.ddb to wpdomain. db. Notify the administrator wpdomain.db E Rename creating.ddb Y to wpdomain.db. that wpdomain.db could not be recovered. Notify the administrator that information has been lost in the recovery process. Try rebuilding wpdomain.db. wpdomain.db wpdomain.db has been successfully recovered. For convenience, the agents are configured by default to automatically recover domain and post office databases whenever a physical problem is encountered. See “Recovering the Domain Database Automatically or Immediately” on page 614 and “Recovering the Post Office Database Automatically or Immediately” on page 485. To recover a specific database in ConsoleOne: 1 Make sure you have network access to the domain or post office directory for the database you are recovering. Maintaining Domain and Post Office Databases 347 If you have administration rights in the primary domain, you can recover the primary domain database, the post office databases in the primary domain, and any secondary domain databases. From a secondary domain, you can recover the secondary domain database and the post office databases in the secondary domain. Make sure you have sufficient disk space for the copy of the database that is created during recovery. 3 In ConsoleOne, browse to and select the Domain object or Post Office object where you want to recover the database. 4 Click Tools > GroupWise Utilities > System Maintenance. KE Groupwise System Maintenance xÍ : Close C Rebuild Database Y Help C Reclaim Unused Space © Rebuild Indexes for Listing C vali Description: Recover can be performed even while the database is in use. Any database inconsistencies will be corrected, but may result in loss of information. 5 Click Recover Database > Run. 6 When prompted, make sure the Path to Database is correct. If an incorrect path is displayed, browse to and select the path to the database being validated. Click OK. If recovery is successful, the backup database is deleted, and the new domain database is renamed to wpdomain.db, or the new post office database is renamed to wphost.db. If recovery fails for any reason, the backup database will be copied back to wpdomain.db or wphost.db. If any data was lost, you will be notified by an administrative message. You have several options for retrieving lost data from other sources: ¢ If data has been lost from the primary domain, you can synchronize it with a secondary domain that is known to contain current information. See “Synchronizing the Primary Domain from a Secondary Domain” on page 366. ¢ If data has been lost from a secondary domain, you can synchronize it with the primary domain. See “Synchronizing a Secondary Domain” on page 365. + You can also rebuild the database at a later time when you have exclusive access to the database where the data has been lost. See “Rebuilding Domain or Post Office Databases” on page 349. 348 GroupWise 6.5 Administration Guide Rebuilding Domain or Post Office Databases In addition to correcting the physical problems resolved by the database recover process, the rebuild process updates user and object information in a domain database (wpdomain.db) or post office database (wphost.db). However, the process requires that no users or Group Wise agents (MTA or POA) have access to the database during the rebuild process. You should rebuild a domain or post office database if you encounter any of the following conditions: + Objects are not being replicated between domains. + The agent that writes to the database went down unexpectedly. + The server where the database resides went down unexpectedly. + You receive an administrative message informing you that an internal database error has occurred or there is database damage and you think there might be data loss. + You ran the recover database process and received a notification of data loss. When you rebuild a secondary domain database, information is retrieved from the primary domain. When you rebuild a post office database, information is retrieved from the domain it belongs to. During the rebuild process, a backup of the domain or post office database is created as well as a new wpdomain.db or wphost.db. The records from the primary domain database are copied into the new wpdomain.db. There should not be any data loss. When the rebuild process is complete, the temporary database and the backup database are deleted. Maintaining Domain and Post Office Databases 349 Primary Domain wpdomain.db wpdomain.db creating.ddb © Ta ep e] Copy records from the primary domain wpdomain.db | into creating.ddb. creating.ddb Delete wpdomain.db. Delete creating.ddb. he eee ddb wpdomain.db Sa Mpdomain. db wpdomain.db remains Rename creating.ddb unchanged. to wpdomain.db. Notify the administrator that wpdomain.db could not be rebuilt. wpdomain.db wpdomain.db has been successfully rebuilt. 1 All GroupWise agents that might access the database must be stopped during the rebuild. See “Stopping the MTA” on page 609 and “Stopping the POA” on page 480. To rebuild a database: 2 Ifyou are rebuilding a post office database, all users should exit and you should disable the post office before the rebuild. See “Disabling a Post Office” on page 183. 3 Make sure you have sufficient disk space for the copy of the database that is created during the rebuild process. 4 In ConsoleOne, browse to and select the Domain object or Post Office object where you want to rebuild the database. 5 Click Tools > GroupWise Utilities > System Maintenance. 350 GroupWise 6.5 Administration Guide © Validate Database C Recover Database C Reclaim Unused Space C Rebuild Indexes for Listing Description: Rebuild requires exclusive access. For domains, a new database will be created from the information in the primary domain. For post offices, a new database will be created from the information in the parent domain. 6 Click Rebuild Database > Run. 7 When prompted, make sure the Path to Database is correct. If an incorrect path is displayed, browse to and select the path to the database being rebuilt. Click OK. Rebuilding Database Indexes Each domain database (wpdomain.db) and post office database (wphost.db) contains three indexes that are used to determine the order of the Address Book: the system index, the domain index, and the post office index. When you display the system Address Book, the system index is used. When you display a domain-level Address Book, the domain index is used, and when you display the Address Book for a post office, the post office index is used. The GroupWise client uses the post office database to list users. If you are in the GroupWise client and the indexes for listing system, domain, and post office users are different than the domain database indexes, you should rebuild the post office database indexes. The most common cause of incorrect indexes in a post office is that the post office database was closed when you set up the list information. To rebuild a database index: 1 Make sure you have administrative rights to the database whose indexes you are rebuilding. 2 In ConsoleOne, browse to and select the Domain object or Post Office object where you want to rebuild the database index. 3 Click Tools > GroupWise Utilities > System Maintenance. Maintaining Domain and Post Office Databases 351 KE Groupwise System Maintenance x| © Validate Database C RecoverDatabase inca | C Rebuild Database Hel C Reclaim Unused Space H | © Merge External Domair C Replace Priman with Secondary Description: Rebuild listing indexes reconstructs the indexes used by the Address Book. 4 Select Rebuild Indexes for Listing, then click Run. 5 When prompted, make sure the Path to Database is correct. If an incorrect path is displayed, browse to and select the path to the database being whose indexes are being rebuilt. Click OK. 352 GroupWise 6.5 Administration Guide Maintaining User/Resource and Message Databases It is sometimes necessary to perform maintenance tasks on user and resource databases (userxxx.db) and message databases (msgnn.db). The frequency depends on the reliability of your network and your own experience of how often problems are likely to occur. The following tasks help you maintain the integrity of your user and message databases. + “Analyzing and Fixing User and Message Databases” on page 353 + “Performing a Structural Rebuild of a User Database” on page 355 + “Re-creating a User Database” on page 356 NOTE: Unfortunately, damage to databases cannot be prevented. A power outage can occur in the middle of a write to a database. A hard drive can fail. However, the GroupWise tools for repairing damaged databases are very effective and should be able to resolve most damage to GroupWise databases. To further protect your Group Wise” users against loss of mailbox contents, see Chapter 31, “Backing Up Group Wise Databases,” on page 375 and Chapter 32, “Restoring Group Wise Databases from Backup,” on page 379. To ensure that the same information exists for users and messages throughout your Group Wise system, see “Synchronizing Individual Users or Resources” on page 363. Analyzing and Fixing User and Message Databases The Analyze/Fix option of Mailbox/Library Maintenance looks for problems and errors in user and resource databases (userxxx.db) and/or message databases (msgnn.db) and then fixes them if you select the Fix Problems option. You can analyze databases individually or you can analyze all user, resource, and/or message databases in one or more post offices. To analyze and repair user, resource, and/or message databases: 1 In ConsoleOne®, browse to and select one or more User or Resource objects to check individual users or resources. or Browse to and select one or more Post Office objects to check all user and/or message databases in the post office. 2 Click Tools > GroupWise Utilities > Mailbox/Library Maintenance. Maintaining User/Resource and Message Databases 353 @ GroupWise Objects: Action: Post Offices y [analyzeiFix Databases El use | AAA | M Structure Index check Retrieve... I Contents Save... [| Calle t = FM Fix problems Help C Resetuser disk space totals lA || >) C Object Type [Gl A Databases | Logging | Results| Misc | Exclude | c 3 M User M Message C Document Options file: 3 From the Action drop-down menu, select Analyze/Fix Databases. 4 Select from the following options: Structure: When a user experiences a problem that is related to the user, message, or library databases, you should perform a structure check. The structure check verifies the integrity of the databases and reports the amount of space that could be recovered. If there is a structural problem, the databases are rebuilt with free space reclaimed. Index Check: If you select Structure, you can also select Index Check. You should run an index check if a user tries to open a message and gets a read error, or when sent items that show a delivered status in the Properties window do not appear in the recipient’s mailbox. An index check can be time-consuming. Contents: The user databases (located in the ofuser directory) do not contain user messages. Messages are contained in the message databases under the ofmsg directory. However, the message databases do not contain the message attachments; these are located in the offiles directory. A contents check analyzes references to other items. For example, in the user database, Mailbox/Library Maintenance verifies that any referenced messages actually exist in the message database. In the message database, it verifies that any attachments that are referenced actually exist in the attachment directories. Collect Statistics: If you selected Contents, the Collect Statistics option is available to collect and display statistics about the post office, such as the number of messages and appointments in the post office and the average number per user. In addition, you can display any user mailboxes that have more than a specified number of items. This can help determine if some users are using an excessive amount of'disk space. Ifthis is a problem, you might want to encourage users to delete unneeded items or to use the Archive feature in the Group Wise client to store messages on their local drives. You can also limit the amount of disk space each user can have. See “Managing Disk Space Usage in the Post Office” on page 171. Fix Problems: This option tells Mailbox/Library Maintenance to fix any problems it finds. Otherwise, Mailbox/Library Maintenance will just report the problems. Reset User Disk Space Totals: Recalculates the total disk space a Group Wise user is using by reading the selected user mailboxes and updating the poll record used for disk space 354 GroupWise 6.5 Administration Guide management. Because disk space is user-specific, the program calculates the amount of disk space in use by the user in the user databases, in any ofthe message databases, and in the attachment directory. Disk space limitations do not take into account the disk space used in document libraries. This option is usually run if the user totals are not being reflected correctly. 5 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 396 “Logging” on page 396 “Results” on page 396 “Misc” on page 397 “Exclude” on page 397 Selected options can be saved for repeated use. See “Saving Mailbox/Library Maintenance Options” on page 397. 6 Click Run to perform the Analyze/Fix operation. Analyze/Fix can also be run using the standalone Group Wise Check program. See “GroupWise Check” on page 391. It can also be scheduled to run on a regular basis by properly configuring the POA. See “Scheduling Database Maintenance” on page 467. Performing a Structural Rebuild of a User Database The Structural Rebuild option of Mailbox/Library Maintenance rebuilds the structure of a user or resource database (userxxx.db) and reclaims any free space. It does not re-create the contents of the database. If you need to recover database contents as well as structure, see “Re-creating a User Database” on page 356. To rebuild a user database: 1 In ConsoleOne, browse to and select one or more User or Resource objects whose database needs to be rebuilt. 2 Click Tools > Group Wise Utilities > Mailbox/Library Maintenance. Maintaining User/Resource and Message Databases 355 dll @ GroupWise Objects: Action: UsersíResources y Structural Rebuild Close ovo Retrieve... Save... Help & FHaugheyé EEE Databases | Logging | Results| mise | € Libra M User M Message C Doc Options file: 3 From the Action drop-down list, select Structural Rebuild. 4 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 396 “Logging” on page 396 “Results” on page 396 “Misc” on page 397 Selected options can be saved for repeated use. See “Saving Mailbox/Library Maintenance Options” on page 397. 5 Click Run to perform a structural rebuild of the user database. Re-creating a User Database The Re-create User Database option of Mailbox/Library Maintenance will rebuild a user or resource database (userxxx.db) and recover any information it can. Some information is lost, such as the folder assignments. You should never need to select this option for regular database maintenance. It is designed for severe problems, such as replacing a user database that has been accidentally deleted and for which you have no backup copy. Because folder assignments are lost, all items are placed into the Cabinet folder. The user must then reorganize all the items in his or her mailbox. Use of filters and searching can facilitate this process, but it is not a desirable experience. It is, however, preferable to losing everything. To re-create a user database: 1 In ConsoleOne, browse to and select one or more User or Resource objects that need the user database re-created. 2 Click Tools > GroupWise Utilities > Mailbox/Library Maintenance. 356 GroupWise 6.5 Administration Guide © GroupWise Objects: Action: [rn] | [UsersiResources M Re-create User Database Close | E FHaughey@Provo1 Retrieve... Save... | Help | =no settings tar this action= | sis Databases | Logging | Results | Misc | | [A Document Options file: 3 From the Action drop-down list, select Re-create User Database. 4 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 396 “Logging” on page 396 “Results” on page 396 “Misc” on page 397 Selected options can be saved for repeated use. See “Saving Mailbox/Library Maintenance Options” on page 397. 5 Click Run to re-create the user database. Maintaining User/Resource and Message Databases 357 358 GroupWise 6.5 Administration Guide Maintaining Library Databases and Documents Group Wise” Document Management Services (DMS) uses libraries as repositories for documents. For a review of library database structure, see “Library Databases” on page 342. + “Analyzing and Fixing Databases for Libraries and Documents” on page 359 + “Analyzing and Fixing Library and Document Information” on page 360 NOTE: Unfortunately, damage to databases cannot be prevented. A power outage can occur in the middle of a write to a database. A hard drive can fail. However, the GroupWise tools for repairing damaged databases are very effective and should be able to resolve most damage to GroupWise databases. Analyzing and Fixing Databases for Libraries and Documents For libraries, the Analyze/Fix Databases option of Mailbox/Library Maintenance looks for problems and errors in library and document databases and then fixes them if you select the Fix Problems option. To analyze and repair library and document databases: 1 In ConsoleOne*, browse to and select one or more Library objects. 2 Click Tools > Group Wise Utilities > Mailbox/Library Maintenance. @ GroupWise Objects: Action: Libraries X [Analyze/Fix Databases sl = Close ÈL Manufacturing Libra M Structure [ Index check Retrieve... I Contents Save... n JA M Fix problems Help [7 Reset user disk space totals [0 Databases | Logging | Resuits | Misc | Options file: 3 From the Action drop-down menu, select Analyze/Fix Databases. 4 Select from the following options: Maintaining Library Databases and Documents 359 Structure: When a user experiences a problem that is related to the library databases, you should perform a structure check. The structure check verifies the integrity of the databases and reports the amount of space that could be recovered. If there is a structural problem, the databases are rebuilt with free space reclaimed. Index Check: If you select Structure, you can also select Index Check. An index check can be time-consuming. Contents: The library database (located in the gwdms directory of'the post office) does not contain documents. Documents are stored in the lib0000-FF directories. A contents check analyzes references from libraries to documents. Collect Statistics: If you selected Contents, the Collect Statistics option is available to collect and display statistics about the library, such as the number and size of documents. Fix Problems: This option tells Mailbox/Library Maintenance to fix any problems it finds. Otherwise, Mailbox/Library Maintenance will just report the problems. 5 Usingthetabs atthe bottom ofthe Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 396 “Logging” on page 396 “Results” on page 396 “Misc” on page 397 Selected options can be saved for repeated use. See “Saving Mailbox/Library Maintenance Options” on page 397. 6 Click Run to perform the Analyze/Fix Databases operation on the library. Analyze/Fix Databases can also be run using the standalone Group Wise Check program. See “Group Wise Check” on page 391. It can also be scheduled to run on a regular basis by properly configuring the POA. See “Scheduling Database Maintenance” on page 467. Analyzing and Fixing Library and Document Information The Analyze/Fix Library option of Mailbox/Library Maintenance performs more library-specific functions that Analyze/Fix Databases. For all options except Verify Library, all documents in each ofthe selected library databases are checked. This can be a time-consuming process. Therefore, if you intend to select more than one of the Analyze/Fix Library options, you can save time by selecting each of them before clicking Run. This causes all selected options to be run against each document, which is faster than running each option individually against all documents. To validate library databases: 1 In ConsoleOne, browse to and select one or more Post Office objects where you want to validate libraries. 2 Click Tools > Group Wise Utilities > Mailbox/Library Maintenance. 360 GroupWise 6.5 Administration Guide © GroupWise Objects: | Action: _Rereve. | Post Offices lad is Provo1.Developme M Verify library I Fixdocumentersionfelement Retrieve... Verify document files T Validate all document security T° Synchronize user name Help Remove deleted storage areas A Move documents first [~ Reassign orphaned documents 4 >| y el I Reset word lists C Object Type PA | Databases | Logging | Results | Misc | A Taser || = Options file: 3 From the Action drop-down menu, select Analyze/Fix Library. 4 Select from the following options: Verify Library: This is a post office-level check. It verifies that all libraries are on the libraries list. It also checks the schema and guarantees its integrity. If there is a problem with the schema, it resets to a default schema to reclaim any missing items. For example, if you deleted the Document Type property, you could recover it using this option. Fix Document/Version/Element: This performs an integrity check to verify the following: + Each document has one or more versions linked to it. + Each version has one or more elements linked to it. + All versions are linked to a document. + All elements are linked to a version. If there are any missing links, the missing documents or versions are created from the information contained in the existing version or element for which the link is missing. For example, ifa version is found that shows no link to a document, a document is created from the information contained in the version and the link is reestablished. Of course, any information in the lost document that might have been newer than the information contained in the old version is lost. Verify Document Files: This determines if the BLOB exists for a document and the document is accessible. If not, an error is logged for that document. The log message does not indicate why a file is missing or inaccessible. You can recover a file by restoring it from backup. Possible errors that would be logged include: + Ifthe file system on the network becomes corrupted, this will tell you which documents cannot be opened or which BLOB files are missing. + Ifa file was marked by someone as Read Only or Hidden, this option would log an error that the file is inaccessible. Maintaining Library Databases and Documents 361 Validate All Document Security: This option validates document security for the Author, Creator and Security (document sharing) fields. The validation replaces the results of selecting the Validate Author/Creator Security option, and is more thorough. Therefore, you only need to select one option or the other. Synchronize User Name: The Author and Creator fields display users’ full names, not unique IDs. Ifa user's name is changed, such as for marriage, this option verifies that the user's name on document and version records is the same as the user's current display name. In other words, the Author and Creator fields in documents and versions are updated to the user's newer name. Remove Deleted Storage Areas: When you delete a document storage area in the Storage Areas page of a library’s details dialog box, the document storage area and the documents stored there remain on the system. Deleting the storage area from the library only means that new documents will not be stored there. The documents there will continue to be available to users. If you want to also remove the document storage area from the system, you have two options: delete the storage area and its documents, or first move the documents and then delete the storage area. The first option is not advisable, but exists so that if you have moved all of the documents that can be moved, but some corrupted documents are left behind, you can force the document storage area to be deleted. You should normally check the Move Documents First box so that users will continue to have access to those documents from a different document storage area. With this option, all BLOBs in the library are checked to see which documents are in the area being deleted. Reassign Orphaned Documents: Documents can occasionally become orphaned (unattached to a user). For example, this can happen when a user leaves your organization and the user object is removed. All documents belonging to that user are no longer available in Group Wise searches and cannot be accessed by anyone (document security is controlled by the user listed in the Author and Creator fields). This option lets you reassign these documents to another user. You must select a new author from the browser menu after checking this option. The new author you designate will have access to all orphaned documents in this library. Reset Word Lists: Documents stored in a library are indexed and inserted into a generated word list. This allows users to search for a document by keywords as well as any word contained within a document. The document library word list might become outdated and if this occurs, the word list must be regenerated. This option allows the program to regenerate the document library word list the next time an index operation is performed. 5 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 396 “Logging” on page 396 “Results” on page 396 “Misc” on page 397 Selected options can be saved for repeated use. See “Saving Mailbox/Library Maintenance Options” on page 397. 6 Click Run to perform the Analyze/Fix Library operation. Analyze/Fix Library can also be run using the standalone GroupWise Check program. See “Group Wise Check” on page 391. It can also be scheduled to run on a regular basis by properly configuring the POA. See “Scheduling Database Maintenance” on page 467. 362 GroupWise 6.5 Administration Guide Synchronizing Database Information In general, synchronization of object information throughout your Group Wise? system occurs automatically. Whenever you add, delete, or modify a GroupWise object, the information is automatically replicated to all appropriate databases. Ideally, each domain database (wpdomain.db) in your system contains original records for all objects it owns and accurately replicated records for all objects owned by other domains. However, because unavoidable events such as power outages and hardware problems can disrupt network connectivity, information in various databases might get out of sync. If you think you have a synchronization problem, especially soon after adding, deleting, or modifying objects, it is wise to check Pending Operations to make sure your changes have been processed. See “Pending Operations” on page 51. When waiting for replication to take place, patience is a virtue. When information differs between the original record and a replicated record, the original record is considered correct. If you perform synchronization from the owning domain, the owning domain notifies the primary domain of the correct information, then the primary domain broadcasts the correct information to all secondary domains. Therefore, the best place to perform synchronization is from the domain that owns the object that is out of sync. The next best place to perform synchronization is from the primary domain, because the primary domain sends a request to the owning domain for the correct information, then broadcasts the correct information to all secondary domains. Any Group Wise object can be synchronized: + “Synchronizing Individual Users or Resources” on page 363 + “Synchronizing a Post Office” on page 364 + “Synchronizing a Secondary Domain” on page 365 + “Synchronizing the Primary Domain from a Secondary Domain” on page 366 Synchronizing Individual Users or Resources Most often, you will notice a synchronization problem when a user has trouble sending a message. Symptoms include: + The sender receives a "user is undeliverable" message. + A new user or resource created in ConsoleOne® does not appear in the Address Book in some or all post offices. + User or resource information is incorrect in the Address Book but correct in ConsoleOne. * A user or resource is listed in the Address Book as belonging to one post office but actually belongs to another. To synchronize individual User and/or Resource objects: Synchronizing Database Information 363 1 In ConsoleOne, connect to the domain that owns the users and/or resources. See “Connecting to a Domain” on page 123. Or Connect to the primary domain. 2 Browse to and right-click one or more User or Resource objects to synchronize, then click Properties. 3 Make sure the correct information appears on the object’s Identification page, then click Cancel. 4 Repeat Step 2 and Step 3 for each user or resource you need to synchronize. 5 Select each User or Resource object, then click Tools > GroupWise Utilities > Synchronize. 6 When you are asked whether to proceed, click Yes. Current, correct information will then be replicated throughout your GroupWise system. If many User or Resource objects are being synchronized, you can check progress by viewing pending operations. See “Pending Operations” on page 51. After synchronization is complete, you can verify that it was successful by checking the synchronized objects in Address Books and several post offices in your Group Wise system. If there are indications that a large number of User or Resource objects need to be synchronized, rebuilding the post office database (wphost.db) can be preferable to synchronizing individual objects. However, this process requires exclusive access to the post office database. See “Rebuilding Domain or Post Office Databases” on page 349. Occasionally, GroupWise user information can get out of sync with Novell® eDirectory™ user information. This requires a different type of synchronization process. See “Using eDirectory User Synchronization” on page 598. Synchronizing a Post Office If information for a particular post office does not display the same throughout your GroupWise system, you can synchronize the post office. 1 In ConsoleOne, connect to the domain that owns the post office. See “Connecting to a Domain” on page 123. or Connect to the primary domain. 2 Browse to and right-click the Post Office object to synchronize, then click Properties. 3 Make sure the correct information appears on the post office Identification page, then click Cancel. 4 Select the Post Office object, then click Tools > GroupWise Utilities > Synchronize. 5 When you are asked whether to proceed, click Yes. Current, correct post office information will then be replicated throughout your GroupWise system. After synchronization is complete, you can verify that it was successful by checking the post office information when connected to different domains in your GroupWise system. See also “Rebuilding Domain or Post Office Databases” on page 349. 364 GroupWise 6.5 Administration Guide Synchronizing a Library Ifinformation for a library does not display the same throughout your Group Wise system, you can synchronize the library. 1 In ConsoleOne, connect to the domain that owns the library. See “Connecting to a Domain” on page 123. Or Connect to the primary domain. 2 Browse to and right-click the Library object to synchronize, then click Properties. 3 Make sure the correct information appears on the library Identification page, then click Cancel. 4 Select the Library object, then click Tools > Group Wise Utilities > Synchronize. 5 When youare asked whether to proceed, click Yes. Current, correct library information will then be replicated throughout your Group Wise system. After synchronization is complete, you can verify that it was successful by checking the library information when connected to different domains in your Group Wise system. See also “Analyzing and Fixing Library and Document Information” on page 360. Synchronizing a Secondary Domain If information for a particular secondary domain does not display the same throughout your GroupWise system, you can synchronize the secondary domain. 1 In ConsoleOne, connect to the primary domain. See “Connecting to a Domain” on page 123. 2 Ifthere is any doubt about the correctness of that secondary domain’s information as stored in the primary domain database, synchronize the primary domain with the secondary domain before proceeding. See “Synchronizing the Primary Domain from a Secondary Domain” on page 366. 3 Browse to and right-click the Domain object to synchronize, then click Properties. 4 Make sure the correct information appears on the domain Identification page, then click Cancel. 5 Select the Domain object, then click Tools > GroupWise Utilities > Synchronize. 6 When you are asked whether to proceed, click Yes. Current, correct domain information for the secondary domain will then be replicated throughout your GroupWise system. After synchronization is complete, you can verify that it was successful by checking the domain information when connected to different domains in your GroupWise system. See also “Rebuilding Domain or Post Office Databases” on page 349, Synchronizing Database Information 365 Synchronizing the Primary Domain from a Secondary Domain Information about a secondary domain stored in the secondary domain database is considered more current and correct than information about that secondary domain stored in the primary domain database. If the primary domain database contains out-of-date information, you can synchronize the primary domain from the secondary domain. When you synchronize the primary domain database from a secondary domain database, any records the secondary domain owns, such as post offices or users added to the secondary domain, are replicated from the secondary domain database to the primary domain database. To synchronize the primary domain from a secondary domain: 1 You must have administrative rights to the primary domain directory and the secondary domain directory from which the primary domain is being synchronized. 2 In ConsoleOne, browse to and select the Domain object of the secondary domain whose database you want to use to synchronize the primary domain database. 3 Click Tools > GroupWise Utilities > System Maintenance. | Clee System Maintenance XI © Validate Database Run C Recover Database Close C Rebuild Database Hel C Reclaim Unused Space He | C Rebuild Indexes for Listing C Convert Secondary to Primary C Release Secondary CM e Description: Synchronize primary with secondary ensures that each record inthe secondary domain has a matching record in the primary domain database. 4 Select Sync Primary with Secondary, then click Run. 5 When prompted, make sure the Path to Database is correct. If an incorrect path is displayed, browse to and select the path to the database being validated. Click OK. To make sure the primary domain database is totally up-to-date, repeat the procedure for each secondary domain in your system. 366 GroupWise 6.5 Administration Guide Managing Database Disk Space One of'the most common maintenance issues in a growing system is running out of disk space. In addition to sending messages, users tend to use Group Wise* for all sorts of communication, such as transferring large files. Library documents created with Document Management Services (DMS) can use huge amounts of disk space. Archived library documents can also quickly use up disk space assigned to the post office, where space is usually limited. You should let your users know about the archive and auto-delete features of GroupWise mail, or set client options in ConsoleOne® to automatically archive or delete. See Chapter 74, “Setting Defaults for the Group Wise Client Options,” on page 973. + “Gathering Mailbox Statistics” on page 367 + “Reducing the Size of User and Message Databases” on page 369 + “Reclaiming Disk Space in Domain and Post Office Databases” on page 370 + “Reducing the Size of Libraries and Document Storage Areas” on page 371 See also “Managing Disk Space Usage in the Post Office” on page 171. Gathering Mailbox Statistics If you have some users who don't like to throw anything away, you might want to monitor the size of their mailboxes and, where appropriate, suggest voluntary cleanup. You can assess e-mail retention by the number of messages, age of messages, or size of user databases. The Mailbox Statistics option in Mailbox/Library Maintenance collects and displays statistics about the post office, such as the number of messages and appointments in the post office and the average number per user. It is valid only for user databases. In addition, you can display any user mailboxes that have more than a specified number of items. This can help determine which users might be using an excessive amount of file server disk space. To gather mailbox statistics: 1 In ConsoleOne, browse to and select one or more User or Resource objects or one or more Post Office objects. 2 Click Tools > Group Wise Utilities > Mailbox/Library Maintenance. Managing Database Disk Space 367 Post Offices de Ss Provo1.Developme C Object Type Options file: x © GroupWise Objects: «| + Action: Cu] Close C Mailbox Statistics 500 E| iter Retrieve... @ Expire Statistics Save... [ items older than 60 3 days sm | I Downloaded items olderthan | 60 E days Help E Items larger than 1000 4 KB TC Reduce mailbox to 100 4 KB I Reduce mailbox to limited size Include Received items I Sentitems JO Calendar iteme E Only bach ip iter Databases | Logging | Results| Misc | Exclude | M User D Message O Dot 3 From the Action drop-down menu, select Mailbox Statistics. 4 Select Mailbox Statistics. Mailbox Statistics: Enter a maximum number of items. You will see a report showing each user whose mailbox has more items in it than the number you specify. Or Select Expire Statistics. Expire Statistics: Select one of the following: + Items Older Than: Shows how many items are older than the number of days you specify. + Downloaded Items Older Than: Shows how many items have been downloaded to users’ GroupWise Caching or Remote mailboxes that are older than the number of days you specify. This does not include items that have been downloaded to non-GroupWise mailboxes (for example, POP and IMAP accounts). Items Larger Than: Shows how many items are larger than the size you specify. Reduce Mailbox To: Shows how many items need to be expired before the mailbox would be reduced to the size you specify. Older, larger items are expired before newer, smaller items. Reduce Mailbox to Limited Size: Shows how many items need to be expired before the mailbox is the size specified using the Disk Space Management feature under Client Options, as described in “Setting Mailbox Size Limits” on page 172. 5 Inthe Include box, select Received Items, Sent Items, Calendar Items, and/or Only Backed- Up Items to specify the types of items to gather statistics for. 6 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 396 “Logging” on page 396 368 GroupWise 6.5 Administration Guide “Results” on page 396 “Misc” on page 397 “Exclude” on page 397 Selected options can be saved for repeated use. See “Saving Mailbox/Library Maintenance Options” on page 397. By default, the mailbox statistics are sent to the domain administrator, as designated in “Notifying the Domain Administrator” on page 632. T Ifyou want to send the statistics to one or more other users, click Results, select Individual Users, specify the e-mail addresses in the users in the CC line, then click Message if you want to include explanatory text. 8 Click Run to gather the mailbox statistics and e-mail the results to the specified users. Reducing the Size of User and Message Databases The Expire/Reduce Messages option of Mailbox/Library Maintenance eliminates expired messages and reclaims any free space in the database. You can expire/reduce messages for one or more users or resources, or for all users and resources in one or more post offices. You should inform users before you run this process so they have a chance to archive or delete messages. 1 In ConsoleOne, browse to and select one or more User or Resource objects to expire/reduce messages for the selected users and resources. or Browse to and select one or more Post Office objects to expire/reduce messages for all users and resources in each selected post office. 2 Click Tools > GroupWise Utilities > Mailbox/Library Maintenance. © GroupWise Objects: Action: Post Offices = Expire/Reduce M s +] Close ak Provo1.Developme ( Reduce only C Expire and reduce | Retrieve.. | Elie LE “ 3 i Save... M Downloaded iter erthan | 60 y y = ieme lerner ia [1000 4 Help D Trash olde 60 H n R 00 y Or ize Include fP Received iteme af] 4 13 [i Sentite | [i Calend C Object Type Font @ User/Resource DOO Databases | Logaing | Results| Misc | Exclude | c A M User M Message C Document Options file: 3 From the Action drop-down menu, select Expire/Reduce Messages. 4 Click Reduce Only to delete items that have already expired. Managing Database Disk Space 369 or Click Expire and Reduce. Expire and Reduce: Select one or more of the following: + Items Older Than: Expires items that are older than the number of days you specify. + Downloaded Items Older Than: Expires items that have been downloaded to users’ Group Wise Caching or Remote mailboxes that are older than the number of days you specify. It does not expire items that have been downloaded to non-Group Wise mailboxes (for example, POP and IMAP accounts). + Items Larger Than: Expires items that are larger than the size you specify. + Trash Older Than: Expires items in the Trash that are older than the number of days you specify. + Reduce Mailbox To: Expires items until the mailbox is reduced to the size you specify. Older, larger items are expired before newer, smaller items. + Reduce Mailbox to Limited Size: Expires items until the mailbox is the size specified using the Disk Space Management feature under Client Options, as described in “Setting Mailbox Size Limits” on page 172. 5 In the Include box, select Received Items, Sent Items, Calendar Items, and/or Only Backed- Up Items. You might want to notify users of the types of items that will be deleted. 6 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 396 “Logging” on page 396 “Results” on page 396 “Misc” on page 397 “Exclude” on page 397 Selected options can be saved for repeated use. See “Saving Mailbox/Library Maintenance Options” on page 397. 7 Click Run to perform the Expire/Reduce Messages operation. For additional disk space management assistance, see “Managing Disk Space Usage in the Post Office” on page 171. Reclaiming Disk Space in Domain and Post Office Databases As you add information to your system, the domain databases (wpdomain.db) and post office databases (wphost.db) increase in size. If you delete information, the space created in the databases for the information is not immediately recovered. GroupWise will use the free space before requiring more disk space; however, if you have deleted a large amount of information, you might want to reclaim unused database space. If you have frequent changes to your users, especially deletions, you should occasionally reclaim disk space. 1 In ConsoleOne, browse to and select the Domain object or Post Office object where you want to reclaim disk space. 2 Click Tools > GroupWise Utilities > System Maintenance. 370 GroupWise 6.5 Administration Guide Ka Groupwise System Maintenance x C Validate Database Run C Recover Database Close C Rebuild Database Description: Reclaiming space may reduce the size ofthe database by eliminating any unused space. 3 Select Reclaim Unused Space, then Run. 4 When prompted, make sure the Path to Database is correct. If an incorrect path is displayed, browse to and select the path to the database where you want to reclaim disk space. Click OK. Reducing the Size of Libraries and Document Storage Areas The amount of disk space you allow at each post office for your library databases varies according to the GroupWise features they use. If you are using Group Wise Document Management Services, you will need to determine storage reguirements for your documents. If you feel your current disk space usage by documents is not representative of your long-term reguirements, you can estimate the disk space users will need for documents by multiplying an average document size by the average number of documents per user by the total number of users in the post office. For example, the typical document size is 50 KB. Each user owns about 50 documents and there are 100 users on your post office. Sample Calculation: 50 KB (document size) x 50 documents (per user) x 100 users 2.5 GB of disk space Be sure to allow your libraries room to grow. When room to grow is no longer available, the following tasks help you make the best use of available disk space: + “Archiving and Deleting Documents” on page 372 + “Deleting Activity Logs” on page 373 See also “Backing Up and Restoring Archived Documents” on page 328. Managing Database Disk Space 371 Archiving and Deleting Documents Documents can be archived, retained indefinitely, or simply deleted. The document type property determines a document’s disposition (archive, delete, or retain). The document life property determines when it can be archived or deleted. When you run the Archive/Delete Documents option of Mailbox/Library Maintenance, documents in the selected libraries that have reached their document life dates are either deleted or archived. Documents that have reached their document life and been marked for deletion in the document type are simply deleted from the library, after which the document and its property information can no longer be found by any search. You can recover deleted documents from database backups. When documents are archived, their BLOBs are moved to archive directories. These directories are named arnnnnnn (where nnnnnn is an incremented integer with leading zeros), and are automatically created as needed. They are sometimes referred to as archive sets. The archive directories are located at post office directory\gwdms\lib01-FF\archive. When a document is archived, Group Wise determines if the document BLOB will fit in the current archive directory. If the BLOB will not fit, another archive directory is created and the BLOB is archived there. To archive/delete documents from one library or all libraries in the selected post offices: 1 In ConsoleOne, select one or more Library objects or Post Office objects for the documents you want to archive/delete. 2 Click Tools > Group Wise Utilities > Mailbox/Library Maintenance. ovell GroupWise Mailbox/Libra a a x @ GroupWise Objects: Action: [run | Post Offices = Archive/Delete Documents Close Help bx AE C Object Type E pf -- Databases | Logging | Results | Misc | C Libra nu IE | | - / F Documen Options file: 3 From the Action drop-down menu, select Archive/Delete Documents. 4 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 396 “Logging” on page 396 “Results” on page 396 “Misc” on page 397 372 GroupWise 6.5 Administration Guide Selected options can be saved for repeated use. See “Saving Mailbox/Library Maintenance Options” on page 397. 5 Click Run to perform the Archive/Delete Documents operation. Deleting Activity Logs To free up disk space by deleting the activity logs for one or more libraries: 1 In ConsoleOne, select one or more Library objects or Post Office object where you want to delete activity logs. 2 Click Tools > Group Wise Utilities > Mailbox/Library Maintenance. © GroupWise Objects: Post Offices bl Close Bs Provo1 Developme Delete logs olderthan| 1 {cays Retrieve... Save... Hep | eE el C Object Type A Databases | Logging] Results] mise | © (Library M User E ||| = Options file: 3 From the Action drop-down menu, select Delete Activity Logs. 4 Enter the number of days in the Delete Activity Logs Older Than field. The default is 60 days. 5 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 396 “Logging” on page 396 “Results” on page 396 “Misc” on page 397 Selected options can be saved for repeated use. See “Saving Mailbox/Library Maintenance Options” on page 397. 6 Click Run to delete unneeded activity logs. Managing Database Disk Space 373 374 GroupWise 6.5 Administration Guide Backing Up GroupWise Databases You should back up Group Wise” databases regularly so that ifa database sustains damage that cannot be repaired using the Group Wise database maintenance tools, you can still recover with minimum data loss. + “Backing Up a Domain” on page 375 + “Backing Up a Post Office” on page 375 + “Backing Up a Library and Its Documents” on page 376 + “Backing Up Individual Databases” on page 377 Backing Up a Domain All critical domain-level information is stored in the domain database (wpdomain.db). On NetWare, use a Target Service Agent (GWTSA or TSAFS) with a supported backup program or other backup software of choice to back up each domain database to a secure location. For details about how to use a Target Service Agent, see “Target Service Agents” on page 398. On Linux and Windows, use your backup software of choice to back up each domain database to a secure location. For a list of compatible products, see the Partner Product Guide (http:// www.novell.com/partnerguide). You can also use the GroupWise Database Copy utility (DBCopy) and the GroupWise Time Stamp utility (GWTMSTMP) to assist with backups. For details about how to use these utilities, see “Standalone Database Maintenance Programs” on page 391. If your backup software cannot handle open files, stop the MTA for the domain while the backup of the domain database takes place. See also “Restoring a Domain” on page 379. Backing Up a Post Office Critical post office-level information is stored in many different databases. The table below summarizes the databases and their locations: Database Location wphost.db \post_office_directory ngwguard.db \post_office_directory msgnn.db \post_office_directory\ofmsg userxxx.db \post_office_directory\ofuser puxxxxx.db \post_office_directory\ofuser Backing Up GroupWise Databases 375 Database Location *.idx and *.inc \post_office_directory\ofuser\index fd0-F6 \post_office_directory\offiles dmsh.db \post_office_directory\gwdms dmxxnn01-FF.db \post_office_director,\gwdms\lib0000-FF fd0-FF \post_office_directory\gwdms\lib0000-FF\docs * idx and *.inc \post_office_directory\gwdms\lib0000-FF\index To view a post office directory structure diagram, see “Post Office Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. On NetWare, use a Target Service Agent (GWTSA or TSAFS) with a supported backup program or other backup software of choice to regularly back up all databases in each post office to a secure location. For details about how to use a Target Service Agent, see “Target Service Agents” on page 398. On Linux and Windows, use your backup software of choice to back up each post office to a secure location. For a list of compatible products, see the Partner Product Guide (http://www.novell.com/ partnerguide). You can also use the GroupWise Database Copy utility (DBCopy) and the Group Wise Time Stamp utility (GWTMSTMP) to assist with backups. For details about how to use these utilities, see “Standalone Database Maintenance Programs” on page 391. See also “Restoring a Post Office” on page 379. Backing Up a Library and Its Documents If the document storage area for a library is physically located in a post office, the library and documents are backed up along with the rest of the data in the post office. However, document storage areas are frequently located outside of the post office directory structure due to disk space considerations. Therefore, remote document storage areas must be backed up separately. A post office can have multiple libraries and each library can have multiple document storage areas, so make sure you have identified all document storage areas in your library/document backup procedure. On NetWare, use a Target Service Agent (GWTSA or TSAFS) with a supported backup program or other backup software of choice to back up document storage areas. For details about how to use a Target Service Agent, see “Target Service Agents” on page 398. On Linux and Windows, use your backup software of choice to back up each document storage area to a secure location. For a list of compatible products, see the Partner Product Guide (http:// www.novell.com/partnerguide). After you have initially performed a full backup of your document storage areas, you can perform incremental backups by backing up to the same location to shorten the backup process. To ensure consistency between the backups of post office databases and document storage areas: 1 Back up your document storage areas. 2 Back up the post office. See “Backing Up a Post Office” on page 375. 376 GroupWise 6.5 Administration Guide 3 Perform an incremental backup of your document storage areas to pick up all new documents and document modifications that occurred while backing up the post office. You should need to restore data in a document storage area only if files have been damaged or become inaccessible due to a hard disk failure. See also “Restoring a Library” on page 380. Backing Up Individual Databases If you need to back up individual databases separately from backing up a post office, you can use your backup software of choice. See also “Restoring an Individual Database” on page 380. Backing Up GroupWise Databases 377 378 GroupWise 6.5 Administration Guide Restoring GroupWise Databases from Backup Database damage can usually be repaired using the database maintenance tools provided with Group Wise*. Only very occasionally should you need to restore databases from backup. + “Restoring a Domain” on page 379 + “Restoring a Post Office” on page 379 + “Restoring a Library” on page 380 + “Restoring an Individual Database” on page 380 + “Restoring Deleted Mailbox Items” on page 381 + “Recovering Deleted GroupWise Accounts” on page 384 Restoring a Domain Typically, damage to the domain database (wpdomain.db) can be repaired using the database maintenance tools provided in ConsoleOne®. See Chapter 26, “Maintaining Domain and Post Office Databases,” on page 345. If damage to the domain database is so severe that rebuilding the database is not possible: 1 Stop the MTA for the domain. See “Stopping the MTA” on page 609. 2 On NetWare, use a Target Service Agent (GWTSA of TSAFS) with a supported backup program or your backup software of choice to restore the domain database into the domain directory. See “Target Service Agents” on page 398. or On Linux or Windows, use your backup software of choice to restore the domain database into the domain directory. 3 Restart the MTA for the domain. See “Starting the MTA” on page 568. 4 To update the restored domain database with administrative changes made since it was backed up, synchronize the restored domain database with the primary domain database. See “Synchronizing a Secondary Domain” on page 365. If the restored domain database is for the primary domain, see “Synchronizing the Primary Domain from a Secondary Domain” on page 366. Restoring a Post Office Typically, damage to databases in a post office can be repaired using the database maintenance tools provided in ConsoleOne or using GroupWise Check (GWCheck). See Chapter 26, “Maintaining Domain and Post Office Databases,” on page 345, Chapter 27, “Maintaining User/ Resource and Message Databases,” on page 353, and “GroupWise Check” on page 391. Restoring GroupWise Databases from Backup 379 If damage to the post office was so severe that rebuilding databases is not possible: 1 Stop the POA for the post office. See “Stopping the POA” on page 480. 2 On NetWare, use a Target Service Agent (GWTSA or TSAFS) with a supported backup program or your backup software of choice to restore the various databases into their proper locations in the post office directory. See “Target Service Agents” on page 398. Or On Linux or Windows, user your backup software of choice to restore the various databases into their proper locations in the post office directory. 3 Ifyou do notuse GWTSA to restore the post office, time-stamp the restored user databases so that old items will not be automatically purged during nightly maintenance. Select the Post Office object, then click Tools > Group Wise Utilities > Backup/Restore Mailbox. On the Backup tab, select Restore, then click Yes. 4 Restart the POA for the post office. See “Starting the POA” on page 431. 5 Toupdatethe restored post office database (wphost.db) with the most current information stored in the domain database, rebuild the post office database. See “Rebuilding Domain or Post Office Databases” on page 349. 6 Toupdate other restored databases such as user databases (userxxx.db) and message databases (msgnn.db) with the most current information stored in other post offices, run Analyze/Fix Databases with Contents selected. See “Analyzing and Fixing User and Message Databases” on page 353. Restoring a Library Typically, damage to library databases (dmsh.db and others) can be repaired using the database maintenance tools provided in ConsoleOne or using Group Wise Check (GWCheck). See Chapter 28, “Maintaining Library Databases and Documents,” on page 359 and “Group Wise Check” on page 391. If damage to the library is so severe that rebuilding databases is not possible: 1 Stop the POA that services the library. See “Stopping the POA” on page 480. 2 On NetWare, use a Target Service Agent (GWTSA or TSAFS) with a supported backup program or your backup software of choice to restore the library. See “Target Service Agents” on page 398. or On Linux or Windows, user your backup software of choice to restore the library. 3 Restart the POA. See “Starting the POA” on page 431. 4 To update the restored library databases with the most current information stored in other post offices, run Analyze/Fix Databases with Contents selected. Also run Analyze/Fix Library. See “Analyzing and Fixing Library and Document Information” on page 360. Restoring an Individual Database Typically, damage to user and resource databases (userxxx.db) and message databases (msgnn.db) can be repaired using the database maintenance tools provided in ConsoleOne or using Group Wise 380 GroupWise 6.5 Administration Guide Check (GWCheck). See Chapter 27, “Maintaining User/Resource and Message Databases,” on page 353 and “Group Wise Check” on page 391. If damage to an individual database is so severe that repair is not possible: 1 Make sure the user to whom the affected database belongs is not running the GroupWise client. 2 Use your backup software of choice to restore the database into the proper location in the post office directory. User databases are stored in the ofuser subdirectory in the post office. Message databases are stored in the ofmsg subdirectory. 3 Toupdate the restored database with the most current information available, run Analyze/Fix Databases with Contents selected. See “Analyzing and Fixing User and Message Databases” on page 353. Restoring Deleted Mailbox Items With proper planning, you can assist users in retrieving accidently deleted items and items that became unavailable because of database damage. + “Setting Up a Restore Area” on page 381 + “Restoring a User’s Mailbox Items” on page 383 + “Letting Windows Client Users Restore Their Own Mailbox Items” on page 384 NOTE: The Cross-Platform client cannot access a restore area. Setting Up a Restore Area A restore area is only as useful as the post office data that is backed up regularly. Make sure you are backing up every Group Wise post office regularly, as described in “Backing Up a Post Office” on page 375. A restore area is a location you designate to hold a backup copy of a post office so that you or Group Wise Windows client users can access it to retrieve mailbox items that are unavailable in your live Group Wise system. To setup a restore area: 1 In ConsoleOne, click Tools > Group Wise System Operations > Restore Area Management. Restore Area Directories: Name UNC Path Dev Restore Area ÜPRV-GWisysigwsyste... Description: Restoring GroupWise Databases from Backup 381 The Restore Area Directory Management dialog box lists any restore areas that currently exist in your GroupWise system. 2 Click Create to set up a new restore area. Kütdit Backup/Restore Area xj Identification | Membership | Name: pe “> Description: - Location UNC Path: A AppleTalk Path (optional): Unix Path (optional): [ox ] Cancel | Help 3 Onthe Identification tab, specify a unique name for the new restore area. If desired, provide a lengthier description to further identify the restore area. 4 In the UNC Path field, browse to and select an existing directory that you want to use as a restore area. Or Specify the full path to a new directory, which will be created by the Target Service Agent that performs the restore. For more information, see “Target Service Agents” on page 398. Or For a post office on Linux, specify the full path to an existing or new directory in the Linux Path field, so that the Linux POA can locate the restore area. The Linux POA cannot interpret a UNC path. 5 Click Membership. (edit Backup/Restore Area x| identification Membership | Domain: Post Office: Object ID Provo1 Development a} Cancel | Help 6 Click Add, select one or more post offices or users that need access to the new restore area, then click OK to add them to the membership list. 7 When the membership list is complete, click OK to create the new restore area. 382 GroupWise 6.5 Administration Guide If you display the Post Office Settings page for a post office that has a restore area assigned to it, you see that the Restore Area field has been filled in. 8 On NetWare, use a Target Service Agent (GWTSA or TSAFS) with a supported backup program to restore a backup copy of the post office into the restore area. See “Target Service Agents” on page 398. Or Use your backup software of choice to restore the backup copy. 9 Grant the POA Read and Write rights to the restore area. 10 Ifthe restore area is located on a different server from where the post office directory is located, provide the POA with a username and password for logging in to the remote server. You can provide that information using the Remote User Name and Password fields on the Post Office object’s Post Office Settings page, using the /user and /password startup switches, or using the /dn startup switch. 11 If you want users to be able to retrieve individual items themselves, grant users Read and Write rights to the restore area. 12 Continue with “Restoring a User’s Mailbox Items” on page 383 or “Letting Windows Client Users Restore Their Own Mailbox Items” on page 384 as needed. Restoring a User’s Mailbox Items After you have set up a restore area and placed a backup copy of a post office into it, you can restore a user’s mailbox items for the user. 1 In ConsoleOne, browse to and select a User object for which you need to restore mailbox items. 2 Click Tools > GroupWise Utilities > Backup/Restore Mailbox. The Restore tab is automatically selected for you, with the restore area and directory location displayed for verification. Backup/Restore mabor A Object: Provo1.Development.HWong Restore Area: Dev Restore Area Path: PRY-GWisysigwsystemidevirestarea Restore all messages for this user? Yes No Help 3 Click Yes to restore the selected user’s mailbox items into his or her mailbox. 4 Notify the user and explain the following about the restored items: + The user might want to manually delete unwanted restored items. + The user should file or archive the items that he or she wants within seven days. After seven days, unaccessed items will be deleted after the amount of time allowed by existing auto-delete settings, as described in “Environment Options: Cleanup” on page 983. If auto-deletion is not enabled, the restored items will remain in the mailbox indefinitely. Restoring GroupWise Databases from Backup 383 Letting Windows Client Users Restore Their Own Mailbox Items After you have set up a restore area and given Windows client users access to it, users can selectively restore individual items into their mailboxes. This saves you the work of restoring mailbox items for users and it also saves users the work of deleting unwanted restored items. After a restore area has been set up: 1 In the GroupWise Windows client, click File > Open Backup. 2 Browse to and select the restore area directory, then click OK. 3 In the Password field, type your GroupWise password, then click OK to access the backup copy of your mailbox. 4 Retrieve individual items as needed. The backup copy of your mailbox offers basic features such as Read, Search, and Undelete so that you can locate and retrieve the items you need. 5 When you are finished restoring items to your live mailbox, click File > Open Backup again to remove the check mark from the Open Backup option and return to your live mailbox. Recovering Deleted GroupWise Accounts If you have a reliable backup procedure in place, as described in Chapter 31, “Backing Up Group Wise Databases,” on page 375, you can restore recently deleted GroupWise user and resource accounts. 1 Make available a backup copy of a domain database (wpdomain.db) where the deleted Group Wise account still exists. 2 In ConsoleOne, click Tools > GroupWise Utilities > Recover Deleted Account. (Recover GroupWise Account E xÍ Recover GroupWise Account Novell. This advisor helps you recover a deleted GroupWise account from a backup copy of the GroupWise directory (primary domain o database). - Once the account has been recovered, you can use the la Backup/Restore Mailbox utility to restore the contents ofthe if mailbox from your backup system. ù Backup Domain Path: a Dal Account To Restore: | ea Cancel | Help 3 Browse to and select the backup copy of the domain database. 4 Select the user or resource that you need to recover the account for. 5 Click Next. 384 GroupWise 6.5 Administration Guide Kärecover GroupWise Account E ES Additional Information Additional information for account: Provo1.Developmentita... Some ofthe information below will not be added to the account atthis time but can be added manually after the account has been recovered. Description Object ID Itanaka ES Family 4 Last Modified At Provo1 Last Modified By (CORP. TREE) a 0 Department Development Hemisphere 1 GUID 1049E680-0778- Custom Index Flag Tip Save to clipboard | = Back | Cancel | Help 6 If desired, click Save to Clipboard, paste it into a file, then save or print it. 7 Click Next. [Recover GroupWise Account | Summary The following account will be restored to the location listed: GroupWise Account ID: Provo1.Developmentltanaka Surname: Tanaka Given Name: Lori GroupWise File ID: itt GUID: 10A9E680-0778-0000-9518-CA0090 Visibility: 2 eDirectory Tree: CORP_TREE eDirectory Context: Users.docdev.prv.novell 4 >| To restore the account, click Finish. = Back | ze Cancel | Help 8 Click Finish. At this point, you have restored the user’s or resource’s GroupWise account into the GroupWise system. However, this does not restore ownership of resources, nor does the account’s mailbox contain any item at this point. 9 Ifthe restored user owned resources, manually restore the ownership. See “Changing a Resource’s Owner” on page 227 10 To restore the contents of the account’s mailbox, follow the instructions in “Restoring Deleted Mailbox Items” on page 381. Restoring GroupWise Databases from Backup 385 386 GroupWise 6.5 Administration Guide Retaining User Messages Group Wise? enables you to retain user messages until they have been copied from message databases to another storage location. This means that a user cannot perform any action, such as emptying the mailbox Trash, that will result in a message being removed from the message database before it has been copied. Message retention primarily consists of two activities: 1) not allowing users to remove messages until they have been retained and 2) retaining the messages by copying them from message databases to another location. Group Wise supplies the ability to not allow users to remove messages until they’ve been retained. It also provides methods for message retention applications to securely access user mailboxes and copy messages. However, it does not provide the message retention application. You must develop or purchase a third-party (non-Group Wise) application that performs this service. + “How Message Retention Works” on page 387 + “Acguiring a Message Retention Application” on page 389 + “Enabling Message Retention” on page 389 How Message Retention Works To understand how message retention works, you need to understand what Group Wise does and what the message retention application does, as explained in the following sections: + “What Group Wise Does” on page 387 + “What the Message Retention Application Does” on page 388 What GroupWise Does During installation of the message retention application, the application uses the Group Wise Trusted Application API to create a trusted application record in the Group Wise system. The trusted application record includes a flag that designates it as a message retention application. This flag is surfaced through the trusted application’s Provides Message Retention Service setting in ConsoleOne (Tools menu > GroupWise System Operations > Trusted Applications > Edit). {edit Trusted Application xj Name: Trusted Application 1 Description: Trusted application for authentication number 1 [> Requires MTA Routing for Message Delivery I Requires SSL Provides Message Retention Service TCP/IP Address: faww.novell.com:1 235 OK Cancel Help Retaining User Messages 387 When ConsoleOne reads a trusted application record that has the Provides Message Retention Service setting turned on, it adds a Retention tab to the Group Wise Client Environment Options (Tools menu > Group Wise Utilities > Client Options > Environment). {Environment Options: Development xi General | Client Access | Views | File Location] Cleanup | Threshold Retention | E Enable Message Retention Service Sa Name: Trusted Application 1 Description: Trusted application for authentication number 1 Restore Default Settings Cancel Help You use this Retention tab to enable message retention at the domain, post office, or user level, meaning that you can enable it for all users in a domain, all users in a post office, or individual users. Turning on message retention alters the GroupWise client purge behavior by preventing a user from purging any messages from his or her mailbox that have not yet been retained. What the Message Retention Application Does Different message retention applications might vary slightly in their approach to retaining messages. This section provides a general approach to message retention. To determine whether or not mailbox messages have been retained, the message retention application adds a time stamp to the mailbox. The message retention application can use the GroupWise Object API or GroupWise IMAP support to write (and read) the time stamp. In addition, you can use the GroupWise Time Stamp Utility (page 405) to manually set the time stamp. The time stamp represents the most recent date and time that message retention was completed for the mailbox. Messages delivered after the time stamp cannot be purged until they have been retained. This requires that the message retention application retain items chronologically, oldest to newest. For example, assume a mailbox has a message retention time stamp of May 7, 2003 12:00:00. The mailbox has three folders with a total of seven messages: 388 GroupWise 6.5 Administration Guide 63 Folder 1 [O Message 1 May 5, 2003 10:03:00 J Message 2 May 7, 2003 15:22:00 J Message 3 May 6, 2003 16:54:00 62 Folder 2 _] Message 4 May 7, 2003 8:34:00 J Message5 May 7, 2003 16:59:00 = Folder 3 [5 Message 6 May 6, 2003 14:23:00 J Message? May 9, 2003 11:31:00 The message retention application reads the existing time stamp (May 7, 2003 12:00:00) and selects a time between that time and the current time. For example, suppose the current time is May 9, 2003 14:00:00. The message retention application could choose May 8, 2003 12:00:00 as the new time stamp. It would then retain any messages delivered between the existing time stamp (May 7, 2003 12:00:00) and the new time stamp (May 8, 2003, 12:00:00). In the above example, messages 1, 4, and 6 are older than the existing time stamp (May 7, 2003 12:00:00). The message retention application would not retain these messages again, assuming that they had already been safely retained. Messages 2 and 5 have dates that fall between the existing time stamp (May 7, 2003 12:00:00) and the new time stamp (May 8, 2003, 12:00:00) so they would be retained. Messages 3 and 7 have dates that fall after the new time stamp (May 8, 2003, 12:00:00) so they would not be retained until the next time the message retention application ran against the mailbox. Acquiring a Message Retention Application If you do not already have a message retention application to use with GroupWise, you have two options: 1) you can purchase an application from a Group Wise partner or 2) you can develop your own application. For information about GroupWise partners that provide message (e-mail) retention applications, see the Partner Product Guide (http://www.novell.com/partnerguide/). For information about developing a message retention application, see the GroupWise Object API and GroupWise Trusted Application API documentation at the Novell Developer Kit Web site (http://developer.novell.com/ndk). Enabling Message Retention This section assumes that you’ ve installed a message retention application as a Group Wise trusted application and that it is configured to provide a message retention service. If not, see “Trusted Applications” on page 62. Message retention is not enabled until you designate the users whose messages you want retained by the application. You can designate users at the domain level, post office level, or individual user level. 1 In ConsoleOne, right-click the domain, post office, or user for which you want to enable message retention, click GroupWise Utilities > Client Options to display the GroupWise Client Options dialog box. Retaining User Messages 389 Environment Send be | E Security Date and Time 2 Click Environment to display the Environment Options dialog box, then click the Retention tab. KR environment Options: Development x| General | Client Access | Views | File Location | Cleanup | Threshold Retention | [7 Enable Message Retention Service SO Name: Trusted Application 1 Description: — Trusted application for authentication number 1 Restore Default Settings Cancel | Help 3 Turn on the Enable Message Retention Service setting. 4 Ifyou want to lock the setting at this level, click the Lock button. For example, ifyou lock the setting at the domain level, the setting cannot be changed for any post offices or users within the domain. If you lock the setting at the post office level, it cannot be changed individually for the post office’s users. This setting does not display in the Group Wise client. Therefore, there is no lock available when editing this setting for individual users. 5 Click OK to save the changes. 390 GroupWise 6.5 Administration Guide Standalone Database Maintenance Programs Some aspects of Group Wise” database maintenance are performed by standalone maintenance programs that can be incorporated into batch files along with other system maintenance programs. + “GroupWise Check” on page 391 + “Target Service Agents” on page 398 + “GroupWise Time Stamp Utility” on page 405 + “GroupWise Database Copy Utility” on page 412 GroupWise Check GroupWise Check (GWCheck) is a tool provided for GroupWise that will check and repair GroupWise user, message, library, and resource databases without needing ConsoleOne*, In addition to checking post office, user, and library databases, it will also check users’ remote, caching, and archive databases. + “GWCheck Functionality” on page 391 + “Starting GWCheck on a Windows Workstation” on page 393 + “Starting GWCheck on a Linux Workstation” on page 394 + “Using GWCheck on a Workstation” on page 395 + “Executing GWCheck from a Windows Batch File” on page 398 + “Executing GWCheck from a Linux Script” on page 398 + “GroupWise Check Error Codes” NOTE: GWCheck is not currently available for use on Macintosh workstations. GWCheck Functionality The GWCheck utility begins by comparing three databases. WPHOST.DB NGWGUARD.DB FILE SYSTEM The post office database The guardian database The file system for this post office is (wphost.db) is checked for (ngwguard.db) is checked to find checked to see if the user database the file ID (FID) of the out if this user database has been (userxxx.db) for this user exists. selected user. created. After GWCheck makes the database comparisons, it begins processing according to the databases selected and any inconsistencies found. Standalone Database Maintenance Programs 391 Case 1 - Missing Entry in the Post Office Database (wphost.db) In this example, a contents check is run either against all users on the post office or against one user, “ABC.” GWCheck does not find the FID of one or more users. WPHOST.DB NGWGUARD.DB FILE SYSTEM ? userabc.db userabc.db No entry for this user is found in An entry is found in the guardian Also, a user database the post office database database (ngwguard.db), (userxxx.db) for this user is (wphost.db). indicating that the user has been found in the ofuser directory. deleted. GWCheck will remove the entry from ngwguard.db, delete userabc.db and systematically delete all of the user's messages from the message databases that are not still being referenced by other users. If the user has been deleted, GWCheck will clean up after that user. WARNING: If a post office database becomes damaged so some users are unable to log in, GWCheck should not be run until the post office has been rebuilt. For more information, see “Rebuilding Domain or Post Office Databases” on page 349. Case 2 -Missing Entry in the Guardian Database (ngwguard.db) In this example, a GWCheck is run either against all users on the post office or against one user, “ABC.” A user's FID is found and the user's database is found in the post office, but the user is missing in ngwguard.db. WPHOST.DB NGWGUARD.DB FILE SYSTEM FID abc ? userabc.db The user appears in the post The guardian database A user database (userxxx.db) for office database (wphost.db). (ngwguard.db) shows no user the user does exist in the ofuser database for this user. directory. GWCheck will create the user in ngwguard.db, using database userabc.db. Even if ngwguard.db is damaged, it is unlikely that data will be lost. Case 3 - Missing User Database (userxxx.db) In this example, a GWCheck is run either against all users on the post office or against one user, “ABC.” The user’s FID is found, as well as the user's record in ngwguard.db. However, the user's database is not found. WPHOST.DB NGWGUARD.DB FILE SYSTEM FID abc userabc.db ? The user is found in the post The user is found in the guardian No user database office database (wphost.db). database (ngwguard.db). (userxxx.db) is found in the ofuser directory. GWCheck will take actions depending on what options are selected. 392 GroupWise 6.5 Administration Guide Contents Check: GWCheck will delete all of this user's messages from the message databases if they are not referenced by other users. Structural Rebuild: GWCheck will create a blank user database for this user. Existing messages for this user will be ignored. Re-create User Database: GWCheck will create a blank user database for this user and populate it with messages in the message databases that have been sent to or from this user. WARNING: If a user database has been deleted, do not run a Contents Check until after a Structural Rebuild or Re-create User Database has been run for that user. For more information, see “Performing a Structural Rebuild of a User Database” on page 355 and “Re-creating a User Database” on page 356. Starting GWCheck on a Windows Workstation You can use GWCheck on any Windows 98/NT/2000/XP workstation. As an administrator, you can run GWCheck for databases in any post office accessible from the workstation where GWCheck is installed. The GWCheck program performs all database maintenance itself, rather than handing off a task to the POA as ConsoleOne would do to perform database maintenance. Depending on how Group Wise Check is installed, users might have a Repair Mailbox item on the Group Wise Windows client Tools menu that enables them to run GWCheck from the client. If the GWCheck program is available to users, users can perform database maintenance on their Remote, Caching, and archive mailboxes, which are not accessible from ConsoleOne. For the Repair Mailbox item to display on the Group Wise Windows client Tools menu, the following files must be installed in the Group Wise directory; by default, this is c:\novell\groupwise. + gwcheck.exe + gwchkxx.dil (Replace xx with your language code) + gwchkxx.chm (Replace xx with your language code) The Group Wise administrator can install these files by using SetupIP to install the GroupWise Windows client, and selecting to install and enable GWCheck. The default for SetupIP is to install GWCheck, but not enable GWCheck. The files are then copied to the \novell\groupwise\gwcheck directory. For additional information about SetupIP and GWCheck, see “[GWCHECK]” on page 1009. If the client was installed from the installation program on the CD or the defaults are chosen for SetupIP, the client user needs to copy the files from the GWCheck directory (\novell\groupwise\gwcheck) to the main GroupWise directory (\novell\groupwise\). 1 From the Start menu, click Run, then browse to and double-click gwcheck.exe. Standalone Database Maintenance Programs 393 & GroupWise Mailbox/Library Maintenance 6.0.0 (20017375) Database Type Action: [ON 3 Analyze/Fix Databases hd NV Structure C Archive T Index Check Database Path: I7 Contents qd [A Colect statistic Post Office Name: r Object Type € Post Office FN Fix problems FT Update user disk space total C User/Resource: C Library: Databases | Logging | Results | Misc | Exclude | VV User IV Message T Document Options file: 2 To view online help in GWCheck, click Help. 3 Continue with “Using GWCheck on a Workstation” on page 395. Starting GWCheck on a Linux Workstation You can use GWCheck on any Linux workstation where you can run the Cross-Platform client. GWCheck is not installed along with the client, so you must install it manually. 1 Change to the directory where the GWCheck RPM is located or copy it to a convenient location on your workstation. The GWCheck RPM (groupwise-gwcheck-6.5.1-mmdd.1386.rpm) is located in the /client and /admin directories in your Group Wise software distribution directory if it is has been updated or on the GroupWise 6.5 for Linux Administrator CD if an updated software distribution directory is not available. 2 Install GWCheck. rpm -i groupwise-gwcheck-6.5.1-mmdd.i386.rpm 3 Change to the /opt/novell/groupwise/gwcheck/bin directory. 4 Enter . /gwcheck to start GWCheck. 394 GroupWise 6.5 Administration Guide £ Novell GroupWise Mailbox/Library Maintenance Database Type Action: @ Post Office Analyze/Fix Databases | 2 [vi Structure Close O Remote/Cach... C] Index check - PE Retrieve. _] Contents © Archive Collect statistics Save... [vi Fix problems [] Update user disk space totals Help Database Path [al Post Office Name Object Type @ Post Office © Users/Resour... [Databases | Logging | Results | Misc | Exclude | © Libraries vi User [v] Message [] Document Options file: /opt... 5 To view online help in GWCheck, click Help. 6 Continue with Using GWCheck on a Workstation. Using GWCheck on a Workstation With only a few differences in interface functionality, as described in the online help, you can perform the same maintenance activities in Group Wise Check as you can in Mailbox/Library Maintenance in ConsoleOne: + + + “Analyzing and Fixing User and Message Databases” on page 353 “Performing a Structural Rebuild of a User Database” on page 355 “Re-creating a User Database” on page 356 “Analyzing and Fixing Databases for Libraries and Documents” on page 359 “Analyzing and Fixing Library and Document Information” on page 360 “Gathering Mailbox Statistics” on page 367 “Reducing the Size of User and Message Databases” on page 369 “Reclaiming Disk Space in Domain and Post Office Databases” on page 370 “Archiving and Deleting Documents” on page 372 “Deleting Activity Logs” on page 373 “Using Mailbox/Library Maintenance Tab Options” on page 395 “Reusing Library/Mailbox Maintenance Settings” on page 397 Using Mailbox/Library Maintenance Tab Options Both Group Wise Check and Mailbox/Library Maintenance in ConsoleOne use tab options to control the checking process. + + “Databases” on page 396 “Logging” on page 396 Standalone Database Maintenance Programs 395 + “Results” on page 396 + “Misc” on page 397 + “Exclude” on page 397 Databases To select the types of database to perform the Mailbox/Library Maintenance check on, click Databases. Databases | Logging | Resuits | Misc | Exclude | M User M Message C Document Depending on the object type and action already selected in the main window, some database types might be unavailable. If all the database types are unavailable, then one or more database types have been pre-selected for you. You can perform an action on the following databases when the type is not unavailable: + User: Checks the user databases. + Message Databases: Checks the message databases. + Document: Checks the library and document properties databases. Logging To specify the name of the file where you want the results of the MailBox/Library Maintenance check to be stored, click Logging. Databases Logging | Results| Misc | Exclude | Log File: [I Verbose logging Specify a file name. By default, the file is created in the post_office_directory\wpcsout\ofs directory. To redirect the log file to another location, specify a full path and file name. Use a UNC path, or make sure the mapped drive path is from the perspective of the POA. Click Verbose Logging to log detailed information. Verbose logging might produce large log files and slow execution. This file will be sent to the users selected on the Results tab. Results To select users to receive the results of the Mailbox/Library Maintenance check, click Results. Databases | Logging Results | Misc | Exclude | Send results to: M Administrator [7 Individual users CC: Message. 396 GroupWise 6.5 Administration Guide Select Administrator to send the results to the user defined as the Group Wise domain administrator. Select Individual Users to send each user the results that pertain to him or her. Click Message to include a message with the results file. Misc If you need to run a Mailbox/Library Maintenance check with special options provided by Novell Support, click Misc. Databases | Logging | Results Misc | Exclude | Support options: Use the Support Options field to specify command line parameters. Support options are typically obtained from Novell Support representatives when you need assistance resolving specific database problems. Search the Novell Support Knowledgebase (http://support.novell.com/search/ kb index jsp) for TIDs and Support Pack Readmes that list support options. Make sure that you clearly understand what the Support options do before you use them. Exclude If you want to exclude certain users in the selected post office from having the Mailbox/Library Maintenance check performed on their databases, click Exclude. Databases | Logging | Results| Misc Exclude | Add... Click Add, select one or more users to exclude, then click OK. Reusing Library/Mailbox Maintenance Settings For convenience, you can store the options you select in Mailbox/Library Maintenance and Group Wise Check so that you can retrieve them for later use. + “Saving Mailbox/Library Maintenance Options” on page 397 + “Retrieving Mailbox/Library Maintenance Options” on page 397 Saving Mailbox/Library Maintenance Options 1 After you have selected all of the options in the Mailbox/Library Maintenance dialog box, click Save. 2 Browse to the directory where you want to save the options file if you do not want to use the default of wptools in the domain to which you’re currently connected. 3 Enter a file name if you do not want to use the default of gwcheck.opt. 4 Click Save. Retrieving Mailbox/Library Maintenance Options 1 In the Mailbox/Library Maintenance dialog box, click Retrieve. Standalone Database Maintenance Programs 397 2 Browse to and select your saved option file. 3 Click Open. Executing GWCheck from a Windows Batch File The GWCheck program is located in the \admin\utilities\gwcheck directory in your Group Wise software distribution directory if it has been updated or on the Group Wise 6.5 Administrator CD if an updated software distribution directory is not available. It might also be installed along with the Group Wise client software in the gwcheck subdirectory of the client installation directory. 1 Usethe following syntax to create a batch file to execute GWCheck: gwcheck /opt=options file /batch If you want to include the path to an archive database, use the /pa switch. 2 To create an options file, see “Saving Mailbox/Library Maintenance Options” on page 397. Executing GWCheck from a Linux Script The GWCheck program is located in the /admin directory in your Group Wise software distribution directory if it has been updated or on the Group Wise 6.5 for Linux Administrator CD if an updated software distribution directory is not available. 1 Make sure that GWCheck has been installed, as described in “Starting GWCheck on a Linux Workstation” on page 394 2 Create a script to execute GWCheck using the following syntax: /opt/novell/groupwise/gwcheck/bin --opt options file --batch If you want to include the path to an archive database, use the --pa switch. 3 To create an options file, see “Saving Mailbox/Library Maintenance Options” on page 397. Target Service Agents A Target Service Agent (TSA) helps generic backup software back up specialized data located on any “target.” A target is a specific location where data is stored, such as a NetWare file system, an eDirectory database, or a collection of GroupWise databases. A target could also be an application that provides data to be backed up. A TSA is specialized to scan, read, and write the specific types of data available at the target. A TSA serves as an intermediary between specific data types and a general backup engine. The GroupWise Target Service Agent (GWTSA) has long been included with GroupWise and can back up GroupWise data stored on NetWare 4.2, 5.1, and 6.x servers. It is specialized to back up specific GroupWise data types, such as domains and post offices. The NetWare Target Service Agent for File Systems (TSAFS), available on NetWare 6.x (but not on earlier versions of NetWare), includes a startup option enabling it to handle GroupWise data. TSAFS includes file system backup enhancements that GWTSA does not provide. For optimum backups on NetWare, select the Target Service Agent appropriate for your version of NetWare and GroupWise: + “GroupWise Target Service Agent” on page 399 + “NetWare Target Service Agent for File Systems” on page 403 398 GroupWise 6.5 Administration Guide GroupWise Target Service Agent The Group Wise Target Service Agent (GWTSA) provides reliable backups of a running GroupWise system on NetWare by successfully backing up open files and locked files, rather than skipping them. + “GWTSA Functionality” on page 399 + “Running GWTSA” on page 400 + “GWTSA Startup Switches” on page 403 GWTSA Functionality The GroupWise Target Service Agent (GWTSA) works with other backup software on NetWare. For a complete and current list of compatible backup software, use the Partner Product Guide (http://www.novell.com/partnerguide). GWTSA has no user interface of its own, but its presence running along with other backup software provides Group Wise options in the backup software that would not otherwise be available. As a Target Service Agent, GWTSA supports any feature that your backup software supports. So if your backup software supports full, incremental, and differential backups or working set and copy jobs, so does GWTSA. GWTSA backs up standard Group Wise directories and files; extra directories and files that appear within a standard GroupWise directory structure are not backed up by GWTSA. The table below lists the directories and files that are backed up by GWTSA. GroupWise Directories Subdirectories/Files Location Backed Up Domain domain_directory wpdomain.db wpdomain.dc wphost.dc gwdom.dc gwpo.dc mtaname domain directorAwpgate async gwia webac60a etc. Standalone Database Maintenance Programs 399 Running GWTSA Subdirectories/Files Backed Up GroupWise Directories Location Post Office post office directory wphost.db ngwguard.db ngwguard.dc ngwguard.rfl ngwguard.fbk ngwcheck.db ngwcheck.log gwpo.dc post_office_directory\gwdms dmsh.db post_office_directory\gwdms\library_directory *.db archive\*.* docs\*.* post_office_directory\offiles aS post_office_directory\ofmsg 2 post office directorytofmsgiguardbak ngwguard.fbk post office director/tofuser userxxx.db post_office_directory\ofuser\index post_office_directory\ofviews\win Library (Document Storage Area) library_directory *.db archive\*.* docs\*.* To see directory structure diagrams showing where the files are located, see “Domain Directory” and “Post Office Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. GWTSA automatically time-stamps all backed-up user databases (userxxx.db), so that the Allow Purge of Items Not Backed Up option described in “Modifying Environment Options” on page 977 can function to safeguard users’ deleted items against being purged from your Group Wise system before they have been backed up. IMPORTANT: If you decide not to use GWTSA, user databases must be time-stamped as a separate process in order for the purge control environment option to work properly. For instructions, see “GroupWise Time Stamp Utility’ on page 405. GWTSA is available for use on NetWare 4.2, 5.1, and 6.x. The gwtsa.nlm program file is automatically installed along with the Group Wise agents (POA and MTA). If the domains and post offices to back up are located on a different server from where the agents run, you must copy GWTSA (gwtsa.nlm), along with the agent engine (gwenn4.nlm), to the server where the data resides and run it there. 400 GroupWise 6.5 Administration Guide During agent installation, a gwtsa.ncf file is created in the directory where you installed the agents. By default, it loads gwtsa.nlm and provides a /home switch for each domain and post office you selected to be serviced by the MTA and POA. For example: Syntax: load sys:\system\gwtsa /home-domain directory /home-post office directory Example: load sys:\system\gwtsa /home-sys:\gwsystem\provol /home-sys:\gwsystem\dev You can add additional instances of the /home switch to back up more domains and post offices. Syntax: load sys:\system\gwtsa /home-domain directory /home-domain directory /home-post office directory /home-post office directory /home-post office directory Example: load sys:\system\gwtsa /home-sys:\gwsystem\provol /home-sys:\gwsystem\provo2 /home-sys:\gwsystem\dev /home-sys:\gwsystem\sales /home-sys:\gwsystem\research You can also add instances of the /home switch to point to restore areas for post offices or to other temporary locations where you want to restore data. By default, GWTSA places temporary files in the sys:\system\temp directory during the backup process. If necessary, use the /tempdir switch to specify an alternate location where more disk space is available for temporary files. Additional configuration of GWTSA can be done using other startup switches. See “GWTSA Startup Switches” on page 403 for a complete list. To start GWTSA immediately, run the gwtsa.ncf file at the NetWare server console. To start GWTSA automatically each time you restart the server, add a gwtsa.ncf line to the autoexec.ncf file. With GWTSA running, you are ready to back up GroupWise data with Novell Storage Management Services or other compatible backup software. Using GWTSA with Your Backup Software The GWTSA adds GroupWise options to your backup software. This section uses Novell Storage Management Services (SMS) and the NetWare Backup utility (nwback32.exe) as an example of how to integrate GWTSA into your backup software. Similar steps are necessary to integrate GWTSA with other backup software. If you plan to use GWTSA with SMS, this section assumes that SMS has been installed and configured and is running properly. If you need assistance with SMS, refer to Backup and Restore Services (Storage Management Services) on the NetWare 6.5 Documentation Web site (http:// www.novell.com/documentation/nw65/index.html). + “Backing Up GroupWise Data with SMS” on page 402 + “Restoring GroupWise Data with SMS” on page 402 Standalone Database Maintenance Programs 401 NOTE: If you are using Veritas Backup Exec 9 for NetWare, be sure to deselect Delete Existing Trustees on the Backup Exec NetWare tab when you are creating a restore job. If you do not deselect Delete Existing Trustees, GWTSA cannot restore any file that has a .db extension. All GroupWise databases have a .db extension. Backing Up GroupWise Data with SMS To back up Group Wise data using SMS with GWTSA running: 1 Start nwback32.exe from the sys:\public directory of your NetWare server. You can also use sbcon.nlm at the NetWare server console to perform the backup. 2 Inthe Ouick Access dialog box, click Backup. 3 Expand the WHAT TO BACKUP object. Eänovell Storage Management Services - [Backup] 4 -10{x| mi File Backup Restore Verify Create Session Job Administration Device Administration Reports Help =f 2|a|g|o/a]| S-E WHERE TO BACKUP $- E] NETWARE SERVERS El WORKSTATIONS & F] NETWARE SERVERS'S DOS PARTITION &--@ GROUPWISE DATABASE For Help, press F1 A GROUPWISE DATABASE object has been added to the list of things you can back up. 4 Expand the GROUPWISE DATABASE object to list GroupWise domains, post offices, and libraries that are available for backup. 5 After selecting the GroupWise data to back up, continue using SMS as you usually would to perform the backup. Restoring GroupWise Data with SMS To restore Group Wise data using SMS with GWTSA running: 1 Start nwback32.exe from the sys:\public directory of your NetWare server. You can also use sbcon.nlm at the NetWare server console to restore GroupWise data. 2 In the Quick Access dialog box, click Restore. 3 Expand the WHAT TO RESTORE object, then select your backup device. 4 Expand the WHERE TO RESTORE object. A GROUPWISE DATABASE object appears on the list of things you can restore. 5 Expand the GROUPWISE DATABASE object to list GroupWise domains, post offices, libraries, and restore areas where data can be restored. 6 After selecting the GroupWise data to restore, continue using SMS as you usually would to restore data. 402 GroupWise 6.5 Administration Guide If you need to restore Group Wise data to an existing domain, post office, or library, make sure your backup software is configured to overwrite newer files than those that are being restored. If you are restoring GroupWise data to a temporary location, make sure you have sufficient free disk space to accommodate the files that are being restored. GWTSA Startup Switches The following startup switches can be used with GWTSA: /home Specifies the GroupWise location to back up or restore to. Multiple instances of the /home switch are typical. Use a /home switch for each domain and post office to back up. Also use a /home switch for each post office restore area and any other temporary location to which you want to restore Group Wise data outside the standard GroupWise directory structure. /tempdir Specifies where GWTSA places its temporary files during the backup process. The default is the sys:\system\tsa\temp directory. Nog Turns on logging and displays a logging screen. By default, logging is turned off. When you turn logging on, a gwtsa.log file is created in the sys:\system\tsa directory. M Sets the log level to determine how much information is written to GWTSA log file. Use n for Normal and v for Verbose. NetWare Target Service Agent for File Systems The Target Service Agent for File Systems (TSAFS) is available on NetWare 6.0 and later. + “TSAFS Functionality” on page 403 + “Running TSAFS” on page 404 + “Using TSAFS with Novell Storage Management Service (SMS)” on page 404 IMPORTANT: |f you are using GroupWise 6.5 Support Pack 3 or later, TSAFS can time-stamp GroupWise databases as part of the backup process. If you are using an earlier version of GroupWise, time stamping must be performed as a separate process, as described in “GroupWise Time Stamp Utility” on page 405. TSAFS Functionality The Target Service Agent for File Systems (TSAFS) includes enhancements that earlier versions of TSAFS did not include: + Supports GroupWise database lock/backup/unlock functionality so that you can back up a running GroupWise system + Provides time stamping of GroupWise 6.5.3 and later user databases so that the Allow Purge of Items Not Backed Up option described in “Modifying Environment Options” on page 977 can function to safeguard users’ deleted items against being purged from your Group Wise system before they have been backed up + Supports backups of clustered servers so that the backup job continues on failover + Uses a read-ahead, data caching mechanism to improve backup performance For complete details about the TSAFS, see the NetWare 6.5 Storage Management Services Administration Guide on the NetWare 6.5 Documentation page (http://www.novell.com/ documentation/nw65/index.html). Standalone Database Maintenance Programs 403 Running TSAFS At your NetWare server console, unload TSAFS, then use the following command to start TSAFS with Group Wise functionality: load tsafs /EnableGW=True The switch setting is saved in a configuration file, so that you do not need to include the switch when you load tsafs.nlm in the future. To start TSAFS automatically each time you restart the server, load tsafs.nlm in the autoexec.ncf file. To run TSAFS without GroupWise functionality, unload TSAFS, then reload using: load tsafs /EnableGW=False To determine whether or not TSAFS is running with Group Wise functionality, use: tsafs Scroll down to the /EnableGW entry and look for a value of True or False. Using TSAFS with Novell Storage Management Service (SMS) 1 After TSASF is running on the NetWare server, start the NetWare Backup utility (nwbackup32.exe) on a Windows machine. You can also use sbcon.nlm at the NetWare server console to perform the backup. 2 Inthe Ouick Access dialog box, click Backup, then expand WHAT TO BACKUP. TE | File Backup Restore Verify Creat ti j r R Help =f six &|2|4|—|\m|\rle ala |slola|, Ex | EE Ef WHERE TO BACKUP $- E] NETWARE SERVERS PBL WORKSTATIONS $- El NETWARE SERVERS'S DOS PARTITION 48 GROUPWISE DATABASE For Help, press F1 | A The GROUPWISE DATABASES item is listed if you have been using the Group Wise Target Service Agent (GWTSA). Do notuse it with TSAFS. 3 Expand NETWARE SERVERS, then browse to and select directories where Group Wise domains, post offices, and document storage areas are located. 404 GroupWise 6.5 Administration Guide EÄnovell's Storage Management Service - [Backup] «lol x} Ej File Backup Restore Verify Create Session Job Administration Device Administration Reports Help [8 PAR Sl PRY-GWDOCSB a | |E- WHERE TO BACKUP +$-[) BT NetWare server é--[ À Server Specific Info 8 (9 Fi sys: Ei swap. .MEM Bi Icono El Apache Bi audit Ei .consoleone Fi DELETED.5AV Ej DESKTOP. AFP F ETC Ei arpwise KE E n ee e E D-B-B-B-B-B-B-E KI Ef devdocs © & provot zi For Help, press F1 [ [ [ A For background information about Group Wise directory structures, see “Domain Directory” and “Post Office Directory” in “Directory Structure Diagrams” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. 