Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.
Page 3
Novell Trademarks For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/ trademarks/tmlist.html). Third-Party Materials All third-party trademarks are the property of their respective owners.
Contents About This Guide Part I System 1 GroupWise System Administration 2 ConsoleOne Administration Tool ConsoleOne on Windows........... . . 41 2.1.1 Installing ConsoleOne on Windows .
Page 6
4.7.3 Deleting a Time Zone Definition ........69 External System Synchronization .
Page 7
Controlling Object Visibility........... . 96 Updating Address Book Information .
Page 8
Moving a Domain ............140 Deleting a Domain .
Page 9
12.3.1 Understanding Disk Space Usage and Mailbox Size Limits ....190 12.3.2 Preparing to Implement Disk Space Management ......191 12.3.3 Setting Mailbox Size Limits .
Page 10
14.6.2 Removing a Mailbox Password ........243 14.6.3 Bypassing the GroupWise Password .
Page 11
18.6 Enabling Users to Modify a Distribution List........284 18.7 Deleting a Distribution List .
Page 12
22.3.5 Deciding Where to Store Documents ........323 22.3.6 Setting Document Version Options .
Page 13
Part VIII Databases 25 Understanding GroupWise Databases 25.1 Domain Databases............389 25.2 Post Office Databases .
Page 14
32 Restoring GroupWise Databases from Backup 32.1 Restoring a Domain ............427 32.2 Restoring a Post Office .
Page 15
35.3 Information Stored in the Post Office ......... . . 476 35.3.1 Post Office Database .
Page 31
71.2 Providing Post Office Support for Multiple Languages......1141 72 Tools for Analyzing and Correcting GroupWise Client Problems 1143 72.1 GroupWise Exception Handler for the Windows Client .
Page 32
76 LDAP Directories 1169 76.1 Accessing Public LDAP Directories from GroupWise ......1169 76.2 Offering the GroupWise Address Book as an LDAP Directory.
Page 33
84.2 Securing File System Access..........1205 84.3 Securing Domains and Post Offices .
GroupWise 8 Troubleshooting 3: Message Flow and Directory Structure Novell Support and Knowledgebase (http://www.novell.com/support) To search the GroupWise documentation from the Novell Support Web site, click Advanced Search, select Documentation in the Search In drop-down list, select GroupWise in the Products drop-down list, type the search string, then click Search.
Interoperability Guide GroupWise Client User Guides GroupWise Client Frequently Asked Questions (FAQ) Documentation Conventions In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and items in a cross-reference path. ® A trademark symbol ( , etc.) denotes a Novell trademark.
GroupWise System Administration ® As a GroupWise system administrator, it is your responsibility to keep your GroupWise system running smoothly for your GroupWise users. This GroupWise 8 Administration Guide provides a wealth of information to help you accomplish this task. This System section provides an overview of ®...
IMPORTANT: Because the GroupWise snap-ins to ConsoleOne are required in order to work with GroupWise objects, you cannot use other network management tools, such as Novell iManager, to administer your GroupWise system. Also, you should not use older network management tools, such ®...
2.1.2 Configuring Your Windows Machine for ConsoleOne To ensure GroupWise database integrity across the network: 1 Right-click the Novell Client icon on the tool bar at the bottom of your screen, then click Novell Client Properties. 2 Click Advanced Settings.
After you have set up your GroupWise system, you can use the GroupWise Installation program to the GroupWise snap-ins from the GroupWise 8 DVD or downloaded GroupWise 8 image, or you can install the GroupWise Administration RPM from the subdirectory of the software admin distribution directory to install the snap-ins to additional locations as needed.
From a Windows workstation or server where the Novell client is installed, you can now use the Novell Map Network Drive feature to map a drive to the volume on your Linux server, and Windows-type file locking is respected by Linux.
Page 45
A NetWare server full DNS name should have the format of mail2.provo.corporate.com. A fully qualified username should have the format of Admin.Users.Corporate. A typical Linux mount location would be /mnt. You can also use Novell Remote Manager (NRM) to create the NCP mount. Windows: mount -t smbfs //Windows_server_name_or_IP_address/sharename...
® ® When administering GroupWise in ConsoleOne , you can use the standard Novell eDirectory View or you can use the GroupWise View. The following sections discuss the GroupWise View and how to use it: Section 3.1, “eDirectory View vs. GroupWise View,” on page 47 Section 3.2, “GroupWise Object Icons,”...
GroupWise View Figure 3-2 In the left pane, all Domain objects are displayed under the GroupWise system, and all Post Office objects are subordinate to the domains where they reside. You can select the GroupWise system, a domain, or a post office in the left pane and then use the drop-down list of GroupWise objects on the toolbar to display associated objects (Users, Resources, Message Transfer Agents, and so on) in the right pane.
Page 49
Icon GroupWise Object Additional Information External Domain Represents a domain from another GroupWise system. Non-GroupWise Domain Represents all or part of a non-GroupWise system. Post Office Represents a collection of user accounts (mailboxes). For additional information, see Part III, “Post Offices,” on page 161.
Represents a method of linking to another e-mail system or transport. For additional information, see the GroupWise gateway guides (http://www.novell.com/documentation/ gwgateways). 3.3 Customizing the GroupWise View You can change the column display, order, and width to customize the GroupWise View.
2 If you are changing the Users view, use the drop-down list to select how you want to sort users (ID Sort, User Name Sort, First Name Sort, or Last Name Sort). The Users view allows you to sort by ID, user name, first name, or last name. Each of these is treated as a separate Users view for which you can determine the column display and order.
3.4 Searching in the GroupWise View You can search for a specific entry in a view. The search is performed on the first column. For example, if the Resources view is displayed, you can search for a specific resource based on its object ID.
Page 53
In addition, external objects must be created and managed in the GroupWise View because they are, by definition, external to eDirectory and have no eDirectory context. For example, if you install the GroupWise Internet Agent and want to simplify addressing for your users by adding the Internet as a non-GroupWise domain, you must perform the task in the GroupWise View.
By default, ConsoleOne must be connected to a GroupWise domain in order for you to administer your GroupWise system. Being connected to a GroupWise domain ensures that information is ® replicated not only in Novell eDirectory but also in the GroupWise domain and post office databases.
Page 56
ConsoleOne Window Showing the Domain You Are Connected To Figure 4-1 Some administrative tasks require you to be connected to a specific domain but others do not. In general, operations that create new GroupWise container objects or delete GroupWise container objects require you to be connected to the domain where the object resides.
Domain Connection Options Table 4-1 ConsoleOne Domain Platform Connection Options Platform Windows NetWare server Mapped drive ConsoleOne Linux server Samba mount where the path to the domain on the Linux server is prefixed by the Linux server hostname from the point of view of ConsoleOne Windows server Local drive...
To change the system preferences: 1 In ConsoleOne, click Tools > GroupWise System Operations > System Preferences. The GroupWise System Preferences dialog box contains the following tabs: Admin Preferences: Controls how rights are assigned and what network ID format is used when creating new GroupWise users.
Page 59
If you are not using the driver, you can disable the option to avoid receiving unnecessary messages. For more information, see “GroupWise DirXML Driver for Novell Identity Manager” in the GroupWise 8 Interoperability Guide.
4.2.2 Routing Options 1 In the GroupWise System Preferences dialog box, click the Routing Options tab to modify any of the following options: Default Routing Domain: If a domain’s MTA cannot resolve a message’s address, the message is routed to this default domain’s MTA. The default domain’s MTA can then be configured to handle the undeliverable messages.
Allow External Status Tracking: Select this option to enable users in other GroupWise systems to receive message status information (such as whether a message has been delivered, opened, and so on) when messages arrive in your GroupWise system. 2 Click OK to save the changes. 4.2.4 Nickname Settings 1 In the GroupWise System Preferences...
Default Password for New Users: Specify the default password you want assigned to new GroupWise user accounts. 2 Click OK to save the changes. 4.2.6 Admin Lockout Settings 1 In the GroupWise System Preferences dialog box, click the Admin Lockout Settings tab to modify any of the following options: Restrict System Operations to Primary Domain: Enable this option to allow an administrator to perform system operations (Tools >...
4.2.7 Archive Service Settings 1 In the GroupWise System Preferences dialog box, click the Archive Service Settings tab to select the system default archive service for your GroupWise system. Archive Service Trusted Applications: Lists the instances of your third-party archive service. Select the archive service instance that you want to use as the default for your GroupWise system.
ConsoleOne installation that is not running the GroupWise Administrator snap-in, the user information is not changed in the GroupWise databases. This is also true if you add or modify user information using Novell iManager or older administration tools such as NetWare Administrator.
eDirectory fields that you associate with GroupWise fields here are available for use in all domains throughout your GroupWise system. You can also customize the GroupWise Address Book for individual domains, as described in Section 6.1.1, “Adding eDirectory Fields to the Address Book,”...
All pending operations require confirmation that the operation was either successfully performed or could not be performed. If the operation was successful, the pending operation is removed from the list, the record is marked in the database as Safe, and the record is distributed to all other domains and post offices in your system.
Page 67
2 Select the time zone to modify, then click Edit to display the Edit Time Zone dialog box. 3 Modify any of the following fields: Time Zone Name: Provide a name for the time zone definition (for example, some of the major cities in the time zone).
Last day: First Sunday of November at 2:00 am. Bias: 1 hour 0 minutes 4 Click OK to save the changes. 4.7.2 Adding a Time Zone Definition 1 In ConsoleOne, click Tools > GroupWise System Operations > Time Zones. 2 Click Add to display the Add Time Zone dialog box. 3 Fill in the following fields: Time Zone Name: Provide a name for the time zone definition (for example, some of the major cities in the time zone).
Observe Daylight Saving Time: If the time zone observes daylight saving time, click the Observe Daylight Saving Time box, then fill out the remaining fields: Start Day: Select the day and time that daylight saving time starts. Last Day: Select the day and time that daylight saving time ends. Bias: Select the number of hours and minutes that the clock changes at the daylight saving time start day, such as1 hour or 1 hour 30 minutes.
From this network location, you can distribute the GroupWise client software to users or install additional GroupWise software such as the Message Transfer Agent, Post Office Agent, Internet Agent, WebAccess, and Monitor. When you install GroupWise, one software distribution directory is created automatically. Using Software Directory Management, you can create additional software distribution directories, update existing software distribution directories, or delete existing software distribution directories.
Page 71
4 Fill in the following fields: Name: Specify a name to identify the software distribution directory within your GroupWise system. For example, whenever you create a post office, you associate it with a software distribution directory. The software distribution directory’s name, not its location, appears in the list of directories from which you can select.
Path: If you want to copy software from a location that is not defined as a software distribution directory in your GroupWise system (such as the GroupWise 8 DVD or downloaded GroupWise 8 image), select this option, then browse for and select the correct path.
3 Fill in the following fields: Update by Copying From: Select this option, then choose from the following source locations: Software Distribution Directory: If you want to copy software from an existing software distribution directory, select this option, then select the software distribution directory. All files and subdirectories are copied.
GroupWise system. For information about creating and installing trusted applications, search for GroupWise Trusted Application API at the Novell Developer Kit Web site (http://developer.novell.com/wiki/index.php/ Category:Novell_Developer_Kit). For security guidelines for managing trusted applications, see Section 85.6, “Protecting Trusted Applications,” on page 1209 Section 4.12.1, “Creating a Key for a Trusted Application,”...
GroupWise Trusted Application API (http://developer.novell.com/ wiki/index.php/GroupWise_Trusted_Application_API) at the Novell Developer Kit Web site (http:/ /developer.novell.com/wiki/index.php/Category:Novell_Developer_Kit). Starting with GroupWise 8 Support Pack 1, you can create a trusted application key in ConsoleOne for use with both Linux and Windows trusted applications.