4 Configure the backup job as needed, as described in NetWare 6.5 Storage Management Services Administration Guide on the NetWare 6.5 Documentation page (http:// www.novell.com/documentation/nw65/index.html). To avoid error messages caused by open files that do not need to be backed up, some files can be excluded from the backup, for example: + Agent log files (mmddpoa.nnn, mmddmta.nnn, mmddgwia.nnn, and mmddweb.nnn) + Internet Agent lock and cycle files (proc and pulse.tmp) + Transitory xNStore files used briefly by the agents in the message queues 5 When you have finished configuring the backup job, click Backup > Submit the Job. If you need to restore Group Wise data, be sure to run GroupWise Check (GWCheck) as described in Chapter 32, “Restoring GroupWise Databases from Backup,” on page 379. GroupWise Time Stamp Utility You can use the GroupWise Time Stamp (GWTMSTMP) utility to ensure that Group Wise user databases include the dates when they were last backed up, restored, and retained. The following sections provide information about the utility: + “GWTMSTMP Functionality” on page 406 + “Running GWTMSTMP on NetWare” on page 406 “Running GWTMSTMP on Linux” on page 407 + “Running GWTMSTMP on Windows” on page 407 + “GWTMSTMP Startup Switches” on page 408 NOTE: GWTMSTMP is available in GroupWise 6.5 for Linux Support Pack 2, but not in the original release of GroupWise 6.5 for Linux. Time stamp functionality is included in the NetWare Target Service Agent for File Systems (TSAFS) for GroupWise 6.5 systems where Support Pack 3 has been installed, so you do not need to use GWTMSTMP when backing up a GroupWise 6.5.3 system with TSAFS. Standalone Database Maintenance Programs 405 GWTMSTMP Functionality GWTMSTMP places date and time information on user databases (userxxx.db) in order to support message backup, restore, and retention. No other databases are affected. You can run GWTMSTMP on all user databases in a post office or on a single user database. Backup To ensure thorough user database backups, you can make sure that deleted items are not purged from users’ databases until they have been backed up. Two conditions must be met in order to provide this level of protection against loss of deleted items: + The Allow Purge of Items Not Backed Up option must be deselected in ConsoleOne, as described in “Modifying Environment Options” on page 977. + User databases (userxxx.db) must be time-stamped every time a backup is performed so that items can be purged only after being backed up. If you use GWTSA or TSAFS on NetWare to back up user databases, the backup time stamp is automatically added as part of the backup process. However, if you do not use GWTSA or TSAFS, you must use GWTMSTMP to make sure that user databases are time-stamped so that items will not be prematurely purged. Restore If you use the GWTSA or TSAFS on NetWare to restore a mailbox, the restore time stamp is automatically added as part of the restore process. However, if you do not use GWTSA or TSAFS, you can use GWTMSTMP to add the restore time stamp to the database. The restore time stamp is not required for any GroupWise feature to work properly. Its primary purpose is informational. Retention If you use a message retention application (see Chapter 33, “Retaining User Messages,” on page 387), the application should automatically add the retention time stamp after retaining the database’s messages. Any messages with dates that are newer than the retention time stamp cannot be purged from the database. You can also use GWTMSTMP to manually add a retention time stamp. Running GWTMSTMP on NetWare The GWTMSTMP program (gwtmstmp.nlm) is installed into the same directory where you installed the Group Wise agents (POA and MTA). You can copy it to additional locations if needed. To check the existing time stamp on all GroupWise user databases in a post office, use the following command: Syntax: gwtmstmp.nlm /ph-volume:\post office directory Example: gwtmstmp.nlm /ph-sys:\gwsystem\dev The results are written to the console.log file. To set a current time stamp on all user databases in a post office, use the following command: 406 GroupWise 6.5 Administration Guide Syntax: gwtmstmp.nlm /ph-volume:\post office directory /set Example: gwtmstmp.nlm /ph-sys:\gwsystem\dev /set A basic backup time stamp can also be set in ConsoleOne. Select a Post Office object, then click Tools > GroupWise Utilities > Backup/Restore Mailbox. On the Backup tab, select Backup, then click Yes. More specialized functionality is provided through additional GWTMSTMP startup switches. See “GWTMSTMP Startup Switches” on page 408. Running GWTMSTMP on Linux The GWTMSTMP executable (gwtmstmp) is installed into the bin and lib subdirectories of /opt/ novell/groupwise/agents along with the GroupWise agents (POA and MTA). You can copy it to additional locations if needed. To check the existing time stamp on all GroupWise user databases in a post office, use the following command: Syntax: -/gwtmstmp -p /post office directory Example: ./gwtmstmp -p /gwsystem/acct The results are displayed on the screen. To set a current time stamp on all user databases in a post office, use the following command: Syntax: ./gwtmstmp -p /post office directory --set Example: ./gwtmstmp -p /gwsystem/acct --set A basic backup time stamp can also be set in ConsoleOne. Select a Post Office object, then click Tools > Group Wise Utilities > Backup/Restore Mailbox. On the Backup tab, select Backup, then click Yes. More specialized functionality is provided through additional GWTMSTMP startup switches. See “GWTMSTMP Startup Switches” on page 408. Running GWTMSTMP on Windows The GWTMSTMP program file (gwtmstmp.exe) is installed into the same directory where you installed the Group Wise agents (POA and MTA). You can copy it to additional locations if needed. To check the existing time stamp on all GroupWise user databases in a post office, use the following command: Syntax: gwtmstmp.exe /ph-drive:\post office directory Standalone Database Maintenance Programs 407 Example: gwtmstmp.exe /ph-m:\gwsystem\acct The results are displayed on the screen To set a current time stamp on all user databases in a post office, use the following command: Syntax: gwtmstmp.exe /ph-drive:\post office directory /set Example: gwtmstmp.exe /ph-m:\gwsystem\acct /set A basic backup time stamp can also be set in ConsoleOne. Select a Post Office object, then click Tools > Group Wise Utilities > Backup/Restore Mailbox. On the Backup tab, select Backup, then click Yes. More specialized functionality is provided through additional GWTMSTMP startup switches. GWTMSTMP Startup Switches The following startup switches can be used with GWTMSTMP: NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP /ph -p /ph /backup -b or --backup /backup /restore -r or --restore /restore /retention -n or --retention /retention /get -g or --get /get /set -s or --set /set /clear -c or --clear /clear /date -d or --date /date /time -t or --time /time /@u -u or -userid /@u /userdb -e or --userdb /userdb Iph Specifies the post office directory where the user databases to time-stamp are located. This switch is required. NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: Iph-volume:post office dir -p/post office dir Iph-drive:post office dir Example: — /ph-mailidev -p /gwsystem/dev Iph-jAdev 408 GroupWise 6.5 Administration Guide /backup, /restore, and /retention Iget Specifies the time stamp on which to perform the operation. If no time stamp is specified, the operation is performed on the backup time stamp. NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: /backup -b /backup --backup /restore -r /restore --restore /retention -n /retention --retention For example, to set the restore time stamp, you would use: NetWare: gwtmstmp /ph-j:\dev /restore /set Linux: ./gwtmstmp -p /gwsystem/dev -r -s Windows: gwtmstmp /ph-j:\dev /restore /set Lists existing backup, restore, and retention time stamp information for user databases. If no time stamps are set, no times are displayed. NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: /get -g /get --get For example: NetWare: gwtmstmp /ph-j:\dev /get Linux: ./gwtmstmp -p /gwsystem/dev -g Windows: gwtmstmp /ph-j:\dev /get If no other operational switch is used, /get is assumed. The following example returns the same results as the above example: NetWare: gwtmstmp /ph-j:\dev Linux: ./gwtmstmp -p /gwsystem/dev Windows: gwtmstmp /ph-j:\dev Standalone Database Maintenance Programs 409 Iset Sets the current date and time on user databases. NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: /set -S /set --set For example, to set the backup time stamp, you would use: NetWare: gwtmstmp /ph-j:\dev /backup /set Linux: ./gwtmstmp -p /gwsystem/dev -b -s Windows: gwtmstmp /ph-j:\dev /backup /set or NetWare: gwtmstmp /ph-j:\dev /set Linux: ./gwtmstmp -p /gwsystem/dev -s Windows: gwtmstmp /ph-j:\dev /set -c, --clear Clears existing time stamps. NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: /clear -C /clear --clear For example, to clear all time stamps on databases in a post office, you would use: NetWare: gwtmstmp /ph-j:\dev /clear Linux: ./gwtmstmp -p /gwsystem/dev -c Windows: gwtmstmp /ph-j:\dev /clear Idate Specifies the date that you want placed on user databases. NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: /date-mmiddlyyyy -d mmiddlyyyy /date-mmi/ddlyyyy --date mm/dd/yyyy Example: /date-01/03/2004 -d 05/18/2004 /date-04/12/2004 --date 05/18/2004 For example, to set the restore date to June 15, 2004, you would use: 410 GroupWise 6.5 Administration Guide Itime ¡Qu -e, --userdb NetWare: gwtmstmp /ph-j:\dev /restore /date-06/14/2004 Linux: ./gwtmstmp -p /gwsystem/dev --restore --date 06/15/2004 Windows: gwtmstmp /ph-j:\dev /restore /date-06/14/2004 Specifies the time that you want placed on user databases. NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: /time-hh:mm am|pm -t hh:mm am|pm /time-hh:mm am|pm --time hh:mm am|pm Example: — /time-11:30pm -t 2:00am /time-6:15pm --time 2:00am For example, to set the restore time to 4:45 p.m., you would use: NetWare: gwtmstmp /ph-j:\dev /restore /time-4:45pm Linux: ./gwtmstmp -p /gwsystem/dev -r -t 4:45pm Windows: gwtmstmp /ph-j:\dev /restore /time-4:45pm Provides a specific GroupWise user ID so that an individual user database can be time-stamped. NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: /@u-userlD -u userlD /@u-userlD --userid userID Example: /@u-khuang -u sjones /@u-mbarnard --userid gsmith For example, to set the retention time stamp for a user whose GroupWise user ID is mpalu, you would use: NetWare: gwtmstmp /ph-j:\dev /@u-mpalu /retention /set Linux: ./gwtmstmp -p /gwsystem/dev -u mpalu -n -s Windows: gwtmstmp /ph-j:\dev /@u-mpalu /retention /set Provides a specific Group Wise user database (userxxx.db) so that an individual user database can be time-stamped. Standalone Database Maintenance Programs 411 NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: luserdb user. database -e user database luserdb user. database --userdb user database Example: /userdb user3gh.db -e user3gh.db /userdb user3gh.db --userdb user3gh.db For example, to set the retention time stamp for a user whose user database is named user3gh, you would use: NetWare: gwtmstmp /ph-j:\dev /userdb user3gh.db /retention /set Linux: ./gwtmstmp -p /gwsystem/dev -e user3gh.db -n -s Windows: gwtmstmp /ph-j:\dev /userdb user3gh.db /retention /set GroupWise Database Copy Utility The GroupWise Database Copy utility (DBCopy) copies files from a live GroupWise post office or domain to a static location for backup. During the copy process, DBCopy prevents the files from being modified, using the same locking mechanism used by other Group Wise programs that access databases. This ensures that the backed-up versions are consistent with the originals even when large databases take a substantial amount of time to copy. DBCopy is included in Group Wise 6.5 for Linux to assist with backing up your Group Wise system. DBCopy is available for use on NetWare and Windows servers, but it is not included in Group Wise 6.5 or 6.0. + “Using DBCopy on Linux Servers” on page 412 + “Using DBCopy on NetWare and Windows Servers” on page 413 Using DBCopy on Linux Servers 412 1 Change to the directory where the DBCopy RPM is located or copy it to a convenient location on your workstation. The DBCopy RPM (groupwise-dbcopy-6.5.2-mmdd.i386.rpm is located in the /admin directory in your GroupWise software distribution directory if you have created one or on the GroupWise 6.5 for Linux Administrator CD. 2 Install DBCopy. rpm -i groupwise-dbcopy-6.5.2-mmdd.i386.rpm 3 Change to the /opt/novell/groupwise/agents/bin directory. 4 Use the following command to back up a post office: ./dbcopy /post office directory /destination directory or Use the following command to back up a domain: ./dbcopy /domain directory /destination directory GroupWise 6.5 Administration Guide You can also include the -I switch to specify a date (for example, 11-25-2005) so that only files that are newer than the specified date are copied. 5 After DBCopy has finished copying the post office or domain, use your backup software of choice to back up the static copy of the post office or domain directory structure. 6 After the backup has finished, delete the static copy of the post office or domain directory structure to conserve disk space. You might find it helpful to set up a cron job to run DBCopy regularly at a time ofday when your system is not busy. DBCopy can also be useful for moving domains and post office from NetWare or Windows to Linux. For more information, see “Moving Your Existing Group Wise System to Linux” in “Update” in the Group Wise 6.5 Installation Guide. Using DBCopy on NetWare and Windows Servers For information about using DBCopy to back up Group Wise post offices on NetWare and Windows servers, see the following TIDs in the Novell Support Knowledgebase (http:// support.novell.com/search/kb index jsp): + TID 10023756: Questions and Answers Regarding DBCopy + TID 2929217: GroupWise Backup Utilities (includes Windows download) Standalone Database Maintenance Programs 413 414 GroupWise 6.5 Administration Guide Post Office Agent Chapter 35, “Understanding Message Delivery and Storage in the Post Office,” on page 417 Chapter 36, “Installing and Starting the POA,” on page 427 Chapter 37, “Configuring the POA,” on page 437 Chapter 38, “Monitoring the POA,” on page 475 Chapter 39, “Optimizing the POA,” on page 507 Chapter 40, “Using POA Startup Switches,” on page 523 Post Office Agent 415 416 GroupWise 6.5 Administration Guide Understanding Message Delivery and Storage in the Post Office A post office is a collection of user mailboxes and Group Wise” objects. Messages are delivered into mailboxes by the Post Office Agent (POA). The following topics help you understand the post office and the functions of'the POA: + “Post Office Representation in ConsoleOne” on page 417 + “Post Office Directory Structure” on page 418 + “Information Stored in the Post Office” on page 418 + “Post Office Access Mode” on page 422 + “Role of the Post Office Agent” on page 423 + “Message Flow in the Post Office” on page 425 + “Cross-Platform Issues in the Post Office” on page 425 Post Office Representation in ConsoleOne In ConsoleOne*, post offices are container objects that contain at least one POA object, as shown below: KR novell Consoleone E -(0/ x| File Edit View Tools Help Console View E $: CORP_TREE a) EA Corporate =- 2, GroupWise H-A Accounting E BA Manufacturing E- Provo! E- Provo2 ca Qu Sales gy novell a-f Security H- Server Software Packages EY GroupWise System 1-8) Provo1 1 Q Provo2 1 items 3 [User admin.dev.prv free: CORP. TREE Although each post office is linked to a domain, it does not display as subordinate to the domain in the Console View. However, using the Group Wise View, you can display post offices as subordinate to the domains to which they are linked in your Group Wise system. Understanding Message Delivery and Storage in the Post Office 417 KR novell ConsoleOne i = oj x| File Edit View Tools Help FIA EP ola al CCE és Corporate af GroupWise View =) Sy GroupWise — - F n Post Office Name Domain Name EE Ga Accounting S - 6 Qh Development ke Accounting Provo2 á E- QA Manufacturing ka Development Provo1 15 Provot À Manufacturing Provo1 H-Q Provo2 à Sales Provo2 H-A Sales ca ¿Ea novell a-f Security H- Server Software Packages iS GroupWise System BQ Provo1 +) Ga Development E Q Manufacturing =) Provo2 &-@R Accounting = 1-Q Sales = Corporate Mail Provo! WPRY-GWDOCISYSigwsystermprovo1 Post Office Directory Structure Physically, a post office consists of a set of directories that house all the information stored in the post office. See “Post Office Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. Information Stored in the Post Office The following types of information are stored in the post office: + “Post Office Database” on page 418 + “Message Store” on page 418 + “Guardian Database” on page 420 + “Agent Input/Output Queues in the Post Office” on page 421 + “Libraries (optional)” on page 422 All databases in the post office should be backed up regularly. How often you back up GroupWise databases depends on the reliability of your network and hardware. See “Backing Up a Post Office” on page 375. Post Office Database The post office database (wphost.db) contains all administrative information for the post office, including a copy of the Group Wise Address Book. This information is necessary for users to send messages to others in the GroupWise system. Message Store Group Wise messages are made up of three parts: + Message Header: The message header contains addressing information including the sender’s address, recipient’s address, message priority, status level, and a pointer that links the header to the message body. 418 GroupWise 6.5 Administration Guide + Message Body: The message body contains the message text in an encrypted format and a distribution list containing user IDs of the sender and recipients. + File Attachments (optional): File attachments can be any type of file that is attached to the message. The message store consists of directories and databases that hold messages. The message store is shared by all members of the post office so only one copy of a message and its attachments is stored in the post office, no matter how many members ofthe post office receive the message. This makes the system more efficient in terms of message processing, speed, and storage space. All information in the message store is encrypted to prevent unauthorized access. For more information, see “Native Group Wise Encryption” on page 1039. The message store contains the following components: + “User Databases” on page 419 + “Message Databases” on page 419 + “Attachments Directory” on page 420 User Databases Each member of the post office has a personal database (userxxx.db) which represents the user's mailbox. The user database contains the following: + Message header information + Pointers to messages + Personal groups + Personal address books + Rules + Contacts + Checklists + Categories + Junk Mail lists When a member of another post office shares a folder with one or more members of the local post office, a “prime user” database (puxxxxx.db) is created to store the shared information. The “prime user” is the owner of the shared information. Local user databases and prime user databases are stored in the ofuser directory in the post office. Message Databases Each member ofthe post office is arbitrarily assigned to a message database (msgnn.db) where the body portions of messages are stored. Many users in a post office share a single message database. There can be as many as 25 message databases in a post office. Message databases are stored in the ofmsg directory in the post office. Outgoing messages from local senders are stored in the message database assigned to each sender. Incoming messages from users in other post offices are stored in the message database that corresponds to the message database assigned to the sender in his or her own post office. In each case, only one copy ofthe message is stored in the post office, no matter how many members of the post office it is addressed to. Understanding Message Delivery and Storage in the Post Office 419 Attachments Directory The attachments directory (offiles) contains subdirectories that store file attachments, message text, and distribution lists that exceed 2 KB. Items ofthis size are stored more efficiently as files than as database records. The message database contains a pointer to where each item is found. Guardian Database The guardian database (ngwguard.db) serves as a reference for the following subordinate databases in the post office: + User databases (userxxx.db) + Message databases (msgnn.db) + Prime user databases (puxxxxx.db) + Library databases (dmsh.db and dmxxnn01-FF.db) The guardian database stores information that is common among all databases, thus eliminating duplication of information. The subordinate databases reference information stored in the guardian database. The benefits of the guardian database include the following: + Single Reference Point: The guardian database stores information for each post office. Instead of storing the dictionary information in multiple dictionary databases, it is stored once in the guardian database. + Increased Performance: When the information in the guardian database is accessed, it is written to cache memory. Each subsequent request can be handled with information already available in cache memory, which is faster than disk access. + Tracking Attachments and Documents: When an attachment or document becomes orphaned (loses pointers to the message or profile), the guardian database is used to re-locate the origination of the attachment or document. + GroupWise Remote Client Management: When a user starts the GroupWise client in Remote mode, a local guardian database is created on the user*s workstation to store information similar to the guardian database in the remote user's post office in the Group Wise system. The guardian database is vital to Group Wise functioning. Therefore, the POA has an automated back-up and roll-forward process to protect it. The POA keeps a known good copy of the guardian database called ngwguard.fbk. Whenever it modifies the ngwguard.db file, the POA also records the transaction in the roll-forward transaction log called ngwguard.rfl. If the POA detects damage to the ngwguard.db file on startup or during a write transaction, it goes back to the ngwguard.fbk file (the "fall back" copy) and applies the transactions recorded in the ngwguard.rfl file to create a new, valid and up-to-date ngwguard.db. In addition to the POA back-up and roll-forward process, you should regularly back up the ngwguard.db, ngwguard.fbk, and ngwguard.rfl files regularly to protect against media failure. Without a valid ngwguard.db file, you cannot access your e-mail. With current ngwguard.fbk and ngwguard.rfl files, you can rebuild a valid ngwguard.db file should the need arise. See “Backing Up a Post Office” on page 375. The ngwguard.dc file is the structural template for building the guardian database and its subordinate databases. Also called a dictionary file, the ngwguard.dc file contains schema extension information, such as administrator-defined fields, data types, and record indexes. If this dictionary file is missing, no additional databases can be created in the post office. 420 GroupWise 6.5 Administration Guide Agent Input/Output Queues in the Post Office Each post office contains agent input/output gueues where messages are deposited and picked up for processing by the POA and the MTA. The MTA transfers messages into and out of the post office, while the POA handles message delivery. For illustrations of the processes presented below, see “Message Delivery to a Different Post Office” and “Message Delivery to a Different Domain” in Group Wise 6.5 Troubleshooting 3: Message Flow and Directory Structure. MTA Output Queue in the Post Office The MTA output queue in each post office is the post officetwpcsout directory. Ifthe MTA has a mapped or UNC link to the post office, the MTA writes user messages directly into its output queue, which requires write access to the post office. Ifthe MTA has a TCP/IP link to the post office, the MTA transfers user messages to the POA by way of TCP/IP. The POA then stores the messages in the MTA output queue on behalf of the MTA, so the MTA does not need write access to the post office. The post_office\wpcsout\ofs subdirectory is where the MTA transfers user messages for delivery by the POA to users’ mailboxes in the local post office. The MTA post_office\wpcsout\ads subdirectory is where the MTA transfers administrative messages instructing the POA admin thread to update the post office database (wphost.db). POA Input Queue in the Post Office The POA input queue in each post office is the post_office\wpcsout directory, which is the same as the MTA output queue. The post_office\wpcsout\ofs subdirectory is where the POA picks up user messages deposited there by the MTA and updates the local message store, so users receive their messages. The post_office\wpcsout\ads subdirectory is where the POA admin thread picks up administrative messages deposited there by the MTA and updates the post office database (wphost.db). POA Output Queue in the Post Office The POA output queue (post_office\wpcsin) is where the POA deposits user messages for the MTA to transfer to other domains and post offices. Historical Note: In earlier versions of GroupWise, the GroupWise client wrote user messages to the POA output queue when using direct access to the post office. In GroupWise 6.x, client/server access to the post office is the preferred method. MTA Input Queue in the Post Office The MTA input queue in each post office (post_office\wpcsin) is the same as the POA output queue. The MTA picks up user messages deposited there by the POA and transfers them to other domains and post offices. For a mapped or UNC link between the domain and post office, the MTA requires read/write access rights to its input/output queues in the post office. For a TCP/IP link, no access rights are required because messages are communicated to the MTA by way of TCP/IP. Understanding Message Delivery and Storage in the Post Office 421 Libraries (optional) A library is a collection of documents and document properties stored in a database system that can be managed and searched. You do not need to set up libraries unless you are using Group Wise Document Management Services (DMS). See “Libraries and Documents” on page 261. Library Databases The databases for managing libraries are stored in the gwdms directory and its subdirectories in the post office. The dmsh.db file is a database shared by all libraries in the post office. It contains information about where each library in the post office is located. Each library has its own subdirectory in the gwdms directory. In each library directory, the dmxxnn01-FF.db files contain information specific to that library, such as document properties and what users have rights to access the library. Document Storage Areas The actual documents in a library are not kept in the library databases. They are kept in a document storage area, which consists of a series of directories for storing document files. Documents are encrypted and stored in BLOBs (binary large objects) to make document management easier. A document, its versions, and related objects are stored together in the same BLOB. A document storage area might be located in the post office directory structure, or in some other location where more storage space is available. Ifit is located in the post office, the document storage area can never be moved. Therefore, storing documents in the post office directory structure is not usually recommended. If it is stored outside the post office, document storage areas can be moved when additional disk space is required. Post Office Access Mode The GroupWise 6.x Windows client and the GroupWise 6.5 Cross-Platform client both use client/ server access mode to the post office. This requires a TCP/IP connection between the GroupWise clients and the POA in order for users to access their mailboxes. Benefits of client/server access include: ¢ Load Balancing: The workload is split between the client workstation and the POA on another server. The POA can perform a processor-intensive request while the client is doing something else. + Database Integrity: The Group Wise client does not need write access to databases in the post office. Therefore, client failures cannot damage databases. + Reduced Network Traffic: Requests are processed on the POA server and only the results are sent back across the network to the client workstation. ¢ Tighter Security: Client users do not need to log in to the server where the post office is located. This eliminates the need for users to have write access to the post office directory. ¢ Scalability: More concurrent users can be supported in a single post office. + Platform Independence: The GroupWise client on any platform can access the post office by way of TCP/IP communication with the POA. 422 GroupWise 6.5 Administration Guide + Simplified Client Connections: The GroupWise client can communicate with any POA in the Group Wise system. Any POA can then redirect the client to connect to the correct POA for the users’ post office. Historical Note: In GroupWise 5.x, the GroupWise client allowed the user to enter a path to the post office directory to facilitate direct access mode. The Group Wise 6.x client no longer offers the user that option. However, you can force the GroupWise 6.x client to use direct access by starting it with the /ps switch and providing the path to the post office directory. For information about alternatives to client/server access mode, see the GroupWise 5.5 Agent Setup Guide (http:// www.novell.com/documentation/gw55/index.html). Role of the Post Office Agent The GroupWise Post Office Agent (POA) delivers messages to users’ mailboxes, connects users to their post offices in client/server access mode, updates post office databases, indexes messages and documents, and performs other post office-related tasks. You must run at least one POA for each post office. The following sections help you understand the various functions of the POA: + “Client/Server Processing” on page 423 + “Message File Processing” on page 424 + “Other POA Functions” on page 424 Client/Server Processing Using client/server access mode, the GroupWise client maintains one or more TCP/IP connections with the POA and does not access the post office directly. Consequently, the performance of the POA in responding to requests from the GroupWise client directly affects the GroupWise client’s responsiveness to users. To provide the highest responsiveness to client users, you can configure a POA just to handle client/server processing. See “Configuring a Dedicated Client/Server POA” on page 510. When using client/server access mode, the GroupWise client can be configured to control how much time it spends actually connected to the POA. + In Online mode, the client is continuously connected. + In Caching mode, the client connects at regular intervals to check for incoming messages and also whenever the client user sends a message. Address lookup is performed locally. Caching mode allows the POA to service a much higher number of users than Online Mode. + In Remote mode, the client connects whenever the client user chooses, such as when using a brief modem connection to download and upload messages. NOTE: Remote mode is not currently available in the Cross-Platform client. For more information about the client modes available with client/server access mode, see “Using Caching Mode” and “Using Remote Mode” in the GroupWise 6.5 Windows Client User Guide and “Using Caching Mode” in the GroupWise 6.5 Cross-Platform Client User Guide. Client/server access mode also allows users to access their GroupWise mailboxes from POP and IMAP clients, in addition to the GroupWise client. See “Supporting IMAP Clients” on page 450. In client/server mode, the POA can provide and, if necessary, force secure SSL connections with all clients. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. Understanding Message Delivery and Storage in the Post Office 423 Message File Processing Messages from users in other post offices arrive in the local post office in the form ofmessage files deposited in the POA input gueue. See “Agent Input/Output Oueues in the Post Office” on page 421. The POA picks up the message files and updates all user and message databases to deliver incoming messages in the local post office. To provide timely delivery for a large volume of incoming messages, you can configure a POA just to handle message file processing. See “Configuring a Dedicated Message File Processing POA” on page 513. Other POA Functions In addition to client/server processing (interacting with client users) and message file processing (delivering messages), the POA: + + Performs indexing tasks for document management. See “Regulating Indexing” on page 514. Performs scheduled maintenance on databases in the post office. See “Scheduling Database Maintenance” on page 467. Monitors and manages disk space usage inthe post office. See “Scheduling Disk Space Management” on page 469. Restricts the size of messages that users can send outside the post office. See “Restricting Message Size between Post Offices” on page 455. Primes users’ mailboxes for Caching mode. See “Supporting Forced Mailbox Caching” on page 454. Performs nightly user upkeep so users do not have to wait while the GroupWise client performs it; also creates a downloadable version of the system Address Book for Remote and Caching users. See “Performing Nightly User Upkeep” on page 472. Provides LDAP authentication and LDAP server pooling. See “Providing LDAP Authentication for GroupWise Users” on page 461. Prevents unauthorized access to the post office. See “Enabling Intruder Detection” on page 465. Tracks the GroupWise client software in use in the post office. See “Checking What GroupWise Clients Are in Use” on page 452. Automatically detects and repairs invalid information in user databases (userxxx.db) and message databases (msgnn.db) for the local post office by using an efficient multi-threaded process. See “Adjusting the Number of POA Threads for Database Maintenance” on page 517. Automatically detects and repairs invalid information in the post office database (wphost.db). Automatically detects and repairs damage to the guardian database (ngwguard.db) in the post office. Updates the post office database whenever GroupWise users, resources, post offices, or other GroupWise objects are added, modified, or deleted. Replicates shared folders between post offices. Executes GroupWise client rules. Processes requests from GroupWise Remote users. 424 GroupWise 6.5 Administration Guide Message Flow in the Post Office To see how messages are delivered using client/server access mode, see “Message Delivery in the Local Post Office” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. Cross-Platform Issues in the Post Office Group Wise is designed to function in a variety of environments. The Group Wise Windows client runs onthe following platforms: + Windows 98 + Windows NT/2000 + Windows 3.1 (GroupWise 5.2 and below) + Macintosh (GroupWise 5.2 and below) + UNIX (GroupWise 5.2 and below) The GroupWise Cross-Platform client runs on the following platforms: + Linux + Macintosh In addition, GroupWise users can access their mailboxes without using a GroupWise client through the following applications: * GroupWise WebAccess (see “WebAccess” on page 803) + POP and IMAP clients such as Netscape* Mail, Eudora* Pro, Microsoft Outlook, and Entourage* + MAPI clients such as Microsoft Mail and cc:Mail* Post offices can be located on the following platforms: * Novell® NetWare® + Windows NT/2000 + Linux (GroupWise 6.5 for Linux) + UNIX (GroupWise 5.x) The Group Wise agents can run on the following platforms: + Novell NetWare + Windows NT/2000 + Linux (GroupWise 6.5 for Linux) + UNIX (GroupWise 5.x) In general, Group Wise is most efficient if you match the agent platform with the network operating system, so the POA and the post office should be on the same platform, and the client should be on a compatible platform. Those with mixed networks might wonder what combinations are possible. You have several alternatives. + “Client/Post Office Platform Independence through Browser Technology” on page 426 + “Client/Post Office Platform Independence through Client/Server Mode” on page 426 + “POA/Post Office Platform Dependencies Because of Direct Access Requirements” on page 426 Understanding Message Delivery and Storage in the Post Office 425 Client/Post Office Platform Independence through Browser Technology If your Group Wise users want to access their mailboxes through POP3 or IMAP4 clients, it makes no difference what platform their post offices are located on. However, users are limited to the client capabilities of their POP3 or IMAP4 clients. If you install Group Wise WebAccess on a Web server, Group Wise users can still access their mailboxes through their browsers and with more native Group Wise features available. See “WebAccess” on page 803 for more information. Client/Post Office Platform Independence through Client/Server Mode The Group Wise 6.5 Windows client and Cross-Platform client require client/server access mode. With this configuration, it makes no difference what platform users’ post offices are located on. The Group Wise client accesses the post office by communicating with the POA using TCP/IP, which is a platform-independent protocol. POA/Post Office Platform Dependencies Because of Direct Access Requirements Post Office on NetWare Post Office on Windows Post Office on Linux Post Office on UNIX Post Office on Macintosh The POA must have direct access to the post office directory. Therefore, the POA must be able to log in to the server where the post office is located and must be able to write to the databases and directories located in the post office. Although the recommended configuration is for the POA and the post office to be on the same platform and preferably on the same server, some variation is possible. The table below summarizes the various combinations of POA and post office platforms and indicates which combinations work for direct access and which ones do not for GroupWise 6.x: NetWare POA Windows POA Linux POA UNIX POA Yes Yes Not supported? Not supported? No! Yes Yes Not supported? Not supported? Yes Yes Not supported? Not supported? Not supported? Yes Supported for GroupWise 5.x No? No? No? No? 1 The NetWare® POA cannot service a post office on a Windows server because Windows does not support the required cross-platform connection. 2 For these combinations, an NFS connection would be required, which is not a supported configuration for the agents. However, the agents often can work adequately in this configuration. 3 Post offices cannot be created on Macintosh computers. 426 GroupWise 6.5 Administration Guide Installing and Starting the POA Detailed instructions for installing and starting the POA for the first post office of a new Group Wise” system are provided in “Installing a Basic Group Wise System” in the GroupWise 6.5 Installation Guide. Additional agent installation and startup instructions and worksheets are available in “Installing GroupWise Agents” in the Group Wise 6.5 Installation Guide. IMPORTANT: If you are installing and running the POA in a clustered GroupWise system, see the appropriate section of the GroupWise 6.5 Interoperability Guide before you install the POA: - “Deciding How to Install and Configure the Agents in a Cluster” in “Novell Cluster Services” - “Deciding How to Install and Configure the Agents in a Cluster” in “Microsoft Clustering Services” This section presents some additional POA installation and startup information that might be useful as you install and start additional POAs for post offices throughout your Group Wise system. + “Installing the POA Software” on page 427 + “Starting the POA” on page 431 Installing the POA Software Select the platform where you have installed the POA: + “Fine-Tuning Your NetWare POA Installation” on page 427 + “Fine-Tuning Your Linux POA Installation” on page 430 + “Fine-Tuning Your Windows POA Installation” on page 430 Fine-Tuning Your NetWare POA Installation After initial installation, you can fine-tune your NetWare® POA installation for improved performance: + “Recommended NetWare Server Parameters for the NetWare POA” on page 427 + “Recommended NSS Parameters for the NetWare POA” on page 428 + “Estimating NetWare POA Memory Requirements” on page 428 Recommended NetWare Server Parameters for the NetWare POA Some default settings on the NetWare® server where the NetWare POA will run might be inadequate for configurations of more than 100 concurrent client/server user connections. For a discussion of how the POA interacts with the GroupWise client, see “Post Office Access Mode” on page 422. If you are planning a large client/server configuration, check the Net Ware server parameters where the NetWare POA will be installed to make sure they are adequate for the anticipated number of Installing and Starting the POA 427 Group Wise clients. For example, in a medium-size system of 500 users in a post office, use the following settings: Parameter Setting Maximum Packet Receive Buffers 2500 Minimum Packet Receive Buffers 1000 Maximum Concurrent Disk Cache Writes 200 If you are also running the NetWare MTA on the same server, see “Recommended NetWare Server Parameters for the NetWare MTA” on page 565. Recommended NSS Parameters for the NetWare POA If you run the NetWare POA on NetWare 5.1 or 6.x Novell Storage Services™ (NSS) volumes, you can significantly improve Group Wise performance by using the following parameters and settings on the nss command in the autoexec.ncf file: /NameCacheSize=20000 /OpenFileHashShift=15 /ClosedFileCacheSize=50000 /CacheBalance=60 The best /ClosedFileCacheSize setting for a server depends on many things, such as the amount of memory on the server, the load on the POA, and the number of other programs running on the server. For example, the 50000 setting can work well for a server that has 650 MB of memory. Experiment with various settings in order to optimize performance. The following TID, although originally written for GroupWise 5.x and NetWare 5.x, applies to GroupWise 6.x and NetWare 6.x as well: + TID 10065215: Resolving GroupWise Performance Issues with NSS Volumes Estimating NetWare POA Memory Requirements The amount of memory required for the NetWare POA is influenced by many factors, including: + Number of client/server connections being supported + Number of active client connections vs. idle connections + Number of TCP handler threads + Number of message handler threads + Number of database maintenance threads The table below provides approximate memory requirements for various POA activities. Actual numbers might vary somewhat from release to release, but the numbers provided do illustrate what activities require relatively more or less memory and what configuration options require more memory than others. This information can be used to produce a rough estimate of the memory required for your particular POA configuration. Always remember this basic rule when it comes to planning for memory: More is better. 428 GroupWise 6.5 Administration Guide POA Component Approx. Memory Agent engine (gwenn4.nlm)' 500 KB POA (gwpoa.nim) 320 KB Main thread, UI, logging 500 KB Dispatcher thread 60 KB Message handler threads (each)? Startup 40 KB Idle 30 KB Processing 2000 KB TCP dispatch/monitor/ listener thread 100 KB TCP handler threads (each)? Startup 40 KB Idle 35 KB Processing 2500 KB Client/server connections (each) No message processing 45 KB Limited processing 70 KB Heavy processing 155 KB MTP processes Scanner/listener 10 KB Senders/receivers (each) 5 KB QuickFinder™ thread 30 KB Building/updating indexes 3000 KB Compressing/combining indexes 4000 KB Nightly User Upkeep 90 KB Remote Address Book generation 40 KB Auto-Date events 25 events 1530 KB 100 events 2140 KB 365 events 7885 KB Notify 30 KB References (required) (required) (required) (required) (required for message file processing) See “Adjusting the Number of POA Threads for Message File Processing” on page 512. See also /threads. (required for client/server processing) See “Using Client/Server Access to the Post Office” on page 447. (required for client/server processing) See “Adjusting the Number of Connections for Client/ Server Processing” on page 508. See also /tcpthreads. (required for client/server processing) See “Adjusting the Number of Connections for Client/ Server Processing” on page 508. See also /maxappconns and /maxphysconns. (required for TCP/IP link with MTA) See “Using TCP/IP Links between the Post Office and the Domain” on page 443. (required for indexing) See “Regulating Indexing” on page 514. See also /qfinterval, /qfintervalinminute, / qfbaseoffset, /qfbaseoffsetinminute, and /noaf. (recommended) See “Performing Nightly User Upkeep” on page 472. See also /nuuoffset and /nonuu. (optional) See “Performing Nightly User Upkeep” on page 472. See also /rdaboffset and /nordab. (required; occasional, temporary usage) (required) Installing and Starting the POA 429 POA Component Approx. References Memory Admin thread (required for post office database update and repair) Idle 20 KB Processing 125 KB See /noada. ' The Agent Engine (gwenn4.nlm) needs to be loaded only once per server, no matter how many agents (POAs, MTAs, Internet Agents, WebAccess Agents) are running on that server, as long as they are running in the same address space. ? By default, there are six message handler threads and six TCP handler threads, for a default total of 450 KB for handler threads. The table below provides some very general memory figures for running both GroupWise agents on the same server. Concurrent Users Actual Memory Usage at Peak Time 100 active users (100-250 users in post office) 50 MB 250 active users (250-500 users in post office) 110 MB 500 active users (500-1000 users in post office) 125 MB 1000 active users (1000-2500 users in post office) 150 MB Fine-Tuning Your Linux POA Installation After initial installation on Linux, no fine-tuning is necessary. The POA runs very efficiently in a standard Linux installation. Fine-Tuning Your Windows POA Installation After initial installation, you can fine-tune your Windows POA installation for improved performance: + “Recommended Windows Parameters” on page 430 + “Estimating Windows POA Memory Requirements” on page 430 Recommended Windows Parameters If you are running the Windows POA for a post office located on a NetWare server, you might need to increase Maximum File Locks Per Connection from its default setting. Estimating Windows POA Memory Requirements Although the Windows POA memory requirements differ slightly from the NetWare POA, you can use the figures provided for the NetWare POA to see what POA processes are most memory intensive. See “Estimating NetWare POA Memory Requirements” on page 428. 430 GroupWise 6.5 Administration Guide Starting the POA Select the platform where you are starting the POA: + “Starting the NetWare POA” on page 431 + “Starting the Linux POA” on page 433 + “Starting the Windows POA” on page 434 Starting the NetWare POA After installing the NetWare POA software, you can start the NetWare POA in several ways: + “Manually on the Command Line” on page 431 + “With a Startup File” on page 432 + “Automatically in the autoexec.ncf File” on page 432 Manually on the Command Line 1 Go to the console of the NetWare server where the NetWare POA is installed. or Use Remote Console to access the server: 1a Press Alt+F1 to display the options. 1b Choose Select a Screen to View. Ae Choose System Console. 2 Enter the command to load the NetWare POA. Syntax: load gwpoa.nlm /home-[svr\] [vol:]\po dir Example: load gwpoa.nlm /home-serveri1\mail:\sales The /home startup switch is required to start the NetWare POA. If the post office is located on a different server from where the NetWare POA is running, the /dn switch or the /user and / password switches are also required so the NetWare POA can log in to that server. You can also provide user and password information on the Post Office Settings page in ConsoleOne. The NetWare POA agent console appears and displays normal startup status messages. See Chapter 38, “Monitoring the POA,” on page 475. #%, ACCOUNTING.PROVO2 - GroupWise POA olx] Eile Configuration Log Statistics Actions Help ACCOUNTING.PROVO2 Up Time: 0 Days 2Hrs 9 Mins GroupWise Post Office Agent r Status Statistics Processing / Busy: 0:0 C/S Requests: 2 Message Files: 0 User Connections: 0 Requests Pending: 0 Undeliverable: 0 File Queues: 0 Users Timed Out: 0 Problem Messages: 0 11:16:33 11E Database check action: Analyze/Fixup 11:16:33 11E Level of database analysis and verification: Structural 11:16:33 11E Delete temporary/backup files older than (days): 7 11:16:33 11E 11:16:33 157 Initializing dispatcher 11:16:33 158 Initializing dispatcher 11:16:33 154 Initializing worker 11:16:33 158 Initializing worker 11:16:33 15C Initializing worker 11:16:33 15D Initializing worker 11:16:33 15E Initializing worker 11:16:33 152 Initializing worker 4 11:16:38 155 MTP: Listening for inbound connections = Installing and Starting the POA 431 If the NetWare POA agent console does not appear, see “Post Office Agent Problems” in GroupWise 6.5 Troubleshooting 2: Solutions to Common Problems. When you start the NetWare POA as described above, it is configured according to the POA settings specified in ConsoleOne®. You can go to ConsoleOne and modify POA functioning as needed. See Chapter 37, “Configuring the POA,” on page 437. With a Startup File Another way to start the NetWare POA is to use a startup file. You could use a startup file with the NetWare POA for the following reasons: + Override POA settings defined in ConsoleOne. + Control the POA locally without using ConsoleOne. + Adjust specialized POA functions not controllable from ConsoleOne. When you run the Agent Installation program, an initial POA startup file is created in the agent installation directory. It is named using the first 8 characters of the post office name with a .poa extension. This initial startup file includes the /home startup switch set to the location of the post office directory. If the post office is located on a different server from where the NetWare POA is running, you must edit the startup file and provide settings for the /dn switch or the /user and /password switches so the NetWare POA can log in to that server. You can also provide user and password information on the Post Office Settings page in ConsoleOne. The POA startup file can be modified to use other startup switches as needed. Startup switches specified on the command line override those in the startup file. Startup switches in the startup file override corresponding settings in ConsoleOne. See Chapter 40, “Using POA Startup Switches,” on page 523. When you use a startup file, you must include it on the command line when you load the NetWare POA. For example: Syntax: load gwpoa.nlm @POA startup filename Example: load gwpoa.nlm @sales.poa In addition to the initial POA startup file, the Agent Installation program also provides a grpwise.ncf file to load the agents. If you plan to run only the NetWare POA, you should edit the grpwise.ncf file to remove the command to load the MTA. If you run multiple NetWare POAs for the same post office, you need a startup file with the /name switch and a corresponding line in the grpwise.ncf file for each POA. A POA object in eDirectory™ is also required for each POA. See “Creating a POA Object in eDirectory” on page 438. Automatically in the autoexec.ncf File When the POA is running smoothly, you should modify the NetWare configuration file (autoexec.ncf) to load the NetWare POA and required NetWare programs automatically whenever you restart the server. IMPORTANT: If you are running the POA in a Novell cluster, see “Configuring the GroupWise Volume Resource to Load and Unload the Agents” in “Novell Cluster Services” in theGroupWise 6.5 Interoperability Guide for alternative instructions. 1 Edit the autoexec.ncf file in the NetWare sys:\system directory. 432 GroupWise 6.5 Administration Guide 2 Add the following command to load the agents: grpwise.ncf or To start the agents in protected mode, add the following command: protect grpwise.ncf 3 Save the autoexec.ncf file. 4 Ifpossible, restart the server to verify that the NetWare programs and the NetWare POA are loading properly. Starting the Linux POA You can start the Linux POA in several ways: + “Manually with a User Interface” on page 433 + “Manually as a Daemon” on page 433 + “Automatically at System Startup” on page 434 Manually with a User Interface 1 Make sure you are logged in as root. 2 Change to the Group Wise agent bin directory. cd /opt/novell/groupwise/agents/bin 3 Enter the following command to start the POA: Syntax: ./gwpoa --show --home post office directory & Example: ./gwpoa --show --home /gwsystem/polnx & The POA startup file is created by the Installation Advisor in the /opt/novell/groupwise/agents/ share directory and is named after the post office that the POA services. Because the Installation Advisor prompted you for post office names and directories, it can set the --home startup switch in the POA startup file. In the bin directory where the POA executable is located, you could start the POA with a command similar to the following example: ./gwpoa --show @../share/lnxpost.poa Manually as a Daemon 1 Make sure you are logged in as root. 2 Change to the /etc/init.d directory. 3 To start the Linux POA (and perhaps the MTA as well, depending on the configuration of the server), enter the following command: ./grpwise start 4 To confirm that the agents have started, enter the following command: ps -eaf | grep gw This lists all GroupWise agent process IDs. Installing and Starting the POA 433 Automatically at System Startup If you selected Launch Group Wise Agents on System Startup in the Agent Installation program, the Agent Installation program configured your system so that the agents would start automatically each time you restart your server. The Agent Installation program always creates a grpwise startup script in /etc/init.d for starting the agents. To enable automatic startup, the Agent Installation program also creates symbolic links named S99grpwise in the rc3.d and rc5.d directories so that the agents load on restart into level 3 or 5, depending on the configuration of your Linux system. When the grpwise script runs and starts the agents, it reads the agent startup files in /opt/novell/ groupwise/agents/share to check for configuration information provided by startup switches. Because the --show switch cannot be used in the startup files, the agents never run with agent console interfaces when started automatically when the server restarts. During agent installation, if you specified only post offices and no domains, only POA startup files were created and the grpwise startup script starts only the POA. Starting the Windows POA You can start the Windows POA in several ways: + “Manually from the Windows Desktop” on page 434 + “With a Startup File” on page 434 + “Automatically in the Windows Startup Group” on page 435 + “Automatically as a Windows Service” on page 435 Manually from the Windows Desktop With a Startup File In Windows, click Start > Programs > GroupWise Agents, then start the Windows POA. The Windows POA agent console should appear and display normal startup status messages. See Chapter 38, “Monitoring the POA,” on page 475. If the Windows POA agent console does not appear, see “Post Office Agent Problems” in GroupWise 6.5 Troubleshooting 2: Solutions to Common Problems. When you start the Windows POA as described above, it is configured according to the POA settings specified in ConsoleOne. You can go back to ConsoleOne and modify POA functioning as needed. See Chapter 37, “Configuring the POA,” on page 437. Another way to start the Windows POA is to use a startup file. You could use a startup file to configure the POA for the following reasons: + Override POA settings defined in ConsoleOne. + Control the POA locally without using ConsoleOne. + Adjust specialized POA functions not controllable from ConsoleOne. When you run the Agent Installation program, an initial POA startup file is created in the agent installation directory. It is named using the first 8 characters of the post office name with a .poa extension. This initial startup file includes the /home startup switch set to the location of the post office directory. 434 GroupWise 6.5 Administration Guide The POA startup file can be modified to use other startup switches as needed. Startup switches in the startup file override corresponding settings in ConsoleOne. See Chapter 40, “Using POA Startup Switches,” on page 523. If you run multiple Windows POAs for the same post office, you need a startup file with the /name switch and a corresponding desktop icon or Program menu item for each one. A POA object in eDirectory is also required for each POA. See “Creating a POA Object in eDirectory” on page 438. Automatically in the Windows Startup Group After the Windows POA is running smoothly, you should add it to the Windows Startup group to start the Windows POA automatically whenever you restart the Windows server. 1 In Windows NT, click Start > Settings > Taskbar > Start Menu Programs > Add. or In Windows 2000, click Start > Settings > Taskbar & Start Menu > Advanced > Add. 2 Browse to the directory where you installed the Windows POA. 3 Double-click gwpoa.exe, then add the startup file to the command line. Example: gwpoa.exe @sales.poa 4 Click Next. 5 Select the Startup folder, provide a name for the shortcut, then click Finish. 6 If possible, restart the server to verify that the Windows POA starts when you log in. Automatically as a Windows Service To start the GroupWise Windows POA as a service for the first time after installation: 1 From the Windows desktop, click Start > Settings > Control Panel. 2 Double-click Services, select the POA service (named after the post office), then click Start. To make sure the POA starts automatically each time you restart the server: 1 Click Start > Settings > Control Panel. 2 Double-click Services, select the POA service (named after the post office), then click Startup. 3 Select Automatic, then click OK. Thereafter, you can manage the Windows agents just as you would any other services. Uninstalling the POA Software If you move the POA to a different server, you can uninstall the POA software from the old location to regain disk space as long as the MTA is not running on the server. Select the platform where you have been running the POA: + “Uninstalling the NetWare or Windows POA” on page 436 + “Uninstalling the Linux POA” on page 436 Installing and Starting the POA 435 Uninstalling the NetWare or Windows POA 1 Stop the POA. 2 Run install.exe in the \agents subdirectory of the Group Wise software distribution directory or Group Wise 6.5 Administrator CD. 3 In the Install/Uninstall dialog box, click Uninstall to remove the POA software from the server. Windows Note: Ifthe Windows POA was running as a service, the Agent Installation program removes the service, registry entry, and Start menu icon from Windows. Uninstalling the Linux POA 1 Make sure you are logged in as root. 2 Stop the POA. 3 Enter the following command to determine the specific version of the POA that is running on the server: rpm -qa | grep groupwise 4 Enter the following command uninstall the POA: rpm -e novell-groupwise-agents-version-date where version is the version number (for example, 6.5.1) and dafe is the is the date when the RPM was created (for example, 0428 for April 28). This process removes all files and directories associated with the POA. 436 GroupWise 6.5 Administration Guide Configuring the POA AS your Group Wise” system grows and evolves, you might need to modify POA configuration to meet the changing needs of the post office it services. The following topics help you configure the POA: + “Performing Basic POA Configuration” on page 437 + “Configuring User Access to the Post Office” on page 446 + “Configuring Post Office Security” on page 456 + “Configuring Post Office Maintenance” on page 467 Creating a POA Object in eDirectory Configuring the POA in ConsoleOne Changing the Link Protocol between Post Office and Domain Moving the POA to a Different server Adjusting the POA for a New Post Office Location Adjusting the POA Logging Level and Other Log Settings Using Client/Server Access to the Post Office Simplifying Client/Server Access with a GroupWise Name Server Supporting IMAP Clients Supporting CAP Clients Checking What GroupWise Clients Are in Use Supporting Forced Mailbox Caching Restricting Message Size between Post Offices Securing Client/Server Access through a Proxy Server Enhancing Post Office Security with SSL Connections to the POA Providing LDAP Authentication for GroupWise Users Enabling Intruder Detection Configuring Trusted Application Support Scheduling Database Maintenance Scheduling Disk Space Management Performing Nightly User Upkeep Performing Basic POA Configuration POA configuration information is stored as properties of its POA object in eDirectory. The following topics help you modify the POA object in ConsoleOne and change POA configuration to meet changing system configurations: + “Creating a POA Object in eDirectory” on page 438 + “Configuring the POA in ConsoleOne” on page 439 + “Changing the Link Protocol between the Post Office and the Domain” on page 442 + “Moving the POA to a Different server” on page 445 + “Adjusting the POA for a New Post Office Location” on page 445 Configuring the POA 437 Creating a POA Object in eDirectory When you create a new post office, one POA object is automatically created for it.You can set up additional POAs for an existing post office if message traffic in the post office is heavy. To accomplish this, you must create additional POA objects as well. To create a new POA object in Novell® eDirectory™: 1 In ConsoleOne*, browse to and right-click the Post Office object for which you want to create a new POA object, then click New > Object. 2 Double-click Group Wise Agent to display the Create Group Wise Agent dialog box. Ki Create GroupWise Agent xi Agent Name: A Type: Cancel Post Office Help I Define additional properties [ Create another agent 3 Type a unique name for the new POA. The name can include as many as 8 characters. Do not use any of the following invalid characters in the name: ASCII characters 0-13 Comma, Asterisk * Double quote " At sign @ Extended characters Braces { } Parentheses ( ) Colon : Period . You use this name with the /name startup switch when you start the new POA. The Type field is automatically set to Post Office. 4 Select Define Additional Properties. 5 Click OK. The POA object is automatically placed within the Post Office object. 6 Review the information displayed for the first four fields on the Identification page to ensure that you are creating the correct type of Agent object in the correct location. 438 GroupWise 6.5 Administration Guide Properties of POA i xj GroupWise | NDS Rights v | Other | Rights to Files and Folders | Domain.PO: Provo1.Development Distinguished Name: POA.Development.GroupWise Name: POA Agent Type: Post Office Description: GroupWise Post Office Agent Platform: [NetWare Loadable modue gy Page Options... Cancel Help 7 In the Description field, type one or more lines of text describing the POA. This description displays on the POA agent console as the POA runs. When you run multiple POAs on the same server, the description should uniquely identify each one. If multiple administrators work at the server where the POA runs, the description could include a note about who to contact before stopping the POA. 8 In the Platform field, select the platform (NetWare, Linux, or Windows) where the POA will run. 9 Continue with “Configuring the POA in ConsoleOne” on page 439. Configuring the POA in ConsoleOne The advantage to configuring the POA in ConsoleOne, as opposed to using startup switches in a POA startup file, is that the POA configuration settings are stored in eDirectory. 1 In ConsoleOne, expand the eDirectory container where the Post Office object is located. 2 Expand the Post Office object. 3 Right-click the POA object, then click Properties. The table below summarizes the POA configuration settings in the POA object properties pages and how they correspond to POA startup switches (as described in Chapter 40, “Using POA Startup Switches,” on page 523): ConsoleOne Properties Pages Corresponding Tasks and Startup Switches and Settings POA Identification Page Domain.PO See “Creating a POA Object in eDirectory” on page 438. Distinguished Name Name Type Description Platform Configuring the POA 439 ConsoleOne Properties Pages and Settings POA Agent Settings Page Message File Processing Message Handler Threads Enable TCP/IP (for C/S) TCP Handler Threads Max Physical Connections Max Application Connections Enable Caching CPU Utilization (NLM) Delay Time (NLM) Max Thread Usage for Priming and Moves Enable IMAP Max IMAP Threads Enable CAP Max CAP Threads Enable SNMP SNMP Community "Get" String HTTP User Name HTTP Password Network Address Page TCP/IP Address IPX/SPX Dress Proxy Server Address Message Transfer 440 GroupWise 6.5 Administration Guide Corresponding Tasks and Startup Switches See “Configuring a Dedicated Message File Processing POA” on page 513. See also /nomf, /nomfhigh, and /nomflow. See “Adjusting the Number of POA Threads for Message File Processing” on page 512. See also /threads. See “Using Client/Server Access to the Post Office” on page 447 and “Configuring a Dedicated Client/Server POA” on page 510. See also /notcpip. See “Adjusting the Number of Connections for Client/Server Processing” on page 508. See also /tcpthreads. See “Adjusting the Number of Connections for Client/Server Processing” on page 508. See also /maxphysconns and /maxappconns. See /nocache. See “Optimizing CPU Utilization for the NetWare POA” on page 520. See also /cpu and /sleep. See “Supporting Forced Mailbox Caching” on page 454. See also /primingmax. See “Supporting IMAP Clients” on page 450. See also /imap and /imapmaxthreads. See “Supporting CAP Clients” on page 451. See also /cap and /capmaxthreads. See “Using SNMP Monitoring Programs” on page 499. See also /nosnmp. See “Setting Up the POA Web Console” on page 489. See also /httpuser and /httppassword. See “Using Client/Server Access to the Post Office” on page 447 and “Using TCP/IP Links between the Post Office and the Domain” on page 443. See also /ip. See “Securing Client/Server Access through a Proxy Server” on page 456. See “Using TCP/IP Links between the Post Office and the Domain” on page 443. See also /mtpinipaddr, /mtpinport, /mtpoutipaddr, /mtpoutport, / mtpsendmax and /msgtranssl. ConsoleOne Properties Pages and Settings HTTP Local Intranet Client/Server Internet Proxy Client/Server IMAP CAP QuickFinder Page Enable QuickFinder Indexing Start AuickFinder Indexing QuickFinder Interval Maintenance Page Enable Auto DB Recovery Maintenance Handler Threads Perform User Upkeep Start User Upkeep Generate Address Book for Remote Start Address Book Generation Disk Check Interval Disk Check Delay POA Log Settings Page Log File Path Logging Level Max Log File Age Max Log Disk Space POA Scheduled Events Page Disk Check Event Mailbox/Library Maintenance Event POA SSL Settings Page Corresponding Tasks and Startup Switches See “Setting Up the POA Web Console” on page 489. See also /httpport and /httpssl. See “Using Client/Server Access to the Post Office” on page 447 and “Using TCP/IP Links between the Post Office and the Domain” on page 443. See also /port, /internalclientssl, and /externalclientssl. See “Supporting IMAP Clients” on page 450. See also /imapport, /imapssl, and /imapsslport. See “Supporting CAP Clients” on page 451. See also /capport and /capssl. See “Regulating Indexing” on page 514 and “Configuring a Dedicated Indexing POA” on page 516. See also /qfbaseoffset, /qfbaseoffsetinminute, /gfinterval, / gfintervalinminute, and /nogf. See /norecover. See “Adjusting the Number of POA Threads for Database Maintenance” on page 517. See also /gwchkthreads and /nogwchk. See “Performing Nightly User Upkeep” on page 472. See also /nuuoffset, /nonuu, /rdaboffset, and /nordab. See “Scheduling Disk Space Management” on page 469. See “Using POA Log Files” on page 497. See also /log, /logdays, /logdiskoff, /loglevel, and /logmax. See “Scheduling Disk Space Management” on page 469. See “Scheduling Database Maintenance” on page 467. Configuring the POA 441 ConsoleOne Properties Pages and Settings Certificate File SSL Key File Password Post Office Settings Page Remote User Name Remote Password Post Office Client Access Settings Page Lock Out Older GroupWise Clients Minimum Client Release Version Minimum Client Release Date Enable Intruder Detection Incorrect Logins Allowed Incorrect Login Reset Time Lockout Reset Time Post Office Security Page LDAP Authentication Corresponding Tasks and Startup Switches See “Enhancing Post Office Security with SSL Connections to the POA’ on page 458. See also /certfile, /keyfile, /keypassword. See Chapter 36, “Installing and Starting the POA,” on page 427. See also /user and /password. See “Checking What GroupWise Clients Are in Use” on page 452. See also /gwclientreleasedate, /gwclientreleaseversion, and / enforceclientversion. See “Enabling Intruder Detection” on page 465. See also /intruderlockout, /incorrectloginattempts, / attemptsresetinterval, and /lockoutresetinterval. See “Providing LDAP Authentication for GroupWise Users” on page 461. See also /Idapipaddr, /Idapport, /Idapuser, /Idappwd, / Idapuserauthmethod, /Idapdisablepwdchg, /Idapssl, /Idapssikey, and / Idaptimeout. See also /Idapippooln, /Idappoolresettime, /Idapportpooln, / Idapsslpooln, and /Idapssikeypooln. After you install the POA software, you can further configure the POA using a startup file. See Chapter 40, “Using POA Startup Switches,” on page 523 to survey the many ways the POA can be configured. Changing the Link Protocol between the Post Office and the Domain 442 How messages are transferred between the POA and the MTA is determined by the link protocol in use between the post office and the domain. For a review of link protocols, see “Link Protocols for Direct Links” on page 134. If you need to change from one link protocol to another, some reconfiguration of the POA and its link to the domain is necessary. + “Using TCP/IP Links between the Post Office and the Domain” on page 443 + “Using Mapped or UNC Links between the Post Office and the Domain” on page 444 NOTE: The Linux POA requires TCP/IP lines between the post office and the domain. GroupWise 6.5 Administration Guide Using TCP/IP Links between the Post Office and the Domain To change from a mapped or UNC link to a TCP/IP link between a post office and its domain, you must perform the following two tasks: + + “Configuring the Agents for TCP/IP” on page 443 “Changing the Link between the Post Office and the Domain to TCP/IP” on page 443 Configuring the Agents for TCP/IP 1 2 5 Ifthe MTA in the domain is not yet set up for TCP/IP communication, follow the instructions in “Configuring the MTA for TCP/IP” on page 579. To make sure the POA is properly set up for TCP/IP communication, follow the instructions in “Using Client/Server Access to the Post Office” on page 447. Only one POA per post office needs to communicate with the MTA. If the post office has multiple POAs, have a POA that performs message file processing communicate with the MTA for best performance. For information about message file processing, see “Role of the Post Office Agent” on page 423. In ConsoleOne, browse to and right-click the POA object, then click Properties. Click Group Wise > Network Address to display the Network Address page. x GroupWise + | NDS Rights + | Other | Rights to Files and Folders | Network Address TCP/IP Address: (72165800 (a Proxy Server Address: [E IPXISPX Address: IM ÕÕTC--ceõX| Cl ( Port SSL SSL Port Message Transfer: [7101 E [Disabled +] HTTP: [ 7181 $| [Disabiea x] Local Intranet Client’ Server: 1677 E Disabled x Internet Proxy Client'Server: 04 Disabled + IMAP: 144 $| [Disabled x 993 $ CAP: 1026 $| [Disabled y Page Options... OK Cancel Apply Help In the Message Transfer field, specify the TCP port on which the POA will listen for incoming messages from the MTA. The default message transfer port for the POA to listen on is 7101. Click OK to save the TCP/IP information and return to the main ConsoleOne window. Corresponding Startup Switches You could also use the /mtpinipaddr and /mtpinport startup switches in the POA startup file to set the incoming IP address and port. Changing the Link between the Post Office and the Domain to TCP/IP 1 In ConsoleOne, click Tools > GroupWise Utilities > Link Configuration. Configuring the POA 443 2 In the drop-down list, select the domain where the post office resides. 3 Click Post Office Links, then double-click the post office for which you want to change the link protocol. 4 In the Protocol field, select TCP/IP. x Post Office: Accounting Protocol: frernP x Cancel | Post Office Agent [POA E] Help IP Address: [123.45.678.136 MT Port: [7101 z| ClientíServer Port: [1677 Maximum send message size: 0 4 MBytes 5 Make sure the information displayed in the Edit Post Office Link dialog box matches the information on the Network Address page for the POA. 6 Click OK. 7 To exit the Link Configuration tool and save your changes, click File > Exit > Yes. ConsoleOne then notifies the POA and MTA to restart using the new link protocol. For a sample message flow for this configuration, see “TCP/IP Link Open: Transfer between Post Offices Successful” in “Message Delivery to a Different Post Office” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. Corresponding Startup Switches You could also use the /mtpoutipaddr and /mtpoutport startup switches in the POA startup file to set the outgoing IP address and port. Using Mapped or UNC Links between the Post Office and the Domain To change from a TCP/IP link to a mapped or UNC link between a post office and its domain: 1 In ConsoleOne, click Tools > GroupWise Utilities > Link Configuration. 2 In the drop-down list, select the domain where the post office resides. 3 Click Post Office Links, then double-click the post office for which you want to change the link protocol. In the Protocol field, select Mapped or UNC. Provide the location of the post office in the format appropriate to the selected protocol. Click OK. JO a A To exit the Link Configuration tool and save your changes, click File > Exit > Yes. ConsoleOne then notifies the POA and MTA to restart using the new link protocol. For a sample message flow for this configuration, see “Mapped/UNC Link Open: Transfer between Post Offices Successful” in “Message Delivery to a Different Post Office” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. 444 GroupWise 6.5 Administration Guide Moving the POA to a Different server As your Group Wise system grows and evolves, you might need to move a POA from one server to another. For example, you might decide to run the POA on a different platform, or perhaps you want to move it to a server that has more memory. 1 When moving the POA, pay special attention to the following details: + For a POA configured for client/server processing, reconfigure the POA object with the new IP address and port number for the POA to use on the new server. See “Using Client/ Server Access to the Post Office” on page 447. For the NetWare POA, if it was originally on the same server where the post office is located and you are moving it to a different server, add the /dn switch or the /user and / password switches to the POA startup file to give the NetWare POA access to the server where the post office is located. You can also provide user and password information on the Post Office Settings page. 2 Install the POA on the new server. See “Installing GroupWise Agents” in the Group Wise 6.5 Installation Guide. 3 Start the new POA. See “Starting the POA” on page 431. 4 Observe the new POA to see that it is running smoothly. See Chapter 38, “Monitoring the POA,” on page 475. 5 Stop the old POA. 6 If you are no longer using the old server for any GroupWise agents, you can remove them to reclaim the disk space. See “Uninstalling the POA Software” on page 435. Adjusting the POA for a New Post Office Location If you move a post office from one server to another, you also need to edit the POA startup file to provide the new location of the post office directory. 1 2 oa Ah W Stop the POA for the old post office location if it is still running. Use an ASCII text editor to edit the POA startup file. The POA startup file is named after the post office name, plus a.poa extension. + On NetWare and Windows, only the first 8 characters of the post office name are used in the filename. The startup file is typically located in the directory where the POA software is installed. On Linux, the full post office name is used in the filename. However, all letters are lowercase and any spaces in the post office name are removed. The startup file is located in the /opt/novell/groupwise/agents/share directory. Adjust the setting of the /home switch to point to the new location of the post office directory. Save the POA startup file. Start the POA for the new post office location. See “Starting the POA” on page 431. Adjust the link between the post office and the domain. See “Adjusting the MTA for a New Location ofa Domain or Post Office” on page 587. Configuring the POA 445 Adjusting the POA Logging Level and Other Log Settings When installing or troubleshooting the POA, a logging level of Verbose can be useful. However, when the POA is running smoothly, you can set the logging level down to Normal to conserve disk space occupied by log files. 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click Group Wise > Log Settings to display the Log Settings page. 3 x NDS Rights + | Other | Rights to Files and Folders | Log File Path: [ee Logging Level: Normal X Max Log File Age: | 73 days Max Log Disk Space: | 1024 2f KBytes Page Options... OK Cancel Apply | Help Set the desired settings for logging. For more information about log settings and log files, see “Using POA Log Files” on page 497. Corresponding Startup Switches You could also use the /log, /loglevel, /logdays, /logmax, and /logdiskoff switches in the POA startup file to configure logging. POA Web Console You can view and search POA log files on the Log Files page. Configuring User Access to the Post Office As described in “Post Office Access Mode” on page 422, the GroupWise 6.x client defaults to client/server access mode. The following topics help you configure the POA to customize the types of client/server access provided to the post office: + + + “Using Client/Server Access to the Post Office” on page 447 “Simplifying Client/Server Access with a GroupWise Name Server” on page 449 “Supporting IMAP Clients” on page 450 “Supporting CAP Clients” on page 451 “Checking What GroupWise Clients Are in Use” on page 452 “Supporting Forced Mailbox Caching” on page 454 “Restricting Message Size between Post Offices” on page 455 446 GroupWise 6.5 Administration Guide Using Client/Server Access to the Post Office To make sure the GroupWise client has proper client/server access to the post office: 1 Make sure TCP/IP is properly set up on the server where the POA is running. 2 In ConsoleOne, browse to and right-click the POA object, then click Properties. 3 Click Group Wise > Agent Settings to display the Agent Settings page. Properties of POA xj DS Rights + | Other | Rights to Files and Folders | Message File Processing: All y Message Handler Threads: [ 64 Enable TCP/IP (for ClientíServer) TCP Handler Threads: | e3 Max Physical Connections: | 10242 Max App Connections: | 208 < [Y Enable Caching CPU Utilization (NLM): | 85 {percent Delay Time (NLM): | 100 £f milliseconds Max Thread Usage for Priming and Moves: [ 241 percent [Y Enable IMAP Max IMAP Threads: [| soi M Enable CAP Max CAP Threads: | aş E| Page Options... | Lx | Cancel Apply | Help 4 Make sure that Enable TCP/IP (for Client/Server) is selected. The default numbers of physical connections and application connections are appropriate for a post office with as many as 500 users. If you are configuring the POA to service more than 500 users, see “Adjusting the Number of Connections for Client/Server Processing” on page 508 for more detailed recommendations. Configuring the POA with insufficient connections can result in error conditions. 5 Click GroupWise > Network Address. Configuring the POA 447 Properties of POA xÍ GroupWise v | NDS Rights v | Other | Rights to Files and Folders | Network Address TCP/IP Address: Maese OO A Proxy Server Address: | IPXISPX Address: ¡Aa 7 | Port SSL SSL Port Message Transfer: [7101 $| [Disabled x] HTTP: [7181 $| [Disabled x] Local Intranet Client/Server: 1677 | Disabled +] Internet Proxy ClientServer: 04 Disabled +] IMAP: 144 $| [Disabled y 993 + CAP: 1026 $| [Disabled y Page Options... OK Cancel Apply | Help 6 On the Network Address page, click the pencil icon for the TCP/IP Address field to display the Edit Network Address dialog box. Edit Network Address xÍ TCP/IP Address (° IP Address: 123 .| 45 .| 67 | 89 C DNS Host Name: 7 Select IP Address, then specify the IP address, in dotted decimal format, of the server where the POA is running. Or Select DNS Host Name, then provide the DNS hostname of'the server where the POA is running. IMPORTANT: The POA must run on a server that has a static IP address. DHCP cannot be used to dynamically assign an IP address for it. Specifying the DNS hostname rather than the IP address makes it easier to move the POA from one server to another, should the need arise at a later time. You can assign a new IP address to the hostname in DNS, without needing to change the POA configuration information in ConsoleOne. 8 Click OK. 9 To use a TCP port number other than the default port of 1677, type the port number in the Local Intranet Client/Server Port field. If multiple POAs will run on the same server, each POA must have a unigue TCP port number. 10 Ifneeded, select Enabled or Required in the SSL drop-down list for local intranet client/server connections, Internet client/server connections, or both. For more information, see “Enhancing Post Office Security with SSL Connections to the POA” on page 458. 11 Click OK to save the network address and port information and return to the main ConsoleOne window. ConsoleOne then notifies the POA to restart with client/server processing enabled. 448 GroupWise 6.5 Administration Guide For a sample message flow for this configuration, see “Message Delivery in the Local Post Office” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. Corresponding Startup Switches You could also use the /port switch in the POA startup file to provide the client/server port number. On a server with multiple IP addresses, you can use the /ip switch to bind the POA to a specific address. POA Web Console You can view the TCP/IP address and port information for the POA on the Configuration page under the Client/Server Settings heading. Simplifying Client/Server Access with a GroupWise Name Server If Group Wise users are set up correctly in eDirectory, the Group Wise client can determine which post office to access for each user based on the information stored in eDirectory. This lets the GroupWise client start automatically in client/server mode without users needing to know and provide any IP address information. However, some Group Wise users might be on platforms where eDirectory is not in use. To fill the same function for non-eDirectory users, you can setup a Group Wise name server. A GroupWise name server redirects each Group Wise client user to the IP address and port number of the POA that services the user's post office. By setting up a Group Wise name server, non- eDirectory GroupWise client users do not need to know and provide any IP address information when they start the GroupWise client in client/server mode. The GroupWise name server takes care of this for them. + “Required Hostnames” on page 449 + “Required Port Number” on page 449 + “How a GroupWise Name Server Helps the GroupWise Client Start” on page 449 + “Setting Up a GroupWise Name Server” on page 450 Required Hostnames The primary Group Wise name server must be designated using the hostname ngwnameserver. You can also designate a backup GroupWise name server using the hostname ngwnameserver2. Required Port Number Each server designated as a GroupWise name server must have a POA running on it that uses the default port number of 1677. Other agents can run on the same server, but one POA must use the default port number of 1677 in order for the GroupWise name server to function. For setup instructions, see “Using Client/Server Access to the Post Office” on page 447. How a GroupWise Name Server Helps the GroupWise Client Start After a server has been designated as ngwnameserver, and a POA using the default port number of 1677 is running on that server, the Group Wise client can connect to the POA of the appropriate post office by contacting the POA located on ngwnameserver. If ngwnameserver is not available, the client next attempts to contact the backup name server, ngwnameserver2. If no GroupWise name server is available, the user would need to provide the IP address and port number of the appropriate POA in order to start the Group Wise client in client/server mode. Configuring the POA 449 Setting Up a GroupWise Name Server 1 Make sure that TCP/IP is set up and functioning on your network. 2 Know the IP address of the server you want to set up as a Group Wise name server. 3 Make sure the POA on that server uses the default TCP port of 1677. 4 If you want a backup Group Wise name server, identify the IP address of a second server where the POA uses the default TCP port of 1677. 5 Use your tool of choice for modifying DNS. NetWare Note: On a NetWare server, you could use INETCFG. Linux Note: On a SUSE server, you could use the YaST Control Center. On a Red Hat server, you could use Server Settings > Domain Name Server on the Red Hat menu. Windows Note: On a Windows server, you could use DNS Manager. 6 Create an entry for the IP address of the first POA and give it the hostname ngwnameserver. 7 Ifyou want a backup name server, create an entry for the IP address of the second POA and give it the hostname ngwnameserver2. You must use the hostnames ngwnameserver and ngwnameserver2. Any other hostnames are not recognized as GroupWise name servers. 8 Save your changes. As soon as the hostname information replicates throughout your system, GroupWise client users can start the GroupWise client in client/server mode without specifying a TCP/IP address and port number. Supporting IMAP Clients You can configure the POA so that IMAP (Internet Messaging Application Protocol) clients such as Netscape Mail, Eudora Pro, Microsoft Outlook, and Entourage can connect to the post office much like the GroupWise client does. 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click GroupWise > Agent Settings to display the Agent Settings page. 450 = GroupWise 6.5 Administration Guide Properties of POA E xj DS Rights + | Other | Rights to Files and Folders | Message File Processing: fan | Message Handler Threads: [ eş IV Enable TCP/IP (for ClientíServer) TCP Handler Threads: [ ç o Max Physical Connections: 1024 y Max App Connections: 2048 4 [Y Enable Caching CPU Utilization (NLM): 85 E percent Delay Time (NLM): | 100 £f milliseconds Max Thread Usage for Priming and Moves: 20 y percent M Enable IMAP Max IMAP Threads: so > Enable CAP Max CAP Threads: 50 +] F Page Options... | (+ | Cancel A Help 3 Select Enable IMAP. The default maximum number of IMAP threads is 50. This is adeguate for most post offices, because each IMAP thread can service multiple IMAP clients. New threads are started automatically to service clients until the maximum number is reached. 4 If you want IMAP clients to use SSL connections to the post office, click Group Wise > Network Address, then select Enabled or Reguired in the IMAP SSL drop-down list. For additional instructions about using SSL connections, see Chapter 80, “Encryption and Certificates,” on page 1039. 5 Click OK to save the IMAP settings and return to the main ConsoleOne window. ConsoleOne then notifies the POA to restart with IMAP enabled. Corresponding Startup Switches You could also use the /imap, /imapmaxthreads, /imapport, /imapssl, /imapsslport, and / imapreadlimit startup switches in the POA startup file to configure the POA to support IMAP clients. POA Web Console You can see whether IMAP is enabled on the Configuration page under the General Settings heading. Supporting CAP Clients You can configure the POA so that CAP (Calendar Access Protocol) clients can connect to the post office much like the Group Wise client does. 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click Group Wise > Agent Settings to display the Agent Settings page. Configuring the POA 451 Properties of POA E x| | NDS Rights + | Other | Rights to Files and Folders | a Message File Processing: MI zl Message Handler Threads: | e3 M Enable TCP/IP (for Olient'Server) TCP Handler Threads: gE Max Physical Connections: 1024 E Max App Connections: | 208 IV Enable Caching CPU Utilization (NLM): | 85 2f percent Delay Time (NLM): | 100 <[ miliseconds Max Thread Usage for Priming and Moves: [ xä percent M Enable IMAP Max IMAP Threads: [ sä M Enable CAP Max CAP Threads: [ soi zÍ Page Options... [ox] Cancel Ap | Help 3 Select Enable CAP. The default maximum number of CAP threads is 50. This is adequate for most post offices, because each CAP thread can service multiple CAP clients. New threads are started automatically to service clients until the maximum number is reached. 4 If you want CAP clients to use SSL connections to the post office, click GroupWise > Network Address, then select Enabled or Required in the CAP SSL drop-down list. For additional instructions about using SSL connections, see Chapter 80, “Encryption and Certificates,” on page 1039. 5 Click OK to save the CAP settings and return to the main ConsoleOne window. ConsoleOne then notifies the POA to restart with CAP enabled. Corresponding Startup Switches You could also use the /cap, /capmaxthreads, /capport, and /capssl startup switches in the POA startup file to configure the POA to support CAP clients. POA Web Console You can see whether CAP is enabled on the Configuration page under the General Settings heading. Checking What GroupWise Clients Are in Use You can configure the POA to identify GroupWise client users who are running Group Wise clients that do not correspond to a specified release version and/or date. You can also force them to update to the specified version. 1 In ConsoleOne, browse to and right-click the Post Office object, then click Properties. 2 Click GroupWise > Client Access Settings to display the Client Access Settings page. 452 GroupWise 6.5 Administration Guide Lock Out Older GroupWise Clients [ Minimum Client Release Version 0000): 6.0 àd [ Minimum Client Release Date: El E Disable Logins TO Enable Intruder Detection Page Options... Lo] Cancel E Help 3 Specify the approved Group Wise release version, if any. Only 6.x versions of'the client are supported for lockout. 4 Specify the approved GroupWise release date, if any You can specify the minimum version, the minimum date, or both. If you specify both minimums, any user for which both minimums are not true is identified as running an older Group Wise client. 5 Select Lock Out Older GroupWise Clients for the version and/or date if you want to force users to update in order to access their GroupWise mailboxes. If you lock out older clients, client users receive an error message and be unable to access their mailboxes until they upgrade their GroupWise client software to the minimum required version and/or date. 6 Click OK to save the GroupWise version and/or date settings. ConsoleOne then notifies the POA to restart so the new settings can be put into effect. Corresponding Startup Switches You could also use the /gwclientreleaseversion, /gwclientreleasedate, and /enforceclientversion startup switches in the POA startup file to configure the POA to check client version and/or date information. POA Web Console On the Status page of the POA Web console, click C/S Users to display the Current Users page, which lists all Group Wise users who are currently accessing the post office. Users who are running Group Wise clients older than the approved version and/or date are highlighted in red in the list. Historical Note: The capability of identifying client version and date information was first introduced in Group Wise 5.5 Enhancement Pack Support Pack 1. Any clients with versions and dates earlier than GroupWise 5.5 Enhancement Pack Support Pack | do not appear at all on the Current Users page of the POA Web console. Configuring the POA 453 Supporting Forced Mailbox Caching Group Wise client users have the option to download their GroupWise mailboxes to their workstations so they can work without being continuously connected to the network. This is called Caching mode. For more information, see “Caching Mode” on page 965. When client users change to Caching mode, the contents of their mailboxes must be copied to their hard drives. This process is called "priming" the mailbox. If users individually decide to use Caching mode, the POA easily handles the process. If you force all users in the post office to start using Caching mode, as described in “Allowing or Forcing Use of Caching Mode” on page 966, multiple users might attempt to prime their mailboxes at the same time. This creates a load on the POA that can cause unacceptable response to other users. To configure the POA to handle multiple requests to prime mailboxes: 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click GroupWise > Agent Settings to display the Agent Settings page. Message File Processing: fan El Message Handler Threads: [ 64 M Enable TCP/IP (for Olient'Server) TCP Handler Threads: 6 4 Max Physical Connections: 1024 4 Max App Connections: 2048 | IV Enable Caching CPU Utilization (NLM): | 65 Sf percent Delay Time (NLM): [100 5 milliseconds Max Thread Usage for Priming and Moves: 20 4 percent M Enable IMAP Max IMAP Threads: [ soi M Enable CAP Max CAP Threads: [ss E| Page Options... | [ox] Cancel app] (ET 3 Set Max Thread Usage for Priming and Moves as needed. By default, the POA allocates only 20% of 1ts TCP handler threads for priming mailboxes for users who are using Caching mode for the first time. In a default configuration, this would be only one thread. You might want to specify 60 or 80 so that 60% to 80% of POA threads are used for priming mailboxes. You might also want to increase the number of TCP handler threads the POA can start in order to handle the temporarily heavy load while users are priming their mailboxes. See “Adjusting the Number of Connections for Client/Server Processing” on page 508. 4 Click OK to save the new setting. ConsoleOne then notifies the POA to restart so the new setting can be put into effect. Corresponding Startup Switches You could also use the /primingmax switch in the POA startup file to configure the POA to handle multiple requests to prime mailboxes. 454 GroupWise 6.5 Administration Guide POA Web Console You can change the POA’s ability to respond to caching requests for the current POA session on the Configuration page. Under the Client/Server Settings heading, click Max Thread Usage for Priming and Live Moves. To increase the number of client/server threads, click Client/Server Processing Threads under the Performance Settings heading. Restricting Message Size between Post Offices You can configure the POA to restrict the size of messages that users are permitted to send outside the post office. 1 In ConsoleOne, click Tools > Group Wise Utilities > Link Configuration. KE Groupwise Link Configuration Tool - \\PRY-GW\sys\gwsystem\provol T Í ol x| File Edit Search View Window Help 89] 3/9 2] NS sw Provot (Primary) +] & mi Ki Domain: Provo1 BEE Outbound Links from Provo1 r Direct Indirect Gateway Undefined: % Provo2 rindirect 2 In the drop-down list, select the domain where the post office resides, then click Post Office Links. | Clee Link Configuration Tool - \\PRY-GW\sys\gwsystem\provol JA Í ol xj File Edit Search View Window Help | EM ?| AIK] RE Poor imam A IDI | CS Office Links for Provo1 Post Office Links for Provoi Post Office Domain Link % Manufacturing |Provo1 123.45.678.136:1677,7101 % R&D Provo1 123.45.678.136: 1677,7201 3 Double-click the post office where you want to restrict message size. Edit Post Office Link Post Office: Accounting Protocol: fropar bd Cancel | Post Office Agent: [POA y] Help | IP Address: [123.45.578.136 MT Port: Fa 01 2] Client/Server Port: Fr 677 Maximum send message size: [ 0 5 MBytes 4 In the Maximum Send Message Size field, specify in megabytes the size of the largest message you want users to be able to send outside the post office, then click OK. 5 To exit the Link Configuration tool and save your changes, click File > Exit > Yes. ConsoleOne then notifies the POA to restart using the new maximum message size limit. Configuring the POA 455 Configuring If a user’s message is not sent out of the post office because of this restriction, the user receives an e-mail message with a subject line of: Delivery disallowed plus the subject ofthe original message. This message provides information to the user about why and where the message was disallowed. However, the message is still delivered to recipients in the sender’s own post office. There are additional ways to restrict the size of messages that users can send, as described in “Restricting the Size of Messages That Users Can Send” on page 175. Corresponding Startup Switches You could also use the /mtpsendmax startup switch in the POA startup file to restrict message size. POA Web Console You can view the maximum message size on the Configuration page. You can change the maximum message size for the current POA session using the Message Transfer Protocol link on the Configuration page. Post Office Security You can configure the POA in various ways to meet the security needs of the post office. + “Securing Client/Server Access through a Proxy Server” on page 456 + “Enhancing Post Office Security with SSL Connections to the POA” on page 458 + “Providing LDAP Authentication for Group Wise Users” on page 461 + “Enabling Intruder Detection” on page 465 Securing Client/Server Access through a Proxy Server Ifthe server where the POA runs is behind your firewall, you can link it to a proxy server in order to provide client/server access to the post office for Group Wise client users who are outside the firewall. 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click Group Wise > Network Address to display the POA Network Address page. 456 GroupWise 6.5 Administration Guide Properties of POA j x| GroupWise v | NDS Rights + | Other | Rights to Files and Folders | Network Address TCP/IP Address: TIA (a Proxy Server Address: | IPXISPX Address: (| | Port SSL SSL Port Message Transfer: [ 7101 $| [bisaties x] HTTP: [7181 $| [pisapies =] Local Intranet Client/Server: 1677 | Disabled +] Internet Proxy ClientServer: g- Disabled z] IMAP: 144 $| [Disabled y 993 +1 CAP: 1026 $| [Disabled y Page Options... | OK Cancel Apply | Help 3 Make sure the POA is already configured for client/server processing as explained in “Using Client/Server Access to the Post Office” on page 447. 4 Click the pencil icon for the Proxy Server Address field to display the Edit Network Address dialog box. Edit Network Address Ex TCP/IP Address @ IP Address: [123 . 45 #1] 67 (.] 89) C DNS Host Name: [ cues | te | 5 Select IP Address, then specify the IP address, in dotted decimal format, ofthe server that Group Wise client users access from outside your firewall. or Select DNS Host Name, then provide the DNS hostname of that server. 6 Click OK. 7 Ifyou want to use a different port number for the proxy server than you are using for client/ server access to the POA itself, provide the port number in the Internet Proxy Client/Server field. 8 Click OK to save the proxy server network address and port and return to the main ConsoleOne window. ConsoleOne then notifies the POA to restart and begin communicating with the proxy server. POA Web Console You can list all POAs in your Group Wise system, along with their proxy server addresses. On the Configuration page, click IP Addresses Redirection Table under the General Settings heading. Configuring the POA 457 Controlling Client Redirection Inside and Outside Your Firewall When a user tries to access his or her mailbox without providing the IP address of the POA for his or her post office, any POA or a Group Wise name server POA can redirect the request to the POA for the user's post office. A POA thatis configured with both an internal IP address and a proxy IP address automatically redirects internal users to internal IP addresses and external users to proxy IP addresses. However, if you want to control which users are redirected to which IP addresses based on other criteria than user location, you can configure a post office with one POA to always redirect users to internal IP addresses and a second POA to always redirect users to proxy IP addresses. Users are then redirected based on which POA IP address they provide in the Group Wise Startup dialog box when they start the Group Wise client to access their mailboxes. 1 Configure the initial POA for the post office with the IP address that you want for internal users. For instructions, see “Using Client/Server Access to the Post Office” on page 447. Do not fill in the Proxy Server Address field on the Network Address page of the POA object. 2 Create a second POA object in the post office and give it a unique name, such as POA PRX. For instructions, see “Creating a POA Object in eDirectory” on page 438. 3 Configure this second POA with a proxy IP address. For instructions, see “Securing Client/ Server Access through a Proxy Server” on page 456. Do not fill in the TCP/IP Address field on the Network Address page of the POA object. 4 Create a startup file for the new instance of the POA. 4a Use the /name switch to specify the name of the POA object that you created in Step 2. 4b Use the /ip switch to specify the IP address of the server where this instance of the POA runs. 4c Use the /port switch to specify the client/server port that this instance of the POA listens on. This information needs to be specified in the POA startup file because this information is not specified in ConsoleOne for this instance of the POA. 5 Start the new instance of the POA. 6 Give users that you want to be redirected to internal IP addresses the IP address you used in Step 1. T Giveusers that you want to be redirected to proxy IP addresses the IP address you used in Step 3. Enhancing Post Office Security with SSL Connections to the POA Secure Sockets Layer (SSL) ensures secure communication between the POA and other programs by encrypting the complete communication flow between the programs. For background information about SSL and how to set it up on your system, seeChapter 80, “Encryption and Certificates,” on page 1039. To configure the POA to use SSL: 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click Group Wise > Network Address to display the Network Address page. 458 GroupWise 6.5 Administration Guide Properties of POA E x| GroupWise v | NDS Rights v | Other | Rights to Files and Folders | Network Address TCP/IP Address: a A Proxy Server Address: A A) IPXISPX Address: ¡E | Port ssL SSL Port Message Transfer: [7101 $| [Disabled x] HTTP: [7181 $| [Disabled x] Local Intranet Client/Server: 1677 +] Disabled x Internet Proxy Client/Server: 04 Disabled x IMAP: [ 144 $| [Disabled +] [ 9933] CAP: 1026 $| [Disabled y Page Options... | OK Cancel Apply Help 3 To use SSL connections between the POA and GroupWise clients located inside your firewall, select Enabled in the Local Intranet Client/Server SSL drop-down list to let the GroupWise client determine whether an SSL connection or non-SSL connection is used. (Non-SSL connections are still protected by native GroupWise encryption.) or Select Required in the Local Intranet Client/Server SSL drop-down list if you want the POA to force SSL connections, so that non-SSL connections are denied. IMPORTANT: Clients older than GroupWise 6.5 cannot connect to the POA if SSL is required. 4 To use SSL connections between the POA and GroupWise clients located outside your firewall (for example, across the Internet), select Enabled in the Internet Client/Server SSL drop-down list to let the Group Wise client determine whether an SSL connection or non-SSL connection is used. (Non-SSL connections are still protected by native GroupWise encryption.) or Select Required in the Internet Client/Server SSL drop-down list if you want the POA to force SSL connections, so that non-SSL connections are denied. IMPORTANT: Clients older than GroupWise 6.5 cannot connect to the POA if SSL is required. 5 Touse SSL connections between the POA and IMAP clients, select Enabled in the IMAP SSL drop-down list to let the IMAP client determine whether an SSL connection or non-SSL connection is used. or Select Required in the IMAP SSL drop-down list if you want the POA to force SSL connections, so that non-SSL connections from IMAP clients are denied. 6 To use SSL connections between the POA and its MTA, select Enabled in the Message Transfer SSL drop-down list. The POA must use a TCP/IP link with the MTA in order to enable SSL for the connection. See “Using TCP/IP Links between the Post Office and the Domain” on page 443. Configuring the POA 459 The MTA must also have SSL enabled for the connection to be secure. See “Enhancing Domain Security with SSL Connections to the MTA” on page 589. Ifthe MTA does not have SSL enabled, the POA falls back to native Group Wise encryption. 7 To use SSL connections between the POA and the POA Web console displayed in your Web browser, select Enabled in the HTTP SSL drop-down list. To set up the POA Web console, see “Setting Up the POA Web Console” on page 489. 