If you want to allow the trusted application to be run from any server, do not specify an IP address or DNS hostname. Requires SSL: Select this option to require a secure (SSL) connection between the trusted application and POAs and Internet Agents. Provides Message Retention Service: Select this option if the purpose of the trusted application is to retain GroupWise user messages by copying them from GroupWise mailboxes into another storage medium.
Page 77
3 Modify the following fields as needed for your trusted application: Name: This field displays the trusted application’s name. You cannot change the name. Description: Specify a description for the trusted application. TCP/IP Address: If you want to restrict the location from which the trusted application can run, specify the IP address of the server from which the application can run.
4.12.3 Deleting a Trusted Application 1 Click Tools > GroupWise System Operations > Trusted Applications to display the Configure Trusted Applications dialog box. 2 In the Trusted Applications list, select the application you want to delete, click Delete, then click Yes to confirm the deletion. 4.13 LDAP Servers The LDAP Servers feature lets you define the LDAP servers you want to use for LDAP authentication to GroupWise mailboxes.
GroupWise Utilities ® ® The GroupWise utilities in ConsoleOne are used to perform various maintenance and configuration tasks for your GroupWise system. The following sections provide information about the system utilities included on the Tools menu (Tools > GroupWise System Utilities): Section 5.1, “Mailbox/Library Maintenance,”...
5.2 System Maintenance You can use the System Maintenance utility to check the integrity of and repair domain and post office databases. For detailed information and instructions, see Chapter 26, “Maintaining Domain and Post Office Databases,” on page 393. 5.3 Backup/Restore Mailbox You can use the Backup/Restore Mailbox utility to restore an individual user’s Mailbox items from a backup copy of the post office database.
5.7 Email Address Lookup You can use the Email Address Lookup utility to search for the GroupWise object (User, Resource, Distribution List) that an e-mail address is associated with. You can then view the object’s information. For more information, see Section 14.7.1, “Ensuring Unique E-Mail Addresses,”...
The GroupWise Import utility reads an ASCII-delimited text file created by the GroupWise Export ® utility or by a third-party export, and creates Novell eDirectory and GroupWise objects with attributes from the file. The Import utility supports most eDirectory classes (including extensions) and GroupWise classes.
Click No if you decide you do not want to be able to create GroupWise objects in the selected tree. If the schema of the tree has already been extended for GroupWise objects, a message notifies you of this and you can immediately create new GroupWise objects in the selected tree. 5.15 Gateway Alias Migration If you have been using SMTP gateway aliases to handle e-mail addresses that do not fit the default format expected by the Internet Agent or to customize users’...
To graft GroupWise objects: 1 In ConsoleOne, select a container in the eDirectory view. 2 Click Tools > GroupWise Utilities > GW / eDirectory Associations > Graft GroupWise Object to display the Graft GroupWise Objects dialog box. 3 Follow the on-screen prompts. If you need information about a dialog box, click the Help button.
The dialog box lists each invalid association for the objects in the selected container. The dialog box fields are described below: Object in Question (Column I): This field lists the eDirectory object that has an invalid association to a GroupWise object. The eDirectory object points to the GroupWise object listed in Column II, but the GroupWise object, according to the GroupWise domain database, does not point back to the eDirectory object.
Page 86
In some circumstances, it is possible for the link between an eDirectory User object and its GroupWise information to be lost. If this occurs, the GroupWise information, which still exists in the GroupWise database, appears as a GroupWise External User object in the GroupWise View. You can use the Associate Objects utility to reassociate the GroupWise information with the eDirectory User object.
If the eDirectory External Entity object is already associated with another GroupWise object, you receive a warning message indicating this. If you continue, the eDirectory External Entity object is associated with the selected GroupWise object and its association with the other GroupWise object is removed.
5.17 Standalone GroupWise Utilities Although ConsoleOne provides the primary administrative tool for managing your GroupWise system, additional standalone utilities are provide to meet specialized needs. These utilities perform tasks that might need to be performed in environments where ConsoleOne is not available. Section 5.17.1, “GroupWise Check Utility (GWCheck),”...
5.17.4 GroupWise Database Copy Utility (DBCOPY) The GroupWise Database Copy utility (DBCOPY) copies files from a live GroupWise system to a static location for backup. During the copy process, DBCOPY prevents the files from being modified, using the same locking mechanism used by other GroupWise programs that access databases.
GroupWise Address Book ® The GroupWise Address Book plays a central role in a GroupWise user’s experience with addressing messages. The default configuration of the GroupWise Address Book is often sufficient for a typical GroupWise system, but a variety of customization options are available to enable the GroupWise Address Book to meet user needs.
Windows Client Linux/Mac Client WebAccess Client First Name NOTE: Address Book fields in the WebAccess client are set permanently and cannot be changed by you or by client users. Windows and Linux/Mac client users can add more columns to their own Address Book. In the client, users right-click the Address Book column header, then select a column from the drop-down list or click More Columns to display a longer list of possible columns.
Book in the GroupWise client. The Available Fields list shows additional predefined GroupWise user fields that can be added ® to the Address Book. Novell eDirectory also includes user information that is not associated to GroupWise user fields. You can use the Map Additional Fields button to map eDirectory user fields to GroupWise fields so that they can be displayed in the GroupWise Address Book.
Page 94
2 Select Public, click Assigned Rights, then click Add Property. In the Add Property dialog box, all capitalized property names sort ahead of all uncapitalized property names. 3 Select Show All Properties, scroll down to locate the property you want to add to the GroupWise Address Book, select the property (for example, Title), then click OK.
4 With the new property highlighted, select Inheritable, then click OK twice to save the new property settings. When you return to the Address Book property page of the Domain object, you can select the new property to display in the GroupWise Address Book, as described in Section 6.1.1, “Adding eDirectory Fields to the Address Book,”...
6.1.5 Removing Fields from the Address Book If there are fields in the Address Book that are not used or that you don’t want displayed to users, you can remove them. On the Address Book page of the Domain object: 1 In the Address Book Fields list, select the field you want to remove, then click the right-arrow to move the field to the Available Fields list.
Domain: The object is visible only in the Address Book of the post offices located in the object’s domain. Post Office: The object is visible only in the Address Book of the object’s post office. This is the default for distribution lists, groups, and organizational roles. None: The object is not visible in the Address Book of any post offices.
6.4 Controlling Users’ Frequent Contacts Address Books By default, e-mail addresses of those to whom users send messages are automatically added to their Frequent Contacts address books. Users can also choose to automatically save e-mail addresses of those from whom they receive messages. You can restrict the types of addresses that users can collect in their Frequent Contacts address books.
6.5 Controlling Address Book Synchronization for Remote Client Users Before GroupWise 7, Remote client users received updated GroupWise Address Books based on the Refresh Address Books and Rules Every nn Days setting under Accounts > Mail > Properties > Advanced. The entire Address Book was downloaded to the Remote client according to the specified schedule.
Remote client users should not deselect Refresh Address Books and Rules Every nn Days because rules are still downloaded according to this schedule. Even if users do not want to download their rules, they still should not deselect this option because it would turn off the Address Book delta sync.
When using wildcard addressing, the sender only sees whether the item was delivered to a domain, post office, or system (by viewing the item’s properties). The properties do not show the individual usernames or additional statuses. Recipients can reply to the sender only. Reply to All is unavailable. Section 6.7.1, “Setting Wildcard Addressing Levels,”...
4 In the Wildcard Addressing list, select from the following options: Not Allowed: Select this option to disable wildcard addressing. Limited to Post Office (Default): Select this option to limit wildcard addressing to the user’s post office. The user can use wildcard addressing to send items to users in his or her post office only.
Wildcard Addressing Setting To send an item to... Type in the To field... All users in your post office Limited to Domain All users in your domain All users in another post office in your *.post_office domain All users in your post office Limited to System All users in your domain All users in another post office in your...
6.8.1 Creating a Non-GroupWise Domain to Represent the Internet ® 1 In ConsoleOne , right-click GroupWise System (in the left pane), then click New > Non- GroupWise Domain. 2 Fill in the fields: Domain Name: Specify a name that has not been used for another domain in your system (for example, Internet).
Page 105
2 If the Internet Agent domain is not the currently displayed domain, select it from the list of domains on the toolbar. The non-GroupWise domain should be displayed in the Direct column. In the graphic displayed under step 1, Internet is the non-GroupWise domain. 3 Double-click the non-GroupWise domain to display the Edit Domain Link dialog box.
When creating a post office to represent an Internet host, the post office name cannot be identical to the hostname because the period that separates the hostname components (for example, novell.com) is not a valid character for post office names. GroupWise reserves the period for its addressing syntax of user_ID.post_office.domain.
2 Fill in the following fields: Post Office Name: Specify a name to associate the post office with the Internet host. Do not use the fully-qualified hostname. Time Zone: Select the time zone in which the Internet host is located. 3 Click OK to create the post office.
2 In the User Name field, specify the exact user portion of the user’s Internet address. If the address is jsmith@novell.com, the portion you would specify is jsmith. 3 Click OK to create the external user. 4 Provide personal information about the external user: 4a Right-click the new External User object.
Page 109
2 Click New to display the New Addressing Rule dialog box. 3 Fill in the following fields: Description: Specify a short description for the rule. The description is what appears when the rule is listed in the Addressing Rules dialog box. Name: Specify the name you want to use for the rule.
6.9.2 Enabling an Addressing Rule After you create an addressing rule, you need to enable it in the domains where you want it applied. 1 In ConsoleOne, right-click the Domain object, then click Properties. 2 Click GroupWise > Addressing Rules. The list displays all addressing rules that have been made available in the system.
Multilingual GroupWise Systems ® GroupWise is a multilingual e-mail product that meets the needs of users around the world. The following sections provide guidance if your GroupWise system includes users that speak a variety of languages: Section 7.1, “Client Languages,” on page 111 Section 7.2, “Administration and Agent Languages,”...
Users should have at least 200 MB available on their workstations to install the GroupWise client software in one language. Users need an additional 20 MB of disk space for each additional language they install. By default, the GroupWise client starts in the language of the operating system, if it is available. If the operating system language is not available, the next default language is English.
The POA also includes language-specific files in all client languages so that information returned from the POA to the GroupWise client, such as message status and undeliverable messages, is displayed in the language of the GroupWise client rather than the language in which the POA interface is being displayed.
Page 114
4 In the MIME Encoding box on the Send Options tab, select the desired default MIME encoding, then click OK to save the setting. GroupWise users can override the default MIME encoding in the GroupWise clients, as described “Changing the MIME Encoding for E-Mail You Send”...
Languages/Alphabets Character Sets Central European Windows 1250* Central European ISO 8859-2 Chinese Simplified GB2312* Chinese Traditional Big 5 Cyrillic KOI8-R* Cyrillic ISO 8859-5 Hebrew Windows 1255* Hebrew ISO 8859-8 Japanese ISO 2022-JP* Japanese Shift-JIS Korean EUC-KR* Thai Windows 874* Turkish Windows 1254* Turkish ISO 8859-9...
Page 116
2 If you receive messages in Arabic, Hebrew, or other complex languages, select Install Files for Complex Script and Right-to-Left Languages. 3 If you receive messages in Chinese, Japanese, or other similar languages, select Install Files for East Asian Languages. 4 Click OK to install the required language files.
Domains Chapter 8, “Creating a New Domain,” on page 119 Chapter 9, “Managing Domains,” on page 135 Chapter 10, “Managing the Links between Domains and Post Offices,” on page 145 Domains...
Creating a New Domain ® As your GroupWise system grows, you might need to add new domains. Section 8.1, “Understanding the Purpose of Domains,” on page 119 Section 8.2, “Planning a New Domain,” on page 120 Section 8.3, “Setting Up the New Domain,” on page 130 Section 8.4, “What’s Next,”...