8 Click Apply to save the settings on the Network Address page. 9 Click GroupWise > SSL Settings to display the SSL Settings page. Properties of POA E x| NDS Rights + | Other | Rights to Files and Folders | Certificate file: | a SSL key file: al Set Password | Page Options... For background information about certificate files and SSL key files, see Chapter 80, “Encryption and Certificates,” on page 1039. By default, the POA looks for the certificate file and SSL key file in the same directory where the POA executable is located, unless you provide a full pathname. 10 In the Certificate File field, browse to and select the public certificate file provided to you by your CA. 11 In the SSL Key File field: 11a Browse to and select your private key file. 11b Click Set Password. 11c Provide the password that was used to encrypt the private key file when it was created. 11d Click Set Password. 12 Click OK to save the SSL settings. ConsoleOne then notifies the POA to restart and access the certificate and key files. Corresponding Startup Switches You could also use the /certfile, /keyfile, /keypassword, /httpssl, /msgtranssl, /imapssl, and / imapsslport switches in the POA startup file to configure the POA to use SSL. POA Web Console You can view SSL information for the POA on the Status and Configuration pages. In addition, 460 GroupWise 6.5 Administration Guide when you list the client/server users that are accessing the post office, SSL information is displayed for each user. Providing LDAP Authentication for GroupWise Users By default, Group Wise client users’ passwords are stored in eDirectory and the POA authenticates users to their Group Wise mailboxes through eDirectory. For background information about passwords, see Chapter 79, “GroupWise Passwords,” on page 1033. By enabling LDAP authentication for the POA, users’ password information can be retrieved from any network directory that supports LDAP. For background information about LDAP, see “Authenticating to GroupWise with Passwords Stored in an LDAP Directory” on page 1047. When you enable LDAP authentication, it is important to provide fast, reliable access to the LDAP directory because GroupWise client users cannot access their mailboxes until they have authenticated. The following sections provide instructions for configuring the POA to make the most efficient use of the LDAP servers available on your system: + “Providing LDAP Server Configuration Information” on page 461 + “Enabling LDAP Authentication for a Post Office” on page 462 + “Configuring a Pool of LDAP Servers” on page 464 + “Specifying Failover LDAP Servers (Non-SSL Only)” on page 465 Providing LDAP Server Configuration Information Information about your available LDAP servers must be provided in ConsoleOne before you can enable LDAP authentication for users. 1 In ConsoleOne, click Tools > GroupWise System Operations > LDAP Servers to display the Configure LDAP Servers dialog box. LDAP Servers: Close Name: Description: I Use SSL ane | a LDAP Server Address: [ 2| User Authentication Method: [Bina x] Select Post Offices Configuring the POA 461 3 Inthe Name field, type the name by which you want the LDAP server to be known in your Group Wise system. 4 Inthe Description field, provide additional information about the LDAP server as needed. 5 Ifthe LDAP server reguires an SSL connection, select Use SSL, then browse to and select the SSL key file, as provided by the LDAP server. For additional instructions about using SSL connections, see the following resources: + Authentication and Security (http://www.novell.com/documentation/edir873/edir873/ data/agtxhz5 .html#agtxhz5) + Enabling LDAP Authentication with Group Wise (http://support.novell.com/cgi-bin/ search/searchtid.cgi?/10067375.htm) 6 Click the pencil icon for the LDAP Server Address field. KE edit LDAP Server Address x| TCP/IP Address (° IP Address: 5 6 5 C DNS Host Name: LDAP Port: 389 [ox | Cancel Help 7 Select IP Address, then specify the IP address, in dotted decimal format, of the LDAP server. or Select DNS Host Name, then provide the DNS hostname of the LDAP server. The default LDAP port is 389 for non-SSL connections and 636 for SSL connections. 8 Ifthe default port number is already in use, specify a unique LDAP port number. 9 Click OK to save the LDAP server address and port information. 10 In the User Authentication Method field, select Bind or Compare. For a comparison of these methods, see “Authenticating to GroupWise with Passwords Stored in an LDAP Directory” on page 1047. 11 Click OK to save the configuration information for the LDAP server. 12 Repeat Step 2 through Step 11 for each LDAP server that you want to make available to GroupWise for LDAP authentication. Providing configuration information for multiple LDAP servers creates a pool of LDAP servers, which provides fault tolerance and load balancing to ensure fast, reliable mailbox access for GroupWise users. 13 Continue with “Enabling LDAP Authentication for a Post Office” on page 462 Corresponding Startup Switches You could also use the /Idapipaddr, /Idapport, /Idapuserauthmethod, /Idapssl, and /Idapsslkey startup switches in the POA startup file to provide the LDAP server information. Enabling LDAP Authentication for a Post Office To configure the POA to perform LDAP authentication for the users in a post office: 1 In ConsoleOne, browse to and right-click the Post Office object, then click Properties. 462 GroupWise 6.5 Administration Guide 2 Click Group Wise > Security to display the Security page. Properties of Development 4 xj GroupWise + | Memberships v | NDS Rights v | Other | Rights to Files and Folders | Security Security Level: C Low ( High High Security Options E eDirectory Authentication el 3 LDAP User Name: El LDAP Password: SetPassword C Disable LDAP Password Changing Inactive Connection Timeout 30 F seconds LDAP Pool Server Reset Timeout: 5 E minutes Select Servers Page Options... | Cancel Apply Help 3 For Security Level, select High. 4 In the High Security Options box, select LDAP Authentication. 5 Ifyou want the POA to access the LDAP server with specific rights to the LDAP directory, specify a username that has those rights. If you are using a Novell LDAP server, you can browse for an eDirectory User object. The information returned from eDirectory uses the following format: cn=username,ou=orgunit,o=organization If you are using another LDAP server, you must type the information in the format used by that LDAP server. If the LDAP username for the POA requires a password, click Set Password, type the password twice for verification, then click Set Password. For more information about LDAP usernames, see “Authenticating to GroupWise with Passwords Stored in an LDAP Directory” on page 1047. 6 If you want to prevent Group Wise users from changing their LDAP passwords by using the Password dialog box in the GroupWise client, select Disable LDAP Password Changing. This option is deselected by default, so that if users change their passwords in the Group Wise client through the Security Options dialog box (GroupWise Windows client > Tools menu > Options > Security) or on the Passwords page (GroupWise WebAccess client > Options > Password), their LDAP passwords are changed to match the new passwords provided in the Group Wise client. 7 Ifthe LDAP server is configured for bind connections, as described in “Providing LDAP Server Configuration Information” on page 461, specify the number of seconds the POA should maintain an inactive connection to the LDAP server. The default is 30 seconds. 8 Ifyou have only one LDAP server, click OK to save the security settings for the post office. You have provided all the necessary information to provide LDAP authentication for users in the post office. or Configuring the POA 463 If you have multiple LDAP servers and want to configure them into an LDAP server pool, click Apply, then continue with “Configuring a Pool of LDAP Servers” on page 464. or If you have multiple LDAP servers and want to configure them for failover, click OK to save the security settings for the post office, then continue with “Specifying Failover LDAP Servers (Non-SSL Only)” on page 465 Corresponding Startup Switches You could also use the /Idapuser, /Idappwd, /Idapdisablepwdchg, and /Idaptimeout startup switches in the POA startup file to configure POA access to the LDAP server. POA Web Console You can see if LDAP is enabled on the Configuration page. Under the General Settings heading, click LDAP Authentication to view LDAP settings and change some of them for the current POA session. Configuring a Pool of LDAP Servers 464 You can configure the POA to contact a different LDAP server each time it needs to access the LDAP directory. This provides load balancing and fault tolerance because each LDAP server in the pool is contacted equally often by the POA. The LDAP server pool can include as many as five servers. 1 Make sure you have enabled LDAP Authentication as described in “Enabling LDAP Authentication for a Post Office” on page 462. 2 Inthe LDAP Pool Server Reset Timeout field, specify the number of minutes the POA should wait before trying to contact an LDAP server in the pool that failed to respond to the previous contact. The default is 5 minutes. 3 Click Select Servers to define the specific pool of LDAP servers that you want to be available to users in this post office for LDAP authentication. Select LDAP Servers xj Selected Servers Available Servers NetWare LDAP Server Windows 2000 LDAP Server «| | Close Help 4 Select one or more LDAP servers in the Available Servers list, then click the arrow button to move them into the Selected Servers list. 5 Click OK to save the list of LDAP servers. 6 Click OK to save the security settings for the post office. ConsoleOne then notifies the POA to restart so the new LDAP settings can be put into effect. GroupWise 6.5 Administration Guide Corresponding Startup Switches You could also use the /Idapippooln and /Idappoolresettime startup switches in the POA startup file to configure the LDAP server pool and the timeout interval. If you choose to configure the LDAP server pool in the startup file rather than in ConsoleOne, additional switches must be provided to complete the configuration (/Idapportpoolz, /Idapsslpooln, and /Idapsslkeypooln. Configuring the pool in ConsoleOne is the recommended approach. If you previously set up LDAP authentication on the post office Security page in ConsoleOne and then you add the pooling startup switches to the POA startup file, the pooling switches override any LDAP information provided in ConsoleOne. Specifying Failover LDAP Servers (Non-SSL Only) If the POA does not need to use an SSL connection to your LDAP servers, you can use the / Idapipaddr switch to list multiple LDAP servers. Then, if the primary LDAP server fails to respond, the POA tries the next LDAP server in the list, and so on until it is able to access the LDAP directory. This provides failover LDAP servers for the primary LDAP server but does not provide load balancing, because the primary LDAP server is always contacted first. 1 2 4 5 Make sure you have provided the basic LDAP information on the post office Security page in ConsoleOne, as described in “Enabling LDAP Authentication for a Post Office” on page 462. Edit the POA startup file with an ASCII text editor. For information about the POA startup file, see “Starting the POA” on page 431. Use the /Idapipaddr startup switch to list addresses for multiple LDAP servers. Use a space between addresses. For example: /Idapipaddr-123.45.67.89 135.246.7.8 987.65.43.21 IMPORTANT: Do not include any LDAP servers that require an SSL connection. There is currently no way to specify multiple SSL key files unless you are using pooled LDAP servers, as described in “Configuring a Pool of LDAP Servers” on page 464. Save the POA startup file, then exit the text editor. Stop the POA, then start the POA so that it reads the updated startup file. Enabling Intruder Detection You can configure the POA to detect system break-in attempts in the form of repeated unsuccessful logins. This feature can be especially helpful when allowing Remote client users to establish client/server connections to MTAs in your system. See “Enabling Live Remote” on page 589. 1 2 In ConsoleOne, browse to and right-click the Post Office object, then click Properties. Click GroupWise > Client Access Settings to display the Client Access Settings page. Configuring the POA 465 Properties of Development E E xÍ GroupWise + | Memberships v | NDS Rights + | Other | Rights to Files and Folders | Client Access Settings Lock Out Older GroupWise Clients [ Minimum Client Release Version (xx): 6.0 Sa [ Minimum Client Release Date: [ w| I Disable Logins Incorrect Logins Allowed: 5 = (3-10) Incorrect Login Reset Time: 30 4 minutes (15-60) Lockout Reset Time: 30 4 minutes (15+) Page Options... Cancel Apply | Help 3 Select Enable Intruder Detection. 4 Specify how many unsuccessful login attempts are allowed before the user is locked out. The default is 5: valid values range from 3 to 10. 5 Specify in minutes how long unsuccessful login attempts are counted. The default is 15; valid values range from 15 to 60. 6 Specify in minutes how long the user login is disabled. The default is 30; the minimum setting is 15. 7 Click OK to save the intruder detection settings. ConsoleOne then notifies the POA to restart so the new settings can be put into effect. If a user gets locked out by intruder detection, his or her Group Wise account is disabled. To restore access for the user in ConsoleOne, right-click the User object, click GroupWise > Account, then deselect Disable Logins. At restore access for the user at the POA Web console, click Configuration > Intruder Detection, then clear the lockout. Corresponding Startup Switches You could also use the /intruderlockout, /incorrectloginattempts, /attemptsresetinterval, and / lockoutresetinterval startup switches in the POA startup file to configure the POA for intruder detection. POA Web Console You can view current intruder detection settings on the Configuration page and change them using the Intruder Detection link. Configuring Trusted Application Support For background information about setting up trusted applications in ConsoleOne, see “Trusted Applications” on page 62. 466 GroupWise 6.5 Administration Guide Configuring Post Office Maintenance You can configure the POA to manage databases and disk space in the post office on a regular basis: + “Scheduling Database Maintenance” on page 467 + “Scheduling Disk Space Management” on page 469 + “Performing Nightly User Upkeep” on page 472 Scheduling Database Maintenance By default, the POA performs one recurring database maintenance event. At 12:00 a.m. each Friday, the POA performs a structural check of all user, message, and document databases in the post office. You can modify this default database maintenance event, or create additional database maintenance events for the POA to perform on a regular basis. 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click Group Wise > Scheduled Events to display the Scheduled Events page. Properties of POA E xj NDS Rights + | Other | Rights to Files and Folders | Scheduled events used by this agent: M Default POA Disk Check Event M Default POA MailbowLibrary Maintenance Event Page Options... ( Cancel ; Help | The Scheduled Events page lists a pool of POA events available to all POAs in your Group Wise system. 3 To modify the default database maintenance event, which would affect all POAs that have this database maintenance event enabled, select Default POA Mailbox/Library Maintenance Event, then click Edit. Or To create a new database maintenance event, which will be added to the pool of POA events that can be enabled for any POA in your Group Wise system, click Create, then type a name for the new database maintenance event. Select Mailbox/Library Maintenance in the Type field. NOTE: If the Create button is dimmed and you have a View button rather than an Edit button, you are connected to a secondary domain in a GroupWise system where Restrict System Operations to Primary Configuring the POA 467 Domain has been selected under System Preferences. For more information, see “System Preferences” on page 44. Edit Scheduled Event i Xx! Name: Default POA MailbowLibrary Maintenance Event Type: [mailboxLibrary Maintenance xl Trigger © Weekday Weekday: Friday y C Daily C Interval Time: 12:00 AM Actions M Default POA MailbowLibrary Maintenance Actions 4 Inthe Trigger box, specify when you want the database maintenance event to take place. You can have the database maintenance event take place once a week, once a day, or at any other regular interval, at whatever time you choose. Below the Trigger box is listed the pool of POA database maintenance actions that are available for inclusion in all POA database maintenance events in your Group Wise system. 5 To modify the default database maintenance action, select Default POA Mailbox/Library Maintenance Actions, then click Edit. or To create a new database maintenance action, click Create, then type a name for the new database maintenance action. Database maintenance actions and options you could schedule include: Actions Options on Actions Analyze/Fix Databases Databases Structure User Index check Message Contents Document Collect statistics ; A Logging Fix problems Log file Reset user disk space totals Analyze/Fix Library Verify library Fix document/version/element Verify document files Validate security Synchronize username Reassign orphaned documents Reset word lists 468 GroupWise 6.5 Administration Guide Verbose log level Results mailed to Administrator Individual users Exclude Selected users Notification Action status For more detailed descriptions of the above actions, click Help in the Scheduled Event Actions dialog box. See also Chapter 27, “Maintaining User/Resource and Message Databases,” on page 353 and Chapter 28, “Maintaining Library Databases and Documents,” on page 359. 6 Select and configure the database maintenance action to perform for the database maintenance event. T Click OK three times to close the various scheduled event dialog boxes and save the modified database maintenance event. ConsoleOne then notifies the POA to restart so the new or modified database maintenance event can be put into effect. POA Web Console You can see what database maintenance events the POA is scheduled to perform at the bottom of the Configuration page. Scheduling Disk Space Management By default, the POA performs one recurring disk space management event. Every 5 minutes, the POA checks to make sure there is at least 100 MB of free disk space in the post office directory. If there is ever less than 100 MB of free disk space, the POA performs a Reduce operation on the user and message databases in the post office. You can modify this default disk space management event, or create additional disk space management events for the POA to perform on a regular basis. 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click Group Wise > Maintenance to display the POA Maintenance page. M Enable Automatic Database Recovery Maintenance Handler Threads: | a IV Perform User Upkeep Start User Upkeep: | hours after midnight Generate Address Book for Remote Start Address Book Generation: Fo Sf hours after midnight Disk Check Interval: [8S] minutes Disk Check Delay: [2 Sf hours Page Options... ( Cancel rm] __ Hem | 3 To change the interval at which the selected POA checks for free disk space in its post office, adjust the number of minutes in the Disk Check Interval field as needed. The default is 5 minutes, which could be much too frequent if plenty of disk space is readily available. Configuring the POA 469 When a disk space problem is encountered, the time interval no longer applies until after the situation has been corrected. Instead, the POA continually checks available disk space to determine if it can restart message threads that have been suspended because of the low disk space condition. 4 To change the amount of time the POA allows to pass before notifying the administrator again of an already reported problem condition, adjust the number of hours in the Disk Check Delay field as needed. The default is 2 hours. 5 Client Apply to save the maintenance settings. 6 Click GroupWise > Scheduled Events to display the Scheduled Events page. Scheduled events used by this agent: IF Default POA Disk Check Event IM Default POA MailbowLibrary Maintenance Event Create Ed Delete | Page Options... The Scheduled Events page lists a pool of POA events available to all POAs in your Group Wise system. T To modify the default disk space management event, which would affect all POAs that have this disk space management event enabled, select Default POA Disk Check Event, then click Edit. Or To create a new disk space management event, which will be added to the pool of POA events that can be enabled for any POA in your Group Wise system, click Create, then type a name for the new disk space management event. Select Disk Check in the Type field. NOTE: If the Create button is dimmed and you have a View button rather than an Edit button, you are connected to a secondary domain in a GroupWise system where Restrict System Operations to Primary Domain has been selected under System Preferences. For more information, see “System Preferences” on page 44. 470 GroupWise 6.5 Administration Guide Edit Scheduled Event xÍ Name: [Default POA Disk Check Event Event Type: [iskCheck >| Trigger C Percent | Trigger actions at: [100 3} mp C MB Stop mail processing at: [0 MB Actions M Default POA Disk Check Actions Create NE Cancel Help | 8 Inthe Trigger box, select Percent or MB to determine whether you want the amount of available disk space measured by percentage or by megabytes. 9 Inthe Trigger Actions At field, specify the minimum amount of available disk space you want to have in the post office. When the minimum amount is reached, the Disk Check actions are triggered 10 Inthe Stop Mail Processing At field, specify the minimum amount of available disk space at which you want the POA to stop receiving and processing messages. Below the Trigger box is listed the pool of disk space management actions that are available for inclusion in all POA disk space management events in your Group Wise system. 11 To modify the action that the default disk space management event includes, select Default POA Disk Check Actions, then click Edit. or To create a new disk space management action, click Create, then type a name for the new disk space management action. Disk space management actions and options you could schedule include: Configuring the POA 471 Actions Options on Actions Reduce/Expire Messages Databases Reduce only User Expire and reduce Message - Items older than Document - Downloaded items older than A Logging - Items larger than Log file - Trash older than | Verbose log level - Reduce mailbox to - Reduce mailbox to limited size Results Include Administrator - Received items Individual users - Sent items Misc - Calendar items Support options - Only backed-up items Exclude Archive/Delete Documents Sulanied user Delete Activity Logs For more detailed descriptions of the above actions, click Help in the Scheduled Event Actions dialog box. See also Chapter 30, “Managing Database Disk Space,” on page 367. 12 Select and configure the disk space management action to perform. 13 Click OK twice to close the scheduled event dialog boxes and save the modified disk space management event. ConsoleOne then notifies the POA to restart so the new or modified disk space management event can be put into effect. You might want to create several disk space management events with different triggers and actions. For example, at 250 MB, you could mail a warning to the administrator; at 200 MB, you could have the POA perform a Reduce Only; at 150 MB, you could have the POA perform an Expire and Reduce. For some specific suggestions on implementing disk space management, see “Managing Disk Space Usage in the Post Office” on page 171. POA Web Console You can view the currently scheduled disk check events on the Scheduled Events page. Performing Nightly User Upkeep To keep GroupWise users’ mailboxes and calendars up to date, the following activities must be performed each day: + Delete expired items from users’ mailboxes + Empty expired items from the Trash + Synchronize each user’s Frequent Contacts Address Book with the system Address Book + Advance uncompleted tasks to the next day + Generate a current copy of the system Address Book for Remote and Caching users 472 GroupWise 6.5 Administration Guide The first two activities used to be performed by the Group Wise client, but to minimize user wait time, the client no longer deletes expired items. The last two activities can still be performed by the Group Wise client when needed, but the required processing might cause users to wait. You can configure the POA to take care of these user upkeep activities once a day, at a convenient time. 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click Group Wise > Maintenance to display the POA Maintenance page. Properties of POA xj NDS Rights v | Other | Rights to Files and Folders | M Enable Automatic Database Recovery Maintenance Handler Threads: | FN Perform User Upkeep Start User Upkeep: | hours after midnight Generate Address Book for Remote Start Address Book Generation: Fo Ef hours after midnight Disk Check Interval: [8 Sf minutes Disk Check Delay: [2 Sf hours Page Options... ( Cancel rm] __ Hem | 3 Select Perform User Upkeep. 4 Inthe Start User Upkeep field, specify the number of hours after midnight for the POA to start performing user upkeep. The default is 1 hour. 5 If you have Remote or Caching users, select Generate Address Book for Remote. 6 Specify the number of hours after midnight for the POA to generate the daily copy of the system Address Book for Remote and Caching users. The default is 0 hours (that is, at midnight). If you want to generate the system Address Book for download more often than once a day, you can delete the existing wprof50.db file from the \wpcsout\ofs subdirectory of the post office. A new downloadable system Address Book will be automatically generated for users in the post office. 7 Click OK to save the new nightly user maintenance settings. ConsoleOne then notifies the POA to restart so the new settings can be put into effect. Corresponding Startup Switches You could also configure nightly user upkeep using startup switches in the POA startup file. By default, nightly user upkeep is enabled. Use the /nuuoffset and /rdaboffset switches to specify the start times. POA Web Console You can view the current user upkeep schedule on the Scheduled Events page. Configuring the POA 473 474 GroupWise 6.5 Administration Guide Monitoring the POA By monitoring the POA, you can determine whether or not its current configuration is meeting the needs of the post office it services. You have a variety of tools to help you monitor the operation ofthe POA: + “Using the POA Agent Console” on page 475 + “Using the POA Web Console” on page 489 + “Using POA Log Files” on page 497 + “Using Group Wise Monitor” on page 498 + “Using NetWare 6.5 Remote Manager” on page 498 + “Using SNMP Monitoring Programs” on page 499 + “Notifying the GroupWise Administrator” on page 503 + “Using the POA Error Message Documentation” on page 504 + “Employing POA Troubleshooting Techniques” on page 504 + “Using Platform-Specific POA Monitoring Tools” on page 505 Using the POA Agent Console The following topics help you monitor and control the POA from the POA agent console: + “Monitoring the POA from the POA Agent Console” on page 475 + “Controlling the POA from the POA Agent Console” on page 479 Monitoring the POA from the POA Agent Console The POA agent console provides information, status, and message statistics about the POA to help you assess its current functioning. #%, ACCOUNTING.PROVO2 - GroupWise POA olx] Eile Configuration Log Statistics Actions Help ACCOUNTING.PROVO2 UpTime: 0 Days 2His 9 Mins | GroupWise Post Office Agent | ~ Status - > y Statistics- Processing / Busy: 0: 0 C/S Requests: 2 Message Files: 0 User Connections: 0 Requests Pending: 0 Undeliverable: 0 File Queues: 0 Users Timed Out: 0 Problem Messages: O 11:16:3311E Database check action: Analyze/Fixup 11:16:3311E Level of database analysis and verification: Structural 11:16:33 11E Delete temporary/backup files older than (days): 7 11:16:33 11E 11:16:33 157 Initializing dispatcher 11:16:33 158 Initializing dispatcher 11:16:33 154 Initializing worker 11:16:33 158 Initializing worker 11:16:33 15C Initializing worker 11:16:33 15D Initializing worker 11:16:33 15E Initializing worker Él y 11:16:33 152 Initializing worker 11:16:38 155 MTP: Listening for inbound connections Monitoring the POA 475 Linux Note: You must use the --show startup switch in order to display the Linux POA agent console. See “Starting the Linux POA” on page 433 Windows Note: You can suppress the Windows POA agent console by running the POA asa service. See “Starting the Windows POA” on page 434. The POA agent console consists of several components: + “POA Information Box” on page 476 + “POA Status Box” on page 476 + “POA Statistics Box” on page 477 + “POA Log Message Box” on page 478 + “POA Admin Thread Status Box” on page 478 Do not exit the POA agent console unless you want to stop the POA. NetWare Note: Ata NetWare® server console, you can use Alt+Esc to change screens. In a remote console window, you can use Alt+F1 to select a screen to view. You can use these keystrokes to display the POA agent console if it is not immediately visible on the NetWare console. Linux Note: On a Linux server, you can minimize the POA agent console, but do not close it unless you want to stop the POA. Windows Note: On a Windows server, you can minimize the POA agent console, but do not close it unless you want to stop the POA. POA Information Box The POA Information box identifies the POA whose POA agent console you are viewing, which is especially helpful when multiple POAs are running on the same server. PostOffice.Domain: Displays the name of the post office serviced by this POA, and what domain it is linked to. Description: Displays the description provided in the Description field in the POA Identification page in ConsoleOne. When you run multiple POAs on the same server, the description should uniquely identify each one. If multiple administrators work at the server where the POA runs, the description could include a note about who to contact before stopping the POA. Up Time: Displays the length of time the POA has been running. POA Web Console The Status page also displays this information. POA Status Box The POA Status box displays the current status of the POA and its backlog. The information displayed varies depending on whether the POA is processing client/server connections, message files, both, or neither. Processing: Displays a rotating bar when the POA is running. If the bar is not rotating, the POA has stopped. For assistance, see “Post Office Agent Problems” in Group Wise 6.5 Troubleshooting 2: Solutions to Common Problems. Busy: Displays the number of POA threads currently in use (busy) for client/server connections, message files, or both, depending on POA configuration. You can change the total number of threads available. See “Adjusting the Number of Connections for Client/Server Processing” on page 508 and “Adjusting the Number of POA Threads for Message File Processing” on page 512. 476 GroupWise 6.5 Administration Guide POA Statistics Box User Connections (for client/server processing): Displays the number of active application ("virtual") TCP/IP connections between the POA and the Group Wise” clients run by Group Wise users. You can change the maximum number of user connections. See “Adjusting the Number of Connections for Client/Server Processing” on page 508. Physical Connections (for client/server processing): Displays the number of active physical TCP/IP connections between the post office and the GroupWise clients run by GroupWise users. You can change the maximum number of physical connections. See “Adjusting the Number of Connections for Client/Server Processing” on page 508. Priority Queues (for message file processing): Displays the number of messages waiting in the high priority message queues. You can control the number of threads processing message files. See “Adjusting the Number of POA Threads for Message File Processing” on page 512. Normal Queues (for message file processing): Displays the number of messages waiting in the normal priority message queues. You can control the number of threads processing message files. See “Adjusting the Number of POA Threads for Message File Processing” on page 512. File Queues (for message file processing): Displays the total number of messages waiting in all message gueues, when client/server information and message file information are displayed together. The number of messages displayed as waiting in message gueues is not an exact count. For example, if the POA detects numerous messages to process in the priority 4 queue (normal messages), it does not scan and count messages in lower priority queues. Therefore, actual counts of message files waiting in queues could be higher than the counts displayed in the Status box. For information about the various message queues in the post office, see “Post Office Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. POA Web Console The Status page also displays the status information listed above. In addition, you can display detailed information about specific queue contents. The POA Statistics box displays statistics showing the current workload of the POA. The information displayed varies depending on whether the POA is processing client/server connections, message files, both, or neither. C/S Reguests (for client/server processing): Displays the number of active client/server requests between GroupWise clients and the POA. Requests Pending (for client/server processing): Displays the number of client/server requests from GroupWise clients the POA has not yet been able to respond to. If the number is large, see “POA Statistics Box Shows Requests Pending” in “Post Office Agent Problems” in GroupWise 6.5 Troubleshooting 2: Solutions to Common Problems. Users Timed Out (for client/server processing): Displays the number of GroupWise clients no longer communicating with the POA. Ifthe number is large, see “POA Statistics Box Shows Users Timed Out” in “Post Office Agent Problems” in GroupWise 6.5 Troubleshooting 2: Solutions to Common Problems. Message Files (for message file processing): Displays the total number of messages processed by the POA. This includes user messages, status messages, and service requests processed by the POA. Monitoring the POA 477 Undeliverable (for message file processing): Displays the number of messages that could not be delivered because the user was not found in that post office or because of other similar problems. Senders of undeliverable messages are notified. For assistance, see “Message Has Undeliverable Status” in “Strategies for Message Delivery Problems” in Group Wise 6.5 Troubleshooting 2: Solutions to Common Problems. Problem Messages (for message file processing): Displays the number of invalid message files that have problems not related to user error. It also displays reguests the POA cannot process because of error conditions. For assistance, see “Message Is Dropped in the problem Directory” in “Strategies for Message Delivery Problems” in Group Wise 6.5 Troubleshooting 2: Solutions to Common Problems. Users Delivered: Displays the number ofuser messages delivered to recipients in the post office. A message with six recipients in the local post office is counted six times. Statuses: Displays the number of status messages delivered to recipients in the post office. Rules Executed: Displays the number of users’ rules executed by the POA. POA Web Console The Status page also displays this information. In addition, you can display detailed information about client/server connections and message file processing. POA Log Message Box The POA Log Message box displays the same information that is being written to the POA log file. The amount of'information displayed in the POA Log Message box depends on the current log settings for the POA. See “Using POA Log Files” on page 497. The information scrolls up automatically. Windows Note: To stop the automatic scrolling, click Log, then deselect Auto Scroll. You can then use the scroll bar to browse through the contents of the log message box. POA Web Console You can view and search POA log files on the Log Files page. Informational Messages When you first start the POA, you typically see informational messages that list current agent settings, current number of threads, TCP/IP options (client/server), and scheduled events. As the POA runs, it continues to provide status and delivery information in the POA Log Message box. Error Messages Ifthe POA encounters a problem processing a message, it displays an error message in the POA Log Message box. See “Post Office Agent Error Messages” in GroupWise 6.5 Troubleshooting 1: Error Messages. POA Admin Thread Status Box The POA admin thread updates the post office database (wphost.db) when users and/or user information are added, modified, or removed, and repairs it when damage is detected. To display the POA Admin Thread Status box from the POA agent console, click Configuration > Admin Status. 478 GroupWise 6.5 Administration Guide ACCOUNTING.PROVO2 Ad... E Admin Messages ~ Admin Database Status: Normal DB Sort Language: US Recovery Count: 0 Automatic Recovery Vv Perform DB Recovery > Admin Thread Status: Running Suspend Resume OK ] Cancel Help | Completed: Errors: looo The following tasks pertain specifically to the POA admin thread: + “Suspending/Resuming the POA Admin Thread” on page 481 + “Displaying POA Admin Thread Status” on page 484 + “Recovering the Post Office Database Automatically or Immediately” on page 485 POA Web Console You can display POA admin thread status on the Configuration page. Under the General Settings heading, click Admin Task Processing. You can also change the admin settings for the current POA session. Controlling the POA from the POA Agent Console You can perform the following tasks to monitor and control the POA from the POA agent console at the server where the POA is running: + + + + “Stopping the POA” on page 480 “Suspending/Resuming the POA Admin Thread” on page 481 “Displaying the POA Software Date” on page 481 “Displaying Current POA Settings” on page 481 “Displaying Detailed Statistics about POA Functioning” on page 482 “Displaying Client/Server Information” on page 482 “Listing Message Oueue Activity” on page 483 “Displaying Message Transfer Status” on page 483 “Restarting the MTP Thread” on page 484 “Displaying POA Admin Thread Status” on page 484 “Recovering the Post Office Database Automatically or Immediately” on page 485 “Recovering User and Message Databases Automatically” on page 486 “Updating OuickFinder Indexes” on page 486 “Compressing OuickFinder Indexes” on page 487 “Browsing the Current POA Log File” on page 487 Monitoring the POA 479 Stopping the POA “Viewing a Selected POA Log File” on page 488 “Cycling the POA Log File” on page 488 “Adjusting POA Log Settings” on page 488 “Editing the POA Startup File” on page 489 “Accessing Online Help for the POA” on page 489 You might need to stop and restart the POA for the following reasons: + + + + Updating the agent software Troubleshooting message flow problems Backing up GroupWise databases Rebuilding GroupWise databases To stop the POA from the POA agent console: 1 Click File > Exit > Yes. NetWare Note: Use Exit (F7). Ifthe POA does not respond to Exit, you can use the unload command to stop the POA. However, this would stop all instances of the POA running on the server. Linux Note: If the Linux POA does not respond to Exit, you can kill the POA process, as described below, but include the -9 option. Windows Note: If the Windows POA does not respond to Exit, you can close the POA agent console to stop the POA or use the Task Manager to terminate the POA task. 2 Restart the POA. See “Starting the POA” on page 431. To stop the POA on Linux when it is running in the background as a daemon: 1 Make sure you are logged in as root. 2 If you started the Linux POA using the grpwise script: 2a Change to the /etc/init.d directory. 2b Enter the following command: ./grpwise stop 2c Skip to Step 4 3 Ifyou started the Linux POA manually (not using the grpwise script): 3a Determine the process IDs (PIDs) of the POA: ps -eaf | grep gwpoa The PIDs for all gwpoa processes are listed. You can also obtain this information from the Environment page of the POA Web console. 3b Kill the first POA process listed: Syntax: kill PID 480 GroupWise 6.5 Administration Guide Example: kill 1483 It might take a few seconds for all POA processes to terminate. 4 Use the ps command to verify that the POA has stopped. ps -eaf | grep gwpoa Suspending/Resuming the POA Admin Thread You can cause the POA to stop accessing the post office database (wphost.db) without stopping the POA completely. For example, you could suspend the POA admin thread while backing up the post office database. To suspend the POA admin thread: 1 Atthe POA agent console, click Configuration > Admin Status. 2 Click Suspend. NetWare Note: Use Options (F10) > Admin Status > Suspend. The POA admin thread no longer accesses the post office database until you resume processing. To resume the POA admin thread: 1 Atthe POA agent console, click Configuration > Admin Status. 2 Click Resume. NetWare Note: Use Options (F10) > Admin Status > Resume. POA Web Console You can suspend and resume the POA admin thread from the Configuration page. Under the General Settings heading, click Admin Task Processing > Suspend or Resume > Submit. Displaying the POA Software Date It is important to keep the POA software up-to-date. You can display the date of the POA software from the POA agent console. 1 At the server where the POA is running, display the POA agent console. 2 Click Help > About POA. NetWare Note: To check the date of the POA NetWare®, you must list the gwpoa.nlm file in the agent installation directory (typically, in the sys:\system directory) or use the modules gwpoa .n1m command at the server console prompt. POA Web Console You also check the POA software date on the Environment page. Displaying Current POA Settings You can list the current configuration settings of'the POA atthe POA agent console. 1 At the server where the POA is running, display the POA agent console. 2 Click Configuration > Agent Settings. The configuration information displays in the log message box and is written to the log file. NetWare Note: Use Show Configuration (F4) > Show Configuration. Monitoring the POA 481 If information you need scrolls out of the log message box, you can scroll back to it. See “Browsing the Current POA Log File” on page 487. For information about POA configuration settings, see Chapter 37, “Configuring the POA,” on page 437 and Chapter 40, “Using POA Startup Switches,” on page 523. POA Web Console You check the current POA settings on the Configuration page. Displaying Detailed Statistics about POA Functioning The POA agent console displays essential information about the functioning of the POA. More detailed information is also available. 1 Atthe server where the POA is running, display the POA agent console. 2 Click Statistics > Misc. Statistics. NetWare Note: This feature is not available in the NetWare POA. 3 Review the Detailed Statistics dialog box. The following statistics are displayed and written to the log file for the current POA up time: + Databases rebuilt + Users deleted + Users moved + Moved messages processed + Statuses processed POA Web Console You can display statistics on the Status page. Displaying Client/Server Information When the POA and the GroupWise clients communicate in client/server mode, you can display statistics to indicate the performance level of the TCP/IP communication. 1 At the server where the POA is running, display the POA agent console. 2 Click Statistics > Client/Server. NetWare Note: Use Configuration (F4) > Display Client/Server Information. 3 Click the type of statistics to display. The selected type of statistics for the current POA up time are listed in the message log box and are written to the POA log file. If information you need scrolls out of the log message box, you can scroll back to it. See “Browsing the Current POA Log File” on page 487. All Statistics: Lists the information for General Statistics, Throughput, Physical Connections, and Application Connections, as described below. General Statistics: Lists the DNS address and IP address of the server, along with the TCP port for the POA, the number of messages received, sent, and aborted, and the number of physical and application connections active and allowed. Show Throughput: Lists the total number of messages processed by the POA for all users. Statistics are provided for the current elapsed time and as a per second average. 482 GroupWise 6.5 Administration Guide Clear Throughput: Resets the current elapsed time to zero. Physical Connections: Lists the currently active physical connections. Physical connections are active TCP connections created whenever Group Wise users do something that requires communication and closed when the specific activities have been completed. By listing the physical connections, you can see what users are actively using Group Wise and how much throughput each user is generating. Users’ IP addresses are also listed. Application Connections: Lists the currently active application connections. Every user that starts Group Wise has an application connection for as long as Group Wise is running, even if Group Wise is not actively in use at the moment. By listing the application connections, you can see what users have started Group Wise and how much throughput each user is generating. Users’ IP addresses are also listed. Show Redirection List: Lists all POAs in your Group Wise system and indicates whether each is configured for TCP/IP. The list includes the IP address of each POA and the IP address of its proxy server outside the firewall, if applicable. This redirection information is obtained from the post office database (wphost.db). Check Redirection List: Attempts to contact each POA in your GroupWise system and reports the results. Ifa POA is listed as "Connection Failed," see “Post Office Agent Problems” in GroupWise 6.5 Troubleshooting 2: Solutions to Common Problems. POA Web Console You can display client/server information on the Configuration page. You can list client/server users from the Status page using the C/S Users and Remote/Caching Users links. Listing Message Queue Activity The POA uses eight queues to process message files. You can view the activity in each of these queues. For more information about message queues, see “Post Office Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. 1 At the server where the POA is running, display the POA agent console. 2 Click Actions > View MF Queues. NetWare Note: Use Options (F10) > Actions > View MF Queues. 3 View the queue activity in the message log box. Use the scroll bar if necessary to scroll through the information. If information you need scrolls out of the log message box, you can scroll back to it. See “Browsing the Current POA Log File” on page 487. The information is also written to the POA log file. You can check queue activity on the Status page. Under the Thread Status heading, click the type of thread to view queue activity for. Displaying Message Transfer Status When the POA links to the MTA by way of TCP/IP, you can view the status of the TCP/IP link from the POA agent console. 1 At the server where the POA is running, display the POA agent console. 2 Click Configuration > Message Transfer Status. NetWare Note: Use Options (F10) > Message Transfer Status. Monitoring the POA 483 3 View the following information about the TCP/IP link: Outbound TCP/IP Address: Displays the TCP/IP address and port where the MTA listens for messages from the POA. Inbound TCP/IP Address: Displays the TCP/IP address and port where the POA listens for messages from the MTA. Hold Directory: Displays the path to the directory where the POA stores messages if the TCP/IP link to the MTA is closed. Current Status: Lists the current status of the TCP/IP link. + Open: The POA and the MTA are successfully communicating by way of TCP/IP. + Closed: The POA is unable to contact the MTA by way of TCP/IP + Unavailable: The POA is not yet configured for TCP/IP communication with the MTA. + Unknown: The POA is unable to contact the MTA in any way. Messages Written: Displays the number of messages the POA has sent. Message Read: Displays the number of messages the POA has received. Last Closure Reason: Provides an explanation for why the post office was last closed. For assistance resolving closure reasons, see “Post Office Agent Error Messages” in GroupWise 6.5 Troubleshooting 1: Error Messages. POA Web Console You can display message transfer status on the MTP Status page. Restarting the MTP Thread When the POA links to the MTA by way of TCP/IP, you can restart the Message Transfer Protocol (MTP) thread that provides the link between the POA and the MTA. 1 At the server where the POA is running, display the POA agent console. 2 Click Actions > Restart MTP. NetWare Note: Use Options (F10) > Actions > Restart MTP. POA Web Console You can restart the MTA thread from the Configuration page. Click Message Transfer Protocol > Restart MTP > Submit. In addition, you can control the send and receive threads separately on the MTP Status page. In the Send or Receive column, click the current status > Stop/Start MTP Send/ Receive > Submit. Displaying POA Admin Thread Status 484 Status information for the POA admin thread is displayed in a separate dialog box, rather than on the main POA agent console. 1 At the server where the POA is running, display the POA agent console. 2 Click Configuration > Admin Status. NetWare Note: Use Options (F10) > Admin Status. The following admin status information is displayed: GroupWise 6.5 Administration Guide Admin Message Box The Admin Message box provides the following information about the workload of the POA admin thread: Completed: Number of administrative message successfully processed. Errors: Number of administrative messages not processed because of errors. In Queue: Number of administrative messages waiting in the queue to be processed. Send Admin Mail: Select this options to send a message to the administrator whenever a critical error occurs. See “Notifying the GroupWise Administrator” on page 503. Admin Database Box The Admin Database box provides the following information about the post office database (wphost.db): Status: Displays one of the following statuses: + Normal: The POA admin thread is able to access the post office database normally. + Recovering: The POA admin thread is recovering the post office database. + DB Error: The POA admin thread has detected a critical database error. The post office database cannot be recovered. Rebuild the post office database in ConsoleOne. See “Rebuilding Domain or Post Office Databases” on page 349. The POA admin thread does not process any more administrative messages until the database status has returned to Normal. + Unknown: The POA admin thread cannot determine the status of the post office database. Exit the POA, then restart it, checking for errors on startup. DB Sort Language: Displays the language code for the language that determines the sort order of lists displayed in ConsoleOne and the GroupWise system Address Book. Recovery Count: Displays the number of recoveries performed on the post office database by this POA for the current POA session. Admin Thread Box The Admin Thread box displays the following information: Status: Displays one of the following statuses: + Running: The POA admin thread is active. + Suspended: The POA admin thread is not processing administrative messages. ¢ Starting: The POA admin thread is initializing. + Terminated: The POA admin thread is not running. POA Web Console You can display POA admin thread status from the Configuration page. Under the General Settings heading, click Admin Task Processing. Recovering the Post Office Database Automatically or Immediately The POA admin thread can recover the post office database (wphost.db) when it detects a problem. To enable/disable automatic post office database recovery: 1 At the server where the POA is running, display the POA agent console. Monitoring the POA 485 2 Click Configuration > Admin Status > Automatic Recovery to toggle this feature on or off for the current POA session. NetWare Note: Use Options (F10) > Admin Status > Automatic Recovery. To change the setting permanently, see “Configuring the POA in ConsoleOne” on page 439. To recover the post office database immediately: 1 Atthe server where the POA is running, display the POA agent console. 2 Click Configuration > Admin Status > Perform DB Recovery. NetWare Note: Use Options (F10) > Admin Status > Perform DB Recovery. For additional database repair procedures, see Chapter 26, “Maintaining Domain and Post Office Databases,” on page 345. POA Web Console You can recover the post office database from the Configuration page. Under the General Settings heading, click Admin Task Processing. Select Automatic Recovery or Perform DB Recovery as needed. Recovering User and Message Databases Automatically The POA can recover user databases (userxxx.db) and message databases (msgnn.db) automatically when it detects a problem because databases can be open during the recover process. This procedure is a “recover” rather than a “rebuild,” because a “rebuild” reguires that all users and agents be out of the database being rebuilt. See Chapter 27, “Maintaining User/Resource and Message Databases,” on page 353. To enable/disable automatic message and user database recovery: 1 Atthe server where the POA is running, display the POA agent console. 2 Click Actions > Auto Rebuild to toggle this feature on or off for the current POA session. NetWare Note: Use Options (F4) > Actions > Enable Auto Rebuild. To change the setting permanently, see “Configuring the POA in ConsoleOne” on page 439. POA Web Console You can see whether automatic message and user database recovery is enabled on the Configuration page under the Performance Settings heading. Updating QuickFinder Indexes GroupWise uses QuickFinder® technology to index messages and documents stored in post offices. You can start indexing from the POA agent console. For example, if you just imported a large number of documents, you could start indexing immediately, rather than waiting for the next scheduled indexing cycle. To update QuickFinder indexes for the post office: 1 At the server where the POA is running, display the POA agent console. 2 Click Actions > QuickFinder > Update Indexes. NetWare Note: Use Options (F10) > Actions > Update QuickFinder Indexes. To avoid overloading the POA with indexing processing, a maximum of 1000 items are indexed per database. If a very large number of messages are received regularly, or if a user with a very 486 GroupWise 6.5 Administration Guide large mailbox is moved to a different post office (requiring the user's messages to be added into the new post office indexes), you might need to repeat this action multiple times in order to get all messages indexed. Iftoo many repetitions would be reguired to complete the indexing task, refer to TID10063970 (http://support.novell.com/cgi-bin/search/searchtid.cgi?/10063970.htm) for assistance. You can set up indexing to occur at regular intervals. See “Regulating Indexing” on page 514. Ifthe indexing load on the POA is heavy, you can set up a separate POA just for indexing. See “Configuring a Dedicated Indexing POA” on page 516. POA Web Console You can update OuickFinder indexes from the Configuration page. Under the General Settings heading, click OuickFinder Indexing. Compressing QuickFinder Indexes OuickFinder indexes are automatically compressed at midnight each night to conserve disk space. You can start compression at any other time from the POA agent console. For example, if you just imported and indexed a large number of documents and are running low on disk space, you could compress the indexes immediately, rather than waiting for it to happen at midnight. To compress OuickFinder indexes for the post office: 1 At the server where the POA is running, display the POA agent console. 2 Click Actions > QuickFinder > Compress Indexes. NetWare Note: Use Options (F10) > Actions > Compress QuickFinder Indexes. POA Web Console You can compress QuickFinder indexes from the Configuration page. Under the General Settings heading, click QuickFinder Indexing. Browsing the Current POA Log File In the log message box, the POA displays the same information being written to the POA log file. The amount of information depends on the current log settings for the POA. The information automatically scrolls up the screen as additional information is written. You can stop the automatic scrolling so you can manually scroll back through earlier information. To browse the current POA log file and control scrolling: 1 At the server where the POA is running, display the POA agent console. 2 Click Log > Auto Scroll to toggle automatic scrolling on or off. NetWare Note: Use View Log File (F9). For explanations of messages in the POA log file, see “Post Office Agent Error Messages” in GroupWise 6.5 Troubleshooting 1: Error Messages. See also “Using POA Log Files” on page 497. POA Web Console You can browse and search POA log files on the Log Files page. Monitoring the POA 487 Viewing a Selected POA Log File Reviewing log files is an important way to monitor the functioning of the POA. 1 Atthe server where the POA is running, display the POA agent console. 2 Click Log > View Log. NetWare Note: Use Options (F10) > View Log Files. The following information is provided: Log Files: Lists the current POA log files, ordered from the oldest log file at the top to the newest log file at the bottom. The current log file is marked with an asterisk (*). Date/Time: Displays the date and time of each POA log file. Space Used: Displays the amount of disk space currently occupied by that POA’s log files. You can control the amount of space consumed by POA log files during the current POA session. You can also control the default amount of disk space for POA log files in the POA Log Settings page in ConsoleOne or in the POA startup file. See “Configuring POA Log Settings and Switches” on page 497. Log File Directory: Displays the full path of the directory where the POA writes its log files. See “Configuring POA Log Settings and Switches” on page 497. 3 In the log file list, select the POA log file you want to view. Windows Note: For the Windows POA, you can select the viewer to use by providing the full path to the viewer program. The default viewer is Notepad. 4 Click View. For explanations of messages in the POA log file, see “Post Office Agent Error Messages” in GroupWise 6.5 Troubleshooting 1: Error Messages. See also “Using POA Log Files” on page 497. POA Web Console You can view and search POA log files on the Log Files page. Cycling the POA Log File You can have the POA start a new log file as needed. 1 At the server where the POA is running, display the POA agent console. 2 Click Log > Cycle Log. NetWare Note: Use Options (F10) > Cycle Log. Adjusting POA Log Settings 488 Default log settings are established when you start the POA. However, you can adjust the POA log settings for the current session from the POA agent console. This overrides any settings provided in ConsoleOne or in the POA startup file. The modified settings remain in effect until you restart the POA, at which time the log settings specified in ConsoleOne or the startup file take effect again. 1 Atthe server where the POA is running, display the POA agent console. 2 Click Log > Log Settings. NetWare Note: Use Options (F10) > Logging Options. GroupWise 6.5 Administration Guide 3 Adjust the values as needed for the current POA session. See “Using POA Log Files” on page 497. POA Web Console You can adjust POA log settings from the Configuration page. Click the Log Settings heading. Editing the POA Startup File You can change the configuration of the POA by editing the POA startup file from the POA agent console. 1 At the server where the POA is running, display the POA agent console. 2 Click Configuration > Edit Startup File. NetWare Note: Use Options (F10) > Actions > Edit Startup File. 3 Make the necessary changes, then save and exit the startup file. 4 Stop and restart the POA. Accessing Online Help for the POA Click Help on the menu bar for information about the POA agent console. Click the Help button in any dialog box for additional information. NetWare Note: Press F1 for information in any dialog box or menu. Using the POA Web Console The POA Web console enables you to monitor and control the POA from any location where you have access to a Web browser and the Internet. This provides substantially more flexible access than the POA agent console, which can only be accessed from the server where the POA is running. + “Setting Up the POA Web Console” on page 489 + “Accessing the POA Web Console” on page 491 + “Monitoring the POA from the POA Web Console” on page 492 + “Controlling the POA from the POA Web Console” on page 495 Setting Up the POA Web Console The default HTTP port for the POA Web console is established during POA installation. You can change the port number and increase security after installation in ConsoleOne. 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click GroupWise > Network Address to display the Network Address page. Monitoring the POA 489 Properties of POA xÍ GroupWise v | NDS Rights v | Other | Rights to Files and Folders | Network Address TCP/IP Address: Maese o ~ ~ ~ S O Proxy Server Address: | IPXISPX Address: (A 7 | Port SSL SSL Port Message Transfer: [7101 $| [Disabled +] HTTP: [7181 $| [Disabled x] Local Intranet Client/Server: 1677 | Disabled +] Internet Proxy Client'Server: 04 Disabled +] IMAP: 144 $| [Disabled x 993 + CAP: 1026 $| [Disabled y Page Options... OK Cancel Apply | Help If you configured the POA for TCP/IP links during installation, the TCP/IP Address field should display the POA server’s network address. If it does not, follow the instructions in “Using TCP/IP Links between the Post Office and the Domain” on page 443. The POA must be configured for TCP/IP in order to provide the POA Web console. Make a note of the IP address or DNS hostname in the TCP/IP Address field. You need this information to access the POA Web console. The HTTP Port field displays the default port number of 7181. If the default HTTP port number is already in use on the POA server, specify a unique port number. Make a note of the HTTP port number. You need this information to access the POA Web console. If you want to use an SSL connection for the POA Web console, select Enabled in the HTTP SSL drop-down list. For additional instructions about using SSL connections, see Chapter 80, “Encryption and Certificates,” on page 1039. Click Apply to save your changes on the Network Address page. If you want to limit access to the POA Web console, you can provide a username and password. 8 Click GroupWise > Agent Settings, then scroll down to HTTP Settings. 490 GroupWise 6.5 Administration Guide Properties of POA k xj DS Rights + | Other | Rights to Files and Folders | Max Physical Connections: [ 102 a Max App Connections: [2048 # M Enable Caching CPU Utilization (NLM): | 85 $f percent Delay Time (NLM): [100 3 milliseconds Max Thread Usage for Priming and Moves: 20 y percent M Enable IMAP Max IMAP Threads: [| soi [Y Enable SNMP SNMP Community "Get" String: [OS HTTP Settings HTTP User Name: D HTTP Password: Set Password Page Options... | [ox] Cancel A Help 9 Inthe HTTP Settings box: Ga Inthe HTTP User Name field, specify a unigue username. 9b Click Set Password. 9c Type the password twice for verification. 9d Click Set Password. Unless you are using an SSL connection, do not use Novell® eDirectory™ username and password because the information passes over the insecure connection between your Web browser and the POA. For convenience, use the same username and password for all agents that you plan to monitor from Group Wise Monitor. This saves you from having to provide the username and password information as Monitor accesses each agent. 10 Click OK to save the POA Web console settings. ConsoleOne then notifies the POA to restart so the new settings can be put into effect. Corresponding Startup Switches You could also use the /httpport, /httpuser, /httppassword, and /httpssl startup switches in the POA startup file to enable and secure the POA Web console. In addition, you can use the /httprefresh switch to control how often the POA refreshes the information provided to your Web browser. Accessing the POA Web Console To monitor the POA from your Web browser, view the POA Web console by supplying the network address and port number as displayed on the Network Address page in ConsoleOne. For example: http://172.16.5.18:1677 http://172.16.5.18:7181 http://server1:7181 https://server2:1677 Monitoring the POA 491 When viewing the POA Web console, you can specify either the client/server port or the HTTP port. ment.Provo1 nment | Log Files | Scheduled Events | MTP Status | Hel nt Total CIS Users Remote/Caching Users Application Connections Physical Connections IMAP Sessions Priority Queues Normal Queues GWCheck Auto Queues GWCheck Scheduled Queues OOOOONNPIN hread Status Total Busy C/5 Handler Threads 6 0 Message Worker Threads 6 0 GWCheck Worker Threads 4 0 IMAP Threads 0 0 Message Transfer Status Open Statistics C/S Requests 3246 C/S Requests Pending 0 Users Timed Out 1 IMAP Client Requests 0 IMAP Pending Requests D Rules Executed 0 Monitoring the POA from the POA Web Console The POA Web console provides several pages of information to help you monitor the performance of the POA. The bar at the top of the POA Web console displays the name of the POA and its post office. Below this bar appears the POA Web console menu that lists the pages of information available in the POA Web console. Online help throughout the POA Web console helps you interpret the information being displayed and use the links provided. + “Monitoring POA Status” on page 492 + “Checking the POA Operating System Environment” on page 493 + “Viewing and Searching POA Log Files” on page 494 + “Listing POA Scheduled Events” on page 494 + “Checking Link Status to the MTA” on page 495 Monitoring POA Status When you first access the POA Web console, the Status page is displayed. Online help on the Status page helps you interpret the status information being displayed. 492 GroupWise 6.5 Administration Guide Total 2 il 2 2 0 0 0 D 0 C/S Users Remote/Caching Users Application Connections Physical Connections IMAP Sessions Priority Queues Normal Queues GWCheck Auto Queues GWCheck Scheduled Queues hread Status Total Busy C/S Handler Threads 6 0 Message Worker Threads 6 0 GWCheck Worker Threads 4 0 IMAP Threads 0 0 Message Transfer Status Open C/S Requests 3246 C/S Requests Pending 0 Users Timed Out 1 IMAP Client Requests 0 IMAP Pending Requests 0 Rules Executed 0 Click any hyperlinked status items for additional details. The status information is much the same as that provided at the POA agent console, as described in “Monitoring the POA from the POA Agent Console” on page 475. Checking the POA Operating System Environment On the POA Web console menu, click Environment to display information about the operating system where the POA is running. On a NetWare server, the following information is displayed: Server Configuration Server PRY-GWDOC5B Company Novell OS Revision NetWare 5.60.01 OS Date January 15, 2002 Supported Connections 169 Connections in Use 36 Receive Buffer Max 10000 (Recommended 2500) Module Information GroupWise Engine (release version) GWENN4. NLM Version 6.05 Memory Allocated 10568 Build Date 1-16-2003 GroupWise MTA (release version) GWMTA.NLM Version 6.05 Memory Allocated 14792 Build Date 1-16-2003 GroupWise Post Office Agent (Release version) GWPOA.NLM Version 6.05 Memory Allocated 14856 Build Date 1-16-2003 Novell Standard C Runtime Library for NLMs [optimized, 1820] CLIB.NLM Version 5.90 e On a Linux server, the following information is displayed: Monitoring the POA 493 Status | Configuration | Environment | Log Files | Scheduled Events | MTP Status | Help er Configuration Server jbd-Inx OS Revision Linux Release 2.4.19-4GB Main Thread Process ID 21065 Build Dates GroupWise Agent Build Date 04-29-04 GroupWise Resource Build Date 04-30-04 On a Windows server, the following information is displayed: e 6.5.0 POA - Sales Provo2 Status | Configuration | Environment | Log Files | Scheduled Events | MTP Status | Help OS Data Windows NT (TM) Version 4.0 (Build 1381) Service Pack 6 Build Dates Group Wise Agent Build Date 01-16-03 GroupWise Engine Build Date 01-16-03 GroupWise Resource Build Date 01-16-03 Viewing and Searching POA Log Files On the POA Web console menu, click Log Files to display and search POA log files. Gro 0 POA - ment.Provo1 Status | Configuration | Environment | Log Files | Scheduled Events | MTP Status | Help View Event Log Settings Event Log Filter Events containing Event logs: T Select all 0120poa.001 01-20-03 20:00:12 5254 0121poa.001 01-21-03 20:48:10 6100 0122poa.001 01-22-03 21:44:14 13140 0123poa.001 01-23-03 20:00:12 6479 0124poa.001 01-24-03 20:00:12 5254 0125poa.001 01-25-03 20:00:12 5254 0126poa.001 01-26-03 20:00:14 5566 * 0127poa.001 01-27-03 16:48:26 14380 View Events To view a particular log file, select the log file, then click View Events. To search all log files for a particular string, type the string in the Events Containing field, select Select All, then click View Events. You can also manually select multiple log files to search. The results ofthe search are displayed on a separate page which can be printed. Listing POA Scheduled Events On the POA Web console menu, click Scheduled Events to view currently scheduled events and their status information. 494 GroupWise 6.5 Administration Guide DiskCheck Event Current Status Event next start time Gr eduled Events Id Status | Configuration | Environment | Log Files | Scheduled Events | MTP Status | Help le 01/27/2003 16:57:40 Event schedule interval 5 mins # of concurrent events allowed 1 QuickFinder Indexing Event Current Status Idle Event next start time 01/27/2003 20:00:01 Event schedule interval 24 hour(s) # of concurrent events allowed Remote Downloadable Address Book Generation Event Current Status Idle Event next start time 01/28/2003 00:00:31 Event schedule interval day(s) # of concurrent events allowed Nightly User DB Upkeep (Phase 1) Event Current Status e Event next start time 128/2003 01:00:01 Event schedule interval day(s) # of concurrent events allowed QZ QuickFinder indexing and remote downloadable Address Book generation can be controlled using links from the Configuration page. The Configuration page also displays information about disk check events and database maintenance events. However, scheduled events must be created and modified using ConsoleOne. Checking Link Status to the MTA On the POA Web console menu, click MTP Status to view status information about the link between the POA for the post office and MTA for the domain. Send Current Status Open Last Closed 01-17-03 16:34:39 Last Opened 01-17-03 16:34:55 01-17-03 16:24:15 Last Closure Reason TCP/IP connection failure and TCP/IP a 137.65.47.93:7100 Inbound TCP/IP 137 .65.47.93:7101 Hold PRY-GWDOCS5B/sys:\gwsystem\devwpcesin Message Transfer Statistics Written 21 Read 99 The Outbound TCP/IP link displays the MTA Web console where you can get status information about the MTA. The Hold link displays the contents of the MTA input queue, so you can find out if messages are waiting for processing by the MTA. Controlling the POA from the POA Web Console At the POA Web console, you can change some POA configuration settings for the current POA session. You can also stop and start some specific POA threads. + “Changing POA Configuration Settings” on page 496 + “Controlling the POA Admin Thread” on page 496 + “Controlling the POA MTP Threads” on page 497 Monitoring the POA 495 Changing POA Configuration Settings Onthe POA Web console menu, click Configuration. Online help on the Configuration page helps you interpret the configuration information being displayed. Gro 6.5.1 POA - D ment.Provo1 Status | Configuration | Environment | Log Files | Scheduled Events | MTP Status | Help General Settings: Post Office Directory: PRY-GWisysgwsystemidev Post Office Access Mode: Client/Server Only Post Office Configuration Instance POA Read Configuration from Database Yes Error Mail to Administrator: No IP Addresses Redirection Table Show QuickFinder Indexing Enabled QuickFinder Indexing Base Offset (hours from Midnight): 20 Hours 0 Mins (Default) QuickFinder Indexing Interval 24 Hours 0 Mins (Default) Simple Network Management Protocol (SNMP): Enabled (index 1) Admin Task Processing: Yes ntruder Detection: Enabled Incorrect login attempts before lockout: 3 Login Attempt reset interval: 30 mins Intruder lockout reset interval 30 mins GWCheck Processing: Enabled Netware Clustering Enabled: o Running in Protected Address Space: No Post Office Security Requires Password: o LDAP Authentication: Disabled Move User (live) via TCPIP: Enabled MAP Agent: Enabled MAP Port for incoming IMAP requests: 144 MAP Login using SSL: Disabled CAP Agent: Enabled CAP Port for incoming CAP requests: 1026 (Default) CAP Login using SSL: Disabled Log Settings: Log Level: ormal Disk Logging: Enabled Click any hyperlinked configuration items to change settings for the current agent session. The settings that can be modified are much the same as those that can be changed at the POA agent console, as described in “Controlling the POA from the POA Agent Console” on page 479. Controlling the POA Admin Thread On the Configuration page, click Admin Task Processing. Admin Messages Completed 83 Errors 0 In Queue 0 Send Admin Mail V Admin Database Status Normal DB Sort Language US Recovery Count D Automatic Recovery Vv Perform DB Recovery C Admin Thread Status Running Suspend O Resume C Submit | Reset Modify the functioning of the POA admin thread as needed, then click Submit. The changes remain in effect for the current POA session. 496 GroupWise 6.5 Administration Guide Controlling the POA MTP Threads On the Configuration page, click Message Transfer Protocol. Group 6.5.0 POA - Development Provo1 Status | Configuration | Environment | Log Files | Scheduled Events | MTP Status | Help Message Transfer Protocol Settings Outbound TCP/IP Address: 123.45.67.89 Port 7100 Inbound TCP/IP Address: 123.45.67.89 Port 7101 Maximum File Transfer Send Size [0 MB Restart MTP Cc On this page, you can restart MTA processing between the POA and the MTA. On the MTP status page, you can restart the send and receive threads separately. Using POA Log Files Error messages and other information about POA functioning are written to log files as well as displaying on the POA agent console. Log files can provide a wealth of information for resolving problems with POA functioning or message flow. This section covers the following subjects to help you get the most from POA log files: + “Configuring POA Log Settings and Switches” on page 497 + “Viewing POA Log Files” on page 498 ¢ “Interpreting POA Log File Information” on page 498 Configuring POA Log Settings and Switches The following aspects of logging are configurable: + Log File Path (/log) + Disk Logging (/logdiskoff) + Logging Level (/loglevel) + Maximum Log File Age (/logdays) + Maximum Log File Size (/logmax) You can configure the log settings in the following ways: + Using ConsoleOne to establish defaults (see “Adjusting the POA Logging Level and Other Log Settings” on page 446) ¢ Using startup switches to override ConsoleOne settings (see “Using POA Startup Switches” on page 523) + Using the POA agent console to override other settings for the current POA session (see “Adjusting POA Log Settings” on page 488) + Using the POA Web console to override other settings for the current POA session (see “Controlling the POA from the POA Web Console” on page 495) Monitoring the POA 497 Viewing POA Log Files You can view the contents ofthe POA log file from the POA agent console and Web console. See the following tasks: + “Browsing the Current POA Log File” on page 487 + “Viewing a Selected POA Log File” on page 488 + “Cycling the POA Log File” on page 488 + “Viewing and Searching POA Log Files” on page 494 Interpreting POA Log File Information On startup, the POA records the POA settings currently in effect. Thereafter, it logs events that take place, including errors. To look up error messages that appear in POA log files, see “Post Office Agent Error Messages” in Group Wise 6.5 Troubleshooting 1: Error Messages. Because the POA consists of multiple threads, you might find it useful to retrieve the log file into an editor and sort it on the thread ID that follows the date and time information. Sorting groups all messages together for the same POA thread. You can also use the search capability of the POA Web console to gather information about a specific POA thread. See “Viewing and Searching POA Log Files” on page 494. Using GroupWise Monitor Group Wise Monitor is a monitoring and management tool that allows you to monitor Group Wise agents and gateways from any location where you are connected to the Internet and have access to a Web browser. The POA Web console can be accessed from Group Wise Monitor, enabling you to monitor all POAs in your Group Wise system from one convenient location. In addition, Group Wise Monitor can notify you when agent problems arise. GroupWise.» Monitor Novell + © Corporate Mail [0] Monitored agents for "Corporate Mail.NetWare Agents” group » NetWare Agents [2] Total: 2 Displayed: 1 - 2 > Windows Agents [2 = E 1 Refresh | Select All [Resume | [ Options | E Clear All Thresholds | [Help] Create [Rename | Name Status Status Duration Up Time Type Move C (8) Provot Normal 10d1h46m 10d1h29m MTA 6.5 Delete FT (9) Development.Provo1 Normal 10d1h29m 10d1h29m POA 6,5 Refresh Help For installation and setup instructions, see “Installing Group Wise Monitor” in the GroupWise 6.5 Installation Guide. For usage instructions, see “Monitor” on page 901. Using NetWare 6.5 Remote Manager If the POA is running on a NetWare 6.5 server, you can use the IP Address Management feature in NetWare Remote Manager (NetWare Remote Manager > Manage Server > IP Address Management) to view the IP address and port configuration for the POA. This is also true for other GroupWise agents (MTA, Internet Agent, and WebAccess Agent) running on NetWare 6.5 servers. IMPORTANT: If the POA is running in protected mode, it does not display in NetWare Remote Manager. 498 GroupWise 6.5 Administration Guide You access NetWare Remote Manager by entering the following URL in a Web browser: http://server address:8008 For example: http://137.65.123.11:8008 For more information about using NetWare Remote Manager, see the NetWare 6.5 documentation (http://www.novell.com/documentation/nw65). Using SNMP Monitoring Programs You can monitor the POA from the Management and Monitoring component of Novell ZENworks® for Servers, ManageWise®, or any other SNMP management and monitoring program. When properly configured, the POA sends SNMP traps to network management consoles for display along with other SNMP monitored programs. Although the POA is SNMP-enabled by default, the server where the POA is installed must be properly configured to support SNMP, and the POA object in eDirectory must be properly configured as well. To set up SNMP services for your server, complete the following tasks: + “Setting Up SNMP Services for the POA” on page 499 + “Copying and Compiling the POA MIB File” on page 502 + “Customizing Your ManageWise Installation to Monitor the POA” on page 503 + “Configuring the POA for SNMP Monitoring” on page 503 Setting Up SNMP Services for the POA Select the instructions for the platform where the POA runs: + “Setting Up SNMP Services for the NetWare POA” on page 499 + “Setting Up SNMP Services for the Linux POA” on page 500 + “Setting Up SNMP Services for the Windows POA” on page 500 Setting Up SNMP Services for the NetWare POA The NetWare POA supports SNMP through the SNMP services loaded on the NetWare server. SNMP services are provided through the SNMP NLM. The SNMP NLM initiates and responds to requests for monitoring information and generates trap messages. If the SNMP NLM is not loaded before the NetWare POA, the POA still loads and functions normally, but SNMP support is disabled. The POA does not attempt to auto-load snmp.nlm. To load the SNMP NLM manually: 1 Go to the console of each NetWare server where you want to implement SNMP services. These servers should already have the GroupWise agents installed. 2 Type the command to load the SNMP NLM: Syntax: load snmp v control=x monitor=y trap=z Monitoring the POA 499 where v represents Verbose, meaning to display informational messages, and x, y and z are replaced with your system SNMP community strings for SNMP SETs, GETs and TRAPs). Example: load snmp v control=private monitor=public trap=all The configuration for the SNMP NLM is found in snmp.cfg and traptarg.cfg in the sys:\etc directory. View the contents of these files for more information. The TCP/IP NLM automatically loads snmp.nlm, using default values for the community strings. If your system uses different community string values, load snmp.nlm before tcpip.nlm. 3 Ifthe SNMP NLM is already loaded, you can add the control and trap parameters by typing the following at the console prompt: snmp control= trap= To automatically load these commands, include them in the autoexec.ncf file. For more information about implementing SNMP services, see your NetWare documentation. 4 Skip to “Copying and Compiling the POA MIB File” on page 502. Setting Up SNMP Services for the Linux POA The Linux POA is compatible with NET-SNMP. An older version of SNMP called UCD-SNMP cannot be used with the Linux POA. NET-SNMP comes standard with the versions of Red Hat Linux supported for GroupWise 6.5 for Linux, but it does not come standard with the supported versions of SUSE Linux. If you are using SUSE Linux, you must update to NET-SNMP in order to use SNMP to monitor the Linux POA. 1 Make sure you are logged in as root. 2 If NET-SNMP is not already set up on your Linux server, use the following command to configure SNMP: snmpconf -g basic setup The snmpconf command creates the snmpd.conf file in one ofthe following directories, depending on your version of Linux: lusr/share/snmp lusr/local/share/snmp -/.snmp 3 Locatethe snmpd.conf file on your Linux server. 4 Inatext editor, open the snmpd.conf file and add the following line: dlmod Gwsnmp /opt/novell/gw/agents/lib/libgwsnmp.so 5 Savethe snmpd.conf file and exit the text editor. 6 Restart the SNMP daemon (snmpd) to put the changes into effect. T Skip to “Copying and Compiling the POA MIB File” on page 502. Setting Up SNMP Services for the Windows POA SNMP support is provided for up to eight Windows POAs on the same Windows server. Upon startup, each instance of the POA is dynamically assigned a row in its SNMP table. View the 500 = GroupWise 6.5 Administration Guide contents ofthe POA MIB for a description ofthe SNMP variables in the table. See “Copying and Compiling the POA MIB File” on page 502 for more information about MIB files. To set up SNMP services for the Windows POA, complete the following tasks: + “Installing Windows SNMP Support” on page 501 + “Installing Group Wise Agent SNMP Support” on page 501 Installing Windows SNMP Support For Windows, the SNMP service is usually not included during the initial operating system installation. The SNMP service can be easily added at any time. To add or configure the SNMP service, you must be logged in as a member of the Administrator group. To add the SNMP service to a Windows NT server: 1 Fromthe Control Panel, double-click Network. 2 Click Services > Add > select SNMP Service. 3 Follow the on-screen prompts. You need your original Windows NT media. You are given the opportunity to configure the SNMP service. The only reguired information for GroupWise is the Trap Destination and Community Name. 4 After the installation is complete, reboot the server. For more information about configuring the SNMP service, see your Windows NT documentation. To add the SNMP service to a Windows 2000 server: 1 From the Control Panel, double-click Add/Remove Programs. 2 Click Add/Remove Windows Components. 3 Select Management and Monitoring Tools. 4 Click Details, then select Simple Network Management Protocol. Continue with “Installing Group Wise Agent SNMP Support” on page 501. Installing GroupWise Agent SNMP Support The Group Wise Agent Installation program includes an option for installing SNMP support. However, ifthe server where you installed the agents did not yet have SNMP set up, that installation option was not available. Now that you have set up SNMP, you can install Group Wise agent SNMP support. At the Windows server where you want to install the GroupWise agent SNMP support: 1 Run setup.exe at the root of the GroupWise 6.5 Administrator CD. Click Install Products > Group Wise Agents > Install Group Wise Agents. or Run install.exe from the agents subdirectory on the GroupWise 6.5 Administrator CD or in your software distribution directory if you have updated it with the latest Group Wise software. 2 In the Installation Path dialog box, browse to and select the path where the agent software is installed, then select Install and Configure SNMP for GroupWise Agents. 3 To shorten the install time, deselect Install GroupWise Agent Software. Monitoring the POA 501 4. Continue through the rest ofthe installation process as prompted by the Agent Installation program. The Agent Installation program copies the SNMP support files to the agent installation directory, makes the appropriate Windows registry entries, and restarts the Windows SNMP service. 5 Continue with “Copying and Compiling the POA MIB File” on page 502. Copying and Compiling the POA MIB File An SNMP-enabled POA returns information contained in a Management Information Base (MIB). The MIB is an ASCII data structure that defines the information gathered. It also defines the properties that can be monitored and managed on the SNMP-enabled POA. Before you can monitor an SNMP-enabled POA, you must compile the gwpoa.mib file using your SNMP management program. For NetWare or Windows, the Group Wise MIBs are located on the Group Wise 6.5 Administrator CD in the \agents\snmp directory or in the software distribution _directory\agents\snmp directory if you have updated it with the latest Group Wise software. For Linux, the GroupWise MIBs are located on the GroupWise 6.5 for Linux Administrator CD in the /agents/snmp directory. 1 Copy the gwpoa.mib file to the location required by your SNMP management program. For example, ManageWise users would copy the gwpoa.mib file to the \mw\nms\snmpmibs\current directory. ZENworks Server Management users can access the gwpoa.mib file in the software distribution directory. 2 Compile or import the gwpoa.mib file as required by your SNMP management program. For example, to compile the gwpoa.mib file for ZENworks Server Management: 2a In ConsoleOne, right-click the Site Server object, then click Properties > MIB Pool. 2b Click Modify Pool > Add. 2c Browse to and select the gwpoa.mib file, then click OK. 2d Click Compile. 2e Make sure that the server where the POA is running is configured to send SNMP traps to the ZENworks Server Management Site Server. + Ona NetWare server, add the IP address or hostname of the ZEN works Server Management Site Server to the traptarg.cfg file in the sys:\etc directory. + Ona Windows server, add the IP address or hostname of the ZENworks Server Management Site Server to the list of trap destinations. From the Windows NT Control Panel, double-click Network; or, from the Windows 2000 Control Panel, double-click Administrative Tools. Then click Services > SNMP Service > Properties > Traps. Refer to your SNMP management program documentation for specific instructions. 3 If you are using Novell ManageWise, continue with “Customizing Your ManageWise Installation to Monitor the POA” on page 503. Or If you are not using ManageWise, skip to “Configuring the POA for SNMP Monitoring” on page 503. 502 GroupWise 6.5 Administration Guide Customizing Your ManageWise Installation to Monitor the POA The Group Wise agent installation includes files that help ManageWise monitor the Group Wise agents more effectively. + “GroupWise MIB Files” on page 503 + “GroupWise Agent Alarm Help File” on page 503 These capabilities are available only with ManageWise, not with ZEN works Server Management. GroupWise MIB Files The Group Wise MIB files include the standard SNMP management information. In addition, the files include annotations that enhance the Alert functions of ManageWise. For example, the Summary provides more detailed information than the Description does in other SNMP management programs. The ManageWise annotations are embedded in comments; therefore, they have no affect on other SNMP management programs. GroupWise Agent Alarm Help File When Group Wise alarms appear in ManageWise, you can double-click the alarm to display the alarm information contained in the Agent Alarm help file. To enable this feature, copy the gwalarm.hlp file from the \agents\snmp directory to the \mw\nms\help directory on your ManageWise station. This help file explains the alarms each agent might produce by giving a description, cause, and action for each alarm. Configuring the POA for SNMP Monitoring In order for SNMP monitoring programs to monitor the POA, the POA must be configured with a network address and SNMP community string. 1 Browse to and right-click the POA object, then click Properties. 2 Click GroupWise > Network Address to display the Network Address page. 3 Click the pencil icon to provide the TCP/IP address or IPX™/SPX™ address of the server where the POA runs, then click Apply. 4 Click GroupWise > Agent Settings page, then scroll to the bottom of the settings list. 5 Provide your system SNMP community GET string, then click OK. ConsoleOne then notifies the POA to restart so the new settings can be put into effect. The POA should now be visible to your SNMP monitoring program. Notifying the GroupWise Administrator If you want to be notified with an e-mail message whenever POAs encounter critical errors, you can designate yourself as an administrator of the domain where the post offices are located. 1 In ConsoleOne, browse to and right-click the Domain object, then click Properties to display the Identification page. Monitoring the POA 503 Properties of Provol xÍ IDS Rights + | Other | Rights to Files and Folders | Domain: Provo1 Description: UNC Path: ÜPRV-GWWISYSigwsystemiprovo11 al Language: English - US v Domain Type: Primary Time Zone: (GMT-07:00) Mountain Time (US 8 Canada) SS Database Version: 6 Network Type: Novell NetWare v Administrator: El a Page Options... OK Cancel Apply | Help 2 In the Administrator field, browse to and select your GroupWise user ID. A domain can have a single administrator, or you can create a group of users to function as administrators. 3 Click OK to save the administrator information. The selected user or group then begins receiving e-mail messages whenever POAs servicing post offices in the domain encounter critical errors. Corresponding Startup Switches By default, the POA generates error mail if an administrator has been assigned for the domain. Error mail can be turned off using the /noerrormail switch in the POA startup file. POA Web Console Another way to receive e-mail notification of POA problems is to use Group Wise Monitor to access the POA Web console. See “Configuring E-Mail Notification” on page 918. Using the POA Error Message Documentation POA error messages are documented with the source and explanation of the error, possible causes of the error, and actions to take to resolve the error. See “Post Office Agent Error Messages” in GroupWise 6.5 Troubleshooting 1: Error Messages. Employing POA Troubleshooting Techniques If you are having a problem with the POA but not receiving a specific error message, or if the suggested actions for the specific error did not resolve the problem, you can review more general troubleshooting strategies for dealing with POA problems. See “Strategies for Agent Problems” in GroupWise 6.5 Troubleshooting 2: Solutions to Common Problems. 504 GroupWise 6.5 Administration Guide Using Platform-Specific POA Monitoring Tools Each operating system where the GroupWise POA runs provides tools for monitoring programs. + “NetWare Monitoring Tools” on page 505 + “Linux Monitoring Tools” on page 505 + “Windows Monitoring Tools” on page 505 NetWare Monitoring Tools If you are running the POA on NetWare servers, you can use the NetWare Monitor NLM to monitor the effects of the POA on the NetWare server. NetWare 6.x provides monitoring tools that you canuse from your Web browser. Processor, resource, and memory utilization can be compared to other non-Group Wise NLM programs to determine if the POA NLM program is monopolizing resources. See your NetWare documentation for additional monitoring suggestions. Linux Monitoring Tools If you are running the POA on Linux servers, you can use SNMP tools like snmpget and snmpwalk that allow you to retrieve the data about all the services registered with the SNMP service. These tools are part ofthe NET-SNMP package. See your Linux documentation for additional monitoring suggestions. Windows Monitoring Tools If you are running the POA on Windows servers, you can use the Performance Monitor in Windows Administrator Tools to gather similar information. See your Windows documentation for additional monitoring suggestions. Monitoring the POA 505 506 GroupWise 6.5 Administration Guide Optimizing the POA You can adjust how the POA functions to optimize its performance. Before attempting optimization, you should run the POA long enough to observe its efficiency and its impact on other network applications running on the same server. See Chapter 38, “Monitoring the POA,” on page 475. Also, remember that optimizing your network hardware and operating system can make a difference in POA performance. The following topics help you optimize the POA: + “Optimizing Client/Server Processing” on page 507 + “Optimizing Message File Processing” on page 511 + “Optimizing Indexing” on page 514 + “Optimizing Database Maintenance” on page 517 + “Optimizing CPU Utilization for the NetWare POA” on page 520 Optimizing Client/Server Processing If you run only one POA for the post office, you can adjust the number of POA threads and connections for client/server processing. If client/server processing needs are extremely heavy for a post office, you can set up a dedicated client/server POA to meet those needs. + “Adjusting the Number of POA Threads for Client/Server Processing” on page 507 + “Adjusting the Number of Connections for Client/Server Processing” on page 508 + “Configuring a Dedicated Client/Server POA” on page 510 Adjusting the Number of POA Threads for Client/Server Processing If the POA is configured with client/server processing enabled, it starts TCP handler threads to respond to current client/server requests, up to the number of threads specified by the TCP Handler Threads option. To respond to occasional heavy loads, the POA can increase the number of TCP handler threads above the specified amount if CPU utilization is below the threshold established by the CPU Utilization setting. When the POA rereads its configuration information, the number of TCP handler threads drops back within the configured limit. You can determine how often this happens by checking the Client/Server Pending Requests History page at the POA Web console. If the POA is frequently not keeping up with the client/server requests from GroupWise® client users, you can increase the maximum number of TCP handler threads so the POA run create additional threads regularly. The default is 6 TCP handler threads; valid values range from 1 to 99. If GroupWise client users cannot connect to the POA immediately or if response is sluggish, you can increase the number of threads. Optimizing the POA 507 1 In ConsoleOne*, browse to and right-click the POA object, then click Properties. 2 Click Group Wise > Agent Settings to display the Agent Settings page. Properties of POA = x| 1] NDS Rights + | Other | Rights to Files and Folders | Message File Processing: [ai zl Message Handler Threads: [ ed M Enable TCP/P (for Olient'Server) TCP Handler Threads: 6 4 Max Physical Connections: 1024 4 Max App Connections: 2048 4 [Y Enable Caching CPU Utilization (NLM): | 85 Sf percent Delay Time (NLM): | 100: milliseconds Max Thread Usage for Priming and Moves: | E percent M Enable IMAP MaxIMAP Threads: [ si M Enable CAP Max CAP Threads: | soi E| Page Options... [ox] Cancel MA A 3 Increase the number in the TCP Handler Threads field to increase the maximum number of threads the POA can create for client/server processing. The optimum number of threads for a POA is affected by many factors, including available system resources, number of users in Caching mode, number of users priming Caching mailboxes, and so on. Plan on at least one TCP handler thread per 20-30 client/server users. Or, you can increase the number of TCP handler threads in increments of three to five threads until acceptable throughput is reached. Another approach would be to set the value high initially and then monitor thread usage with the C/S Handler Threads link on the Status page of the POA Web console. If some of the threads always have a count of 0 (zero), meaning they are never used, you can decrease the number of TCP handler threads accordingly. 4 Click OK to save the new thread setting. ConsoleOne then notifies the POA to restart so the new thread setting can be put into effect. Corresponding Startup Switches You could also use the /tcpthreads switch in the POA startup file to adjust the number of POA threads. POA Web Console The Status page helps you assess whether the POA is currently meeting the client/server needs of the post office. Under the Thread Status heading, click C/S Handler Threads to display the workload and status of the client/server handler threads. You can change the number of client/server handler threads on the Configuration page. Under Performance Settings, click Client/Server Processing Threads. Adjusting the Number of Connections for Client/Server Processing Connections are the number of “sockets” through which client/server requests are communicated from the GroupWise client to the POA. 508 GroupWise 6.5 Administration Guide + Application connections: Each Group Wise user uses one application connection when he or she starts Group Wise. Depending on what activities the user is doing in the Group Wise client, additional application connections are used. For example, the Group Wise Address Book and GroupWise Notify use individual application connections. The default maximum number of application connections is 2048. You should plan about 3 to 4 application connections per user, so the default is appropriate for a post office of about 500 users. + Physical connections: Each Group Wise user could have zero or multiple active physical connections. One physical connection can accommodate multiple application connections. Inactive physical connections periodically time out and are then closed by the clients and the POA. The default maximum number of physical connections is 1024. You should plan about 1 to 2 physical connections per user, so the default is appropriate for a post office ofabout 500 users. If the POA is configured with too few connections to accommodate the number of users in the post office, the POA can encounter an error condition such as “GWPOA: Application connection table full”. 1 In ConsoleOne*, browse to and right-click the POA object, then click Properties. 2 Click Group Wise > Agent Settings to display the Agent Settings page. Properties of POA E xj {GroupWise X IDS Rights v | Other | Rights to Files and Folders | į Agent Settings i Message File Processing: All y Message Handler Threads: [ eş M Enable TCP/IP (for Client/Server) TCP Handler Threads: [ o Max Physical Connections: 1024 y Max App Connections: 2048 4 [Y Enable Caching CPU Utilization (NLM): 85 = percent Delay Time (NLM): | 100 £f milliseconds Max Thread Usage for Priming and Moves: 20 E| percent M Enable IMAP Max IMAP Threads: so E M Enable CAP Max CAP Threads: 50 +] E| Page Options... | Lo] Cancel Apply Help 3 Increase the number in the Max Physical Connections field to increase the amount of TCP/IP traffic the POA can accommodate. 4 Increase the number in the Max App Connections field to increase the number of activities the attached users can perform concurrently. 5 Click OK to save the new connection settings. ConsoleOne then notifies the POA to restart so the new connection settings can be put into effect. Corresponding Startup Switches You could also use the /maxappconns and /maxphysconns switches in the POA startup file to adjust the POA client/server processing. Optimizing the POA 509 POA Web Console The Status page helps you assess whether the POA is currently meeting the client/server needs of the post office. Under the Statistics heading, click C/S Reguests Pending. You can also manually select multiple log files to search in order to display a history of times during the last 24 hours when the POA was unable to respond immediately to client/server reguests. Configuring a Dedicated Client/Server POA When Group Wise users access the post office in client/server mode, the responsiveness of the Group Wise client depends entirely on the ability of the POA to handle the load placed upon it by the users. When you configure a dedicated client/server POA, GroupWise client users do not compete with other POA activities. Because many POA functions are disabled when a POA is dedicated to client/server processing, you must run at least one other POA for the post office to take care of the POA functions that the dedicated client/server POA is not performing. This additional POA could be a multipurpose POA, or you could configure additional POAs dedicated to specific types of processing. To configure a dedicated client/server POA: 1 Create a new POA object for the post office as described in “Creating a POA Object in eDirectory” on page 438. 2 Right-click the new POA object, then click Properties. 3 Click GroupWise > Agent Settings to display the Agent Settings page. Properties of POA E xÍ GroupWise + | NDS Rights + | Other | Rights to Files and Folders | Agent Settings Message File Processing: [or z] Message Handler Threads: [ y [7 Enable TCP/IP (for ClientiServer) TCP Handler Threads: [| 4 Max Physical Connections: | 2000 Max App Connections: [ 4000 < [Y Enable Caching CPU Utilization (NLM): | 85 2f percent Delay Time (NLM): [ 100 £f milliseconds Max Thread Usage for Priming and Moves: 20 E percent M Enable IMAP Max IMAP Threads: 50 | M Enable SNMP SNMP Community "Get" String: >| Page Options... Cancel Apply | Help 4 Make sure Enable TCP/IP (for Client/Server) is selected. 5 Increase the number in the TCP Handler Threads field as needed to increase the maximum number of threads the POA can create. The optimum number of threads for a POA is affected by many factors, including available system resources, number of users in Caching mode, number of users priming Caching mailboxes, and so on. Plan on at least one TCP handler thread per 20-30 client/server users. Or, you can increase the number of TCP handler threads in increments of three to five threads until acceptable 510 GroupWise 6.5 Administration Guide throughput is reached. Another approach would be to set the value high initially and then monitor thread usage with the C/S Handler Threads link on the Status page of the POA Web console. If some of the threads always have a count of 0 (zero), meaning they are never used, you can decrease the number of TCP handler threads accordingly. 6 Increase the number in the Max Physical Connections field as needed to increase the amount of TCP/IP traffic the POA can accommodate. Plan on one to two physical connections per user in the post office. 7 Increase the number in the Max App Connections field as needed to increase the number of activities the attached users can perform concurrently. Plan on three to four application connections per user in the post office. 8 Set Message File Processing to Off. Make sure another POA handles message file processing. 9 Click Apply to save the updated information on the Agent Settings page. 10 Click GroupWise > QuickFinder. 11 Deselect Enable QuickFinder Indexing, then click Apply. Make sure another POA handles indexing. 12 Click GroupWise > Maintenance. 