Messages are moved from user to user through your GroupWise system by the GroupWise agents. As illustrated above, each domain must have a Message Transfer Agent (MTA) running for it. The MTA transfers messages between domains and between post offices in the same domain. Each post office must have at least one Post Office Agent (POA) running for it.
Multiple eDirectory Trees: All of the objects that are logically subordinate to a GroupWise ® domain must be in the same Novell eDirectory tree as the domain. If you have users in other eDirectory trees that need GroupWise accounts, you must create secondary domains and post offices in each tree.
8.2.3 Planning Post Offices in the New Domain Before adding the new domain, you should plan the post offices that you want to belong to the domain. You should consider the following issues when planning post offices. Physical Organization: If your network spans several sites, you might want to create post offices (if not domains) at each physical location.
Page 123
GroupWise Objects Reflect Physical Locations The GroupWise system below focuses on the physical layout of the company. Because most mail traffic is probably generated by users in the same location, the mail traffic across the WAN is minimized. An organizational unit is created for each site. A domain is created under each organizational unit, corresponding to the city.
A GroupWise System with the Domains And Post Offices Grouped with the Servers Figure 8-4 GroupWise Objects Are Located in a Separate GroupWise Container Domains and post offices can also be created in their own organizational unit. Administratively, this approach makes it easier to restrict a GroupWise administrator’s object and property rights to GroupWise objects only.
At sign @ Extended ASCII characters that are graphical or typographical symbols; accented characters in the extended range can be used Backslash \ Parentheses ( ) Braces { } Period . Colon : WORKSHEET Under Item 3: Domain Name, specify the domain name. Under Item 8: Domain Description, provide a description for the new domain.
WORKSHEET Under Item 4: Domain Database Location, enter the full path for the domain directory. 8.2.7 Deciding Where to Install the Agent Software You must run a new instance of the MTA for each new domain. To review the functions of the MTA for the domain, see Section 40.4, “Role of the Message Transfer Agent,”...
Page 127
Agent Software on a Different Server than the Domain and Post Office Figure 8-7 Acct-Dom Dev-Dom Acct-PO1 Dev-PO1 When you run the MTA on a different server from where its directory structures and databases are located, you need to provide adequate access. NetWare: If the NetWare MTA needs direct network access to another NetWare server, you must add the...
Page 128
MTA Access Using TCP/IP Links Figure 8-9 Acct-Dom Dev-Dom Acct-PO1 Dev-PO1 When using TCP/IP links, the MTA does not write message files into message queues in the post office directory structure. Instead, the MTA communicates the information to the POA by way of TCP/IP and then the POA uses its direct network access to write the information.
For more detailed information, see Section 40.7, “Cross-Platform Issues between Domains and Post Offices,” on page 623. 8.2.8 Deciding How to Link the New Domain Domain links tell the MTAs how to route messages between domains. Properly configured links optimize message flow throughout your GroupWise system. For a review of link types, see Section 10.1.1, “Domain-to-Domain Links,”...
8.3 Setting Up the New Domain You should have already reviewed Section 8.2, “Planning a New Domain,” on page 120 and filled Section 8.5, “Domain Worksheet,” on page 133. Complete the following tasks to create the new domain. Section 8.3.1, “Creating the New Domain,” on page 130 Section 8.3.2, “Configuring the MTA for the New Domain,”...
6 Follow the on-screen instructions to define how the new domain links to the existing domain (listed in the Link to Domain field). When you have finished defining the link, ConsoleOne creates the Domain object and displays the domain Identification page. 7 Fill in the fields that have not been filled in for you (worksheet items 8 and 8 Click OK to save the domain information.
3 Specify a description for the MTA. This description displays on the MTA agent console as the MTA runs. 4 Select the platform where the MTA will run (worksheet item 11). 5 If you have multiple domains in your system and want to use TCP/IP to link to the other domains (worksheet item 7), follow the instructions in...
Agent. See “Internet Agent” on page 715. Connecting domains and GroupWise systems using gateways. For a list of gateways, see the GroupWise Gateways Documentation Web site (http://www.novell.com/documentation/ gwgateways). 8.5 Domain Worksheet Use this worksheet as you complete the tasks described in Section 8.2, “Planning a New Domain,”...
Page 134
Item Explanation 8) Domain Description: Enter a description for the domain to help you identify its function in the system. 9) Domain Administrator: Enter the ID of the user or distribution list that will administer this domain. For more information, see Section 8.2.2, “Deciding Who Will Administer the New Domain,”...
Managing Domains ® As your GroupWise system grows and evolves, you might need to perform the following maintenance activities on domains: Section 9.1, “Connecting to a Domain,” on page 135 Section 9.2, “Editing Domain Properties,” on page 135 Section 9.3, “Converting a Secondary Domain to a Primary Domain,” on page 139 Section 9.4, “Moving a Domain,”...
Page 136
3 Click GroupWise > Post Offices to display the Post Offices page. ® All post offices in the domain are listed, no matter where their Novell eDirectory objects are placed in the tree. This is a convenient place to delete post offices from the domain.
Page 137
5 Use this page to configure the Address Book to control how it appears to GroupWise client users in all post offices in the domain. See Section 6.1, “Customizing Address Book Fields,” on page 91 for more information. 6 Click GroupWise > Addressing Rules to display the Addressing Rules page. This page lists all addressing rules that have been set up for the domain.
Page 138
Use this page to override any Internet addressing settings established at the system level. See Section 45, “Configuring Internet Addressing,” on page 717 for more information. 8 Click GroupWise > Default WebAccess to display the Default WebAccess page. Use this page to designate the default WebAccess Agent (gateway) for the domain. See Part XII, “WebAccess,”...
Use this page to control the version of the GroupWise Administrator snap-ins to ConsoleOne that is allowed to access GroupWise databases. See Section 4.2.6, “Admin Lockout Settings,” on page 62 for more information. 10 Click OK to save the new domain settings. 9.3 Converting a Secondary Domain to a Primary Domain You can change which domain is primary if it becomes more convenient to administer the primary...
5 Click Convert Secondary to Primary. 6 Specify the path to the secondary domain database, then click OK. The GroupWise View in ConsoleOne displays the primary domain with a red underscore. 9.4 Moving a Domain You cannot use ConsoleOne to move a Domain object to a different location in the eDirectory tree because it is a container object.
The location change is propagated throughout your GroupWise system. 4 Stop the MTA and any gateways running for the domain. 5 Use with the options to copy the domain directory and database to the new xcopy location. These options re-create the same directory structure even if directories are empty. Example: xcopy domain_directory /s /e destination 6 Give rights to all objects that need to access the domain database.
Page 142
3 Verify that the current directory path displayed on the domain Identification page is correct. 4 Click Post Offices, then move or delete any post offices that belong to this domain. See Section 12.9, “Moving a Post Office,” on page 207 Section 12.10, “Deleting a Post Office,”...
8 Uninstall the MTA software if applicable, as described in the following sections in the GroupWise 8 Installation Guide: “Uninstalling the NetWare GroupWise Agents” “Uninstalling the Linux GroupWise Agents” “Uninstalling the Windows GroupWise Agents” 9.6 Changing MTA Configuration to Meet Domain Needs Because the MTA transfers messages between domains and between post offices in the same domain, it affects the domain itself, local users in post offices belonging to the domain, and users...
Managing the Links between Domains and Post Offices ® When you create a new secondary domain in your GroupWise system or a new post office in a domain, you configure one direct link to connect the new domain or post office to a domain in your GroupWise system.
Page 146
MTA writes message files into the destination domain MTA input queue, which does require disk access by the source MTA in the destination domain. For additional details about the configuration options for direct links, see Section 10.1.3, “Link Protocols for Direct Links,” on page 149.
Page 147
Indirectly Linking Two Domains by Going through a Third Domain Figure 10-3 Domain A UNC Path UNC Path Mapped Drive Mapped Drive TCP/IP TCP/IP Indirect Link Domain B Domain C Star Configuration In a star configuration, one central domain is linked directly to all other domains in the system. All other domains are indirectly linked to each other through the central domain.
Guide. For more information, see the GroupWise Gateways Documentation Web site (http:// www.novell.com/documentation/gwgateways). You cannot locate a post office across a gateway link from its domain. This precludes locating a post office across a modem connection. 10.1.2 Domain-to-Post Office Links Between a domain and its post offices, all links must be direct links.
10.1.3 Link Protocols for Direct Links The link protocol of a direct link between domains determines how the MTAs for the domains communicate with each other across the link. When you create a new domain, you must link it to an existing domain.
Page 150
drive:\domain_directory The source MTA writes message files into its output queue at the location: drive:\domain_directory\wpcsin as input for the destination domain’s MTA. Because drive mappings are changeable, you can move the domain directory structure, map its new location to the original drive letter, and the domain-to- domain link is still intact.
10.2 Using the Link Configuration Tool The Link Configuration tool helps you manage the links between the domains and post offices in your GroupWise system. The following topics help you perform basic link management tasks: Section 10.2.1, “Starting the Link Configuration Tool,” on page 151 Section 10.2.2, “Editing a Domain Link,”...
Button Menu Equivalent Function Help > Help Display online Help for the Link Configuration tool Search > Find Search for a specified domain Double-click object Display details of the selected object View > Domain Links View domain links for the selected domain View >...
Double-click a domain in the Inbound Links list to edit the link from that domain to the selected domain. TIP: You can also open the Edit Domain Link dialog box by dragging a domain from one link type to another. 4 Select the link type.
Page 154
2 In the Domains to Be Linked column, select the source domains whose outgoing links you want to modify. 3 In the Indirect Link Through column, select the intermediate domain through which you want the indirect links to pass. 4 In the Link To column, select one or more destination domains. 5 Click OK.
10.2.4 Editing a Post Office Link After starting the Link Configuration tool: 1 From the drop-down list, select the domain whose post office link you want to edit. 2 Click View > Post Office Links to display post office links. 3 Double-click a post office to edit the link from the domain to the post office.
2 Select a domain in the Indirect links list. 3 Click View > Link Path to see a list of the hops between the two domains. You can also use GroupWise Monitor to trace the path a message would take between two domains. Section 65.3.1, “Link Trace Report,”...
3 If you need to reroute a link, right-click the link, then click Edit to open the Edit Domain Link dialog box and make changes as needed. You can also use GroupWise Monitor to check the links passing through a selected domain. See Section 65.3.2, “Link Configuration Report,”...
3 If you need to reroute a link, right-click the link, then click Edit to open the Edit Domain Link dialog box and make changes as needed. 10.2.8 Saving and Synchronizing Link Configuration Information Whenever you modify link configuration information, a cautionary symbol (see Section 10.3.2, “Link Status Symbols,”...
Link Type Meaning Symbol TCP/IP link to domain TCP/IP link to post office Undefined link 10.3.2 Link Status Symbols Link Status Meaning Symbol Link modification not yet saved Link modification not yet synchronized Insufficient rights to modify link Rights not yet checked 10.4 Modifying Links “Post Office Agent”...
Creating a New Post Office ® As your GroupWise system grows, you typically need to add new post offices. Section 11.1, “Understanding the Purpose of Post Offices,” on page 163 Section 11.2, “Planning a New Post Office,” on page 164 Section 11.3, “Setting Up the New Post Office,”...
Physically, a post office consists of a set of directories that house all the information stored in the post office. To view the structure of the post office directory, see “Post Office Directory” in GroupWise 8 Troubleshooting 3: Message Flow and Directory Structure.
11.2.2 Selecting the Domain That the Post Office Will Belong A post office is associated with a specific domain, even though it might reside in a different ® organizational unit in the Novell eDirectory tree. If you have just one domain, the new post office will belong to it.
In a multiple post office system, the domain organizes post offices into a logical grouping for addressing and routing purposes. Each user in the domain has a GroupWise address that consists of the user’s GroupWise ID, the post office name, the GroupWise domain name, and optionally, an Internet domain name.