13 Deselect Enable Automatic Database Recovery. Make sure another POA handles database recovery. To turn off all POA admin thread activity, add the /noada switch to the POA startup file for this dedicated client/server POA. 14 Set Maintenance Handler Threads to 0 (zero). Make sure another POA handles database maintenance and disk space management. 15 Deselect Perform User Upkeep and deselect Generate Address Book for Remote. Make sure another POA handles these tasks. 16 Click OK to save the new settings for dedicated client/server processing. 17 Install the POA software on a different server from where the original POA for the post office is already running. See “Installing Group Wise Agents” in the GroupWise 6.5 Installation Guide. 18 Add the /name switch to the POA startup file and specify the name designated when you created the new POA object. Also add the /name switch to the startup file for the original POA. 19 Start the dedicated client/server POA. See “Starting the POA” on page 431. Corresponding Startup Switches You could also use the /nomf, /nogf, /norecover, /nogwchk, /nonuu, and /nordab switches in the POA startup file to disable non-client/server processing, then use the /tcpthreads, /maxappconns, and /maxphysconns switches to adjust the POA client/server processing. Optimizing Message File Processing If you run only one POA for the post office, you can adjust the number of POA threads for message file processing. If message file processing needs are extremely heavy for a post office, you can set up a dedicated message file processing POA to meet those needs. + “Adjusting the Number of POA Threads for Message File Processing” on page 512 Optimizing the POA 511 + “Configuring a Dedicated Message File Processing POA” on page 513 Adjusting the Number of POA Threads for Message File Processing Ifthe POA is configured for message file processing, it starts the number of threads specified by the Message Handler Threads option. Message handler threads deliver messages to users” mailboxes. The default number of message handler threads is 8; valid values range from 1 to 30. The more message threads the POA uses, the faster it can process messages. However, the more threads the POA uses, the fewer resources are available to other processes running on the server. To adjust the number of POA message handler threads: 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click Group Wise > Agent Settings to display the Agent Settings page. Message File Processing: All a Message Handler Threads: | sg [Z Enable TCP/IP (for Client/Server) TCP Handler Threads: E Max Physical Connections: | 1044 Max App Connections: | 244 IV Enable Caching CPU Utilization (NLM): [es percent Delay Time (NLM): [100 3 milliseconds Max Thread Usage for Priming and Moves: [| 4 percent Enable IMAP Max IMAP Threads: [| soi M Enable CAP Max CAP Threads: [ soi Page Options... 3 Increase the number in the Message Handler Threads field. For example, you could increase the number of threads in increments of three to five threads until acceptable throughput is reached. The optimum number of threads for a POA is affected by many factors, including available system resources. 4 Click OK to save the new thread setting. ConsoleOne then notifies the POA to restart so the new setting can be put into effect. Corresponding Startup Switches You could also use the /threads switch in the POA startup file to adjust the number of message handler threads. POA Web Console The Status page helps you assess whether the POA is currently meeting the message file processing needs of the post office. Under the Thread Status heading, click Message File Processing Threads to display the workload and status of the message handler threads. You can change the number of message handler threads on the Configuration page. Under Performance Settings, click Message File Processing Threads. 512 GroupWise 6.5 Administration Guide Configuring a Dedicated Message File Processing POA If client/server processing is being handled by a dedicated client/server POA, you can set up one or more other POAs to handle other POA functions such as message file processing. 1 2 3 10 11 Create a new POA object for the post office as described in “Creating a POA Object in eDirectory” on page 438. Right-click the new POA object, then click Properties. Click Group Wise > Agent Settings to display the Agent Settings page. Properties of POA xj GroupWise + | NDS Rights v | Other | Rights to Files and Folders | Agent Settings Message File Processing: | ATA Message Handler Threads: | aş C Enable TCP/IP (for ClientServer) TCP Handler Threads: [ e3 Max Physical Connections: [ 10242 Max App Connections: | 244 Enable Caching CPU Utilization (NLM): | 85 {percent Delay Time (NLM): [100 3} milliseconds Max Thread Usage for Priming and Moves: E= percent z A Max IMAP Threads: [ si M Enable SNMP SNMP Community "Get" String: | z Page Options... | Cancel Apply Help Set Message File Processing to the desired level for this message file processing POA. If you are using just one message file processing POA, set Message File Processing to All. For additional load balancing, you could set up two message file processing POAs, one with Message File Processing set to High to handle Busy Searches and requests from Remote client users promptly, and a second with Message File Processing set to Low to handle regular message delivery in the post office. Increase the number in the Message Handler Threads field as needed. You can configure as many as 30 message handler threads. The optimum number is affected by many factors, including available system resources. Deselect Enable TCP/IP (for Client/Server). Make sure another POA handles client/server processing. Click Apply to save the updated information on the Agent Settings page. Click GroupWise > QuickFinder. Deselect Enable QuickFinder Indexing, then click Apply. Make sure another POA handles indexing. Click GroupWise > Maintenance. Deselect Enable Automatic Database Recovery. Make sure another POA handles database recovery. Optimizing the POA 513 To turn off all POA admin thread activity, add the /noada switch to the POA startup file for this dedicated message file processing POA. 12 Set Maintenance Handler Threads to 0 (zero). Make sure another POA handles database maintenance and disk space management. 13 Deselect Perform User Upkeep and deselect Generate Address Book for Remote. Make sure another POA handles these tasks. 14 Click OK to save the new settings for dedicated message file processing. 15 Install the POA software on a different server from where the original POA for the post office is already running. See “Installing GroupWise Agents” in the GroupWise 6.5 Installation Guide. 16 Add the /name switch to the POA startup file and specify the name designated when the new POA object was created. Also add the /name switch to the startup file for the original POA. 17 Start the dedicated message file processing POA. See “Starting the POA” on page 431. Corresponding Startup Switches You could also use the /notcpip, /nogf, /norecover, /nogwchk, /nonuu, and /nordab switches in the POA startup file to disable non-message file processing, then use the /nomfhigh and /nomflow switches in the POA startup file to adjust the POA message file processing. Optimizing Indexing If you run only one POA for the post office, you can adjust the indexing schedule. If indexing needs are extremely heavy for a post office, you can set up a dedicated indexing POA to meet those needs. + “Regulating Indexing” on page 514 + “Configuring a Dedicated Indexing POA” on page 516 NOTE: To facilitate the Find feature in the GroupWise client, the POA searches unindexed messages as well as those that have already been indexed, so that all messages are immediately available to users whenever they perform a search. The POA does not search unindexed documents, so documents cannot be located using the client Find feature until after indexing has been performed. Regulating Indexing 514 By default, the POA indexes messages and documents in the post office every 24 hours at 8:00 p.m. You can modify this interval if users need messages and documents indexed more quickly. To start indexing immediately, see “Updating QuickFinder Indexes” on page 486. To adjust the interval at which indexing occurs: 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click GroupWise > QuickFinder to display the QuickFinder page. GroupWise 6.5 Administration Guide Properties of POA E xj IDS Rights v | Other | Rights to Files and Folders | Enable QuickFinder Indexing Start QuickFinder Indexing: 20 F hours 0 F minutes QuickFinder Interval: 24 4 hours 0 4 minutes Page Options... Cancel Apply Help 3 Make sure Enable QuickFinder Indexing is selected. 4 In the Start QuickFinder Indexing field, specify the number of hours and minutes after midnight you want the POA to start its indexing cycle. For example, if you set QuickFinder Interval to 6 and Start QuickFinder Indexing to 1 hour, indexing cycles would occur at 1:00 a.m., 7:00 a.m., 1:00 p.m., and 7:00 p.m. 5 Decrease the number of hours and minutes in the QuickFinder Interval field so indexing occurs more frequently. The interval is measured from the start of one indexing cycle to the next, so that indexing starts at regular intervals, no matter how long each indexing session takes. By default, the start point of the cycle is 8:00 p.m. To avoid overloading the POA with indexing processing, a maximum of 500 items are indexed per database for each indexing cycle. Ifa very large number of messages are received regularly, you should configure the POA with frequent indexing cycles in order to get all messages indexed in a timely manner. To handle occasional heavy indexing requirements, you can start indexing manually. See “Updating QuickFinder Indexes” on page 486. 6 Click OK to save the new indexing settings. ConsoleOne then notifies the POA to restart so the new settings can be put into effect. Corresponding Startup Switches You could also use the /qfinterval, /qfintervalinminute, /qfbaseoffset, and /qfbaseoffsetinminute switches in the POA startup file to regulate indexing. POA Web Console You can control indexing for the current POA session on the Configuration page. Under the General Settings heading, click QuickFinder Indexing. If indexing is currently in progress, you can check the status of the indexing process on the Scheduled Events page. Optimizing the POA 515 Configuring a Dedicated Indexing POA If your Group Wise client users rely heavily on indexed documents, you can set up a dedicated indexing POA so that indexing can be done guickly without impacting other POA functions. The steps provided in this section would be appropriate for a basic indexing POA. For a discussion of more complex configuration options, see “Indexing Documents” on page 319. To configure a basic dedicated indexing POA: 1 Create a new POA object for the post office as described in “Creating a POA Object in eDirectory” on page 438. 2 Right-click the new POA object, then click Properties. 3 Click GroupWise > QuickFinder to display the QuickFinder page. Properties of POA E xj GroupWise + | NDS Rights + | Other | Rights to Files and Folders | QuickFinder M Enable QuickFinder Indexing Start QuickFinder Indexing: 20 ©] hours 0 +] minutes QuickFinder Interval: 0 3 hours 0 3 minutes Page Options... Cancel Apply | Help 4 Make sure Enable QuickFinder Indexing is selected. 5 In the Start QuickFinder Indexing field, specify the number of hours and minutes after midnight you want the POA to start its indexing cycle. The default is 20, meaning at 8:00 p.m. 6 Set QuickFinder Update Interval low enough to keep up with the indexing demands of your GroupWise client users. To avoid overloading the POA with indexing processing, a maximum of 500 items are indexed per database for each indexing cycle. Ifa very large number of messages are received regularly, you should configure the POA with very frequent indexing cycles in order to get all messages indexed in a timely manner. For continuous QuickFinder™ indexing, set QuickFinder Update Interval to 0 (zero). 7 Click Apply to save the updated QuickFinder settings. 8 Click GroupWise > Agent Settings. 9 Set Message File Processing to Off. Make sure another POA handles message file processing. 10 Deselect Enable TCP/IP (for Client/Server) and set TCP Handler Threads to 0. Make sure another POA handles client/server processing. 516 GroupWise 6.5 Administration Guide 11 Click Apply to save the updated agent settings. 12 Click Group Wise > Maintenance. 13 Deselect Enable Automatic Database Recovery. Make sure another POA handles database recovery. To turn off all POA admin thread activity, add the /noada switch to the POA startup file for this dedicated indexing POA. 14 Set Maintenance Handler Threads to 0 (zero). Make sure another POA handles database maintenance and disk space management. 15 Deselect Perform User Upkeep and deselect Generate Address Book for Remote. Make sure another POA handles these tasks. 16 Click OK to save the new settings for dedicated indexing. 17 Install the POA software on a different server from where the original POA for the post office is already running. See “Installing Group Wise Agents” in the GroupWise 6.5 Installation Guide. 18 Add the /name switch to the POA startup file and specify the name designated when the new POA object was created. Also add the /name switch to the startup file for the original POA. 19 Start the dedicated indexing POA. See “Starting the POA” on page 431. Corresponding Startup Switches You could also use the /nomf, /notcpip, /norecover, /nonuu, and /nordab switches in the POA startup file to disable unwanted processing, then use the /qfinterval, /qfintervalinminute, / qfbaseoffset, and /qfbaseoffsetinminute switches to control the indexing schedule. Optimizing Database Maintenance If you run only one POA for the post office, you can adjust the number of database maintenance threads. If database maintenance needs are extremely heavy for a post office, you can set up a dedicated database maintenance POA to meet those needs. + “Adjusting the Number of POA Threads for Database Maintenance” on page 517 + “Configuring a Dedicated Database Maintenance POA” on page 518 Adjusting the Number of POA Threads for Database Maintenance The POA by default performs a certain amount of database maintenance. In addition, you can create your own customized maintenance events as described in “Scheduling Database Maintenance” on page 467 and “Scheduling Disk Space Management” on page 469. By default, the POA starts one thread to handle all POA scheduled events and also all usage of the Mailbox/Library Maintenance feature in ConsoleOne. To adjust the number of POA database maintenance handler threads: 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click GroupWise > Maintenance to display the Maintenance page. Optimizing the POA 517 Properties of POA È xi IDS Rights + | Other | Rights to Files and Folders | Enable Automatic Database Recovery Maintenance Handler Threads: 4 y Perform User Upkeep Start User Upkeep: y hours after midnight M Generate Address Book for Remote Start Address Book Generation: 0 F hours after midnight Disk Check Interval: 5 a minutes Disk Check Delay: 2 hours Page Options... Cancel Ap | Help 3 Increase the number in the Maintenance Handler Threads field. 4 Click OK to save the new thread setting. ConsoleOne then notifies the POA to restart so the new setting can be put into effect. Corresponding Startup Switches You could also use the /gwchkthreads switch in the POA startup file to increase the number of POA threads started for database maintenance activities. POA Web Console The Status page helps you assess whether the POA is currently meeting the database maintenance needs of the post office. Under the Thread Status heading, click GWCheck Worker Threads to display the workload and status of the database maintenance handler threads. You can change the number of database maintenance handler threads on the Configuration page. Under Performance Settings, click Maximum GWCheck Processing Threads. Configuring a Dedicated Database Maintenance POA 518 If a large amount of database maintenance needs to be performed for a post office, you can set up a dedicated database maintenance POA so that the database maintenance activities do not impact other POA activities, such as responding to GroupWise client users. 1 Create anew POA object for the post office as described in “Creating a POA Object in eDirectory” on page 438. 2 Right-click the new POA object, then click Properties. 3 Click GroupWise > Maintenance to display the Maintenance page. GroupWise 6.5 Administration Guide 18 19 x GroupWise + | NDS Rights v | Other | Rights to Files and Folders | Maintenance Enable Automatic Database Recovery Maintenance Handler Threads: E T Perform User Upkeep Start User Upkeep: < hours afer midnight [> Generate Address Book for Remote Start Address Book Generation: 0 E hours after midnight Disk Check Interval: 5 E minutes Disk Check Delay: 1 <] hours Page Options... | Cancel Apply Help Make sure Enable Automatic Database Recovery is selected. Set Maintenance Handler Threads as needed. The maximum number of threads you can start for database maintenance is 8. Deselect Perform User Upkeep and deselect Generate Address Book for Remote. Make sure another POA handles these tasks. Set Disk Check Interval and Disk Check Delay as appropriate for the database maintenance events you plan to schedule. Click Apply to save the updated information on the Maintenance page. Click Group Wise > Scheduled Events, then create database maintenance events as needed, as described in “Scheduling Database Maintenance” on page 467 and “Scheduling Disk Space Management” on page 469. Click GroupWise > Agent Settings. Set Message File Processing to Off. Make sure another POA handles message file processing. Deselect Enable TCP/IP (for Client/Server) and set TCP Handler Threads to 0. Make sure another POA handles client/server processing. Click Apply to save the updated information on the Agent Settings page. Click GroupWise > QuickFinder. Deselect Enable QuickFinder Indexing. Make sure another POA handles indexing. Click OK to save the new settings for dedicated database maintenance processing. Install the POA software on a different server from where the original POA for the post office is already running. See “Installing GroupWise Agents” in the GroupWise 6.5 Installation Guide. Add the /name switch to the POA startup file and specify the name designated when you created the new POA object. Also add the /name switch to the startup file for the original POA. Start the dedicated database maintenance POA. See “Starting the POA” on page 431. Optimizing the POA 519 Corresponding Startup Switches You could also use the /nomf, /notcpip, /nogf, /nonuu, and /nordab switches in the POA startup file to disable unwanted processing, then use the /gwchkthreads switch to increase the number of database maintenance handler threads. Optimizing CPU Utilization for the NetWare POA To ensure that it does not dominate the NetWare® server CPU, the NetWare POA has a CPU utilization threshold. The default CPU utilization threshold for the NetWare POA is 85 percent. You can change this threshold using the CPU Utilization option. If CPU utilization exceeds the threshold by 5 percent, any idle NetWare POA threads remain idle for the number of milliseconds set by the Delay Time option. This cycle continues until CPU utilization drops below the CPU utilization threshold. To determine the optimum utilization setting for your network, you must consider the following factors: + Amount of available memory + Demands of other network applications + Type of throughput you want the NetWare POA to provide As you raise the utilization threshold, NetWare POA efficiency increases; however, other network applications have fewer available resources. As you decrease the utilization threshold, NetWare POA efficiency is reduced; however, the NetWare POA cooperates better with other applications running on the same server. The best way to determine these settings for your network is to experiment. To adjust the NetWare POA CPU utilization and delay time: 1 In ConsoleOne, browse to and right-click the POA object, then click Properties. 2 Click GroupWise > Agent Settings to display the Agent Settings page. xl a Message File Processing: All M Message Handler Threads: | eg Enable TCP/IP (for Client/Server) TCP Handler Threads: | sg Max Physical Connections: | 1044 Max App Connections: | 244 IV Enable Caching CPU Utilization (NLM): [ ss percent Delay Time (NLM): | w3 milliseconds Max Thread Usage for Priming and Moves: [| 4 percent [V Enable IMAP Max IMAP Threads: | si M Enable CAP Max CAP Threads: 50 $] E| Page Options... LC ok À Cancel x | Help 3 Increase the number in the CPU Utilization field to allow the NetWare POA to use more server resources. 520 GroupWise 6.5 Administration Guide or Decrease the number in the CPU Utilization field to give the NetWare POA fewer server resources so those resources can be used by other programs on the server. 4 Decrease the number in the Delay Time field to allow NetWare POA threads to take on new tasks more quickly. or Increase the number in the Delay Time field to force NetWare POA threads to pause before taking on new tasks. 5 Click OK to save the new CPU utilization settings. ConsoleOne then notifies the POA to restart so the new settings can be put into effect. Corresponding Startup Switches You could also use the /cpu and /sleep switches in the POA startup file to adjust CPU utilization and delay time. Optimizing the POA 521 522 GroupWise 6.5 Administration Guide Using POA Startup Switches You can override settings provided in ConsoleOne® by using startup switches. You can override startup switches provided in the startup file by using startup switches on the command line. For more information about starting the POA, see “Starting the POA” on page 431. The table below summarizes POA startup switches for all platforms and how they correspond to configuration settings in ConsoleOne. NetWare POA @filename /attemptsresetinterval /certfile /cap /capmaxthreads /capport /capssl /cluster /cpu /dn /enforceclientversion /externalclientss| /gwchkthreads /gwclientreleasedate /gwclientreleaseversion /help /home Inttppassword Inttpport /httprefresh Linux POA @filename --attemptsresetinterval --certfile --cap --capmaxthreads --capport --capssl N/A N/A N/A --enforceclientversion --externalclientssl --gwchkthreads --gwclientreleasedate --gwclientreleaseversion --help --home --httppassword --httpport --httprefresh Windows POA @filename /attemptsresetinterval /certfile /cap /capmaxthreads /capport /capssl N/A N/A N/A /enforceclientversion lexternalclientssl /gwchkthreads /gwclientreleasedate /gwclientreleaseversion /help /home /httppassword /httpport /httprefresh ConsoleOne Settings N/A Incorrect Login Reset Time Certificate File Enable CAP Max CAP Threads CAP Port CAP SSL N/A CPU Utilization N/A Lock Out Older GroupWise Clients Internet Client/Server SSL Maintenance Handler Threads Minimum Client Release Date Minimum Client Release Version N/A N/A HTTP Password HTTP Port N/A Using POA Startup Switches 523 NetWare POA /httpssl /nttpuser /imap /imapmaxthreads /imapport /imapreadlimit limapssl /imapsslport /incorrectloginattempts linternalclientssl lintruderlockout lip /keyfile /keypassword /language IIdapdisablepwdchg Idapipaddr /ldapippooln IIdappoolresettime IIdapport IIdapportpooln /\dappwd IIdapssl /dapssipooln /I\dapssikey IIdapsslkeypooln IIdaptimeout IIdapuser IIdapuserauthmethod /lockoutresetinterval Linux POA --httpssl --httpuser --imap --imapmaxthreads --imapport --imapreadlimit --imapssl --imapsslport --incorrectloginattempts --internalclientssl --intruderlockout --ip --keyfile --keypassword --language --Idapdisablepwdchg --Idapipaddr --Idapippooln --Idappoolresettime --Idapport --Idapportpooln --Idappwd --Idapssl --Idapsslpooln --Idapsslkey --Idapsslkeypooln --Idaptimeout --Idapuser --Idapuserauthmethod --lockoutresetinterval 524 GroupWise 6.5 Administration Guide Windows POA Ihttpssl /httpuser /imap /imapmaxthreads /imapport /imapreadlimit limapssl /imapsslport /incorrectloginattempts /internalclientss| /intruderlockout lip /keyfile /keypassword /language /\dapdisablepwdchg /\dapipaddr /I\dapippooln IIdappoolresettime IIdapport IIdapportpooln /\dappwd IIdapssl IIdapsslpooln /Idapsslkey IIdapsslkeypooln IIdaptimeout IIdapuser IIdapuserauthmethod /lockoutresetinterval ConsoleOne Settings HTTP SSL HTTP User Name IMAP Max IMAP Threads IMAP Port N/A IMAP SSL IMAP SSL Port Incorrect Logins Allowed Local Intranet Client SSL Enable Intruder Detection N/A SSL Key File SSL Key File Password N/A Disable LDAP Password Changing LDAP Server Address Select LDAP Servers LDAP Pool Server Reset Timeout LDAP Server Address LDAP Server Address LDAP Password Use SSL Use SSL SSL Key File SSL Key File Inactive Connection Timeout LDAP User Name User Authentication Method Lockout Reset Time NetWare POA /log /logdays Hlogdiskoff Moglevel /logmax /maxappconns /maxphysconns Imsgtranssl Imtpinipaddr Imtpinport Imtpoutipaddr /mtpoutport /mtpsendmax /name /noada /nocache /noconfig /noerrormail /nogwchk Inomf Inomfhigh /nomflow /nomtp /nonuu Mmogf /nordab /norecover /nosnmp /notcpip Linux POA --log --logdays --logdiskoff --loglevel --logmax --maxappconns --maxphysconns --msgtranssl --mtpinipaddr --mtpinport --mtpoutipaddr --mtpoutport --mtpsendmax --name --noada --nocache --noconfig --noerrormail --nogwchk --nomf --nomfhigh --nomflow --nomtp --nonuu --nogf --nordab --norecover --nosnmp --notcpip Windows POA /log /logdays /logdiskoff /loglevel /logmax /maxappconns /maxphysconns Imsgtranssl Imtpinipaddr Imtpinport Imtpoutipaddr /mtpoutport /mtpsendmax /name /noada /nocache /noconfig /noerrormail /nogwchk Inomf /nomfhigh /nomflow /nomtp /nonuu Inoqf Inordab /norecover /nosnmp /notcpip ConsoleOne Settings Log File Path Max Log File Age Logging Level Logging Level Max Log Disk Space Max Application Connections Max Physical Connections Message Transfer SSL IP Address (POA) Message Transfer Port (POA) IP Address (MTA) Message Transfer Port (MTA) Maximum Send Message Size N/A N/A Enable Caching N/A N/A N/A Message File Processing Message File Processing Message File Processing N/A Perform User Upkeep Enable QuickFinder Indexing Generate Address Books for Remote Enable Auto DB Recovery Enable SNMP Enable TCP/IP (for C/S) Using POA Startup Switches 525 NetWare POA Linux POA /nuuoffset --nuuoffset /password --password /port --port /primingmax --primingmax lgfbaseoffset --qfbaseoffset /qfbaseoffsetinminute /qfinterval /qfintervalinminute --qfbaseoffsetinminute --gfinterval --gfintervalinminute Windows POA Inuuoffset /password /port /primingmax /qfbaseoffset /qfbaseoffsetinminute /qfinterval /qfintervalinminute /rdaboffset [rights N/A /tcpthreads /threads /user ConsoleOne Settings Start User Upkeep Remote Password Client/Server Port Max Thread Usage for Priming and Moves Start QuickFinder Indexing Start QuickFinder Indexing QuickFinder Interval QuickFinder Interval Start Address Book Generation N/A Delay Time (NLM) TCP Handler Threads Message Handler Threads Remote User Name Specifies the location of the POA startup file. On NetWare and Windows, the full path must be included if the file does not reside in the same directory with the POA program. On Linux, the startup file always resides in the /opt/novell/groupwise/agents/share directory. The startup file must reside on the same server where the POA is installed. For more information about the POA startup file, see Chapter 36, “Installing and Starting the POA,” on page 427. /rdaboffset --rdaboffset [rights --rights /sleep N/A /tcpthreads --tcpthreads /threads --threads luser --user @filename NetWare POA Syntax: @[vol:][\din]file @\\svnvoldinfile Example: load gwpoa @sales.poa load gwpoa @sys:\agtisales.poa load gwpoa @\s2\sys\agt\isales.poa lattemptsresetinterval Linux POA Ol/dir'file ./gwpoa @../share/Inxpost.poa Windows POA @l[drive:]f\din]file @\\svñsharename\dinfile gwpoa.exe @sales.poa gwpoa.exe @d:\agtisales.poa gwpoa.exe @\\s2\c\agtisales.poa Specifies the length of time during which unsuccessful login attempts are counted, leading to lockout. The default is 30 minutes; valid values range from 15 to 60. See “Enabling Intruder Detection” on page 465. 526 GroupWise 6.5 Administration Guide NetWare POA Linux POA Windows POA Syntax: /attemptsresetinterval-minutes --attemptsresetinterval minutes /attemptsresetinterval-minutes Example: /attemptsresetinterval-15 --attemptsresetinterval 45 /attemptsresetinterval-60 See also /intruderlockout, /incorrectloginattempts, and /lockoutresetinterval. Icap Enables CAP (Calendar Access Protocol) so that the POA can communicate with CAP clients. See “Supporting CAP Clients” on page 451. NetWare POA Linux POA Windows POA Syntax: /cap-enabled or disabled --cap enabled or disabled /cap-enabled or disabled Example: /cap-enabled --cap enabled /cap-enabled See also /capmaxthreads, /capport, and /capssl. /capmaxthreads Specifies the maximum number of CAP threads the POA can create to service CAP clients. The default is 50. This setting is appropriate for most systems. See “Supporting CAP Clients” on page 451. NetWare POA Linux POA Windows POA Syntax: /capmaxthreads-number --capmaxthreads number /capmaxthreads-number Example: /capmaxthreads-30 --capmaxthreads 40 /capmaxthreads-40 See also /cap, /capport, /capssl. /capport Sets the TCP port number used for the POA to communicate with CAP clients. The default is 1026. See “Supporting CAP Clients” on page 451. NetWare POA Linux POA Windows POA Syntax: /capport-port_number --capport port_number /capport-port_number Example: /capport-1027 --capport 1028 /capport-1028 See also /cap, /capmaxthreads, and /capssl. Using POA Startup Switches 527 /capssl Icertfile /cluster lcpu Sets the availability of secure SSL communication between the POA and CAP clients. Valid settings are enabled and disabled. CAP uses TLS (Transport Layer Security) to negotiate the SSL connection. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. NetWare POA Linux POA Windows POA Syntax: /capssl-setting --capssl setting /capssl-setting Example: /capssl-enabled --capssl enabled /capssl-enabled See also /imap, /imapmaxthreads, and /imapport. Specifies the full path to the public certificate file used to provide secure SSL communication between the POA and other programs. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. NetWare POA Linux POA Windows POA Syntax: /certfile-[svA][vol:]\dir\file --certfile /dir/file /certfile-[drive:]\dir\file lcertfile-MsvnAvohdirfile Icertfile-\\svñsharename\dinfile Example: /certfile-\ssl\gw.crt --certfile /certs/gw.crt /certfile-\ssl\gw.crt /certfile-server2\sys:\ssl\gw.crt /certfile-m:\ssl\gw.crt /certfile-\\server2\sys\ssl\gw.crt /certfile-\\server2\c\ssl\gw.crt See also /keyfile and /keypassword. Informs the NetWare® POA that it is running in a Novell cluster. See “Novell Cluster Services” in the GroupWise 6.5 Interoperability Guide. If you are running the NetWare POA on the latest version of NetWare 6.x and Novell Cluster Services, the POA can detect the cluster automatically. NetWare POA Linux POA Windows POA Syntax: /cluster N/A N/A See also /ip. Sets the CPU utilization threshold for the NetWare POA. The default is 85 per cent. See “Optimizing CPU Utilization for the NetWare POA” on page 520. 528 GroupWise 6.5 Administration Guide NetWare POA Linux POA Windows POA Syntax: /cpu-percentage N/A N/A Example: /cpu-55 N/A N/A See also /sleep. /dn Specifies the Novell® eDirectory™ distinguished name of the NetWare POA object to facilitate logging into remote servers. It can be used instead of the /user and /password switches. NetWare POA Linux POA Windows POA Syntax: /dn-distinguished_name N/A N/A Example: /dn-POA.sales.provo2 N/A N/A lenforceclientversion Enforces the minimum client release version and/or date so that users of older clients are forced to update in order to access their Group Wise? mailboxes. Valid settings are version, date, both, and disabled. See “Checking What Group Wise Clients Are in Use” on page 452. NetWare POA Linux POA Windows POA Syntax: /enforceclientversion-setting --enforceclientversion setting /enforceclientversion-setting Example: /enforceclientversion-version --enforceclientversion date /enforceclientversion-both See also /gwclientreleasedate, and /gwclientreleaseversion. /externalclientssl Sets the availability of SSL communication between the POA and GroupWise clients that are running outside your firewall. Valid values are enabled, required, and disabled. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. NetWare POA Linux POA Windows POA Syntax: /externalclientss|-setting --externalclientssl setting /externalclientssl-setting Example: /externalclientssl-enabled --externalclientssl disabled /externalclientssl-required See also /certfile, /keyfile, /keypassword, and /port. Using POA Startup Switches 529 lgwchkthreads Specifies the number of'threads the POA starts for Mailbox/Library Maintenance activities. The default is 4; valid values range from 1 to 8. See “Adjusting the Number of POA Threads for Database Maintenance” on page 517. NetWare POA Linux POA Windows POA Syntax: /gwchkthreads-number --gwchkthreads number /gwchkthreads-number Example: /gwchkthreads-5 --gwchkthreads 6 /gwchkthreads-8 See also /nogwchk. /gwclientreleasedate Specifies the date of the approved GroupWise client software for your system. See “Checking What GroupWise Clients Are in Use” on page 452. NetWare POA Linux POA Windows POA Syntax: /gwclientreleasedate-mm-dd-yyyy --gwclientreleasedate mm-dd-yyyy /gwclientreleasedate-mm-dd-yyyy Example: /gwclientreleasedate-04-02-2001 --gwclientreleasedate 04-28-2004 /gwclientreleasedate-04-02-2001 See also /gwclientreleaseversion and /enforceclientversion. /gwclientreleaseversion Specifies the version of the approved GroupWise client software for your system. See “Checking What Group Wise Clients Are in Use” on page 452. NetWare POA Linux POA Windows POA Syntax: /gwclientreleaseversion-n.n.n --gwclientreleaseversion n.n.n /gwclientreleaseversion-n.n.n Example: /gwclientreleaseversion-6.0.0 --gwclientreleaseversion 6.5.1 /gwclientreleaseversion-6.0.0 See also /gwclientreleasedate and /enforceclientversion. [help Displays the POA startup switch Help information. When this switch is used, the POA does not start. NetWare POA Linux POA Windows POA Syntax: /help or /? --help /help or /? Example: load gwpoa /help ./gwpoa --help gwpoa.exe /help 530 GroupWise 6.5 Administration Guide Ihome Specifies the post office directory, where the POA can find the message and user databases to service. There is no default location. You must use this switch in order to start the POA. See “Starting the POA” on page 431. NetWare POA Linux POA Windows POA Syntax: /nome-[svn][vol:]\dir --home /dir /home-[drive:]\dir /home-\\svAvoldir /home-\\svAsharename\dir Example: /home-\sales --home /gwsystem/sales /home-\sales /home-mail:\sales /home-m:\sales /home-server2\mail:\sales /home-\\server2\c\sales /home-\\server2\mail\sales /httppassword Specifies the password for the POA to prompt for before allowing POA status information to be displayed in your Web browser. Do not use an existing eDirectory password because the information passes over the insecure connection between your Web browser and the POA. See “Using the POA Web Console” on page 489. NetWare POA Linux POA Windows POA Syntax: /nttppassword-unique_password --httppassword unique_password /httppassword-unique_password Example: /httppassword-AgentWatch --httppassword AgentWatch /httppassword-AgentWatch See also /httpuser, /httpport, /httprefresh, and /httpssl. /httpport Sets the HTTP port number used for the POA to communicate with your Web browser. The default is 7181; the setting must be unique. See “Using the POA Web Console” on page 489. NetWare POA Linux POA Windows POA Syntax: /httpport-port_number --httpport port_number /httpport-port_number Example: /httpport-7182 --httpport 7183 /httpport-7184 See also /httpuser, /httppassword, /httprefresh, and /httpssl. lhttprefresh Specifies the rate at which the POA refreshes the status information in your Web browser. The default is 60 seconds. See “Using the POA Web Console” on page 489. Using POA Startup Switches 531 NetWare POA Linux POA Windows POA Syntax: Ihttprefresh-seconds --httprefresh seconds /httprefresh-seconds Example: /httprefresh-30 --httprefresh 90 /httprefresh-120 See also /httpuser, /httppassword, /httpport, and /httpssl. lhttpssl Sets the availability of secure SSL communication between the POA and the POA Web console displayed in your Web browser. Valid values are enabled and disabled. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. NetWare POA Linux POA Windows POA Syntax: /httpssl-setting --httpssl setting /httpssl-setting Example: /httpssl-enabled --httpssl enabled /httpssl-enabled See also /certfile, /keyfile, and /keypassword. /httpuser Specifies the username for the POA to prompt for before allowing POA status information to be displayed in a Web browser. Providing a username is optional. Do not use an existing eDirectory username because the information passes over the insecure connection between your Web browser and the POA. See “Using the POA Web Console” on page 489. NetWare POA Linux POA Windows POA Syntax: /nttpuser-unique_name --httprefresh unique_name /httprefresh-unique_name Example: /httpuser-GWWebCon --httpuser GWWebCon /nttpuser-GWWebCon See also /httppassword, /httpport, /httprefresh, and /httpssl. limap Enables IMAP so that the POA can communicate with IMAP clients. Valid settings are enabled and disabled. See “Supporting IMAP Clients” on page 450. NetWare POA Linux POA Windows POA Syntax: limap-enabled or disabled --imap enabled or disabled /imap-enabled or disabled Example: /imap-enabled --imap disabled /imap-enabled See also /imapmaxthreads, /imapport, /imapssl, /imapsslport, and /imapreadlimit. 532 GroupWise 6.5 Administration Guide limapmaxthreads Specifies the maximum number of IMAP threads the POA can create to service IMAP clients. The default is 50.This setting is appropriate for most systems. See “Supporting IMAP Clients” on page 450. NetWare POA Linux POA Windows POA Syntax: /imapmaxthreads-number --imapmaxthreads number limapmaxthreads-number Example: /imapmaxthreads-40 --imapmaxthreads 30 limapmaxthreads-40 See also /imap, /imapport, /imapssl, /imapsslport, and /imapreadlimit. limapreadlimit Specifies in thousands the maximum number of messages that can be downloaded by an IMAP client. For example, specifying 10 represents 10,000. The default is 5,000 NetWare POA Linux POA Windows POA Syntax: /imapreadlimit-number --imapreadlimit number /imapreadlimit-number Example: /imapreadlimit-10 --imapreadlimit 20 /imapreadlimit-50 See also /imap, /imapmaxthreads, /imapport, /imapssl, and /imapsslport. /imapport Sets the TCP port number used for the POA to communicate with IMAP clients when using a non- SSL connection. The default is 143. See “Supporting IMAP Clients” on page 450. NetWare POA Linux POA Windows POA Syntax: /imapport-port_number --imapport port_number /imapport-port_number Example: /imapport-145 --imapport 146 /imapport-147 See also /imap, /imapmaxthreads, /imapssl, /imapsslport, and /imapreadlimit. /imapssl Sets the availability of secure SSL communication between the POA and IMAP clients. Valid settings are enable and disable. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. NetWare POA Linux POA Windows POA Syntax: /imapssl-setting --imapssl setting limapssl-setting Using POA Startup Switches 533 NetWare POA Linux POA Windows POA Example: /imapssl-enable --imapssl enable /imapssl-enable See also /imap, /imapmaxthreads, /imapport, /imapsslport, and /imapreadlimit. /imapsslport Sets the TCP port number used for the POA to communicate with IMAP clients when using an SSL connection. The default is 993. See “Supporting IMAP Clients” on page 450. NetWare POA Linux POA Windows POA Syntax: /imapsslport-port_number --imapsslport port number limapssiport-port number Example: /imapsslport-994 --imapsslport 995 /imapsslport-996 See also/imap, /imapmaxthreads, /imapport, /imapssl, and /imapreadlimit. lincorrectloginattempts Specifies the number of unsuccessful login attempts after which lockout occurs. The default is 5 attempts; valid values range from 3 to 10. See “Enabling Intruder Detection” on page 465. NetWare POA Linux POA Windows POA Syntax: /incorrectloginattempts-number --incorrectloginattempts number /incorrectloginattempts-number Example: /incorrectloginattempts-3 --incorrectloginattempts 10 /incorrectloginattempts-10 See also /intruderlockout, /attemptsresetinterval, and /lockoutresetinterval. /internalclientssl Sets the availability of secure SSL communication between the POA and Group Wise clients that are running inside your firewall. Valid values are enabled, required, and disabled. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. NetWare POA Linux POA Windows POA Syntax: /internalclientss|-setting --internalclientssl setting /internalclientssl-setting Example: /internalclientssi-enabled --internalclientssl required /internalclientssl-required See also /certfile, /keyfile, /keypassword, and /port. 534 GroupWise 6.5 Administration Guide lintruderlockout lip /keyfile Turns on intruder lockout processing, using defaults that can be overridden by the / incorrectloginattempts, /attemptsresetinterval, and /lockoutresetinterval switches. See “Enabling Intruder Detection” on page 465. NetWare POA Linux POA Windows POA Syntax: /intruderlockout --intruderlockout lintruderlockout Binds the POA to a specific IP address when the server where it runs uses multiple IP addresses, such as in a clustering environment. The specified IP address is associated with all ports used by the POA (HTTP, IMAP, LDAB, and so on.) Without the /ip switch, the POA binds to all available IP addresses and users can access the post office through all available IP addresses. See “Editing Clustered Agent Startup Files” in “Novell Cluster Services” in GroupWise 6.5 Interoperability Guide. NetWare POA Linux POA Windows POA Syntax: lip-IP_address --ip IP. address lip-IP. address Example: /ip-172.16.5.18 --ip 172.16.5.18 lip-172.16.5.18 See also /cluster. Specifies the full path to the private file used to provide secure SSL communication between the POA and other programs. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. NetWare POA Linux POA Windows POA Syntax: /keyfile-[svA][vol:]\dir\file --keyfile /dir/file /keyfile-[drive:]\dir\file IkeyfileMsvAvoAMdinfile /keyfile-\\svAsharename\dinfile Example: /keyfile-\ssl\gw.key --keyfile /certs/gw.key /keyfile-\ssl\gw.key /keyfile-server2\sys:\ssl\gw.key /keyfile-m:\ssl\gw.key /keyfile-\\server2\sys\ssl\gw.key /keyfile-\\server2\c\ssl\gw.key See also /certfile and /keypassword. Using POA Startup Switches 535 /keypassword language 536 GroupWise 6.5 Administration Guide Specifies the password used to encrypt the private SSL key file when it was created. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. NetWare POA Syntax: /keypassword-password Example: /keypassword-gwssl See also /certfile and /keyfile. Linux POA --keypassword password --keypassword gwssl Windows POA /keypassword-password /keypassword-gwssl Specifies the language to run the POA in, using a two-letter language code as listed below. You must install the POA in the selected language in order for the POA to display in the selected language. The initial default is the language used in the post office. If that language has not been installed, the second default is the language used by the operating system. If that language has not been installed, the third default is English. You only need to use this switch if you need to override these defaults. NetWare POA Syntax: llanguage-code Example: — /language-de Linux POA --language code --language de Windows POA llanguage-code The table below lists the valid language codes. Contact your local Novell sales office for information about language availability. Language Arabic Czechoslovakian Chinese-Simplified Chinese- Traditional Danish Dutch English-United States Finnish French-France German-Germany Hebrew Language Code AR CS CS CT DK NL US SU FR DE HE Language Hungarian Italian Japanese Korean Norwegian Polish Portuguese-Brazil Russian Spanish Swedish Turkish Language Code MA IT NI KR NO PL BR RU ES SV TR Ildapdisablepwdchg /idapipaddr Prevents GroupWise users from changing their LDAP passwords by using the Password dialog box in the Group Wise client. See “Enabling LDAP Authentication for a Post Office” on page 462. NetWare POA Linux POA Windows POA Syntax: /Idapdisablepwdchg --Idapdisablepwdchg Ildapdisablepwdchg See also /Idapipaddr, /Idapport, /Idapuser, /Idappwd, /Idapuserauthmethod, /Idapssl, /Idapsslkey, and /Idaptimeout. Specifies the LDAP server’s network address as either an IP address or a DNS hostname. You can specify multiple network addresses to provide failover capabilities for your LDAP servers. See “Specifying Failover LDAP Servers (Non-SSL Only)” on page 465. NetWare POA Linux POA Windows POA Syntax: Ildapipaddr-network address --Idapipaddr network address Ildapipaddr-network address Example: — /Idapipaddr-172.16.5.18 --Idapipaddr 172.16.5.19 /\dapipaddr-172.16.5.20 IIdapipaddr-server1 server2 --Idapipaddr server1 server2 /\dapipaddr-server1 server2 If you specify multiple LDAP servers, use a space between each address. When so configured, the POA tries to contact the first LDAP server in order to authenticate a user to GroupWise. If that LDAP server is down, the POA tries the next LDAP server in the list, and so on until it is able to authenticate. See also /Idapport, /Idapuser, /Idappwd, /Idapuserauthmethod, /Idapdisablepwdchg, /Idapssl, / Idapsslkey, and /Idaptimeout. Ildapippooln Specifies a pooled LDAP server’s network address as either an IP address or a DNS hostname. As many as five LDAP servers can participate together as a pool; therefore, n ranges from 1 to 5. See “Configuring a Pool of LDAP Servers” on page 464. NetWare POA Linux POA Windows POA Syntax: IIdapippooln-network_address --Idapippooln network address Mdapippooln-network address Example: /Idapippool1-172.16.5.18 --Idapippool1 172.16.5.18 Iidapippool1-172.16.5.18 IIdapippool2-server1 --Idapippool2 server? IIdapippool2-server1 IIdapippool3-172.16.5.19 --Idapippool3 172.16.5.19 IIdapippool3-172.16.5.19 See also /Idapportpooln, /Idapsslpooln, /Idapsslkeypooln, and /Idappoolresettime. Using POA Startup Switches 537 /idappoolresettime Specifies the number of minutes between the time when the POA receives an error response from a pooled LDAP server and the time when that LDAP server is reinstated into the pool of available LDAP servers. The default is 5 minutes; valid values range from 1 to 30. See “Configuring a Pool of LDAP Servers” on page 464. NetWare POA Linux POA Windows POA Syntax: IIdappoolresettime-minutes — --Idappoolresettime minutes /Idappoolresettime-minutes Example: /Idappoolresettime-10 --Idappoolresettime 20 IIdappoolresettime-30 See also /Idapippooln, /Idapportpooln, /Idapsslpooln, and /Idapsslkeypooln. Ildapport Specifies the port number that the LDAP server listens on for authentication. The default is 389. See “Providing LDAP Authentication for Group Wise Users” on page 461. NetWare POA Linux POA Windows POA Syntax: Ildapport-port number --Idapport port number Ildapport-port number Example: /Idapport-390 --Idapport 391 IIdapport-392 See also /Idapipaddr, /Idapuser, /Idappwd, /Idapuserauthmethod, /Idapdisablepwdchg, /ldapssl, / Idapsslkey, and /Idaptimeout. Ildapportpooln Specifies the port number that pooled LDAP server n listens on for authentication. The default is 389. See “Configuring a Pool of LDAP Servers” on page 464. NetWare POA Linux POA Windows POA Syntax: IIdapportpooln-port --Idapportpooln port /\dapportpooln-port Example: /Idapportpool2-390 --Idapportpool3 391 /\dapportpool4-392 See also /Idapippooln, /Idappoolresettime, /Idapsslpooln, and /Idapsslkeypooln. /idappwd Provides the password for the LDAP user that the POA uses to log in to the LDAP server. See “Providing LDAP Authentication for GroupWise Users” on page 461. NetWare POA Linux POA Windows POA Syntax: Ildappwd-LDAP password --ldappwd LDAP password = /ldappwd-LDAP. password 538 GroupWise 6.5 Administration Guide NetWare POA Linux POA Windows POA Example: —/Idappwd-gwidap --Idappwd gwldap Ildappwd-gwldap See also /Idapipaddr, /Idapport, /Idapuser, /Idapuserauthmethod, /Idapdisablepwdchg, /Idapssl, / Idapsslkey, and /Idaptimeout. /idapssl Indicates to the POA that the LDAP server it is logging in to is using SSL. See “Providing LDAP Authentication for GroupWise Users” on page 461. NetWare POA Linux POA Windows POA Syntax: /Idapssl --Idapssl /Idapssl See also /Idapipaddr, /Idapport, /Idapuser, /Idappwd, /Idapuserauthmethod, /Idapdisablepwdchg, / Idapsslkey and /Idaptimeout. /idapsslpooln Indicates to the POA that the pooled LDAP server it is logging in to is using SSL. See “Configuring a Pool of LDAP Servers” on page 464. NetWare POA Linux POA Windows POA Syntax: IIdapsslpooln --Idapssipooln IIdapsslIpooln Example: — /Ildapssipool2 --Idapssipool3 IIdapsslpool4 See also /Idapippooln, /Idapportpooln, /Idappoolresettime, and /Idapsslkeypooln. /idapsslkey Specifies the full path to the SSL key file used with LDAP authentication. See “Providing LDAP Authentication for GroupWise Users” on page 461. NetWare POA Linux POA Windows POA Syntax: /\dapsslkey-[svn][vol:]\din file --Idapsslkey /dir/file /\dapsslkey-[drive:]\dinfile Ildapssikey-MsvAvohdinfile dapssikey-\svñsharename\dinfile Example: /Idapssikey-\Idap\gwkey.der --Idapsslkey /certs/gwkey.der /Idapssikey-\Idap\gwkey.der /\dapssikey-server2\sys:\ldap\gwkey.der lIdapssikey-\\server2\sys\idap\gwkey.der /\dapssikey-m:\ldap\gwkey.der /\dapssikey-\\server2\c\ldap\gwkey.der See also /Idapipaddr, /Idapport, /Idapuser, /Idappwd, /Idapuserauthmethod, /Idapdisablepwdchg, / Idapssl and /Idaptimeout. Using POA Startup Switches 539 /Idapsslkeypooln Specifies the full path to the SSL key file used with pooled LDAP server n for authentication. See “Configuring a Pool of LDAP Servers” on page 464. NetWare POA Linux POA Windows POA Syntax: lIdapssikeypooln-[svAlvol:]\diñfile --ldapsslkeypooln-/dir/file /\dapsslkeypooln-[drive:]\dinfile Ildapssikeypooln-Msvnvohdirfile /\dapsslkeypooln-\\svAsharename\dinfile Example: /ldapssilkeypool4-\ldap\gwkey.der --Idapsslkeypool4 /certs/gwkey.der /Idapsslkeypool4-\ldap\gwkey.der IIdapsslkeypool4- /\dapsslkeypool4-m:\ldap\gwkey.der svr2\sys:\ldap\gwkey.der /\dapssikeypool4-\\svr2\c\ldap\gwkey.der IIdapsslkeypool4- \\svr2\sys\ldap\gwkey.der See also /Idapippooln, /Idapportpooln, /Idappoolresettime, and /Idapsslpooln. Ildaptimeout Specifies the number of seconds that the POA connection to the LDAP server can be idle before the POA drops the connection. The default is 30 seconds. See “Providing LDAP Authentication for GroupWise Users” on page 461. NetWare POA Linux POA Windows POA Syntax: IIdaptimeout-seconds --Idaptimeout seconds IIdaptimeout-seconds Example: — /Idaptimeout-60 --Idaptimeout 70 IIdaptimeout-80 See also /Idapipaddr, /Idapport, /Idapuser, /Idappwd, /Idapuserauthmethod, /Idapdisablepwdchg, / Idapssl, and /Idapssikey. /idapuser Specifies the username that the POA can use to log in to the LDAP server in order to authenticate GroupWise client users. See “Providing LDAP Authentication for GroupWise Users” on page 461. NetWare POA Linux POA Windows POA Syntax: /\dapuser-LDAP_user_ID --Idapuser LDAP user ID Ildapuser-LDAP user ID Example: —/Idapuser-GWAuth --Idapuser GWAuth IIdapuser-GWAuth See also /Idapipaddr, /Idapport, /Idappwd, /Idapuserauthmethod, /Idapdisablepwdchg, /Idapssl, and /Idapsslkey, and /Idaptimeout. 540 = GroupWise 6.5 Administration Guide /idapuserauthmethod Specifies the LDAP user authentication method you want the POA to use when accessing an LDAP server. Valid settings are bind and compare. See “Providing LDAP Authentication for GroupWise Users” on page 461. NetWare POA Linux POA Windows POA Syntax: /\dapuserauthmethod-method --Idapuserauthmethod method IIdapuserauthmethod-method Example: —/Idapuserauthmethod-bind --Idapuserauthmethod bind /ldapuserauthmethod-compare See also /Idapuser, /Idapipaddr, /Idapport, /Idappwd, /Idapdisablepwdchg, /Idapssl, and / Idapsslkey, and /Idaptimeout. Ilockoutresetinterval Specifies the length of time the user login is disabled after lockout. The default is 30 minutes; the minimum setting is 15; there is no maximum setting. The login can also be manually re-enabled in ConsoleOne in the Group Wise Account page of the User object. If /lockoutresetinterval is set to 0 (zero), the login must be re-enabled manually through ConsoleOne. See “Enabling Intruder Detection” on page 465. NetWare POA Linux POA Windows POA Syntax: Mockoutresetinterval-minutes --lockoutresetinterval minutes /lockoutresetinterval-minutes Example: /lockoutresetinterval-15 --lockoutresetinterval 60 /lockoutresetinterval-90 See also /intruderlockout, /incorrectloginattempts, and /attemptsresetinterval. llog Specifies the directory where the POA stores its log files. On NetWare and Windows, the default location is the post_office\wpcsout\ofs directory. On Linux, the default location is the /var/log/ novell/groupwise/post office name.poa directory. See “Using POA Log Files” on page 497. NetWare POA Linux POA Windows POA Syntax: llog-[svAlvor:]\dir --log /dir llog-[drive:]\dir /log-\\svñvofdir llog-\svnsharename\dir Example: — /log-tagtilog --log /gwsystem/logs /log-\agt\log /log-\\server2\mail:\agt\log /log-m:\agt\log /log-\\server2\mail\agt\log /log-\\server2\c\mail\agt\log Typically you would find multiple log files in the specified directory. The first 4 characters represent the date. The next 3 characters identify the agent. A three-digit extension allows for multiple log files created on the same day. For example, a log file named 0518poa.001 would indicate that it is a POA log file, created on May 18. If you restarted the POA on the same day, a new log file would be started, named 0518poa.002. See also /loglevel, /logdiskoff, /logdays, and /logmax. Using POA Startup Switches 541 llogdays /logdiskoff Iloglevel llogmax Specifies how many days to keep POA log files on disk. The default is 7 days. See “Using POA Log Files” on page 497. NetWare POA Linux POA Windows POA Syntax: llogdays-days --logdays days llogdays-days Example: /logdays-5 --logdays 10 llogdays-14 See also /log, /loglevel, /logdiskoff, and /logmax. Turns off disk logging for the POA so no information about the functioning of the POA is stored on disk. The default is for logging to be turned on. See “Using POA Log Files” on page 497. NetWare POA Linux POA Windows POA Syntax: Hlogdiskoff --logdiskoff Hlogdiskoff See also /loglevel. Controls the amount of information logged by the POA. Logged information is displayed in the log message box and written to the POA log file during the current agent session. The default is Normal, which displays only the essential information suitable for a smoothly running POA. Use Verbose to display the essential information, plus additional information helpful for troubleshooting. Verbose logging does not degrade POA performance, but log files saved to disk consume more disk space when verbose logging is in use. See “Using POA Log Files” on page 497. NetWare POA Linux POA Windows POA Syntax: Moglevel-level/ --loglevel level Moglevel-level/ Example: /loglevel-verbose --loglevel verbose /loglevel-verbose See also /log, /logdiskoff, /logdays, and /logmax. Sets the maximum amount of disk space for all POA log files. When the specified disk space is consumed, the POA deletes existing log files, starting with the oldest. The default is 65536 KB. See “Using POA Log Files” on page 497. 542 GroupWise 6.5 Administration Guide NetWare POA Linux POA Windows POA Syntax: /logmax-kilobytes --logmax kilobytes Nogmax-kilobytes Example: /logmax-32000 --logmax 130000 /logmax-16000 See also /log, /loglevel, /logdiskoff, and /logdays. /maxappconns Sets the maximum number of application connections allowed between the POA and the GroupWise clients run by GroupWise users. The default maximum number of application connections is 2048. See “Adjusting the Number of Connections for Client/Server Processing” on page 508. NetWare POA Linux POA Windows POA Syntax: /maxappconns-number --maxappconns number /maxappconns-number Example: /maxappconns-3072 --maxappconns 4096 /maxappconns-5120 See also /maxphysconns. /maxphysconns Sets the maximum number of physical TCP/IP connections allowed between the POA and the GroupWise clients run by GroupWise users. The default maximum number of physical connections is 1024. See “Adjusting the Number of Connections for Client/Server Processing” on page 508. NetWare POA Linux POA Windows POA Syntax: /maxphysconns-number --maxphysconns number /maxphysconns-number Example: /maxphysconns-2048 --maxphysconns 4096 /maxphysconns-5120 See also /maxappconns. /msgtranssl Sets the availability of secure SSL communication between the POA and its MTA. Valid settings are enabled and disabled. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. NetWare POA Linux POA Windows POA Syntax: /msgtranssl-setting --msgtranssl setting /msgtranssl-setting Example: /msgtranssl-enabled --msgtranssl enabled /msgtranssl-enabled See also /certfile, /keyfile and /keypassword. Using POA Startup Switches 543 Imtpinipaddr Specifies the network address of the server where the POA runs, as either an IP address or a DNS hostname. See “Using TCP/IP Links between the Post Office and the Domain” on page 443. NetWare POA Linux POA Windows POA Syntax: Imtpinipaddr-network addr --mtpinipaddr network addr /mtpinipaddr-network addr Example: /mtpinipaddr-172.16.5.18 --mtpinipaddr 172.16.5.19 /mtpinipaddr-172.16.5.20 /mtpinipaddr-server1 --mtpinipaddr server2 /mtpinipaddr-server3 See also /mtpinport, /mtpoutipaddr, /mtpoutport, /mtpsendmax, and /nomtp. /mtpinport Sets the message transfer port number the POA listens on for messages from the MTA. The default is 7101. See “Using TCP/IP Links between the Post Office and the Domain” on page 443. NetWare POA Linux POA Windows POA Syntax: /mtpinport-port_number --mtpinport port_number /mtpinport-port_number Example: /mtpinport-7201 --mtpinport 7202 /mtpinport-7203 See also /mtpinipaddr, /mtpoutipaddr, /mtpoutport, /mtpsendmax, and /nomtp. /mtpoutipaddr Specifies the network address of the server where the MTA for the domain runs, as either an IP address or a DNS hostname. See “Using TCP/IP Links between the Post Office and the Domain” on page 443. NetWare POA Linux POA Windows POA Syntax: Imtpoutipaddr-network address --mtpoutipaddr network address Imtpoutipaddr-network address Example: /mtpoutipaddr-172.16.5.18 --mtpoutipaddr 172.16.5.19 /mtpoutipaddr-172.16.5.19 /mtpoutipaddr-server2 --mtpoutipaddr server3 /mtpoutipaddr-server4 See also /mtpinipaddr, /mtpinport, /mtpoutport, /mtpsendmax, and /nomtp. /mtpoutport Specifies the message transfer port number the MTA listens on for messages from the POA. The default is 7100. See “Using TCP/IP Links between the Post Office and the Domain” on page 443. 544 = GroupWise 6.5 Administration Guide NetWare POA Linux POA Windows POA Syntax: Imtpoutport-port number --mtpoutport port number Imtpoutport-port number Example: /mtpoutport-7200 --mtpoutport 7300 /mtpoutport-7400 See also /mtpinipaddr, /mtpinport, /mtpoutipaddr, /mtpsendmax, and /nomtp. Imtpsendmax Sets the maximum size in megabytes for messages being sent outside the post office. By default, messages of any size can be transferred to the MTA. See “Restricting Message Size between Post Offices” on page 455. NetWare POA Linux POA Windows POA Syntax: /mtpsendmax-megabytes --mtpsendmax megabytes /mtpsendmax-megabytes Example: /mtpsendmax-2 --mtpsendmax 4 /mtpsendmax-6 See also /mtpinipaddr, /mtpinport, /mtpoutipaddr, /mtpoutport, and /nomtp. Iname Specifies the object name of the POA object in the post office. If you have multiple POAs configured for the same post office, you must use this switch to specify which POA configuration to use when the POA starts. Several useful configurations include multiple POAs for a single post office, as described in the following sections: + “Configuring a Dedicated Client/Server POA” on page 510 + “Configuring a Dedicated Message File Processing POA” on page 513 + “Configuring a Dedicated Indexing POA” on page 516 + “Configuring a Dedicated Database Maintenance POA” on page 518 NetWare POA Linux POA Windows POA Syntax: /name-object_name --name object_name /name-object_name Example: /name-POA2 --name POA2 /name-POA2 Inoada Disables the POA admin thread. For an explanation of the POA admin thread, see “POA Admin Thread Status Box” on page 478. The POA admin thread must run for at least one POA for each post office. However, it can be disabled for POAs with specialized functioning where the database update and repair activities of the POA admin thread could interfere with other, more urgent processing. Using POA Startup Switches 545 NetWare POA Linux POA Windows POA Syntax: /noada --noada /noada Historical Note: In GroupWise 5.2 and earlier, a separate agent, the Administration Agent (ADA), handled the functions now consolidated into the POA admin thread. Hence the switch name, / noada. Inocache Disables database caching. The default is for caching to be turned on. Use this switch if you are running NFS or if your backup system cannot back up open files. NetWare POA Linux POA Windows POA Syntax: Inocache --nocache Inocache Inoconfig Ignores any configuration information provided for the POA in ConsoleOne and uses only settings from the POA startup file. The default is for the POA to use the information provided in ConsoleOne, overridden as needed by settings provided in the startup file or on the command line. NetWare POA Linux POA Windows POA Syntax: /noconfig --noconfig Inoconfig Inoerrormail Prevents problem files from being sent to the GroupWise administrator. The default is for error mail to be sent to the administrator. See “Notifying the Group Wise Administrator” on page 503. NetWare POA Linux POA Windows POA Syntax: /noerrormail --noerrormail /noerrormail Inogwchk Turns off Mailbox/Library Maintenance processing for the POA. The default is for the POA to perform Mailbox/Library Maintenance tasks requested from ConsoleOne and configured as POA scheduled events. NetWare POA Linux POA Windows POA Syntax: /nogwchk --nogwchk /nogwchk See also /gwchkthreads. 546 GroupWise 6.5 Administration Guide Inomf Inomfhigh Inomflow Inomtp Turns off all message file processing for the POA. The default is for the POA to process all message files. Two specialized configurations that require turning off message files are described in “Configuring a Dedicated Client/Server POA” on page 510 and “Configuring a Dedicated Indexing POA” on page 516. NetWare POA Linux POA Windows POA Syntax: /nomf --nomf Inomf See also /nomfhigh and /nomflow. Turns off processing high priority messages files (message queues 0 and 1). For information about message queues, see “Post Office Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. NetWare POA Linux POA Windows POA Syntax: /nomfhigh --nomfhigh Inomfhigh See also /nomf and /nomflow. Turns off processing lower priority messages files (message queues 2 through 7). For information about message queues, see “Post Office Directory” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. NetWare POA Linux POA Windows POA Syntax: /nomflow --nomflow Inomflow See also /nomf and /nomfhigh. Disables Message Transfer Protocol, so that a TCP/IP link cannot be used between the POA and the MTA. See “Changing the Link Protocol between the Post Office and the Domain” on page 442. NetWare POA Linux POA Windows POA Syntax: /nomtp --nomtp /nomtp See also /mtpinipaddr, /mtpinport, /mtpoutipaddr, /mtpoutport, and /mtpsendmax. Using POA Startup Switches 547 Inonuu Inogf Inordab Inorecover Disables nightly user upkeep. See “Performing Nightly User Upkeep” on page 472. NetWare POA Linux POA Windows POA Syntax: /nonuu --nonuu /nonuu See also /nuuoffset. Disables the periodic QuickFinder™ indexing done by the POA. The default is for periodic indexing to be turned on. See “Regulating Indexing” on page 514. NetWare POA Linux POA Windows POA Syntax: /noqf --nogf /noaf See also /qfinterval, /qfintervalinminute, /qfbaseoffset, and /qfbaseoffsetinminute. Disables daily generation of the system Address Book for Remote users. See “Performing Nightly User Upkeep” on page 472. NetWare POA Linux POA Windows POA Syntax: /nordab --nordab /nordab See also /rdaboffset. Disables automatic database recovery. The default is for automatic database recovery to be turned on. If the POA detects a problem with a database, when automatic database recovery has been turned off, the POA notifies the administrator, but it does not recover the problem database. The administrator can then recover or rebuild the database as needed. See Chapter 26, “Maintaining Domain and Post Office Databases,” on page 345. Two specialized configurations that require turning off automatic database recovery are described in “Configuring a Dedicated Client/Server POA” on page 510 and “Configuring a Dedicated Indexing POA” on page 516. NetWare POA Linux POA Windows POA Syntax: /norecover --norecover /norecover 548 GroupWise 6.5 Administration Guide Inosnmp Disables SNMP for the POA. The default is to have SNMP enabled. See “Using SNMP Monitoring Programs” on page 490. NetWare POA Linux POA Windows POA Syntax: /nosnmp --nosnmp /nosnmp Inotcpip Disables TCP/IP communication for the POA. The default is to have TCP/IP communication enabled. Use this switch if you do not want this POA to communicate with Group Wise clients using TCP/IP. NetWare POA Linux POA Windows POA Syntax: /notcpip --notcpip /notcpip Two specialized configurations that require turning off automatic database recovery are described in “Configuring a Dedicated Message File Processing POA” on page 513 and “Configuring a Dedicated Indexing POA” on page 516. /nuuoffset Specifies the number of hours after midnight for the POA to start performing user upkeep. The default is 1 hour; valid values range from 0 to 23. See “Performing Nightly User Upkeep” on page 472. NetWare POA Linux POA Windows POA Syntax: /nuuoffset-hours --nuuoffset hours /nuuoffset-hours Example: /nuuoffset-2 --nuuoffset 3 /nuuoffset-4 See also /nonuu. [password Provides the password for the POA to use when accessing post offices or document storage areas on remote servers. You can also provide user and password information on the Post Office Settings page in ConsoleOne. See “Starting the POA” on page 431. NetWare POA Linux POA Windows POA Syntax: /password-NetWare_password --password network_password /password-network_password Example: —/password-GWise --password GWise /password-GWise See also /user and /dn. Using POA Startup Switches 549 /port Sets the TCP port number used for the POA to communicate with GroupWise clients in client/ server access mode. The default is 1677. See “Using Client/Server Access to the Post Office” on page 447. NetWare POA Linux POA Windows POA Syntax: /port-port_number --port port_number /port-port_number Example: /port-1678 --port 1679 /port-1680 See also /ip. /primingmax Sets the maximum number of TCP handler threads that POA can use for priming users’ Caching mailboxes. The default is 20 per cent. See “Supporting Forced Mailbox Caching” on page 454. NetWare POA Linux POA Windows POA Syntax: /primingmax-percentage --primingmax percentage /primingmax-percentage Example: /primingmax-40 --primingmax 50 /primingmax-60 See also /tcpthreads. lgfbaseoffset Specifies the number of hours after midnight for the POA to start its indexing cycle as specified by the /qfinterval or /gfintervalinminute switch. The default is 20 hours (meaning at 8:00 p.m.); valid values range from 0 to 23. See “Regulating Indexing” on page 514. NetWare POA Linux POA Windows POA Syntax: lgfbaseoffset-hours --gfbaseoffset hours /qfbaseoffset-hours Example: /qfbaseoffset-1 --qfbaseoffset 2 lgfbaseoffset-3 See also /qfbaseoffsetinminute, /qfinterval, /gfintervalinminute, and /nogf. lgfbaseoffsetinminute Specifies the number of minutes after midnight for the POA to start its indexing cycle as specified by the /qfinterval or /qfintervalinminute switch. The default is 20 hours (1200 minutes, meaning at 8:00 p.m.). The maximum setting is 1440 (24 hours). See “Regulating Indexing” on page 514. NetWare POA Linux POA Windows POA Syntax: lgfbaseoffsetinminute-minutes --qfbaseoffsetinminute minutes /qfbaseoffsetinminute-minutes 550 GroupWise 6.5 Administration Guide NetWare POA Linux POA Windows POA Example: /qfbaseoffset-30 --qfbaseoffset 45 lgfbaseoffset-90 See also /qfbaseoffset, /qfinterval, /qfintervalinminute, and /nogf. lafinterval Specifies the interval in hours for the POA to update the QuickFinder indexes in the post office. The default is 24 hours. See “Regulating Indexing” on page 514. NetWare POA Linux POA Windows POA Syntax: /qfinterval-hours --qfinterval-hours /qfinterval-hours Example: /afinterval-12 --gfinterval-6 /qfinterval-2 See also /gfbaseoffset, /gfbaseoffsetinminute, /qfintervalinminute, and /nogf. /qfintervalinminute Specifies the interval in minutes for the POA to update the QuickFinder indexes in the post office. The default is 24 hours (1440 minutes). See “Regulating Indexing” on page 514. NetWare POA Linux POA Windows POA Syntax: /qfintervalinminute-minutes — --gfintervalinminute minutes /afintervalinminute-minutes Example: /qfintervalinminute-90 --gfintervalinminute 30 /qfintervalinminute-120 See also /gfinterval, /qfbaseoffset, /gfbaseoffsetinminute, and /nogf. Irdaboffset Specifies the number of hours after midnight for the POA to generate the daily copy of the system Address Book for Remote users. The default is 0; valid values range from 0 to 23. See “Performing Nightly User Upkeep” on page 472. NetWare POA Linux POA Windows POA Syntax: /rdaboffset-hours --rdaboffset hours /rdaboffset-hours Example: /rdaboffset-2 --rdaboffset 3 /rdaboffset-4 See also /nordab. Using POA Startup Switches 551 Irights Isleep Itcpthreads Ithreads Verifies that the POA has the required network rights or permissions to all directories where it needs access in the post office directory. When started with this switch, the POA lists directories it is checking, which can be a lengthy process. Use this switch on an as needed basis, not in the POA startup file. Ifthe POA encounters inadeguate rights or permissions, it indicates the problem and shuts down. NetWare POA Linux POA Windows POA Syntax: rights --rights [rights Sets how long NetWare POA threads remain dormant when the CPU utilization threshold has been exceeded. The default is 100 milliseconds. See “Optimizing CPU Utilization for the NetWare POA” on page 520. NetWare POA Linux POA Windows POA Syntax: /sleep-milliseconds N/A N/A Example: — /sleep-300 N/A N/A See also /cpu. Specifies the maximum number of TCP handler threads the POA can create to service client/server reguests. The default is 6; valid values range from 1 to 99. Plan on about one TCP handler thread per 20-30 client/server users. See “Adjusting the Number of POA Threads for Client/Server Processing” on page 507. NetWare POA Linux POA Windows POA Syntax: /tcpthreads-number --tcpthreads number /tcpthreads-number Example: /tcpthreads-10 --tcpthreads 20 /tcpthreads-20 See also /primingmax. Specifies the maximum number of message handler threads the POA can create. The default is 8; valid values range from 1 to 30. See “Adjusting the Number of POA Threads for Message File Processing” on page 512. 552 GroupWise 6.5 Administration Guide /user NetWare POA Linux POA Windows POA Syntax: /threads-number --threads number /threads-number Example: /threads-10 --threads 20 /threads-30 Provides the network user ID for the POA to use when accessing post offices and/or document storage areas on remote servers. You can also provide user and password information on the Post Office Settings page in ConsoleOne. For the NetWare POA, see “Creating a NetWare Account for Agent Access (Optional)” in “Installing GroupWise Agents” in the GroupWise 6.5 Installation Guide. NetWare POA Linux POA Windows POA Syntax: /user-eDirectory_user_ID --user Linux user ID luser-Windows user ID Example: —/user-GWAgents --user GWAgents luser-GWAgents See also /password and /dn. NetWare Note: The eDirectory user ID is a user that the POA can use to log in to the remote NetWare server. Linux Note: On OES Linux, the Linux user ID is a LUM-enabled user that the POA can use to log in to the remote OES Linux server. On SLES Linux, it is a standard Linux user. Windows Note: The Windows user ID is a user that the POA can use to log in to the remote Windows server. The Windows POA gains access to the post office directory when it starts. However, a particular user might attempt to access a remote document storage area to which the POA does not yet have a drive mapping available. By default, the POA attempts to map a drive using the same user ID and password it used to access the post office directory. Ifthe user ID and password for the remote storage area are different from the post office, then use the /user and / password switches to specify the needed user ID and password. You can also provide user and password information on the Post Office Settings page in ConsoleOne. However, it is preferable to use the same user ID and password on all servers where the POA needs access. Using POA Startup Switches 553 554 GroupWise 6.5 Administration Guide Message Transfer Agent Chapter 41, “Understanding Message Transfer between Domains and Post Offices,” on page 557 Chapter 42, “Installing and Starting the MTA,” on page 565 Chapter 43, “Configuring the MTA,” on page 575 Chapter 44, “Monitoring the MTA,” on page 605 Chapter 45, “Optimizing the MTA,” on page 635 Chapter 46, “Using MTA Startup Switches,” on page 643 Message Transfer Agent 555 556 GroupWise 6.5 Administration Guide Understanding Message Transfer between Domains and Post Offices A domain organizes post offices into a logical grouping for addressing, routing, and administration purposes in your GroupWise? system. Messages are transferred between post offices and domains by the Message Transfer Agent (MTA). The following topics help you understand domains and the functions of the MTA: + “Domain Representation in ConsoleOne” on page 557 + “Domain Directory Structure” on page 558 + “Information Stored in the Domain” on page 558 + “Role of the Message Transfer Agent” on page 559 + “Link Configuration between Domains and Post Offices” on page 560 + “Message Flow between Domains and Post Offices” on page 560 + “Cross-Platform Issues between Domains and Post Offices” on page 561 Domain Representation in ConsoleOne In ConsoleOne*, domains are container objects that contain an MTA object, as well as other domain-related objects, as shown below: KR novell ConsoleOne E -(0/ xj File Edit View Tools Help és Corporate af a- GroupWise &-@R Accounting E BA Development E qQ Manufacturing Console View IMTA 8 GroupWiseProvider g LDAPProvider E GroupWiseWebAccess [i NovellSpeller AP GUIA AP WEBACB5A f Statistics — ap Er Processini l a nue 9 Total Closed | | Routed Domains 2 D Undeliverable 0 0 Post Offices 2 D Errors D 0 | Gateways 2 0 04-16 09:43:52 DIS: MTA configuration loaded 04-16 15:51:05 DIS: MTA restart in progress 04-16 15:51:05 DIS: No configuration changes detected 04-16 15:51:05 DIS: MTA restart request ignored A Ifthe NetWare MTA agent console does not appear, see “Message Transfer Agent Problems” in Group Wise 6.5 Troubleshooting 2: Solutions to Common Problems. When you start the NetWare MTA as described above, it is configured according to the MTA settings specified in ConsoleOne®. You can go to ConsoleOne and modify MTA functioning as needed. See “Configuring the MTA in ConsoleOne” on page 577. Another way to start the NetWare MTA is to use a startup file. You could use a startup file with the NetWare MTA for the following reasons: + Overriding MTA settings defined in ConsoleOne + Controlling the MTA locally without using ConsoleOne + Adjusting specialized MTA functions that are not controllable from ConsoleOne When you run the Agent Installation program, an initial MTA startup file is created in the agent installation directory. It is named using the first 8 characters of the domain name with a .mta extension. This initial startup file includes the /home startup switch set to the location of the domain directory. If the domain or any or its post offices are located on a different server from where the NetWare MTA is running, you must edit the startup file and provide settings for the /user and /password switches so the NetWare MTA can log in to those servers. For an alternative to direct access for post offices, see “Using TCP/IP Links between a Domain and its Post Offices” on page 583. For an alternative to direct access for other domains, see “Using TCP/IP Links between Domains” on page 579. If the domain serviced by the NetWare MTA is located on a different server from where the NetWare MTA is running, use the /work switch to specify a local directory for the MTA holding queues. The default location is the domain directory, which is not appropriate when the domain is located on a different server from where the NetWare MTA is running. Installing and Starting the MTA 569 The MTA startup file can be modified to use other startup switches as needed. Startup switches specified on the command line override those in the startup file. Startup switches in the startup file override corresponding settings in ConsoleOne. See Chapter 46, “Using MTA Startup Switches,” on page 643. When you use a startup file, you must include it on the command line when you load the NetWare MTA. For example: Syntax: load gwmta.nlm @MTA startup file Example: load gwmta.nlm @provo2.mta In addition to the initial MTA startup file, the Agent Installation program also provides a grpwise.ncf file to load the agents. If you will run only the NetWare MTA, you should edit the grpwise.ncf file to remove the command to load the POA. Automatically in the autoexec.ncf File After the NetWare MTA is running smoothly, you should modify the NetWare startup file, autoexec.ncf, to load the NetWare MTA and required NLM programs automatically whenever you restart the server IMPORTANT: If you are running the MTA in a Novell cluster, see “Configuring the GroupWise Volume Resource to Load and Unload the Agents” in “Novell Cluster Services” in the GroupWise 6.5 Interoperability Guide for alternative instructions. 1 Edit the autoexec.ncf file in the NetWare sys:\system directory. 2 Add the following command to load the agents: grpwise.ncf Or To start the agents in protected mode, add the following command: protect grpwise.ncf 3 Save the autoexec.ncf file. 4 If possible, restart the server to verify that the NLM programs and the NetWare MTA are loading properly. Starting the Linux MTA You can start the Linux MTA in several ways: + “Manually with a User Interface” on page 570 + “Manually As a Daemon” on page 571 + “Automatically at System Startup” on page 571 Manually with a User Interface 570 1 Make sure you are logged in as root. 2 Change to the Group Wise agent bin directory. cd /opt/novell/groupwise/agents/bin 3 Enter the following command to start the MTA: GroupWise 6.5 Administration Guide Syntax: ./gwmta --show --home domain directory & Example: ./gwmta --show --home /gwsystem/domlnx & The MTA startup file is created by the Installation Advisor in the /opt/novell/groupwise/agents/ share directory and is named after the domain that the MTA services. Because the Installation Advisor prompted you for the domain name and directory, it can set the --home startup switch in the MTA startup file. In the bin directory where the MTA executable is located, you could start the MTA with a command similar to the following example: ./gwmta --show @../share/lnxdom.poa Manually As a Daemon 1 Make sure you are logged in as root. 2 Change to the /etc/init.d directory. 3 To start the Linux MTA (and perhaps the POA as well, depending on the configuration of the server), enter the following command: ./grpwise start 4 To confirm that the agents have started, enter the following command: ps -eaf | grep gw This lists all GroupWise agent process IDs. Automatically at System Startup If you selected Launch GroupWise Agents on System Startup in the Agent Installation program, the Agent Installation program configured your system so that the agents would start automatically each time you restart your server. The Agent Installation program always creates a grpwise startup script in /etc/init.d for starting the agents. To enable automatic startup, the Agent Installation program also creates symbolic links named S99grpwise in the rc3.d and rc5.d directories so that the agents load on restart into level 3 or 5, depending on the configuration of your Linux system. When the grpwise script runs and starts the agents, it reads the agent startup files in /opt/novell/ groupwise/agents/share to check for configuration information provided by startup switches. Because the --show switch cannot be used inthe startup files, the agents never run with agent console interfaces when started automatically when the server restarts. During agent installation, if you specified only a domain and no post offices, only an MTA startup file was created and the grpwise startup script starts only the MTA. Starting the Windows MTA You can start the Windows MTA in several ways: + “Manually from the Windows Desktop” on page 572 + “With a Startup File” on page 572 + “Automatically in the Windows Startup Group” on page 572 + “Automatically as a Windows Service” on page 572 Installing and Starting the MTA 571 Manually from the Windows Desktop With a Startup File In Windows, click Start > Programs > Group Wise Agents, then start the Windows MTA. The Windows MTA agent console should appear and display normal startup status messages. See Chapter 44, “Monitoring the MTA,” on page 605. Ifthe Windows MTA agent console does not appear, see “Message Transfer Agent Problems” in Group Wise 6.5 Troubleshooting 2: Solutions to Common Problems. When you start the Windows MTA as described above, it is configured according to the MTA settings specified in ConsoleOne. You can go to ConsoleOne and modify MTA functioning as needed. See “Configuring the MTA in ConsoleOne” on page 577. Another way to start the Windows MTA is to use a startup file. You could use a startup file to configure the MTA for the following reasons: + Overriding MTA settings defined in ConsoleOne + Controlling the MTA locally without using ConsoleOne + Adjusting specialized MTA functions that are not controllable from ConsoleOne When you run the Agent Installation program, an initial MTA startup file is created in the agent installation directory. It is named using the first 8 characters of the domain name with a .mta extension. This initial startup file includes the /home startup switch set to the location of the domain directory. The MTA startup file can be modified to use other startup switches as needed. Startup switches in the startup file override corresponding settings in ConsoleOne. See Chapter 46, “Using MTA Startup Switches,” on page 643. Automatically in the Windows Startup Group After the Windows MTA is running smoothly, you should add it to the Windows Startup group to start the Windows MTA automatically whenever you restart your Windows server. 1 In Windows NT, click Start > Settings > Taskbar > Start Menu Programs > Add. Or In Windows 2000, click Start > Settings > Taskbar £ Start Menu > Advanced > Add. 2 Browse to the directory where you installed the Windows MTA. 3 Double-click GWMTA.EXE, then add the startup file to the command line. Example: gwmta.exe @provo2.mta 4 Click Next. 5 Select the Startup folder, provide a name for the shortcut, then click Finish. 6 If possible, restart the server to verify that the Windows MTA starts when you log in. Automatically as a Windows Service To start the GroupWise Windows MTA as a service for the first time after installation: 1 Fromthe Windows desktop, click Start > Settings > Control Panel. 572 GroupWise 6.5 Administration Guide 2 Double-click Services, select the MTA service (named after the domain), then click Start. To make sure the MTA starts automatically each time you restart the server: 1 Click Start > Settings > Control Panel. 2 Double-click Services, select the MTA service (named after the domain), then click Startup. 3 Select Automatic, then click OK. Thereafter, you will be able to manage the Windows agents just as you would any other services. Uninstalling the MTA Software If you move the MTA to a different server, you can uninstall the POA software from the old location to regain disk space as long as the MTA is not running on the server. Select the platform where you have been running the MTA: + “Uninstalling the NetWare or Windows MTA” on page 573 + “Uninstalling the Linux MTA” on page 573 Uninstalling the NetWare or Windows MTA 1 Stop the MTA. 2 Run install.exe in the \agents subdirectory of the GroupWise software distribution directory or GroupWise 6.5 Administrator CD. 3 In the Install/Uninstall dialog box, click Uninstall to remove the MTA software from the server. Windows Note: Ifthe Windows MTA was running as a service, the Agent Installation program removes the service, registry entry, and Start menu icon from Windows. Uninstalling the Linux MTA 1 Make sure you are logged in as root. 2 Stop the MTA. 3 Enter the following command to determine the specific version of the MTA that is running on the server: rpm -ga | grep groupwise 4 Enter the following command to uninstall the MTA: rpm -e novell-groupwise-agents-version-date where version is the version number (for example, 6.5.1) and date is the is the date when the agent RPM was created (for example, 0428 for April 28). This process removes all files and directories associated with the MTA. Installing and Starting the MTA 573 574 GroupWise 6.5 Administration Guide Configuring the MTA As your GroupWise” system grows and evolves, you will probably need to modify MTA configuration to meet changing system needs. The following topics help you configure the MTA: + “Performing Basic MTA Configuration” on page 575 + “Configuring User Access through the Domain” on page 588 + “Configuring Specialized Routing” on page 591 + “Configuring Domain Maintenance” on page 598 Creating an MTA Object in eDirectory Configuring the MTA in ConsoleOne Changing the Link Protocol between Domains Changing the Link Protocol between a Domain and Its Post Offices Moving the MTA to a Different Server Adjusting the MTA for a New Location of a Domain or Post Office Adjusting the MTA Logging Level and Other Log Settings Restricting Message Size between Domains Enabling Live Remote Enhancing Domain Security with SSL Connections to the MTA Using Routing Domains Scheduling Direct Domain Links Using a Transfer Pull Configuration Using eDirectory User Synchronization Enabling MTA Message Logging Performing Basic MTA Configuration MTA configuration information is stored as properties of its MTA object in eDirectory. The following topics help you modify the MTA object in ConsoleOne and change MTA configuration to meet changing system configurations: + “Creating an MTA Object in eDirectory” on page 575 + “Configuring the MTA in ConsoleOne” on page 577 + “Changing the Link Protocol between Domains” on page 579 + “Changing the Link Protocol between a Domain and Its Post Offices” on page 583 + “Moving the MTA to a Different Server” on page 586 + “Adjusting the MTA for a New Location of a Domain or Post Office” on page 587 Creating an MTA Object in eDirectory When you create a new domain, an MTA object is automatically created for it. If the original MTA object for a domain gets accidently deleted, you can create a new one for it. Do not attempt to create more than one MTA object for a domain. Configuring the MTA 575 To create a new MTA object in Novell® eDirectory™: 1 In ConsoleOne®, browse to and right-click the Domain object for which you need to create an MTA object, then click New. 2 Double-click GroupWise Agent to display the Create GroupWise Agent dialog box. Käi Create GroupWise Agent E x Agent Name: Cx] oe Cancel Message Transfer Help Define additional properties E Create another agent 3 Type a unique name for the new MTA. The name can include as many as 8 characters. Do not use any of the following invalid characters in the name: ASCII characters 0-13 Comma , Asterisk * Double quote " At sign @ Extended characters Braces { } Parentheses ( ) Colon : Period . The Type field is automatically set to Message Transfer. 4 Select Define Additional Properties. 5 Click OK. The MTA object is automatically placed within the Domain object. 6 Review the information displayed for the first four fields on the Identification page to ensure that you are creating the correct type of Agent object in the correct location. RIT i= x || NDS Rights + | Other | Rights to Files and Folders | i Domain: Provo1 Distinguished Name: MTA.Provo1.GroupWise Name: MTA Agent Type: Message Transfer Description: GroupWise Message Transfer Agent Platform: |NetWareLoadableModule >| Page Options... | 0 Cancel | Apply. | Help 576 GroupWise 6.5 Administration Guide 7 In the Description field, type one or more lines of text describing the MTA. This description will display on the MTA agent console as the MTA runs. If multiple administrators work at the server where the MTA will run, the description could include a note about who to contact before stopping the MTA. When running multiple MTAs on the same server, the description should uniquely identify each one. See Chapter 44, “Monitoring the MTA,” on page 605. 8 In the Platform field, select the platform (NetWare Loadable Module or Windows) where the MTA will run. 9 Continue with “Configuring the MTA in ConsoleOne” on page 577. Configuring the MTA in ConsoleOne The advantage to configuring the MTA in ConsoleOne, as opposed to using startup switches in an MTA startup file, is that the MTA configuration settings are stored in eDirectory. 1 In ConsoleOne, expand the eDirectory container where the Domain object is located. 2 Expand the Domain object. 3 Right-click the MTA object, then click Properties. x IDS Rights ~ | Other | Rights to Files and Folders | Domain: Provo1 Distinguished Name: MTA.Provo1.GroupWise Name: MTA Agent Type: Message Transfer Description: GroupWise Message Transfer Agent Platform: NetWare Loadable Module y Page Options... Cancel Help The table below summarizes the MTA configuration settings in the MTA object properties pages and how they correspond to MTA startup switches (as described in Chapter 46, “Using MTA Startup Switches,” on page 643): ConsoleOne Properties Pages and Corresponding Tasks and Startup Switches Settings Information Page Configuring the MTA 577 ConsoleOne Properties Pages and Settings Domain Distinguished Name Name Type Description Platform Agent Settings Page Scan Cycle Scan High Attach Retry Enable Automatic Database Recovery Use 2nd High Priority Scanner Use 2nd Mail Priority Scanner SNMP Community "Get" String HTTP User Name HTTP Password Network Address Page TCP/IP Address IPX/SPX Address Message Transfer HTTP Log Settings Page Log File Path Logging Level Max Log File Age Max Log Disk Space Message Log Settings Page Message Logging Level Message Log File Path Scheduled Events Page eDirectory User Synchronization Event 578 GroupWise 6.5 Administration Guide Corresponding Tasks and Startup Switches See “Creating an MTA Object in eDirectory” on page 575. See “Adjusting MTA Polling of Input Aueues in the Domain, Post Offices, and Gateways” on page 636. See also /cyhi and /cylo. See “Adjusting MTA Polling of Closed Locations” on page 640. See /norecover. See “Adjusting the Number of MTA Scanner Threads for the Domain and Post Offices” on page 638. See also /fast0 and /fast4. See “Using SNMP Monitoring Programs” on page 627. See “Setting Up the MTA Web Console” on page 617. See also /httpuser and /httppassword. See “Using TCP/IP Links between Domains” on page 579 and “Using TCP/IP Links between a Domain and its Post Offices” on page 583. See also /tcpport. See “Using TCP/IP Links between Domains” on page 579. See also /msgtranssl. See “Setting Up the MTA Web Console” on page 617. See also /httpssl. See “Using MTA Log Files” on page 625. See also /log, /logdays, /logdiskoff, /loglevel, and /logmax. See “Enabling MTA Message Logging” on page 603. See also /messagelogsettings, /messagelogpath, / messagelogdays, and /messagelogmaxsize. See “Using eDirectory User Synchronization” on page 598. See also /nondssync. ConsoleOne Properties Pages and Settings Routing Options Page Default Routing Domain Force All Messages to Default Routing Domain Allow MTA to Send Directly to Other GroupWise Systems MTA SSL Page Certificate File SSL Key File Password Corresponding Tasks and Startup Switches See “Using Routing Domains” on page 591. See also /defaultroutingdomain. See “Using Dynamic Internet Links” in “Connecting to GroupWise 5.x and 6.x Systems” in the Group Wise 6.5 Multi- System Administration Guide. See also /nodns. See “Enhancing Domain Security with SSL Connections to the MTA” on page 589. See also /certfile, /keyfile and /keypassword. After you install the MTA software, you can further configure the MTA using a startup file. To survey the many ways the MTA can be configured, see Chapter 46, “Using MTA Startup Switches,” on page 643. Changing the Link Protocol between Domains How MTAs for different domains communicate with each other is determined by the link protocol in use between the domains. Typically, inbound and outbound links for a domain use the same link protocol, but this is not required. For a review of link protocols, see “Link Protocols for Direct Links” on page 134. If you originally set up an MTA using one link protocol and need to change to a different one, some reconfiguration of the MTA is necessary. + “Using TCP/IP Links between Domains” on page 579 + “Using Mapped or UNC Links between Domains” on page 582 + “Using Gateway Links between Domains” on page 583 NOTE: The Linux MTA does not support mapped or UNC links between domains. TCP/IP links are required. Using TCP/IP Links between Domains To set up TCP/IP links between domains, you must perform the following two tasks: + “Configuring the MTA for TCP/IP” on page 579 + “Changing the Link Protocol between Domains to TCP/IP” on page 581 Configuring the MTA for TCP/IP 1 Make sure TCP/IP is properly set up on the server where the MTA is running. 2 In ConsoleOne, browse to and right-click the MTA object, then click Properties. 3 Click GroupWise > Network Address to display the Network Address page. Configuring the MTA 579 Properties of MTA E x| GroupWise v | NDS Rights v | Other | Rights to Files and Folders | Network Address TCP/IP Address: 123.45.67.89 IPXISPX Address: 2| Port SSL Message Transfer: | 7100 $| [Disabled +] HTTP: 7180. $| [Disabled +] Page Options... OK Cancel Apply | Help 4 On the Network Address page, click the pencil icon for the TCP/IP Address field to display the Edit Network Address dialog box. Edit Network Address x TCP/IP Address (° IP Address: 123 .| 45 .| 67 | 89 C DNS Host Name: Cancel | Hei 5 Select IP Address, then provide the IP address, in dotted decimal format, of the server where the MTA is running. or Select DNS Host Name, then provide the DNS hostname of the server where the MTA is running. IMPORTANT: The MTA must run on a server that has a static IP address. DHCP cannot be used to dynamically assign an IP address for it. Specifying the DNS hostname rather than the IP address makes it easier to move the MTA from one server to another, should the need arise at a later time. You can assign a new IP address to the hostname in DNS, without needing to change the MTA configuration information in ConsoleOne. 6 Click OK. 7 To use a TCP port number other than the default port of 7100, type the port number in the Message Transfer Port field. If multiple MTAs will run on the same server, each MTA must have a unique TCP port number. 8 Ifneeded, select Enabled in the SSL drop-down list for the message transfer port. For more information, see “Enhancing Domain Security with SSL Connections to the MTA” on page 589. 9 Click OK to save the network address and return to the main ConsoleOne window. ConsoleOne then notifies the MTA to restart enabled for TCP/IP. 580 GroupWise 6.5 Administration Guide Corresponding Startup Switches You could also use the /tcpport switch in the MTA startup file to provide the message transfer port number. MTA Web Console You can view the MTA TCP/IP information on the Configuration page under the TCP/IP Settings heading. Changing the Link Protocol between Domains to TCP/IP Make sure you have configured the MTA for TCP/IP at both ends of each link. To change the link between the domains from mapped or UNC to TCP/IP: 1 In ConsoleOne, click Tools > Group Wise Utilities > Link Configuration. 2 Click View > Domain Links to display domain links. Ka Groupwise Link Configuration Tool - \\PRY-GW\sys\gwsystem\provol = oj x} File Edit Search View Window Help | a] 2) AIS] RS Poor cm =] ICD KE Domain: Provo1 Outbound Links from Provo1 rDirect Indirect rGateway Undefined: rindirect 3 Select the MTA’s local domain in the drop-down list. Outbound and inbound links for the selected domain are listed. 4 Double-click a domain in the Outbound Links list. Edit Domain Link E x] Description: How Provo1 connects to Provo2 E Link Type: [Direct y] Cancel | Settings Help | Protocol: TCP/IP v address: [123456781861 WTPort [7100 | FRERE E Override Maximum send message size: [ 0 E MBytes Delay message size [ 0 E MBytes Transfer Pull Info... | External Link Info... | 5 Set Link Type to Direct. 6 Set Protocol to TCP/IP. Make sure the information displayed in the IP Address and MT Port fields matches the information for the MTA for the domain to which you are linking. 7 Click OK. Configuring the MTA 581 10 12 13 14 Repeat Step 4 through Step 7 for each domain in the Outbound Links list where you want the MTA to use a TCP/IP link. Selecting multiple domains is also allowed. Double-click a domain in the Inbound Links list. Set Link Type to Direct. Set Protocol to TCP/IP. Make sure the information displayed in the IP Address and MT Port fields matches the information you supplied in “Configuring the MTA for TCP/IP” on page 579. Click OK. Repeat Step 9 through Step 12 for each domain in the Inbound Links list where you want the MTA to use a TCP/IP link. Selecting multiple domains is also allowed. Click File > Exit > Yes to save the link changes. ConsoleOne then notifies the MTA to restart with the new link configuration. For a sample message flow for this configuration, see “TCP/IP Link Open: Transfer between Domains Successful” in “Message Delivery to a Different Domain” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. Using Mapped or UNC Links between Domains To change to a mapped or UNC link between domains: 1 JO a a 14 In ConsoleOne, click Tools > GroupWise Utilities > Link Configuration. Click View > Domain Links to display domain links. Select the MTA's local domain in the drop-down list. Outbound and inbound links for the selected domain are listed. Double-click a domain in the Outbound Links list. Set Link Type to Direct. Set Protocol to Mapped or UNC. Enter the full path, in the appropriate format, of the directory where the other domain is located. Click OK. Repeat Step 4 through Step 8 for each domain in the Outbound Links list where you want the MTA to use a mapped or UNC link. Selecting multiple domains is also allowed. Double-click a domain in the Inbound Links list. Set Link Type to Direct. Set Protocol to Mapped or UNC. Enter the full path, in the appropriate format, of the directory where the local domain is located. Click OK. 582 GroupWise 6.5 Administration Guide 15 Repeat Step 10 through Step 14 for each domain in the Inbound Links list where you want the MTA to use a mapped link. Selecting multiple domains is also allowed. 16 Click File > Exit > Yes to save the link changes. ConsoleOne then notifies the MTA to restart with the new link configuration. For a sample message flow for this configuration, see “Mapped/UNC Link Open: Transfer between Domains Successful” in “Message Delivery to a Different Domain” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. Using Gateway Links between Domains You can use Group Wise gateways to link domains within your GroupWise system. + “Using the Async Gateway to Link Domains” on page 583 + “Using the Internet Agent to Link Domains” on page 583 Using the Async Gateway to Link Domains You can use the Async Gateway to link a domain into your GroupWise system using a modem. For setup instructions, see the Async Gateway documentation at GroupWise 6.5 Documentation (http://www.novell.com/documentation/gw65/index.html). Using the Internet Agent to Link Domains You can use the Internet Agent to link a domain into your GroupWise system across the Internet. When you use the Internet Agent as the transport mechanism between domains, it encapsulates GroupWise messages (both e-mail messages and administrative messages) within SMTP messages in order to transport them across the Internet. For setup instructions, see “Linking Domains” on page 762 NOTE: A simpler alternative to a gateway link for spanning the Internet is to use MTA to MTA links, as described for linking separate GroupWise systems in “Using Dynamic Internet Links” in the GroupWise 6.5 Multi-System Administration Guide. The same configuration that can link two separate GroupWise systems can be employed to link a domain within the same GroupWise system. Changing the Link Protocol between a Domain and Its Post Offices How messages are transferred between the MTA for the domain and the POA for each post office is determined by the link protocol in use between the domain and each post office. For a review of link protocols, see “Link Protocols for Direct Links” on page 134. If you need to change from one link protocol to another, some reconfiguration of the MTA and its link to each post office is necessary. + “Using TCP/IP Links between a Domain and its Post Offices” on page 583 + “Using Mapped or UNC Links between a Domain and its Post Offices” on page 586 NOTE: The Linux MTA requires TCP/IP links between a domain and its post offices. Using TCP/IP Links between a Domain and its Post Offices To change from mapped or UNC links to TCP/IP links between a domain and its post offices, you must perform the following two tasks: + “Configuring the Agents for TCP/IP” on page 584 + “Changing the Link Protocol between a Domain and its Post Offices to TCP/IP” on page 585 Configuring the MTA 583 Configuring the Agents for TCP/IP 1 Ifthe MTA for the domain is not yet set up for TCP/IP communication, see “Configuring the MTA for TCP/IP” on page 579. 2 Ifany post offices do not yet have a POA setup for TCP/IP communication, see “Using Client/Server Access to the Post Office” on page 447 to set up the initial TCP/IP information. 3 In ConsoleOne, expand the Post Office object to display the POA object(s) in the post office. Only one POA per post office needs to communicate with the MTA. Ifthe post office has multiple POAs, have a POA that performs message file processing communicate with the MTA for best performance. For information about message file processing, see “Role of the Post Office Agent” on page 423. 4 Right-click the POA object, then click Properties. 5 Click Group Wise > Network Address to display the Network Address page. x GroupWise ~ | NDS Rights + | Other | Rights to Files and Folders | Network Address TCP/IP Address: [72155184 A Proxy Server Address: 2| IPXISPX Address: J A) Port SSL SSL Port Message Transfer: [7101 $| [Disabled x] HTTP: [7181 $| [Disabled x] Local Intranet Client/Server: 1677 +] Disabled x Internet Proxy Client/Server: 04 Disabled x IMAP: 144 $| [Disabled y 993 + CAP: 1026 $| [Disabled =] Page Options... | OK Cancel Apply | Help 6 On the Network Address page, click the pencil icon for the TCP/IP Address field to display the Edit Network Address dialog box. Edit Network Address i xj TCP/IP Address € IP Address: 123 .] 45 .|[ 67 .| ey C DNS Host Name: | ca | tab 7 Inthe Message Transfer Port field, specify a unique TCP port on which the POA will listen for incoming messages from the MTA. The default is 7101. 8 Ifneeded, select Enabled in the SSL drop-down list for the message transfer port. For more information, see “Enhancing Domain Security with SSL Connections to the MTA” on page 589. 584 GroupWise 6.5 Administration Guide 9 Click OK to save the TCP/IP information and return to the main ConsoleOne window. ConsoleOne then notifies the POA to restart with message transfer processing enabled. Changing the Link Protocol between a Domain and its Post Offices to TCP/IP 1 In ConsoleOne, click Tools > Group Wise Utilities > Link Configuration. Ka Groupwise Link Configuration Tool - \\\PR¥-GW\sys\gwsystem\provol -lol xj File Edit Search View Window Help s] HS] +] AIS > ami KE Domain: Provo1 Outbound Links from Provo1 Direct: Indirect Gateway = Undefined: % Provo2 rindirect 2 In the drop-down list, select the domain where you want TCP/IP links to post offices. 3 Click View > Post Office Links to display post office links. Ka Groupwise Link Configuration Tool - \\PRY-GW\sys\gwsystem\provol 7 ojx File Edit Search View Window Help kd by [Provo (Primary) +] wm] Gepost Office Links for Provo1 BAIE Post Office Links for Provo1 Post Office Domain i % Manufacturing |Provo1 123.45.678.136:1677,7101 % R&D Provo1 123.45.678.136: 1677,7201 4 Double-click a Post Office object. 5 In the Protocol field, select TCP/TP. Edit Post Office Link Post Office: Accounting [LS Protocol: frcpre y Cancel | Post Office Agent: [POA y] Help | IP Address: [123.465.678.136 MT Port: Fa 01 2] Client/Server Port: Fr 677 Maximum send message size: [ 0 E MBytes 6 Make sure the information displayed in the Edit Post Office Link dialog box matches the information provided in the Edit Network Address dialog box in “Configuring the Agents for TCP/IP” on page 584. 7 Click OK. 8 Repeat Step 4 through Step 7 for each post office in the domain where you want to use TCP/ IP links. Configuring the MTA 585 9 To exit the Link Configuration tool and save your changes, click File > Exit > Yes. ConsoleOne then notifies the MTA and POAs to restart using the new link protocol. For a sample message flow for this configuration, see “TCP/IP Link Open: Transfer between Post Offices Successful” in “Message Delivery to a Different Post Office” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. Using Mapped or UNC Links between a Domain and its Post Offices To change from a TCP/IP link to a mapped or UNC link between a domain and its post offices: 1 In ConsoleOne, click Tools > Group Wise Utilities > Link Configuration. In the drop-down list, select the domain where the post offices reside. Click View Post Office Links to display post office links. Double-click a Post Office object. In the Protocol field, select Mapped or UNC. Provide the location of the post office in the format appropriate to the selected protocol. Click OK. Repeat Step 4 through Step 7 for each post office in the domain. © © M og A WON To exit the Link Configuration tool and save your changes, click File > Exit > Yes. ConsoleOne then notifies the POA and MTA to restart using the new link protocol. For a sample message flow for this configuration, see “Mapped/UNC Link Open: Transfer between Post Offices Successful” in “Message Delivery to a Different Post Office” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. Moving the MTA to a Different Server As your GroupWise system grows and evolves, you might need to move an MTA from one server to another. For example, you might decide to run the MTA on a different platform, or perhaps you want to move it to a server that has more disk space for the mslocal directory. 1 Stop the existing MTA. 2 Copythe entire mslocal subdirectory structure to wherever you want it on the new server. It might contain messages that have not yet been delivered. 3 When moving the MTA, pay special attention to the following details: + Inthe MTA startup file, set the /work switch to the location of the mslocal directory on the new server. + Ifthe original MTA was configured for TCP/IP links between domains, you must reconfigure the MTA object with the IP address and port number for the MTA on the new server. See “Using TCP/IP Links between Domains” on page 579. + For the NetWare® MTA, if it was originally on the same server where its domain and post offices are located and you are moving it to a different server, you must add the /dn switch or the /user and /password switches to the MTA startup file to give the NetWare MTA access to the server where the domain and post offices are located. 4 Install the MTA on the new server. See “Installing GroupWise Agents” in the GroupWise 6.5 Installation Guide. 586 GroupWise 6.5 Administration Guide 5 Startthe new MTA. See “Starting the MTA” on page 568. 6 Observe the new MTA to see that it is running smoothly. See Chapter 44, “Monitoring the MTA,” on page 605. 7 If you are no longer using the old server for any GroupWise agents, you can remove them to reclaim the disk space. See “Uninstalling the MTA Software” on page 573. Adjusting the MTA for a New Location of a Domain or Post Office MTA configuration must be adjusted if you make the following changes to your Group Wise system configuration: + “New Domain Location” on page 587 + “New Post Office Location” on page 587 New Domain Location If you move a domain from one server to another, you need to edit the MTA startup file to provide the new location of the domain directory. 1 Stop the MTA for the old domain location if it is still running. 2 Usean ASCII text editor to edit the MTA startup file. + On NetWare and Windows, only the first 8 characters of the domain name are used in the filename. The startup file is typically located in the directory where the MTA software is installed. + OnLinux, the full domain name is used in the filename. However, all letters are lowercase and any spaces in the domain name are removed. The startup file is located in the /opt/ novell/groupwise/agents/share directory. 3 Adjust the setting of the /home switch to point to the new location of the domain directory. 4 Save the MTA startup file. 5 Start the MTA for the new domain location. See “Starting the MTA” on page 568. New Post Office Location If you move a post office, you need to adjust the link information for that post office. 1 Click Tools > GroupWise Utilities > Link Configuration. In the drop-down list, select the domain where a post office has moved. Click View > Post Office Links to display post office links. Double-click the post office that has been moved. Provide its new location in the appropriate format. Click OK. Click File > Exit > Yes to save the link changes. NO 0d BR Y N ConsoleOne then notifies the MTA to restart with the new link configuration. Configuring the MTA 587 Adjusting the MTA Logging Level and Other Log Settings When installing or troubleshooting the MTA, a logging level of Verbose can be useful. However, when the MTA is running smoothly, you can set the logging level down to Normal to conserve disk space occupied by log files. See “Using MTA Log Files” on page 625. Configuring User Access through the Domain Although users do not access the domain as they use the GroupWise client, their messages often pass through domains while traveling from one post office to another. + “Restricting Message Size between Domains” on page 588 + “Enabling Live Remote” on page 589 + “Enhancing Domain Security with SSL Connections to the MTA” on page 589 Restricting Message Size between Domains You can configure the MTA to restrict the size ofmessages that users are permitted to send outside the domain. 1 In ConsoleOne, click Tools > Group Wise Utilities > Link Configuration. KE Groupwise Link Configuration Tool - \\PRY-GW\sys\gwsystem\provol = oj x| Eile Edit Search View Window Help se) MIMI 2] AS] RS] [erovo1 Priman 5 mi OER Provo1 Outbound Links from Provoi rDirect Indirect Gateway Undefined % Provo2 rDirect rindirect % Provo2 2 Double-click the domain where you want to restrict message size. x Description: How Provo1 connects to Provo2 Link Type: Direct y] Cancel | Settings Help | Protocol: TCPIP v IPAddress: [123456781861 MTPot [7100 2] schedule: [7 Override Maximum send message size: 0 4 MBytes Delay message size 0 L MBytes | Transfer Pull Info... | External Link Info... 3 In the Maximum Send Message Size field, specify in megabytes the size of the largest message you want users to be able to send outside the post office. 588 GroupWise 6.5 Administration Guide 4 If you want to delay large messages, specify the size in megabytes for message files the MTA can process immediately in the Delay Message Size field. Ifa message file exceeds the delay message size, the message file is moved into the low priority (6) message gueue, where only one MTA thread is allocated to process very large messages. This arrangement allows typical messages to be processed promptly, while delaying large messages that exceed the specified size. The result is that large messages do not slow down processing of typical messages. 5 Click OK. 6 To exitthe Link Configuration Tool and save your changes, click File > Exit > Yes. ConsoleOne then notifies the MTA to restart using the new message size limits. If a user's message is not sent out of the domain because of this restriction, the user receives an e- mail message with a subject line of: Delivery disallowed plus the subject ofthe original message. This message provides information to the user about why and where the message was disallowed. However, the message is still delivered to recipients in the sender’s own domain. There are additional ways to restrict the size of messages that users can send, as described in “Restricting the Size of Messages That Users Can Send” on page 175. Enabling Live Remote You can configure the MTA to redirect GroupWise Remote client requests to other MTAs and POAs. The GroupWise client can establish a client/server connection to an MTA across the Internet, eliminating the queuing and polling process used by earlier Remote clients. The result is significantly improved performance for Remote client users. To configure the MTA to redirect Remote client requests, add the /liveremote, /Irconn and / Irwaitdata switches to the MTA startup file. You can monitor the live remote connections from the MTA agent console. See “Displaying Live Remote Status” on page 613. As an alternative to live remote connections from outside your firewall, you could set up proxy servers for the POAs, so that Remote client users connect to their mailboxes through the proxy servers rather than through MTAs. Full SSL security is provided through the proxy servers. See “Securing Client/Server Access through a Proxy Server” on page 456. Enhancing Domain Security with SSL Connections to the MTA Secure Sockets Layer (SSL) ensures secure communication between the MTA and other programs by encrypting the complete communication flow between the programs. For background information about SSL and how to set it up on your system, see Chapter 80, “Encryption and Certificates,” on page 1039. To configure the MTA to use SSL: 1 In ConsoleOne, browse to and right-click the MTA object, then click Properties. 2 Click GroupWise > Network Address to display the Network Address page. Configuring the MTA 589 Properties of MTA 4 xÍ GroupWise v | NDS Rights + | Other | Rights to Files and Folders | Network Address TCP/IP Address: [123.45.67.89 IPXISPX Address: [ 2| Port SSL Message Transfer: [ 7100 $| [Disabled +] HTTP: 7180 | [Disabled +] Page Options... | OK Cancel | Apply | Help 3 To use SSL connections between the MTA and the POAs for its post offices, select Enabled in the Message Transfer SSL drop-down list. The MTA must use a TCP/IP connection to each POA in order to enable SSL for the connection. See “Using TCP/IP Links between a Domain and its Post Offices” on page 583. Each POA must also have SSL enabled for the connection to be secure. See “Enhancing Post Office Security with SSL Connections to the POA” on page 458. 4 To use SSL connections between the MTA and the MTA Web console displayed in your Web browser, select Enabled in the HTTP SSL drop-down list. To setup the MTA Web console, see “Setting Up the MTA Web Console” on page 617. 5 Click Apply to save the settings on the Network Address page. 6 Click Group Wise > SSL Settings to display the SSL Settings page. Properties of MTA xl NDS Rights + | Other | Rights to Files and Folders | Certificate file: [ a SSL key file: [ [en Set Password | Page Options... | 590 GroupWise 6.5 Administration Guide For background information about certificate files and SSL key files, see Chapter 80, “Encryption and Certificates,” on page 1039. 7 Inthe Certificate File field, browse to and select the public certificate file provided to you by your CA. 8 In the SSL Key File field: 8a Browse to and select your private key file. 8b Click Set Password. 8c Provide the password that was used to encrypt the private key file when it was created. 8d Click Set Password. 9 Click OK to save the SSL settings. ConsoleOne then notifies the MTA to restart using the new message size limits. Corresponding Startup Switches You could also use the /certfile, /keyfile, /keypassword, /httpssl, and /msgtranssl switches in the MTA startup file to configure the MTA to use SSL. MTA Web Console You can list which connections the MTA is using SSL for from the Links page. Click View TCP/ IP Connections to display the list if TCP/IP links. Configuring Specialized Routing As you create each new domain in your GroupWise system, you link it to another domain. You can view and modify the links between domains using the Link Configuration Tool. See Chapter 10, “Managing the Links between Domains and Post Offices,” on page 131. The following topics help you configure the MTA to customize routing through your GroupWise system: + “Using Routing Domains” on page 591 + “Scheduling Direct Domain Links” on page 593 + “Using a Transfer Pull Configuration” on page 596 Using Routing Domains As an alternative to configuring individual links between individual domains throughout your GroupWise system, you can establish a system of one or more routing domains under the following circumstances. + Domains must connect to the routing domains with TCP/IP links. + GroupWise 5.5 and 6.x domains can be part of the routing domain system. Domains and MTAs that are still at a 5.2 or earlier version cannot participate and must use links as provided in the Link Configuration Tool. A routing domain can serve as a hub in the following situations: + Messages that would otherwise be undeliverable can be automatically sent to a single routing domain. This routing domain could be set up to perform DNS lookups and route messages out across the Internet. See “Using Dynamic Internet Links” in “Connecting to GroupWise 5.x and 6.x Systems” in the Group Wise 6.5 Multi-System Administration Guide. Configuring the MTA 591 + All messages from a domain can be automatically routed through another domain, regardless of the final destination of the messages. This provides additional control of message flow through your Group Wise system. You can set up routing domains on two levels: + “Selecting a System Default Routing Domain” on page 592 + “Selecting a Specific Routing Domain for an Individual Domain” on page 593 Selecting a System Default Routing Domain You can establish a single default routing domain for your entire Group Wise system. This provides a centralized routing point for all messages. It takes precedence over specific links established when domains were created or links modified with the Link Configuration Tool. To setup a system default routing domain: 1 In ConsoleOne, click Tools > Group Wise System Operations > System Preferences > Routing to display the Routing tab. KE Groupwise System Preferences x| Nickname Settings | Default Password Admin Preferences Routing Options Admin Lockout Settings External Access Rights Default Routing Domain: Provo1 Clear I Force all messages to this domain [ MTAs send directly to other GroupWise systems OK Cancel Help 2 Inthe Default Routing Domain field, browse to and select the domain you want to serve as the default routing domain for your entire Group Wise system. 3 If you want all Group Wise messages to pass through the default routing domain regardless of the destination of the message, select Force All Messages to This Domain. or If you want only undeliverable GroupWise messages to be routed to the default routing domain, deselect Force All Messages to This Domain. If you do not force all messages to the system default routing domain, then you have the option of allowing selected MTAs to provide routing domain services in addition to the system default routing domain. 4 Select MTAs Send Directly to Other GroupWise Systems if you want all MTAs in your Group Wise system to perform DNS lookups and route messages out across the Internet. or Deselect MTAs Send Directly to Other GroupWise systems if you want to individually designate which MTAs should perform eDirectory lookups and route messages out across the Internet. 5 Click OK to save the routing options you have specified for the system default routing domain. 592 GroupWise 6.5 Administration Guide Selecting a Specific Routing Domain for an Individual Domain As long as you are not forcing all messages to the system default routing domain, you can override the system default routing information for an individual domain. 1 In ConsoleOne, browse to and right-click the MTA object, then click Properties. 2 Click Group Wise > Routing Options to display the Routing Options page. Properties of MTA E x| GroupWise + | NDS Rights + | Other | Rights to Files and Folders | Routing Options Override Default Routing Domain na Defined at: Corporate Mail A O Defined at: Corporate Mail D A Allow Defined at: Corporate Mail Page Options... | Cancel Apply Help System default routing information displays if it has been set up. See “Selecting a System Default Routing Domain” on page 592. 3 Select Override beside the default information you want to change for the selected domain. 4 Set the routing options as needed for the selected domain. 5 Click OK to save the specialized routing information for the selected domain. ConsoleOne then notifies the MTA to restart so the routing information can be put into effect. MTA Web Console You can check routing information on the Configuration page under the General Settings heading. Scheduling Direct Domain Links When domains link across an expensive medium such as long-distance phone lines, you can reduce the cost of the link by controlling when it is open. You can choose to have some types of messages wait in the message queues for the lowest phone rate. You can collect messages in the message queues until a specified time or size limit is reached, then open the link, rather than opening the link for each message as it arrives in the queue. You can design as many link profiles as you need, to schedule the transfer of various types of Group Wise messages in the most efficient and cost-effective manner. To create a schedule for a link between domains: 1 In ConsoleOne, click Tools > GroupWise Utilities > Link Configuration. 2 In the drop-down list, select the domain to schedule a link for. 3 Click View > Domain Links to display domain links. Configuring the MTA 593 RE Domain: Provo1 Outbound Links from Provo1 rDirect Indirect Gateway Undefined % Provo2 rindirect 4 Double-click the domain you want to create a link schedule for. Only direct links can be scheduled. LI x Description: How Provo1 connects to Provo2 o Link Type: [Direct +] Cancel | Settings Help | Protocol: TCP/IP y] address: — [123.45.678461 MTPort: [7100 2| Seleta T° Override Maximum send message size: [ 0 E MBytes Delay message size | 0 F MBytes Transfer Pull Info... | External Link Info... | 5 Click Scheduling. CO x AM OST Sunday Al Cancel | id a] ma” = ri sausa [EEEO a Profiles - tused Default Create... | The link schedule grid displays the current schedule for the selected direct link. The grid consists of half-hour time slots showing the link profile assigned to each time slot. Available link profiles are listed below the link schedule grid. Each link profile defines the following values to set the conditions under which the link opens: + Which message queues to monitor + Maximum wait time for any message in any monitored queue 594 GroupWise 6.5 Administration Guide + Maximum number of waiting messages allowed in all monitored queues + Maximum total size of waiting messages allowed in all monitored queues The default profile shows as white in the link schedule grid. The default profile is in effect at all times when no other profile has been selected. Any other defined profiles show as gray. The currently selected link profile shows as green. To create a new link profile, click Create. or To edit an existing link profile, select it in the profile list, then click Edit. or To edit the default link profile, click Default. [create Profle x Name: Time threshold (minutes) Kf | = = Description: ara Po y pr Queuez[ o À Queues: | o À Queues: | 0 < Thresholds fi 0-7 =. E resholds for queues 0- pe" | amme TS Ada E D If you are creating a new link profile, provide a unique name for the link profile in the Name field. If you are editing an existing link profile, you cannot change the name. In the Description field, provide whatever additional information is necessary to describe the purpose ofthe link profile. Use the scroll bar in the Time Threshold box to select which gueues to monitor and process when this link profile is in effect. Aueue Purpose 0 Busy Search requests 1 Requests from GroupWise Remote users 2 High priority user messages; administrative messages 3 High priority status messages 4 Normal priority user messages 5 Normal priority status messages 6 Low priority user messages 7 Low priority status messages The contents of deselected queues are not monitored but are processed when the link opens. Configuring the MTA 595 10 11 12 13 14 15 16 17 18 19 For each selected gueue, specify the maximum number of minutes a message must wait in each gueue before the link opens. If you want the link to open immediately when a message arrives in the gueue, specify 0 (zero). In the Messages field, specify the total number of messages waiting in all selected queues that will trigger the link to open. In the KBytes field, specify the total size in kilobytes of all messages waiting in all selected queues that will trigger the link to open. Click OK to save the link profile and return to the Link Scheduling dialog box. Select the new or modified link profile in the profile list. Click a time slot or drag to select a range of time slots. Time slots assigned to the selected link profile display as green. Select all the time slots you want governed by the selected link profile. Select a different link profile to assign to time slots. or Create or edit another link profile. or Click OK to save the schedule for the current link. When the schedule is saved, click OK to close the Edit Domain Link dialog box. To exit the Link Configuration Tool, click File > Exit > Yes. ConsoleOne then notifies the MTA to restart using the new link schedule. Using a Transfer Pull Configuration Typically for a mapped or UNC link, the MTA for the sending domain writes (or "pushes") message files into the input queue subdirectories of the receiving domain. However, it is possible to change this configuration so the MTA for the receiving domain picks up (or "pulls") message files from the sending domain. The transfer pull directory is a location in the sending domain where the MTA for the receiving domain can pick up message files (that is, "pull" them from the sending domain). It represents the only configuration where an MTA processes messages outside its own domain directory structure. NOTE: The transfer pull configuration does not apply to the Linux MTA because the Linux MTA does not use mapped or UNC links. To set up a transfer pull configuration between domains: 1 Manually create a transfer directory with input queue subdirectories from which outgoing message files will be pulled. The transfer directory must contain a wpcsin subdirectory, with standard priority 0 through 7 subdirectories beneath. For an example, see “Alternate Link Configuration: Transfer Pull” in “Message Delivery to a Different Domain” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. The transfer directory must be placed where both the sending and receiving MTAs have rights. 596 GroupWise 6.5 Administration Guide 2 3 4 In ConsoleOne, modify the outgoing link from the sending domain so the MTA for the sending domain writes message files to the transfer directory, rather than directly to the receiving domain. See “Modifying the Outgoing Transfer Pull Link” on page 597. In ConsoleOne, modify the incoming link to the receiving domain so the MTA for the receiving domain actively pulls message files from the transfer directory, rather than waiting for them to be delivered. See “Modifying the Incoming Transfer Pull Link” on page 597. Stop and restart the MTAs for both domains. Modifying the Outgoing Transfer Pull Link 1 a AO N 10 In ConsoleOne, connect to the sending domain: ta Click Tools > GroupWise System Operations > Select Domain. 1b Browse to and select the domain database (wpdomain.db) in the sending domain. 1c Click Open. 1d Click OK. Click Tools > GroupWise Utilities > Link Configuration. In the drop-down list, select the sending domain. Click View > Domain Links to view outbound and inbound links for the sending domain. In the Outbound Links from sending_domain_name list box, double-click the receiving domain. If you are using a UNC path, click Override to display the Path field. In the Path or UNC Override field (depending on the selected protocol), specify the full path to the transfer directory you created. You can use a UNC path for the NetWare and Windows MTA; you can use a mapped drive path for the Windows MTA only. Click OK. Click File > Exit > Yes to save the link changes for the sending domain and return to the main ConsoleOne window. Continue with “Modifying the Incoming Transfer Pull Link” on page 597. Modifying the Incoming Transfer Pull Link 1 2 3 4 5 In ConsoleOne, connect to the receiving domain: Ta Click Tools > GroupWise System Operations > Select Domain 1b Browse to and select the domain database (wpdomain.db) in the receiving domain. Ae Click Open. Ad Click OK. Click Tools > GroupWise Utilities > Link Configuration. In the drop-down list, select the receiving domain. Click View Domain Links to view outbound and inbound links for the receiving domain. In the Outbound Links from receiving domain name list box, double-click the sending domain. Configuring the MTA 597 6 7 8 13 Verify that the information displayed in the Edit Domain Link dialog box is correct. Click Transfer Pull Info. Specify the full path to the transfer directory you created. You can use a UNC path for the NetWare and Windows MTA; you can use a mapped drive path for the Windows MTA only. Specify the number of seconds after which the MTA will check the transfer directory for message files to pull. Specify the command needed to reestablish the connection with the transfer directory, if that connection should be broken for any reason. Click OK until you return to the Link Configuration dialog box. Click File > Exit > Yes to save the link changes for the receiving domain and return to the main ConsoleOne window. Stop and restart the MTAs for both domains. Configuring Domain Maintenance You can configure the MTA to synchronize user information in the Group Wise Address Book with user information in eDirectory. You can also configure it to gather information about all messages that pass through the domain for tracking purposes. + + “Using eDirectory User Synchronization” on page 598 “Enabling MTA Message Logging” on page 603 Using eDirectory User Synchronization As long as GroupWise administration is performed with the GroupWise Administrator snap-in to ConsoleOne running, user information is automatically synchronized between GroupWise and eDirectory. However, four situations can cause this automatic synchronization to be insufficient: + + An administrator modifies user information in ConsoleOne without having the Group Wise Administrator snap-in running. The user information was changed using NetWare® Administrator without the Group Wise Administrator snap-in running. The user information was changed using NetAdmin, the DOS-based NetWare Administrator program. The user information was changed using the NWDS API. In these situations, user information in eDirectory would no longer match corresponding user information in GroupWise. (User objects are the only GroupWise objects that can be modified without the GroupWise Administrator snap-in running. Modification of all other GroupWise objects requires the presence of the GroupWise Administrator snap-in.) This section covers the following aspects of eDirectory user synchronization: + + + “Enabling eDirectory User Synchronization” on page 599 “Assigning an eDirectory-Enabled MTA to Synchronize Other Domains” on page 601 “Scheduling eDirectory User Synchronization” on page 602 598 GroupWise 6.5 Administration Guide Enabling eDirectory User Synchronization By default, eDirectory user synchronization is disabled. The MTA still performs all its other functions, but any changes made to user information in eDirectory without the Group Wise Administrator snap-in running will not appear in Group Wise until eDirectory user synchronization has been performed. Although all MTAs could be enabled to perform eDirectory user synchronization, the minimum requirement is that at least one MTA be configured that way. If your Group Wise system spans multiple trees, at least one MTA in each tree must be configured to perform eDirectory user synchronization. 1 In ConsoleOne, click Tools > GroupWise System Operations > eDirectory User Synchronization to display the eDirectory User Synchronization Configuration dialog box. (eDirectory User Synchronization Configuration xi Domains: Domain Synchronized By Status MTA.Provo1 GroupWise Disabled MTA.Provo2.GroupWise Disabled Cancel Help dis Change Assignment... Configure Agents... The eDirectory User Synchronization Configuration dialog box lists all domains in your GroupWise system, the MTA currently assigned to provide eDirectory user synchronization for each domain, and the current status of that agent’s ability to perform eDirectory user synchronization. 2 Click Configure Agents. ix KR Configure Agents OK below to change these settings. Cancel Agents: Enable Agent State i gi E : eDirectory Access E MTA.Provo1.GroupWise Disabled Yes | Sets the necessary properties and rights to allow the selected agents to authenticate to eDirectory. If an agent is reporting that it cannot access eDirectory, you should run Set Up eDirectory Access and restart the agent. Only domains with NetWare MTAs or Linux MTAs should be listed, because eDirectory user synchronization is not supported by the Windows MTA. If domains on Windows servers are listed: 2a Cancel out of the eDirectory user synchronization dialog boxes. Configuring the MTA 599 2b Browse to and right-click a misconfigured MTA, then click Properties. 2c Inthe Platform field, select the platform where the MTA is running. 2d Click OK to save the correct platform information. 2e Return to Tools > Group Wise System Operations > eDirectory User Configuration > Configure Agents. 3 Select the NetWare MTA that you want to perform eDirectory user synchronization. 4 Ifthe eDirectory Access column for that NetWare displays Yes, click Enable. or Ifthe eDirectory Access column for that NetWare MTA displays No: da Click Set Up eDirectory Access. 4b Browse to and select the NetWare server where the MTA runs. dc Click OK. The eDirectory Access column for that NetWare MTA should now display Yes so that you can enable it. 5 Select a Linux MTA that you want to perform eDirectory user synchronization. 6 Ifthe eDirectory Access column for that Linux MTA displays Yes, click Enable. or If the eDirectory Access column for that Linux MTA displays No: Ga Click Set Up eDirectory Access. Gb In the Available LDAP Servers list, select the LDAP server that you want the MTA to log into in order to gain access to eDirectory, then click Set Preferred. 6c In the LDAP User Name field, browse to and select the user that the MTA can use to log in as. The selected user must have rights to browse properties of User objects. Click Set Password, provide the password associated with the user selected above, then click Set Password. 6d Click OK to save the LDAP information. The eDirectory Access column for that Linux MTA should now display Yes so that you can enable it. 7 If your GroupWise system spans multiple trees, repeat Step 3 through Step 6 as needed to enable eDirectory user synchronization for at least one MTA in each tree. 8 Click OK to return to the eDirectory User Synchronization Configuration dialog box. Each domain for which you have configured the MTA for eDirectory user synchronization should now display Enabled in the Status column. 600 GroupWise 6.5 Administration Guide (eDirectory User Synchronization Configuration xÍ Domains: ox | Domain Synchronized By Status Provo MTA.Provo1.GroupWise nabled | MTA.Provo2.GroupWise Disabled Change Assignment... ||: 9 Ifall domains are now enabled, click OK to return to main ConsoleOne window, then continue with “Scheduling eDirectory User Synchronization” on page 602. Or If some domains are still disabled, continue with “Assigning an eDirectory-Enabled MTA to Synchronize Other Domains” on page 601. Assigning an eDirectory-Enabled MTA to Synchronize Other Domains After at least one MTA is performing eDirectory user synchronization, other MTAs not performing eDirectory user synchronization themselves can have an eDirectory-enabled MTA gather the eDirectory information for them. In the eDirectory User Synchronization Configuration dialog box, 1 Click a domain that still displays Disabled in the Status column. MTA.Provo1.GroupWise MTA.Provo2.GroupWise Change Assignment... i 2 Select an agent, then click Change Assignment. Configuring the MTA 601 Note: This list contains only those agents that are currently able to perform eDirectory user synchronization. 3 Select the MTA you want to perform eDirectory user synchronization for the selected domain, then click Select. The domain should now display Enabled in the Status column of the eDirectory User Synchronization Configuration dialog box. 4 Repeat Step | through Step 3 until all domains in your GroupWise system are enabled for eDirectory user synchronization. 5 Click OK to return to the main ConsoleOne window. Scheduling eDirectory User Synchronization After eDirectory user synchronization is enabled, you can perform eDirectory user synchronization at any time from the NetWare MTA agent console. See “Performing eDirectory User Synchronization” on page 615. In addition, you must create one or more eDirectory user synchronization events to cause eDirectory user synchronization to be performed on a regular basis. To schedule an eDirectory user synchronization event: 1 In ConsoleOne, browse to and right-click the MTA object, then click Properties. 2 Click GroupWise > Scheduled Events to display the Scheduled Events page. Scheduled events used by this agent: Default eDirectory User Synchronization Event Create dit Delete | Page Options... | Ex | Cancel | Apply | Help The Scheduled Events page lists a pool of MTA events available to all MTAs in your GroupWise system if any events have already been created. 602 GroupWise 6.5 Administration Guide 3 Select an existing eDirectory user synchronization event, then click Edit. or Click Create, then type a name for the event. Create Scheduled Event $ x| Name: Event Type: eDirectory User Synchronization +] Trigger 1 @ Weekday Weekday: Sunday y C Daily C Interval Time: 12:00 PM 4 Set Type to eDirectory User Synchronization. 5 In the Trigger box, specify when you want the eDirectory user synchronization event to take place. You can have the synchronization event take place once a week, once a day, or at any other regular interval, at whatever time you choose. 6 Specify the time of day when you want eDirectory user synchronization to take place. 7 Click OK twice to close the scheduled event dialog boxes and save the eDirectory user synchronization event. ConsoleOne then notifies the MTA to restart so the eDirectory user synchronization event can be put into effect. Enabling MTA Message Logging Message logging is turned off by default, because it causes the MTA to use additional CPU and disk resources. However, gathering information about message traffic on your GroupWise system lets you perform many valuable tasks, including: + Tracking messages + Gathering statistics to help optimize your GroupWise system ¢ Billing customers for messages delivered + Tracking messages from the MTA Web console and from GroupWise Monitor When you enable MTA message logging, the MTA stores data about Group Wise message traffic as it processes messages. The stored data is then available for use by the MTA Web console Message Tracking feature and by the GroupWise Monitor Message Tracking Report option. In addition, third-party programs can produce customized billing, tracking, and statistical reports based on the information stored in the database. To enable MTA message logging: 1 In ConsoleOne, browse to and right-click the MTA object, then click Properties. 2 Click GroupWise > Message Log Settings. 3 Select a logging level to turn message logging on. 4 Specify the full path of the file where the MTA will record the logging information. Configuring the MTA 603 5 Specify the number of'days to retain reports on disk. Reports will be automatically deleted after the specified time has passed. 6 Click OK to save the MTA message log settings. ConsoleOne then notifies the MTA to restart so the new settings can be put into effect. Corresponding Startup Switches You could also use the /messagelogsettings, /messagelogpath, /messagelogdays, and / messagelogmaxsize switches in the MTA startup file to configure MTA message logging. MTA Web Console For instructions on tracking messages after message logging is enabled, see “Tracking Messages’ on page 623 and “Message Tracking Report” on page 934. > 604 GroupWise 6.5 Administration Guide Monitoring the MTA By monitoring the MTA, you can determine whether or not its current configuration is meeting the needs of your Group Wise” system. You have a variety of resources to help you monitor the operation of the MTA: + + + “Using the MTA Agent Console” on page 605 “Using the MTA Web Console” on page 617 “Using MTA Log Files” on page 625 “Using Group Wise Monitor” on page 626 “Using NetWare 6.5 Remote Manager” on page 626 “Using SNMP Monitoring Programs” on page 627 “Notifying the Domain Administrator” on page 632 “Using the MTA Error Message Documentation” on page 632 “Employing MTA Troubleshooting Technigues” on page 633 “Using Platform-Specific MTA Monitoring Tools” on page 633 “Using MTA Message Logging” on page 633 Using the MTA Agent Console The following topics help you monitor and control the MTA from the MTA agent console: + + “Monitoring the MTA from the MTA Agent Console” on page 605 “Controlling the MTA from the MTA Agent Console” on page 608 Monitoring the MTA from the MTA Agent Console The MTA agent console provides information, status, and message statistics about the MTA to help you assess its current functioning. Monitoring the MTA 605 43 Provo2 - GroupWise MTA M Es File Configuration Log Help Provo2 Up Time: 0 Days 6 Hrs 47 Mins GroupWise Message Transfer Agent r Status 7 | Statistics A TT Pi i al inutes a a ea rea 0 0 Domains 2 0 Undeliverable 0 0 Post Offices Ea 0 Errors 0 0 Gateways 2 oji 04-16 09:43:52 DIS: MTA configuration loaded 04-16 15:51:05 DIS: MTA restart in progress 04-16 15:51:05 DIS: No configuration changes detected 04-16 15:51:05 DIS: MTA restart request ignored d Linux Note: You must use the --show startup switch in order to display the Linux MTA agent console. See “Starting the Linux MTA” on page 570. Windows Note: You can suppress the Windows MTA agent console by running the Windows MTA as a service. See “Starting the Windows MTA” on page 571. The MTA agent console consists of several components: + “MTA Information Box” on page 606 + “MTA Status Box” on page 607 + “MTA Statistics Box” on page 607 “MTA Alert Box” on page 607 + “MTA Admin Thread Status Box” on page 608 A + Do not exit the MTA agent console unless you want to stop the MTA. NetWare Note: Ata NetWare® server console, you can use Alt+Esc to change screens. In a remote console window, you can use Alt+F1 to select a screen to view. Use these keystrokes to change screens without stopping the MTA. You can use these keystrokes to display the MTA agent console if it is not immediately visible on the NetWare console. Linux Note: On a Linux server, you can minimize the MTA agent console, but do not close itunless you want to stop the MTA. Windows Note: On a Windows server, you can minimize the MTA agent console window, but do not close it unless you want to stop the MTA. MTA Information Box The MTA Information box identifies the MTA whose MTA agent console you are viewing, which is especially helpful when multiple MTAs are running on the same server. Domain: Displays the name of the domain serviced by this MTA. Description: Displays the description provided in the Description field in the MTA Information page in ConsoleOne*. If multiple administrators work at the server where the MTA runs, the description could include a note about who to contact before stopping the MTA. Up Time: Displays the length of'time the MTA has been running. MTA Web Console The Status page also displays this information. 606 GroupWise 6.5 Administration Guide MTA Status Box MTA Statistics Box MTA Alert Box The MTA Status box displays the current status of the MTA and its backlog. Processing: Displays a rotating bar when the MTA is running. If the bar is not rotating, the MTA has stopped. For assistance, see “Message Transfer Agent Problems” in Group Wise 6.5 Troubleshooting 2: Solutions to Common Problems. Domains: Displays the total number of domains the MTA links to and the number that are currently closed. Post Offices: Displays the total number of post offices in the domain and the number that are currently closed. Gateways: Displays the total number of gateways in the domain and the number that are currently closed. If you have closed domains, post offices, or gateways, see “MTA Status Box Shows a Closed Location” in “Message Transfer Agent Problems” in Group Wise 6.5 Troubleshooting 2: Solutions to Common Problems for assistance. MTA Web Console The Status page also displays this information. In addition, you can display detailed information about specific gueue contents. The MTA Statistics box displays the total statistics for the current up time, and 10-minute statistics for all messages the MTA has routed. Routed: Displays the number of messages successfully routed to the domains, post offices, and gateways serviced by the MTA. Undeliverable: Displays the number of messages that could not be delivered to a domain, post office, or gateway. For assistance, see “MTA Statistics Box Shows Undeliverable Messages” in “Message Transfer Agent Problems” in GroupWise 6.5 Troubleshooting 2: Solutions to Common Problems. Errors: Displays the number of errors the MTA encounters while processing messages in its input queues. For assistance, see “MTA Statistics Box Shows Errors” n “Message Transfer Agent Problems” in Group Wise 6.5 Troubleshooting 2: Solutions to Common Problems. MTA Web Console The Status page also displays this information. The MTA Alert box displays important messages that could require an administrator’s attention. Informational Status Messages When you first start the MTA, you typically see a message informing you the MTA configuration has been loaded. Monitoring the MTA 607 Error Messages If the MTA encounters a problem that disrupts the flow of Group Wise messages, it displays an error message in the alert box. For assistance, see “Message Transfer Agent Error Messages” in Group Wise 6.5 Troubleshooting 1: Error Messages. MTA Web Console The Status page also displays this information. In addition, you can view and search MTA log files on the Log Files page. MTA Admin Thread Status Box The MTA admin thread updates the domain database (wpdomain.db) when domains, post offices, users, and other types of object information are added, modified, or removed, and repairs it when damage is detected. To display the MTA Admin Thread Status box from the MTA agent console, click Configuration > Admin Status. Provo2 Admin Status [x] Admin Messages 1 Completed: 73 Errors: In Queue: Status: Normal DB Sort Language: US Recovery Count: 0 Automatic Recovery Vv Perform DB Recovery -Admin Thread Status: Running Suspend Resume | The following tasks pertain specifically to the MTA admin thread: + “Suspending/Resuming the MTA Admin Thread” on page 611 + “Displaying MTA Admin Thread Status” on page 613 + “Recovering the Domain Database Automatically or Immediately” on page 614 + “Performing eDirectory User Synchronization” on page 615 MTA Web Console You can display MTA admin thread status on the Configuration page. Under the General Settings heading, click Admin Task Processing. You can also change the admin settings for the current MTA session. Controlling the MTA from the MTA Agent Console 608 You can perform the following tasks to monitor and control the MTA from the MTA agent console at the server where the MTA is running: + “Stopping the MTA” on page 609 + “Restarting the MTA” on page 610 + “Suspending/Resuming MTA Processing for a Location” on page 610 GroupWise 6.5 Administration Guide + “Suspending/Resuming the MTA Admin Thread” on page 611 + “Displaying the MTA Software Date” on page 611 + “Displaying the Current MTA Settings” on page 611 + “Displaying MTA Status Information” on page 612 + “Displaying MTA Admin Thread Status” on page 613 + “Recovering the Domain Database Automatically or Immediately” on page 614 + “Performing eDirectory User Synchronization” on page 615 + “Browsing the Current MTA Log File” on page 615 + “Viewing a Selected MTA Log File” on page 615 + “Cycling the MTA Log File” on page 616 + “Adjusting MTA Log Settings” on page 616 + “Editing the MTA Startup File” on page 616 + “Accessing Online Help for the MTA” on page 616 Stopping the MTA You might need to stop and restart the MTA for the following reasons: + Updating the agent software + Troubleshooting message flow problems + Backing up the domain database + Rebuilding the domain database To stop the MTA from the MTA agent console: 1 Click File > Exit > Yes to stop the MTA. NetWare Note: Use Exit (F7). Ifthe MTA does not respond to Exit, you can use the unload command to stop the MTA. However, this might not allow the MTA to shut down gracefully. In addition, the unload command would stop all MTAs running on the server. Linux Note: If the Linux MTA does not respond to Exit, you can kill the MTA process, as described below, but include the -9 option. Windows Note: Ifthe Windows MTA does not respond to Exit, you can close the MTA agent console to stop the MTA or use the Task Manager to terminate the MTA task. 2 Restart the MTA. See “Starting the MTA” on page 568. To stop the MTA on Linux when it is running in the background as a daemon: 1 Make sure you are logged in as root. 2 If you started the Linux MTA using the grpwise script: 2a Change to the /etc/init.d directory. 2b Enter the following command: ./grpwise stop 2c Skip to Step 4 3 If you started the Linux MTA manually (not using the grpwise script): Monitoring the MTA 609 3a Determine the process IDs (PIDs) of the MTA: ps -eaf | grep gwmta The PIDs for all gwmta processes are listed. You can also obtain this information from the Environment page of the MTA Web console. 3b Kill the first MTA process listed: Syntax: kill PID Example: kill 1483 It might take a few seconds for all MTA processes to terminate. 4 Use the ps command to verify that the MTA has stopped. ps -eaf | grep gwmta Restarting the MTA Restarting the MTA from the MTA agent console causes it to reread the configuration information provided in ConsoleOne. However, the MTA does not reread its startup file when you restart it from the MTA agent console. 1 At the server where the MTA is running, display the MTA agent console. 2 Click File > Restart > Yes to restart the MTA. NetWare Note: Use Restart (F6). If you want the MTA to reread its startup file, you must stop it, then restart it. MTA Web Console You can restart the MTA from the Status page. Click Restart MTA in the upper right corner of the page. Suspending/Resuming MTA Processing for a Location You can cause the MTA to stop processing messages for a location without stopping the MTA completely. For example, you could suspend message processing for a post office while backing up the post office. To suspend the MTA for a location: 1 Atthe server where the MTA is running, display the MTA agent console. 2 Click Configuration > Status. 3 Click the location (or multiple locations) to suspend, then click Suspend. NetWare Note: Use Options (F10) > Configuration Status. Select the location, then click Suspend. Routing of all messages to and from the location will remain suspended until you resume processing. To resume the MTA for a location: 1 Atthe server where the MTA is running, display the MTA agent console. 610 GroupWise 6.5 Administration Guide 2 Click Configuration > Status. 3 Click the location (or multiple locations) to resume, then click Resume. NetWare Note: Use Options (F10) > Configuration Status. Select the location, then click Resume. MTA Web Console You can suspend and resume processing for a specific location on the Links page. Select one or more locations, then click Suspend or Resume as needed. Suspending/Resuming the MTA Admin Thread You can cause the MTA to stop updating the domain database (wpdomain.db) without stopping the MTA completely. For example, you could suspend the MTA admin thread while backing up the domain database. To suspend the MTA admin thread: 1 At the server where the MTA is running, display the MTA agent console. 2 Click Configuration > Admin Status > Suspend. NetWare Note: Use Options > Admin Status > Suspend. The MTA admin thread will no longer access the domain database until you resume processing. To resume the MTA admin thread: 1 At the server where the MTA is running, display the MTA agent console. 2 Click Configuration > Admin Status > Resume. NetWare Note: Use Options (F10) > Admin Status > Resume. MTA Web Console You can suspend and resume the MTA admin thread from the Configuration page. Under the General Settings heading, click Admin Task Processing > Suspend or Resume > Submit. Displaying the MTA Software Date It is important to keep the MTA software up-to-date. You can display the date of the MTA software from the MTA agent console. 1 At the server where the MTA is running, display the MTA agent console. 2 Click Help > About MTA. NetWare Note: To check the date of the MTA NLM, you can list the gwmta.nlm file in the agent installation directory (typically, the sys:\system directory) or use the modules gwmta.nlm command at the server console prompt. MTA Web Console You also check the MTA software date on the Environment page. Displaying the Current MTA Settings You can list the current configuration settings of the MTA at the MTA agent console. To display the current MTA settings: 1 At the server where the MTA is running, display the MTA agent console. Monitoring the MTA 611 2 Click Configuration > Agent Settings. NetWare Note: Use View Log File (F9) to check the MTA settings recorded at the top ofthe log file. For information about the MTA settings, see Chapter 46, “Using MTA Startup Switches,” on page 643. MTA Web Console You check the current MTA settings on the Configuration page. Displaying MTA Status Information The MTA agent console displays essential information about the functioning of the MTA. More detailed information is also available. To display detailed MTA configuration information: 1 Atthe server where the MTA is running, display the MTA agent console. 2 Click Configuration > Status to display a list of the locations to which the MTA is connected. NetWare Note: Use Options (F10) > Configuration Status. The following information is provided: Location Name: Displays the name of the location serviced by the MTA. Location Type: Indicates whether the location is a domain, post office, or gateway. Connection Status: Indicates whether the MTA has been successful in locating and opening the database in the location. + Open: The MTA can access the database or communicate with the agent at the location. + Closed: The MTA cannot access the database or communicate with the agent at the location. For assistance, see “MTA Configuration Status Isn't Open” in n “Message Transfer Agent Problems” in Group Wise 6.5 Troubleshooting 2: Solutions to Common Problems. + Suspended: The MTA is not processing messages for the location because it has been suspended. See “Suspending/Resuming MTA Processing for a Location” on page 610. + Open Pending: Post offices in the domain are in the process of opening and the MTA is clearing its holding gueues. After this is accomplished, the MTA begins processing current messages and the status changes to Open. Home: Displays the full path to the database that the MTA services in the listed location. For a TCP/IP connection, it displays the IP address of the server that the MTA connects to in order to service the database. 3 Select a location, then click Details to display the above information plus the following additional details: Hold: Displays the full path to the location ofthe mslocal directory structure used by the MTA to hold messages for closed locations. Pull: Displays the transfer pull directory, if any. See “Using a Transfer Pull Configuration” on page 596. Version: Provides the version (6.x/5.x/4.x) of the database at the location. Last Closed/Opened: Provides the date and time when the location was last closed and opened. 612 GroupWise 6.5 Administration Guide Last Closure Reason: Indicates why a closed location is closed. To look up last closure reasons, see “Message Transfer Agent Error Messages” in Group Wise 6.5 Troubleshooting 1: Error Messages. Messages Written/Read: Provides statistics about throughput since the MTA was last started. Applications: Displays the programs the MTA can deliver messages to. Depending on the configuration of your GroupWise system, you might see Group Wise agents or GroupWise 4.1 servers listed. TCP/IP: Lists the IP port the MTA listens on. MTA Web Console You can check the current MTA status on the Links page at the MTA Web console. Click a direct link to view its message queues. Displaying Live Remote Status You can monitor the live remote connections the MTA is servicing for Remote client users. For information about live remote processing, see “Enabling Live Remote” on page 589. 1 At the server where the MTA is running, display the MTA agent console. 2 Click Configuration > Live Remote Status. NetWare Note: Use Options (F10) > Live Remote Status. The status information lists the GroupWise Remote client users who are connected to the MTA, along with the post offices and domains the MTA communicates with. Displaying MTA Admin Thread Status Status information for the MTA admin thread is displayed in a separate dialog box, rather than on the main MTA agent console. To display MTA admin thread status information: 1 At the server where the MTA is running, display the MTA agent console. 2 Click Configuration > Admin Status. NetWare Note: Use Options (F10) > Admin Status. The following status information is displayed: Admin Message Box The Admin Message box provides the following information about the workload of the MTA admin thread: Completed: Number of administrative message successfully processed. Errors: Number of administrative messages not processed due to errors. In Queue: Number of administrative messages waiting in the queue to be processed. Send Admin Mail: Select this option to send a message to the administrator whenever a critical error occurs. See “Notifying the Domain Administrator” on page 632. Admin Database Box The Admin Database box provides the following information about the domain database: Status: Displays one of the following statuses: Monitoring the MTA 613 + Normal: The MTA admin thread is able to access the domain database normally. + Recovering: The MTA admin thread is recovering the domain database. + DB Error: The MTA admin thread has detected a critical database error. The domain database (wpdomain.db) cannot be recovered. Rebuild the domain database in ConsoleOne. See “Rebuilding Domain or Post Office Databases” on page 349. The MTA admin thread will not process any more administrative messages until the database status has returned to Normal. + Unknown: The MTA admin thread cannot determine the status of the domain database. Exit the MTA, then restart it, checking for errors on startup. DB Sort Language: Displays the language code for the language that determines the sort order of lists displayed in ConsoleOne and the Group Wise system Address Book. Recovery Count: Displays the number of recoveries performed on the domain database for the current MTA session. Admin Thread Box The Admin Thread box provides the following information about the MTA admin thread: Status: Displays one of the following statuses: + Running: The MTA admin thread is active. + Suspended: The MTA admin thread is not processing administrative messages. ¢ Starting: The MTA admin thread is initializing. + Terminated: The MTA admin thread is not running. MTA Web Console You can display MTA admin thread status from the Configuration page. Under the General Settings heading, click Admin Task Processing. Recovering the Domain Database Automatically or Immediately 614 The MTA admin thread can recover the domain database (wpdomain.db) when it detects a problem. To enable/disable automatic domain database recovery: 1 At the server where the MTA is running, display the MTA agent console. 2 Click Configuration > Admin Status > Automatic Recovery to toggle this feature on or off for the current MTA session. NetWare Note: Use Options (F10) > Admin Status > Automatic Recovery. To recover the domain database immediately: 1 At the server where the MTA is running, display the MTA agent console. 2 Click Configuration > Admin Status > Perform DB Recovery. NetWare Note: Use Options (F10) > Admin Status > Perform DB Recovery. For additional database repair procedures, see Chapter 26, “Maintaining Domain and Post Office Databases,” on page 345. GroupWise 6.5 Administration Guide MTA Web Console You can recover the post office database from the Configuration page. Under the General Settings heading, click Admin Task Processing. Select Automatic Recovery or Perform DB Recovery as needed. Performing eDirectory User Synchronization You can configure the MTA to perform Novell® eDirectory™ user synchronization at regular intervals. See “Using eDirectory User Synchronization” on page 598. You can also start eDirectory user synchronization manually from the NetWare MTA agent console. To start eDirectory user synchronization immediately: 1 At the server where the NetWare MTA is running, display the MTA agent console. 2 Press F4. MTA Web Console You can see when the next eDirectory user synchronization even will occur at the bottom of the Configuration page. Browsing the Current MTA Log File The MTA displays only the most urgent messages in the alert box. Additional information is written to the MTA log file. The amount of information depends on the current log settings for the MTA. See “Using MTA Log Files” on page 625. The information automatically scrolls up the screen as additional information is written. You can stop the automatic scrolling so you can manually scroll back through earlier information. To browse the current MTA log file and control scrolling: 1 At the server where the MTA is running, display the MTA agent console. 2 Click Log > Active Log. NetWare Note: Use View Log File (F9). 3 Deselect Automatic Scrolling to manually scroll back through parts of the log that have already scrolled out of the box. 4 Click Freeze to stop the MTA from logging information to the active log box. 5 Click Thaw when you want the MTA to resume logging information to the active log box. For explanations of messages in the MTA log file, see “Message Transfer Agent Error Messages” in GroupWise 6.5 Troubleshooting 1: Error Messages. MTA Web Console You can browse and search MTA log files on the Log Files page. Viewing a Selected MTA Log File Reviewing log files is an important way to monitor the functioning of the MTA. 1 At the server where the MTA is running, display the MTA agent console. 2 Click Log > View Log Files. 3 Select a log file, then click View. NetWare Note: Use Options (F10) > View Log Files. Monitoring the MTA 615 For explanations of messages in the MTA log file, see “Message Transfer Agent Error Messages” in Group Wise 6.5 Troubleshooting 1: Error Messages. MTA Web Console You can view and search MTA log files on the Log Files page. Cycling the MTA Log File You can have the MTA start a new log file as needed. 1 At the server where the MTA is running, display the MTA agent console. 2 Click Log > Cycle Log. NetWare Note: Use Options (F10) > Cycle Log File. Adjusting MTA Log Settings Default log settings are established when you start the MTA. However, they can be adjusted for the current MTA session from the MTA agent console. 1 At the server where the MTA is running, display the MTA agent console. 2 Click Log > Log Settings. NetWare Note: Use Options (F10) > Log Settings. 3 Adjust the values as needed for the current MTA session. See “Using MTA Log Files” on page 625. MTA Web Console You can adjust MTA log settings from the Configuration page. Click the Event Log Settings heading. Editing the MTA Startup File You can change the configuration of the MTA by editing the MTA startup file from the MTA agent console. 1 At the server where the MTA is running, display the MTA agent console. 2 Click Configuration > Edit Startup File. NetWare Note: Use Options > Actions > Edit Startup File. 3 Make the necessary changes, then save and exit the startup file. 4 Stop and restart the MTA. Accessing Online Help for the MTA Click Help on the menu bar for information about the MTA agent console. Click the Help button in any dialog box for additional information. NetWare Note: Press F1 for information in any dialog box or menu. 616 GroupWise 6.5 Administration Guide Using the MTA Web Console The MTA Web console enables you to monitor the MTA from any location where you have access to a Web browser and the Internet. This provides substantially more flexible access than the MTA agent console, which can only be accessed from the server where the MTA is running. + “Setting Up the MTA Web Console” on page 617 + “Accessing the MTA Web Console” on page 619 + “Monitoring the MTA from the MTA Web Console” on page 619 Setting Up the MTA Web Console The default HTTP port for the MTA Web console is established during MTA installation. You can change the port number and increase security after installation in ConsoleOne. 1 In ConsoleOne, browse to and right-click the MTA object, then click Properties. 2 Click Group Wise > Network Address to display the Network Address page. LA x GroupWise + | NDS Rights v | Other | Rights to Files and Folders | Network Address TCPIIP Address: 123.45.67.89 IPXISPX Address: 2] Port SSL Message Transfer: 7100 = Disabled qa HTTP: 7180 $| [Disabled x Page Options... OK Cancel Apply Help If you configured the MTA for TCP/IP links during installation, the TCP/IP Address field should display the MTA server’s network address. If it does not, follow the instructions in “Using TCP/IP Links between Domains” on page 579. The MTA must be configured for TCP/ IP in order to provide the MTA Web console. 3 Make a note of the IP address or DNS hostname in the TCP/IP Address field. You will need this information to access the MTA Web console. The HTTP Port field displays the default port number of 7180. 4 If the default HTTP port number is already in use on the MTA server, specify a unique port number. 5 Make a note of the HTTP port number. You will need this information to access the POA Web console. 6 Ifyou want to use an SSL connection for the MTA Web console, select Enabled in the HTTP SSL drop-down list. Monitoring the MTA 617 For additional instructions about using SSL connections, see Chapter 80, “Encryption and Certificates,” on page 1039. 7 Click Apply to save your changes on the Network Address page. If you want to limit access to the MTA Web console, you can provide a username and password. 8 Click Group Wise > Agent Settings to display the Agent Settings age. Scan Cyele: 15 El seconds Scan High: 5 4 seconds Attach Retry: 600 = seconds M Enable Automatic Database Recovery C Use 2nd High Priority Scanner F Use 2nd Mail Priority Scanner SNMP Community "Get" String: HTTP Settings HTTP User Name: HTTP Password: Set Password Page Options... OK Apply | Help 9 Inthe HTTP Settings box: Ga Inthe HTTP User Name field, specify a unigue username. 9b Click Set Password. 9c Type the password twice for verification. 9d Click Set Password. Unless you are using an SSL connection, do not use an eDirectory username and password because the information passes over the insecure connection between your Web browser and the MTA. For convenience, use the same username and password for all agents that you plan to monitor from GroupWise Monitor. This saves you from having to provide the username and password information as Monitor accesses each agent. 10 Click OK to save the MTA Web console settings. ConsoleOne then notifies the MTA to restart so the new settings can be put into effect. Corresponding Startup Switches You could also use the /httpport, /httpuser, and /httppassword startup switches in the MTA startup file to enable the MTA Web console. In addition, you can use the /httprefresh switch to control how often the MTA refreshes the information provided to your Web browser. 618 GroupWise 6.5 Administration Guide Accessing the MTA Web Console To monitor the MTA from your Web browser, view the MTA Web console by supplying the network address and port number as provided in ConsoleOne. For example: http://123.456.78.90:7100 http://123.456.78.90:7180 http://server1:7100 https://server2:7180 When viewing the MTA Web console, you can specify either the message transfer port or the HTTP port. Status | Configuration | Environment | Log Files | Links | Message Tracking | Help Restart MTA Domains 2 D Post Offices 2 1 Gateways 2 D Routed 668 D Undeliverable 390 D Errors D D 01-29 15:11:58 SNMP Get: Requested parameters obtained O Monitoring the MTA from the MTA Web Console The MTA Web console provides several pages of information to help you monitor the performance of the MTA. The bar at the top of the MTA Web console displays the name of the MTA and its domain. Below this bar appears the MTA Web console menu that lists the pages of information avallable in the MTA Web console. Online help throughout the MTA Web console helps you interpret the information being displayed and use the links provided. Monitoring MTA Status When you first access the MTA Web console, the Status page is displayed. Online help throughout the MTA Web console helps you interpret the information being displayed and use the links provided. Monitoring the MTA 619 Status | Configuration | Environment | Log Files | Links | Message Tracking | Help Restart MTA Domains 2 D Post Offices 2 1 Gateways 2 D Routed 668 D Undeliverable 390 D Errors D D Queue Information Router D Manufacturing Link or transport down Alerts 01-29 15:09:53 Manufacturing: Post office now closed 01-29 15:11:58 SNMP Get: Requested parameters obtained O Click the Router link to display details about the MTA routing queue (gwinprog). You can quickly determine how many messages are awaiting processing, how large they are, and how long they have been waiting in the routing queue. Click a closed location to display is holding queue to see how many messages are waiting for transfer. Checking the MTA Operating System Environment On the MTA Web console menu, click Environment to display information about the operating system where the MTA is running. On a NetWare server, the following information is displayed: PRY-GWDOC5B Company Novell OS Revision NetWare 5.60.01 OS Date January 15, 2002 Supported Connections 63 Connections in Use 35 Receive Buffer Max 0000 (Recommended 2500) Module Information GroupWise Engine (release version) GWENN4.NLM Version 5.05 Memory Allocated 0624 Build Date -16-2003 GroupWise MTA (release version) GWMTA.NLM Version 5.05 Memory Allocated 4792 Build Date -16-2003 GroupWise Post Office Agent (Release version) GWPOA.NLI Version 6.05 Memory Allocated 4856 Build Date -16-2003 Novell Standard C Runtime Library for NLMs [optimized, 1820] CLIB.NLM Version 5.90 e On a Linux server, the following information is displayed: 620 GroupWise 6.5 Administration Guide r Configuration Server jbd-Inx OS Revision Linux Release 2.4.19-4GB Main Thread Process ID 1884 Build Dates GroupWise Agent Build Date 04-29-04 GroupWise Resource Build Date 04-30-04 On a Windows server, the following information is displayed: se 6.5.0 MTA - Provo2 Status | Configuration | Environment | Log Files | Links | Message Tracking | Help OS Data Windows NT (TM) Version 4.0 (Build 1381) Service Pack 6 Build Dates GroupWise Agent Build Date 01-16-03 GroupWise Engine Build Date 01-16-03 GroupWise Resource Build Date 01-16-03 Viewing and Searching MTA Log Files On the MTA Web console menu, click Log Files to display and search MTA log files. Gr .0 MTA - Pr Status | Configuration | Environment | Log Files | Links | Message Tracking | Help View Event Log Settings nt Log Filter Events containing Message type I Message logging F Routing I Event logging I Admin I Dispatcher I Scanner I” Message transfer Event logs: O Select all 0126mta.001 01-27-03 00:00:02 302934 012?mta.001 01-28-03 00:00:02 292645 0128mta.001 01-28-03 16:39:24 216472 0128mta.002 01-28-0316:51:50 9784 0128mta.003 01-28-0317:48:14 23164 0128mta.004 01-28-0317:49:12 15945 0128mta.005 01-28-0317:51:06 44154 0128mta.006 01-28-0317:52:26 4681 0128mta.007 01-29-03 00:00:02 7282 0129mta.001 01-29-03 10:34:12 11240 0129mta.002 01-29-03 10:35:56 5210 0129mta.003 01-29-0311:01:40 6181 0129mta.004 01-29-03 11:04:10 3765 * 0129mta.005 01-29-0311:04:10 0 View Events To view a particular log file, select the log file, then click View Events. To search all log files for a particular string, type the string in the Events Containing field, select Select AIL, then click View Events. You can also manually select multiple log files to search. In the Message type list, you can select one or more types of MTA processing to search for: Message Logging (MLG): The message logging threads write information into the message log file if message logging has been turned on. See “Enabling MTA Message Logging” on page 603. Event Logging (LOG): The event logging thread writes information into the event log files that you can search on this page. See “Using MTA Log Files” on page 625. Monitoring the MTA 621 Dispatcher (DIS): The dispatcher thread starts other MTA threads as needed to meet the demands being put on the MTA at any given time. Message Transfer (MTP): The message transfer threads communicate with other MTAs and with POAs in the local domain to transfer messages to domains and post offices to which the local MTA is linked by way of TCP/IP. See “Using TCP/IP Links between Domains” on page 579 and “Using TCP/IP Links between a Domain and its Post Offices” on page 583. Router (RTR): The router threads process messages in the routing gueue and prepare them for transfer to the next hop in the link path to their destinations. See “Optimizing the Routing Queue” on page 639. Admin (ADM): The admin thread updates the domain database (wpdomain.db) whenever administrative information changes. See “MTA Admin Thread Status Box” on page 608. Scanner (SCA): The scanner threads check for incoming messages when UNC or mapped links are in use. See “Adjusting the Number of MTA Scanner Threads for the Domain and Post Offices” on page 638. The results of the search are displayed on a separate page which can be printed. Monitoring the Routing Aueue On the MTA Web console menu, click Status, then click Router to display the contents of the routing gueue. Typically, no message files are waiting unless the MTA is down or backlogged. 6.5.0 MTA - Provo2 Status | Configuration | Environment | Log Files | Links | Message Tracking | Help diigwsystemiprovo2imslocaligwinprog gwinprog Queue Count KBytes Oldest Newest 0 0 0 E E 1 0 0 2 0 a à D 0 4 0 0 Š 0 D 6 0 a Z 0 0 You can click any queue to view the message files it contains. Monitoring Links On the MTA Web console menu, click Links to monitor the direct links between the MTA and other locations. Status | Configuration | Environment | Log Files | Links | Message Tracking | Help Last updated 01-29-03 13:05:33 View Link Configuration View TCP/IP Connections View Gateways Direct Link Type Status Messages Queued Oldest F Accounting Post Office Closed 100 26:15:49 I Provo2 Domain Open D FT GWA Gateway Open D FM Sales Post Office Open 0 M WEBACES5A Gateway Open D M Provo1 Domain Open D Suspend Resume 622 GroupWise 6.5 Administration Guide Tracking Messages Click a location to view its holding gueue. Click View Link Configuration to determine the address of each location and access the agent Web consoles of other domains and of post offices that belong to the local domain. Click View TCP/IP Connections to view incoming and outgoing TCP/IP links. Click Vlew Gateways to restrict the list to just gateways. Before you can track messages at the MTA Web console, you must enable message logging for MTAs throughout your system. See “Enabling MTA Message Logging” on page 603. When you enable MTA message logging, the MTA stores data about GroupWise message traffic as it processes messages. The stored data is then available for use from the MTA Web console. To track a specific message, have the sender check the Sent Item Properties for the message in the Group Wise client. The Mail Envelope Properties field displays the message ID of the message; for example, 3ADSEDEB.31D : 3 : 12763. To track all messages sent by a particular user, make a note of the user’s GroupWise user ID. On the MTA Web console menu, click Message Tracking. Grol e 6.5.0 MTA - Provo2 Status | Configuration | Environment | Log Files | Links | Message Tracking | Help View Message Log Settings View Log Files Filename Submit Message ID PK Originator FL Fill in one of the fields, depending on what you want to track, then click Submit. The results of the search are displayed on a separate page which can be printed. Controlling the MTA from the MTA Web Console At the MTA Web console, you can change some MTA log settings for the current MTA session. You can also stop and start some specific MTA threads. + “Changing MTA Configuration Settings” on page 623 + “Controlling the MTA Admin Thread” on page 624 + “Controlling Links to Other Locations” on page 624 Changing MTA Configuration Settings On the MTA Web console menu, click Configuration. Online help on the Configuration page helps you interpret the configuration information being displayed. Monitoring the MTA 623 Log Files | Links General Settings: Domain Directory Work Directory: Preferred GWIA: Default Route: Force Route: nown IDomains: Allow Direct Send to Other Systems Error Mail to Administrator: Display the Active Log Window Initially: eDirectory Authenticated: eDirectory User Synchronization Admin Task Processing: Database Recovery: Simple Network Management Protocol (SNMP): TCPAP Settings: Maximum Inbound TCP/IP Connections: TCP Port for Incoming Connections: TCP Port for HTTP Connections: HTTP Refresh Rate: TCP/IP Connection Timeout TCP/IP Data Timeout: Event Log Settings: Log Level Disk Logging: Log Directory: Maximum Log File Age: Maximum Log Disk Space: d'\gwsystem\provo2 d:\gwsystem\provo2\mslocal Provo1. GWIA Provo1 No *Corporate.com No No Yes JBoogaard. DOCDEY.PRYW. Novell Yes Yes Yes Disabled 40 7100 7180 60 secs 5 20 Normal Yes d:\gwsystem\provo2\mslocal 7 Days 1024 Kilobytes Click the Event Log Settings heading to change the MTA log settings for the current MTA session. Controlling the MTA Admin Thread On the Configuration page, click Admin Task Processing. Grou 5.5.0 POA - Development.Provo1 Status | Configuration | Environment | Log Files | Scheduled Events | MTP Status | Help Admin Messages Completed 83 Errors 0 In Queue 0 Send Admin Mail V Admin Database Status Normal DB Sort Language US Recovery Count D Automatic Recovery Vv Perform DB Recovery O Admin Thread Status Running Suspend O Resume O Submit | Reset Modify the functioning of the MTA admin thread as needed, then click Submit. The changes remain in effect for the current MTA session. Controlling Links to Other Locations On the MTA Web console menu, click Links. 624 GroupWise 6.5 Administration Guide Vise 6.5.0 MTA - Provo2 Status | Configuration | Environment | Log Files | Links | Message Tracking | Help Last updated 01-29-03 13:05:33 View Link Configuration View TCP/IP Connections View Gateways Direct Link Type Status Messages Queued Oldest F Accounting Post Office Closed 100 26:15:49 M Provo2 Domain Open D - T GWA Gateway Open 0 C Sales Post Office Open 0 O WEBACGSA Gateway Open D M Provo! Domain Open D Suspend Resume Select one or more locations, then click Suspend or Resume as needed. Using MTA Log Files Error messages and other information about MTA functioning are written to log files as well as displaying on the MTA agent console. Log files can provide a wealth of information for resolving problems with MTA functioning or message flow. This section covers the following subjects to help you get the most from MTA log files: + “Configuring MTA Log Settings and Switches” on page 625 + “Viewing MTA Log Files” on page 626 + “Interpreting MTA Log File Information” on page 626 Configuring MTA Log Settings and Switches The following aspects of logging are configurable: + Log File Path (/log) + Disk Logging (/logdiskoff) + Logging Level (/loglevel) + Maximum Log File Age (/logdays) + Maximum Log File Size (/logmax) You can configure the log settings in the following ways: + Using ConsoleOne to establish defaults (see “Adjusting the MTA Logging Level and Other Log Settings” on page 588) + Using startup switches to override ConsoleOne settings (see “Using MTA Startup Switches” on page 643) + Using the MTA agent console to override other MTA settings for the current session (see “Adjusting MTA Log Settings” on page 616 + Using the MTA Web console to override other MTA settings for the current MTA session (see “Controlling the MTA from the MTA Web Console” on page 623) Monitoring the MTA 625 Viewing MTA Log Files You can view the contents ofthe MTA log file from the MTA agent console and Web console. See the following tasks: + “Browsing the Current MTA Log File” on page 615 + “Viewing a Selected MTA Log File” on page 615 + “Cycling the MTA Log File” on page 616 + “Viewing and Searching MTA Log Files” on page 621 Interpreting MTA Log File Information On startup, the MTA records the MTA settings currently in effect. Thereafter, it logs events that take place, including errors. To look up error messages that appear in MTA log files, see “Message Transfer Agent Error Messages” in Group Wise 6.5 Troubleshooting 1: Error Messages. Because the MTA consists of multiple threads, you might find it useful to retrieve the log file into an editor and sort it on the thread ID that follows the date and time information. Sorting will group all messages together for the same MTA thread. Atthe MTA Web console, you can search through multiple log files. See “Viewing and Searching MTA Log Files” on page 621. You can also use the search capability ofthe MTA Web console to gather information about a specific MTA thread. See “Viewing and Searching MTA Log Files” on page 621. Using GroupWise Monitor Group Wise Monitor is a monitoring and management tool that allows you to monitor Group Wise agents and gateways from any location where you are connected to the Internet and have access to a Web browser. The MTA Web console can be accessed from Group Wise Monitor, enabling you to monitor all MTAs in your Group Wise system from one convenient location. In addition, Group Wise Monitor can notify you when agent problems arise. GroupWise» Monitor (Olea ae] B Novell ~ © Corporate Mail [0] Monitored agents for "Corporate Mail.NetWare Agents” group » NetWare Agents [2] Total: 2 Displayed: 1 - 2 > Windows Agents [2 Mindows Agents (2) | poes | Select all | [Fonem] [ Suspend] [Resume | [Wave] [pins] Clear All Thresholds | [Help| [Rename | Name Status Status Duration Up Time Type [ Move | C @ Provot Normal 10d1h46m 10d1h29m MTA 6.5 Delete C (9) Development.Provo1 Normal 10d1h29m 10d1h29m POA 6,5 For installation and setup instructions, see “Installing GroupWise Monitor” in the GroupWise 6.5 Installation Guide. For usage instructions, see “Monitor” on page 901. Using NetWare 6.5 Remote Manager If the MTA is running on a NetWare 6.5 server, you can use the IP Address Management feature in NetWare Remote Manager (NetWare Remote Manager > Manage Server > IP Address Management) to view the IP address and port configuration for the MTA. This is also true for other Group Wise agents (POA, Internet Agent, and WebAccess Agent) running on NetWare 6.5 servers. 626 GroupWise 6.5 Administration Guide IMPORTANT: If the MTA is running in protected mode, it will not display in NetWare Remote Manager. You access NetWare Remote Manager by entering the following URL in a Web browser: http://server address:8008 For example: http://137.65.123.11:8008 For more information about using NetWare Remote Manager, see the NetWare 6.5 documentation (http://www.novell.com/documentation/nw65). Using SNMP Monitoring Programs You can monitor the MTA from the Management and Monitoring component of Novell ZENworks® for Servers, Manage Wise*, or another SNMP management and monitoring program. When properly configured, the MTA sends SNMP traps to network management consoles for display along with other SNMP monitored programs. Although the MTA is SNMP-enabled by default, the server where the MTA is installed must be properly configured to support SNMP, and the MTA object in eDirectory must be properly configured as well. To set up SNMP services for your server, complete the following tasks: + “Setting Up SNMP Services for the MTA” on page 627 + “Copying and Compiling the MTA MIB File” on page 630 + “Customizing Your Manage Wise Installation to Monitor the MTA” on page 631 + “Configuring the MTA for SNMP Monitoring” on page 631 Setting Up SNMP Services for the MTA Select the instructions for the platform where the MTA runs: + “Setting Up SNMP Services for the NetWare MTA” on page 627 + “Setting Up SNMP Services for the Linux MTA” on page 628 + “Setting Up SNMP Services for the Windows MTA” on page 628 Setting Up SNMP Services for the NetWare MTA The NetWare MTA supports SNMP through the SNMP services loaded on the NetWare server. SNMP services are provided through the SNMP NLM. The SNMP NLM initiates and responds to requests for monitoring information and generates trap messages. If the SNMP NLM is not loaded before the NetWare MTA, the MTA still loads and functions normally, but SNMP support is disabled. The MTA does not attempt to auto-load snmp.nlm. To load the SNMP NLM manually: 1 Go to the console of each NetWare server where you want to implement SNMP services. These servers should already have the GroupWise agents installed. 2 Type the command to load the SNMP NLM: Syntax: load snmp v control=x monitor=y trap=z Monitoring the MTA 627 where v represents Verbose, meaning to display informational messages, and x, y and z are replaced with your system SNMP community strings for SNMP SETs, GETs and TRAPs). Example: load snmp v control=private monitor=public trap=all The configuration for the SNMP NLM is found in snmp.cfg and traptarg.cfg in the sys:\etc directory. View the contents of these files for more information. The TCP/IP NLM automatically loads snmp.nlm, using default values for the community strings. If your system uses different community string values, load snmp.nlm before tcpip.nlm. 3 Ifthe SNMP NLM is already loaded, you can add the control and trap parameters by typing the following at the console prompt: snmp control= trap= To automatically load these commands, include them in the autoexec.ncf file. For more information about implementing SNMP services, see your NetWare documentation. 4 Skip to “Copying and Compiling the MTA MIB File” on page 630. Setting Up SNMP Services for the Linux MTA The Linux MTA is compatible with NET-SNMP. An older version of SNMP called UCD-SNMP cannot be used with the Linux MTA. NET-SNMP comes standard with the versions of Red Hat Linux supported for GroupWise 6.5 for Linux, but it does not come standard with the supported versions of SUSE Linux. If you are using SUSE Linux, you must update to NET-SNMP in order to use SNMP to monitor the Linux MTA. 1 Make sure you are logged in as root. 2 If NET-SNMP is not already set up on your Linux server, use the following command to configure SNMP: snmpconf -g basic setup The snmpconf command creates the snmpd.conf file in one ofthe following directories, depending on your version of Linux: lusr/share/snmp lusr/local/share/snmp -/.snmp 3 Locatethe snmpd.conf file on your Linux server. 4 Inatext editor, open the snmpd.conf file and add the following line: dlmod Gwsnmp /opt/novell/gw/agents/lib/libgwsnmp.so 5 Savethe snmpd.conf file and exit the text editor. 6 Restart the SNMP daemon (snmpd) to put the changes into effect. 7 Skip to “Copying and Compiling the MTA MIB File” on page 630. Setting Up SNMP Services for the Windows MTA SNMP support is provided for up to eight Windows MTAs on the same Windows server. Upon startup, each instance of'the MTA is dynamically assigned a row in its SNMP table. View the contents of the MTA MIB for a description of the SNMP variables in the table. 628 GroupWise 6.5 Administration Guide To set up SNMP services for the Windows MTA, complete the following tasks: + “Installing Windows SNMP Support” on page 629 + “Installing Group Wise Agent SNMP Support” on page 629 Installing Windows SNMP Support For Windows NT 3.51 and 4.0 and for Windows 2000, the SNMP service is usually not included during the initial operating system installation. The SNMP service can be easily added at any time. To add or configure the SNMP service, you must be logged in as a member of the Administrator group. To add the SNMP service to a Windows NT server: 1 From the Control Panel, double-click Network. 2 For Windows NT 4.0, click Services > Add, then select SNMP Service. or For Windows NT 3.51, click Add Software, select TCP/IP Protocol and Related Components, then select SNMP Service. 3 Follow the on-screen prompts. You will need your original Windows NT disk. You are given the opportunity to configure the SNMP service. The only required information for GroupWise is the Trap Destination and Community Name. 4 After the installation is complete, reboot the server. For more information about configuring the SNMP service, see your Windows NT documentation. To add the SNMP service to a Windows 2000 server: 1 From the Control Panel, double-click Add/Remove Programs. 2 Click Add/Remove Windows Components. 3 Select Management and Monitoring Tools. 4 Click Details, then select Simple Network Management Protocol. Continue with “Installing GroupWise Agent SNMP Support” on page 629. Installing GroupWise Agent SNMP Support The GroupWise Agent Installation program includes an option for installing SNMP support. However, if the server where you installed the agents did not yet have SNMP set up, that installation option was not available. Now that you have set up SNMP, you can install GroupWise agent SNMP support. At the Windows server where you want to install the GroupWise agent SNMP support: 1 Run setup.exe at the root of the GroupWise 6.5 Administrator CD, then click Install Products > GroupWise Agents > Install GroupWise Agents. or Run install.exe from the agents subdirectory on the GroupWise 6.5 Administrator CD or in your software distribution directory if you have updated it with the latest Group Wise software. 2 In the Installation Path dialog box, browse to and select the path where the agent software is installed, then select Install and Configure SNMP for GroupWise Agents. Monitoring the MTA 629 3 To shorten the install time, deselect Install GroupWise Agent Software. 4 Continue through the rest of the installation process as prompted by the Agent Installation program. The Agent Installation program copies the SNMP support files to the agent installation directory, makes the appropriate Windows registry entries, and restarts the Windows SNMP service. 5 Continue with “Copying and Compiling the MTA MIB File” on page 630. Copying and Compiling the MTA MIB File An SNMP-enabled MTA returns information contained in a Management Information Base (MIB). The MIB is an ASCII data structure that defines the information gathered. It also defines the properties that can be monitored and managed on the SNMP-enabled MTA. Before you can monitor an SNMP-enabled MTA, you must compile the gwmta.mib file using your SNMP management program. For NetWare or Windows, the GroupWise MIBs are located on the GroupWise 6.5 Administrator CD in the \agents\snmp directory or in the software distribution directory\agents\snmp directory if you have updated it with the latest Group Wise software. For Linux, the Group Wise MIBS are located on the Group Wise 6.5 for Linux Administrator CD in the /agents/snmp directory. 1 Copy the gwmta.mib file from the \agents\snmp directory to the location required by your SNMP management program. For example, ManageWise users would copy the gwmta.mib file to the \mw\nms\snmpmibs\current directory. ZENworks Server Management users can access the gwmta.mib file in the software distribution directory. 2 Compile or import the gwmta.mib file as required by your SNMP management program. For example, to compile the gwmta.mib file for ZEN works Server Management: 2a In ConsoleOne, right-click the Site Server object, then click Properties > MIB Pool. 2b Click Modify Pool > Add. 2c Browse to and select the gwmta.mib file, then click OK. 2d Click Compile. 2e Make sure that the server where the MTA is running is configured to send SNMP traps to the ZEN works Server Management Site Server. + Ona NetWare server, add the IP address or hostname of the ZEN works Server Management Site Server to the traptarg.cfg file in the sys:\etc directory. + Ona Windows server, add the IP address or hostname of the ZENworks Server Management Site Server to the list of trap destinations. From the Windows NT Control Panel, double-click Network, or, from the Windows 2000 Control Panel, double-click Administrative Tools. Then click Services > SNMP Service > Properties > Traps. Refer to your SNMP management program documentation for further instructions. 630 GroupWise 6.5 Administration Guide 3 If you are using Novell ManageWise, continue with “Customizing Your ManageWise Installation to Monitor the MTA” on page 631. Or If you are not using ManageWise, skip to “Configuring the MTA for SNMP Monitoring” on page 631. Customizing Your ManageWise Installation to Monitor the MTA The Group Wise agent installation includes files that help ManageWise monitor the Group Wise agents more effectively. + “GroupWise MIB Files” on page 631 + “GroupWise Agent Alarm Help File” on page 631 These capabilities are available only with ManageWise, not with ZEN works Server Management. GroupWise MIB Files The Group Wise MIB files include the standard SNMP management information. In addition, the files include annotations that enhance the Alert functions of ManageWise. For example, the Summary provides more detailed information than the Description does in other SNMP management programs. The ManageWise annotations are embedded in comments; therefore, they have no affect on other SNMP management programs. GroupWise Agent Alarm Help File When Group Wise alarms appear in ManageWise, you can double-click the alarm to display the alarm information contained in the Agent Alarm help file. To enable this feature, copy the gwalarm.hlp file from the \agents\snmp directory to the \mw\nms\help directory on your ManageWise station. This help file explains the alarms each agent might produce by giving a description, cause, and action for each alarm. Configuring the MTA for SNMP Monitoring In order for SNMP monitoring programs to monitor the MTA, the MTA must be configured with a network address and SNMP community string. 1 In ConsoleOne, browse to and right-click the MTA object, then click Properties. 2 Click GroupWise > Network Address to display the Network Address page. 3 Click the pencil icon to provide the TCP/IP address or IPX™/SPX™ address of the server where the MTA runs, then click Apply. 4 Click GroupWise > Agent Settings. 5 Provide your system SNMP community GET string, then click OK. ConsoleOne then notifies the POA to restart so the new settings can be put into effect. The MTA should now be visible to your SNMP monitoring program. Monitoring the MTA 631 Notifying the Domain Administrator If you want to be notified with an e-mail message whenever the MTA encounters a critical error, you can designate yourself as an administrator of the domain for which the MTA is running. 1 In ConsoleOne, browse to and right-click the Domain object, then click Properties to display the Identification page. Properties of Provol 4 xi IDS Rights + | Other | Rights to Files and Folders | Domain: Provo1 Description: UNC Path: ÜPRV-GWSYS1gwsystemiprovo11 al Language: English - US v Domain Type: Primary Time Zone: (GMT-07:00) Mountain Time (US 8 Canada) Ka Database Version: 6 Network Type: Novell NetWare y] Administrator: El ea Page Options... OK Cancel Apply | Help 2 Inthe Administrator field, browse to and select your GroupWise user ID. A domain can have a single administrator, or you can create a group to function as administrators. 3 Click OK to save the administrator information. The selected user or group will then begin receiving e-mail messages whenever the MTA for the domain encounters a critical error. Corresponding Startup Switches By default, the MTA will generate error mail if an administrator has been assigned for the domain. Error mail can be turned off using the /noerrormail switch. POA Web Console Another way to receive e-mail notification of POA problems is to use GroupWise Monitor to access the POA Web console. See “Configuring E-Mail Notification” on page 918. Using the MTA Error Message Documentation MTA error messages are documented with the source and explanation of the error, possible causes of the error, and actions to take to resolve the error. See “Message Transfer Agent Error Messages” in GroupWise 6.5 Troubleshooting 1: Error Messages. 632 GroupWise 6.5 Administration Guide Employing MTA Troubleshooting Technigues If you are having a problem with the MTA but not receiving a specific error message, or ifthe suggested actions for the specific error did not resolve the problem, you can review more general troubleshooting strategies for dealing with MTA problems. See “Message Transfer Agent Problems” in “Strategies for Agent Problems” in Group Wise 6.5 Troubleshooting 2: Solutions to Common Problems. You can also use Group Wise Monitor to troubleshoot message transfer problems. See “Monitor” on page 901. Using Platform-Specific MTA Monitoring Tools Each operating system where the MTA runs provides tools for monitoring programs. + “NetWare Monitoring Tools” on page 633 + “Linux Monitoring Tools” on page 633 + “Windows Monitoring Tools” on page 633 NetWare Monitoring Tools If you are running the MTA on NetWare servers, you can use the NetWare Monitor NLM to monitor the effects of the MTA on the NetWare server. NetWare 6.x provides monitoring tools that you canuse from your Web browser. Processor, resource, and memory utilization can be compared to other non-Group Wise NLM programs to determine if the MTA NLM program is monopolizing resources. See your NetWare documentation for additional monitoring suggestions. Linux Monitoring Tools If you are running the MTA on Linux servers, you can use SNMP tools like snmpget and snmpwalk that allow you to retrieve the data about all the services registered with the SNMP service. These tools are part ofthe NET-SNMP package. See your Linux documentation for additional monitoring suggestions. Windows Monitoring Tools If you are running the MTA on Windows servers, you can use the Performance Monitor in Windows Administrator Tools to gather similar information. See your Windows documentation for additional monitoring suggestions. Using MTA Message Logging For extremely detailed monitoring of message flow, you can configure the MTA to gather a variety of statistics. See “Enabling MTA Message Logging” on page 603. Monitoring the MTA 633 634 GroupWise 6.5 Administration Guide Optimizing the MTA You can adjust how the MTA functions to optimize its performance. Before attempting optimization, you should run the MTA long enough to observe its efficiency and its impact on other network applications running on the same server. See Chapter 44, “Monitoring the MTA,” on page 605. Also, remember that optimizing your network hardware and operating system can make a difference in MTA performance. The following topics help you optimize the MTA: + “Optimizing TCP/IP Links” on page 635 + “Optimizing Mapped/UNC Links” on page 636 + “Optimizing the Routing Queue” on page 639 + “Adjusting MTA Polling of Closed Locations” on page 640 Optimizing TCP/IP Links Using startup switches in the MTA startup file, you can fine-tune the performance of TCP/IP links. + “Adjusting the Number of MTA TCP/IP Connections” on page 635 + “Adjusting the MTA Wait Intervals for Slow TCP/IP Connections” on page 636 Adjusting the Number of MTA TCP/IP Connections When using TCP/IP links between domains, you can control the number of inbound connections the MTA can establish for receiving messages. Use the /tcpinbound switch in the MTA startup file to increase the maximum number of inbound connections the MTA can establish from the default of 40 to whatever setting meets the needs of your system. There is no maximum setting. If the MTA is receiving more requests than it can accept, the sending MTAs must wait until a connection becomes available, which slows down message transfer. Each connection requires only about 20 KB. For example, if you configure the MTA to accept 600 connections, it would require approximately 12 MB of RAM. Although there is no maximum setting for inbound connections, this setting is adequate to handle very heavy usage. Use lower settings to conserve RAM or for lighter usage. MTA Web Console You can check the maximum number of TCP/IP connections that the MTA can start on the Configuration page under the TCP/IP Settings heading. Optimizing the MTA 635 Adjusting the MTA Wait Intervals for Slow TCP/IP Connections When using TCP/IP links, you can control how long the MTA waits for responses. By default, the MTA waits 5 seconds for a response when trying to contact another MTA ora POA across a TCP/IP link. If no response is received from the other MTA or the POA, the sending MTA tries again three more times. If all four attempts fail, the MTA reports an error, then waits 10 minutes before it tries again. When the MTA attempts to send messages to another MTA or a POA across a TCP/IP link, the sending MTA tries for 20 seconds before reporting an error. On some networks, these wait intervals might not be sufficient, and the MTA might report an error when, by waiting longer, the needed connection or data transfer would be able to take place. Use the /tcpwaitconnect switch in the MTA startup file to increase the number of seconds the MTA waits for a response from another MTA or a POA across a TCP/IP link. Use the /tcpwaitdata switch in the MTA startup file to increase the number of seconds the MTA attempts to send messages to another MTA or a POA across a TCP/IP link. MTA Web Console You can check the current wait intervals on the Configuration page under the TCP/IP Settings heading. Optimizing Mapped/UNC Links If you must use mapped or UNC links, you can fine-tune how the MTA polls its input queues. + “Using TCP/IP Links between Locations” on page 636 + “Adjusting MTA Polling of Input Queues in the Domain, Post Offices, and Gateways” on page 636 + “Adjusting the Number of MTA Scanner Threads for the Domain and Post Offices” on page 638 NOTE: The Linux MTA does not use mapped or UNC links. Using TCP/IP Links between Locations TCP/IP links between domains or between a domain and its post offices are faster than mapped or UNC links because the MTA is immediately notified whenever a new message arrives. This eliminates the latency involved in scanning input directories for messages to process. To change from mapped or UNC links to TCP/IP links, see “Using TCP/IP Links between Domains” on page 579 and “Using TCP/IP Links between a Domain and its Post Offices” on page 583 Adjusting MTA Polling of Input Queues in the Domain, Post Offices, and Gateways When using mapped or UNC links between the local domain and its post offices and other domains, the MTA can create a lot of network traffic just scanning its input queues, especially if the message load is light. This can be minimized by setting the scan cycle to a higher number. On the other hand, if the scan cycle is set too high, important messages might have to wait in the input queues to be picked up by the MTA. The MTA’s scan cycle settings also control how often it communicates with gateways installed in the domain. 636 GroupWise 6.5 Administration Guide By default, when using mapped or UNC links, the MTA scans its high priority queues every 5 seconds and its regular and low priority gueues every 15 seconds. You can adjust the scan cycle settings to meet the needs of your Group Wise? system. 1 In ConsoleOne*, browse to and right-click the MTA object, then click Properties. 2 Click Group Wise > Agent Settings to display the Agent Settings page. Properties of MTA a xj oupWise vil nos Rights v | Other | Rights to Files and Folders | Agent Settings Scan Cycle: 15 E seconds Scan High: 5 = seconds Attach Retry: 600 ©] seconds Enable Automatic Database Recovery C Use 2nd High Priority Scanner [ Use 2nd Mail Priority Scanner SNMP Community "Get" String: EFp-ÖCCCcl.»»°»::,, O HTTP Settings HTTP User Name: HTTP Password: Set Password Page Options... | oK voy | Her | 3 Decrease the number of seconds in the Scan Cycle field if you want the MTA to scan the regular and low priority queues (2-7) more often. or Increase the number of seconds in Scan Cycle field if you want the MTA to scan the regular and low priority queues (2-7) less often. 4 Decrease the number of seconds in the Scan High field if you want the MTA to scan the high priority queues (0-1) more often. or Increase the number of seconds in the Scan High field if you want the MTA to scan high priority queues (0-1) less often. For the locations and specific uses of the MTA input queues, see “Message Transfer/Storage Directories” in GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. 5 Click OK to save the new scan cycle settings. ConsoleOne then notifies the MTA to restart so the new settings can be put into effect. Corresponding Startup Switches You could also use the /cylo and /cyhi switches in the MTA startup file to adjust the MTA scan cycle. MTA Web Console You can check the current MTA scan cycle on the Configuration page under the Performance Settings heading. Optimizing the MTA 637 Adjusting the Number of MTA Scanner Threads for the Domain and Post Offices When using mapped or UNC links, the MTA automatically starts one high priority scanner thread for the priority 0 and 1 subdirectories of its input queues. It also starts a second scanner thread for the priority 2-7 subdirectories. This default configuration can create a bottleneck under some circumstances: + The priority 0 subdirectory is used for Busy Search requests from Group Wise client users. The priority 1 subdirectory is used by GroupWise Remote users. If your Group Wise system serves a large number of very active Group Wise Remote users, the MTA can stay busy processing reguests from Remote users, causing other users to experience a delay in response to a Busy Search reguest. + The priority 2 subdirectory is used for administrative messages and high priority user messages. Priority 3-7 subdirectories are used for regular and low priority messages and status messages. Certain administrative activities, such as moving a large number ofusers or purging trash, can create numerous administrative messages in the priority 2 subdirectory, causing users to experience a delay in receiving high priority as well as regular messages. For the locations of the MTA input queues, see “Message Transfer/Storage Directories” in Group Wise 6.5 Troubleshooting 3: Message Flow and Directory Structure. You can configure the MTA so that it starts separate scanner threads to service the priority 1 and 2 subdirectories and/or separate scanner threads for the 2-3 and 4-7 subdirectories. IMPORTANT: Do not try to run more than one MTA for the same domain. 1 In ConsoleOne, browse to and right-click the MTA object, then click Properties. 2 Click Group Wise > Agent Settings to display the Agent Settings page. Properties of MTA xÍ || NDS Rights + | Other | Rights to Files and Folders | Scan Cycle: 15 = seconds Scan High: 5 4 seconds Attach Retry: 600 4 seconds M Enable Automatic Database Recovery C Use 2nd High Priority Scanner E Use 2nd Mail Priority Scanner SNMP Community "Get" String: HTTP Settings HTTP User Name: HTTP Password: Set Password | Page Options... OK Apply | Help 3 Select Use 2nd High Priority Scanner to provide separate MTA scanner threads for Busy Searches and GroupWise Remote users. 4 Select Use 2nd Mail Priority Scanner to provide separate MTA scanner threads for administrative messages and high priority user messages vs. regular and low priority messages. 