Page 167
GroupWise Objects Reflect Company Organization The following GroupWise system focuses on departmental organization, as does the eDirectory tree. GroupWise domains and post offices parallel eDirectory organizational units, placing the domains and post offices within the organizational units containing the users that belong to them. A GroupWise System Following the Departmental Organization of the Company Figure 11-3 GroupWise Objects Are Grouped with Servers...
GroupWise Objects Located in Their Own Organizational Unit Figure 11-5 11.2.4 Choosing the Post Office Name The post office must be given a unique name. The name is used for addressing and routing purposes within GroupWise, and might appear in the GroupWise Address Book. The post office name can reflect a location, organization, department, and so on.
Page 169
located on any platform that a POA running on a supported platform could access successfully. The server where you create the post office directory structure can be in the same tree as the Post Office object or in another tree. Databases and directories in the post office are updated as messages are sent.
11.2.6 Deciding Where to Install the Agent Software You must run a new instance of the POA for each new post office. To review the functions of the POA for the post office, see Section 35.5, “Role of the Post Office Agent,” on page 481.
Page 171
When you run the POA on a different server from where its directory structure and databases are located, you need to provide adequate access. ® NetWare: If the NetWare POA needs direct network access to another NetWare server where the post office is located, you must add the switch or the /user...
When using TCP/IP links, the MTA does not write message files into message queues in the post office directory structure. Instead, the MTA communicates the information to the POA by way of TCP/IP and then the POA uses its direct network access to write the information. Cross-Platform Issues In most cases, it is most efficient if you match the POA platform with the network operating system where the post office resides.
WORKSHEET Under Item 13: Link to Domain, indicate the type of link you plan to set up between the new post office and its domain. 11.2.8 Selecting the Post Office Language The post office language determines the sort order for items in the GroupWise Address Book. The post office defaults to the same language as its domain unless you specify otherwise.
11.2.11 Selecting a Post Office Security Level Post office security settings affect two types of GroupWise users: Users who do not set passwords on their mailboxes Users who use LDAP passwords instead of GroupWise passwords to access their mailboxes After a user sets a GroupWise password on his or her mailbox, the post office security level no longer applies.
11.3 Setting Up the New Post Office You should have already reviewed Section 11.2, “Planning a New Post Office,” on page 164 filled out Section 11.5, “Post Office Worksheet,” on page 179. Complete the following tasks to create a new post office. Section 11.3.1, “Creating the New Post Office,”...
Page 176
5 Follow the on-screen instructions to define how the post office links to its domain. When you finish defining the link, ConsoleOne creates the Post Office object and displays the post office Identification page. 6 Fill in the Description field (worksheet item 7 Click GroupWise >...
Page 177
8 Select the software distribution directory for the post office (worksheet item 9 If the POA will run on a different server from where the post office directory, a library, or a document storage area is located, provide a username and password that enables the POA to access the remote location (worksheet item 11).
11.3.2 Configuring the POA for the New Post Office Although there are many POA settings, the default settings are sufficient to get your post office operational. However, there are a few important settings that you can conveniently modify before you install the agent software. 1 In ConsoleOne, double-click the new Post Office object.
11.3.4 Setting Up User Access to the New Post Office The post office access mode determines how GroupWise client users access their mailboxes. By default, the GroupWise Windows and Linux/Mac clients use client/server access to the post office. Client/server access provides the following benefits: Client/server access provides the greatest level of security.
Page 180
Item Explanation 1) eDirectory Container Specify the name of the eDirectory container where you plan to create the new post office. For more information, see Section 11.2.3, “Determining the Context for the Post Office Object,” on page 166. 2) Post Office Name Specify a name for the new post office.
Page 181
Item Explanation 11) Agent Location Mark the location of the POA relative to the post office. If the POA will run on a different server from where the post office, a library, POA on the same or a document storage area is located, provide a username and password server as the post to enable the POA to access the remote location.
Managing Post Offices ® As your GroupWise system grows and evolves, you might need to perform the following maintenance activities on post offices: Section 12.1, “Connecting to the Domain That Owns a Post Office,” on page 183 Section 12.2, “Editing Post Office Properties,” on page 184 Section 12.3, “Managing Disk Space Usage in the Post Office,”...
The domain marked with the red underscore is the primary domain. For a discussion of cross-platform connection issues, see Section 4.1, “Select Domain,” on page 12.2 Editing Post Office Properties After creating a post office, you can change some post office properties. Other post office properties cannot be changed.
Page 185
These post office settings are discussed in the following sections: Section 11.2.10, “Selecting a Software Distribution Directory,” on page 173 Section 11.3.4, “Setting Up User Access to the New Post Office,” on page 179 4 Click GroupWise > Client Access Settings to display the Client Access Settings page. The client access settings are discussed in the following sections: Section 12.6, “Tracking and Restricting Client Access to the Post Office,”...
Page 186
® All users in the post office are listed, no matter where their Novell eDirectory objects are located in the tree. Here you can add, delete, and move users in the post office. See “Users” on page 211. 6 Click GroupWise > Resources to display the Resources page.
Page 187
All distribution lists in the post office are listed, no matter where their eDirectory objects are located in the tree. This is a convenient place to delete distribution lists from the post office. “Distribution Lists, Groups, and Organizational Roles” on page 275.
Page 188
You need to set up aliases for a post office only if you are using GroupWise gateways. For a list of gateways, see the GroupWise Gateways Documentation Web site (http://www.novell.com/ documentation/gwgateways). 10 Click GroupWise > Internet Addressing to display the Internet Addressing page.
Page 189
For instructions on setting the security level for the post office, see Section 11.2.11, “Selecting a Post Office Security Level,” on page 174. 12 Click GroupWise > Default WebAccess to display the Default WebAccess page. Use this page to designate the default WebAccess gateway for the post office. See “WebAccess”...
12.3 Managing Disk Space Usage in the Post Office Many users are prone to save every message and attachment they ever receive. You can moderate this behavior by implementing disk space management: Section 12.3.1, “Understanding Disk Space Usage and Mailbox Size Limits,” on page 190 Section 12.3.2, “Preparing to Implement Disk Space Management,”...
The following factors influence physical disk space usage: In a typical post office, 85% of disk space is occupied by attachments in the offiles directory structure. As mentioned above, attachments are compressed by 40% to allow more data to be stored in less space.
3 In the GroupWise Objects field, select Post Offices. 4 In the Action field, select Analyze/Fix Databases. 5 As options to the action, select Contents, Fix Problems, and Update User Disk Space Totals. Make sure all other options are deselected. 6 On the Databases tab, select User.
Page 193
established limit cannot send messages until the size of their mailboxes is reduced. Users might want to manually delete and archive items in advance in order to avoid this interruption in their use of GroupWise. To establish mailbox size limits: 1 In ConsoleOne, browse to and select a Domain, Post Office, or User object.
After a user receives a warning message, he or she can continue to send messages until the size limit is reached. After the size limit is reached, users must reduce the size of their mailboxes in order to send additional messages. 7 Optionally, specify in kilobytes the largest message that users can send.
3 In the Action field, select Expire/Reduce. 4 Set the Expire and Reduce options as desired, making sure that Reduce Mailbox to Limited Size is selected. 5 Click Run, then click OK to acknowledge that the Mailbox/Library Maintenance task has been sent to the POA.
Page 196
Within the Post Office You can use Client Options to restrict the size of messages that users can send within their local post office. 1 In ConsoleOne, browse to and select a Domain, Post Office, or User object. 2 Click Tools > GroupWise Utilities > Client Options. 3 Click Send >...
Between Domains You can configure the MTA to restrict the size of messages that it allows to pass outside the local domain. See Section 41.2.1, “Restricting Message Size between Domains,” on page 642 for setup instructions. Between Your GroupWise System and the Internet You can configure the Internet Agent to restrict the size of messages that it allows to pass to and from your GroupWise system by setting the size limits in a customized class of service.
Page 198
4 Click Create to create a new scheduled event to handle an unacceptably low disk space condition. 5 Type a unique name for the new scheduled event, then select Disk Check as the event type. 6 In the Trigger Actions At field, specify the amount of free post office disk space at which to take preventive measures.
Page 199
10 In the Stop Mail Processing At field, specify the amount of free post office disk space at which you want the POA to stop processing messages. 11 Click OK to create the new disk space management event and return to the Scheduled Events page.
12.3.7 An Alternative to Disk Space Management in the Post Office If you want to place more responsibility for disk space management onto GroupWise client users, you can require that they run the client in Caching mode, where all messages can be stored on user workstations, or other personal locations, rather than in the post office.
4 In the Client Login Mode box, select Force Use of Caching Mode. 5 Click OK, then click Close to save the Caching mode setting. If you are helping existing users, who might have sizeable mailboxes, to start using Caching mode exclusively, you can configure the POA to respond efficiently when multiple users need to download their entire mailboxes for the first time.
Page 202
A mailbox is considered inactive for licensing purposes even if its owner has performed one or more of the following actions (or similar actions): Starting and stopping the GroupWise client without doing anything in the mailbox Making changes under Tools > Options Creating, modifying, or deleting rules Granting proxy access so that a user other than the mailbox owner is performing tasks that would otherwise indicate an active mailbox...
Page 203
4 In the Show Accounts without Activity for nn Days field, select the number of days you want to use for the inactivity report. The Mailbox/Library Maintenance program uses the default setting (60 days) to flag all mailboxes that have not had any activity within the last 60 days. Select a different number to change the time period of the log you generate for the audit report.
12.5 Viewing Current Client Usage in the Post Office ConsoleOne can display the number of users who are using the Windows client, the Linux client, and the Mac client. The client version is also displayed. 1 In ConsoleOne, select a Post Office object, a Domain object, or the GroupWise System object. 2 Click Tools >...
3 Fill in the following fields: Minimum Client Release Version: Specify the version to use as the post office’s preferred GroupWise client version. Any version that does not match the preferred version is highlighted on the POA Web console’s C/S Users page. Older versions are shown in red, and newer versions are shown in blue.
2 Select Refresh Views, click Run, click Yes, then click OK. The POA then retrieves the latest view files from the software distribution directory associated with the selected post office. IMPORTANT: If you have created custom view files with the same names as standard view files, they will be overwritten when the post office view files are refreshed from the software distribution directory.
3 Select Disable Logins, then click OK to disable the post office. 4 To re-enable logins, deselect Disable Logins so that it is blank. 12.9 Moving a Post Office You cannot move a Post Office object in ConsoleOne because it is a container object. Only leaf objects can be moved.
Example: xcopy post_office_directory /s /e destination 7 Give rights to objects that need to access the post office database. ® For example, if the new location is on a different server, the NetWare POA and GroupWise administrators who run ConsoleOne need adequate rights to the new location, as described in Chapter 79, “GroupWise Administrator Rights,”...
5 Click GroupWise > Libraries, then delete any libraries that still belong to the post office. See Section 22.6.7, “Deleting a Library,” on page 346. 6 Click OK to perform the deletions. It is easy to perform such deletions in the GroupWise View. Select the Post Office object in the GroupWise View, then use the drop-down list of objects to display objects of each type that still belong to the post office.
GroupWise system by providing the user with a GroupWise user ID and GroupWise mailbox. ® You can give GroupWise accounts to Novell eDirectory users during or after their creation in eDirectory. You can also give GroupWise accounts to users who do not have eDirectory accounts.
13.2 Creating GroupWise Accounts for eDirectory Users Depending on your needs, you can choose from the following methods to create GroupWise accounts for eDirectory users: Creating a Single GroupWise Account: You can create a GroupWise account for a single eDirectory user by editing the GroupWise information on his or her User object. This method lets you create the GroupWise account on any post office, select the GroupWise user ID, and configure optional GroupWise information.