638 GroupWise 6.5 Administration Guide These settings can be used separately (creating three MTA scanner threads) or together (creating four MTA scanner threads). Primary Use Priority Default 2nd High 2ndMail Priority Both Second Directory Operation Priority Scanner Scanner Priority Scanners Busy wpcsin\0 High priority High priority High priority High priority searches scanner scanner scanner scanner thread thread one thread thread one GroupWise wpcsin\1 High priority High priority Remote user scanner scanner requests thread two thread two Administrative wpcsin\2 Mail priority Mail priority Mail priority Mail priority requests and scanner scanner scanner scanner high priority thread thread thread one thread one messages High priority wpcsin\3 statuses Normal priority wpcsin\4 Mail priority Mail priority messages scanner scanner thread two thread two Normal priority wpcsin\5 statuses Low priority wpcsin\6 messages Low priority wpcsin\7 statuses Total Scanner Threads 2 3 3 4 in Use: 5 Click OK to save the new scanner thread settings. ConsoleOne then notifies the MTA to restart so the new setting can be put into effect. Corresponding Startup Switches You could also use the /fast0 and /fast4 switches in the MTA startup file to adjust the allocation of MTA scanner threads. MTA Web Console You can check the current MTA scan cycle on the Configuration page under the Performance Settings heading. Optimizing the Routing Queue Using startup switches in the MTA startup file, you can fine-turn MTA processing in of the routing queue. When the MTA starts, it starts one or more router threads to process its routing queue (gwinprog). As messages arrive in the routing queue, it starts additional routers as needed, within parameters you can set. + “Adjusting the Maximum Number of Active Router Threads” on page 640 + “Adjusting the Maximum Number of Idle Router Threads” on page 640 Optimizing the MTA 639 MTA Web Console You can view the current contents of the routing queue from the Configuration page. Click Router under the Oueue Information heading. Adjusting the Maximum Number of Active Router Threads By default, the MTA will continue to start additional router threads to processes messages in the routing gueue as long as message traffic demands it, until as many as 16 routerthreads are running. Use the /maxrouters switch in the MTA startup file to control the number of router threads the MTA can start. Set /maxrouters to a lower number to conserve resources and keep the MTA from starting more than the specified maximum number of router threads. Adjusting the Maximum Number of Idle Router Threads By default, after the MTA starts a router thread, it keeps it running, up to the maximum number specified by the /maxrouters switch. In a system where short bursts of heavy message traffic are followed by extended lulls, idle router threads could be consuming resources that would be better used by other processes. Use the /maxidlerouters switch in the MTA startup file to determine how many idle router threads are allowed to remain running. The default is 16 idle router threads. Set /maxidlerouters to a lower number if you want the MTA to terminate idle router threads more guickly. Set /maxidlerouters to a higher number if you want the MTA to keep more idle router threads ready to process incoming message traffic. Adjusting MTA Polling of Closed Locations When a location becomes closed (unavailable), the MTA waits before attempting to recontact that location. Ifthe MTA waits only a short period oftime, the MTA can waste time and create network traffic by trying to reestablish a connection with a closed location. On the other hand, you do not want the MTA to ignore an available location by waiting too long. By default, the MTA waits 600 seconds (10 minutes) between its attempts to contact a closed location. You can adjust the time interval the MTA waits to meet the needs of your Group Wise system. 1 In ConsoleOne, browse to and right-click the MTA object, then click Properties. 2 Click Group Wise > Agent Settings to display the Agent Settings page. 640 GroupWise 6.5 Administration Guide Properties of MTA E x| | NDS Rights + | Other | Rights to Files and Folders | Scan Cycle: 15 E seconds Scan High: 5 E seconds Attach Retry: 600 E seconds M Enable Automatic Database Recovery C Use 2nd High Priority Scanner O Use 2nd Mail Priority Scanner SNMP Community "Get" String: HTTP Settings HTTP User Name: HTTP Password: Set Password | Page Options... | OK Apply | Help 3 Decrease the number of seconds in the Attach Retry field if you want the MTA to try to contact closed locations more often. or Increase the number of seconds in Attach Retry field if you want the MTA to try to contact closed locations less often. 4 Click OK to save the new Attach Retry setting. ConsoleOne then notifies the MTA to restart so the new setting can be put into effect. For a TCP/IP link, a location is considered open if the MTA receives a response from the receiving agent within the currently configured wait intervals. See “Adjusting the MTA Wait Intervals for Slow TCP/IP Connections” on page 636. Otherwise, the location is considered closed. For a mapped or UNC link, a location is considered open if the MTA can perform the following actions: + Create a temporary directory in the MTA input queue (domain\wpcsin and post_office\wpcsin directories) + Create a temporary file in that new directory + Delete the temporary file + Delete the temporary directory For more information about the MTA input gueues, see “Message Transfer/Storage Directories” in Group Wise 6.5 Troubleshooting 3: Message Flow and Directory Structure. Optimizing the MTA 641 642 GroupWise 6.5 Administration Guide NetWare MTA @filename N/A /certfile lcyhi lcylo /defaultroutingdomain /dn /fastO /fast4 /help /home /httppassword /httpport /httprefresh /httpssl /httpuser /keyfile /keypassword /language /liveremote Linux MTA @filename --activelog --certfile --cyhi --cylo --defaultroutingdomain N/A --fast0 --fast4 --help --home --httppassword --httpport --httprefresh --httpssl --httpuser --keyfile --keypassword --language --liveremote Using MTA Startup Switches Windows MTA @filename lactivelog /certfile lcyhi lcylo /defaultroutingdomain N/A /fastO /fast4 /help /home /httppassword /httpport /httprefresh /httpssl /nttpuser /keyfile /keypassword language /liveremote ConsoleOne Settings N/A N/A Certificate File Scan High Scan Cycle Default Routing Domain N/A Use 2nd High Priority Scanner Use 2nd Mail Priority Scanner N/A N/A HTTP Password HTTP Port N/A HTTP HTTP User Name SSL Key File SSL Key File Password N/A N/A Using MTA Startup Switches You can override settings provided in ConsoleOne® by using startup switches. You can override startup switches provided in the startup file by using startup switches on the command line. For more information about starting the MTA, see “Starting the MTA” on page 568. The table below summarizes MTA startup switches for all platforms and how they correspond to configuration settings in ConsoleOne. 643 NetWare MTA log llogdays llogdiskoff /loglevel /logmax /lrconn Iirwaitdata /maxidlerouters /maxrouters /messagelogdays /messagelogmaxsize /messagelogpath /messagelogsettings /msgtranssl /noada /nodns /noerrormail /nondssync /norecover /nosnmp /password /tcpinbound /tcpport /tcpwaitconnect /tcpwaitdata /tracelogin /user /work Linux MTA --log --logdays --logdiskoff --loglevel --logmax --Irconn --Irwaitdata --maxidlerouters --maxrouters --messagelogdays --messagelogmaxsize --messagelogpath --messagelogsettings --msgtranssl --noada --nodns --noerrormail --nondssync --norecover --nosnmp N/A --tcpinbound --tcpport --tcpwaitconnect --tcpwaitdata N/A N/A --work 644 GroupWise 6.5 Administration Guide Windows MTA log llogdays logdiskoff loglevel /logmax Iirconn Iirwaitdata /maxidlerouters /maxrouters /messagelogdays /messagelogmaxsize /messagelogpath /messagelogsettings /msgtranssl /noada /nodns /noerrormail /nondssync /norecover /nosnmp N/A /tcpinbound /tcpport /tcpwaitconnect Itcpwaitdata N/A N/A /work ConsoleOne Settings Log File Path Max Log File Age Logging Level Logging Level Max Log Disk Space N/A N/A N/A N/A Delete Reports After N/A Message Log File Path Message Logging Level Message Transfer SSL N/A N/A N/A N/A N/A N/A N/A N/A Network Address N/A N/A N/A N/A N/A @filename Specifies the location of the MTA startup file. On NetWare and Windows, the full path must be included if the file does not reside in the same directory with the MTA program. On Linux, the startup file always resides in the /opt/novell/groupwise/agents/share directory. The startup file must reside on the same server where the MTA is installed. For more information about the MTA startup file, see “Starting the MTA” on page 568. NetWare MTA Linux MTA Windows MTA Syntax: @[vol:][\din\]file@\\svrvohdir\file Oldi file @l[drive:][\din]file @\\svr\sharename\dinfile Example: load gwmta @provo2.mta Jgwmta @../share/Inxdom.mta gwmta.exe @provo2.mta load gwmta @sys:\agt\provo2.mta gwmta.exe @d:\agt\provo2.mta load gwmta @\\s2\sys\agt\provo2.mta gwmta.exe @\\s2\c\agt\provo2.mta lactivelog Displays the active log window rather than the alert box when the MTA starts. See “Monitoring the MTA from the MTA Agent Console” on page 605. NetWare MTA Linux MTA Windows MTA Syntax: N/A --activelog lactivelog Icertfile Specifies the full path to the public certificate file used to provide secure SSL communication between the MTA and other programs. See “Enhancing Domain Security with SSL Connections to the MTA” on page 589. NetWare MTA Linux MTA Windows MTA Syntax: Icertfile-[svA][vor:]\dinfile --certfile-/dir/file /certfile-[drive:]\din\file lcertfile-MsvnAvohdirfile Icertfile-\svñsharename\dinfile Example: /certfile-\ssl\gw.crt --certfile /certs/gw.crt /certfile-\ssl\gw.crt /certfile-server2\sys:\ssl\gw.crt /certfile-m:\ssl\gw.crt /certfile-\\server2\sys\ssl\gw.crt /certfile-\\server2\c\ssl\gw.crt See also /keyfile and /keypassword. Icyhi Sets the number of seconds in the scan cycle that the MTA uses to scan its priority 0-1 input queues. The default is 5 seconds. See “Adjusting MTA Polling of Input Queues in the Domain, Post Offices, and Gateways” on page 636. Using MTA Startup Switches 645 NetWare MTA Linux MTA Windows MTA Syntax: /cyhi-seconds --cyhi-seconds /cyhi-seconds Example: /cyhi-3 --cyhi 3 lcyhi-3 See also /cylo. Icylo Sets the number of seconds in the scan cycle that the MTA uses to scan its priority 2-7 input queues. The default is 15 seconds. See “Adjusting MTA Polling of Input Queues in the Domain, Post Offices, and Gateways” on page 636. NetWare MTA Linux MTA Windows MTA Syntax: /cylo-seconds --cylo-seconds /cylo-seconds Example: /cylo-10 --cylo 10 lcylo-10 See also /cyhi. Idefaultroutingdomain Identifies the domain name in your Group Wise” system to which all MTAs should send messages when they cannot resolve the available routing information to a specific user.post office.domain GroupWise address. See “Using Routing Domains” on page 591. NetWare MTA Linux MTA Windows MTA Syntax: /defaultroutingdomain-domain --defaultroutingdomain domain /defaultroutingdomain-domain Example: — /defaultroutingdomain-inethub --defaultroutingdomain inethub /defaultroutingdomain-inethub /dn Specifies the Novell® eDirectory™ distinguished name of the NetWare® MTA object to facilitate logging into remote servers and authenticating to eDirectory. It can be used instead of the /user and /password switches. NetWare MTA Linux MTA Windows MTA Syntax: /dn-distinguished_name N/A N/A Example: /dn-MTA.provo2.GroupWise N/A N/A 646 GroupWise 6.5 Administration Guide Ifast0 Ifast4 lhelp Ihome Causes the MTA to monitor and process the priority 0 and 1 subdirectories independently with separate scanner threads, rather than in seguence with the same scanner thread. See “Adjusting the Number of MTA Scanner Threads for the Domain and Post Offices” on page 638. NetWare MTA Linux MTA Windows MTA Syntax: /fast0 --fastO /fastO See also /fast4. Causes the MTA to monitor and process the priority 2 and 3 subdirectories with a separate scanner thread from the priority 4 through 7 subdirectories. See “Adjusting the Number of MTA Scanner Threads for the Domain and Post Offices” on page 638. NetWare MTA Linux MTA Windows MTA Syntax: /fast4 --fast4 /fast4 See also /fast0. Displays the MTA startup switch Help information. When this switch is used, the MTA does not start. NetWare MTA Linux MTA Windows MTA Syntax: /help or /? --help or --? /help or /? Example: load gwmta.nim /help ./gwmta.exe --help gwmta.exe /help Specifies the domain directory, where the MTA can access the domain database (wpdomain.db). There is no default location. You must use this switch in order to start the MTA. See “Starting the MTA” on page 568. NetWare MTA Linux MTA Windows MTA Syntax: /home-[svn][vol:]\dir --home /dir /home-[drive:]\dir /home-\\svAvoldir /home-\\svAsharename\dir Example: /home-\provo2 --home /gwsystem/provo2 /home-\provo2 /home-mail:\provo2 /home-m:\provo2 /home-server2\mail:\provo2 /home-\\server2\c\mail\provo2 /home-\\server2\mail\provo2 Using MTA Startup Switches 647 Ihttppassword Specifies the password for the MTA to prompt for before allowing MTA status information to be displayed in your Web browser. Do not use an existing eDirectory password because the information passes over the insecure connection between your Web browser and the MTA. See “Using the MTA Web Console” on page 617. NetWare MTA Linux MTA Windows MTA Syntax: Ihttppassword-unigue password --httppassword unigue password Ihttppassword-unigue password Example: /httppassword-AgentWatch --httppassword AgentWatch /httppassword-AgentWatch See also /httpuser, /httpport, /httprefresh, and /httpssl. /httpport Sets the HTTP port number used for the MTA to communicate with your Web browser. The default is 7180; the setting must be unique. See “Using the MTA Web Console” on page 617. NetWare MTA Linux MTA Windows MTA Syntax: /httpport-port_number --httpport port_number /httpport-port_number Example: /httpport-3801 --httpport 3802 /httpport-3803 See also /httpuser, /httppassword, /httprefresh, and /httpssl. /httprefresh Specifies the rate at which the MTA refreshes the status information in your Web browser. The default is 60 seconds. See “Using the MTA Web Console” on page 617. NetWare MTA Linux MTA Windows MTA Syntax: /httprefresh-seconds --httprefresh seconds /httprefresh-seconds Example: /httprefresh-30 --httprefresh 90 Ihttprefresh-120 See also /httpuser, /httppassword, /httpport, and /httpssl. /httpssl Enables secure SSL communication between the MTA and the MTA Web console displayed in your Web browser. See “Enhancing Domain Security with SSL Connections to the MTA” on page 589. NetWare MTA Linux MTA Windows MTA Syntax: /httpssl --httpssl Ihttpssl See also /certfile, /keyfile, and/keypassword. 648 GroupWise 6.5 Administration Guide lhttpuser Specifies the username for the MTA to prompt for before allowing MTA status information to be displayed in your Web browser. Providing a username is optional. Do not use an existing eDirectory username because the information passes over the insecure connection between your Web browser and the MTA. See “Using the MTA Web Console” on page 617. NetWare MTA Linux MTA Windows MTA Syntax: /httpuser-unique_name --httpuser unique_name /httpuser-unique_name Example: /httpuser-GWWebCon --httpuser GWWebCon /httpuser-GWWebCon See also /httppassword, /httpport, and /httprefresh. /keyfile Specifies the full path to the private file used to provide secure SSL communication between the MTA and other programs. See “Enhancing Domain Security with SSL Connections to the MTA” on page 589. NetWare MTA Linux MTA Windows MTA Syntax: /keyfile-[svr\][vol:]\din\file --keyfile /dir/file /keyfile-[drive:]\dir\file lkeyfile-MsvAvohdinfile /keyfile-\\svAsharename\dinfile Example: /keyfile-\ssl\gw.key --keyfile /ssl/gw.key /keyfile-\ssl\gw.key /keyfile-server2\sys:\ssl\gw.key /keyfile-m:\ssl\gw.key /keyfile-\\server2\sys\ssl\gw.key /keyfile-\\server2\c\ssl\gw. key See also /certfile and /keypassword. /keypassword Specifies the password used to encrypt the private SSL key file when it was created. See “Enhancing Domain Security with SSL Connections to the MTA” on page 589. NetWare MTA Linux MTA Windows MTA Syntax: /keypassword-password --keypassword password /keypassword-password Example: /keypassword-gwssl --keypassword gwssl /keypassword-gwssl See also /certfile and /keyfile. language Specifies the language to run the MTA in, using a two-letter language code as listed below. You must install the MTA in the selected language in order for the MTA to display in the selected language. Using MTA Startup Switches 649 The initial default is the language used in the domain. If that language has not been installed, the next default is the language used by the operating system. If that language has not been installed, the final default is English. You only need to use this switch if you need to override these defaults. NetWare MTA Linux MTA Windows MTA Syntax: llanguage-code --language code llanguage-code Example: —/language-es --language de llanguage-fr The table below lists the valid language codes. Contact your local Novell sales office for information about language availability. Language Language Language Language Code Code Arabic AR Hungarian MA Czechoslovakian CS Italian IT Chinese-Simplified CS Japanese NI Chinese-Traditional CT Korean KR Danish DK Norwegian NO Dutch NL Polish PL English-United States US Portuguese-Brazil BR Finnish SU Russian RU French-France FR Spanish ES German-Germany DE Swedish SV Hebrew HE Turkish TR /liveremote Turns on re-direction of Remote client requests and provides the TCP port on which the MTA listens for Remote client requests. See “Enabling Live Remote” on page 589. NetWare MTA Linux MTA Windows MTA Syntax: /liveremote-port_number /liveremote-port_ number /liveremote-port_ number Example: /liveremote-7111 /liveremote-7112 /liveremote-7112 See also /Irconn and /lrwaitdata. 650 GroupWise 6.5 Administration Guide Ilog llogdays llogdiskoff Specifies the directory where the MTA will store its log files. On NetWare and Windows, the default location is the mslocal directory in the directory specified by the /work switch. On Linux, the default location is the /var/log/novell/groupwise/domain name.mta directory. See “Using MTA Log Files” on page 625. NetWare MTA Linux MTA Windows MTA Syntax: Nog-[svA][vol:]\dir --log /dir /log-[drive:]\dir 1log-MsvAvohdir /log-\\svrsharename\dir Example: — /log-tagtilog --log /gwsystem/logs /log-\agt\log /log-server2\mail:\agt\log /log-m:\agt\log /log-\\server2\mail\agt\log /log-\\server2\c\mail\agt\log Typically you would find multiple log files in the specified directory. The first 4 characters represent the date. The next 3 characters identify the agent. A three-digit extension allows for multiple log files created on the same day. For example, a log file named 0518mta.001 would indicate that it is an MTA log file, created on May 18. If you restarted the MTA on the same day, a new log file would be started, named 0518mta.002. See also /loglevel, /logdiskoff, /logdays, and /logmax. Sets the number of days you want MTA log files to remain on disk before being automatically deleted. The default log file age is 7 days. See “Using MTA Log Files” on page 625. NetWare MTA Linux MTA Windows MTA Syntax: llogdays-days --logdays days llogdays-days Example: /logdays-5 --logdays 10 /logdays-14 See also /log, /loglevel, /logdiskoff, and /logmax. Turns off disk logging for the MTA so no information about the functioning of the MTA is stored on disk. The default is for logging to be turned on. See “Using MTA Log Files” on page 625. NetWare MTA Linux MTA Windows MTA Syntax: Nogdiskoff --logdiskoff Hlogdiskoff See also /loglevel. Using MTA Startup Switches 651 Iloglevel llogmax /lrconn Ilrwaitdata Controls the amount of information logged by the MTA. Logged information is displayed in the log message box and written to the MTA log file during the current agent session. The default is Normal, which displays only the essential information suitable for a smoothly running MTA. Use Verbose to display the essential information, plus additional information helpful for troubleshooting. Verbose logging does not degrade MTA performance, but log files saved to disk consume more disk space when verbose logging is in use. See “Using MTA Log Files” on page 625. NetWare MTA Linux MTA Windows MTA Syntax: loglevel-level --loglevel level loglevel-level Example: /loglevel-verbose --loglevel verbose /loglevel-verbose See also /log, /logdiskoff, /logdays, and /logmax. Sets the maximum amount of disk space for all MTA log files. When the specified disk space is consumed, the MTA deletes existing log files, starting with the oldest. The default is 65536 KB of disk space for all MTA log files. See “Using MTA Log Files” on page 625. NetWare MTA Linux MTA Windows MTA Syntax: Mogmax-kilobytes --logmax kilobytes Mogmax-kilobytes Example: /logmax-32000 --logmax 130000 /logmax-160000 See also /log, /loglevel, /logdiskoff, and /logdays. Specifies the maximum number of simultaneously connected Remote client users the MTA can accept. The default is 25. See “Enabling Live Remote” on page 589. NetWare MTA Linux MTA Windows MTA Syntax: /Irconn-number --Irconn number IIrconn-number Example: /Irconn-50 --Irconn 75 /irconn-100 See also /liveremote and /Irwaitdata. Specifies the number of seconds you want the MTA to wait for a response from the PO before timing out for users in Remote mode. The default is 5 minutes. See “Enabling Live Remote” on page 589. 652 GroupWise 6.5 Administration Guide NetWare MTA Linux MTA Windows MTA Syntax: Iirwaitdata-number --Irwaitdata number Iirwaitdata-number Example: /Irwaitdata-7 --Irwaitdata-10 irwaitdata-12 See also /liveremote and /lrconn. Imaxidlerouters Specifies the maximum number of idle router threads the MTA can keep running. The default is 16; valid values range from 1 to 16. See “Optimizing the Routing Oueue” on page 639. NetWare MTA Linux MTA Windows MTA Syntax: /maxidlerouters-threads --maxidlerouters threads /maxidlerouters-threads Example: /maxidlerouters-5 --maxidlerouters 10 /maxidlerouters-12 See also /maxrouters. /maxrouters Specifies the maximum number of router threads the MTA can start. The default is 16; valid values range from 1 to 16. See “Optimizing the Routing Queue” on page 639. NetWare MTA Linux MTA Windows MTA Syntax: /maxrouters-threads --maxrouters threads /maxrouters-threads Example: /maxrouters-10 --maxrouters 12 /maxrouters-14 See also /maxidlerouters. Imessagelogdays Sets the number of days you want MTA message log files to remain on disk before being automatically deleted. The default is 7 days. See “Enabling MTA Message Logging” on page 603. NetWare MTA Linux MTA Windows MTA Syntax: /messagelogdays-days --messagelogdays days /messagelogdays-days Example: /messagelogdays-5 --messagelogdays 10 /messagelogdays-14 See also /messagelogsettings, /messagelogpath, and /messagelogmaxsize. Using MTA Startup Switches 653 Imessagelogmaxsize Sets the maximum size for MTA message log files. The default is 65536 KB. See “Enabling MTA Message Logging” on page 603. NetWare MTA Linux MTA Windows MTA Syntax: /messagelogmaxsize-kilobytes --messagelogmaxsize kilobytes /messagelogmaxsize-kilobytes Example: /messagelogmaxsize-32000 --messagelogmaxsize 130000 /messagelogmaxsize-160000 See also /messagelogsettings, /messagelogpath, and /messagelogdays. Imessagelogpath Specifies the directory for the MTA message log. See “Enabling MTA Message Logging” on page 603. NetWare MTA Linux MTA Windows MTA Syntax: Imessagelogpath-[svAl[vor:]\dir --messagelogpath /dir /messagelogpath-[drive:]\dir /messagelogpath-\\svrvoldir /messagelogpath-\\svAsharename\dir Example: /messagelogpath-\mta\log --messagelogpath /gwsys/logs /messagelogpath-\mtallog /messagelogpath-svr2\mail:\mta\log /messagelogpath-m:\mta\log /messagelogpath-\\svr2\mail\mta\log /messagelogpath-\\svr2\c\mail\mta\log See also /messagelogsettings, /messagelogdays, and /messagelogmaxsize. Imessagelogsettings Enables MTA message logging. See “Enabling MTA Message Logging” on page 603. NetWare MTA Linux MTA Windows MTA Syntax: /messagelogsettings-codes --messagelogsettings codes /messagelogsettings-codes Example: /messagelogsettings-e --messagelogsettings e /messagelogsettings-e One code or any combination of codes can be used. Code Description e Enabled; all messages are logged by default v Verbose logging; all information is logged r Log message delivery/non-delivery reports s Log message statuses O Log other message types, such as administrative messages for database updates c Correlate reports with messages See also /messagelogpath, /messagelogdays, and /messagelogmaxsize. 654 GroupWise 6.5 Administration Guide /msgtranssl Inoada Inodns Inoerrormail Enables secure SSL communication between the MTA and the POAs in its domain. See “Enhancing Domain Security with SSL Connections to the MTA” on page 589. NetWare MTA Linux MTA Windows MTA Syntax: /msgtranssl --msgtranssl /msgtranssl See also /certfile, /keyfile, and /keypassword. Disables the MTA admin thread. For an explanation of the MTA admin thread, see “MTA Admin Thread Status Box” on page 608. NetWare MTA Linux MTA Windows MTA Syntax: /noada --noada /noada Historical Note: In GroupWise 5.2 and earlier, a separate agent, the Administration Agent (ADA), handled the functions now consolidated into the MTA admin thread. Hence the switch name, / noada. Disables DNS lookups for the MTA. See “Using Dynamic Internet Links” in “Connecting to GroupWise 5.x and 6.x Systems” in the GroupWise 6.5 Multi-System Administration Guide. NetWare MTA Linux MTA Windows MTA Syntax: /nodns --nodns /nodns Prevents error files from being sent to the GroupWise administrator. The default is for error mail to be sent to the administrator. See “Notifying the Domain Administrator” on page 632. NetWare MTA Linux MTA Windows MTA Syntax: /noerrormail --noerrormail /noerrormail Using MTA Startup Switches 655 Inondssync Disables eDirectory user synchronization. See “Using eDirectory User Synchronization” on page 598. NetWare MTA Linux MTA Windows MTA Syntax: /nondssync --nondssync N/A /norecover Disables automatic database recovery. The default is for automatic database recovery to be turned on. If the MTA detects a problem with the domain database (wpdomain.db) when automatic database recovery has been turned off, the MTA will notify the administrator, but it will not recover the problem database. See Chapter 26, “Maintaining Domain and Post Office Databases,” on page 345. NetWare MTA Linux MTA Windows MTA Syntax: /norecover --norecover /norecover /nosnmp Disables SNMP for the MTA. The default is to have SNMP enabled. See “Using SNMP Monitoring Programs” on page 627. NetWare MTA Linux MTA Windows MTA Syntax: /nosnmp --nosnmp /nosnmp [password Provides the password for the NetWare MTA to use when accessing domains and post offices on remote servers. See “Starting the MTA” on page 568. NetWare MTA Linux MTA Windows MTA Syntax: lpassword-NetWare. password N/A N/A Example: /password-GWise N/A N/A See also /user and /dn. Itcpinbound Sets the maximum number of inbound TCP/IP connections for the MTA. The default is 40. There is no maximum number of outbound connections. The only limit on the MTA for outbound connections is available resources. See “Adjusting the Number of MTA TCP/IP Connections” on page 635. 656 GroupWise 6.5 Administration Guide NetWare MTA Linux MTA Windows MTA Syntax: /tcpinbound-number --tcpinbound number /tcpinbound-number Example: /tcpinbound-50 --tcpinbound 60 /tcpinbound-70 Itcpport Sets the TCP port number on which the MTA listens for incoming messages. The default is 7100. See “Using TCP/IP Links between Domains” on page 579. NetWare MTA Linux MTA Windows MTA Syntax: Itcpport-port number --tcpport port number Itcpport-port number Example: — /tcpport-7200 --tcpport 7200 /tcpport-7200 Itcpwaitconnect Sets the maximum number of seconds the MTA waits for a connection to another MTA. The default is 5. See “Adjusting the MTA Wait Intervals for Slow TCP/IP Connections” on page 636. NetWare MTA Linux MTA Windows MTA Syntax: /tcpwaitconnect-seconds --tcpwaitconnect seconds /tcpwaitconnect-seconds Example: = /tcpwaitconnect-10 --tcpwaitconnect 10 /tcpwaitconnect-10 See also /tcpwaitdata. Itcpwaitdata Sets the maximum number of seconds the MTA attempts to send data over a TCP/IP connection to another MTA. The default is 20. See “Adjusting the MTA Wait Intervals for Slow TCP/IP Connections” on page 636. NetWare MTA Linux MTA Windows MTA Syntax: /tcpwaitdata-seconds --tcpwaitdata seconds /tcpwaitdata-seconds Example: /tcpwaitdata-30 --tcpwaitdata 30 /tcpwaitdata-30 See also /tcpwaitconnect. Using MTA Startup Switches 657 Itracelogin Displays NetWare MTA login messages on the NetWare® server console to help determine problems the MTA is having when logging in to a remote server. NetWare MTA Linux MTA Windows MTA Syntax: /tracelogin-code N/A N/A Example: /tracelogin-1 N/A N/A Code Description 1 Display login problems 2 Display all login messages /user Provides the NetWare user ID for the NetWare MTA to use when accessing domains and post offices on remote servers. See “Creating a NetWare Account for Agent Access (Optional)” in the GroupWise 6.5 Installation Guide. NetWare MTA Linux MTA Windows MTA Syntax: /user-NetWare_user_ID N/A N/A Example: —/user-GWAgents N/A N/A See also /password and /dn. /work Specifies the directory where the MTA creates its local working directory (mslocal). The default is the domain directory. However, if the domain is located on a different server from where the MTA will run, use a local directory so the MTA cannot lose its connection to its mslocal directory. NetWare MTA Linux MTA Windows MTA Syntax: /work-[svn\][vol:]\dir --work /dir /work-[drive:]\dir Iwork-\\svñnvoñdir Iwork-\\svñsharename\dir Example: /work-\gwmta --work /gwmta /work-\gwmta /work-mail:gwmta /work-m:\gwmta /work-server2\mail:\gwmta /work-\\server2\c\mail\gwmta /work-\\server2\mail\gwmta 658 GroupWise 6.5 Administration Guide Internet Agent Chapter 47, “Configuring Internet Agent Services,” on page 661 Chapter 48, “Configuring Simplified Addressing,” on page 691 Chapter 49, “Controlling User Access,” on page 705 Chapter 50, “Setting Up Accounting,” on page 715 Chapter 51, “Blocking Unwanted E-Mail,” on page 719 Chapter 52, “Optimizing Speed and Reliability,” on page 725 Chapter 53, “Monitoring Internet Agent Operations,” on page 731 Chapter 54, “Securing Internet Agent Connections Via SSL,” on page 753 Chapter 55, “Connecting Group Wise Systems and Domains Using the Internet Agent,” on page 757 Chapter 56, “Using Internet Agent Startup Switches,” on page 765 Internet Agent 659 660 GroupWise 6.5 Administration Guide Configuring Configuring Internet Agent Services The Internet Agent offers several useful services that you can configure to meet the needs of your GroupWise system. + “Configuring SMTP/MIME Services” on page 661 + “Configuring LDAP Services” on page 682 + “Configuring POP3/IMAP4 Services” on page 684 + “Configuring Paging Services” on page 688 SMTP/MIME Services SMTP and MIME are standard protocols that the Group Wise” Internet Agent uses to send and receive e-mail messages over the Internet. SMTP, or Simple Mail Transfer Protocol, is the message transmission protocol. MIME, or Multipurpose Internet Mail Extension, is the message format protocol. Choose from the following topics for information about how to enable SMTP/MIME services and configure various SMTP/MIME settings: + “Configuring Basic SMTP/MIME Settings” on page 661 + “Using Extended SMTP (ESMTP) Options” on page 663 + “Configuring How the Internet Agent Handles E-Mail Addresses” on page 664 + “Determining Format Options for Messages” on page 667 + “Protecting Against Unidentified Hosts and Mailbombs (Spam)” on page 668 + “Configuring the SMTP Timeout Settings” on page 669 + “Determining What to Do with Undeliverable Messages” on page 670 + “Configuring SMTP Dial-Up Services” on page 671 + “Enabling SMTP Relaying” on page 674 + “Configuring SMTP Host Authentication” on page 676 + “Using a Route Configuration File” on page 676 + “Customizing Delivery Status Notifications” on page 677 + “Managing MIME Messages” on page 678 Configuring Basic SMTP/MIME Settings 1 In ConsoleOne®, right-click the Internet Agent object, then click Properties. 2 Ifthe SMTP/MIME Settings page is not the default page, click SMTP/MIME > Settings. Configuring Internet Agent Services 661 Properties of GWIA E xÍ SMTPMIME v | Loar | POP31M£P4 | Server Directories | Access Control ~] Reattach | Post Office Links | Group Settings | M Enable SMTP service Number of SMTP Send Threads: [s q Number of SMTP Receive Threads: [1 4 Hostname/DNS "A Record" Name: [novell.com Relay Hostfor Outbound Messages: FO Scan Cycle for Send Directory: [ro 4 seconds [ Bind to TCP/IP address at connection time [ Use 7 bit encoding for all outbound messages Maximum number of hours to retry a deferred message: | 96 = hours Page Options... OK Cancel Apply | Help 3 Fill in the fields: Enable SMTP Service: SMTP service is on by default. This setting allows SMTP Internet messaging. This setting corresponds with the Internet Agent’s /smtp switch. Number of SMTP Send Threads: The SMTP send threads setting lets you specify the number of threads that will process SMTP send requests. The default is 8 threads. This setting corresponds with the Internet Agent’s /sd switch. Number of SMTP Receive Threads: The SMTP receive threads setting lets you specify the number of threads that will process SMTP receive requests. The default is 16 threads. This setting corresponds with the Internet Agent’s /rd switch. Hostname/DNS "A Record" Name: The Hostname/DNS "A Record" name setting lets you identify the hostname of the server where the Internet Agent resides, or in other words the A Record in your DNS table that associates a hostname with the server’s IP address (for example, gwia.novell.com). This setting corresponds with the Internet Agent’s /hn switch. If the Reject Mail if Sender’s Identity Cannot be Verified setting is turned on (SMTP/MIME tab > Security Settings page), you are required to fill in the Hostname/DNS A Record Name setting. When a TCP/IP communication begins, the two servers involved exchange greetings. Part of the greeting is the recipient server identifying itself. The other part of the greeting is the sending server identifying itself with the SMTP HELO command. The Internet Agent verifies the authenticity of the greetings. If the greeting string does not match the actual Hostname/DNS A Record, the Internet Agent will either pass a warning and continue the communication or terminate the connection. If you leave this field blank, the Internet Agent uses the fully qualified hostname obtained from your Internet service provider (such as gwia.novell.com), which you should have entered in the Foreign ID field on the Identification page (Group Wise tab). Relay Host for Outbound Messages: The Relay host setting can be used if you want to use a relay host to route all outbound Internet e-mail. Enter the IP address or DNS hostname of the relay host. The relay host can be part of your network or can reside at the Internet service provider’s site. This setting corresponds with the Internet Agent’s /mh switch. If you want to use a relay host, but you want some outbound messages sent directly to the destination host rather than to the relay host, you can use a route configuration file (route.cfg). Whenever a message is addressed to a user at a host that is included in the route.cfg file, the 662 GroupWise 6.5 Administration Guide Internet Agent sends the message directly to the host rather than to the relay host. For information about creating a route.cfg file, see “Using a Route Configuration File” on page 676. Scan Cycle for Send Directory: The Scan cycle setting specifies how often the Internet Agent polls for outgoing messages. The default is 10 seconds. This setting corresponds with the Internet Agent’s /p switch. Bind to TCP/IP Address at Connection Time: Select this option if you want the Internet Agent to bind to the TCP/IP address that has been defined as the Internet Agent’s network address (Group Wise tab > Network Address page). When this occurs, the Internet Agent will only use this TCP/IP address when sending outbound messages. This applies to outbound messages only; for inbound messages, it will still listen on all IP addresses assigned to the Internet Agent’s server. This option is useful if the Internet Agent’s server has multiple IP addresses and you want to force it to always use the same IP address when sending messages. It is also useful if the Internet Agent is running in a clustered environment (through the use of Novell® Cluster Services™ or Microsoft* Clustering Services) and you want to bind the Internet Agent to the server’s secondary IP address. Use 7 Bit Encoding for All Outbound Messages: By default, the Internet Agent uses 8-bit MIME encoding for any outbound messages that are HTML-formatted or that contain 8-bit characters. If, after connecting with the receiving SMTP host, the Internet Agent discovers that the receiving SMTP host cannot handle 8-bit MIME encoded messages, the Internet Agent converts the messages to 7-bit encoding. With this option selected, the Internet Agent will automatically use 7-bit encoding and not attempt to use 8-bit MIME encoding. You should use this option if you are using a relay host that does not support 8-bit MIME encoding. This setting corresponds with the Internet Agent’s /force7bitout switch. Maximum Number of Hours to Retry a Deferred Message: Specify the number of hours after which the Internet Agent will stop trying to send deferred messages. The default is 96 hours, or four days. A deferred message is any message that couldn’t be sent because of a temporary problem (host down, MX record not found, and so forth). For the first hour of the specified time, the Internet Agent will try resending the message every 20 minutes. After the first hour, it will try resending the message every four hours. For example, if you specify 10 hours, the Internet Agent will try resending the message at 20 minutes, 40 minutes, 1 hour, 5 hours, and 9 hours. After the 10 hours has expired, it will return an undeliverable status to the sender. This setting corresponds with the Internet Agent’s / maxdeferhours switch. 4 Click OK to save the changes. Using Extended SMTP (ESMTP) Options The Internet Agent supports several Extended SMTP (ESMTP) settings. These are settings which might or might not be supported by another SMTP system. The following ESMTP extensions are supported: + SIZE For more information, see RFC 1870 (http://www.ietf.org/rfc/rfc1870.txt). + AUTH For more information, see RFC 2554 (http://www. ietf.org/rfc/rfc2554.txt). + DSN For more information, see RFC 3464 (http://www. ietf.org/rfc/rfc3464.txt) and RFC 3461 (http://www.ietf.org/rfc/rfc3461.txt). Configuring Internet Agent Services 663 + SBITMIME For more information, see RFC 1652 (http://www.ietf.org/rfc/rfc1652.txt). + STARTTLS For more information, see RFC 3207 (http://www.ietf.org/rfc/rfc3207.txt). To configure ESMTP settings: 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > ESMTP Settings. Properties of GWIA E xÍ DAP | POP31MAP4 | Server Directories | Access Control +] Reattach | Post Office Links | Group [<[>] M Enable Delivery Status Notification (DSN) DSNHoldage: | 4 | Page Options... OK Apply | Help 3 Fill in the fields: Enable Delivery Status Notification: Turn on this option to allow the Internet Agent to request status notifications for outgoing messages and to supply status notifications for incoming messages. This requires the external e-mail system to also support Delivery Status Notification. Currently, notification consists of two delivery statuses: successful or unsuccessful. If you enable the Delivery Status Notification option, you need to select the number of days that you want the Internet Agent to retain information about the external sender so that status updates can be delivered to him or her. For example, the default hold age causes the sender information to be retained for 4 days. If the Internet Agent does not receive delivery status notification from the GroupWise recipient’s Post Office Agent (POA) within that time period, it deletes the sender information and the sender does not receive any delivery status notification. 4 Click OK to save the changes. Configuring How the Internet Agent Handles E-Mail Addresses 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > Address Handling. 664 GroupWise 6.5 Administration Guide Properties of GWIA A xj TSMTP/MIME LDAP | POP3AMAP4 | Server Directories | Access Control + | Reattach | Post Office Links | Grou! ing. Addressing Style [I Ignore GroupWise Internet addressing By default this box is not checked and addresses are processed as GroupWise Internet addresses. Checking the box causes addresses to be processed as they were in GroupWise 5.2 and earlier versions. Post office and user aliases continue to be processed regardless of the setting. Inbound Settings E Expand groups on incoming messages Outbound Settings Non-GroupWise Domain for RFC-822 Replies: Non-GroupWise Domain for MIME Replies: Sender's Address Format: Auto + Place domain and post office qualifiers: © on left of address C on right of address Page Options... OK Apply Help 3 Fill in the fields: Ignore GroupWise Internet Addressing: GroupWise supports both Internet-style addressing (user@host) and GroupWise proprietary addressing (user_ID.post_office.domain). By default, the Internet Agent uses Internet-style addressing. If you do not want the Internet Agent to use standard Internet-style addressing (user@host), turn on the Ignore GroupWise Internet Addressing option. With this option turned on, messages use the mail domain name in the Foreign ID field (GroupWise tab > Identification page) for the domain portion of a user’s Internet address. If you’ve included multiple mail domain names in the Foreign ID field or the frgnames.cfg file, as described in “Listing Foreign Domain Names” on page 666, the first mail domain name listed will be the one used in addresses. The Internet Agent will support user and post office aliases in either mode. This setting corresponds with the Internet Agent’s /dia switch. Expand Groups on Incoming Messages: Turn on this option to have incoming Internet messages addressed to public groups sent to all members of the groups. This setting corresponds with the Internet Agent’s /group switch. Non-Group Wise Domain for RFC-822 Replies: This setting can be used only if 1) you created a non-Group Wise domain to represent all or part of the Internet, and 2) you defined the non-Group Wise domain’s outgoing conversion format as RFC-822 when you linked the Internet Agent to the domain. Enter the name of the non-Group Wise domain associated with the RFC-822 conversion format. When a GroupWise user replies to a message that was originally received by the Internet Agent in RFC-822 format, the reply is sent to the specified non-GroupWise domain and converted to RFC-822 format so that it is in the same format as the original message. This setting corresponds with the Internet Agent’s /fd822 switch. Non-Group Wise Domain for MIME Replies: This setting can be used only if 1) you’ve created a non-Group Wise domain that represents all or part of the Internet, and 2) you defined the non-GroupWise domain’s outgoing conversion format as MIME when you linked the Internet Agent to the domain. Configuring Internet Agent Services 665 Enter the name of the non-Group Wise domain associated with the MIME conversion format. When a GroupWise user replies to a message that was originally received by the Internet Agent in MIME format, the reply is sent to the specified non-Group Wise domain and converted to MIME format so that it is in the same format as the original message. This setting corresponds with the Internet Agent’s /fdmime switch. Sender’s Address Format: This setting applies only if you have not enabled GroupWise Internet addressing (in other words, you’ve selected the Ignore GroupWise Internet Addressing option). If GroupWise Internet addressing is enabled, the Internet Agent ignores this setting and uses the preferred address format established for outbound messages (Tools menu > GroupWise System Operations > Internet Addressing). The Sender’s Address Format setting lets you specify which Group Wise address components (domain.post_office.user_ID) will be included as the user portion of the address on outbound messages. You can choose from the following options: + Domain, Post Office, User, and Hostname: Uses the domain.post_office.user_ID@host syntax. + Post Office, User, and Hostname: Uses the post_office.user_ID@host syntax. + User and Hostname: Uses the user_[D@host syntax. + Auto (default): Uses the GroupWise addressing components required to make the address unique within the user’s GroupWise system. If a user ID is unique in a GroupWise system, the outbound address will use only the user ID. If the post office or domain.post office components are required to make the address unique, these components will also be included in the outbound address. The Sender’s Address Format setting corresponds with the Internet Agent’s /aql switch. Place Domain and Post Office Qualifiers: If the sender’s address format must include the domain and/or post office portions to be unique, you can use this option to determine where the domain and post office portions are located within the address. + On Left of Address (default): Leaves the domain and post office portions on the left side of the @ sign (for example, domain.post_office.user_ID@host. + On Right of Address: Moves the domain and post office portions to the right side of the @ sign, making the domain and post office part of the host portion of the address (for example, user ID(dpost office.domain.host. If you choose this option, you must ensure that your DNS server can resolve each post_office.domain.host portion of the address. This setting corresponds with the Internet Agent’s /aqor switch. 4 Click OK to save the changes. Listing Foreign Domain Names The Foreign ID field (ConsoleOne > Internet Agent object > Group Wise tab > Identification page) identifies the Internet domain names for which the Internet Agent will accept messages. The field should always include your mail domain name (for example, novell.com). You can include additional domain names by separating them with a space, as in the following example: novell.com gw.novell.com gwia.novell.com When you list multiple Internet domain names, the Internet Agent accepts messages for a Group Wise user provided any of the Internet domain names are used (for example, jsmith@novell.com, jsmith@gw.novell.com, or jsmith@gwia.novell.com). 666 GroupWise 6.5 Administration Guide The field limit is 255 characters. If you need to exceed that limit, you can create a frgnames.cfg text file in the domain\wpgate\gwia directory. Include each Internet domain name, separated by a space, just like you would in the Foreign ID field. Determining Format Options for Messages 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > Message Formatting. Properties of GWIA E xj DAP | POPSIMAP4 | Server Directories | Access Control v | Reattach | Post Office Links | Gri Inbound Settings Number of Inbound Conversion Threads: 4 y GroupWise View Name for Incoming Messages: Internet Outbound Settings Number of Outhound Conversion Threads: 4 4 Default Message Encoding: C Basic RFC-822 mi © MIME Message Text Line Wrapping: M Enable Quoted Printable text line wrapping Line Wrap Length for Message Text on Outbound Mail: 72 3 Page Options... OK Apply Help 3 Fill in the fields: Number of Inbound Conversion Threads: The inbound conversion threads setting lets you specify the number of threads that will convert inbound messages from MIME or RFC-822 format to the GroupWise message format. The default setting is 4. This setting corresponds with the Internet Agent's /rt switch. GroupWise View Name for Incoming Messages: The GroupWise view setting lets you specify a mail view attachment for all inbound Internet messages. A view is the screen that a user sees when a message is opened. This switch helps users identify Internet messages. If you do not specify a view, or if the view has not been configured, the default view (Internet) will be used. This setting corresponds with the Internet Agent’s /mv switch. Number of Outbound Conversion Threads: The outbound conversion threads setting lets you specify the number of threads that will convert outbound messages from the Group Wise message format to MIME or RFC-822 format. The default setting is 4. This setting corresponds with the Internet Agent’s /st switch. Default Message Encoding: The default message encoding setting lets you select the encoding method for your outbound Internet messages. You can select either Basic RFC-822 formatting or MIME formatting. MIME is the default message format. This setting corresponds with the Internet Agent’s /mime switch. If you select the Basic RFC-822 option, you can decide whether or not to have the Internet Agent UUEncode all ASCII text attachments to RFC-822 formatted messages. By default, this option is turned off, which means ASCII text attachments will be included as part of the Configuring Internet Agent Services 667 message body. By default, the setting is off. This setting corresponds with the Internet Agent’s /uueaa switch. Message Text Line Wrapping: The Ouoted Printable text line wrapping setting lets you select the Ouoted Printable MIME standard for line wrapping. By default this setting is turned on. If you turn the setting off, MIME messages will go out as plain text and will wrap text according to the number of characters specified in the line wrap length setting. This setting corresponds with the Internet Agent’s /nqpmt switch. The Line Wrap Length for Message Text on Outbound Mail setting lets you specify the line length for outgoing messages. This is useful if the recipient’s e-mail system requires a certain line length. The default line length is 72 characters. This setting corresponds with the Internet Agent’s /wrap switch. 4 Click OK to save the changes. Protecting Against Unidentified Hosts and Mailbombs (Spam) 668 Multiple unsolicited messages (sometimes called a mailbomb or spam) from the Internet can potentially harm your GroupWise messaging environment. You can use the settings on the SMTP Security page to help protect your GroupWise system from malicious or accidental attacks. To configure the SMTP security settings: 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > Security Settings. Properties of GWIA y xÍ LDAP | POP3AMAP4 | Server Directories | Access Control + | Reattach | Post Office Links | Grou! [<]»] C Reject mail if sender's identity cannot be verified [7 Enable mailbomb protection Mailbomb Threshold E messages received within | 1 = seconds Mailbomb candidates that exceed this threshold will be discarded. Page Options... OK Apply | Help 3 Fill in the fields: Reject Mail if Sender’s Identity Cannot be Verified: This setting lets you prevent messages if the sender’s host is not authentic. When this setting is turned on, the Internet Agent will refuse messages from a smart host if a DNS reverse lookup shows that a “PTR” record does not exist for the IP address of the sender’s host. When this setting is turned off, the Internet Agent will accept messages from any host, but display a warning if the initiating host is not authentic. This setting corresponds with the Internet Agent’s /rejbs switch. GroupWise 6.5 Administration Guide Enable Mailbomb Protection: Mailbomb protection is turned off by default. You can turn it on by clicking the check box. Mailbomb Threshold: When you enable Mailbomb protection, default values are defined in the threshold settings. The default settings are 30 messages received within 10 seconds. You can change the settings to establish an acceptable security level. Any group of messages that exceeds the specified threshold settings will be entirely discarded. If you want to prevent future mailbombs from the mailbomb sender, identify the sender’s IP address (by looking at the Internet Agent’s console) and then modify the appropriate class of service to prevent mail being received from that IP address (Access Control tab > Settings page). The time setting corresponds with the Internet Agent’s /mbtime switch. The message count setting corresponds with the /mbcount switch. 4 Click OK to save the changes. Configuring the SMTP Timeout Settings The SMTP Timeout settings specify how long the Internet Agent’s SMTP service will wait to receive data that it can process. After the allocated time expires, the Internet Agent might give a TCP read/write error. To configure the SMTP timeout settings: 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > Timeouts. Properties of GWIA E xj DAP | POP3AMAP4 | Server Directories | Access Control v | Reattach | Post Office Links | Group Commands: Js 4 minutes Data: [> 4 minutes Connection Establishment: [2 3 minutes Initial Greeting: [5 4 minutes TCP Read: [5 à minutes Connection Termination: [ro 3 minutes Page Options... OK Apply Help 3 Fill in the fields: Commands: The Commands setting lets you specify how long the Internet Agent will wait for an SMTP command. The default is 5 minutes. This setting corresponds with the Internet Agent’s /tc switch. Data: The Data setting lets you specify how long the Internet Agent will wait for data from the receiving host. The default is 3 minutes. This setting corresponds with the Internet Agent’s /td switch. Configuring Internet Agent Services 669 Connection Establishment: The Connection Establishment setting lets you specify how long the Internet Agent will wait for the receiving host to establish a connection. The default is 2 minutes. This setting corresponds with the Internet Agent’s /te switch. Initial Greeting: The Initial Greeting setting lets you specify how long the Internet Agent will wait for the initial greeting from the receiving host. The default is 5 minutes. This setting corresponds with the Internet Agent's /tg switch. TCP Read: The TCP Read setting lets you specify how long the Internet Agent will wait for a TCP read. The default is 5 minutes. This setting corresponds with the Internet Agent’s /tr switch. Connection Termination: The Connection Termination setting lets you specify how long the Internet Agent will wait for the receiving host to terminate the connection. The default is 10 minutes. This setting corresponds with the Internet Agent’s /tt switch. 4 Click OK to save the changes. Determining What to Do with Undeliverable Messages 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > Undeliverables. Properties of GWIA E x| ITPMIME y: iUndeliverables i DAP | POP31MAP4 | Server Directories | Access Control +] Reattach | Post Office Links | Group [J>] Amount of Original Message to Return to Sender Pa a When Message is Undeliverable: E F KB Forward Undeliverable Inbound Messages to Host: Undeliverable or Problern Messages C Move to problem directory [I Send to postmaster If neither option is chosen, the messages are discarded. Page Options... OK Apply | Help 3 Fill in the fields: Amount of Original Message to Return to Sender When Message is Undeliverable: This setting lets you specify how much of the original message is sent back to the sender when a message is deemed undeliverable. By default, only 2 KB of the original message will be sent back. This setting corresponds with the Internet Agent’s /mudas switch. Forward Undeliverable Inbound Messages to Host: This setting lets you specify a host that will be forwarded undeliverable messages. This may be useful if you use UNIX sendmail aliases. When an IP address is specified rather than a DNS hostname, the IP address must be surrounded by square brackets [ ]. For example, [151.155.134.246]. This setting corresponds with the Internet Agent’s /fut switch. 670 GroupWise 6.5 Administration Guide Undeliverable or Problem Messages: This setting lets you specify what you want the Internet Agent to do with problem messages. A problem message is an inbound or outbound message that the Internet Agent cannot convert properly. By default, problem messages are discarded. If you want to save problem messages, specify whether to move the messages to the problem directory (gwprob), send them to the postmaster, or do both. This setting corresponds with the Internet Agent’s /badmsg switch. IMPORTANT: Despite the field name (Undeliverable or Problem Messages), this setting does not apply to undeliverable messages. 4 Click OK to save the changes. Configuring SMTP Dial-Up Services SMTP dial-up services can be used when you don't reguire a permanent connection to the Internet and want to periodically check for mail messages gueued for processing. Perform the following tasks in order to use SMTP dial-up services: + “Setting up Internet Dial-Up Software” on page 671 + “Enabling Dial-Up Services” on page 671 + “Creating a Dial-Up Schedule” on page 672 Setting up Internet Dial-Up Software The Internet Agent reguires routing software to make the dial-up connection to the Internet. The Internet Agent cannot make this connection itself; it simply creates packets to hand off to the routing software. For information about configuring the Internet Agent’s dial-up feature with routing software, see Novell Technical Information Document 10007366 (http://support.novell.com/cgi-bin/search/ searchtid.cgi?/10007366.htm). Enabling Dial-Up Services After you have the appropriate routing software in place, you can enable and configure the Internet Agent’s dial-up services. 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > Dial-Up Settings. Configuring Internet Agent Services 671 E Enable dial-up ETRNHost | ETRN Queue: Settings for Windows NT Remote Access Server Username: | Password: 5 SS When dial-up is enabled, select the Scheduling page to set the times when dialing is allowed. Page Options... OK Apply | Help 3 Fill in the fields: Enable Dial-Up: Turn on this option to allow the Internet Agent to support SMTP dial-up service. This option is off by default. This setting corresponds with the Internet Agent’s / usedialup switch. ETRN Host: Specify the IP address, or DNS hostname, of the mail server (where your mail account resides) at your Internet Service Provider. You should obtain this address from your Internet Service Provider. This setting corresponds with the Internet Agent’s /etrnhost switch. ETRN Queue: Specify your e-mail domain as provided by your Internet Service Provider (for example, novell.com). This setting corresponds with the Internet Agent’s /etrnqueue switch. Username: The Username setting applies only if you are using a Windows NT Remote Access Server (RAS) and the Internet Agent is not running on the same server as the RAS. Specify the RAS Security username. This setting corresponds with the Internet Agent’s / dialuser switch. Password: The Password setting applies only if you are using a Windows NT Remote Access Server (RAS) and the Internet Agent is not running on the same server as the RAS. Specify the RAS Security user’s password. This setting corresponds with the Internet Agent’s /dialpass switch. 4 Click OK to save the changes. Creating a Dial-Up Schedule After you’ve enabled the Internet Agent to use a dial-up connection, you need to schedule the times when the Internet Agent will initiate a connection. NOTE: When the Internet Agent initiates a connection, it simply passes TCP/IP packets to the routing service that makes the Internet connection. The routing software, not the Internet Agent, is responsible for the actual dial-up or timeout. The Internet Agent uses profiles to enable you to assign different dial-up criteria to different times. For example, the default profile instructs the Internet Agent to initiate a dial-up connection whenever an outgoing message is placed in its send queue. However, during the night, you may want the Internet Agent to initiate a connection only after 30 outgoing messages have been queued. 672 GroupWise 6.5 Administration Guide In this case, you could create a profile that reguires 30 messages to be gueued and then apply the profile between the hours of 11 p.m. and 7 a.m. each day. To create a dial-up schedule: 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > Scheduling. xl LDAP | POP3AMAP4 | Server Directories | Access Control + | Resttach | Post Office Links | Group! [5] >] 1 Sunday Monday Tuesday Wednesday Thursday Friday Saturday Undo Default Profile 2) Other Profiles E Current Profile Profiles: Create... | Edit... | elete | Page Options... | OK Apply | Help 3 To apply a profile to a block of time, skip to “Applying a Profile” on page 673. or To create a profile, skip to “Creating a Profile” on page 673. or To edit a profile, skip to “Editing a Profile” on page 674. or To delete a profile, skip to “Deleting a Profile” on page 674 Applying a Profile 1 Select the profile in the Profiles list. 2 Click the desired hour. or Drag to select multiple hours. 3 Click Apply to save the changes or click OK to save the changes and close the page. Creating a Profile 1 Click Create to display the Create Profile dialog box. 2 Fill in the fields: Name: Enter a unique name for the profile. It must be different than any other name in the Profile list. Configuring Internet Agent Services 673 Description: If desired, enter a description for the profile. Queue Thresholds: The queue thresholds determine the criteria for the Internet Agent to initiate a dial-up connection to send messages. The settings do not apply to receiving messages (see Dial Parameters below). You can base the criteria on the number of messages in the send queue, the total size of the messages in the send queue, or the number of minutes to wait between connections. If necessary, you can use a combination of the three criteria. For example, if you set Messages to 20, Kilobytes to 100, and Minutes to 60, the Internet Agent will instruct the routing service to initiate a dial-up connection when 20 messages have accumulated in the queue, when the total size of the messages in the queue reaches 100K, or when 60 minutes have passed since the last connection. Dial Parameters: The dial parameters serve two purposes: 1) the Internet Agent passes the Redial Interval and Idle Time Before Hangup parameters to the routing service to use when initiating a connection to send outbound messages, and 2) the Internet Agent uses the Polling Interval parameter to determine how often the routing service should initiate a connection to check for inbound messages. The Polling Interval parameter is required. Specify the interval between redials (default is 30 seconds), the amount of time to wait before hanging up when there are no messages to process (default is 60 seconds), and the interval between polling for inbound messages (default is 0 minutes). 3 Click OK to add the profile to the Profiles list. 4 To apply the profile to a block of time, see “Applying a Profile” on page 673. Editing a Profile 1 Select the profile you want to edit, then click Edit to display the Edit Profile dialog box. 2 Modify the desired fields. For information about each of the fields, click the Help button in the Edit Profile dialog box or see “Creating a Profile” on page 673. 3 Click Apply to save the changes or click OK to save the changes and close the page. Deleting a Profile 1 Select the profile you want to remove from the list, then click Delete. 2 Click Apply to save the changes or click OK to save the changes and close the page. Enabling SMTP Relaying 674 You can enable the Internet Agent to function as a relay host for Internet messages. The Internet Agent can relay messages received from all Internet hosts, or you can select specific hosts for which you will allow it to relay. 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click Access Control > SMTP Relay Settings. GroupWise 6.5 Administration Guide Properties of GWIA J SMTPMME + | LDAP | POP3AMAP4 | Server Directories | Access Control + || Reattach | Post Office Links | Groupi Page Options... | [SMTP Relay Defaults Exceptions C Allow message relaying € Prevent message relaying E Prevent messages larger than 1 E Kbytes Allow: From To Create... [ am | SE Edit Delete From To Create Edit Delete MES nl ok Apply | Hem xl 3 Under SMTP Relay Defaults, select whether you want to allow or prevent message relaying. If you prevent message relaying, you can define exceptions that will allow message relaying for specific Internet hosts. This can also be done if you allow message relaying. We suggest that you select the option that enables you to define the fewest exceptions. 4 To prevent relaying of messages larger than a specific size (regardless of the SMTP Relay Defaults setting), enable the Prevent Messages Larger Than option and specify the size limitation. 5 To define an exception, click Create to display the New Internet Address dialog box. New Internet Address xj From: To: [ Op | Cancel | Help | 6 Fill in the following fields: From: Enter the Internet address that must be in the message’s From field for the exception to be applied. To: Enter the Internet address that must be in the message’s To field for the exception to be applied. This is also the address that the message will be relayed to (in the case of an Allow exception). In both the From and To fields, you can use either an IP address or a DNS hostname, as shown in the following examples: novell.com 10. 1. 1.10 You can enter a specific address, as shown above, or you can use wildcards and IP address ranges to specify multiple addresses, as follows: *. novell.com 10. 10. 1.1. * 1.1.10=15 Configuring Internet Agent Services 675 T Click OK to add the exception to the list. 8 When finished defining exceptions, click OK to save your changes. Configuring SMTP Host Authentication The Internet Agent supports SMTP host authentication for both outbound and inbound message traffic. Outbound Authentication For outbound authentication to other SMTP hosts, the Internet Agent reguires that the remote SMTP hosts support the AUTH LOGIN authentication method. To set up outbound authentication: 1 Include the remote SMTP host’s domain name an authentication credentials in the gwauth.cfg file, located in the domain\wpgate\gwia directory. The format is: domain name authuser authpassword For example: smtp.novell.com remotehost novell 2 Ifyou have multiple SMTP hosts that require authentication before they will accept messages from your system, create an entry for each host. Make sure to include a hard return after the last entry. 3 If you want to allow the Internet Agent to send messages only to SMTP hosts listed in the gwauth.cfg file, use the following startup switch: /forceoutboundauth With this option enabled, if a message is sent to an SMTP host not listed in the gwauth.cfg file, the sender will receive an Undeliverable message. Inbound Authentication For inbound authentication from other SMTP hosts, you can use the /forceinboundauth startup switch to ensure that the Internet Agent accepts messages only from SMTP hosts that use the AUTH LOGIN authentication method to provide a valid GroupWise user ID and password. The remote SMTP hosts can use any valid GroupWise user ID and password. However, for security reasons, we recommend that you create a dedicated GroupWise user account for remote SMTP host authentication. Using a Route Configuration File 676 The Internet A gent supports the use of a route configuration file (route.cfg) to specify destination SMTP hosts. This can be useful in situations such as the following: + You are using a relay host for outbound messages. However, you want some outbound messages sent directly to the destination host rather than the relay host. Whenever a message 1s addressed to a user at a host that is included in the route.cfg file, the Internet Agent will send the message directly to the destination host rather than the relay host. + You need to send messages to SMTP hosts that are unknown to the public Domain Name Servers. The route.cfg file acts much like a hosts file to enable the Internet Agent to resolve addresses not listed in DNS. + You want to route messages through an SMTP host that checks for viruses (or performs some other task) before routing them to the destination host. GroupWise 6.5 Administration Guide To setup a route.cfg file: 1 Create the route.cfg file as a text file in the domain\wpgate\gwia directory. 2 Add an entry for each SMTP host you want to send to directly. The entry format is: hostname address where address is either an alternative hostname or an IP address. For example: novell.com gwia.novell.com unixbox [123.1.2.3] Make sure to include a hard return after the last entry. In addition, if you use an IP address, it must be included in square brackets, as shown in the second example. 3 Save the route.cfg file. Customizing Delivery Status Notifications The Internet Agent returns status messages for all outbound messages. For example, if a Group Wise user sends a message that the Internet Agent cannot deliver, the Internet Agent returns an undeliverable message to the GroupWise user. By default, the Internet Agent uses internal status messages. However, you can override the internal status messages by using a status.xml file that includes the status messages you want to use. 1 Open the appropriate statusxx.xml file, located in the domain\wpgate\gwia directory. The domain\wpgate\gwia directory includes a statusxx.xml file for each language included on your GroupWise 6.5 Administrator CD (for example, statusus.xml, statusde.xml, and statusfr.xml). 2 Make the modifications you want. The following sample code shows the elements and default text of the Undeliverable Message status: Message status - undeliverable \r\nThe attached file had the following undeliverable recipient (s) :\r\n \r\nTranscript of session follows: \r\n You can modify text in the tag or in the tags. You can add additional tags in the . You can remove tags to keep an element from being displayed. For example, you could remove the tags to keep the original message from displaying. You can use the following format characters and variables: + \t: tab Configuring Internet Agent Services 677 + Ar: carriage return + \n: line feed + %s: recipient name variable 3 Save the file, renaming it from statusxx.xml to status.xml. 4 Restart the Internet Agent. The Internet Agent will now use the status messages defined in the status.xml file rather than its internal status messages. Managing MIME Messages Multipurpose Internet Mail Extensions, or MIME, provides a means to interchange text in languages with different character sets. Multimedia e-mail can be sent between different computer systems that use the SMTP protocol. MIME allows you to send and receive e-mail messages containing: + Images + Sounds + UNIX Tar Files + PostScript* + FTP-able File Pointers + Non-ASCII Character Sets + Enriched Text + Nearly any other file Because MIME handles such a variety of file types, you might need to customize aspects of MIME for your users. + “Customizing MIME Preamble Text” on page 678 + “Customizing MIME Content-Type Mappings” on page 679 Customizing MIME Preamble Text An ASCII file called preamble.txt is installed in the Internet Agent gateway directory (domain\wpgate\gwia). This file, which is included with any MIME multipart message, is displayed when the message recipient lacks a MIME-compliant mail reader. The content of the preamble.txt file is a warning, in English, that the file is being sent in MIME format. If the recipient cannot read the message, he or she will need to either use a MIME- compliant mail reader or reply to the sender and request the message not be sent in MIME format. It is recommended that you use the preamble.txt file so that those who read MIME messages coming from your GroupWise system and who lack MIME-compliant mail readers will understand why they cannot read the message and will be able to take corrective action. If you choose to modify the preamble.txt file, be aware of the following considerations: + The maximum file size is 1024 bytes (1 KB) ¢ This file is read by the Internet Agent when the Internet Agent starts, so if you change the file, you will need to restart the Internet Agent. 678 GroupWise 6.5 Administration Guide The Internet Agent’s gateway directory also contains a preamble.all file. The preamble.all file includes the text of preamble.txt translated into several languages. If you anticipate that your users will be sending mail to non-English speaking users, you may want to copy the appropriate language sections from the preamble.all file to the preamble.txt file. The 1024-byte limit on the size of the preamble.txt file still applies, so make sure that the file does not exceed 1024 bytes. Customizing MIME Content-Type Mappings By default, the Group Wise client determines the MIME content-type and encoding for message attachments. If, for some reason, the GroupWise client cannot determine the appropriate MIME content-type and encoding for an attachment, the Internet Agent must determine the content-type and encoding. The Internet Agent uses a mimetype.cfg file to map attachments to the appropriate MIME content types. Based on an attachment’s content type, the Internet Agent encodes the attachment using quoted-printable, Base64, or BinHex. Generally, quoted-printable is used for text-based files, Base64 for application files, and BinHex for Macintosh files. The mimetype.cfg file includes mappings for many standard files. If necessary, you can modify the file to include additional mappings. If an attachment is sent which does not have a mapping in the file, the Internet Agent will choose quoted-printable, BinHex or Base64 encoding. The mimetype.cfg file is also used for RFC-822 attachments, but UUencode or BinHex encoding will be used regardless of the mapped content type. The mimetype.cfg file is located in the domain\wpgate\gwia directory. The following section provide information you will need to know to modify the file: + “Mapping Format” on page 679 + “File Organization” on page 680 Mapping Format Each mapping entry in the file uses the following format: content-type .ext | dtk-code | mac-ttttcccc [/parms] ["comment"] Element Description content-type The MIME content type to which the file type is being mapped (for example, text/plain). You can omit the content-type only if you use the /parms element to explicitly define the encoding scheme for the file type. Configuring Internet Agent Services 679 Element .ext|dtk-code|mac-ttttcccc /parms "comment" File Organization Description The .ext element, dtk-code element, and mac-ttttcccc element are mutually exclusive. Each entry will contain only one of the elements. + «ext: The file type extension being mapped to the content type (for example, .txt). dtk-code: The detect code being mapped to the content type (for example, dtk-1126). GroupWise assigns a detect code to each attachment type. mac-ttttcccc: The Macintosh file type and creator application being mapped to the content type (for example, mac-textmswd). The first four characters (tttt) are used for the file type. The last four characters (cccc) are used for the creator application. You can use ???? for the creator portion (mac-text????) to indicate a certain file type created by any application. You can use ???? in any application. Optional parameters that can be used to override the default encoding assigned to the MIME content type. Possible parameters are: + + lalternate /parallel /base64 /quoted-printable /quoted-printable-safe /uuencode /plain /binhex /nofixeol /force-ext /noconvert /apple-single /apple-double Optional content description The mimetype.cfg file contains the following four sections: + + + [ [ [ [ Parameter-Override] Mac-Mappings] Detect-Mappings] Extension-Mappings] 680 GroupWise 6.5 Administration Guide [Parameter-Override] The [Parameter-override] section take priority over other sections. You can use this section to force the encoding scheme for certain file types. This section also contains defaults for sending various kinds of multipart messages. This is how the Internet Agent knows to put attachments into MIME Alternate/Parallel multiparts. [Mac-Mappings] The [Mac-mappings] section defines mappings for Macintosh file attachments. The following is a sample entry: application/msword mac-wdbnmswd "Word for Macintosh" Macintosh files have a type and creator associated with them. The first four characters are used for the type and the last four characters are used for the creator application. In the above example, the type is wdbn and the creator application is mswd. When a user attaches a Macintosh file to a message, the Internet Agentuses the appropriate entry in the [Map-mappings] section to map the file to a MIME content type and then encode the file according to the assigned encoding scheme. Unless otherwise specified by the /parms element, BinHex 4.0 will be used for the encoding. The following example shows how you can use the /parms element to change the encoding from the default (BinHex) to Base64: application/msword mac-wdbnmswd /base64 "Word for Macintosh" If necessary, you can use ???? for the creator portion (mac-text????) to indicate a certain file type This causes all Macintosh files to be encoded using Base64 rather than BinHex. [Detect-Mappings] Group Wise attempts to assign each attachment a detect code based on the attachment’s file type. The [Detect-mappings] section defines the mappings based on these detect codes. The following is a sample entry: application/msword dtk-1000 "Microsoft Word 4" The Internet Agent will use the detect code to map to a MIME content type and then encode the file according to the assigned encoding scheme. If there is no mapping specified or if the file type cannot be determined, one of the other mapping methods, such as Extension-Mappings, will be used. The detect codes associated with attachments are GroupWise internal codes and cannot be changed. [Extension-Mappings] If a mapping could not be made based on the entries in the [Mac-mappings] and [Detect-mappings] section, the Internet Agent uses the [Extension-mappings] section. The [Extension-mappings] section defines mappings based on the attachment’s file extension. The following is a sample entry: application/pdf .pdf Configuring Internet Agent Services 681 Configuring LDAP Services The Internet Agent supports the Lightweight Directory Access Protocol (LDAP) standard. With LDAP enabled, the GroupWise® Internet Agent functions as an LDAP server, allowing LDAP queries for Group Wise user information contained in the Novell® eDirectory™. You can also configure which GroupWise fields (Given Name, Last Name, Phone, and E-Mail) are visible to an LDAP query. + “Enabling LDAP Services” on page 682 + “Configuring Public Access” on page 683 IMPORTANT: For users to perform LDAP searches for GroupWise user information, they need to define the GroupWise Address Book as a directory in their e-mail client. When doing so, they will use the Internet Agent’s DNS hostname or IP address for the LDAP server address Enabling LDAP Services To enable and configure LDAP services for mail client access: 1 In ConsoleOne®, right-click the Internet Agent object, then click Properties. 2 Click LDAP > Settings to display the LDAP Settings page. Properties of GWIA E xl SMTPMIME POP3/IMAP4 | Server Directories | Access Control v | Reattach | Post Office Links | Groupi M Enable LDAP service Number of LDAP Threads: 10 < LDAP Context: (Search Root or Search Base) Example: O=Novell C=US LDAP Referral URL: Example: Idapvildap.provider.com To specify the visibility of certain GroupWise fields (address information) and to set restrictions for the public directory searches, use the LDAP Public Access page. Click Access Control, then select the LDAP Public property page to make changes to these settings. Page Options... CL ok À Cancel | Help 3 Fill in the fields: Enable LDAP Service: Turn on this option to allow LDAP queries. LDAP service is on by default. This setting corresponds to the Internet Agent’s /Idap switch. Number of LDAP Threads: The LDAP Threads setting lets you specify the maximum number of threads that will process LDAP queries. The default is 10 threads. This setting corresponds with the Internet Agent’s /Idapthrd switch. LDAP Context: Use this option to limit the directory context in which the LDAP server will search. For example, if you want to limit LDAP searches to the Novell organization container located under the United States country container, enter O=Novell,C=US. This setting corresponds with the Internet Agent’s /Idapentxt switch. 682 GroupWise 6.5 Administration Guide If you enter an LDAP context, you must make sure that users, when defining the directory in their e-mail client, enter the same context (using the identical text you did) in the Search Base or Search Root field. You can leave the settings empty in both locations. LDAP Referral URL: Use this option to define a secondary LDAP server to which you can refer an LDAP query if the query fails to find a user or address in your Group Wise system. For this option to work, the requesting Web browser must be able to track referral URLs. This setting corresponds with the Internet Agent’s /Idaprefurl switch. 4 Continue with the next section, Configuring Public Access. Configuring Public Access After you've enabled LDAP services, you can configure which Group Wise fields will be visible to LDAP searches and also set search restrictions. By default, no fields are visible. 1 Ifthe Internet Agent object’s property page is not open, right-click the Internet Agent object, then click Properties. 2 Click Access Control > LDAP Public Settings. Properties of GWIA E x| SMTPMME + | LDAP | POP3AMAPA | Server Directories attach | Post Office Links | Group! LDAP Defaults C Allow access @ Prevent access Visible Fields: GroupWise Field Visibility Given Name Not Visible Last Name Not Visible Phone Not Visible E-Mail Not Visible [es [eue | Limit Search Number of Entries to Return: foo How Many Seconds to Search: hz Idle Minutes Before Timeout [5 Page Options... oK Aww | Her | 3 Fill in the fields: LDAP Defaults: Select one of the following defaults for public access: Allow Access or Prevent Access. If you select Allow Access, the GroupWise fields (in the Visible Fields lists) will default to Visible for an LDAP search. If you select Prevent Access, the GroupWise fields will default to Not Visible. Visible Fields: You can override the default visibility for a GroupWise field (Given Name, Last Name, Phone, and E-Mail) by selecting the field and then clicking the appropriate visibility button (Visible or Not Visible). For example, if you’ve selected Allow Access as the LDAP default, but you don't want users’ telephone numbers to be visible, you can mark the Phone field as Not Visible. Number of Entries to Return: Select the maximum number ofentries to return. The default is 100. Configuring Internet Agent Services 683 How Many Seconds to Search: Select the maximum amount of time (in seconds) you want the Internet Agent to spend searching. The default is 120 seconds. Idle Minutes before Timeout: Specify the number of minutes to allow the search to continue without finding a matching address entry. The default is 5 minutes. 4 Click OK to save the changes. Configuring POP3/IMAP4 Services The Post Office Protocol 3 (POP3) and the Internet Message Access Protocol 4 (IMAP4) are standard messaging protocols for the Internet. The Group Wise” Internet Agent can function as a POP3 or an IMAP server, allowing access to the GroupWise domain database and message store. With POP3 or IMAP server functionality enabled, Group Wise users can download their messages from Group Wise to any POP3/IMAP4-compliant Internet e-mail client. To send messages, POP3/ IMAP4 clients can identify the Internet Agent as their SMTP server. Complete the instructions in the following sections to set up POP3/IMAP4 service: + “Enabling POP3/IMAP4 Services” on page 684 + “Configuring Post Office Links” on page 685 + “Giving POP3 or IMAP4 Access Rights to Users” on page 686 + “Setting Up an E-Mail Client for POP3/IMAP4 Services” on page 686 NOTE: Internal IMAP clients can connect directly to the POA, rather than connecting through the Internet Agent, as described in “Supporting IMAP Clients” on page 450. Direct connection provides faster access for internal IMAP clients. Enabling POP3/IMAP4 Services 684 By default, POP3 service and IMAP 4 service are enabled. To verify that the services are enabled and configured appropriately: 1 In ConsoleOne*, right-click the Internet Agent object, then click Properties. 2 Click POP3/IMAP4 > Settings to display the POP3/IMAP 4 Settings page. POP3 M Enable POP3 service Number of Threads for POP3 Connections: 10 = IMAP 4 Enable IMAP4 service Number of Threads for IMAP4 Connections: 10 3 Page Options... oK Cancel Apply [[ teo] GroupWise 6.5 Administration Guide 3 Fillinthe fields: Enable POP3 Service: POP3 service is on by default. This setting allows POP3 downloads from a Group Wise mailbox. It corresponds with the Internet Agent's /pop3 switch. Number of Threads for POP3 Connections: The POP3 threads setting lets you specify the number of connections for POP3 download requests. The default is 10 threads. This setting corresponds with the Internet Agent’s /pt switch. Enable IMAP4 Service: IMAP4 service is on by default. This setting allows IMAP4 downloads and management of Group Wise messages. It corresponds with the Internet Agent’s /imap4 Number of Threads for IMAP4 Connections: The IMAP4 threads setting lets you specify the number of connections for IMAP4 requests. The default is 10 threads. This setting corresponds with the Internet Agent’s /it switch. 4 Click OK to save the changes. Configuring Post Office Links To function as a POP3/IMAP4 server, the Internet Agent requires access to each post office that contains mailboxes that will be accessed by a POP3/IMAP4 client. The Internet Agent can connect directly to the post office directory through a UNC path or mapped drive, or it can use a TCP/IP connection to the Post Office Agent (POA). By default, the Internet Agent will use the access mode that has been defined for the post office (Post Office object > Group Wise tab > Post Office Settings page). If necessary, you can change the way the Internet Agent links to a post office. To change a post office link: 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click Post Office Links > Settings. The Post Office list displays all post offices in your GroupWise system and how the Internet Agent connects to them Properties of GWIA 4 x SMTP MIME -| LDAP | POPSIMAP4 | Server Directories | Access Control v | Reattach | | Group Post Offices: Domain Post Office Access Mode Link Page Options. | Sansz O | Hein | 3 Inthe Post Offices list, select the post office whose link information you want to change, then click Edit Link to display the Edit Post Office Link dialog box. Configuring Internet Agent Services 685 Edit Post Office Link E x| Domain: Provo Post Office: Research Cancel Current Post Office Access: Client Server Only Help Access Mode: Direct Access [ol ClientíServer Access 4 Define the following properties: Access Mode: The access mode determines whether the Internet Agent will use client/server access, direct access, or both client/server and direct access to connect to the post office. With client/server and direct, the Internet Agent first tries client/server access; 1f client/server access fails, it then tries direct access. You can also choose to use the same access mode currently defined for the post office (on the Post Office object’s Post Office Settings page). The current access mode is displayed in the Current Post Office Access field. Direct Access: When connecting to the post office in direct mode, the Internet Agent can use the post office’s UNC path (as defined on the Post Office object’s Identification page) or a mapped path that you enter. Client/Server Access: When connecting to the post office in client/server mode, the Internet Agent must know the hostname (or IP address) and port number of the Post Office Agent ruming against the post office. 5 Click OK. 6 Repeat Step 3 through Step 5 for each post office whose link you want to change. Giving POP3 or IMAP4 Access Rights to Users Access to POP3/IMAP4 services is determined by the class of service in which they are a member. By default, all users are members of the default class of service, which gives them POP3 and IMAP4 access. If you have changed the default class of service to exclude POP3 or IMAP4 access rights, or if you've defined additional classes of services that do not provide POP3 or IMAP4 access rights, you might want to evaluate your currently defined classes of service to ensure that they provide the appropriate POP3 or IMAP4 access. For details, see Chapter 49, “Controlling User Access,” on page 705. Setting Up an E-Mail Client for POP3/IMAP4 Services 686 With the Internet Agent set up as a POP3 and/or IMAP4 server, you can configure users” e-mail clients to download messages from GroupWise mailboxes. Most e-mail clients are configured differently. However, all Internet clients will need to know the following information: + POP3/IMAP4 Server: This is the DNS hostname or IP address of the Internet Agent. + Login Name: This is the user's Group Wise user ID. For POP3 clients, there are several user ID login options you can use to control how the Internet Agent handles the user’s messages. GroupWise 6.5 Administration Guide For example, you can limit how many messages are downloaded each session. For more information, see “User ID Login Options” on page 687. + Password: This is the user's existing GroupWise mailbox password. POP3/IMAP4 services reguires users to have passwords assigned to their mailboxes. User ID Login Options With POP3 clients, users can add the options listed in the table below to the login name (GroupWise user ID) to control management of their mailbox messages. If used, these options override the POP3 settings assigned through the user's class of service (see “Creating a Class of Service” on page 706). Login options are appended to the user ID name with a colon character (:) between the user ID name and the switches: Syntax: user ID:switch Example: User1:v=1 You can combine options by stringing them together after the user ID and the colon without any spaces between the options: Syntax: user 1D:switchlswitch2 Example: User1:v=1s41=10 The syntax for the user ID options is not case sensitive. Please note that login options are not required. If you do not want to include any login options, just enter the user ID name in the text box, or following the USER command if you are using a Telnet application as your POP3 client. Option Explanation Example v=number between The v option defines the POP3 client's view number. If User ID:v=1 1-31 multiple POP3 clients access the same GroupWise mailbox, each client must use a different view number in order to see a fresh mailbox. For example, if two POP3 clients access a mailbox and the first client downloads the unread messages, the second client will not be able to download the messages unless itis using a different view number than the first client. If this option is not used, the default value is 1. d The d option deletes the messages from the GroupWise User ID:d mailbox after they have been downloaded to the POP3 client. p The p option purges the messages from the GroupWise User ID:p mailbox after they have been downloaded to the POP3 client. t=1-1000 The t option defines the download period, starting with the User ID:t=14 current day. For example, if you specify 14, then only messages that are 14 days old or newer will be downloaded. If this option is not used, the default value is 30 days. Configuring Internet Agent Services 687 Option Explanation Example n The n option downloads messages in RFC-822 format User ID:N rather than the default MIME format. m The m option downloads messages in MIME format. This is User ID:M the default. s The s option presets the file size when the STAT command User ID:S is executed. If the users’ mailbox contains a lot of messages or large messages, it can take a long time to calculate the file size. With this option, the STAT command will always report an artificial file size of 1, which can save time. 1=1-1000 The | option limits the number of messages to download for User ID:L=10 each POP3 session. For example, if you want to limit the number of messages to 10, you would enter 1=10. If this option is not used, the default value is 100 messages. Configuring Paging Services The Group Wise? Internet Agent includes the ability to send a Group Wise message to a pager through an Internet paging service provider. The Internet Agent’s paging service includes the following features: + Smart forwarding: If a message has been replied to or forwarded before being sent to a pager, the Internet Agent identifies the original message and sends it only. + Easy to read originator information: The Internet Agent sends the original From, Subject, and Message information to the pager, rather than cryptic Header information. + User block control: By using the /1=/ength and /b=number switches on the message’s To line, the sender can control the block length and number of blocks to send to the pager. By default, the Internet Agent sends 255 bytes per block (/1=255 /b=1). To set up and use paging services, complete the tasks in the following sections: + “Setting Up Paging” on page 688 + “Using Paging” on page 689 Setting Up Paging To set up the Internet Agent’s paging service, you need to create a non-Group Wise domain to represent the paging service and then use your Internet Agent to link your system to the non- Group Wise domain. The non-Group Wise domain enables Group Wise to correctly identify pager messages and route messages to the Internet Agent, which can then send the messages to the Internet. + “Creating a Non-Group Wise Domain” on page 688 + “Linking the Internet Agent to the Non-Group Wise Domain” on page 689 Creating a Non-GroupWise Domain 1 In ConsoleOne*, right-click the Group Wise System object, click New, then click Non- GroupWise Domain to display the Create Non-Group Wise Domain dialog box. 688 GroupWise 6.5 Administration Guide 2 3 [Create Non-GroupWise Domain 3 xÍ Domain name: [ox] Time Zone: Canel (GMT-07:00) Mountain Time (US 8 Canada) Ed Help Link To Domain: Provo = [O Create another domain Fill in the following information: Domain Name: Provide the domain with a name such as Page. Users will need to know the name when addressing pager messages. Time Zone: Select the time zone in which the Internet Agent is located. Link to Domain: Select the domain in which the Internet Agent is located. Click OK to create the domain. Linking the Internet Agent to the Non-GroupWise Domain Using Paging 1 oon of GI 10 In ConsoleOne, click the Tools menu > Group Wise Utilities > Link Configuration to display the Group Wise Link Configuration tool. In the drop-down list, select the domain that owns the Internet Agent that you are using for this paging service. In the Outbound Links box, right-click the non-Group Wise domain, then click Edit to display the Edit Domain Link dialog box. Click Yes to accept the domain path as the mapped path and display the Edit Domain Link dialog box. In the Link Type field, select Gateway. In the Gateway Link field, select the Internet Agent. In the Gateway Access String field, type -page. Click OK to save the information. Click the File menu > Exit > Yes to save your changes and exit the Link Configuration tool. Restart the Internet Agent. To use paging, GroupWise users must address messages to the non-Group Wise domain, specifying the PIN number of the pager and the hostname of the paging service in the following format: domain:pinepaging service provider For example, page:1234567890skytel.com page:123456789%0epage.arch.com By using the /l=/ength and /b=number switches on the message’s To line, the sender can control the block length and number of blocks to send to the pager. For example, page:1234567890epage.arch.com/1=128/b=4 By default, the Internet Agent sends 255 bytes per block (/I=255/b=1). Configuring Internet Agent Services 689 690 GroupWise 6.5 Administration Guide Configuring Simplified Addressing How outbound and inbound messages need to be addressed for your Group Wise” system to properly deliver them depends largely on how you configure your Group Wise system. The following sections show the basic addressing syntax required if you don’t configure your Group Wise system for simplified addressing and provide instructions for configuring your system for simplified addressing. + “Basic Addressing Syntax” on page 691 + “Simplifying Addressing” on page 692 Basic Addressing Syntax The following sections provide information about the address syntax reguired for GroupWise users to send and receive Internet messages. + “Sending Messages” on page 691 + “Receiving Messages” on page 692 + “Receiving Replies to Sent Messages” on page 692 The syntax assumes that you have not configured your Group Wise system to simplify addressing. If, after reviewing the information below, you decide that you want to simplify addressing, you have the following options: + Enable your Group Wise system to use an Internet-style address format (user@host) rather than the standard Group Wise address format (user ID.post office.domain). This is the recommended configuration. For details, see Chapter , “Internet-Style Addressing,” on page 87. + Add specific Internet sites (hostnames) and/or Internet users to your Group Wise system, or define addressing rules that enable the Group Wise system to recognize Internet-style addresses and route them to the Internet Agent. This can reguire much work on your part and is not the recommended configuration. For details, see “Simplifying Addressing” on page 692. Sending Messages Group Wise users can send Internet messages using the following syntax: internet agent :"user@host" For example: gwia:"rcollins@novell.com" This addressing syntax requires you to provide Group Wise users with the name of the Internet Agent (in this example, gwia). Users must also place quotation marks around the user@host portion of the address. Configuring Simplified Addressing 691 Receiving Messages For a Group Wise user to receive an Internet message, the message address must include the Group Wise addressing elements (user ID.post office.domain) that will make the address unique within the GroupWise system. UserID is Unique: If a GroupWise user ID is unique within your Group Wise system, the user’s Internet address can include only the user ID (user_[D@host). For example, jsmith@novell.com. Post Office is Unique: If the GroupWise user ID does not create a unique address, the address must also include the user’s post office (user_ID.post_office@host). For example, jsmith.research@novell.com. Domain is Unique: If the GroupWise user ID and post office do not create a unique address, the address must also include the user’s domain (user_ID.post_office.domain@host). For example, jsmith.research.provo@novell.com. Receiving Replies to Sent Messages When sending messages, the Internet Agent automatically adds the addressing elements necessary for the user's address to be unique in your GroupWise system.This ensures that the message’s From line contains the address required to send a message back to the GroupWise user. You can also specify the exact elements (user_ID, user_ID.post_office or user_ID.post_office.domain) that will be included in the address. How you do so depends on whether or not your GroupWise system is configured for Internet-style addressing: ¢ Internet-style addressing enabled: The user’s address is determined by the preferred address format assigned to him or her. For information, see “Enabling Internet Addressing” on page 92. ¢ Internet-style addressing disabled: The Sender’s Address Format field (Internet Agent object > GroupWise tab > Address Handling page > Sender’s Address Format) determines the address format. For more information, see “Configuring How the Internet Agent Handles E- Mail Addresses” on page 664. The /aql startup switch can also be used for this same purpose. Simplifying Addressing The recommended way to simplify addressing is to enable your GroupWise system to use Internet- style addressing as its primary addressing format rather than the standard GroupWise addressing format. For information about enabling Internet-style addressing, see Chapter , “Internet-Style Addressing,” on page 87. If you choose not to enable Internet-style addressing, you can complete the tasks in the following section to simplify the Internet addressing syntax. You should review each section before deciding which method you want to use. + “Creating a Non-Group Wise Domain Structure” on page 692 + “Creating a Customized Addressing Rule” on page 700 Creating a Non-GroupWise Domain Structure A non-Group Wise domain structure includes a GroupWise domain that represents the Internet, post offices that represent Internet sites (hosts), and users that represent users located at those Internet sites. 692 GroupWise 6.5 Administration Guide Defining the Internet as a non-Group Wise domain enables GroupWise users to use the following syntax to send messages to Internet users: domain:user@host (internet:jsmith@novell.com) Adding Internet sites (hosts) as post offices in the domain enables Group Wise users to use the following syntax when sending messages to users at those Internet sites: user@post office (jsmith@novell) Adding an Internet site’s users to the post office enables Group Wise users to select the users from the Group Wise Address Book or use the following syntax when sending messages to those users: user (jsmith) You can create as much ofthe structure as is necessary to provide the desired addressing level. The following sections provide instructions: + “Simplifying Syntax to domain:user@host” on page 693 + “Simplifying Syntax to user@postoffice” on page 696 + “Simplifying Syntax to User” on page 699 Simplifying Syntax to domain:user@host By performing the following tasks, you can configure your GroupWise system so that users can send Internet messages using the domain:user@host syntax. + “Creating a Non-GroupWise Domain” on page 693 + “Linking to the Non-GroupWise Domain” on page 694 Creating a Non-GroupWise Domain The non-Group Wise domain represents the Internet and allows GroupWise to route Internet-bound messages to the Internet Agent. If you create a domain called "internet," GroupWise users would use the following syntax to send Internet messages: internet: user@host Messages sent from GroupWise to the Internet must be converted from GroupWise format to MIME or RFC-822 format. By default, the Internet Agent converts messages to MIME format. If your Group Wise users need to send messages in both MIME format and RFC-822 format, you may want to create two non-Group Wise domains, one to handle messages that need to be sent in MIME format and one to handle messages that need to be sent in RFC-822 format. For example, if you define the domain "mime" and configure the Internet Agent to convert all messages sent to that domain to MIME format, GroupWise users can use the following syntax to send MIME-formatted messages: mime :user@host If you define the domain "rfc822" and configure the Internet Agent to convert all messages sent to that domain to RFC-822 format, GroupWise users can use the following syntax to send RFC-822 formatted messages: rfc822 :user@host To create a non-GroupWise domain: 1 In ConsoleOne*, right-click Group Wise System (in the left pane), click New, then click Non- GroupWise Domain. Configuring Simplified Addressing 693 2 Fillinthe fields: Domain Name: Enter a name that has not been used for another domain in your system (for example, Internet). Time Zone: This should match the time zone for the Internet Agent. If it does not, select the correct time Zone. Link to Domain: Select the domain in which the Internet Agent is located. 3 Click OK to create the non-Group Wise domain. The domain will appear under Group Wise System in the left pane. Linking to the Non-GroupWise Domain After you have created the non-Group Wise domain, you must link the Internet Agent’s domain to the non-Group Wise domain. This enables the Group Wise system to route all Internet messages to the Message Transfer Agent (MTA) located in the Internet Agent’s domain. The MTA can then route the messages to the Internet Agent, which will send them to the Internet. To link to the non-GroupWise domain: 1 In ConsoleOne, click the Tools menu > Group Wise Utilities > Link Configuration to display the Link Configuration tool. By default, the Link Configuration tool displays the links for the domain that you are currently connected to. Ka Groupwise Link Configuration Tool - \\\\GWSY¥S\SYS\provo File Edit Search View Window Help ge! MIMI 2) AA] $18] [Provo Priman y || Ki Domain: Provo Outbound Links from Provo Direct Indirect Gateway Undefined A. Dublin A» Internet % San Jose r Direct rindirect A» Dublin % San Jose 2 Ifthe Internet Agent's domain is not the currently displayed domain, select it from the list of domains on the toolbar. The non-Group Wise domain should be displayed in the Direct column. In the screen displayed under step 1, Internet is the non-GroupWise domain. 