Page 215
For more information about gateway accounting, see your GroupWise gateway documentation (http://www.novell.com/documentation/gwgateways). File ID: This three-letter ID is randomly generated and is non-editable. It is used for various internal purposes within the GroupWise system, including ensuring that files associated with the user have unique names.
Section 36.3.4, “Providing LDAP Authentication for GroupWise Users,” on page 514, and if the LDAP server is not a Novell LDAP server. If this is the case, specify the user’s LDAP authentication ID. Restore Area: This field applies only if you are using the GroupWise backup and restore features.
Page 217
To create GroupWise accounts for multiple eDirectory users: 1 In ConsoleOne, right-click the Post Office object, then click Properties. 2 Click GroupWise > Membership to display the Membership page. 3 Click Add, select the eDirectory user you want to add to the post office, then click OK to add the user to the post office’s membership list.
5 When finished, click OK to save the changes. 13.2.3 Using a Template to Create GroupWise Accounts If you frequently create new users, you might want to create Template objects with the necessary GroupWise properties. This makes creating a new eDirectory user with GroupWise access a one- step process.
ASCII-delimited text file created by the GroupWise Export utility or by a third-party export, and creates Novell eDirectory and GroupWise objects with attributes from the file. The Import utility supports most eDirectory classes (including extensions) and GroupWise classes. You can specify the delimiters, eDirectory contexts, and file field positions to use during import.
Page 220
Import/Export utility from TID 2960897 in the Novell Support Knowledgebase (http:/ /www.novell.com/support). To install the Import/Export utility, follow the instructions provided with the download. After you have installed the Import/Export utility, the Import and Export menu items appear under Tools > GroupWise Utilities in ConsoleOne.
Page 221
GroupWise Class: Select this option to import objects belonging to a GroupWise class not represented in eDirectory. Choose external user, external domain, external post office, > Document-Version, or Lookup Entry from the list Parent: If you are importing objects that belong to a GroupWise-related eDirectory class or a GroupWise-only class, the parent attribute is required unless: The class is the eDirectory User class, in which case the object can be optionally associated with GroupWise by specifying a value here.
Page 222
IMPORTANT: The Export utility is not included on the GroupWise DVD. You can download the Import/Export utility from TID 2960897 in the Novell Support Knowledgebase (http:// www.novell.com/support). To install the Import/Export utility, follow the instructions provided with the download. The Import/Export utility is not available for use on Linux. To export objects from GroupWise: 1 In ConsoleOne, select the eDirectory tree that contains the GroupWise objects you want to export, click Tools >...
Page 223
2 If you have previously defined and saved a configuration, click Load to fill in the fields from the configuration file, then click Run to perform the export. Fill in the fields in the Export dialog box. NDS/GroupWise Class: Select this option to export objects belonging to an eDirectory class or to a GroupWise-related eDirectory class.
Delimiters: Accept the defaults shown or change the delimiters. For more information, see “Delimiters” on page 222. 3 Click Run to perform the export. 13.3 Creating GroupWise Accounts for Non- eDirectory Users If you have users who do not have eDirectory accounts, you can still assign them GroupWise accounts by defining them as GroupWise external entities in eDirectory.
External Network ID: Specify the user’s network ID for the network that he or she logs in to. 4 Select Define Additional Properties, then click OK to display the GroupWise Identification page. 5 If desired, fill in any of the fields on the Identification page. This information appears in the GroupWise Address Book, as described in Section 6.1, “Customizing Address Book Fields,”...
Click Help to learn to perform common GroupWise tasks. Click Help > What’s New in GroupWise 8 to learn about the latest new GroupWise features. Click Help > Novell GroupWise 8 Documentation Web Site to access the GroupWise 8 WebAccess Client User Guide.
Managing GroupWise Accounts and Users ® As your GroupWise system grows, you will need to add users and manage their GroupWise accounts. Section 14.1, “Adding a User to a Distribution List,” on page 227 Section 14.2, “Allowing Users to Modify Distribution Lists,” on page 228 Section 14.3, “Adding a Global Signature to Users’...
3 Click Add, select the distribution list that you want to add the user to, then click OK. By default, the user is added as a primary recipient (To recipient). 4 If you want to change the resource’s recipient type, select the distribution list, click Participation, then click To, CC, or BC.
14.3 Adding a Global Signature to Users’ Messages You can build a list of globally available signatures to be automatically appended to messages sent by GroupWise client users. Global signatures are created in HTML format. For users who prefer the Plain Text compose view in the GroupWise client, a plain text version of the signature is appended instead of the HTML version.
3 Specify a descriptive name for the signature. 4 Compose the signature using the using the basic HTML editing tools provided, then click OK to add the new signature to the list in the Global Signatures dialog box. 5 If you want to check or edit the text version of the signature that was automatically generated: 5a Select the new signature, then click Edit.
3 Under Default Global Signature to Insert in Outbound Messages, select Override, then select the global signature that you want this Internet Agent to append to messages. 4 Click OK to save the setting. 14.3.4 Assigning Global Signatures to Windows Client Users For Windows client users, you can assign different global signatures to different sets of users by domain, post office, and individual user.
GroupWise accounts from one post office to another. When you move a GroupWise account, the user’s mailbox is physically moved from one post office ® directory to another. The user’s Novell eDirectory object, including the GroupWise account information, remains in the same eDirectory container.
Section 14.4.2, “Moves Between GroupWise 6.x or Later Post Offices,” on page 233 Section 14.4.3, “Moves Between GroupWise 6.x or Later and GroupWise 5.x Post Offices,” on page 233 Section 14.4.4, “Preparing for a User Move,” on page 234 Section 14.4.5, “Moving a GroupWise Account to Another Post Office in the Same eDirectory Tree,”...
Shared folders and personal address books received from others are no longer available. They must be shared again. Proxy rights to other mailboxes are lost. The rights must be reestablished. Folders’ sort order and column settings are lost. They must be reset. Query folders no longer work.
(Optional) To reduce the number of mailbox items that must be moved, consider asking the user to clean up his or her mailbox by deleting or archiving items. (Optional) Have the user exit the GroupWise client and GroupWise Notify before you initiate the move.
Resolving Addressing Issues Caused By Moving an Account The user’s new address information is immediately replicated to each post office throughout your system so that the GroupWise Address Book contains the user’s updated address. Any user who selects the moved user from the GroupWise Address Book can successfully send messages to the user.
Page 237
4 Select a new owner for the resource, then click OK. 5 Keep track of the user move process by using the User Move utility to determine when the user has been successfully moved. See Section 14.4.7, “Monitoring User Move Status,” on page 238.
However, some users might have the moved user’s old address (GroupWise user ID) in their Frequent Contacts Address Book. In this case, if the sender types the moved user’s name in the To field instead of selecting it from the Address Book, GroupWise uses the old address stored in the Frequent Contacts Address Book instead of the new address in the GroupWise Address Book.
Page 239
3 To restrict the number of users and resources in the list, type distinguishing information in any of the Filter fields, then press Enter to filter the list. 4 During the move, click Refresh to update the status information. IMPORTANT: The list does not refresh automatically. During the move, you might observe some of the following statuses: Destination post office updated: The destination POA has updated the destination post office database with the user’s account information.
Page 240
The User Move Status utility cannot gather status information for destination post offices that are running POAs older than GroupWise 6.5. Status information for users moving to older post offices displays as Unavailable. 5 If something disrupts the user move process, select the problem user or resource, then click Retry/Restart.
You can determine the record type (item, folder, Address Book contact, and so on), the item type (mail, appointment, task, and so on), how old the item is, the sender of the item, and the Subject line of the item. Not all columns in the Pending Items dialog box apply to all record types and item types, so some columns might be empty.
However, some users might have the user’s old address (GroupWise user ID) in their Frequent Contacts Address Books. In this case, if the sender types the renamed user’s name in the To field instead of selecting it from the Address Book, GroupWise uses the old address stored in the Frequent Contacts Address Book instead of the new address in the GroupWise Address Book.
3 Click Change GroupWise Password to display the Security Options dialog box. 4 Enter and reenter a new password. 5 Click OK. 14.6.2 Removing a Mailbox Password If you want to remove a user’s mailbox password but not assign a new password, you can clear the password.
3 Click Change GroupWise Password to display the Security Options dialog box. 4 Select the Clear User’s Password option. 5 Click OK. NOTE: A mailbox with no password cannot be accessed using the WebAccess client. 14.6.3 Bypassing the GroupWise Password By default, if a user must enter a password when logging in to GroupWise, he or she is prompted for the password.
Page 245
As shown in the table, these options appear only if certain conditions are met, such as the user running on a Windows 95/98 workstation or having Novell Single Sign-on or SecureLogin installed. If you don’t want the option available to users even if the condition is met, you can disable the option.
Section 11.2.11, “Selecting a Post Office Security Level,” on page 174. 6 Deselect Allow Novell Single Sign-on if you don’t want Single Sign-on or SecureLogin users to be able to use the GroupWise client’s Use Novell Single Sign-on option. 7 Select Use Collaboration Single Sign-On (CASA) if you want users of Novell collaboration products (GroupWise, Messenger, iFolder, and iPrint) to be able to use the same password for all collaboration products.
Email Address Lookup dialog box. 2 In the Email Address field, specify the e-mail address. You can specify the user ID only (for example, jsmith) or the entire address (for example, jsmith@novell.com). 3 Click Search. All objects whose e-mail address match the one you specified are displayed.
Page 248
For example, using John Peterson as the user, Research as the post office, and novell.com as the Internet domain, if you select all five formats, John Peterson would receive messages sent using any of the following addresses: jpeterson.research@novell.com...
Internet Domain Name: The Internet domain name, along with the preferred address format, is used when constructing the e-mail address that is displayed in the GroupWise Address Book and in the To field of sent messages. Only the Internet domain names that have been defined are displayed in the list. Internet domain names must be defined at the system level (Tools >...
3 In the Visibility field, select the desired visibility level. System (Default): All users in your GroupWise system can see the user’s information in the Address Book. Domain: Only users in the same domain as the user can see the user’s information in the Address Book.
Page 251
3 Click Add to display the Create Nickname dialog box. 4 Fill in the following fields: Domain.PO: Select the post office where you want to assign the nickname. This can be any post office in your GroupWise system; it does not have to be the user’s post office. Object ID: Specify the name to use as the user_ID portion of the nickname.
Given Name: Specify the user’s given (first) name. Last Name: Specify the user’s last name. Expiration Date: If you want the nickname to be removed by the Expire Records feature after a certain date, as described in Section 14.10.3, “Managing Expired or Expiring GroupWise Accounts,”...
3 Select Disable Logins, then click OK. 4 To enable the user’s account when access is again permitted, deselect Disable Logins, then click OK. While a user’s account is disabled, other users to whom proxy rights have been granted can still access the mailbox.
Page 254
5 In the GroupWise Account box, select Delete. 6 In the eDirectory Account box, deselect Delete. 7 Click OK to delete the eDirectory user’s GroupWise account. If you selected multiple User objects, click OK to All to apply the same deletion options to all accounts.
Ensuring that a User’s Library Documents Remain Accessible When you delete a user’s GroupWise account, GroupWise does not delete any library documents to which the user has Author or Creator status. These documents remain in the library as “orphaned” documents, meaning that no one can access the documents. If you or other users need access to the documents, you have the following choices: Rather than deleting the user, change the user’s GroupWise mailbox password so that he or she can’t log in.
4 In the Expiration Date field, select the Enable check box to turn on the option. 5 If you want the account to expire immediately, leave the date and time set to the current date and time. If you want the account to expire at a later date, select the desired date and time. 6 Click OK.
Page 257
3 To change the date in the Expired As Of field, click View Date. 4 Click the calendar icon, select the desired date and time, then click OK. For example, in the dialog box shown above, the current date is 1/18/2009 (January 1, 2009). To see what accounts will expire by June 30, 2009, you would change the Expired As Of date to 6/30/2009.
Page 258
3 In the Expiration Date field, deselect the Enable check box to turn off the option. 4 Click OK. 258 GroupWise 8 Administration Guide...
Section 15.1.4, “Resource Owners,” on page 262 15.1.1 Resource Objects ® Each resource you want to make available must be added as a Resource object in Novell eDirectory . The name that you give the Resource object becomes the name by which the resource is displayed in the GroupWise Address Book.
Even though a resource is assigned to a single post office, all users in your GroupWise system can schedule the resource. Resources can receive all item types (mail messages, phone messages, appointments, tasks, and notes). Generally, if your purpose in defining resources is to allow them to be scheduled through GroupWise, they only receive appointments.
Page 263
Resource Name: Specify a descriptive name. Because the name is used as part of the resource’s GroupWise address, do not use any of the following invalid characters in the resource name: ASCII characters 0-31 Comma , Asterisk * Double quote " At sign @ Extended ASCII characters that are graphical or typographical symbols;...
Page 264
resource to not be visible at any level. However, even if the resource is not displayed in a user’s Address Book, he or she can schedule the resource by typing the resource name in an appointment’s To field. Resource Type: You can identify the resource as a general resource or as a place. When a user schedules a resource that is defined as a place, the resource description is automatically added to the Place field in the appointment.
Managing Resources ® The following sections provide information to help you manage the resources in your GroupWise system: Section 16.1, “Changing a Resource’s Owner,” on page 265 Section 16.2, “Adding a Resource to a Distribution List,” on page 266 Section 16.3, “Moving a Resource,” on page 267 Section 16.4, “Renaming a Resource,”...
3 Click OK to save your changes. 16.2 Adding a Resource to a Distribution List Just like users, resources can be added to distribution lists. 1 In ConsoleOne, right-click the Resource object, then click Properties. 2 Click GroupWise > Distribution Lists to display the Distribution Lists page. 3 Click Add, select the distribution list that you want to add the resource to, then click OK.
By default, the resource is added as a primary recipient (To recipient). 4 If you want to change the resource’s recipient type, select the distribution list, click Participation, then click To, CC, or BC. 5 Click OK to save your changes. 16.3 Moving a Resource If necessary, you can move a resource from one post office to another.
2 Select the post office to which you want to move the resource, then click OK to display the Choose New Owner dialog box. 3 Select the user who will be the resource’s owner, then click OK to move the resource. 16.4 Renaming a Resource Situations might arise where you need to give a resource a new name.
The formats that include first name, last name, and first initial are not valid. For example, using R1 as the resource ID, Research as the post office, and novell.com as the Internet domain, if you select the two valid formats, the resource receives messages sent using either of the following addresses: r1.research@novell.com...
Internet Domain Name: The Internet domain name, along with the preferred address format, is used when constructing the e-mail address that is displayed in the GroupWise Address Book and in the To field of sent messages. Only the Internet domain names that have been defined are displayed in the list. Internet domain names must be defined at the system level (Tools >...
2 In the Visibility field, select the desired visibility level. System: The resource is displayed in the Address Books of all users in your GroupWise system. Domain: The resource is displayed in the Address Books of all users in the resource’s domain. Post Office: The resource is displayed in the Address Books of all users on the resource’s post office.
Page 272
3 Click Add to display the Create Nickname dialog box. 4 Fill in the following fields: Domain.PO: Select the post office to which you want to assign the nickname. This can be any post office in your GroupWise system; it does not need to be the resource’s post office. Object ID: Specify the name to use as the resource_name portion of the nickname.
Page 273
Last Name: Ignore this field. It is not used for resource nicknames. Expiration Date: If you want the nickname to no longer work after a certain date, click Enable and then select the desired date. 5 Click OK to add the nickname to the list. 6 Click OK to save the changes to the Resource object.
Page 275
Distribution Lists, Groups, and Organizational Roles Chapter 17, “Understanding Distribution Lists, Groups, and Organizational Roles,” on page 277 Chapter 18, “Creating and Managing Distribution Lists,” on page 279 Chapter 19, “Using eDirectory Groups as GroupWise Distribution Lists,” on page 293 Chapter 20, “Using eDirectory Organizational Roles as GroupWise Distribution Lists,”...
Understanding Distribution Lists, Groups, and Organizational Roles Distribution lists are specific to GroupWise. Groups and organizational roles are eDirectory objects that can be configured to work with GroupWise. Distribution lists, groups, and organizational roles are all sets of users and (optionally) resources that can be addressed as a single entity.
You can determine which users see the distribution list in the Address Book. System visibility enables all users in your GroupWise system to see the distribution list. Domain visibility enables all users in the distribution list’s domain to see the distribution list. Post Office visibility enables all users in the distribution list’s post office to see the distribution list.
Creating and Managing Distribution Lists ® A GroupWise distribution list can contain GroupWise users, resources, and other distribution lists. When creating the distribution list, you can determine each entry’s participation in the list (primary recipient, carbon copy recipient, or blind copy recipient). Section 18.1, “Creating a New Distribution List,”...
Page 280
GroupWise Post Office: Select the post office the distribution list will be assigned to. The distribution list can contain members of other post offices. 3 Select Define Additional Properties, then click OK. 4 On the Identification page, fill in the following fields: Description: Specify a description to help you identify the purpose or members of the distribution list.
Page 281
5 Click GroupWise > Membership to display the Membership page. 6 Click Add, select the user, resource, distribution list, eDirectory group, or organizational role you want to add as a member, then click OK to add the member to the list. By default, the member is added as a primary recipient (To: recipient).
18.2 Adding Members to a Distribution List Distribution lists can contain users, resources, groups, organizational roles, and other distribution lists. ® 1 In ConsoleOne , right-click the Distribution List object, then click Properties. 2 Click GroupWise > Membership to display the Membership page. 3 Click Add, select the user, resource, distribution list, group, or organizational role you want to add as a member, then click OK to add the member to the list.
4 If you want to change the member’s recipient type, select the member, click Participation, then click To, CC, or BC. 5 Repeat Step 3 Step 4 to add additional members. 6 Click OK to save your changes. Distribution lists are typically managed by an administrator in ConsoleOne. Starting in GroupWise 7, users can be granted rights to modify distribution lists, as described in Section 18.6, “Enabling Users to Modify a Distribution List,”...
2 Select the post office to which you want to move the distribution list, then click OK to move the distribution list. 18.5 Renaming a Distribution List Situations might arise where you need to give a distribution list a new name. For example, you might need to move the distribution list to another post office that already has a user, resource, or distribution list with the same name.
Page 285
3 Click Add, then select one or more users who can edit the distribution list. 4 Click OK to grant the rights. 5 Notify the users that they have rights to modify the distribution list. To give a specific user rights to edit one or more distribution lists: 1 Browse to and right-click a User object, then click Properties.
5 Notify the user that he or she has rights to modify the distribution lists. In the GroupWise client, the editable distribution list does not appear any different to the user who has rights to edit it, except that Add and Remove are active for that user. In Online mode, the user can edit the distribution list in the GroupWise Address Book.
Page 287
The formats that include first name, last name, and first initial are not valid. For example, using DL1 as the distribution list ID, Research as the post office, and novell.com as the Internet domain, if you select the two valid formats, members of the distribution list receive messages sent using either of the following addresses: dl1.research@novell.com...
If you override the Internet domain name, the For Incoming Mail, Recipients are Known Exclusively by This Internet Domain Name option becomes available. Enable this option if you only want the distribution list to be able to receive messages addressed with this Internet domain name.
Domain: The distribution list is displayed in the Address Book for all users in the distribution list’s domain. Post Office: The distribution list is displayed in the Address Book for all users on the distribution list’s post office. None: The distribution list not displayed in the Address Book. 3 Click OK to save your changes.
4 Fill in the following fields: Domain.PO: Select the post office where you want to assign the nickname. This can be any post office in your GroupWise system; it does not have to be the distribution list’s post office. Object ID: Specify the name to use as the distribution_list_name portion of the nickname. Visibility: Nicknames are not displayed in the Address Book.
18.9.1 Creating an External Domain You create an external domain to represent the world outside your GroupWise system. 1 In ConsoleOne, right-click GroupWise System, then click New > External Domain. 2 Provide a unique name for the domain, then click OK. 18.9.2 Creating an External Post Office You create an external post office in the external domain to hold External User objects.
Using eDirectory Groups as GroupWise Distribution Lists ® ® Novell eDirectory groups can be configured to function as GroupWise distribution lists. Section 19.1, “Setting Up an eDirectory Group for Use in GroupWise,” on page 293 Section 19.2, “Seeing Which Members of an eDirectory Group Have GroupWise Accounts,”...
When GroupWise users send messages to the group, only those group members who have GroupWise accounts receive messages. For information about using dynamic groups with GroupWise, see TID 3074853 in the Novell Support Knowledgebase (http://www.novell.com/support). 19.2 Seeing Which Members of an eDirectory...
The Member To field in the top window displays the members who have GroupWise accounts. The Role Occupant field in the bottom window displays all members. 2 When you have finished viewing the information, click OK. 19.3 Changing a Group’s Visibility in the Address Book An eDirectory group’s visibility level determines which users see the group in the Address Books.
3 In the Visibility field, select the desired visibility level. System: The group is displayed in the Address Book for all users in your GroupWise system. Domain: The group is displayed in the Address Book for all users in the group’s domain. Post Office: The group is displayed in the Address Book for all users on the group’s post office.
2 Select the post office to which you want to move the group, then click OK to move the group. 19.5 Renaming a Group Situations might arise where you need to give an eDirectory group a new name. For example, you might need to move the group to another post office that already has an object (user, resource, distribution list, group, or organizational unit) with the same name.
20.1 Setting Up an Organizational Role for Use in GroupWise ® By default, Novell eDirectory organizational roles are not automatically available for use as distribution lists in GroupWise. To make an organizational role available, you need to assign it to a GroupWise post office.
Post Office: Select the post office where you want to assign the organizational role. You can choose any post office you want. If you plan to limit visibility of the organizational role to users on a specific post office or in a specific domain, you should select that post office or a post office in the desired domain.
The top window displays the members who have GroupWise accounts. The bottom window displays all members. 2 When you have finished viewing the information, click OK. 20.3 Changing an Organizational Role’s Visibility in the Address Book An organizational role’s visibility level determines which users see the role in the Address Books. You can control the availability of a role by displaying it in the Address Book for all users in your GroupWise system, in the Address Book for those users in the role’s domain only, in the Address Book for those users on the role’s post office only, or not displaying it at all.
The organizational role retains the same name on the new post office as it has on the current post office. If another object (user, resource, distribution list, group, or organizational role) assigned to the new post office has the same name, you will need to rename one of them before you move the organizational role.
20.6 Removing an Organizational Role from GroupWise If you decide that you no longer want an organizational role to be a public address list in GroupWise, you can remove its association with a GroupWise post office, so that it returns to being just an eDirectory organizational role.
Libraries and Documents V I I Chapter 21, “Document Management Services Overview,” on page 307 Chapter 22, “Creating and Managing Libraries,” on page 313 Chapter 23, “Creating and Managing Documents,” on page 351 Chapter 24, “Integrations,” on page 379 Libraries and Documents...
Library Post Office GroupWise GroupWise GroupWise Client Client Client Integrated Integrated Integrated Application Application Application User User User ® ® In ConsoleOne , a library can be viewed where it resides in the Novell eDirectory tree. Document Management Services Overview...
Page 308
ConsoleOne View Showing its Location in the eDirectory Tree Figure 21-2 A library can also be viewed in relationship to the post office that owns it. ConsoleOne View Showing the Library in Relationship to Its Post Office Figure 21-3 In the GroupWise Windows client, users can view a list of all the libraries to which they have access by clicking Tools >...