3 Double-click the non-GroupWise domain to display the Edit Domain Link dialog box. NOTE: If you are prompted that the mapped path is empty, click Yes to dismiss the prompt and display the Edit Domain Link dialog box. 694 GroupWise 6.5 Administration Guide Edit Domain Link 1 xi Description: How Provo connects to Internet Link Type: Direct y] Cancel ¡Settings Help | Protocol: Mapped v Path: EE Scheduing..| Maximum send message size: 0 F MBytes Delay message size 0 4 MBytes Transfer Pull Info... | External Link Info... 4 Inthe Link Type field, select Gateway. After you select Gateway, the dialog boxes changes to display the settings reguired for a gateway link. x Description: How Provo connects to Internet Link Type: Cancel ¡Settings Help | Gateway Link: + Gateway Access String: Return Link: Provo Maximum send message size: 0 4 MBytes Delay message size 0 F MBytes Fill in the following fields: Gateway Link: Select the Internet Agent. Gateway Access String: If you want to specify the conversion format (RFC-822 or MIME) for messages sent to the domain, include one of the following parameters: -rfc822 or -mime. If you do not use either of these parameters, the Internet Agent will convert messages to the format specified in its startup file. The default is for MIME conversion (as specified by the Internet Agent's /mime startup switch). Return Link: Leave this field as is. It does not apply to the Internet Agent. Maximum Send Message Size: If you want to limit the size of messages that the Message Transfer Agent (MTA) in the Internet Agent’s domain will pass to the Internet Agent, specify the maximum size. This will be applied to all messages. If you want to limit the size of messages sent by specific users or groups of users, you can also use the Access Control feature. For details, see Chapter 49, “Controlling User Access,” on page 705. Delay Message Size: If you want the MTA to delay routing of large-sized messages to the Internet Agent, specify the message size. Any messages that exceed the message size will be assigned a lower priority by the MTA and will be processed after the higher priority messages. 6 Click OK to save the changes. Configuring Simplified Addressing 695 The non-Group Wise domain is moved from the Direct column to the Gateway column. Fora description of the link symbols in front of the domain names, see the Help in the Link Configuration tool. KE Groupwise Link Configuration Tool - \\GWSYS\SYS\provo = oj x| File Edit Search View Window Help | MIS] 2] AIS] RS) Foo comm =] N Outbound Links from Provo Direct Indirect Gateway: Undefined % Dublin %, ¢ Internet (GW S San Jose Rs ni Direct rindirect A. Dublin % San Jose 7 Click the File menu, click Exit, then click Yes to exit the Link Configuration tool and save your changes. At this point, users can exchange e-mail with other Internet users using the syntax domain:user@host. Make sure you distribute the name of the domain to your users. Simplifying Syntax to user@postoffice This section assumes that you have already created a non-GroupWise domain. If you have not, see “Creating a Non-GroupWise Domain” on page 693. After you've created a non-Group Wise domain to represent the Internet, you can add post offices to the domain to represent different Internet hosts. For example, if your GroupWise users frequently send messages to users at XYZ.COM, you can define XYZ.COM as a post office. Group Wise users would then use the following syntax to send messages to those users: user@postoffice To simplify the addressing syntax to this level, complete the following tasks: + “Creating a Post Office to Represent a Internet Host” on page 696 + “Adding the Hostname As an Alias” on page 697 Creating a Post Office to Represent a Internet Host When creating a post office to represent an Internet host, the post office name cannot be identical to the hostname because the period that separates the hostname components (for example, novell.com) is not a valid character for post office names. GroupWise reserves the period for its addressing syntax of user ID.post office.domain. Therefore, you should choose a name that is closely related to the hostname. To create the post office: 1 In ConsoleOne, right-click the non-Group Wise domain that represents the Internet, click New, then click External Post Office. 696 GroupWise 6.5 Administration Guide Ki Create External GroupWise Post Office xÍ Post office name: pe Time Zone: Cancel | (GMT-07:00) Mountain Time (US 8 Canada) = Help | I Create another post office 2 Fill in the following fields: Post Office Name: Enter a name that will associate the post office with the Internet host. Do not use the fully-qualified hostname. Time Zone: Select the time zone in which the Internet host is located. 3 Click OK to create the post office. The post office is added under the non-Group Wise domain. Adding the Hostname As an Alias When a Group Wise user sends a message to a user at the Internet host, he or she will use the post office name in the address: user@post office For the Internet Agent to send the message, you need to associate the Internet hostname with the post office. You do this by defining the hostname as an alias for the post office. To create a post office alias: 1 In ConsoleOne, right-click the Internet Agent object, click Properties. 2 Click GroupWise > Identification to display the Identification page. Properties of GWIA E x Access Control v | Reattach | Post Office Links | GroupWise + | NDS Rights v | Other | Rights to Files and Folders { Domain.Gateway: Description: Subdirectory: Time Zone: Database Version: Platform: Gateway Type: Gateway Alias Type: Foreign ID: SNMP Community "Get" String: - Network Address TOPIIP Address: IPX/SPX Address: | Identification Provo.GWIA [eue pl (GMT-07:00) Mountain Time (US & Canada) Ew, fs ë [Netware Loadable modue >| [emergen FF ee [novecon 000 Page Options... | OK Cancel Apply | Help 3 In the Gateway Alias Type field, enter an alias type. This can be any name you want, including the same name as the Internet Agent. It will be used to associate the post office alias with the Internet Agent. 4 Click OK to save the gateway alias type information. Configuring Simplified Addressing 697 5 Right-click the post office you created for the Internet host, then click Properties. 6 Click Group Wise > Gateway Aliases to display the Gateway Aliases page. Properties of Novell x| Gateway Alias Page Options... | 7 Click Add to display the Create Alias dialog box. Create Alias j x| Create alias for Internet.Novell Gateway Alias Type: (A Gateway Alias Address: OK | Cancel | Help | 8 Fill in the following fields: Gateway Alias Type: Select the gateway alias type you assigned to the Internet Agent. Gateway Alias: Enter the Internet hostname (for example, novell.com). 9 Click OK to add the alias to the Gateway Alias list. 698 GroupWise 6.5 Administration Guide Properties of Novell d xj GroupWise v Aliases Gateway Alias gwia:novell.com Page Options... | oK Cancel Apply | Help 10 Click OK. With these steps completed, Group Wise users can send a message to a user at the Internet host with the following syntax: user@post office Users are not restricted to using user@post_office addressing. They can still use domain:user@host addressing to send messages to other users. Simplifying Syntax to User This section assumes that you have already completed the tasks in “Simplifying Syntax to domain:user@host” on page 693 and “Simplifying Syntax to user@postoffice” on page 696. To configure your Group Wise system for user syntax, you need to add Internet users to the post offices you created to represent their Internet hosts. This not only enables the user syntax, but also adds the Internet users to the GroupWise Address Book. To add an Internet user to a post office: 1 In ConsoleOne, right-click the post office that represents the user's Internet host, click New, then click External User. Ki Create GroupWise External User E xj Cancel Help I Create another external user 2 Inthe User Name field, enter the exact user portion of the user's Internet address. If the address is jsmith@novell.com, the portion you would enter is jsmith. 3 Click OK to create the external user. 4 Because the user will be displayed in the GroupWise Address Book, you might want to define the user's given name and last name. To do so, right-click the user's object, fill in the desired fields on the Identification page, then click OK to save the information. Configuring Simplified Addressing 699 To send a message to an Internet user who you’ve added, your Group Wise users can use the Address Book or enter the following syntax: user For example, jsmith User addressing does not restrict users from addressing messages to other Internet users who are not included in the Group Wise Address Book. Users can also use domain:user@host addressing, which lets them communicate with Internet users who are not yet part of your system’s non- GroupWise domain structure. Creating a Customized Addressing Rule You can use addressing rules to determine how addresses with specific syntax elements are handled. For example, you could establish an addressing rule that enables GroupWise users to enter an Internet address (user@host) and then resolves it to the syntax (internet agent:"user(Dhost") required by the Internet Agent. An addressing rule is not a macro; you cannot embed one rule within another rule. The addressing rule simply searches for a string pattern and replaces it with the syntax defined in the rule. Each addressing rule you create is available for your entire Group Wise system. However, you can enable or disable a rule at the domain level. The following sections provide information about creating and managing addressing rules: + “Creating an Addressing Rule” on page 700 + “Enabling and Disabling Addressing Rules” on page 702 + “Changing the Addressing Rule Order” on page 703 Creating an Addressing Rule Group Wise uses user ID(d)domain post office syntax internally. Because of this, it is important the addressing rule you create includes an Internet domain identifier such as .com or .edu. You may need to include Internet domain identifiers for all the Internet addresses you will use. For example, if you want to send to jsmith@novell.com, bharris@college.edu, and tsternes@marketing.net, you should create a rule for each domain identifier (.com, .edu, and .net). To create an addressing rule: 1 In ConsoleOne, click the Tools menu > GroupWise System Operations > Addressing Rules. 700 GroupWise 6.5 Administration Guide {Define Addressing Rules x Addressing Rules x Description: | Cx] Name: [SS Cancel Search String: IET Help Replace With: EO TestRule Enter an address and click Test. Testadaress: | Results: 3 Fillin the following fields: Description: Enter a short description for the rule. The description is what appears when the rule is listed in the Addressing Rules dialog box. Name: Enter the name you want to use for the rule (for example, Internet Addresses). Search String: Enter a string of characters (including any wildcards for variable elements) that represents the addressing syntax you expect for an Internet message. The syntax must have at least one unigue character that will identify it for your rule as an Internet address. The rule can then plug in the reguired, missing elements of'the explicit address. For example, if you want GroupWise users to enter user@host when addressing Internet messages, you could define the search string as *@* . com. Replace With: Enter the symbol for the variable string (information typed in by the user) that you want to replace for the wildcard characters. In addition to the variable symbol, you can also add any additional static elements reguired in the explicit address. A good replacement string is internet:"%1%2.com.". When the message is sent, the rule refers to the wildcards in search string order. That is, %1 (replace string 1) replaces the first wildcard in the search string, %2 replaces the second wildcard, and so on. The replacement variables do not have to be positioned in numerical order in the replacement string; instead, they must be placed in the string according to the order reguired for the explicit address. For example, one of your Group Wise users sends a message using the following address: jsmith@sales.novell.com. Address syntax (entered by user): jsmith@sales .novell.com Search string: *@* . com Configuring Simplified Addressing 701 Replacement string: internet"%1@%2.com Results: internet"jsmithesales.novell.com" 4 Type an address in the Test Address field just as you would expect a Group Wise user to type an address in the Group Wise client. 5 Click Test to determine if your search and replace strings result in an accurately resolved explicit address. 6 Click OK to save the addressing rule. Enabling and Disabling Addressing Rules Addressing rules are not automatically enabled. You need to enable them in each domain to which you want them applied To enable or disable addressing rules: 1 Right-click a Domain object, then click Properties. 2 Click Group Wise > Addressing Rules to display the Addressing Rules page. Properties of Provo E xj GroupWise + | NDS Rights v | Other | Rights to Files and Folders | Addressing Rules Addressing rules used by this domain: O Convert internet addresses Page Options... 6 Cancel Apply | Help 3 Click the check box to enable the addressing rule you want in this domain. 4 To ensure that the rule is being applied correctly in the domain, click Test to display the Run Addressing Rules dialog box. Run Addressing Rules P xj Enter an address and click Test. Close | Test address: [ | Help Results: Les | 5 Enter an address as if you were a user sending a message, then click Test. The Results field displays the resolved address. If this is not the address you were expecting, check the other rules that precede the rule in the list. Addresses are evaluated against the rules 702 GroupWise 6.5 Administration Guide in the order the rules are listed. It may be necessary to change the order of the rules (see “Changing the Addressing Rule Order” on page 703). 6 Click Close to close the Run Addressing Rule dialog box, then click OK. Changing the Addressing Rule Order Addressing rules are applied in the order they are encountered. If a rule is applied to an address string, the search for a rule ends. To change the order of addressing rules: 1 In ConsoleOne, click the Tools menu > GroupWise System Operations > Addressing Rules. 2 Select a rule, then click the up-arrow to move it up in the list. or Select a rule, then click the down-arrow to move it down in the list. Configuring Simplified Addressing 703 704 GroupWise 6.5 Administration Guide Controlling User Access You can use the Group Wise” Internet Agent’s Access Control feature to configure a user’s ability to send and receive SMTP/MIME messages to and from Internet recipients and to access his or her mailbox from POP3 or IMAP4 e-mail clients. In addition to enabling or disabling a user's access to features, you can configure specific settings for the features. For example, for outgoing SMTP/ MIME messages, you can limit the size of the messages or the sites to which they can be sent. Access Control can be implemented at a user, distribution list, post office, or domain level. Choose from the following information to learn how to set up and use Access Control. + “Classes of Service” on page 705 + “Creating a Class of Service” on page 706 + “Testing Access Control Settings” on page 711 + “Maintaining the Access Control Database” on page 712 Classes of Service A class of service is a specifically defined configuration of Internet Agent privileges. A class of service controls the following types of access activities: + Whether or not SMTP/MIME messages are allowed to transfer to and from the Internet + Whether or not SMTP/MIME messages are allowed to transfer to and from specific domains on the Internet + The maximum size of SMTP/MIME messages that can transfer to and from the Internet + Whether or not SMTP/MIME messages generated by Group Wise rules are allowed to transfer to the Internet + Whether or not IMAP4 clients are allowed to access the Group Wise system + Whether or not POP3 clients are allowed to access the Group Wise system, and if allowed, how messages to and from POP3 clients are managed by the Group Wise system The default class of service, which all users belong to, allows incoming and outgoing SMTP/ MIME messages, and allows POP3 and IMAP4 access. You can control user access, at an individual, distribution list, post office, or domain level, by creating different classes of service and adding the appropriate members to the classes. For example, you could create a class of service that would limit the size of SMTP/MIME messages for a selected individual, distribution list, post office, or domain. Because you can assign membership at the user, distribution list, post office, and domain level, it is possible that a single user can be a member of multiple classes of service. This conflict is resolved hierarchically, as shown in the following table. Controlling User Access 705 Membership assigned toa Overrides membership assigned to the user through the... user through a... domain + default class of service post office ¢ default class of service + domain distribution list + default class of service + domain + post office user + default class of service * domain + post office If a user's membership in two classes of service is based upon the same level of membership (for example, both through individual user membership), the class that applies is the one that allows the most privileges. IMPORTANT: The Internet Agent uses the message size limit set for the default class of service as the maximum incoming message size for your GroupWise system. Therefore, you should set the message size for the default class of service to accommodate the largest message that you want to allow into your GroupWise system. As needed, you can then create other classes of service with smaller message size limits to restrict the size of incoming messages for selected users, distribution lists, post offices, or domain. Methods for restricting message size inside your GroupWise system are described in “Restricting the Size of Messages That Users Can Send” on page 175. Creating a Class of Service 1 In ConsoleOne*, right-click the Internet Agent object, then click Properties. 2 Click Access Control > Settings to display the Access Control Settings page. Properties of GWIA i xÍ SMTPMIME + | LDAP | POP31M&P4 | Server Directories | Access Control + | Reattach | Post Office Links | Group Settings | Class of Service: Default Class of Service Memberships: Member ID Post Office Domain Everyone Page Options... OK Cancel Apply | Help 706 GroupWise 6.5 Administration Guide 3 Click Create to display the Create New Class of Service dialog box. create new class ofService x Name: e Enter the name ofthe new class of service above. Ifthe boxes below Cancel are checked, you will be prompted to editthe details ofthe class of senice. e | M Edit access settings M Select membership 4 Type a name for the class, then click OK to display the Edit Class of Service dialog box. Br x SMTP Incoming | SMTP Outgoing | imap4 | POP3| OK SMTP Incoming Defaults Cancel i Help © Allow incoming messages © Prevent incoming messages Prevent messages larger than 4 Kbytes Exceptions Allow messages from: Prevent messages from: Create... Edit elete Create... Edit elete 5 On the SMTP Incoming tab, choose from the following options: Inherit Access: Select this option if you want members of this class of service to inherit their SMTP Incoming access from a class of service assigned at a higher level. For example, a post office would inherit the domain’s access. If the domain was not a member of a class of service, the post office would inherit the default class of service. Allow Incoming Messages: Select this option to allow members of the class of service to receive e-mail messages through the Internet Agent. You can use the Exceptions option to prevent messages from specific Internet sites. Prevent Incoming Messages: Select this option to prevent e-mail messages coming from the Internet. You can use the Exceptions option to allow messages from specific Internet sites. Prevent Messages Larger Than: This option is available only if you chose Allow Incoming Messages or Prevent Incoming Messages. In the case of Prevent Incoming Messages, this option only applies to messages received from Internet sites listed in the Allow Message From list. If you want to set a size limit on incoming messages, select the limit. Exceptions: This option is available only if you chose Allow Incoming Messages or Prevent Incoming Messages. Prevent Messages From: If you’ve chosen to allow incoming messages but you want to prevent messages from specific Internet sites (IP addresses or DNS hostnames), add the sites to the Prevent Messages From list. Controlling User Access 707 Allow Messages From: Conversely, if you've chosen to prevent incoming messages but you want to allow messages from specific Internet sites (IP addresses or DNS hostnames), add the sites to the Allow Messages From list. If you want to allow messages where the username is blank, add Blank-Sender-User-ID to the Allow Message From list. 6 Click the SMTP Outgoing tab, then choose from the following options: Inherit Access: Select this option if you want members of this class of service to inherit their SMTP Outgoing access from a class of service assigned at a higher level. For example, a post office would inherit the domain’s access. If the domain was not a member of a class of service, the post office would inherit the default class of service. Allow Outgoing Messages: Select this option to allow members of the class of service to send e-mail messages over the Internet. You can use the Exceptions option to prevent messages from being sent to specific Internet sites. Prevent Outgoing Messages: Select this option to prevent members of the class of service from sending e-mail messages over the Internet. You can use the Exceptions option to allow messages to be sent to specific Internet sites. Prevent Messages Larger Than: This option is available only if you chose Allow Outgoing Messages or Prevent Outgoing Messages. If you want to set a size limit on outgoing messages, specify the limit. If a user tries to send an Internet message that exceeds the specified size, the sender receives an e-mail message indicating that the message is undeliverable and including the following explanation: Message exceeds maximum allowed size Allow Rule-Generated Messages: This option is available only if you chose Allow Outgoing Messages or Prevent Outgoing Messages. Turn on this option to allow the Internet Agent to send messages that were generated by a Group Wise rule. Exceptions: This option is available only if you chose Allow Outgoing Messages or Prevent Outgoing Messages. If you’ve chosen to allow outgoing messages but you want to prevent messages from being sent to specific Internet sites (IP addresses or DNS hostnames), add the sites to the Prevent Messages To list. Conversely, if you’ve chosen to prevent outgoing messages but you want to allow messages to be sent to specific Internet sites (IP addresses or DNS hostnames), add the sites to the Allow Messages To list. 7 Click the IMAP4 tab, then choose from the following options: Inherit Access: Select this option if you want members of this class of service to inherit their IMAP4 access from a class of service assigned at a higher level. For example, a post office would inherit the domain’s access. If the domain was not a member of a class of service, the post office would inherit the default class of service. Allow Access: Select this option to allow members of the class to send and receive messages with an IMAP4 client. Prevent Access: Select this option to prevent members of the class from sending and receiving messages with an IMAP4 client. 8 Click the POP3 tab, then choose from the following options: 708 GroupWise 6.5 Administration Guide Inherit Access: Select this option if you want members of this class of service to inherit their POP3 access from a class of service assigned at a higher level. For example, a post office would inherit the domain’s access. If the domain was not a member of a class of service, the post office would inherit the default class of service. Allow Access: Select this option to allow members of the class to download their Group Wise messages to a POP3 client. Prevent Access: Select this option to prevent downloading Group Wise messages to a POP3 client. Delete Messages from Group Wise Mailbox after Download: This option applies only if you’ve selected Allow Access. If you turn on this option, messages downloaded from a GroupWise Mailbox to a POP3 client will be moved to the Trash folder in the GroupWise Mailbox. POP3 client users can enable this option by using the user/D:d login option when initiating their POP session. For more information, see “User ID Login Options” on page 687. Purge Messages from GroupWise Mailbox after Download: This option applies only if you’ve selected Allow Access. If you turn on this option, messages downloaded from a GroupWise Mailbox will be moved to the Mailbox’s Trash folder and then emptied, completely removing the messages from the Mailbox. POP3 client users can enable this option by using the user/D:p login option when initiating their POP session. For more information, see “User ID Login Options” on page 687. Convert Messages to MIME Format When Downloading: This option applies only if you’ve selected Allow Access. If you turn on this option, messages downloaded to a POP3 client will be converted to the MIME format. POP3 client users can enable this option by using the userID:m login option when initiating their POP session. The can disable it by using the userID:n login option; this converts messages to RFC-822 format. For more information, see “User ID Login Options” on page 687. High Performance on File Size Calculations: This option applies only if you’ve selected Allow Access. POP3 clients calculate the size of each message file before downloading it. Turn on this option if you want to assign a size of 1KB to each message file. This eliminates the time associated with calculating a file’s actual size. POP3 client users can enable this option by using the user/D:s login option when initiating their POP session. For more information, see “User ID Login Options” on page 687. Number of Days Prior to Today to Get Messages From: This option applies only if you’ve selected Allow Access. Select the number of days to go back to look for GroupWise Mailbox messages to download to the POP3 client. The default is 30 days. POP3 client users can override this option by using the user[D:t=x login option when initiating their POP session. For more information, see “User ID Login Options” on page 687. Maximum Number of Messages to Download: This option applies only if you’ve selected Allow Access. Controlling User Access 709 Select the maximum number of messages a user can download at one time from a Group Wise Mailbox to a POP3 client. The default is 100 messages. POP3 client users can override this option by using the user/D:l=x login option when initiating their POP session. For more information, see “User ID Login Options” on page 687. 9 Click OK to display the Select GroupWise Object dialog box. x Filter: Ok E | | | | Object ID Domain | PostOffice | FirstName | Last Name Cancel User1 Provo Research GroupWise User1 E | User 2 San Jose Support User 2 ale User3 Provo Sales User 3 Hel User4 Provo Sales GroupWise fall? User5 Provo Research User 5 User 6 San Jose Support User 6 User? Provo Research User 7 User 9 Provo Research User 9 C Domains € Post Offices © Distribution Lists @ Users 10 Click Domains, Post Offices, Distribution Lists, or Users to display the list you want. 11 In the list, select the domain, post office, distribution list, or user you want, then click Add to add the object as a member in the class. You can Control+click or Shift+click to select multiple users. IAAT = x SMTPMIME + | LDAP | popsamap4 | Server Directories | Access Control + | Resttach | Post Office Links | Group! [4] >] | Settings Class of Service: | Default Class of Service Create. | Edit... | Delete | Memberships: Research Provo Remo | Support San Jose — Page Options... | OF Cancel | Apply | Help 12 To add additional domains, post offices, distribution lists or users as members of the class of service, select the class of server, then click Add to display the Select GroupWise Object dialog box. 13 Click OK (on the Settings page) when finished adding members. 710 GroupWise 6.5 Administration Guide Testing Access Control Settings If you’ve created multiple classes of service, you might not know exactly which settings are being applied to a specific object (domain, post office, distribution list, or user) and which class of service the setting is coming from. To discover an object’s settings, you can test the object’s access. 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click Access Control > Settings to display the Access Control Settings page. Properties of GWIA xj SMTPMME + | LDAP | POP3AMAP4 | Server Directories | Access Control + | Reattach | Post Office Links | Groupi | Settings Class of Service: Default Class of Service Create. | Edit... art | Delete | IMarketing | Memberships: Member ID Post Office | Domain Research Provo Support San Jose Page Options... | OF Cancel Apply | Help 3 Click Test to display the Select GroupWise Object dialog box. x Filter: õi | | | - Object ID Domain | Post Office | First Name | Last Name Cancel User1 Provo Research GroupWise User1 Info User 2 San Jose Support User 2 Alte User3 Provo Sales User3 Hel User 4 Provo Sales GroupWise EF User 5 Provo Research User 5 User6 San Jose Support User 6 User? Provo Research User? User9 Provo Research User 9 C Domains C Post Offices C Distribution Lists @ Users You use this dialog box to select the object (domain, post office, distribution list, or user) whose access you want to test. 4 Click Domains, Post Offices, Distribution Lists, or Users to display the list you want. For example, if you want to see what access an individual user has, click Users. 5 In the list, select the object you want to view, then click View Access. The tabbed pages show the access control settings for SMTP Incoming, SMTP Outgoing, IMAP4, and POP3 as they are applied to that user, distribution list, post office, or domain. Controlling User Access 711 SMTP Outgoing | imap4 | POP3| aa Setting Cancel Allow incoming SMTP messages by default Incoming SMTP messages can be any size ; Setting Source Class of Service: --- Domain: Post Office: Member ID: 6 To view the source for a specific setting, select the setting in the Setting box The Setting Source fields display the class of service being applied to the object. It also displays the Member ID through which the class is being applied. x SMTP Incoming | SMTP Outgoing | mapa] POP3| x | Setting Cancel AN incoming SMTP messages by default Help Incoming SMTP messages can be any size ¡Setting Source Class of Service: Marketing Domain: Provo Post Office: Research Member ID: User1 7 When finished, click OK. Maintaining the Access Control Database The Access Control database stores the information for the various classes of service you have created. If any problems occur with a class of service, you can validate the database to check for errors with the records and indexes contained in the database. If errors are found, you can recover the database. The Access database, gwac.db, is located in the domain\wpgate\gwia directory. + “Validating the Database” on page 713 + “Recovering the Database” on page 713 712 GroupWise 6.5 Administration Guide Validating the Database 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click Access Control > Database Management to display the Database Management page. Properties of GWIA 3 xj SMTPMME + | LDAP | POP3AMAP4 | Server Directories || Reattach | Post Office Links | Grou ¡Validate Database Validate checks for physical consistency. If problems are found, you should perform a Recover. Validate Now... Recover Database Recover can be performed even when the database is in use. Any database inconsistencies will be corrected, but may resultin loss ofinformation. Recover Now... Page Options... | OK Cancel Apply | Help 3 Click Validate Now. 4 After the database has been validated, click OK. 5 Iferrors were found, see Recovering the Database below. Recovering the Database If you encountered errors when validating the database, you must recover the database. During the recovery process a new database is created and all intact records are copied to the new database. Some records might not be intact, so you should check the classes of services to see if any information was lost. 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click Access Control > Database Management to display the Database Management page. Controlling User Access 713 Properties of GWIA 3 Click Recover Now. 4 Click OK. 5 Check your class of service list to make sure that it is complete. 714 GroupWise 6.5 Administration Guide Setting Up Accounting The Internet Agent can supply accounting information for all messages, including information such as the message’s source, priority, size, and destination. The accounting file is an ASCII-delimited text file that records the source, priority, message type, destination, and other information about each message sent through the gateway. The file, which is updated daily at midnight (and each time the Internet Agent restarts, is called acct and is located in the xxx.pre directory. If no accountant is specified for the gateway in ConsoleOne®, the file is deleted and re-created each day. Follow the steps below to set up accounting. + “Selecting an Accountant” on page 715 + “Enabling Accounting” on page 716 + “Understanding the Accounting File’s Fields” on page 717 Selecting an Accountant You can select one or more Group Wise” users to be accountants. Every day at midnight, each accountant receives an accounting file (acct) that contains information about the messages the gateway sent that day. 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click GroupWise > Gateway Administrators to display the Gateway Administrators page. Properties of GWIA E xl Access Control v | Reattach | Post Office Links GroupWise + | nos Rights v | Other | Rights to Files and | Gateway Administrators į Administrator Role Page Options... OK Cancel Apply Help 3 Click Add, browse for and select the user you want to add, then click OK to add the user to the list of administrators. Setting Up Accounting 715 4 Select the user in the list of administrators, then click Accountant. Properties of GWIA | x| Access Control + | Reattach | Post Office Links | Groupwise + | NDS Rights + | Other | Rights to Files anc | Gateway Administrators User 1.Research.Provo bateo | ; Administrator Role TC Operator M Accountant TC Postmaster T Foreign Operator Page Options... | OK | Cancel | Apply | Help | 5 Click OK to save the changes. Enabling Accounting 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click GroupWise > Optional Gateway Settings to display the Optional Gateway Settings page. Properties of GWIA E xl Access Control + | Reattach | Post Office Links | Groupwise + | NDS Rights + | Other | Rights to Files a | Optional Gateway Settings Directory Sync/Exchange: None y] Accounting: es + Convert Status to Messages: No Outbound Status Level: jundevered >| Enable Recovery: Yes + Retry Count: [| mäa Retry Interval: [s£ seconds Failed Recovery Wait: [3800 seconds Network Reattach Command: FO Correlation Enabled: Yes v Correlation Age: [ 14 Y days HTTP Settings HTTP User Name: HTTP Password: SetPassword | Page Options... | oK | Cancel | Apply | Help | 3 Set Accounting to Yes. 4 Set Correlation Enabled to Yes. 5 Click OK. 716 GroupWise 6.5 Administration Guide Understanding the Accounting File’s Fields The following is an Accounting file entry for a single event. Each field in the entry is described below. 0,11/25/2002,21:58:39,3DE29CD2.14E:7:6953, Mail,2,Provo,Research, jsmith,48909,Meeting Agenda, Provo,GWIA,sde23a9f.001,MIME,hjones@novell.com,1,2,11388,0 Field Inbound/Outbound Date Time GroupWise message ID GroupWise message type GroupWise message priority GroupWise user’s domain GroupWise user’s post office GroupWise user’s ID GroupWise user’s account ID Message subject Gateway domain Gateway name Foreign message ID Foreign message type Example O 11/25/2004 21:58:39 3DE29CD2.14E:7:6953 Mail Provo Research jsmith 48909 Meeting Agenda Provo GWIA sde23a9f.001 MIME Description Displays | for inbound messages and O for outbound messages The date the message was processed. The time the message was processed. The unique GroupWise ID assigned to the message. Mail message, appointment, task, note, or phone message for outbound messages. Unknown for inbound messages. High priority = 1 Normal priority = 2 Low priority = 3 The domain in which the GroupWise user resides. The post office where the GroupWise user's mailbox resides. The GroupWise user's ID. For outbound messages, the GroupWise user is the message sender. For inbound messages, the GroupWise user is the message recipient. The GroupWise user's account ID. The account ID is assigned on the user's GroupWise Account page (ConsoleOne > User object > GroupWise tab > Account page). The message's Subject line. Only the first 32 characters are displayed. The domain where the Internet Agent resides. The Internet Agent's name. A unigue ID for outbound messages. The identifier before the period (sde23a9f) uniguely identifies a message. The identifier after the period (001) is incremented by one for each message sent. The message type (MIME, etc.) Setting Up Accounting 717 Field Foreign user's address Recipient count Attachment count Message size Other 718 GroupWise 6.5 Administration Guide Example hjones@novell.com 11388 Description The foreign user’s e-mail address. For inbound messages, the foreign user is the message sender. For outbound messages, the foreign user is the message recipient. The number of recipients. The number of attached files. The total count includes the message. The total size, in bytes, of the message and its attachments. Not used. Blocking Unwanted E-Mail The GroupWise” Internet Agent includes the following features to help you protect your GroupWise system and users from unwanted e-mail: + + + “Real-Time Blacklists” on page 719 “Access Control Lists” on page 721 “Blocked.txt File” on page 721 “Mailbomb (Spam) Protection” on page 722 “SMTP Host Authentication” on page 723 “Unidentified Host Rejection” on page 723 Real-Time Blacklists Many organizations, such as Mail Abuse Prevention System (MAPS*), Open Relay DataBase (ORDB), and SpamCop*, provide lists of IP addresses that are known to be open relay hosts or spam hosts. If you want to use free blacklist services such as these, or if you subscribe to fee-based services, you can define the blacklist addresses for these services. The Internet Agent will then use the defined services to ensure that no messages are received from blacklisted hosts. The following sections provide information to help you define blacklist addresses and, if necessary, override a host address included in a blacklist. + + “Defining a Blacklist Address” on page 719 “Overriding a Blacklist” on page 721 Defining a Blacklist Address 1 In ConsoleOne*, right-click the Internet Agent object, then click Properties. 2 Click Access Control > Blacklists to display the Blacklists page. Blocking Unwanted E-Mail 719 Properties of GWIA E xÍ SMTPMME + | LDAP | porsamapa | Server Directories | Reattach | Post Office Links | Group Blacklist Addresses Page Options... [ox] Cancel Ap | Help The Blacklist Addresses list displays the addresses of all blacklists that the Internet Agent will check when it receives a message from another SMTP host. The Internet Agent checks the first blacklist and continues checking lists until the sending SMTP host’s IP address is found or all lists have been checked. If the sending SMTP host’s IP address is included on any of the blacklists, the message is rejected. If you have the Internet Agent’s logging level set to Verbose, the log file includes information about the rejected message and the referring blacklist. This list corresponds with the Internet Agent’s /rbl switch. 3 Click Add to display the New Blacklist Address dialog box. New Blacklist Address E xj Address: | | Cancel | Help | The following list provides the names, Web sites, and blacklist addresses for several services that were free at the time of this release: Service Site Address Mail Abuse Prevention www.mail-abuse.org blackholes.mail-abuse.org System (MAPS) Open Relay DataBase www.ordb.org relays.ordb.org (ORDB) SpamCop www.spamcop.net bl.spamcop.net 4 Type the blacklist address in the Address box, then click OK to add the address Blacklist Addresses list. 5 If you have multiple blacklists in the Blacklist Addresses list, use the up-arrow and down- arrow to position the blacklists in the order you want them checked. The Internet Agent checks the blacklists in the order they are listed, from top to bottom. 6 Click OK to save your changes. 720 GroupWise 6.5 Administration Guide Overriding a Blacklist In some cases, a blacklist might contain a host from which you still want to receive messages. For example, goodhost.com has been accidentally added to a blacklist but you still want to receive messages from that host. You can use the SMTP Incoming Exceptions list on a class of service to override a blacklist. For information about editing or creating a class of service, see “Creating a Class of Service” on page 706. Access Control Lists If you want to block specific hosts yourself rather than use a blacklist (in other words, create your own blacklist), you can configure a class of service that prevents messages from those hosts. You do this on the Internet Agent object’s Access Control Settings page by editing the desired class of service to add the hosts to the Prevent Messages From exception list on the SMTP Incoming tab. For example, if you wanted to block all messages from badhost.com, you could edit the default class of service to add badhost.com to the list of prevented hosts. For information about editing or creating a class of service, see “Creating a Class of Service” on page 706. Blocked.txt File ConsoleOne creates a blocked.txt file that includes all the hosts that have been added to the Prevent Messages From exceptions list for the default class of service (see Chapter 49, “Controlling User Access,” on page 705). You can manually edit the blocked.txt file to add or remove hosts. To maintain consistency for your system, you can also copy the list to other Internet Agent installations. To manually edit the blocked.txt file: 1 Open the blocked.txt file in a text editor. 2 Addthe host addresses. The entry format is: address1 address2 address3 where address is either a hostname or an IP address. You can block on any octet. For example: IP Address Blocks “104 Any IP address ending with 34 172.16.*.34 Any IP address starting with 172.16 and ending with 34 172.16.10-34.* Any IP address starting with 172.16 and any octet from 10 to 34 You can block on any segment of the hostname. For example: Blocking Unwanted E-Mail 721 Hostname Blocks provo*.novell.com provo.novell.com provo1.novell.com provo2.novell.com *.novell.com gw.novell.com (but not novell.com itself) There is no limit to the number of IP addresses and hostnames that you can block in the blocked.txt file 3 Save the file as blocked.txt. Mailbomb (Spam) Protection You can protect your system against mailbombs (spam). With mailbomb protection enabled, if the Internet Agent receives a certain number of messages (the default is 30) from the same host or IP address within a specific time interval (the default is 10 seconds), it discards the messages. To enable mailbomb protection or configure the mailbomb settings: 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > Security Settings to display the Security Settings page. Properties of GWIA 7 xi LDAP | POP3AMAP4 | Server Directories | Access Control v | Reattach | Post Office Links | Groug Je] D Reject mail if sender's identity cannot be verified O Enable mailbomb protection Mailbomb Threshold FP messages received within | 1 = seconds Mailbomb candidates that exceed this threshold will be discarded. Page Options... | ok L Ay | Hein | 3 Turn on the Enable Mailbox Protection option. 4 In the Mailbomb Threshold fields, select the message number and time interval to be used. Any group of messages that exceeds the specified threshold settings will be entirely discarded. If you want to prevent future mailbombs from the mailbomb sender, identify the sender’s IP address (by looking at the Internet Agent’s console), then modify the appropriate class of service to prevent mail being received from that IP address. For more information, see “Creating a Class of Service” on page 706. 722 GroupWise 6.5 Administration Guide The time setting corresponds to the Internet Agent’s /mbtime switch. The message count setting corresponds to the /mbcount switch. 5 Click OK to save your changes. SMTP Host Authentication The Internet Agent supports SMTP host authentication for both outbound and inbound message traffic. + “Outbound Authentication” on page 723 + “Inbound Authentication” on page 723 Outbound Authentication For outbound authentication to other SMTP hosts, the Internet Agent reguires that the remote SMTP hosts support the AUTH LOGIN authentication method. To setup outbound authentication: 1 Include the remote SMTP host’s domain name an authentication credentials in the gwauth.cfg file, located in the domain\wpgate\gwia directory. The format is: domain name authuser authpassword For example: smtp.novell.com remotehost novell 2 If you have multiple SMTP hosts that require authentication before they will accept messages from your system, create an entry for each host. Make sure to include a hard return after the last entry. 3 If you want to allow the Internet Agent to send messages only to SMTP hosts listed in the gwauth.cfg file, use the following startup switch: /forceoutboundauth With the /forceoutboundauth switch enabled, if a message is sent to an SMTP host not listed in the gwauth.cfg file, the sender will receive an Undeliverable message. Inbound Authentication For inbound authentication from other SMTP hosts, you can use the /forceinboundauth startup switch to ensure that the Internet Agent accepts messages only from SMTP hosts that use the AUTH LOGIN authentication method to provide a valid GroupWise user ID and password. The remote SMTP hosts can use any valid GroupWise user ID and password. However, for security reasons, we recommend that you create a dedicated GroupWise user account for remote SMTP host authentication. Unidentified Host Rejection You can have the Internet Agent reject messages from unidentified sources. The Internet Agent will refuse messages from a host if a DNS reverse lookup shows that a “PTR” record does not exist for the IP address of the sender’s host. If you choose not to have the Internet Agent reject messages from unidentified hosts, it will accept messages from any host, but it will display a warning if the sender’s host is not authentic. Blocking Unwanted E-Mail 723 To configure the Internet Agent to reject messages from unidentified hosts: 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > Security Settings to display the Security Settings page. Properties of GWIA j i | Settings i xl LDAP | POP3AMAP4 | Server Directories | Access Control + | Reattach | Post Office Links | Group, © Reject mail if sender's identity cannot be verified E Enable mailbomb protection ; Mailbomb Threshold [a Y messages received within fo 3 seconds Mailbomb candidates that exceed this threshold will be discarded. Page Options... | oK Apply | Help 3 Turn on the Reject Mail if Sender’s Identity Cannot Be Verified option This setting corresponds with the Internet Agent’s /rejbs switch. 4 Click OK to save your changes. 724 GroupWise 6.5 Administration Guide Optimizing Speed and Reliability The following sections provide information about some of'the methods you can use to optimize the speed and reliability of the Group Wise” Internet Agent: + “Relocating the Internet Agent’s Processing Directories” on page 725 + “Increasing Internet Agent Speed” on page 726 + “Automating Reattachment to NetWare Servers” on page 728 Relocating the Internet Agent's Processing Directories The Internet Agent uses several directories to process message files. By default, when you install the Internet Agent to a NetWare® server, these directories are created under the Internet Agent’s gateway directory (domain\wpgate\gwia). To increase performance, you can relocate these directories to the same server as the NetWare Internet Agent. To define the location of the Internet Agent’s directories: 1 In ConsoleOne®, right-click the Internet Agent object, then click Properties. 2 Click Server Directories > Settings to display the Server Directories Settings page. Properties of GWIA — xl SMTPMIME v | LDAP | POPSAMAP4 | Server Directories | Access Control + | Reattach | Post Office Links | Group, | Settings These directories should be local to the Internet Agent server. Conversion Directory: [ncwisystprovolwpgatelgwiai000. PRCIGWWORK | SMTP Queues Directory: NO WisysiprovoWWPGATEIGWIA al Advanced... Page Options... oK Cancel Apply Help 3 Fill in the fields: Conversion Directory: Select the directory where the Internet Agent will store temporary files for message conversion. The default directory is the 000.prcigwwork directory, located Optimizing Speed and Reliability 725 under the domain\wpgate\gwia directory when using the NetWare or Linux Internet Agent, or the c:\grpwise\gwia directory when using the Windows Internet Agent. If you type a path to a Windows drive (rather than using the Browse button to select the directory), you must use UNC path syntax. This setting corresponds with the Internet Agent’s /work switch. SMTP Queues Directory: Select the directory where the Internet Agent will store messages being routed to and from the Internet. The default directory when using the NetWare or Linux Internet Agent is domain\wpgate\gwia. The default directory when using the Windows Internet Agent is the Internet Agent directory on the Windows server (by default, c:\grpwise\gwia). Four subdirectories are created under the SMTP queues directory: defer, send, receive, and result. This setting corresponds with the Internet Agent’s /dhome switch. 4 Click the Advanced button. Advanced Server Directories xj SMTP Service Queues Directory: x| (5 Cancel This directory has two purposes: Help 1. Troubleshooting message processing problems 2. Inserting third-party software into the message processing For more information, click Help. 5 Fill in the field: SMTP Service Queues Directory: If you want, specify a secondary SMTP queues directory for outbound messages. This secondary directory can be helpful for troubleshooting by providing a way to trap messages before they are routed to the Internet. You can also use the secondary directory to run third-party utilities such as a virus scanner on Internet-bound messages. The Internet Agent will place all outbound messages in this secondary directory. The messages must then be moved manually (or by another application) to the primary SMTP queues’ send directory (see Step 3) before the Internet Agent will route them to the Internet. This setting corresponds with the /smtphome switch. If you type a directory path rather than using the Browse button to select a directory, make sure you use UNC path syntax. 6 Click OK to close the dialog box. 7 Click OK to save the changes to the directory locations. Increasing Internet Agent Speed 726 You can implement the following procedures to help enhance the Internet Agent’s processing speed: + “Sending and Receiving Threads” on page 727 + “Changing the Maximum Packet Received Buffers” on page 727 + “Increasing Polling Time” on page 727 + “Decreasing the Timeout Cycles” on page 728 GroupWise 6.5 Administration Guide Sending and Receiving Threads The Internet Agent uses sending and receiving threads to process incoming and outgoing messages. The more threads you make available, the more messages the Internet Agent can process concurrently. However, threads place a demand on the station’s resources. Too many threads can monopolize memory and CPU utilization. Make sure you balance your processing speed reguirements with the other applications running on the same server as the Internet Agent. For information about adjusting the SMTP sending and receiving threads, see “Configuring Basic SMTP/MIME Settings” on page 661. Changing the Maximum Packet Received Buffers This option is available only for the NetWare version. If you leave the send and receive threads at their default settings, you probably will not need to change the Maximum Packet Received Buffers parameter. However, if you significantly increase the number of send and receive threads, you should increase the default Maximum Packet Received Buffers parameter to better accommodate the SMTP processes. You must change this parameter at the server. Increasing Polling Time Incoming and outgoing messages are stored in priority gueues. The Internet Agent polls these gueues and then forwards the messages for distribution. The Time option lets you control how often the Internet Agent polls these gueuing directories. Make sure you balance polling time reguirements with the other applications running on the same server as the Internet Agent. 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click Group Wise > Gateway Time Settings to display the Gateway Time Settings page. Send/Rereive Cycle: | 120 Sf seconds Minimum Run: [ g seconds Idle Sleep Duration: [ 03] seconds Snap Shot Interval: | 6003 seconds Page Options... OK Cancel Apply Help 3 Modify the following settings: Idle Sleep Duration: Select the time, in seconds, you want the Internet Agent to idle after it has processed its queues. A low setting, such as 5 seconds, speeds up processing but requires Optimizing Speed and Reliability 727 more resources. A higher setting slows down the Internet Agent but reguires fewer resources by reducing the number of network polling scans. Snap Shot Interval: The Snap Shot Interval is a sliding interval you can use to monitor Internet Agent activity. For example, if the Snap Shot Interval remains at the default (10 minutes), the Snap Shot columns in the console display only the previous 10 minutes of activity. 4 Click OK to save the changes. Decreasing the Timeout Cycles The Internet Agent has a series of switches that control its timeout settings. By decreasing the default time of the timeout cycles you may be able to slightly increase the Internet Agent speed. However, the timeout cycles do not place an extremely significant burden on the overall performance of the Internet Agent so the effect may be minimal. You should consider this option only after you have tried everything else. For information about configuring the timout settings in ConsoleOne, see “Configuring the SMTP Timeout Settings” on page 669. For information about configuring the settings using startup switches, see “Timeouts” on page 786. Automating Reattachment to NetWare Servers You can specify the reattach information for the Windows Internet Agent in ConsoleOne. Whenever the Windows Internet Agent loses its connection to a post office that is on a NetWare server, it will read the reattach information from the domain database and attempt to reattach to the NetWare server. The NetWare Internet Agent does not use this information. To reattach to NetWare servers where users’ post offices reside, the NetWare Internet Agent uses the user ID and password specified during installation. This user ID and password are entered in the gwia.cfg file. For more information, see “Required Switches” on page 771. To specify the reattachment information for the Windows Internet Agent: 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click Reattach > Settings to display the Reattach Settings page. 728 GroupWise 6.5 Administration Guide Properties of GWIA k x| SMTPIMIME + | LDAP | popaamap4 | Server Directories | Access Control + | Reattach || Post Office Links | Group! GT] Tree: [00 context fo User ID: HELA Password: USU OU Eu Each connection to a post office must be established using the above NetWare login information. Page Options... | OK Cancel Apply | Help 3 Define the following properties: Tree: Enter the Novell eDirectory™ tree that the Internet Agent logs in to. If the Internet Agent does not use an eDirectory user account, leave this field blank. Context: Enter the eDirectory context of the Internet Agent’s user account. If the Internet Agent does not use an eDirectory user account, leave this field blank. User ID: Enter the name of the user account. Password: Enter the password for the user account. 4 Click OK. Optimizing Speed and Reliability 729 730 GroupWise 6.5 Administration Guide Monitoring Internet Agent Operations You can monitor the operation of the Group Wise? Internet Agent by using several different diagnostic tools. Each provides important and helpful information about the status of the Internet Agent and how it is currently functioning. Choose from the titles listed below to learn more about how to monitor the operations of the Internet Agent. + “Monitoring the Internet Agent through the Server Console” on page 731 + “Monitoring the Internet Agent through the Web Console” on page 742 + “Monitoring the Internet Agent through NetWare 6.5 Remote Manager” on page 744 + “Monitoring the Internet Agent through an SNMP Management Console” on page 745 + “Assigning Operators to Receive Warning and Error Messages” on page 745 + “Using Internet Agent Log Files” on page 746 + “Shutting Down the Internet Agent” on page 751 Monitoring the Internet Agent through the Server Console The Internet Agent console is displayed on the NetWare® server, the Windows server, or Linux where the Internet Agent is running. If the Internet Agent is running as a Windows service under the Local System User, it is displayed on the desktop only ifthe Allow Service to Interact with Desktop option was selected during installation or has been configured on the Internet Agent service’s General property page. The Internet Agent console on a Windows server is shown below. The console on a NetWare or Linux server displays the same information. bà GroupWise Internet Agent -ioi x] File Configuration Log Statistics Help Provo.GWIA Up Time: 0 Days OHrs 0 Mins Services all of Provo site. Status r Message Statistics Processing os Out 10 Minutes In 10 Minutes 5 Normal 0 0 0 0 Groupwise Open care 0 0 0 0 Other Link Open Passthrough 0 0 0 0 Program Idle 40| | Convert Errors 0 0 0 0 Communication 0 0 0 0 LogLevel Normal Total Bytes 0.0 0.0 :25: SNMP On 11:25:100 Startup Switches= ¿Home AGWDOCASYS iprovoWPGATEAGWIA Z 11:25:100 DHome-c:\grpwise\gwia ¿SMTP ¿POP3 /IMAP4 /LDAP ¿MIME 11:25:100 ¿HTTP ¿MUDAS=2 /Mailview-Intemet /SD-8 /RD-16 /P-10 11:25:100 /TE-2/TG-5 /TC:-5 /TR-5 /TD-3 /TT-10 ¿PT-10 AT-10 AL 11:25:100 dapThrd-10 /ST-4 ¿RT-4 ¿ARI-NEVER /AttachMsg /DSN ¿Ds 11:25:100 någe-4 ¿HTTP AVORK-c:\grpwise\gwia\000.pre\GwwORK ¿LO 1125100 G-c\grpwise\gwia /ntservicename-"GWIA" < 11:25:10 0 End Configuration Information is Monitoring Internet Agent Operations 731 Refer to the following sections for information about the specific sections and functionality included in the console: + “Description” on page 732 + “Status” on page 732 + “Statistics” on page 733 + “Logging” on page 739 + “Menu Functions” on page 740 Description The description section of the console, shown below, identifies the Internet Agent and displays how long its has been running. bà GroupWise Internet Agent BE! |x| File Configuration Log Statistics Help Provo.GWIA Up Time: 0 Days OHrs 0 Mins Services all of Provo site. palalus >> pp Message statistics Processing = Out 10 Minutes In 10 Minutes Group Wise Open de A i E A 5 Other Link Open Passthrough 0 0 D D Program Idle 10 Convert Errors 0 D D D Communication 0 D D D Log Level Normal Total Bytes 0.0 0.0 SNMP On Startup Switches= ¿Home AGWDOCASYSAprovoWWPGATEAGWIA 4 DHome-c:\grpwise\gwia ¿SMTP /POP3 /IMAP4 ¿LDAP ¿MIME ¿HTTP ¿MUDAS=2 /Mailview-Intemet /SD-8 /AD-16 ¿P-10 ¿TE-2 ¿TG -5 /TC-5 /TR-5 /TD-3 /TT-10 ¿PT-10 AT-10 ¿L dapThrd-10 /ST-4 /RT-4 ¿ARI-NEVER ¿AttachMsg ¿DSN ¿Ds náge-4 ¿HTTP /WORK-c:igrpwise*gwiat000. pre\GWwORK ¿LO :25:1 G-c:\grpwise\gwia /ntservicename-"GWIA" + 11:25:10 0 End Configuration Information y Domain.Gateway: Displays the domain and Internet Agent names. Up Time: Displays the total length of time the Internet Agent has been running. If the Internet Agent terminates unexpectedly (such as in a power outage), the Up Time display will not reset to 0. It will show the total time elapsed since the Internet Agent was last loaded after a proper termination. Description: Displays any descriptive information provided on the Internet Agent object’s Identification page (Internet Agent object > GroupWise tab > Identification page). Status The Status section of the console, shown below, provides a quick look at the Internet Agent’s current message processing activity, network connectivity, and information logging level. 732 GroupWise 6.5 Administration Guide Statistics Message Statistics +a Group Wise Internet Agent (Oj [x] File Configuration Log Statistics Help Provo.GWIA Up Time: 0 Days OHrs 0 Mins Services all of Provo site. Status r Message Statistics Processing = Out 10 Minutes In 10 Minutes > Normal 0 0 0 0 GroupWise Open Status 0 0 0 Other Link Open Passthrough 0 0 0 Progam Idle 10 Convert Errors 0 0 0 Communication 0 0 0 Log Level Normal Total Bytes 0.0 0.0 SNMP On 11:25:100 Startup Switches= /Home-\\GWDOC\SYS \provo\WPGATESGWIA 4 11:25:100 DHome-c:\grpwise\gwia ¿SMTP /POP3 /IMAP4 /LDAP ¿MIME 1125100 ¿HTTP ¿MUDAS=2 /Mailview-Intemet /SD-8 /AD-16 /P-10 11:25:100 — /TE-2 /TG-5 /TC-5 /TR-5 /TD-3 /TT-10 ¿PT-10 AT-10 ¿L 11:25:100 dapThrd-10 /ST-4 /RT-4 ¿ARI-NEVER ¿AttachMsg /DSN ¿Ds 11:25:100 någe-4 ¿HTTP /WORK:-c:\grpwisegwia\ 000. pre\GWfw/ORK ¿LO 1125100 G-c\grpwise\gwia /ntservicename-"GWIA" < 11:25:10 0 End Configuration Information Pa Processing: Displays a rotating bar if the Internet Agent is running. If there is no bar, or if the bar is stationary for more than one minute, the Internet Agent is not running. GroupWise: Displays whether the Internet Agent’s network connection is OPEN or CLOSED. This network connection is the Internet Agent’s only link to GroupWise. The status indicates whether or not the Internet Agent can write to the wpcsin directory and access the wpcsout directory. The Internet Agent does a scan each cycle to see if these directories exist. If the status is CLOSED, the Internet Agent will attempt to reattach to the network. Itis normal for this field to display the word CLOSED for a minute or so after you start the Internet Agent. However, if the connection remains CLOSED, look for the wpcsin and wpcsout directories. If they are not created yet, start the Message Transfer Agent. Other Link: This field does not apply to the Internet Agent. It will always say OPEN. Program: Displays the processing cycle. You can use the Gateway Time Settings page (Internet Agent object > GroupWise tab > Gateway Time Settings page) to adjust the processing cycle. Log Level: Displays the logging level the Internet Agent is currently using. The logging level determines how much data is displayed on the message portion of this screen and written to the log file. You can use the console menu options to override the default setting for the current session. For information, see “Logging” on page 739 The Statistics section of the console can display five different sets of information: + “Message Statistics” on page 733 + “SMTP Service Statistics” on page 734 + “POP Service Statistics” on page 736 + “IMAP Service Statistics” on page 737 + “LDAP Service Statistics” on page 739 The Message Statistics section of the console, shown below, is the default statistics section displayed by the Internet Agent console. Monitoring Internet Agent Operations 733 bè GroupWise Internet Agent Al EI File Configuration Log Statistics Help Provo.GWIA Up Time: 0 Days OHrs 0 Mins Services all of Provo site. r Status Message Statistics Processing ES Dut 10 Minutes In 10 Minutes GroupWise Open A ts x : E Other Link Open Passthrough 0 0 0 D Program Idle 10 Convert Errors 0 0 0 0 Communication 0 0 D D LogLevel Normal Total Bytes 0.0 0.0 SNMP On 11:25:100 Startup Switches= /Home-\\G'WDOC\SYS \provo\WPGATESGWIA / 11:25:100 DHome-c:\grpwise\gwia ¿SMTP /POP3 /IMAP4 /LDAP ¿MIME 11:25:100 ¿HTTP ¿MUDAS=2 ¿MailView-Intemet /SD-8 /RD-16 /P-10 1125100 /TE-2/TG-5 /TC:5 /TR-5 /TD-3 /TT-10 ¿PT-10 AT-10/L 1125100 dapThrd-10 /ST-4 ¿RT-4 /ARI-NEVER ¿AttachMsg /DSN ¿Ds 11:25:100 nâge-4 ¿HTTP AVORK-c:\orpwise\gwia\000.pre\G'w WORK ¿LO el y 11:25:100 G-c\grpwise\gwia /ntservicename-"GWIA" 11:25:10 0 End Configuration Information The Message Statistics shows the number of inbound and outbound messages processed by the Internet Agent. The Out and In columns display the cumulative message totals while the 10 Minutes columns display snap shot totals for the last ten minutes. You change the time interval of the 10 Minutes column in ConsoleOne. For instructions, see “Increasing Polling Time” on page 727. Normal: Displays the number of'inbound and outbound messages processed by the Internet Agent. Status: Displays the number of inbound and outbound status messages processed by the Internet Agent. The amount of status message traffic depends on the Outbound Status level (ConsoleOne > Internet Agent object > GroupWise tab > Optional Gateway Settings page). If the Outbound Status level is set to Full, more status messages are generated. If the Outbound Status level is set to Undelivered, fewer status messages are generated. Passthrough: Displays the number of inbound and outbound passthrough messages the Internet Agent has processed. Convert Errors: Outbound messages are converted from GroupWise® format to MIME or RFC- 822 format. Inbound messages are converted to Group Wise format. This field displays the number of inbound and outbound messages that the Internet Agent could not convert. Communication: Displays the number of communication errors encountered by the Internet Agent. Total Bytes: Displays the total number of bytes of inbound and outbound messages processed by the Internet Agent. SMTP Service Statistics The SMTP Service Statistics section, shown below, includes only the information for messages processed by the Internet Agent’s SMTP daemon. In the NetWare Internet Agent’s console, press F10-Options, then F9-Stats to switch to the SMTP Service Statistics. In the Windows Internet Agent’s console, select the Statistics menu, then click SMTP Service. 734 GroupWise 6.5 Administration Guide +a Group Wise Internet Agent Al | x] File Configuration Log Statistics Help Provo.GWIA Up Time: 0 Days OHrs 0 Mins Services all of Provo site. r Status C SMTP Service Statistics Processing ` Messages Sent Messages Received GroupWise Open Send Threads :8 Receive Threads Other Link Open MX Lookup Errors Unknown Hosts TCP/IP Read Errors TCP/IP Write Errors Program Ide 25] Hosts Down Connections Denied Log Level Normal Message Size Denied Relaying Denied SNMP On 11:59:450 Startup Switches= /Home-\’“.GWDOC\SYS \provo\WPGATENGWIA / 11:59:450 DHome-c:\grpwise\gwia ¿SMTP /POP3 /IMAP4 /LDAP ¿MIME 11:59:450 /HTTP /MUDAS=2 /Mailview-Intemet /SD-8 /RD-16 /P-10 11:59:450 /TE-2 /TG-5 /TC-5 /TR-5 /TD-3 /TT-10 ¿PT-10 AT-10 ¿L 11:59:450 dapThrd-10 /ST-4 /RT-4 ¿ARI-NEVER ¿AttachMsg /DSN ¿Ds 11:59:450 någe-4 ¿HTTP AVORK-c:\grpwise\gwia\000.pre\Gw WORK ¿LO d y 11:59:450 G-c:\grpwise\gwia /ntservicename-"GWIA" 11:59:45 0 End Configuration Information Messages Sent: Displays the total number of SMTP messages sent by the Internet Agent during its current up time. Send Threads: The first number displays the number of threads currently being used to send SMTP messages. The second number displays the number ofthreads still available to the Internet Agent for sending SMTP messages. This will be the total number of assigned send threads (by default, 8) minus the currently used threads. You can change the total number of assigned SMTP send threads in ConsoleOne (Internet Agent object > SMTP/MIME tab > Settings page). For more information, see “Configuring Basic SMTP/MIME Settings” on page 661. Messages Received: Displays the total number of SMTP messages received by the Internet Agent during its current up time. Receive Threads: The first number is the number of threads currently being used to receive SMTP messages. The second number is the number of threads still available to the Internet Agent for receiving SMTP messages. This will be the total number of assigned receive threads (by default, 16) minus the currently used threads. You can change the total number of assigned SMTP receive threads in ConsoleOne (Internet Agent object > SMTP/MIME tab > Settings page). For more information, see “Configuring Basic SMTP/MIME Settings” on page 661. MX Lookup Errors: To resolve hostnames to IP addresses, the Internet Agent performs MX record lookups in DNS. This field displays the number of MX record lookups that failed. Unknown Hosts: Displays the number of SMTP hosts that the Internet Agent could not establish a connection with because the hostname could not be resolved to an IP address. TCP/IP Read Errors: Displays the number of TCP read errors encountered by the Internet Agent. A TCP read error occurs ifthe Internet Agent connects successfully to another SMTP host but is unable to process a TCP read command during the message transfer. TCP/IP Write Errors: Displays the number off TCP write errors encountered by the Internet Agent. A TCP write error occurs if the Internet Agent connects successfully to another SMTP host but is unable to process a TCP write command during the message transfer. Hosts Down: Displays the number of SMTP hosts that the Internet Agent could not establish a connection with in order to send or receive messages. The Internet Agent was able to resolve the hostname to an IP address, but the connection could not be established. Connections Denied: Displays the number of connections denied by the Internet Agent. A connection will be denied if the host is blocked through: Monitoring Internet Agent Operations 735 + A Class of Service (ConsoleOne > Internet Agent object > Access Control tab > Settings page). For more information, see Chapter 49, “Controlling User Access,” on page 705. + A blacklist (ConsoleOne > Internet Agent object > Access Control tab > Blacklists page). For more information, see Chapter 51, “Blocking Unwanted E-Mail,” on page 719. + The Reject Mail if Sender’s Identity Cannot Be Verified setting (ConsoleOne > Internet Agent object > SMTP/MIME tab > Security Settings page), if it is enabled and the sender’s identity can not be verified. For more information, see “Protecting Against Unidentified Hosts and Mailbombs (Spam)” on page 668. Message Size Denied: Displays the number of SMTP messages that the Internet Agent would not send or receive because they exceeded the maximum message size. You can change the maximum message size in ConsoleOne (Internet Agent object > Access Control tab > Settings page > edit class of service > SMTP Incoming tab or SMTP Outgoing tab). For more information, see Chapter 49, “Controlling User Access,” on page 705. Relaying Denied: Displays the number of relay messages denied by the Internet Agent. A relay message will be denied for the following reasons: ¢ The Internet Agent is not enabled as a relay host (ConsoleOne > Internet Agent object > Access Control tab > SMTP Relay Settings). For more information, see “Enabling SMTP Relaying” on page 674. + The relay message could not be authenticated. POP Service Statistics The POP Service Statistics section, shown below, provides information about the POP activity handled by the Internet Agent. In the NetWare Internet Agent’s console, press F10-Options, then F9-Stats to switch to the POP Service Statistics. In the Windows Internet Agent’s console, select the Statistics menu, then click POP Service. Bm x! bè GroupWise Internet Agent File Configuration Log Statistics Help Provo.GWIA, Services all of Provo site. Up Time: 0 Days OHrs 0 Mins r Status POP Service Statistics para Total Sessions Active Sessions Sessions Available Store Login Errors Unknown Users TCP/IP Read Errors GroupWise Open Other Link Open Program Ide 18 Log Level Normal Messages Sent Retrieve Errors Conversion Errors Authentication Errors Denied Access Count TCP/IP Write Errors SNMP On 11:59:450 Startup Switches= /Home-\\G'WDOC\SYS \provo\\WPGATESGWIA / DHome-c:*grpwise*gwia ¿SMTP /POP3 /IMAP4 /LDAP ¿MIME ¿HTTP ¿MUDAS=2 /Mailview-Intemet /SD-8 /AD-16 ¿P-10 ¿TE-2 /TG:-5 /TC-5 /TR-5 /TD-3 /TT-10 ¿PT-10 /AT-10 /L dapThrd-10 /ST-4 /RT-4 ¿ARI-NEVER ¿AttachMsg /DSN ¿Ds :59: G-c:\grpwise\gwia /ntservicename-"GWld" 11:59:45 0 End Configuration Information Total Sessions: Displays the total number of POP3 sessions processed by the Internet Agent during its current up time. Active Sessions: Displays the number of currently active POP3 sessions. 736 GroupWise 6.5 Administration Guide náge-4 ¿HTTP /WORK-c:tgrpwisetgwia+000. pretGWW'ORK ¿LO d X Sessions Available: Displays the number of'threads still available to the Internet Agent for POP3 sessions. This will be the total number of assigned POP3 threads (by default, 10) minus the active sessions. You can change the total number of assigned POP3 threads in ConsoleOne (Internet Agent object > POP3/IMAP4 tab > Settings page). For more information, see Chapter , “Configuring POP3/IMAP4 Services,” on page 684. Messages Sent: Displays the total number of GroupWise mailbox messages retrieved through POP3 sessions. Retrieve Errors: Displays the number of errors generated because the Internet Agent could not transfer messages to the POP3 client. Conversion Errors: Displays the number of errors generated because the Internet Agent could not convert retrieved GroupWise messages to MIME format. Store Login Errors: Displays the number of GroupWise user logins that failed because the users’ Group Wise mailboxes were unavailable (for example, the post office is down or the Internet Agent link to the post office is down). Authentication Errors: Displays the number of GroupWise user logins that failed because the user supplied an incorrect password. Unknown Users: Displays the number of user logins that failed because the user does not exist in the GroupWise system. Denied Access Count: Displays the number of POP3 sessions that were denied because the user does not have POP3 access. POP3 access is controlled through the user’s Class of Service assignment (ConsoleOne > Internet Agent object > Access Control tab > Settings page). For more information, see Chapter 49, “Controlling User Access,” on page 705. TCP/IP Read Errors: Displays the number of TCP read errors encountered by the Internet Agent. A TCP read error occurs if the Internet Agent successfully opens a POP3 session but is unable to process a TCP read command during the session. TCP/IP Write Errors: Displays the number of TCP write errors encountered by the Internet Agent. A TCP write error occurs if the Internet Agent successfully opens a POP3 session but is unable to process a TCP write command during the session. IMAP Service Statistics The IMAP Service Statistics section, shown below, provides information about the IMAP activity handled by the Internet Agent. In the NetWare Internet Agent’s console, press F10-Options, then F9-Stats to switch to the IMAP Service Statistics. In the Windows Internet Agent’s console, select the Statistics menu, then click IMAP Service. Monitoring Internet Agent Operations 737 bè Group Wise Internet Agent -ioj EI File Configuration Log Statistics Help Provo.GWIA Up Time: 0 Days OHrs 1 Mins Status —/"IMâP Service Statistics Frocessing Total Sessions Messages Sent Groupwise Open Active Sessions Retrieve Errors Other Link Open Sessions Available Conversion Errors Store Login Errors Authentication Errors Program Ide 28 ||| Unknown Users Denied Access Count Log Level Normal TCP/IP Read Errors TCP/IP Write Errors 10:38:57 0 SNMP On 10:38:57 0 Startup Switches= /Home-\’“.GWDOC\SYS iprovodWPGATEAGWlAwi 10:38:570 — nnt/DHome-c:grpwisetgwia ¿SMTP ¿POP3 /IMAP4 “LDAP + 10:38:57 0 MIME ¿HTTP /MUDAS=2 ¿MailView-Intemet /SD-8 /RD-16 / 10:38:57 0 P-10 /TE-2 /TG-5 /TC-5 /TR-5 /TD-3 /TT-10 /PT-10 AT- 10:38:57 0 10 /LdapThrd-10 /ST-4 /AT-4 ¿ARI-NEVER /AttachMsg ¿DS 10:38:570 N /Dsnäge-4 AWORK-c:\grpwise\gwia\000.PRO\GWWORK ¿LOG el y 10:38:57 0 — -c:\grpwise\gwia 10:38:57 0 End Configuration Information Total Sessions: Displays the total number of IMAP4 sessions processed by the Internet Agent during its current up time. Active Sessions: Displays the number of currently active IMAP4 sessions. Sessions Available: Displays the number of threads still available to the Internet Agent for MAP4 sessions. This will be the total number of assigned IMAP4 threads (by default, 10) minus the active sessions. You can change the total number of assigned IMAP4 threads in ConsoleOne (Internet Agent object > POP3/IMAP4 tab > Settings page). For more information, see Chapter , “Configuring POP3/IMAP4 Services,” on page 684. Messages Sent: Displays the total number of Group Wise mailbox messages retrieved through IMAP4 sessions. Retrieve Errors: Displays the number of errors generated because the Internet Agent could not transfer messages to the IMAP4 client. Conversion Errors: Displays the number of errors generated because the Internet Agent could not convert retrieved Group Wise messages to MIME format. Store Login Errors: Displays the number of GroupWise user logins that failed because the users’ Group Wise mailboxes were unavailable (for example, the post office is down or the Internet Agent link to the post office is down). Authentication Errors: Displays the number of GroupWise user logins that failed because the user supplied an incorrect password. Unknown Users: Displays the number of user logins that failed because the user does not exist in the GroupWise system. Denied Access Count: Displays the number of IMAP4 sessions that were denied because the user does not have IMAP4 access. IMAP4 access is controlled through the user’s Class of Service assignment (ConsoleOne > Internet Agent object > Access Control tab > Settings page). For more information, see Chapter 49, “Controlling User Access,” on page 705. TCP/IP Read Errors: Displays the number of TCP read errors encountered by the Internet Agent. A TCP read error occurs if the Internet Agent successfully opens a IMAP4 session but is unable to process a TCP read command during the session. TCP/IP Write Errors: Displays the number of TCP write errors encountered by the Internet Agent. A TCP write error occurs if the Internet Agent successfully opens an IMAP4 session but is unable to process a TCP write command during the session. 738 GroupWise 6.5 Administration Guide LDAP Service Statistics Logging The LDAP Service Statistics section, shown below, provides information about the LDAP activity handled by the Internet Agent. In the NetWare Internet Agent’s console, press F10-Options, then F9-Stats to switch to the LDAP Service Statistics. In the Windows Internet Agent’s console, select the Statistics menu, then click LDAP Service. bà Group Wise Internet Agent Al | XI File Configuration Log Statistics Help Provo.GWIA Up Time: 0 Days OHrs 6 Mins Services all of Provo site. m Status Ff LDAP Service Statistics Processing Public Sessions 0 Search Requests GroupWise Open Authenticated Sessions 0 Entries Returned Other Link Open Sessions Active 0 Sessions Available 10 Progam Idle 21 Log Level Normal :59: SNMP On 11:59:450 Startup Switches= ¿Home AGWDOCASYS iprovoWPGATEAGWIA 4 11:59450 DHome-c:\grpwise\gwia ¿SMTP ¿POP3 /IMAP4 /LDAP ¿MIME 11:59450 /HTTP /MUDAS=2 /Mailview-Intemet /SD-8 /RD-16 /P-10 11:59:450 = /TE-2/7G-5 /TC-5 /TR-5 /TD-3 /TT-10 ¿PT-10 AT-10/L 11:59:450 — dapThrd-10 /ST-4 /AT-4 /ARI-NEVER ¿AttachMsg /DSN ¿Ds 11:59:450 náge-4 ¿HTTP AVORK-c:\grpwise\gwia\000.pre\Gw WORK ¿LO a : y 11:59:450 G-c:\grpwise\gwia /ntservicename-"Gwlé 11:59:45 0 End Configuration Information Public Sessions: Displays the total number of LDAP sessions handled by the Internet Agent. Authenticated Sessions: This field is not used. Sessions Active: Displays the total number of LDAP sessions currently being processed by the Internet Agent. Sessions Available: Displays the number of threads still available to the Internet Agent for LDAP sessions. This will be the total number of assigned LDAP threads (by default, 10) minus the active sessions. You can change the total number of assigned LDAP threads in ConsoleOne (Internet Agent object > LDAP tab > Settings page). For more information, see Chapter , “Configuring LDAP Services,” on page 682. Search Requests: Displays the total number of LDAP queries against the GroupWise Address Book. Entries Returned: Displays the total number of Address Book entries returned for the search requests. For example, a single search request might return 25 entries. The Logging section of the console, shown below, displays Internet Agent activity. The number and detail of these messages depend on the logging level you select. See Chapter , “Using Internet Agent Log Files,” on page 746 for more information. Monitoring Internet Agent Operations 739 bè Group Wise Internet Agent A EI File Configuration Log Statistics Help Provo.GWIA Up Time: 0 Days OHrs 0 Mins Services all of Provo site. r Status - Message Statistics Processing E Dut 10 Minutes In 10 Minutes à Normal 0 0 0 0 GroupWise Open Status 0 0 0 0 Other Link Open Passthrough 0 0 0 D Program Ide 10 Convert Errors 0 0 0 0 Communication 0 0 D D LogLevel Normal Total Bytes 0.0 0.0 SNMP On Startup Switches= ¿Home AGWDOCASYS iprovodWPGATEAGWIA 4 DHome-c:*grpwise*gwia ¿SMTP /POP3 /IMAP4 /LDAP ¿MIME ¿HTTP ¿MUDAS=2 /Mailview-Intemet /SD-8 /AD-16 ¿P-10 ¿TE-2 /7G-5 /TC-5 /TA-5 /TD-3 /TT-10 /PT-10 /AT-10 /L dapThrd-10 /ST-4 /RT-4 ¿ARI-NEVER /AttachMsg /DSN ¿Ds náge-4 ¿HTTP /WORK-c:tgrpwisetgwia+000. pretGWW'ORK ¿LO 225: G-c:\grpwise\gwia /ntservicename-"GWIA" 11:25:10 0 End Configuration Information Menu Functions The following sections explain the menu options available in the Internet Agent console: + “NetWare Internet Agent Console” on page 740 + “Windows Internet Agent Console” on page 741 NetWare Internet Agent Console The menu functions on the NetWare Internet Agent console provide you with the following options. F6-Restart: Select this option to restart the Internet Agent. The Internet Agent will reread all of its configuration files (gwia.cfg, blocked.txt, gwauth.cfg, route.cfg, and so forth). F7-Exit: Select this option to terminate the Internet Agent and return to the system prompt. F8-Info: Select this option to display the Internet Agent configuration information in the Logging section of the console and in the log file. F9-Browse Log File: Select this option to browse the log file. The following browse options are displayed: + F1-Cancel Browse: Select this option to exit browse mode and to return to the console. + F2-Search Log: Select this option to search for a text string within the log file. + Up-arrow, Down-arrow: Press the Up-arrow and Down-arrow keys to scroll one line at a time. + PgUp, PgDn: Press the Page Up and Page Down keys to scroll one screen at a time. * H, H, Up-Arrow: Press Home, Home, and the Up-arrow to move to the top of the log file. + H, H, Down-Arrow: Press Home, Home, and the Down-arrow to move to the bottom of the log file. F-10 Options: Select this option to display the options menu. The following options are displayed: ¢ F1-Exit Options: Select this option to return to the main Internet Agent console screen. 740 = GroupWise 6.5 Administration Guide + F2-Log Level: Select this option to toggle between log levels. This option overrides the default log level set in the Log Settings page (Internet Agent object > Group Wise tab > Log Settings page) or the /loglevel switch in the startup file for the current session. + F6-Colors: Select this option to scroll through the several color options. This option is useful if the Internet Agent station has a monochrome monitor. You can also use this option to help you quickly identify an Internet Agent if more than one is running. + F8-Zero Stats: Select this option to reset the values in the Statistics section of the screen. + F9-Stats: Select this option to scroll through the SMTP service statistics, POP service statistics, IMAP service statistics, and LDAP service statistics. Windows Internet Agent Console The menu functions on the Windows Internet Agent console provide you with the following options. File > Restart (F6): Select this option to restart the Internet Agent. The Internet Agent will reread all of its configuration files (gwia.cfg, blocked.txt, gwauth.cfg, route.cfg and so forth). File > Exit (F7): Select this option to terminate the Internet Agent and return to the system prompt. Configuration > Agent Settings (F5): Select this option to display the Internet Agent configuration information. Configuration > Edit Startup File: Select this option to open the gwia.cfg file in the default text editor. Log > Cycle Log: Select this option to close the current log file and start a new one. Log > View Log: Select this option to view the log files. Log > Log Settings: Select this option to set the logging level, turn on or off disk logging, and configure the maximum log file size and disk space. These changes apply only to the current session. Statistics > Message: Select this option to display the Message statistics. For information about the Message statistics, see “Message Statistics” on page 733. Statistics > SMTP Service: Select this option to display the SMTP Service statistics. For information about the SMTP Service statistics, see “SMTP Service Statistics” on page 734. Statistics > POP Service: Select this option to display the POP Service statistics. For information about the POP Service statistics, see “POP Service Statistics” on page 736. Statistics > IMAP Service: Select this option to display the IMAP Service statistics. For information about the IMAP Service statistics, see “IMAP Service Statistics” on page 737. Statistics > LDAP Service: Select this option to display the LDAP Service statistics. For information about the LDAP Service statistics, see “LDAP Service Statistics” on page 739. Statistics > Zero Statistics (F8): Select this option to reset the Message, SMTP, POP, IMAP, and LDAP statistics. Monitoring Internet Agent Operations 741 Monitoring the Internet Agent through the Web Console You can use a Web browser interface, referred to as the Web console, to monitor the Internet Agent. You cannot use the Internet Agent Web console to change any of the Internet Agent’s settings. Changes must be made through ConsoleOne, the server console, or the startup file. + “Enabling the Web Console” on page 742 + “Monitoring the Internet Agent” on page 743 Enabling the Web Console If, during, installation, you enabled the Web console, you can skip this section and continue with the next section, Monitoring the Internet Agent. If you did not, you need to complete the steps in one of the following sections to enable the Web console. + “Using ConsoleOne” on page 742 + “Using Startup Switches” on page 743 Using ConsoleOne 1 In ConsoleOne, right-click the WebAccess Agent object, then click Properties. 2 Click Group Wise > Network Address to display the Network Address page. TCP/IP Address: A E IPXISPX Address: Port ssL EINE: 0 4 Disabled ind TCP: 04 SMTP: Disabled € POP: Disabled z IMAP: Disabled y Page Options... OK Apply | Help 3 Inthe HTTP Port field, enter a port number. We recommend that you use port 9850 if it is not already in use on the Internet Agent’s server. Assigning a port number enables the Web console; assigning 0 as the port number disables the Web console. Any user who knows the Internet Agent’s IP address (or hostname) and the HTTP port number will be able to use the Web console. If you want to restrict Web console access, you can assign a username and password. To do so: 4 Click the GroupWise tab, then click Optional Gateway Settings to display the Optional Gateway Settings page. 742 GroupWise 6.5 Administration Guide Properties of GWIA E Access Control v | Reattach | Post Office Links | GroupWise + Directory Sync/Exchange: Accounting: Convert Status to Messages: Outbound Status Level: Enable Recovery: Retry Count: Retry Interval: Failed Recovery Wait: Network Reattach Command: Correlation Enabled: Correlation Age: HTTP Settings HTTP User Name: HTTP Password: NDS Rights + | Other | Rights to Files al | Optional Gateway Settings [None x Yes v No 5 Undelivered y] Yes v [10 Manage Server > IP Address Management) to view the IP address and port configuration forthe Internet Agent. This is also true for other Group Wise agents (MTA, POA, and WebAccess Agent) running on NetWare 6.5 servers. IMPORTANT: If the Internet Agent is running in protected mode, it will not display in NetWare Remote Manager. You access NetWare Remote Manager by entering the following URL in a Web browser: http://server address:8008 For example: http://137.65.123.11:8008 For more information about using NetWare Remote Manager, see the NetWare 6.5 documentation (http://www.novell.com/documentation/nw65). 744 GroupWise 6.5 Administration Guide Monitoring the Internet Agent through an SNMP Management Console The Internet Agent can be monitored through an SNMP management console, such as the one provide with Novell® ZENworks® Server Management. Before you can monitor the Internet Agent through an SNMP management console, you must compile the Internet Agent’s MIB (Management Information Base) file. The Internet Agent’s MIB file, named gwia.mib, is located in the agents\snmp directory on the GroupWise 6.5 Administrator CD or in the GroupWise® software distribution directory. The MIB file contains all the Trap, Set, and Get variables used for communication between the Internet Agent and management console. The Trap variables provide warnings that point to current and potential problems. The Set variables allow you to configure portions of the application while it is still running. The Get variables display the current status of different processes of the application. To compile the MIB file: 1 Copy the Internet Agent MIB (gwia.mib) to the SNMP management console’s MIB directory. 2 Compile the MIB file. 3 Create a profile that uses the Internet Agent MIB, then select that profile. Assigning Operators to Receive Warning and Error Messages You can select GroupWise users to receive warning and error messages issued by the Internet Agent. Whenever the agent issues a warning or error, these users, called operators, receive a message in their mailboxes. You can specify one or more operators. An operator can also shut down the Internet Agent by sending a mail message addressed as follows: gwia:shutdown where gwia is your Internet Agent’s name. To assign an operator: 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click GroupWise > Gateway Administrators to display the Gateway Administrators page. Monitoring Internet Agent Operations 745 Properties of GWIA E x| Access Control v | Reattach | Post Office Links | GroupWise š NDS Rights v | Other | Rights to Files and, Administrator Role D Operator D Accountant D Postmaster J) Foreign Operator Page Options... | OK | Cancel | Apply | Help 3 Click Add, select a user, then click OK to add the user to the Gateway Administrators list. Properties of GWIA E xl Access Control + | Reattach | Post Office Links | GroupWise + | NDS Rights + | Other | Rights to Files andi | Gateway Administrators User 1.Research.Provo bateo | ¡Administrator Role M Operator I Accountant C Postmaster C Foreign Operator Page Options... | oK | Cancel | Apply | Help 4 Make sure Operator is selected as the Administrator Role. 5 If desired, add additional operators. 6 Click OK. Using Internet Agent Log Files You can use the Internet Agent logging options to help you monitor its operation. By default, the Internet Agent logs information to its server console, Web console, and to a log file on disk. You can control the following logging features: + The type of information to log. + Disabling disk logging (Windows Internet Agent only). 746 GroupWise 6.5 Administration Guide + How long to retain log files. + The maximum amount of disk space to use for log files. + Where to store log files. You can control logging through ConsoleOne®, Internet Agent startup switches, and the Internet Agent console. The following table shows which logging options you can control from each location. ConsoleOne Startup Switches NetWare Console Windows Console Logging Level Yes Yes Yes Yes Disk Logging No No No Yes Maximum Log File Age Yes Yes No Yes Maximum Disk Space Yes Yes No Yes Log File Location Yes Yes No No The log settings in ConsoleOne are used as the default settings. Startup switches override the ConsoleOne log settings, and console settings override startup switches. For information about modifying log settings through ConsoleOne, startup switches, or the Internet Agent console, see the following sections: + “Modifying Log Settings in ConsoleOne” on page 747 + “Modifying Log Settings through Startup Switches” on page 749 + “Modifying Log Settings through the NetWare Internet Agent Console” on page 749 + “Modifying Log Settings through the Windows or Linux Internet Agent Console” on page 749 The following section explains how to view log files created by the Internet Agent: + “Viewing Log Files” on page 750 Modifying Log Settings in ConsoleOne Through ConsoleOne, you can configure the following log settings: + Log file location + Logging level (applies to both console logging and disk logging) + Maximum age for log files + Maximum disk spaced used for log files The ConsoleOne settings are the default settings. The Internet Agent will use these settings unless you override them in the gwia.cfg startup file (see “Modifying Log Settings through Startup Switches” on page 749) or the server console (see “Modifying Log Settings through the NetWare Internet Agent Console” on page 749 and “Modifying Log Settings through the Windows or Linux Internet Agent Console” on page 749). To configure the default log settings in ConsoleOne: 1 Right-click the Internet Agent object, then click Properties. Monitoring Internet Agent Operations 747 2 Click Group Wise > Log Settings to display the Log Settings page. [Properties otaw | xi POP3AMAP4 | Server Directories | Access Control v | Reattach | Post Office Links | IDS Rights v | | Log File Path: | (| Logging Level: Format | Max Log File Age: [oT Shays Max Log Disk Space: [| 65536 S| KBytes Page Options... [ox] Cancel | Help 3 Modify any of the following properties: Log File Path: The Internet A gent creates a new log file each day and each time it is started. The log file is named mmddgwia.nnn, where mm is the month, dd is the day, and nnn is a sequenced number (001 for the first log file of the day, 002 for the second, and so forth). By default, the log files will be saved to the domain\wpgate\gwia\000.pre directory for the NetWare® Internet Agent, c:\grpwise\gwia for the Windows Internet Agent, or /var/log/ novell/groupwise/domain_name.gwia for Linux. If you want to specify a different location, enter the directory path or browse to and select the directory. Logging Level: There are four logging levels: + Off: Disables the logging function. + Normal: Displays warnings and error messages. This is the preferred logging level. + Verbose: Displays information about traffic, including non-delivery reports, in addition to warnings and error messages. Information includes the filename, path, message ID, and size of the message being processed; the IP address of any inbound SMTP connections; the Internet Agent-specific MSG number; and SMTP connection messages such as “Connect to novell.com” and “Accepted connection from 172.16.5.18 novell.com”. + Diagnostic: Displays detailed function calls made by the Internet Agent. This level is not useful for most troubleshooting. Verbose is better for standard troubleshooting. The verbose and diagnostic logging levels do not degrade Internet Agent performance, but log files saved to disk consume more disk space when verbose or diagnostic logging is in use. Max Log File Age: Specify the number of days you want the Internet A gent to retain old log files. The Internet Agent will retain the log file for the specified number of days unless the maximum disk space for the log files is exceeded. The default age is 7 days. Max Log Disk Space: Specify the maximum amount of disk space you want to use for log files. Ifthe disk space limit is exceeded, the Internet Agent will delete log files, beginning with the oldest file, until the limit is no longer exceeded. The default disk space is 65536 KB. 4 Click OK to save the log settings. 748 GroupWise 6.5 Administration Guide Modifying Log Settings through Startup Switches You can use startup switches to override any log settings you configured in ConsoleOne. See “Modifying Log Settings in ConsoleOne” on page 747. To use a switch, you can: + Addthe switch to the command line. For example: load gwia.nlm /ph-j:\domain\wpgate\gwia /loglevel-verbose + Includethe switch in the gwia.cfg file. The gwia.cfg file is located in the same directory as the Internet Agent program (typically sys:\system, c:\grpwise\gwia, or \domain\wpgate\gwia). For information about the startup switches that can be used to modify log settings, see “Log File Switches” on page 800. Modifying Log Settings through the NetWare Internet Agent Console You can use the NetWare Internet Agent console to set the logging level for the current session. Changes you make to logging level at the console apply only to the current session. When you restart the Internet Agent, the logging level is reset to the settings specified in ConsoleOne or the startup switches. See “Modifying Log Settings in ConsoleOne” on page 747 and “Modifying Log Settings through Startup Switches” on page 749. To modify the logging level: 1 Atthe NetWare Internet Agent’s console, press F10-Options, then press F2-Log Level repeatedly to toggle among the available log levels: + Off: Disables the logging function. + Normal: Displays warnings and error messages. This is the preferred logging level. + Verbose: Displays information about traffic, including non-delivery reports, in addition to warnings and error messages. Information includes the filename, path, message ID, and size of the message being processed; the IP address of any inbound SMTP connections; the Internet Agent-specific MSG number; and SMTP connection messages such as “Connect to novell.com” and “Accepted connection from 172.16.5.18 novell.com”. + Diag: Displays detailed function calls made by the Internet Agent. This level is not useful for most troubleshooting. Verbose is better for standard troubleshooting. 2 Press F1-Exit Options to return to the main console screen. Modifying Log Settings through the Windows or Linux Internet Agent Console You can use the Windows Internet Agent console to override the following log settings for the current sessions: + Disk logging on/off + Log file location + Logging level (applies to both console logging and disk logging) + Maximum age for log files + Maximum disk spaced used for log files Monitoring Internet Agent Operations 749 Changes you make to the log settings at the console apply only to the current session. When you restart the Internet Agent, the log level is reset to the level specified in ConsoleOne or the startup switches. See “Modifying Log Settings in ConsoleOne” on page 747 and “Modifying Log Settings through Startup Switches” on page 749. To modify the log settings: 1 Inthe Windows Internet Agent console, click the Log menu > Log Settings to display the Log Settings dialog box. Log Level Disk Logging © Normal © On C Verbose C of m Log Maintenance Settings Maximum log file age: 7 Days Maximum log disk space: 165536 KBytes Cancel Help 2 Change the desired settings: + Log Level: Select Normal to display warnings and error messages; this is the preferred logging level. Select Verbose to display information about traffic, including non-delivery reports, in addition to warnings and error messages. Information includes the filename, path, message ID, and size of the message being processed; the IP address of any inbound SMTP connections; the Internet Agent-specific MSG number; and SMTP connection messages such as “Connect to novell.com” and “Accepted connection from 172.16.5.18 novell.com”. + Disk Logging: Select On or Off to enable or disable logging of information to log files. + Maximum Log File Age: Specify the number of days you want the Internet Agent to retain old log files. The Internet Agent will retain the log file for the specified number of days unless the maximum disk space for the log files is exceeded. The default age is 7 days. + Maximum Log Disk Space: Specify the maximum amount of disk space you want to use for log files. If the disk space limit is exceeded, the Internet Agent will delete log files, beginning with the oldest file, until the limit is no longer exceeded. The default disk space is 65536 KB. Viewing Log Files Current Log File You can view the log file for the current session, or you can view archived log files. The current log file is viewable only through the Internet Agent console or Internet Agent Web console; archived files are viewable through the consoles or an ASCII text editor. The current log file is displayed in the Logging window of the Internet Agent console, with only the most current operations visible. The log file is complete, and includes the gateway startup and configuration information and ongoing operations logged by time, including the shutdown operation. You can browse the file from top to bottom or perform a search for any text string you want. You can also view the current log file from the Internet Agent Web console. 750 GroupWise 6.5 Administration Guide Archived Log Files The Internet Agent creates a new log file every day at midnight or every time it restarts. Older log files are not deleted for at least one day unless you have not allowed sufficient disk space for them to be archived. Log files are named according to the date they were created. Ifthe Internet Agent was restarted during the day, the file extension will indicate which session is logged (for example 031710g.003 indicates the third session logged for March 17). Archived log files are saved in ASCII. You can use any text editor to open a file or to print it. You can also view the log files from the Internet Agent console or the Internet Agent Web console. Shutting Down the Internet Agent The following sections describe the various methods you can use to shut down the Internet Agent: + “Using the Console” on page 751 + “Using a Mail Message” on page 751 + “Using a Shutdown File” on page 751 Using the Console To shut down the Internet Agent while at the server console: 1 Inthe NetWare Agent console, press F7-Exit, then select Yes. or In the Windows Agent, click the File menu > Exit. Using a Mail Message The Internet Agent can be shut down by sending a shutdown message to the Internet Agent. In order to shut down the program with a message, the user sending the message must be defined as an operator for the Internet Agent. This prevents unauthorized users from shutting down the Internet Agent. For information about defining a user as an operator, see “Assigning Operators to Receive Warning and Error Messages” on page 745. The message to shut down the Internet Agent must be addressed to the Internet Agent, not a non- GroupWise domain. The syntax for the To line is: gwia:shutdown where gwia is the name ofthe Internet Agent object. Using a Shutdown File The Internet Agent can also be unloaded by placing a file named shutdown in the domain\wpgate\gwia\000.pre directory. When the Internet Agent sees this file, it will delete the file and shut down. Monitoring Internet Agent Operations 751 752 GroupWise 6.5 Administration Guide Securing Internet Agent Connections Via SSL The Internet Agent can use the SSL (Secure Socket Layer) protocol to enable secure connections to other SMTP hosts, POP/IMAP clients, and the Internet Agent Web console. For the Internet Agent to do so, you must ensure that it has access to a server certificate file and that you've configured which connection types (SMTP, POP, IMAP, HTTP) you want secured through SSL. The following sections provide instructions: + “Defining the Certificate File” on page 753 + “Defining Which Connections Will Use SSL” on page 754 Defining the Certificate File To use SSL, the Internet Agent requires access to a server certificate file and key file. The Internet Agent can use any Base64/PEM or PFX formatted certificate file located on its server. Ifthe Internet Agent’s server does not have a server certificate file, you can use the Group Wise Generate CSR utility to help you obtain one. For information, see “Group Wise Generate CSR Utility (GWCSRGEN)” on page 79. To define the certificate file and key file that the Internet Agent will use: 1 In ConsoleOne*, right-click the Internet Agent object, then click Properties. 2 Click Group Wise > SSL Settings to display the SSL Settings page. Properties of GWIA E x| LDAP | POPSIMAP4 | Server Directories | Access Control v | Reattach | Post Office Links Certificate file: | SSL key ile: El SetPassword Page Options... Lo] Cancel TA CEA 3 Fill in the Certificate File, SSL Key File, and Set Password fields: Securing Internet Agent Connections Via SSL 753 Certificate File: Specify the server certificate file that the Internet Agent will use. The certificate file must be in Base64/PEM or PFX format. If you type the filename rather than using the Browse button to select it, use the full path ifthe file is not in the same directory as the Internet Agent program. This setting corresponds to the Internet Agent’s /certfile switch. SSL Key File: Specify the key file associated with the certificate. Ifthe private key is included in the certificate file rather than in a separate key file, leave this field blank. If you type the filename rather than using the Browse button to select it, use the full path if the file is not in the same directory as the Internet Agent program. This setting corresponds to the Internet Agent’s /keyfile switch. Set Password: Click Set Password to specify the password for the key. If the key does not require a password, do not use this option. This setting corresponds to the /keypasswd switch. 4 Ifyou want to define which connections (HTTP, SMTP, POP3, or IMAP4) will use SSL, click Apply to save your changes, then continue with the next section, “Defining Which Connections Will Use SSL” on page 754. Or Click OK to save your changes. Defining Which Connections Will Use SSL After you’ ve defined the Internet Agent’s certificate and key file (see “Defining the Certificate File” on page 753), you can configure which connections you want to use SSL. You can enable SSL connections to other SMTP hosts and the Internet Agent Web console, which means that an SSL connection will be used ifthe other SMTP host or the Web browser (running the Web console) supports SSL. You can also enable or require SSL connections to POP3 and IMAP4 clients. If SSL is enabled, an SSL connection is used if the client supports SSL; if SSL is required, only SSL connections will be accepted. To configure connections to use SSL: 1 In ConsoleOne, if the Internet Agent object*s property pages are not already displayed, right- click the Internet Agent object, then click Properties. 2 Click Group Wise > Network Address to display the Network Address page. Properties otawia | xi LDAP | POP31MAP4 | Server Directories | Access Control v | Reattach | Post Office Links | GroupWise v | nos { | Network Address | TCP/IP Address: A IPXISPX Address: 2| Port SSL HTTP: [ 9850 $| [Disabled a vor 0 SMTP: [Disabled y] POP: [Disabled =] IMAP: Disabled kd Page Options... OK Cancel Apply | Help 754 GroupWise 6.5 Administration Guide 3 Configure the SSL settings for the following connections: HTTP: Select Enabled to enable the Internet Agent to use a secure connection when passing information to the Internet Agent Web console. The Web browser must also be enabled to use SSL; ifitis not, a non-secure connection will be used. SMTP: Select Enabled to enable the Internet Agent to use a secure connection to other SMTP hosts. The SMTP host must also be enabled to use SSL or TLS (Transport Layer Security); if it is not, a non-secure connection will be used. POP: Select from the following options to configure the Internet Agent’s use of secure connections to POP clients: + Disabled: The Internet Agent will not support SSL connections. All connections will be non-SSL through port 110. Enabled: The POP client determines whether an SSL connection or non-SSL connection is used. The Internet Agent will listen for SSL connections on port 995 and non-SSL connections on port 110. Reguired: The Internet Agent will force SSL connections on port 995 and port 110. Non- SSL connections will be denied. IMAP: Select from the following options to configure the Internet Agent’s use of secure connections to IMAP clients: + Disabled: The Internet Agent will not support SSL connections. All connections will be non-SSL through port 143. Enabled: The IMAP client determines whether an SSL connection or non-SSL connection is used. The Internet Agent will listen for SSL connections on port 993 and non-SSL connections on port 143. Required: The Internet Agent will force SSL connections on port 993 and port 143. Non- SSL connections will be denied. Securing Internet Agent Connections Via SSL 755 756 GroupWise 6.5 Administration Guide Connecting GroupWise Systems and Domains Using the Internet Agent The Internet Agent can be used as a link between Group Wise systems and between domains in the same Group Wise system. + “Connecting Group Wise Systems” on page 757 + “Linking Domains” on page 762 Connecting GroupWise Systems Overview If you have two independent Group Wise systems, you can use the Internet Agent to connect the two systems. This requires each Group Wise system to have the Internet Agent installed. After the systems are connected, you can synchronize information between the two systems so that users from both systems appear in the GroupWise Address Book. The following sections provide instructions: + “Overview” on page 757 + “Creating an External Domain” on page 758 + “Linking to the External Domain” on page 759 + “Checking the Link Status of the External Domain” on page 761 + “Sending Messages Between Systems” on page 762 + “Exchanging Information Between Systems” on page 762 For the purpose of'the following discussion, GWSys1 and GWSys2 represent two separate Group Wise systems. When you connect the two systems, you connect the two domains where the Internet Agents are located. To do so, you will: + In GWSysl, define the GWSys2 Internet Agent domain as an external domain. Configure a domain link from the GWSys1 Internet Agent domain to the external domain, defining the link type as a gateway link that uses the Internet Agent. This allows GWSys1 to deliver messages to GWSys2. + In GWSys2, define the GWSys1 Internet Agent domain as an external domain. Configure a domain link from the GWSys2 Internet Agent domain to the external domain, defining the link type as a gateway link that uses the Internet Agent. This allows GWSys2 to deliver messages to GWSys1. Connecting GroupWise Systems and Domains Using the Internet Agent 757 After you’ve connected the two systems, users can send messages between the two systems by entering the recipients’ full addresses (userID.post office.domain or user@host). If desired, you can simplify addressing by exchanging information between systems, which causes user information to be displayed in the Address Book. The easiest way to exchange information is to enable the External System Synchronization feature in both systems. When enabled, this synchronization constantly updates the Address Books in both systems so that local users can more easily address messages to and access information about the users in the external system. If you don’t want to enable the External System Synchronization feature, you can manually exchange information. Creating an External Domain The first step in connecting two GroupWise systems via Internet Agents is to create an external domain in each GroupWise system. The external domain represents the Internet Agent domain in the other GroupWise system and provides the medium through which you define the link to the other system. To create an external domain: 1 In ConsoleOne®, right-click GroupWise System (in the left-pane), click New > External Domain to display the Create External GroupWise Domain dialog box. create sternal rune pomo — Domain name: [ox | Domain Database Location (optional): Cancel al Help Time Zone: (GMT-07 00) Mountain Time (US & Canada) E] Version: fe el Link To Domain: Prova y E Create another domain 2 Fill in the following fields: Domain Name: Enter the name of the Internet Agent domain as it is defined in the external GroupWise system. Domain Database Location (Optional): Leave this field empty. Time Zone: Select the time zone where the domain is physically located. Version: Select the external domain’s GroupWise version. The domain's version is determined by its MTA version. The options are 4.X, 5.X, and 6. Link to Domain: Select the domain in your system that you want to link to the external domain. This must be your system’s Internet Agent domain. By default, all messages sent to the external GroupWise system will be routed to this domain. The domain’s MTA will then route the messages to the Internet Agent, which will connect to the Internet Agent in the other system. 3 Click OK to create the external domain. The external domain is added to your GroupWise system and is visible in the Group Wise View. In the following example, Cambridge is the external domain. 758 GroupWise 6.5 Administration Guide CRE lola File Edit View Tools Help iż Domains GroupWise View Domain Name | Domain Type (Q Cambridge External GroupWise al Provo Primary E KJ) GroupWise Syster © Cambridge & Provo Secondary @ San Jose Novell Provo ÜGWDOCISYSiprovo 4 Repeat Step 1 through Step 3 to define an external domain in the second Group Wise system. If you do not have administrative rights to that system, you will need to coordinate with that Group Wise system’s administrator. -aixi File Edit View Tools Help 2% GroupWise Syster Primary 3) Cambridge External GroupWise © Provo @ Silverstream Secondary @ Silverstream Cambridge fucwoocisysicamt 5 Continue with the next section, Linking to the External Domain. Linking to the External Domain After you define a domain from the other Group Wise system as an external domain in your system, you need to make sure that your system’s domains have the appropriate links to the external domain. The Internet Agent domain in your system needs to have a gateway link to the external domain. All other domains in your system will have indirect links (through the Internet Agent domain) to the external domain. These links are configured automatically when the external domain was created. To configure the gateway link for your Internet Agent domain: 1 In ConsoleOne, right-click the Internet Agent domain, click GroupWise Utilities > Link Configuration to display the Link Configuration utility. Connecting GroupWise Systems and Domains Using the Internet Agent 759 Ka Groupwise Link Configuration Tool - \\GWDOC\SYS\prova File Edit Search View Window Help (domain: Provo Outbound Links from Provo r Direct Indirect Gateway Undefined S Cambridge % San Jose rDirect indirect %, ? San Jose 2 In the Outbound Links list, double-click the external domain to display the Edit Domain Link dialog box. x Description: How Provo connects to Cambridge Link Type: [Direct y] Cancel | Settings Help | Protocol: UNC v UNC Path: [ugwisysicam [= Scheduling E Override Maximum send message size: [ 0 4 MBytes Delay message size: | 0 4 MBytes Transfer Pull Info... | External Link Info... | 3 Modify the following fields: Link Type: Select Gateway. Gateway Link: Select the name of your Internet Agent. Gateway Access String: Enter the hostname (Internet Agent object > SMTP/MIME tab > Settings page) or foreign ID (Internet Agent object > GroupWise tab > Identification page) assigned to the external domain’s Internet Agent (for example, gwia.ctp.com). Return Link: Leave this set to your Internet Agent domain. 4 Click OK to save your changes. The external domain is displayed in the Gateway column of the Outbound Links list to show that the current domain is using a gateway link to the external domain. The % symbol indicates a gateway link. The f symbol indicates that the link configuration is not yet saved. To save the configuration information, click the Edit menu > Save. 760 GroupWise 6.5 Administration Guide KE Groupwise Link Configuration Tool - \,\\GWDOC\SYS\provo ja ol x) File Edit Search View Window Help e| aa 7| AIS] RE [Prov ermm 2] ET] Ki Domain: Provo Outbound Links from Provo rDirect Indirect % San Jose Direct Gateway Undefined %, ? Cambridge (GW PAE] % San Jose indirect By default, the rest of the domains in your system should have an indirect link to the external domain. To verify this for a domain: 5 In the list of domains on the Link Configuration utility’s toolbar, select the domain whose link you want to check, then verify that the external domain is displayed in the Indirect column of the Outbound Links list. The 1 symbol indicates an indirect link. If the 3 symbol is displayed, the link modification has not yet been propagated to the domain. KE Groupwise Link Configuration Tool - \GWDOC\SYS\provo (oi x File Edit Search View Window Help a || Psa [san ose Cecon +] MIN] Ki Domain: San Jose Outbound Links from San Jose rDirect Indirect % Provo Ei Cambridge Pro ke Gateway: Undefined rDirect % ? Provo rindirect 6 After verifying your domain links, repeat Step 1 through Step 5 in the second GroupWise system to establish the links to the first Group Wise system. If you do not have administrative rights to that system, you will need to coordinate with that Group Wise systems administrator. 7 Continue with the next section, Checking the Link Status of the External Domain. Checking the Link Status of the External Domain The Group Wise MTA has monitoring capabilities that let you determine whether the domains in your system are properly linked to the external domain. When you look at the MTA’s operation screen, you should see the external domain added to the domain count in the Status box. Ifthe link to the external domain is closed, the MTA should be logging and displaying the reasons under its Configuration Status function. For more information about link protocols, see Chapter 10, “Managing the Links between Domains and Post Offices,” on page 131. Connecting GroupWise Systems and Domains Using the Internet Agent 761 Sending Messages Between Systems After you’ ve established links between the Internet Agent domains in the two Group Wise systems, users in one system can send message to recipients in the other system by including the recipients’ fully-gualified Group Wise addresses: userID.post office.domain or user@host To simplify addressing for your Group Wise users, you can exchange information between the two systems. This enables users in your Group Wise system to use the Address Book when selecting recipients from the other system. For information, see the next section, Exchanging Information Between Systems. Exchanging Information Between Systems Exchanging information between two Group Wise systems enables users in either system to use the Address Book when addressing messages to users in the other system. To exchange information, you can choose from the following methods: External System Synchronization: You can use the External System Synchronization feature to automatically exchange domain, post office, user, resource, and distribution list information between the two systems. After the initial exchange of information, any information that changes in one system is automatically propagated to the other system in order to synchronize the information in that system. This is the recommended method for exchanging information between two systems. For information about setting up synchronization between two external systems, see “External System Synchronization” on page 55. Manual Creation of Information: You can manually create the other systems’ objects (domains, post offices, users, resources, and distribution lists) as external objects in your Group Wise system. When doing so, the names of your external objects need to exactly match the names of the objects as defined in their system. Domains in your system will link to the external domains indirectly through the first external domain you created (this is the external domain that one of your system’s domains has a direct link to). The advantage to this method is that you can choose which of the other system’s domains, post offices, users, resources, and distribution lists you want included in your system. The disadvantage is that there is a great amount of administrative overhead involved in creating all the objects and, after the objects are created, no automatic synchronization takes place so updates must be made manually. Linking Domains If you have domains that cannot be linked via a mapped or TCP/IP connection, you can connect them via gateway links, with the Internet Agent defined as the gateway. Both domains being linked must have an Internet Agent installed. For purposes of reducing confusion in the following steps, the two domains being connected are referred to as Provo and Cambridge. You will need to substitute your domains appropriately. To configure gateway links between two domains: 1 In ConsoleOne, right-click the Provo domain, click GroupWise Utilities > Link Configuration to display the Link Configuration utility. 762 GroupWise 6.5 Administration Guide Ka Groupwise Link Configuration Tool - \\GWDOC\SYS\prova File Edit Search View Window Help | MB] 2| QIN) RG roo emy ICD Ki Domain: Provo Outbound Links from Provo rDirect Indirect rGateway Undefined Ss Cambridge % San Jose rDirect rindirect %, ? San Jose 2 In the Outbound Links list, double-click the Cambridge domain to display the Edit Domain Link dialog box. x Description: How Prova connects to Cambridge Link Type: [piret y] Cancel | Settings Help | Protocol: UNC v UNC Path: filgwisysicam = o ëH Scheduling. | I Override Maximum send message size: [_o Y MBytes Delay message size: fo 4 MBytes Transfer Pull Info... | External Link Info... | 3 Modify the following fields: Link Type: Select Gateway. Gateway Link: Select the name of the Provo domain’s Internet Agent. Gateway Access String: Enter the hostname (Internet Agent object > SMTP/MIME tab > Settings page) or foreign ID (Internet Agent object > GroupWise tab > Identification page) of the Cambridge domain’s Internet Agent (for example, gwia.ctp.com). Return Link: Leave this set to the Provo domain. 4 Click OK to save your changes. The Cambridge domain is displayed in the Gateway column of the Outbound Links list to show that the Provo domain is using a gateway link to it. The % symbol indicates a gateway link. The ? symbol indicates that the link configuration is not yet saved. To save the configuration information, click the Edit menu > Save. Connecting GroupWise Systems and Domains Using the Internet Agent 763 KE Groupwise Link Configuration Tool - \\GWDOC\SYS\prova (Ox File Edit Search View Window Help se] S| 2] AIK] R| [Provo ero 2] B|] Ki Domain: Provo Outbound Links from Provo -Direct indirect Gateway Undefined % San Jose % 7 Cambridge (GW AH] rDirect f indirect % San Jose By default, any domains that are already linked to your Provo domain should have an indirect link to the Cambridge domain through the Provo domain. To verify this for a domain: 5 Inthe list of domains on the Link Configuration utility’s toolbar, select the domain whose link you want to check, then verify that the Cambridge domain is displayed in the Indirect column of the Outbound Links list. The 1 symbol indicates an indirect link. Ifthe 3 symbol is displayed, the link modification has not yet been propagated to the domain. | Clee Link Configuration Tool - \,\GWDOC\SYS\provo File Edit Search View Window Help se] a] 2] AIA] BIGI [arcs cecon 2] S|) Kävomain: San Jose Outbound Links from San Jose Direct Indirect Gateway Undefined % Provo ZI Cambridge (Pro AA rDirect rindirect %, ? Provo 6 After verifying your domain links, repeat Step 1 through Step 5 in the second Group Wise system to establish the links to the first Group Wise system. If you do not have administrative rights to that system, you will need to coordinate with that Group Wise system’s administrator. The Group Wise MTA has monitoring capabilities that let you determine whether the domains in your system are properly linked. When you look at the MTA’s operation screen, you should see all domains, regardless of link type, included in the domain count in the Status box. If the link to a domain is closed, the MTA should be logging and displaying the reasons under its Configuration Status function. For more information about link protocols, see Chapter 10, “Managing the Links between Domains and Post Offices,” on page 131. 764 GroupWise 6.5 Administration Guide Using Internet Agent Startup Switches Startup switches let you modify the way the Group Wise” Internet Agent works. Properly using startup switches can help you fine-tune the Internet Agent for your specific messaging environment. Choose from the following list to find out how to use Internet Agent startup switches, and for an explanation of the purpose for each of the switches. The switches are grouped into sections according to the features and functionality that they affect. For an alphabetical list of switches, see “Alphabetical List of Switches” on page 767. + “How to Use Startup Switches” on page 765 + + + + “Reguired Switches” on page 771 “Console Switches” on page 772 “Environment Switches” on page 773 “SMTP/MIME Switches” on page 775 “POP3 Switches” on page 792 “IMAP4 Switches” on page 793 “HTTP (Web Console) Switches” on page 795 “SSL Switches” on page 796 “LDAP Switches” on page 798 “Log File Switches” on page 800 How to Use Startup Switches The Internet Agent’s primary configuration file is gwia.cfg. At startup or restart, the Internet Agent reads this file for its configuration information. Most Internet Agent startup switches also have corresponding settings in ConsoleOne®. + “Changing Internet Agent Settings in ConsoleOne” on page 765 + “Modifying the Gwia.cfg File” on page 766 + “Editing Guidelines” on page 766 Changing Internet Agent Settings in ConsoleOne We recommend that you modify the ConsoleOne setting rather than the gwia.cfg startup switch. If you do modify a gwia.cfg switch, you need to be aware that the switch not only overrides the corresponding ConsoleOne setting but also replaces it. Using Internet Agent Startup Switches 765 Modifying the Gwia.cfg File If you need to change the Internet Agent’s configuration and do not have access to ConsoleOne, you can manually edit the gwia.cfg file. Any changes you make to the gwia.cfg file are reflected in ConsoleOne. The location of the gwia.cfg file used by the Internet Agent depends on the Internet Agent’s platform: + + + Editing Guidelines NetWare: The gwia.cfg file used by the NetWare® Internet Agent is located in the same directory as the agent (typically sys:\system). Do not edit the gwia.cfg file located in the domain\wpgate\gwia directory; if you do, the changes will not affect the Internet Agent. Linux: The guia.cfg file used by the Linux Internet Agent is located in the /opt/novell/ groupwise/agents/share directory. Windows: The gwia.cfg file used by the Windows Internet Agent is located in the domain\wpgate\gwia directory. Do not edit the gwia.cfg file located in the same directory as the Internet Agent program. This gwia.cfg file is only used to redirect the Internet Agent to the gwia.cfg file in the domain\wpgate\gwia directory. If you decide to manually edit the gwia.cfg file, keep the following guidelines in mind when making modifications: + + + Archive a copy of the file in case you need to return to the original switch settings. Use a text editor to edit the file. The comment characters include the semicolon (;), pound sign (#), and asterisk (*), and are used to disable a switch or to add comments. The Internet Agent ignores any line that begins with a comment character. Changes made to the configuration file do not take effect until you restart the Internet Agent. Switches used in the configuration file must begin with one of the following switch delimiters: / (forward slash) or - (dash). For example, you can use /sd or -sd. You can use either a dash (-) or an eguals sign (=) to separate a switch from its value. For example, you can use /sd-12 or /sd=12. If you use a dash rather than a forward slash as the switch delimiter, you must use an egual sign (for example, -sd=12). None ofthe switches or switch values are case sensitive. For example, /sd-12 is the same as / SD-12. If a switch is specified more than once in the configuration file or on the command line, and if it has a value (such as /II=normal), only the last instance of the switch will be used. The gwia.cfg configuration file is used by default. However, you can also specify another configuration file or use startup switches on the command line when starting the Internet Agent program. If no other configuration file is specified on the command line (using the gwia@filename syntax), the default gwia.cfg configuration file will be read and processed before, and in addition to, any command line switches. If a configuration file other than gwia.cfg is specified on the command line, the default gwia.cfg configuration file will not be read. 766 GroupWise 6.5 Administration Guide Alphabetical List of Switches NetWare Internet Agent /aql lagor lari lattachmsg /badmsg /certfile /cluster /color /dbchar822 /dhome /defaultcharset /dia N/A N/A /displaylastfirst /dsn /dsnage /etrnhost /etrnqueue /fd822 /fdmime flatfwd /force7bitout /forceinboundauth Linux Internet Agent --aql --agor --ari --attachmsg --badmsg --certfile N/A N/A --dbchar822 --dhome --defaultcharset --dia N/A N/A --displaylastfirst --dsn --dsnage --etrnhost --etrnqueue --fd822 --fdmime --flatfwd --force7bitout --forceinboundauth Windows Internet Agent ConsoleOne Settings /aql lagor lari lattachmsg /badmsg /certfile N/A N/A /dbchar822 /dhome /defaultcharset /dia /dialpass /dialuser /displaylastfirst /dsn /dsnage /etrnhost /etrnqueue /fd822 /fdmime /flatfwd /force7bitout /forceinboundauth SMTP/MIME > Address Handling > Sender’s Address Format SMTP/MIME > Address Handling > Place Domain and Post Office Qualifiers on Right of Address N/A N/A SMTP/MIME > Undeliverables > Undeliverable or Problem Message GroupWise > SSL Settings > Certificate File N/A N/A N/A Server Directories > Settings > SMTP Queues Directory N/A SMTP/MIME > Address Handling > Ignore GroupWise Internet Addressing SMTP/MIME > Dial-Up Settings > Password SMTP/MIME > Dial-Up Settings > Username N/A SMTP/MIME > ESMTP Settings > Enable Delivery Status Notification (DSN) SMTP/MIME > ESMTP Settings > DSN Hold Age SMTP/MIME > Dial-Up Settings > ETRN Host SMTP/MIME > Dial-Up Settings > ETRN Queue SMTP/MIME > Address Handling > Non-GroupWlse Domain for RFC-822 Replies SMTP/MIME > Address Handling > Non-GroupWlse Domain for MIME Replies N/A SMTP/MIME > Settings > Use 7 Bit Encoding for All Outbound Messages N/A Using Internet Agent Startup Switches 767 NetWare Internet Agent /forceoutboundauth /fut /group /help /hn /home /httppassword Ihttpport /httprefresh Ihttpssl Ihttpuser limap4 limapport limapsport limapssl lipa liso88591is lit /keyfile /keypasswd /killthreads /koi8 /Idap Idapentxt /I\dapipaddr IIdapport IIdappwd Linux Internet Agent --forceoutboundauth --fut --group --help --hn --home --httppassword --httpport --httprefresh --httpssl --httpuser --imap4 --imapport --imapsport --imapssl --ipa --iso88591is --it --keyfile --keypasswd --killthreads --koi8 --Idap --Idapentxt --Idapipaddr --Idapport --Idappwd Windows Internet Agent ConsoleOne Settings /forceoutboundauth /fut /group /help /hn /home /httppassword /httpport /httprefresh Ihttpssl Ihttpuser limap4 /imapport /imapsport limapssl lipa liso88591is lit /keyfile /keypasswd /killthreads /koi8 /\dap IIdapentxt Iidapipaddr Iidapport /\dappwd 768 GroupWise 6.5 Administration Guide N/A SMTP/MIME > Undeliverables > Forward Undeliverable Inbound Messages SMTP/MIME > Address Handling > Expand Groups on Incoming Messages N/A N/A N/A GroupWise > Optional Gateway Settings > HTTP Password GroupWise > Network Address > HTTP Port N/A GroupWise > Network Address > HTTP SSL GroupWise > Optional Gateway Settings > HTTP User Name POP3/IMAP4 > Settings > Enable IMAP4 Service N/A N/A GroupWise > Network Address > IMAP SSL GroupWise > Network Address > TCP/IP Address Post Office Links tab > Settings N/A POP3/IMAP4 > Settings > Number of Threads for IMAP4 Connections GroupWise > SSL Settings > SSL Key File GroupWise > SSL Settings > Password N/A N/A LDAP > Settings > Enable LDAP Service LDAP > Settings > LDAP Context N/A N/A N/A NetWare Internet Agent Ildaprefcntxt Adaprefurl N/A IIdapssl IIdapthrd IIdapuser log llogdays /loglevel /logmax /maxdeferhours /mbcount /mbtime /mh /mime /mono /mudas /mv /nasoq /noesmtp /noiso2022 /nomappriority /nosmp /notfamiliar /nqpmt IP Linux Internet Agent --Idaprefcntxt --Idaprefurl --Idapserverport --Idapssl --Idapthrd --Idapuser --log --logdays --loglevel --logmax --maxdeferhours --mbcount --mbtime --mh --mime N/A --mudas --MV --nasoq --noesmtp --noiso2022 --nomappriority N/A --notfamiliar --nqpmt --P Windows Internet Agent ConsoleOne Settings /\daprefentxt /\daprefurl N/A IIdapssl /\dapthrd IIdapuser Hlog /logdays /loglevel /logmax /maxdeferhours /mbcount /mbtime /mh /mime N/A /mudas /mv /nasoq /noesmtp Inoiso2022 /nomappriority N/A /notfamiliar /nqpmt IP N/A LDAP > Settings > LDAP REferral URL N/A N/A LDAP > Settings > Number of LDAP Threads N/A GroupWise > Log Settings > Log File Path GroupWise > Log Settings > Max Log File Age GroupWise > Log Settings > Log Level GroupWise > Log Settings > Max Log Disk Space SMTP/MIME > Settings > Maximum Number of Hours to Retry a Deferred Message SMTP/IME > Security Settings > Enable Mailbomb Protection and Mailbomb Threshold SMTP/IME > Security Settings > Enable Mailbomb Protection and Mailbomb Threshold SMTP/MIME > Settings > Relay Host for Outbound Messages SMTP/MIME > Message Formatting > Default Message Encoding: MIME N/A SMTP/MIME > Undeliverables > Amount of Original Message to Return to Sender When Message Is Undeliverable SMTP/MIME > Message Formatting N/A N/A N/A N/A N/A N/A SMTP/MIME > Message Formatting > Enable Quoted Printed Message Text Line Wrapping SMTP/MIME > Settings > Scan Cycle for Send Directory Using Internet Agent Startup Switches 769 NetWare Internet Agent /password /pid /pop3 /popintruderdetect /popport /popsport /popssl /pt /rbl /rd /realmailfrom /recv /rejbs /rt /sd /send N/A /single /smp /smtp /smtphome N/A /smtpssl /st Itc /td Linux Internet Agent N/A --pid --pop3 --popintruderdetect --popport --popsport --popssl --pt --rbl --rd --realmailfrom --FecV --rejbs if --sd --send --shoW --single N/A --smtp --smtphome --smtpport --smtpssl st --tc --td Windows Internet Agent ConsoleOne Settings N/A lpid /pop3 /popintruderdetect /popport /popsport /popssl --pt /rbl /rd /realmailfrom /recv Irejbs /rt /sd /send N/A /single N/A /smtp /smtphome N/A /smtpssl /st /tc /td 770 GroupWise 6.5 Administration Guide N/A N/A POP3/IMAP4 > Settings > Enable POP3 Service N/A N/A N/A GroupWise > Network Address > POP SSL POP3/IMAP4 > Settings > Number of Threads for POP3 Access Control > Blacklists > Blacklist Addresses SMTP/MIME > Settings > Number of SMTP Receive Threads N/A N/A SMTP/MIME > Security Settings > Reject Mail If Sender’s Identity Cannot Be Verified SMTP/MIME > Message Formatting > Number of Inbound Conversion Threads SMTP/MIME > Settings > Number of SMTP Send Threads N/A N/A N/A N/A SMTP-MIME > Settings > Enable SMTP Server Directories > Settings > Advanced > SMTP Service Queues Directory N/A GroupWise > Network Address > SMTP SSL SMTP/MIME > Message Formatting > Number of Outbound Conversion Threads SMTP/MIME > Timeouts > Commands SMTP/MIME > Timeouts > Data NetWare Internet Agent Ite Itg /tr /tt /usedialup luser luueaa /work /wrap /xspam Linux Internet Agent Windows Internet Agent ConsoleOne Settings --te Ite SMTP/MIME > Timeouts > Connection Establishment --tg /tg SMTP/MIME > Timeouts > Greeting --tr /tr SMTP/MIME > Timeouts > TCP Reset --tt /tt SMTP/MIME > Timeouts > Connection Termination --usedialup /usedialup SMTP/MIME > Dial-Up Settings > Enable Dial-Up N/A N/A N/A --uueaa /uueaa SMTP/MIME > Message Formatting > UUEncode All Message Attachments --work /work Server Directories > Settings > Conversion Directory --wrap /wrap SMTP/MIME > Message Formatting > Line Wrap Length for Message Text on Outbound Mail --xspam /xspam N/A Required Switches Idhome The following switches point the Internet Agent to the Internet Agent’s directory. They are assigned their initial value during installation. If you move the Internet Agent to another location, you must update these switches. /dhome /hn /home The following switches are only for the NetWare version of the Group Wise Internet Agent, and are only required if the Internet Agent is running in remote mode, meaning that it does not reside on the same server as the GroupWise domain directory. /user /password Points to the SMTP service work area. This is normally the Internet Agent’s gateway directory under the domain\wpgate directory. See “Relocating the Internet Agent’s Processing Directories” on page 725. Syntax: /dhome=pathname NetWare Example: /dhome=sys: \headq\wpgate\gwia Linux Example: -dhome /gwsystem/provol/gwia Windows Example: /dhome=c: \gwia Using Internet Agent Startup Switches 771 /hn [home Specifies the hostname that is displayed when someone connects to your Internet Agent via a Telnet session. You should enter the hostname assigned to you by your Internet service provider. Syntax: /hn=host_name Example: /hn=gwia.novell.com This switch is required only under certain circumstances. Normally, the Internet Agent gets the information from another source and does not need this switch. If you receive a message that the /hn switch is required, you must use the switch. For the NetWare version, the /hn switch is required only if you don’t use the hosts file in the sys:\etc directory to indicate the IP address and name of the Internet Agent server. If either of these options (the IP address or the name of the server) is not available, the program cannot start. Points the Internet Agent to the Internet Agent’s gateway directory. This is always a subdirectory of wpgate in the domain directory structure. Syntax: /home=gateway directory NetWare Example: /home=sys: \headq\wpgate\gwia Linux Example: -home /gwsystem/provol/gwia Windows Example: /home=j : \headq\wpgate\gwia /user (NetWare Only) Sets the login ID that the NetWare Internet Agent must use to log into a remote file server to access the domain database and Internet Agent directories. Syntax: /user-login ID /password (NetWare Only) Sets the password that the NetWare Internet Agent must use to log into a remote file server to access the domain database and Internet Agent directories. Syntax: /password-password Console Switches The following switches apply to the Internet Agent console: /color /help /mono --show 772 GroupWise 6.5 Administration Guide [color ¡help Imono Sets the default color of the Internet Agent console. The values range from 0-7. Syntax: color-0|1|2|3|4|5|6|7 Example: /color-3 You can also change the color of the screen for an Internet Agent session. From the menu on the bottom of the console, select Options, then press the key for Colors. Displays the Help screen for the startup switches. Syntax: /help Short Syntax: /h Runs the Internet Agent for a computer with a monochrome monitor. Syntax: /mono Short Syntax: /mon --show (Linux Only) Starts the Linux Internet Agent with an agent console interface similar to that provided for the NetWare and Windows Internet Agent. This user interface reguires that the X Window System and OpenMotif be running on the Linux server. Syntax: --show Environment Switches lipa The following switches configure Internet Agent environment settings such as working directories, NetWare clustering support, and NetWare symmetric multi-processing (SMP). lipa /cluster /pid /smp /nosmp /smtphome /work Specifies the IP address (or hostname) of a GroupWise POA that the Internet Agent can use to resolve IP addresses of other post offices in the system. This replaces the need to configure post office links for the Internet Agent in ConsoleOne (Internet Agent object > Post Office Links > Settings). Using Internet Agent Startup Switches 773 If you have established a Group Wise name server (ngwnameserver), you can use it. See “Simplifying Client/Server Access with a Group Wise Name Server” on page 449. Syntax: /ipa-address Example: /ipa-ngwnameserver /cluster (NetWare Only) Ipid Informs the Internet Agent that it is running in a Novell Cluster Services environment. For detailed information about running the Internet Agent in a clustering environment, see “Implementing the Internet Agent in a Novell Cluster” in “Novell Cluster Services” in the GroupWise 6.5 Interoperability Guide. Syntax: /cluster Specifies the process ID for this instance of the Internet Agent. You can use the /pid switch to have multiple instances of the Internet Agent running on the same server. The first process is 001. You can use any numbers between 002 and 999 for additional processes. Syntax: /pid-number Example: /pid-002 Ismp (NetWare Only) Enables the NetWare Internet Agent to use the symmetric multi-processing capability. Syntax: /smp Inosmp (NetWare Only) Ismtphome Disables the NetWare Internet Agent’s symmetric multi-processing (SMP) capability. Syntax: /nosmp Specifies a secondary SMTP queues directory for outbound messages. This secondary directory can be helpful for troubleshooting by providing a way to trap messages before they are routed to the Internet. You can also use the secondary directory to run third-party utilities such as a virus scanner on Internet-bound messages. See “Relocating the Internet Agent’s Processing Directories” on page 725. The Internet Agent places all outbound messages in this secondary directory. The messages must then be moved manually (or by another application) to the primary SMTP queue’s send directory (/dhome switch) before the Internet Agent will route them to the Internet. Syntax: /smtphome 774 GroupWise 6.5 Administration Guide Iwork Inasoq Sets the directory where the Internet Agent stores its temporary files. On NetWare and Linux, the default work directory is located in the domain, in wpgate\gwia\000.prc\gwwork directory. On Windows, the default work directory c:\grpwise\gwia directory, which is not in the domain directory. Syntax: /work-pathname Short Syntax: /gw-pathname NetWare Example: /work-sys : Xtmp work Linux Example: -work /opt/novell/groupwise/tmp Windows Example: /work-j:\tmp\work By default, the Internet Agent sends the accounting file (acct) to users specified as accountants in ConsoleOne (Internet Agent object > Group Wise > Gateway Administrators). The file is sent daily at midnight and any time the Internet Agent shuts down. This switch instructs the Internet Agent to send the acct file once daily at midnight, not each time the Internet Agent guits or is shut down. Syntax: /nasog SMTP/MIME Switches The following sections categorize and describe the switches that you can use to configure the Internet Agent’s SMTP/MIME settings: + “SMTP Enabled (/smtp Switch)” on page 775 + “Address Handling” on page 776 + “Message Formatting and Encoding” on page 780 + “Extended SMTP” on page 784 + “Send/Receive Cycle and Threads” on page 784 + “Dial-Up Connections” on page 785 + “Timeouts” on page 786 + “Relay Host” on page 788 + “Host Authentication” on page 788 + “Undeliverable Message Handling” on page 790 + “Mailbomb and Spam Security” on page 790 + “/rbl” on page 791 SMTP Enabled (/smtp Switch) Enables the Internet Agent to process SMTP messages. See “Configuring Basic SMTP/MIME Settings” on page 661. Syntax: / smtp Using Internet Agent Startup Switches 775 Address Handling The following switches determine how the Internet Agent handles e-mail addresses: laql /aql /aqor /ari /dia /displaylastfirst /dontreplaceunderscore /fd822 /fdmime /group /keepsendgroups /killthreads /msstu /nomappriority /notfamiliar /realmailfrom Allows you to determine the address qualification level. It specifies which GroupWise address components (domain.post_office.user) must be included as the user portion of a Group Wise user’s outbound Internet address (userhost). Valid options are auto, userid, po, and domain. This switch is valid only if your system is not configured to use Internet-style addressing, as described in “Internet-Style Addressing” on page 87, or you’ve configured the Internet Agent to ignore Internet-style addressing, as described in “Configuring How the Internet Agent Handles E- Mail Addresses” on page 664. Syntax: /aql-option Example: /aql-po Option auto userid po domain Description This option causes the gateway to include the addressing components required to make the user’s address unique. If a user ID is unique in a GroupWise system, the outbound address uses only the user ID. If the post office or domain.post_office components are required to make the address unique, these components are also included in the outbound address. The auto option is the default. This option requires the gateway to include only the user_/D in the outbound Internet address, even if the user ID is not unique in the system. If a recipient replies to a user whose user ID is not unique and no other qualifying information is provided, that reply cannot be delivered. This option requires the gateway to include post office.user IDin every outbound address, regardless of the uniqueness or non-uniqueness of the user ID. This option requires the gateway to include the fully-qualified GroupWise address (domain.post office.user_ID) in every outbound address, regardless of the uniqueness or non-uniqueness of the user ID. This option guarantees the uniqueness of every outbound Internet address, and ensures that any replies are delivered. 776 GroupWise 6.5 Administration Guide lagor lari Idia /displaylastfirst The user part of a GroupWise user’s outbound Internet address (user@host) can and sometimes must include the full Groupwise address (domain.post_office.user_ID@host) in order to be unique. The /aqor switch instructs the Internet Agent to move any Group Wise address components, except the user. ID component, to the right side of the address following the at sign (@). In this way, GroupWise addressing components become part of the host portion of the outbound Internet address. The /aql switch specifies which components are included. For example, if the /aqor switch is used (in conjunction with the /aql-domain switch), Bob Thompson’s fully qualified Internet address (headquarters.advertising.bob@novell.com) would be resolved to bob@advertising.headquarters.novell.com for all outbound messages. If the /aqor switch is used with the /aql-po switch, Bob’s Internet address would be resolved to bob@advertising.novell.com for all outbound messages. If you use the /aqor switch to move GroupWise domain or post office names to be part of the host portion on the right side of the address, you must provide a way for the DNS server to identify the GroupWise names. You must either explicitly name all GroupWise post offices and domains in your system as individual MX Records, or you can create an MX Record with wildcard characters to represent all GroupWise post offices and domains. For information about creating MX Records, see details found in RFC #974. For details about this setting, see “Configuring How the Internet Agent Handles E-Mail Addresses” on page 664. Enables or disables additional routing information that is put in the SMTP return address to facilitate replies. This switch might be needed in large systems with external GroupWise domains in which the external GroupWise users have not been configured in your local domain. Options include Never and Always. Most sites do not need to use this switch. Syntax: /ari-never| always Example: /ari-never Group Wise supports both Internet-style addressing (user@host) and GroupWise proprietary addressing (user_ID.post_office.domain). By default, the Internet Agent uses Internet-style addressing. See “Configuring How the Internet Agent Handles E-Mail Addresses” on page 664. You can use this switch to disable Internet-style addressing. With Internet-style addressing disabled, messages use the mail domain name in the Foreign ID field in ConsoleOne (Internet Agent object > GroupWise > Identification) for the domain portion of a user’s Internet address. The Internet Agent continues to support user and post office aliases in either mode. Syntax: /dia By default, users’ display names are First Name Last Name. If you want users’ display names to be Last Name First Name, you can use the /displaylastfirst switch. This forces the display name format to be Last Name First Name, regardless of the preferred address format. Syntax: /displaylastfirst Using Internet Agent Startup Switches 777 Idontreplaceunderscore 1fd822 Ifdmime By default, the Internet Agent accepts addresses of the format: firstname lastname@internet domain name even though this is not an address format included in the Allowed Address Formats list in ConsoleOne for configuring Internet addressing, as described in “Allowed Address Formats” on page 91. Use this switch to prevent this address format from being accepted by the Internet Agent. Syntax: /dontreplaceunderscore Specifies a return address for GroupWise replies. À message that has been received by a GroupWise user through the Internet Agent and is replied to has this return address form. These switches cause the Internet Agent to produce a return address of the form foreign domain.type:"user host." Foreign domain can be any foreign domain you have configured and linked to the Internet Agent. You can use the same foreign domain name for both the /fd822 switch and the /fdmime switch. You can specify multiple foreign domain and kind pairs by placing them in guotes. If multiple foreign domain and kind pairs are used, the first domain/kind pair is the return address for replies to messages received through the Internet Agent. The second domain/kind pair is checked to see what message format is used for old replies in the system. Up to four pairs can be specified with an 80-character limit. This switch lets you change your foreign domain names in your Group Wise system and still have replies work. For example, if your foreign domain had been called faraway and you added a foreign domain called Internet, you could use /fd822-"internet.nonmime smtp.nonmime." This would cause replies to have a return address of internet.nonmime.:"user@host." The Internet Agent would also recognize faraway. This switch also lets you migrate from one foreign domain to another. Most administrators do not need to use this switch. Syntax: /£d4822- foreign domain.type Example: /£d822-Internet .nonmime Specifies a return address for GroupWise replies. A message that has been received by a Group Wise user through the Internet Agent and is replied to has this return address form. These switches cause the Internet Agent to produce a return address of the form foreign_domain.type:"user host." Foreign_domain can be any foreign domain you have configured and linked to the Internet Agent. Type can be either mime or nonmime. You can use the same foreign domain name for both the /fd822 switch and the /fdmime switch. You can specify multiple foreign domain and kind pairs by placing them in quotes. If multiple foreign domain and kind pairs are used, the first domain/kind pair is the return address for replies to messages received through the Internet Agent. The second domain/kind pair is checked to see what message format is used for old replies in the system. Up to four pairs can be specified with an 80-character limit. This switch lets you change your foreign domain names in your GroupWise system and still have replies work. For example, if your foreign domain had been called SMTP and you added a foreign 778 GroupWise 6.5 Administration Guide Igroup Ikeepsendgroups /killthreads /msstu Inomappriority Inotfamiliar Irealmailfrom domain called Internet, you could use /fdmime-"internet.mime smtp.mime." This would cause replies to have a return address of internet.mime:"user@host." The Internet Agent would also recognize SMTP. This switch also lets you migrate from one foreign domain to another. Most administrators do not need to use this switch. Syntax: /fdmime-foreign domain.type Example: /fdmime-Internet .mime Turns on group expansion. The default startup file has this switch commented out. If it is enabled, an incoming Internet message addressed to a public group is sent to members of that group. See “Configuring How the Internet Agent Handles E-Mail Addresses” on page 664. Syntax: /group Prevents the Internet Agent from expanding distribution lists on messages going to external Internet users so that the SMTP header does not become too large. Syntax: /keepsendgroups Instructs the Internet Agent to immediately terminate any active send/receive threads when it restarts. Syntax: /killthreads Instructs the Internet Agent to map spaces to underscores in user addresses for outbound messages. For example, john smith becomes john_smith. Syntax: /msstu Disables the function of mapping an x-priority MIME field to a GW priority message. Syntax: /nomappriority Instructs the Internet Agent to not include the user’s familiar name, or display name, in the FROM field of the message’s MIME header. In other words, the From field will be address rather than "familiar. name" address. Syntax: /notfamiliar Instructs the Internet Agent to use the real user in the Mail From field instead of having auto- forwards come from Postmaster and auto-replies come from Mailer-Daemon. Syntax: /realmailfrom Using Internet Agent Startup Switches 779 Message Formatting and Encoding lattachmsg Idbchar822 Idefaultcharset Iforce7bitout The following switches determine how the Internet Agent formats and encodes inbound and outbound e-mail messages: /attachmsg /dbchar822 /defaultcharset /force7bitout /iso8859 lis /koi8 /mime mv /noiso2022 /noqpmt ht /st luueaa /wrap Instructs the Internet Agent to maintain the original format of any file type attachment. Syntax: /attachmsg Instructs the Internet Agent to map inbound non-MIME messages to another character set that you specify. The mapped character set must be an Asian (double-byte) character set. Syntax: /dbchar822-charset Example: /dbchar822-shift js Specifies what character set to use if no character set is specified in an incoming message. Syntax: /defaultcharset-charset Example: /defaultcharset-iso-8859-1 For readability when the character set name includes hyphens (-), you can use an equal sign (=) as the delimiter between the switch and its setting. Example: /defaultcharset=iso-8859-1 By default, the Internet Agent uses 8-bit MIME encoding for any outbound messages that are HTML-formatted or that contain 8-bit characters. If, after connecting with the receiving SMTP host, the Internet Agent discovers that the receiving SMTP host cannot handle 8-bit MIME encoded messages, the Internet Agent converts the messages to 7-bit encoding. 780 GroupWise 6.5 Administration Guide liso88591is Ikoig Imime Imv You can use the /force7bitout switch to force the Internet Agent to use 7-bit encoding and not attempt to use 8 bit MIME encoding. You should use this option if you are using a relay host that does not support 8-bit MIME encoding. See “Configuring Basic SMTP/MIME Settings” on page 661. Syntax: /force7bitout Instructs the Internet Agent to map inbound MIME ISO-8859-1 messages to another character set that you specify. Syntax: /iso88591is-charset Example: /iso88591is-big5 Instructs the Internet Agent to map all outbound MIME messages to the KOI8 (Russian) character set. Syntax: /koi8 Instructs the Internet Agent to send outbound messages in MIME format rather than in RFC-822 format. If you’ve defined an RFC-822 non-GroupWise domain, as described in “Creating a Non- GroupWise Domain” on page 693, users can still send RFC-822 formatted messages by using the RFC-822 domain in the address string when sending messages. Removing the switch corresponds to enabling the Default Message Encoding: Basic RFC-822 switch in ConsoleOne. See “Determining Format Options for Messages” on page 667. Syntax: /mime Specifies a mail view attachment for all inbound Internet messages. A view is the screen that a user sees when a message is opened. This switch helps users identify Internet messages. If you do not specify a view, or if the view has not been configured, the default view is used. See “Protecting Against Unidentified Hosts and Mailbombs (Spam)” on page 668. Syntax: /mv-viewname Example: /mv-Internet IMPORTANT: Quotes must surround a mail view name that contains a space (for example, /mv-"Expanded Mail"). How the /mv Switch Works When the Internet Agent receives an Internet message, it writes the view name you have chosen into a special field of the message. When a user opens that message, the Group Wise client searches the ofviews.ini file for the specified view name. If the client finds the view name and the corresponding view file, it displays the message with that view. To configure your Group Wise system to use an existing mail view, you must know what the view is named so that you can include it with the /mv switch. Using Internet Agent Startup Switches 781 Inoiso2022 Ingpmt Ist Locating a View You can identify view files by their .vew extension (for example, usml 1.vew, which is the default). Views are located in the post office\ofviews\win directory. Only views located in this directory are available to users on the post office. Finding a View's Name View names are defined in the [Mail] section of the ofviews.ini (and/or ofviewxx.ini) file in the postoffice\ofviews\win directory. The ofviews.ini file is an ASCII text file that you can open with any text editor. The gwia.cfg file that ships with the gateway contains an active /mv-Internet line. If you already have added a system view called Internet, messages that come from the Internet are immediately received with the Internet view you added. Otherwise, use the /mv switch to specify the name of the view you want used. Instructs the Internet Agent to not use ISO-2022 character sets. ISO-2022 character sets provide T-bit encoding for Asian character sets. Syntax: /noiso2022 Disables guoted printable message text for outbound messages. Ifthis switch is turned on, messages are sent with the Base64 MIME encoding. If you use this switch you need to review the setting for the /wrap switch to ensure that message text wraps correctly. See “Determining Format Options for Messages” on page 667. Syntax: /ngpmt Specifies the maximum number of'threads that the Internet Agent uses when converting inbound messages from MIME or RFC-822 format to the Group Wise message format. The default setting is 4. See “Determining Format Options for Messages” on page 667. Multiple threading allows for more than one receive process to be running concurrently. A receive reguest is assigned to a single thread and is processed by that thread. If you anticipate heavy inbound message traffic, you can increase the number of'threads to enhance the speed and performance ofthe Internet Agent. The number ofthreads is limited only by the memory resources of your server. Syntax: /rt Specifies the maximum number of threads that the Internet Agent uses when converting outbound messages from Group Wise message format to MIME or RFC-822 format. The default setting is 4. See “Determining Format Options for Messages” on page 667. Multiple threading allows for more than one send process to be running concurrently. A send request is assigned to a single thread and is processed by that thread. If you anticipate heavy outbound message traffic, you can increase the number of threads to enhance the speed and 782 GroupWise 6.5 Administration Guide luueaa /wrap performance of the Internet Agent. The number of threads is limited only by the memory resources of your server. Syntax: /st Forces the Internet Agent to UUencode any ASCII text files attached to outbound RFC-822 formatted messages. This switch applies only if the /mime switch is not used. Without this switch, the Internet Agent includes the text as part of the message body. See “Determining Format Options for Messages” on page 667. Syntax: /uueaa Sets the line length for outbound messages. This is important if the recipient’s e-mail system requires a certain line length. See “Determining Format Options for Messages” on page 667. Syntax: /wrap-line length Example: /wrap-72 Forwarded and Deferred Messages /flatfwd Imaxdeferhours The following switches configure how the Internet Agent handles forwarded and deferred messages: /flatfwd /maxdeferhours Automatically strips out the empty message that is created when a message is forwarded without adding text, and retains the original sender of the message, rather than showing the user who forwarded it. This facilitates users forwarding messages from GroupWise to other e-mail accounts. Messages arrive in the other accounts showing the original senders, not the users who forwarded the messages from GroupWise. Syntax: /flatfwd Specifies the number of hours after which the Internet Agent stops trying to send deferred messages. The default is 96 hours, or four days. A deferred message is any message that couldn’t be sent because of a temporary problem (host down, MX record not found, and so forth). For the first hour of the specified time, the Internet Agent tries resending the message every 20 minutes. After the first hour, it tries resending the message every four hours. For example, if you specify 10 hours, the Internet Agent tries resending the message at 20 minutes, 40 minutes, 1 hour, 5 hours, and 9 hours. After the 10 hours has expired, it will return an undeliverable status to the sender. See “Configuring Basic SMTP/MIME Settings” on page 661. Syntax: /maxdeferhours Using Internet Agent Startup Switches 783 Extended SMTP Inoesmtp Idsn Idsnage The following switches configure the Internet Agent’s Extended SMTP (ESMTP) settings: /noesmtp /dsn /dsnage Disables ESMTP support in the Internet Agent. Syntax: /noesmtp Enables Delivery Status Notification (DSN). The Internet Agent will request status notifications for outgoing messages and will supply status notifications for incoming messages. This requires the external e-mail system to also support Delivery Status Notification. Currently, notification consists of two delivery statuses: successful and unsuccessful. See “Using Extended SMTP (ESMTP) Options” on page 663. Syntax: /dsn The /dsnage switch specifies the number of days that the Internet Agent will retain information about the external sender so that status updates can be delivered to him or her. For example, the default DSN age causes the sender information to be retained for 4 days. Ifthe Internet Agent does not receive delivery status notification from the Group Wise recipient’s Post Office Agent (POA) within that time period, it deletes the sender information and the sender does not receive any delivery status notification. See “Using Extended SMTP (ESMTP) Options” on page 663. Syntax: /dsnage Send/Receive Cycle and Threads The following switches configure the Internet Agent’s SMTP send/receive cycle and threads: /p /rd /sd /recv /send /single /smtpport Specifies how often, in seconds, the Internet Agent polls for outbound messages. The default, 10 seconds, causes the Internet Agent to poll the outbound message directory every 10 seconds. see “Configuring Basic SMTP/MIME Settings” on page 661. Syntax: /p-seconds Example: /p-5 784 GroupWise 6.5 Administration Guide Ird Isd lrecv Isend Isingle Specifies the maximum number of threads used for processing SMTP receive requests (inbound messages). The default is 16 threads. See “Configuring Basic SMTP/MIME Settings” on page 661. Syntax: /rd-number of threads Example: /rd-20 Specifies the maximum number of threads used for processing SMTP send requests (outbound messages). The default is 8 threads. See “Configuring Basic SMTP/MIME Settings” on page 661. Syntax: /sd-number of threads Example: /sd-12 Places the Internet Agent in receive-only mode. Ifthis switch is enabled, the Internet Agent does not send any messages. Use this switch only for troubleshooting. Syntax: /recv Short Syntax: /r Places the Internet Agent in send-only mode. If you enable this switch, the Internet Agent does not receive any messages. Use this switch only for troubleshooting. Syntax: /send Short Syntax: /s Instructs the Internet Agent to run one send and receive cycle, then terminate the session. Use this switch only for troubleshooting. Syntax: /single Short Syntax: /sc --smtpport (Linux only) Changes the SMTP listen port from the default of 25. Use this switch only if the Internet Agent is receiving messages only from SMTP hosts that can be configured to connect to Internet Agent on a specified port. Dial-Up Connections SMTP dial-up services can be used when you don’t require a permanent connection to the Internet and want to periodically check for mail messages queued for processing. The following switches can be used when configuring dial-up services. For more information about dial-up services, see “Configuring SMTP Dial-Up Services” on page 671. Using Internet Agent Startup Switches 785 /usedialup /etrnhost /etrnqueue /dialuser /dialpass /usedialup Enables SMTP dial-up services. See “Enabling Dial-Up Services” on page 671. Syntax: /usedialup letrnhost Specifies the IP address or DNS hostname of'the mail server (where your mail account resides) at your Internet Service Provider. You should obtain this address from your Internet Service Provider. See “Enabling Dial-Up Services” on page 671. Syntax: /etrnhost-address Example: /etrnhost-172.16.5.18 letrngueue Specifies your e-mail domain as provided by your Internet Service Provider. See “Enabling Dial- Up Services” on page 671. Syntax: /etrngueue-email domain Example: /etrnqueue-novell.com Idialuser (Windows Only) Specifies the RAS Security user if you are using a Windows NT Remote Access Server (RAS) and the Internet Agent is not running on the same server as the RAS. Syntax: /dialuser-username Example: /dialuser-rasuser Idialpass (Windows Only) Specifies the RAS Security user’s password if you are using a Windows NT Remote Access Server (RAS) and the Internet Agent is not running on the same server as the RAS. Syntax: /dialpass-password Example: /dialpass-raspassword Timeouts The following switches specify how long SMTP services waits to receive data that it can process. After the time expires, the Internet Agent might give a TCP read/write error. Leave these switches at the default setting unless you are experiencing a problem with communication. /te /td 786 GroupWise 6.5 Administration Guide Itc Itd Ite Itg /tr itt /te /tg /tr /tt Specifies how long the program waits for an SMTP command. The default is 2 minutes. Syntax: /tc-minutes Example: /tc-3 Specifies how long the program waits for data from the receiving host. The default is 5 minutes. Syntax: /td-minutes Example: /td-2 Specifies how long the program waits for the receiving host to establish a connection. The default 1s 5 minutes. Syntax: /te-minutes Example: /te-2 Specifies how long the program waits for the initial greeting from the receiving host. The default is 3 minutes. Syntax: /tg-minutes Example: /tg-2 Specifies how long the program waits for a TCP read. The default is 10 minutes. Syntax: /tr-minutes Example: /tr-2 Specifies how long the program waits for the receiving host to terminate the connection. The default is 5 minutes. Syntax: /tt-minutes Example: /tt-2 Using Internet Agent Startup Switches 787 Relay Host Imh The following switch configures whether or not the Internet Agent uses a relay host. /mh Specifies the IP address or DNS hostname of a relay host that you want the Internet Agent to use for outbound messages. The relay host can be part of your network or can reside at the Internet service provider’s site. This switch is typically used in firewall integration if you want one server, the specified relay host, to route all mail. See “Configuring Basic SMTP/MIME Settings” on page 661. Syntax: /mh-address Example: /mh-151.155.111.11 Host Authentication Iforceinboundauth /forceoutboundauth The Internet Agent supports SMTP host authentication for both inbound and outbound message traffic. The following switches are used with inbound and outbound authentication: /forceinboundauth /forceoutbountauth Ensures that the Internet Agent accepts messages only from remote SMTP hosts that use the AUTH LOGIN authentication method to provide a valid GroupWise user ID and password. The remote SMTP hosts can use any valid GroupWise user ID and password. However, for security reasons, we recommend that you create a dedicated GroupWise user account for remote SMTP host authentication. Syntax: /forceinboundauth Ensures that the Internet Agent sends messages only to remote SMTP hosts that are included in a gwauth.cfg text file. The remote SMTP hosts must support the AUTH LOGIN authentication method. The gwauth.cfg file must reside in the domain\wpgate\gwia directory and use the following format: domain_name authuser authpassword For example: smtp.novell.com remotehost novell You can define multiple hosts in the file. Make sure you include a hard return after the last entry. If you use this switch, you need to include your Internet Agent as an entry in the gwauth.cfg file to enable status messages to be returned to Group Wise users. You can use any GroupWise user ID and password for your Internet Agent’s authentication credentials. However, for security reasons, we recommend that you create a dedicated GroupWise user account for your Internet Agent. 788 GroupWise 6.5 Administration Guide Syntax: /Eorceoutboundauth Using Internet Agent Startup Switches 789 Undeliverable Message Handling Ibadmsg /fut /mudas The following switches determine how the Internet Agent handles undeliverable messages: /badmsg /fut /mudas Specifies where to send problem messages. Problem messages can be placed in the Internet Agent problem directory (gwprob), they can be sent to the postmaster, or they can be sent to both or neither. The values for this switch are move, send, both, and neither. The move option specifies to place problem messages in the gwprob directory for the Internet Agent. The send option specifies to send the message as an attachment to the Internet Agent postmaster defined in ConsoleOne (Internet Agent object > GroupWise > Gateway Administrators). The both option specifies to move the message to gwprob and send it to the postmaster. The neither option specifies to discard problem messages. The default when no switch is specified is move. See “Determining What to Do with Undeliverable Messages” on page 670. Syntax: /badmsg-move | send|both|neither Example: /badmsg-both Forwards undeliverable messages to the host specified. This can be useful if you use UNIX sendmail aliases. See “Determining What to Do with Undeliverable Messages” on page 670. Syntax: /fut-host Example: /fut-novell.com Controls how much of the original message is sent back when a message is undeliverable. By default, only 2 KB of the original message are sent back. The value is specified in KB (8=8KB). See “Determining What to Do with Undeliverable Messages” on page 670. Syntax: /mudas- KB Example: /mudas-16 Mailbomb and Spam Security Multiple unsolicited messages (sometimes called a mailbomb or spam) from the Internet can potentially harm your GroupWise messaging environment. At the least, it can be annoying to your users. You can use the following switches to help protect your GroupWise system from malicious, accidental, and annoying attacks: /mbcount /mbtime /rejbs /xspam /rbl 790 GroupWise 6.5 Administration Guide /mbcount Imbtime Irejbs Ixspam /rbl Sets the number of messages that can be received from a single IP address in a given number of seconds before the Internet Agent denies access to its GroupWise system. It provides a form of system security to protect your system from mailbombs. For example, with /mbcount set to 25 and /mbtime set to 60 seconds, if these limits are exceeded the sender’s IP address are blocked from sending any more messages. The IP address of the sender is also displayed in the Internet Agent console. You can permanently restrict access to your system by that IP address through settings on the Access Control page in ConsoleOne (Internet Agent object > Access Control). By default, the mailbomb feature is turned off. To enable this feature, you must specify a value for mailbomb count and mailbomb time. See “Protecting Against Unidentified Hosts and Mailbombs (Spam)” on page 668. Syntax: /mbcount-number Example: /mbcount-25 Specifies the mailbomb time limit in seconds. This switch works with the /mbcount switch to block access to your GroupWise system from unsolicited inundations of e-mail. The default value is 10 seconds. See “Protecting Against Unidentified Hosts and Mailbombs (Spam)” on page 668. Syntax: /mbtime-seconds Example: /mbtime-60 Prevents delivery of messages if the sender’s host is not authentic. When this switch is used, the Internet Agent refuses messages from a host if a DNS reverse lookup shows that a PTR record does not exist for the IP address of the sender’s host. See “Protecting Against Unidentified Hosts and Mailbombs (Spam)” on page 668. If this switch is not used, the Internet Agent accepts messages from any host, but displays a warning if the initiating host is not authentic. Syntax: /rejbs Flags messages to be handled by the client Junk Mail Handling feature if they contain an x- spamflag=yes in the MIME header. Lets you define the addresses of blacklist sites (free or fee-based) you want the Internet Agent to check for blacklisted hosts. If a host is included in a site’s blacklist, the Internet Agent does not accept messages from it. Syntax: /rbl-blackholes.mail-abuse.org,relays.ordb.org,bl.spamcop.net This switch corresponds to the Blacklist Addresses list (Internet Agent object > Access Control tab > Blacklists page). For details about this setting, see “Real-Time Blacklists” on page 719. Using Internet Agent Startup Switches 791 POP3 Switches Ipop3 There are five optional startup switches that can be used to configure the Internet Agent’s POP3 service: /pop3 /popintruderdetect /popport /popsport /popssl /pt Enables POP3 client access to GroupWise mailboxes through the Internet Agent. See “Enabling POP3/IMAP4 Services” on page 684. Syntax: /pop3 /popintruderdetect /popport Ipopsport Ipopssl Instructs the Internet Agent to log POP e-mail clients in through the POA so that the PO As intruder detection can take effect, if intruder has been configured in ConsoleOne (POA object > Client Access Settings > Intruder Detection). This switch cannot be used with older POAs that do not support intruder detection. Syntax: /popintruderdetect By default, the Internet Agent listens for POP3 connections on port 110. This switch allows you to change the POP3 listen port. Syntax: /popport-port number Example: /popport-111 By default, the Internet Agent listens for secure (SSL) POP3 connections on port 995. This switch allows you to change the POP3 SSL listen port. Syntax: /popsport-port number Example: /popsport-996 Disables, enables, or requires secure (SSL) connections between POP3 clients and the Internet Agent. See “Securing Internet Agent Connections Via SSL” on page 753. Syntax: /popssl-enabled/disabled/required Example: /popssl-required 792 GroupWise 6.5 Administration Guide lpt Option Description enabled The POP3 client determines whether an SSL connection or non-SSL connection is used. By default, the Internet Agent listens for SSL connections on port 995 and non- SSL connections on port 110. You can use the /popsport and /popport switches to change these ports. required The Internet Agent forces SSL connections on port 995 and port 110. Non-SSL connections are denied. You can use the /popsport and /popport switches to change these ports. disabled The Internet Agent listens for connections only on port 110, and the connections are not secure. You can use the /popport switch to change this port. Specifies the maximum number of threads to be used for POP3 connections. The default number is 10. You are limited only by the memory resources of your server. See “Enabling POP3/IMAP4 Services” on page 684. Syntax: /pt-number of threads Example: /pt-15 IMAP4 Switches limap4 limapport There are five optional startup switches that can be used to configure the Internet Agent’s IMAP4 service: /imap4 /imapport /imapreadlimit /imapsport /imapssl /it Enables IMAP4 client access to GroupWise mailboxes through the Internet Agent. See “Enabling POP3/IMAP4 Services” on page 684. Syntax: /imap4 By default, the Internet Agent listens for IMAP4 connections on port 143. This switch allows you to change the IMAP4 listen port. Syntax: /imapport-port number Example: /imapport-144 Using Internet Agent Startup Switches 793 limapreadlimit By default, the Internet Agent downloads a maximum of 5,000 items at a time. This switch allows you to specify, in thousands, the maximum number of items you want the Internet Agent to download. For example, specifying 10 indicates 10,000. Syntax: /imapreadlimit Example: /imapreadlimit-20 limapsport By default, the Internet Agent listens for secure (SSL) IMAP4 connections on port 993. This switch allows you to change the IMAP4 SSL listen port. Syntax: /imapsport-port number Example: /imapsport-994 limapssl Disables, enables, or requires secure (SSL) connections between IMAP4 clients and the Internet Agent. See “Securing Internet Agent Connections Via SSL” on page 753. Syntax: /IMAP4ss1-enabled/disabled| reguired Example: /popssl-required Option Description enabled The IMAP4 client determines whether an SSL connection or non-SSL connection is used. By default, the Internet Agent listens for SSL connections on port 993 and non- SSL connections on port 143. You can use the /imapsport and /imapport switches to change these ports. reguired The Internet Agent forces SSL connections on port 993 and port 143. Non-SSL connections are denied. You can use the /imapsport and /imapport switches to change these ports. disabled The Internet Agent listens for connections only on port 143, and the connections are not secure. You can use the /imapport switch to change this port. lit Specifies the maximum number of threads to be used for IMAP4 connections. The default number is 10. You are limited only by the memory resources of your server. See “Enabling POP3/IMAP4 Services” on page 684. Syntax: /it-number of threads Example: /it-15 794 GroupWise 6.5 Administration Guide HTTP (Web Console) Switches Ihttpport Ihttpuser Ihttppassword Ihttprefresh The following switches enable the HTTP Web console and control its configuration settings. The Web console enables you to monitor the Internet Agent through a Web browser. For more information, see “Monitoring the Internet Agent through the Web Console” on page 742. /httpport /httpuser /httppassword /httprefresh /httpssl Specifies the port where the Internet Agent listens for the Web console. The default port established during installation is 9850. Syntax: /httpport-port number Example: /httpport-9851 By default, any user who knows the Internet Agent’s address and port (/httpport) can use the Web console. This switch adds security to the Web console by forcing users to log into the Web console using the specified username. The /httppassword switch must also be used to establish the user password. Syntax: /httpuser-username Example: /httpuser-gwia The username can be any arbitrary name. Specifies the password that must be supplied along with the username provided by /httpuser. Syntax: /httppassword-password Example: /httppassword-monitor By default, the Internet Agent refreshes the Web console information every 60 seconds. You can use this switch to override the default refresh interval. Syntax: /httprefresh-seconds Example: /httprefresh-120 Using Internet Agent Startup Switches 795 /httpssl Enables the Internet Agent to use a secure connection to a Web browser being used to display the Internet Agent Web console. The Web browser must also be enabled to use SSL; if it is not, a non- secure connection is used. See “Securing Internet Agent Connections Via SSL” on page 753. Syntax: /httpssl SSL Switches Icertfile lkeyfile /keypasswd The Internet Agent can use SSL to enable secure SMTP, POP, IMAP, and HTTP connections. The following switches can be used to 1) specify the server certificate file, key file, and key file password required for SSL and 2) enable or disable SSL for SMTP, POP, IMAP, and HTTP connections. See “Securing Internet Agent Connections Via SSL” on page 753. /certfile /keyfile /keypasswd /smtpssl /httpssl /popssl /imapssl /Idapssl Specifies the server certificate file to use. The file must be in Base64/PEM or PFX format. If the file is not in the same directory as the Internet Agent program, specify the full path. Syntax: /certfile-filename Example: /certfile-\\serverl\sys\serverl.crt Specifies the private key file to use. The key file is required if the certificate file does not contain the key. If the certificate file contains the key, do not use this switch. When specifying a filename, use the full path if the file is not in the same directory as the Internet Agent program. Syntax: /keyfile- filename Example: /keyfile-\\serveri\sys\server1l.key Specifies the private key password. If the key does not require a password, do not use this switch. Syntax: /keypasswd- password Example: /keypasswd-novell 796 GroupWise 6.5 Administration Guide Ismtppssl /httpssl /popssl limapssl Enables the Internet Agent to use a secure connection to other SMTP hosts. The SMTP host must also be enabled to use SSL or TLS (Transport Layer Security); if it is not, a non-secure connection is used. Syntax: /smtppss1 Enables the Internet Agent to use a secure connection to a Web browser being used to display the Internet Agent Web console. The Web browser must also be enabled to use SSL; if it is not, a non- secure connection is used. Syntax: /httpssl Disables, enables, or requires secure (SSL) connections between POP3 clients and the Internet Agent. Syntax: /popssl-enabled/disabled|required Example: /popssl-required Option Description enabled The POP3 client determines whether an SSL connection or non-SSL connection is used. By default, the Internet Agent listens for SSL connections on port 995 and non-SSL connections on port 110. You can use the /popsport and /popport switches to change these ports. required The Internet Agent forces SSL connections on port 995 and port 110. Non-SSL connections are denied. You can use the /popsport and /popport switches to change these ports. disabled The Internet Agent listens for connections only on port 110, and the connections are not secure. You can use the /popport switch to change this port. Disables, enables, or requires secure (SSL) connections between IMAP4 clients and the Internet Agent. Syntax: /IMAP4ss1-enabled/disabled|/ reguired Example: /popssl-required Option Description enabled The IMAP4 client determines whether an SSL connection or non-SSL connection is used. By default, the Internet Agent listens for SSL connections on port 993 and non-SSL connections on port 143. You can use the /imapsport and /imapport switches to change these ports. Using Internet Agent Startup Switches 797 Ildapssi Option Description reguired The Internet Agent forces SSL connections on port 993 and port 143. Non-SSL connections are denied. You can use the /imapsport and /imapport switches to change these ports. disabled The Intemet Agent listens for connections only on port 143, and the connections are not secure. You can use the /imapport switch to change this port. Instructs the Internet Agent to use a secure (SSL) connection with an LDAP server. For more information about why the Internet Agent would need to connect to an LDAP server, see “LDAP Switches” on page 798 Syntax: /ldapssl LDAP Switches The Internet Agent can perform GroupWise authentication of POP3/IMAP4 clients through an LDAP server and can also perform LDAP queries for GroupWise information. see “Enabling LDAP Services” on page 682. The following sections describe the switches required to configure this functionality: + “GroupWise Authentication Switches” on page 798 + “LDAP Query Switches” on page 799 GroupWise Authentication Switches Ildapipaddr When a POP3/IMAP4 user attempts to access a Group Wise mailbox on a post office that has been configured for LDAP authentication, the Internet Agent connects to the post office’s POA, which then connects to the LDAP server so that the LDAP server can authenticate the user. This process works automatically provided that the Internet Agent’s link to the post office is client/ server (meaning that it communicates through TCP/IP to the post office’s POA). If the Internet Agent is using a direct link to the post office directory rather than a client/server link to the post office’s POA, the Internet Agent must communicate directly with the LDAP server rather communicate through the POA. The following switches are used to provide the Internet Agent with the required LDAP server information: /\dapipaddr /\dapport /Idapssl /Idapuser /ldappwd Specifies the IP address of the LDAP server through which Group Wise authentication takes place. Syntax: /ldapipaddr-address 798 GroupWise 6.5 Administration Guide Ildapport IIdapssl Ildapuser Ildappwd Example: /1dapipaddr-123.456.78.90 Specifies the port number being used by the LDAP server. The standard non-SSL LDAP port number is 389. The standard SSL LDAP port number is 636. Syntax: /ldapport-number Example: / Läapport-389 Instructs the Internet Agent to use a secure (SSL) connection with the LDAP server. Syntax: /ldapssl Specifies a user that has rights to the LDAP directory. The user must have at least Read rights. Syntax: /ldapuser-username Example: /1dapuser-1dap Specifies the password of the user specified by the /Idapuser switch. Syntax: /ldapuser-username Example: /1dapuser-1dap LDAP Query Switches Ildap Ildapthrd The Internet Agent can function as an LDAP server, allowing LDAP queries for Group Wise user information contained in the directory. The following switches configure the Internet Agent as an LDAP server. /Idap /Idapthrd /Idapentxt /Idaprefurl /idaprefcntxt /Idapserverport Enables the Internet Agent as an LDAP server. Syntax: /1dap Specifies the maximum number ofthreads the Internet Agent can use for processing LDAP queries. The default is 10. Using Internet Agent Startup Switches 799 Ildapentxt IIdaprefurl Ildaprefcntxt Syntax: /ldapthrd-number Example: /ldapthrd-5 Limits the directory context in which the LDAP server searches. For example, you could limit LDAP searches to a single Novell organization container located under the United States country container. If you restrict the LDAP context, you must make sure that users, when defining the directory in their e-mail client, enter the same context (using the identical text you did) in the Search Base or Search Root field. Syntax: /ldapentxt-"context" Example: /1dapentxt - "O=Novell,C=US" Defines a secondary LDAP server to which you can refer an LDAP query if the query fails to find a user or address in your GroupWise system. For this option to work, the requesting Web browser must be able to track referral URLs. Syntax: /ldaprefurl-url Example: /ldapurl-ldap://ldap.provider.com Limits the directory context in which the secondary (referral) LDAP server searches. Syntax: /ldaprefentxt-"context" Example: /ldaprefcntxt-"O=Novell,C=Us" --Idapserverport (Linux Only) Used to change the LDAP listen port from the default of 389. Log File Switches log The following switches control how the Internet Agent uses the log file. The log file keeps a record ofall Internet Agent activity. See “Using Internet Agent Log Files” on page 746. /log /logdays /loglevel /logmax On NetWare and Windows, the log files are stored in the domain\wpgate\gwia\000.pre directory by default. On Linux, they are stored in /var/log/novell/groupwise/domain_name.gwia by default. The log files are named after the month, day, and log number for that date (mmddgwia.nn).You can use the /log switch to redirect the log files to a different location. 800 GroupWise 6.5 Administration Guide llogdays Iloglevel llogmax Syntax: /log-log file directory Short Syntax: /pl-log file directory NetWare Example: /log-sys:\log\gwia Linux Example: --log /opt/novell/groupwise/agents/log Windows Example: /log-c:\log\gwia By default, log files are deleted after 7 days.This switch overrides the default setting. The range is from 1 to 360 days. Syntax: /logdays-days Short Syntax: /1t-days Example: /logdays-5 Defines the amount of information to record in log files. The values are: + Diag + Verbose + Normal (Default) + Off Syntax: /loglevel-level Short Syntax: /11-level Example: /loglevel-verbose Controls the maximum amount of disk space for all log files. The amount of disk space each log file consumes is added together to determine the total amount of disk space used. When the limit is reached, the Internet Agent overwrites the existing log files, starting with the oldest one. The default is 1 MB. The range is from 256 KB to unlimited size. Use 0 for unlimited disk space. Syntax: /logmax- KB Short Syntax: /1s- KB Example: /logmax-512 Using Internet Agent Startup Switches 801 802 GroupWise 6.5 Administration Guide X i i WebAccess Chapter 57, “Scaling WebAccess,” on page 805 Chapter 58, “Controlling User Access,” on page 819 Chapter 59, “Configuring WebAccess Components,” on page 829 Chapter 60, “Customizing the WebAccess Interface,” on page 873 Chapter 61, “Monitoring WebAccess Operations,” on page 875 Chapter 62, “Securing WebAccess Agent Connections Via SSL,” on page 889 Chapter 63, “Creating a PQA File for the WebAccess Client,” on page 893 Chapter 64, “Using WebAccess Agent Startup Switches,” on page 895 WebAccess 803 804 GroupWise 6.5 Administration Guide Scaling WebAccess If your Group Wise” system is relatively small (one domain and a few post offices) and all post offices reside in the same location, a basic installation of Group Wise WebAccess might very well meet your needs. However, if your Group Wise system is large, spans multiple locations, or requires failover support, you might need to scale your Group Wise WebAccess installation to better meet the reliability, performance, and availability needs of your users. The following sections provide information about the various configurations you can implement and instructions to help you create the configuration you choose: + “WebAccess Configurations” on page 805 + “Installing Additional WebAccess Components” on page 807 + “Configuring Redirection and Failover Support” on page 810 For information about creating a basic GroupWise WebAccess installation, see “Installing GroupWise WebAccess” in the GroupWise 6.5 Installation Guide. WebAccess Configurations A basic installation of GroupWise WebAccess requires the WebAccess Agent and the WebAccess Application, as shown in the following diagram. The WebPublisher Application is also required if you plan to use GroupWise WebPublisher. 138 Web Server with 0 el WebAccess and Agent WebPublisher Applications Post Office Post Office Domain Depending on your needs, it might be necessary for you to add additional WebAccess Agents or to have multiple Web servers running the WebAccess Application and WebPublisher Application. + “Multiple WebAccess Agents” on page 805 + “Multiple WebAccess and WebPublisher Applications” on page 806 Multiple WebAccess Agents GroupWise WebAccess is designed to allow one installation of the WebAccess Application and WebPublisher Application to support multiple WebAccess Agents, as shown in the following diagram. Scaling WebAccess 805 aa" vee a Post Office gent Post Office B Ef BE al Post Office gent Post Office Web Server with a WebAccess and WebPublisher Applications gg" g vee Sa 2 O Post Office sent Post Office B There are various reasons why you might want to add additional WebAccess Agents, including: + Improving reliability: One WebAccess Agent might provide sufficient access and performance, but you want to protect against downtime that would occur if the WebAccess Agent became unavailable due to server failure or some other reason. Installing more than one WebAccess Agent enables you to set up failover support to make your system more reliable. + Improving performance: The WebAccess Agent is designed to be close to the GroupWise databases. It reguires direct access to a domain database and either direct access to post office databases or TCP/IP access to the Post Office Agents. For best performance, you should ensure that the WebAccess Agent is on the same local area network as the domain and post offices it needs access to. For example, in most cases you would not want a WebAccess Agent in Los Angeles accessing a post office in London. + Improving availability: The WebAccess Agent has 12 threads assigned to process user reguests, which means that it can process only 12 reguests at one time regardless of'the number of users logged in. If necessary, you can increase the number of threads allocated to the WebAccess Agent, but each thread requires additional server memory. If you reach a point where WebAccess is unavailable to users because thread utilization is at a peak and all server memory is being used, you might need to have several WebAccess Agents, installed on different network servers, servicing your post offices. For information about changing the number of allocated threads, see “Configuring the WebAccess Agent” on page 829. Multiple WebAccess and WebPublisher Applications As with the WebAccess Agent, you can also install the WebAccess Application and WebPublisher Application to multiple Web servers, as shown in the following diagram. 806 GroupWise 6.5 Administration Guide Web Server with WebAccess and WebPublisher Applications WebAccess “A TE. Post Office Agent Post Office Domain Web Server with WebAccess and WebPublisher Applications Some reasons for wanting to use this type of configuration include: + Enabling WebAccess users on an intranet to access GroupWise through an internal Web server and WebAccess users on the Internet to access Group Wise through an exposed Web server. + Increasing Web server performance by balancing the workload among several Web servers, especially if you are using the Web server for other purposes in addition to Group Wise WebAccess. + Hosting WebAccess (the WebAccess Application) on one Web server for your GroupWise users and WebPublisher (the WebPublisher Application) on another Web server for public Internet use. If necessary, you can use multiple WebAccess Agents in this configuration, as shown below. WebAccess ~g TE. Post Office Agent Post Office Web Server with Domain WebAccess and WebPublisher Applications À > ST EI ra a 8 Fl Post Office E) Agent Post Office Domain Web Server Po WebAccess and J oT WebPublisher Applications Fl vases a Post Office gent Post Office Domain Installing Additional WebAccess Components The following sections assume that you have installed at least one WebAccess Agent and one WebAccess Application (or WebPublisher Application) and now need to install additional agents or applications. + “Installing Additional Components on NetWare or Windows” on page 808 + “Installing Additional Components on Linux” on page 809 Scaling WebAccess 807 Installing Additional Components on NetWare or Windows + “Installing a NetWare or Windows WebAccess Agent” on page 808 + “Installing a NetWare or Windows WebAccess or WebPublisher Application” on page 808 For more information, see “Setting Up GroupWise WebAccess on NetWare or Windows” in the GroupWise 6.5 Installation Guide. Installing a NetWare or Windows WebAccess Agent 1 Insert the Group Wise 6.5 Administrator CD into the CD drive to start the Installation program, click Install Products, click Group Wise WebAccess, then click Install Group Wise WebAccess. Ifthe Installation program does not start automatically, run setup.exe from the root ofthe CD. or If you’ ve already copied the GroupWise WebAccess software to a software distribution directory, run setup.exe from the internet\webacces directory. Click Yes to accept the license agreement and display the Select Components dialog box. Deselect all components except the GroupWise WebAccess Agent, then click Next. Follow the prompts to create the WebAccess Agent’s gateway directory, install the WebAccess Agent software, and create the WebAccess Agent’s object in Novell® eDirectory™. If you are installing to a domain where another WebAccess Agent already exists, you must use a different directory and object name than the one used for the existing WebAccess Agent. When installation is complete, you will need to configure your system so that the WebAccess and WebPublisher Applications know about the WebAccess Agent and can direct the appropriate user requests to it. For information, see “Configuring Redirection and Failover Support” on page 810. Installing a NetWare or Windows WebAccess or WebPublisher Application To install a WebAccess Application or a WebPublisher Application to a web server: 1 Insert the GroupWise Administrator CD into the CD drive to start the installation program, click Install Products, click Groupwise WebAccess, then click Install GroupWise WebAccess. If the installation program does not start automatically, run setup.exe from the root of the CD. or If you’ ve already copied the Groupwise WebAccess software to a software distribution directory, run setup.exe from the internet/webacces directory. Click Yes to accept the license agreement and display the Select Components dialog box. Deselect all components except the GroupWise WebAccess application and/or the Groupwise WebPublisher Application, then click Next. The WebAccess Application and WebPublisher Application must be associated with a WebAccess Agent. For information on configuring a WebAccess or WebPublisher Application to connect to other WebAccess Agents, see “Configuring Redirection and Failover Support” on page 810. 4 Enter the path for the WebAccess Agent’s gateway directory. 5 Follow the prompts to install the files to the web server. Restart the Web server. 808 GroupWise 6.5 Administration Guide Installing Additional Components on Linux + + “Installing a Linux WebAccess Agent” on page 809 “Installing a Linux WebAccess and WebPublisher Application” on page 809 For more information, see “Setting Up Group Wise WebAccess on Linux” in the GroupWise 6.5 Installation Guide. Installing a Linux WebAccess Agent 1 2 og bh © 10 11 Make sure that LDAP is running on your eDirectory server and that it is configured to accept login from the WebAccess Agent Installation program. Open a new terminal window, then enter the following command: xhost + localhost In the same window, become root by entering su and the root password. Change to the root of the GroupWise 6.5 for Linux Administrator CD. Enter ./install. Select the language in which you want to run the Installation Advisor and install the WebAccess software, then click Next. In the Installation Advisor, click Install Products > GroupWise WebAccess > Install WebAccess Agent. When the installation is complete, click OK. Click Configure WebAccess Agent. Follow the prompts to configure the Linux WebAccess Agent. When installation and configuration is complete, you need to configure your Group Wise system so that the WebAccess and WebPublisher Applications know about this instance of the WebAccess Agent and can direct the appropriate user reguests to it. For instructions, see “Configuring Redirection and Failover Support” on page 810. Installing a Linux WebAccess and WebPublisher Application To install a WebAccess Application and a WebPublisher Application to a Web server: 1 2 3 4 5 After installing and configuring the WebAccess Agent, click Install Group Wise WebAccess Application with Apache and Tomcat if you want to create a new installation of Apache and Tomcat for this instance of the WebAccess Application. or If you want to use an existing Apache and Tomcat installations, click Install Group Wise WebAccess Application. When the installation is complete, click OK. Click Configure WebAccess Application. Follow the prompts to configure the Linux WebAccess Application. When the installation and configuration is complete, start or restart the Web server. Scaling WebAccess 809 Configuring Redirection and Failover Support Redirection enables the WebAccess Application to direct user reguests to specific WebAccess Agents. For example, you might want WebAccess Agent 1 to process all reguests from users on Post Office 1 and WebAccess Agent 2 to process all reguests from users on Post Office 2. Failover support enables the WebAccess Application to contact a second WebAccess Agent ifthe first WebAccess Agent is unavailable. For example, if the WebAccess Application receives a user reguest that should be processed by WebAccess Agent 1 butitis unavailable, the WebAccess Application can route the user reguest to WebAccess Agent 2 instead. The following sections provide information to help you successfully configure redirection and failover support: + “How the WebAccess Application Knows Which WebAccess Agents to Use” on page 810 + “Synchronizing the Encryption Key” on page 812 + “Specifying a WebAccess Agent in the WebAccess URL” on page 813 + “Assigning a Default WebAccess Agent to a Post Office” on page 815 + “Assigning a Default WebAccess Agent to a Domain” on page 816 + “Adding WebAccess Agents to the GroupWise Service Provider’s List” on page 817 How the WebAccess Application Knows Which WebAccess Agents to Use To redirect user reguests or to fail over to a second WebAccess Agent, the WebAccess Application needs to know which WebAccess Agents you want it to use. This might be all of the WebAccess Agents in your system, or only specific WebAccess Agents. Each time a user logs in, the WebAccess Application compiles a list, referred to as a redirection/ failover list, of the WebAccess Agents defined in the locations listed below. + The WebAccess URL. The standard URL does not contain a WebAccess Agent, but you can modify the URL to point to a specific agent. + The user’s Post Office object. You can assign a default WebAccess Agent to the post office to handle requests from the post office’s users. + The user’s Domain object. You can assign a default WebAccess Agent to the domain to handle requests from the domain’s users. + The Group WiseProvider object. This is the service provider used by the WebAccess Application to connect to WebAccess Agents. + The commgr.cfg file. This file located in the WebAccess Application’s home directory (novell\webaccess on the Web server or /opt/novell/groupwise/webaccess on Linux). By default, only the GroupWise Provider object and the commgr.cfg file include a WebAccess Agent definition, as shown in the following table: Location WebAccess Agent WebAccess URL No agent defined Post office No agent defined Domain No agent defined 810 GroupWise 6.5 Administration Guide Location WebAccess Agent GroupWise service provider Agent 1 Commar.cfg Agent 1 If no other WebAccess Agents are defined (as is the case by default), the WebAccess Application will direct all user requests to the WebAccess Agent (Agent 1) listed in the commgr.cfg file. This file is located in the WebAccess Application’s home directory on the Web server. The commer.cfg file contains the IP address and encryption key for the WebAccess Agent that was associated with the WebAccess Application during the application’s installation. If Agent 1 is not available, the user will receive an error message and will be unable to log in. Redirection/Failover List: Example 1 Assume that the WebAccess Agents are defined as follows: Location WebAccess Agent WebAccess URL No agent defined Post office Agent 1 Domain Agent 4 GroupWise service provider Agent 2 Agent 3 Commar.cfg Agent 4 Using this information, the WebAccess Application would create the following redirection/ failover list: List Entry Taken From Agent 1 Post office Agent 4 Domain Agent 2 GroupWise service provider Agent 3 GroupWise service provider Because there is no WebAccess Agent defined in the WebAccess URL, the WebAccess Application will redirect the user’s request to the default WebAccess Agent (Agent 1) assigned to the user's post office. If Agent 1 is unavailable, the WebAccess Application will fail over to the domain’s default WebAccess Agent (Agent 4). If Agent 4 is unavailable, the WebAccess Application will fail over to Agent 2 and then Agent 3, both of which are defined in the Group Wise service provider’s list. Scaling WebAccess 811 Redirection/Failover List: Example 2 Assume that the WebAccess Agents are defined as follows: Location WebAccess Agent WebAccess URL No agent defined Post office No agent defined Domain No agent defined GroupWise service provider Agent 1 Agent 2 Agent 3 Commar.cfg Agent 2 Using this information, the WebAccess Application would create the following redirection/ failover list: List Entry Taken From Agent 1 GroupWise service provider Agent 2 GroupWise service provider Agent 3 GroupWise service provider Because there is no WebAccess Agent defined in the WebAccess URL, user's post office, or user's domain, the WebAccess Application will redirect the user's request to the first WebAccess Agent (Agent 1) in the Group Wise service provider’s list. If Agent 1 is unavailable, the WebAccess Application will fail over to Agent 2 and then Agent 3. Synchronizing the Encryption Key Every WebAccess Agent has an encryption key. In order to communicate with a WebAccess Agent, the WebAccess Application must know the agent’s encryption key. The encryption key is randomly generated when the WebAccess Agent object is created in eDirectory, which means that every WebAccess Agent has a unigue encryption key. Ifa WebAccess Application will communicate with more than one WebAccess Agent, all the WebAccess Agents must use the same encryption key. To modify a WebAccess Agents encryption key: 1 In ConsoleOne*, right-click the WebAccess Agent object, then click Properties. 2 Ifnecessary, click the WebAccess tab to display the WebAccess Settings page. 812 GroupWise 6.5 Administration Guide Properties of WEBAC65A xj H WebPublisher | Access Control vl Reattach | Post Office Links | GroupWise v | NDS Rights v | Oth, Maximum Threads: [ 12 $ Encryption Key: 94ta91R173647327761593113163m Page Options... ( Cancel Help 3 Make the encryption key the same as the key for any other WebAccess Agents with which the WebAccess Application communicates. 4 Click OK to save the changes. Specifying a WebAccess Agent in the WebAccess URL To have the WebAccess Application connect to a WebAccess Agent other than the one specified in the commgr.cfg file, you can add the WebAccess Agent's IP address and port number to the URL that calls the WebAccess Application. For example, the default WebAccess Application URL is: NetWare and Windows: http://web_server_ip_address/servlet/webacc Linux: http://web_server_ip_address/gw/webacc This URL causes the WebAccess Application to use the IP address and port number that is listed in the commgr.cfg file. To redirect the WebAccess Application to another WebAccess Agent, you would use the following URLs: NetWare and Windows: http://web_server_ip_address/servlet/webacc 2?GWAP.ip=agent_ip_address&GWAP.port=port_number Linux: http://web_server_ip_address/gw/webacc 2?GWAP.ip=agent_ip_address&GWAP.port=port_number For example: NetWare and Windows: http://151.155.123.45/servlet/webacc ?GWAP.ip=151.155.789.10&GWAP.port=7204 Linux: http://151.155.123.45/gw/webacc ?GWAP.ip=151.155.789.10&GWAP.port=7204 In this example, the WebAccess Application will redirect its requests to the WebAccess Agent at IP address 151.155.789.10 and port number 7204. If the WebAccess Agent is using the same port number that is listed in the commgr.cfg file, you do not need to include the GWAP.port parameter. Or, if the WebAccess Agent is using the same IP address that is listed in the commgr.cfg file, you do not need to include the GWAP.ip parameter. Scaling WebAccess 813 If you want, you can use the WebAccess Agent’s DNS hostname in the URL rather than its IP address. You can also specify the user interface language by adding the &User.lang option. This allows you to bypass the initial WebAccess language page. For example: NetWare and Windows: http://151.155.123.45/servlet/webpub 2GWAP.ip=151.155.789.10£GWAP.port=72048User.lang=en Linux: http://151.155.123.45/gw/webpub 2GWAP.ip=151.155.789.10£GWAP.port=7204%User.lang=en You can use the language codes listed below with the &User.lang parameter in the WebAccess URL. Language Code Language Code Arabic ar Hebrew iw Brazilian Portuguese pt Hungarian hu Chinese Simplified cs Italian it Chinese Traditional ct Japanese jp Czechoslovakian cz Korean kr Danish da Norwegian no Dutch ni Polish pl English us Russian ru Finnish su Spanish es French fr Swedish sv German de You can add the URL to any Web page. For example, if you are using the Web Services page as your initial WebAccess page, you could add the URL to that page. You will need to add one URL for each WebAccess Agent. For example, suppose you had offices in three different locations and installed a WebAccess Agent at each location to service the post offices at those locations. To enable the WebAccess Application to redirect requests to the WebAccess Agent at the appropriate location, you could modify the Web Services page to display a list of the locations. The modified page would include the following HTML code (if WebAccess is running on NetWare or Windows):