NOTE: This feature is not available in the Linux/Mac client. Physically, a library consists of a set of directories and databases stored in the gwdms subdirectory of the post office, as illustrated in “Post Office Directory” in GroupWise 8 Troubleshooting 3: Message Flow and Directory Structure.
GroupWise Client New Document Dialog Box Figure 21-5 NOTE: In the Linux/Mac client, you cannot create new documents in GroupWise. In ConsoleOne, the default document properties for a library are defined like this: ConsoleOne Document Properties Maintenance Window Figure 21-6 The default document properties are often adequate, but for some libraries, additional customized document properties can be very useful.
Page 311
Lookup Dialog Box Figure 21-7 A number of default document types are provided, as shown above. If needed, you can set up additional document types. For example, you could set up Pleading for the legal department, Spreadsheet for accounting, Correspondence for administration, RFP for marketing, White Paper for R&D, and so on.
Each document type property has a maximum number of versions (up to 50,000 per document). Most types have a default of 99 versions. A maximum of 0 (zero) versions means that documents of that type cannot have versions. Document Life Document life is the number of days that must pass between the time when a document is last accessed and when it is ready for archival or deletion.
Creating and Managing Libraries ® When you first set up a new GroupWise system, a basic library is automatically created for the first post office. A basic library is adequate when: Document management is not a primary activity of your GroupWise users. The library will store documents created and used by members of the post office that owns the library, or, if you do not need one basic library per post office, by all users within a domain.
This section provides the information you need in order to set up a new basic library. Section 22.7.1, “Basic Library Worksheet,” on page 346 lists all the information you need as you set up a basic library. You should print the worksheet and fill it out as you complete the tasks listed below: Section 22.1.1, “Selecting the Post Office That the Library Will Belong To,”...
At sign @ Extended ASCII characters that are graphical or typographical symbols; accented characters in the extended range can be used Backslash \ Parentheses ( ) Braces { } Period . Colon : By default, the library name that users see in the GroupWise client is the same as the Library object name.
To create a new library: 1 Make sure the POA is running for the post office that will own the new basic library. ® 2 In ConsoleOne, browse to and right-click the Novell eDirectory container where you want to create the library (worksheet item 1), then click New >...
4 Click Define Additional Properties, then click OK to create the Library object and display the library Identification page. 5 Fill in the Description field (worksheet item 6 If necessary, edit the Display Name field (worksheet item 7 Click OK to save the library information. 8 Test the new library.
This section covers everything you should consider when you set up full-service libraries. The “Full- Service Library Worksheet” on page 347 lists all the information you need as you set up a full- service library. You should print a copy of the worksheet for each library you plan to create. Fill out the worksheet for each library as you complete the tasks listed below.
Page 319
Centralized Libraries Centralized libraries are located in a post office that is dedicated to libraries (no users). Centralized libraries are serviced by the POA in the dedicated DMS post office, as shown in the following illustration: Centralized Libraries Figure 22-1 Accounting Library Post Office Manufacturing Library...
Page 320
Centralized Libraries Table 22-1 Advantages Disadvantages Administration can be consolidated, allowing You must create and maintain a post office one administrator to specialize in document that is dedicated to libraries only (no users). management. This configuration guarantees that all Backup can be easier with hardware document searching and accessing is back dedicated to one DMS post office, such as and forth between users’...
Page 321
Decentralized Libraries Table 22-2 Advantages Disadvantages Network traffic is minimized because most Libraries and their documents are scattered document accessing are in users’ local post over different servers, adding to your offices. administrative workload (such as doing backups). You do not need to maintain an extra DMS post office dedicated to libraries only.
Restricting library access can also improve users’ search time. When users install the GroupWise client on their workstations, they are either automatically assigned a default library (if there is one on their post office), or they are asked to select one from the libraries they have access to. By default, DMS searches are performed only on the user’s default library.
After you have specified the library’s name and created the Library object, the name cannot be changed. Do not use any of the following characters in the library’s name: ASCII characters 0-31 Comma , Asterisk * Double quote " At sign @ Extended ASCII characters that are graphical or typographical symbols;...
Page 324
Disk Space Requirements You need to know the disk space requirements for your libraries in order to choose appropriate locations for document storage areas. If you have chosen a centralized library configuration, your document storage areas are all serviced by the POA of the DMS post office. Therefore, you can calculate the disk space requirements for your GroupWise system as a whole.
Syntax: \\NetWare_server\volume\storage_directory \\Windows_server\sharename\storage_directory Example: \\nw65\gwdocs\docs \\winxp\c$\docs NOTE: On Linux, ConsoleOne interprets a UNC path so that the first item in the UNC path is the Linux server hostname, followed by a Linux path to the document storage area. You might want to set up a document storage area on the same server where the POA runs so as not to increase network traffic.
FULL-SERVICE LIBRARY WORKSHEET Under Item 8: Start Version Number, select 0 or 1. 22.3.7 Figuring Maximum Archive Directory Size Documents created with GroupWise DMS can be archived, depending on their Document Type properties. A document’s type determines its disposition, such as archiving or deleting. For more information, see “Customizing the Default Document Type Property”...
22.3.8 Designating Initial Librarians A librarian has full rights to the properties of every document in the library, and can therefore perform management tasks on all library documents. You can assign yourself as a librarian. You can also delegate these tasks by assigning responsible users in each library as librarians. Any GroupWise user who normally has access to the library can be a librarian.
Public Right Description Reset In-Use Flag The In-Use flag protects against data loss by preventing multiple users from concurrently opening the same document. The purpose of the Reset In-Use Flag right is to allow a user or librarian to reset a document’s status when the document is in use by someone else or when it is erroneously flagged as in use.
NOTE: This item does not apply if all of your users use the Linux/Mac client, where integrations are not available. ADDITIONAL LIBRARIES WORKSHEET Under Item 14: Set Up Integrations, mark whether or not you need to manually set up integrated applications for your DMS users.
Page 330
4 Click Define Additional Properties, then click OK to create the new Library object and display the library Identification page. 5 Fill in the fields (worksheet items 7 through 10). 6 Click GroupWise > Rights to display the Rights page. 330 GroupWise 8 Administration Guide...
7 In the Public Rights box, deselect any rights you want to remove from all library users (worksheet item 11). 8 If you want to set up one or more librarians, click Add, browse to and select one or more users or distribution lists (worksheet item 12), then click OK.
22.5 Viewing a New Library in Your GroupWise System After you create a new library, you can see it in ConsoleOne and GroupWise client users can see it in the GroupWise client. Section 22.5.1, “Seeing the New Library in ConsoleOne,” on page 332 Section 22.5.2, “Seeing the New Library in the GroupWise Windows Client,”...
4 In the drop-down list of objects, select Libraries. 22.5.2 Seeing the New Library in the GroupWise Windows Client GroupWise Windows client users can see that a new library has been created. They can set it as their default library if desired. In the GroupWise client: 1 Click Tools >...
Section 22.6.4, “Adding and Training Librarians,” on page 341 Section 22.6.5, “Maintaining Library Databases,” on page 345 Section 22.6.6, “Moving a Library,” on page 345 Section 22.6.7, “Deleting a Library,” on page 346 22.6.1 Editing Library Properties After creating a library, you can change some library properties. Other library properties cannot be changed.
Page 335
All document storage areas associated with the library are listed, no matter where they are located. On this page, you can add, move, and delete document storage areas. See Section 22.6.2, “Managing Document Storage Areas,” on page 336. 4 Click GroupWise > Rights to display the library Rights page. Public library rights granted to all users are selected in the Public Rights box.
22.6.2 Managing Document Storage Areas For a review, see Section 21.2, “Document Storage Areas,” on page 309 Section 22.1.4, “Deciding Where to Store Documents,” on page 315. Typically, the initial document storage area for a library is set up when the library is created. Thereafter, you can create additional document storage areas as the library grows.
Page 337
4 Provide a description for the document storage area. 5 Specify the UNC path to the directory where you want to create the document storage area. If the directory does not exist, it will be created as the document storage area is set up. As an alternative, you can specify an AppleTalk zone to store documents on an Apple* computer, or you can specify a Linux path to store documents on a Linux server.
Page 338
Existing document storage areas are listed. 6 Select a document storage area, then click Edit. 7 Provide the new location for the document storage area, then click OK twice to save the new document storage information. 8 Restart the POA. Deleting a Document Storage Area When you delete a document storage area, any documents in the document storage area are moved to other valid document storage areas for the library.
3 Select a document storage area, then click Delete. 4 Click OK to close the Storage Areas page If the above steps are not successful in deleting a document storage area, perhaps because one or more documents were in use during the deletion process, you can use the Analyze/Fix Library action of Mailbox/Library Maintenance, with the Remove Deleted Storage Areas and Move Documents First options selected, to finish cleaning up the deleted document storage area.
Page 340
Public Right Description Designate Official Allows any version of a document to be designated as the official version. The Version official version, which is not necessarily the most recently edited version, is the one located in searches. The official version is usually determined by the creator or author of the document. However, the official version can be designated by the last user to edit the document (if the user has this right).
In the first example, only one user is granted the Reset In-Use Flag right. In the second example, only members of the Engineers group are granted any rights to the Development Library. 7 Click OK to save the updated library rights information. 22.6.4 Adding and Training Librarians When you first create a library, you might for convenience assign yourself as the initial librarian.
Page 342
Understanding the Role of the Librarian Keep in mind the following when assigning librarians: “Librarian Identity” on page 342 “Librarian Functions” on page 342 “Librarian Rights” on page 343 Librarian Identity Any GroupWise user with access to a library can be a librarian for the library. You can have multiple librarians for a single library.
Page 343
Librarian Rights In addition to the six public rights, libraries also have a Manage right. When you grant the Manage right to a GroupWise user, you designate that user as a librarian. The Manage right gives the librarian full access to the properties of every document in the library. However, the Manage right does not grant the librarian direct access to the content of any document.
Page 344
Property Field Notification? Custom Fields File Extension Official Version Current Version If you remove the Manage right from a user, you must manually deselect any rights that the user gained from being made a librarian that the user did not previously have. Setting Up a Librarian GroupWise Account (Optional) The Manage right is always in effect for those users who have been assigned as librarians.
4 In the Individual or Distribution List Rights box, select the librarian users, select Manage (Librarian), then click OK to save the library rights changes. 22.6.5 Maintaining Library Databases The Mailbox/Library Maintenance feature of ConsoleOne offers database maintenance features to keep your library and document databases in good condition.
22.6.7 Deleting a Library You should not delete a library until you make sure that all documents still in the library are no longer needed. 1 In ConsoleOne, browse to and right-click the Post Office object that owns the library to delete, then click Properties.
Item Explanation 2) Library Name: Specify a name for the new library. Choose the name carefully. After the library is created, it cannot be renamed. For more information, see Section 22.1.3, “Choosing the Library Name,” on page 314. 3) Post Office: Indicate which post office the library will belong to.
Page 348
Item Explanation 2) Library Name: Specify a name for the new library. Choose the name carefully. After the library is created, it cannot be renamed. For more information, see Section 22.3.4, “Choosing Library Names,” on page 322. 3) Post Office: Specify the post office that the library will belong to.
Page 349
Item Explanation 9) Maximum Archive Size: Specify the maximum number of bytes to allow per archive directory. Use a size that conforms with your backup strategy and backup medium requirements. For more information, see Section 22.3.7, “Figuring Maximum Archive Directory Size,” on page 326.
Creating and Managing Documents ® GroupWise Document Management Services (DMS) lets Windows client users create documents with integrated applications, save them, then easily locate a specific document later without knowing the application, a specific document name, or the document’s physical location. Windows client users can create, share, locate, edit, view, and check out documents that are created under the management of GroupWise DMS.
3 In the New Document dialog box, type a brief description of the document. 4 To set document properties, click Properties. 5 Set the document properties as needed, then click OK. The selected program starts so you can create a new document. For more detailed information about creating documents in the GroupWise client, see “Creating Documents”...
2 Click Add Individual Documents, browse to and select the documents to add, then click OK. Click Add Entire Directory, browse to and select a directory containing documents to import, then click OK. For additional instructions about creating documents in the GroupWise client, see “Importing Documents into a GroupWise Library”...
Move Delete Change sharing Copy 3 Select the method for identifying the group of documents to perform the operation on: Use Find/Advanced Find to select documents Use Find by Example to select documents Use currently selected documents Use documents listed in a file. For additional instructions about creating documents in the GroupWise client, see “Managing Groups of...
Page 355
“Planning Custom Lookup Tables for Custom Document Properties” on page 360 “Adding Custom Lookup Tables” on page 362 Customizing the Default Document Type Property The Document Type property is the only default document property that you can modify. For a review of document types, see Section 21.3.2, “Document Types,”...
Page 356
The lookup table defines the list of choices offered to users when they select a document type, no matter which library in the post office they are creating the document in. 4 To add a new document type, click Edit > Add. In the Value field, type the new document type, click Add, then click Close.
Page 357
Document Property Field Values Field Required? Yes: The user must supply a value for the document property. No: The user can leave the document property field blank. Hidden? Yes: The document property field is not displayed in the GroupWise client interface.
Page 358
Custom Document Properties Worksheet For instructions on how to use this worksheet, see “Planning Custom Document Properties” on page 356. Custom Document Custom Document Custom Document Item Property Property Property 1) Post Office: 2) Libraries: 3) Property Label: 4) Description: 5) Read-Only? 6) Required? 7) Hidden?
Page 359
Adding Custom Document Properties After you have determined what new document properties will meet the needs of your DMS system, as described in “Planning Custom Document Properties” on page 356, and if necessary you have created lookup tables for your new document properties, as described in “Planning Custom Lookup Tables for Custom Document Properties”...
Page 360
Fields vary according to data type. 5 Fill in the fields (worksheet items 3 through 14). 6 Click OK to create the new custom document property. In the Document Properties Maintenance window, the new document property is listed in alphabetical order. In the GroupWise client, custom document properties are listed after default document properties, in the order in which they are added to the library.
Page 361
Lookup Table Values Table 23-2 Look Up Table Field Field Values Lookup Table Name: The lookup table name identifies the lookup table when you are assigning it to a property field. If the lookup table pertains to only one document property, you can name the lookup table the same as the document property.
Page 362
Item Custom Lookup Table Custom Lookup Table Custom Lookup Table 1) Post Office: 2) Property Label: 3) Lookup Table Name: 4) Description: 5) Related Table: 6) Data Type: Binary Date Number String 7) Maximum Length: 8) Case: Mixed Upper Lower 9) Minimum Value: 10) Maximum Value: 11) Lookup Table Entries:...
3 Select Lookup Tables, then click Edit > Add to display the Lookup Table Definition dialog box. Fields vary depending on data type. 4 Fill in the fields (worksheet items 3 through 10). 5 Click OK to create the new lookup table. 6 Select the new lookup table, then click Edit >...
Page 364
Component document property would be the child property. If the Development ® ® ® Library belonged to Novell , products would include GroupWise, NetWare , ZENworks , and so on. When users selected GroupWise as the product, listed components could include the GroupWise client, the agents, GroupWise system administration, and so on.
Page 365
Use copies of the “Related Document Properties Worksheet” on page 365 to plan the related document properties you want to use. One copy of the worksheet accommodates one pair of related properties. Continuing with the Development Library example, a filled-in worksheet might look like this: Sample Document Properties Worksheet Table 23-4...
Page 366
Creating Related Lookup Tables If you are supplying the choices for both related fields, you need both a parent lookup table and a child lookup table. If you are going to have users type information into the child property field, then you only need to create the parent lookup table.
Setting Up Related Document Properties After you have created related lookup tables, you are ready to set up the related document properties that use them. A few document property fields are required settings in the context of related properties: Read-Only must be set to No. Hidden must be set to No.
Page 368
In a system with multiple libraries, each library has its own set of QuickFinder index files. Depending on how many libraries belong to a post office, and how many post offices with libraries are in your GroupWise system, there can be many sets of QuickFinder index files. Index Content Indexing can include a document’s full text (depending on its document type), and always includes the document’s property sheet information (subject, author, version descriptions, and so on).
Page 369
You can specify the QuickFinder Interval setting in one-hour increments. For example, a setting of 1 would allow users to find documents created as recently as an hour ago. Whether you should use a dedicated indexer at this frequency would depend on the volume (per hour) of documents that get queued for indexing.
Page 370
Single Machine with One POA Figure 23-1 Post Office Library Message User Library Document Database Database Database Database GroupWise Client GroupWise Client GroupWise Client GroupWise Client Workstation Workstation Workstation Workstation Advantages Disadvantages Default configuration; no additional All operations are performed on one server, which setup is required.
Page 371
Single Machine with Multiple POAs Figure 23-2 Post Office Library Message User Library Document Database Database Database Database Production Network Segment GroupWise Client GroupWise Client GroupWise Client GroupWise Client Workstation Workstation Workstation Workstation Advantages and Disadvantages of a Single Server with Multiple POAs Table 23-5 Advantages Disadvantages...
Page 372
Dedicated Indexing Machine Figure 23-3 Post Office Library POA 2 Message User Library Document Database Database Database Database POA 1 Production Network Segment GroupWise Client GroupWise Client GroupWise Client GroupWise Client Workstation Workstation Workstation Workstation Advantages Disadvantages A dedicated server for quicker DMS indexing. Network traffic can increase significantly This is useful for organizations that are during periods of intense indexing.
Page 373
Post Office on One Machine and the Dedicated Indexing POA on Another Machine Figure 23-4 Post Office Library Isolated Network POA 2 Segment Message User Library Document Database Database Database Database POA 1 Production Network Segment GroupWise Client GroupWise Client GroupWise Client GroupWise Client Workstation...
Dedicated DMS Post Office Figure 23-5 User Post Office Post Office Library Library User Message Library Document Database Database Database Database POA 1 POA 2 Production Network Segment GroupWise Client GroupWise Client GroupWise Client GroupWise Client Workstation Workstation Workstation Workstation Advantages and Disadvantages of a Dedicated DMS Post Office Table 23-7 Advantages...
Page 375
Dedicated Indexer Single Server Dedicated Indexer Dedicated DMS Consideration Server on an Isolated with One POA Server Post Office Network Segment What is the expected Light Light or Moderate Moderate or Heavy Heavy indexing volume (per hour)? Is hardware available for a dedicated indexer server? Could bandwidth...
Library Library Library 7) Indexer Configuration: Single server with one POA Dedicated indexer server Dedicated indexer server on an insolated network segment Dedicated DMS post office 23.3.3 Implementing Indexing For libraries where a single POA running on the post office server can provide adequate indexing support for the post office’s libraries, follow the instructions in Section 38.3.1, “Regulating Indexing,”...
Page 377
Moving Archived Documents to Backup When documents are archived, they are placed in automatically created archive directories. Each library has a set of archive directories. For example, (GroupWise Document Management gwdms Services) is one of the post office’s directories. The library directories exist under it, named Under each library directory is an archive directory, under which are the sequentially- lib0001-ff.
7 Determine where you backed up the archive set, then copy either the archive set or the individual BLOB file to the archive directory specified in the Current Location field that you noted earlier. 8 You can now notify the user that the requested document is available. 9 When you are sure the user has opened the document (causing it to be unarchived), you should delete any files remaining in that archive directory because you have already backed them up.
Integrations ® Document-producing applications can be integrated with GroupWise Document Management Services (DMS) to allow GroupWise management control over files produced by the integrated applications. Integrations provide code specifically designed to allow function calls, such as Open or Save, to be redirected to the GroupWise Windows client. This allows GroupWise dialog boxes to be displayed instead of the application’s normal dialog boxes for the integrated functions.
Files\Novell\GroupWise It is a text file that can be viewed and modified in a text editor such as Notepad. However, a regular Windows user does not have sufficient rights to edit the file in its default location.
GroupWise DMS. Point-to-Point Integration ® This integration involves applications that are not 32-bit ODMA-compliant. Novell has written macros for various applications, such as Microsoft Word, which allow them to be integrated with GroupWise.
24.2.2 Understanding the gwappint.inf File file is located in the subdirectory. It gwappint.inf c:\Program Files\Novell\GroupWise includes the following sections and lines: [executable_name] sections Integration= line DualExe= line AppName= line AppKey= line [ODMA Application Extensions] section [Integration State] section [Non-Integrated Defaults] section...
Page 383
Integration Examples Table 24-1 Application Executable Version Comments Corel prwin.exe If it is already installed on the workstation, GroupWise Presentations installation changes the line to and the Integrations= application is available for selection as a non-integrated application. For ODMA integration, change the DualExe= line to system\prwin70.exe...
Page 384
[ODMA Application Extensions] Section section lists the file extensions GroupWise associates [ODMA Application Extensions] with particular document-producing applications. Examples include: Applications and Their Extensions Table 24-2 Application File Extension Corel WordPerfect .wpd Microsoft Excel .xls Microsoft PowerPoint .ppt Microsoft Word .doc [Integration State] Section section records whether the user has turned integrations on or off for...
(Notepad, for gwappint.inf example). By editing the file, you can add integrations for applications for which gwappint.inf Novell has not provided integrations. It is located in the c:\Program Files\Novell\GroupWise subdirectory. 24.3 Controlling Integrations in the GroupWise Windows Client...
Page 386
The Non-Integrated tab enables users to set values for the ShowMessage= WaitInterval= lines in the file. gwappint.inf 3 Click Executable. The Executable tab enables users to set the DualExe= line in the file. gwappint.inf 4 Click OK twice to save the updated integration information. If users check the contents of the file in the Windows system32 subdirectory, they gwappint.inf...
VIII Databases V I I I Chapter 25, “Understanding GroupWise Databases,” on page 389 Chapter 26, “Maintaining Domain and Post Office Databases,” on page 393 Chapter 27, “Maintaining User/Resource and Message Databases,” on page 401 Chapter 28, “Maintaining Library Databases and Documents,” on page 407 Chapter 29, “Synchronizing Database Information,”...
Understanding GroupWise Databases ® Your GroupWise system includes numerous databases where vital information is stored. Section 25.1, “Domain Databases,” on page 389 Section 25.2, “Post Office Databases,” on page 389 Section 25.3, “User Databases,” on page 390 Section 25.4, “Message Databases,” on page 390 Section 25.5, “Library Databases,”...
25.3 User Databases Each member of the post office has a personal database ( ) that represents the user’s userxxx.db mailbox. The user database contains the following: Message header information Pointers to messages Personal groups Personal address books Rules When a member of another post office shares a folder with one or more members of the local post office, a “prime user”...
Each library has its own subdirectory in the gwdms directory. In each library directory, the files contain information specific to that library, such as document properties and dmxxnn01-FF.db what users have rights to access the library. For the location of library databases in the post office, see “Post Office Directory”...
Maintaining Domain and Post Office Databases Occasionally, it is necessary to perform maintenance tasks on domain databases ( ) or wpdomain.db post office databases ( ). The frequency depends on the reliability of your network and wphost.db your own experience of how often problems are likely to occur. The following tasks help you maintain the integrity of your domain and post office databases: Section 26.1, “Validating Domain or Post Office Databases,”...
4 Click Validate Database > Run. 5 When prompted, make sure the Path to Database is correct. If an incorrect path is displayed, browse to and select the path to the database being validated. Click OK. You are notified if there are any physical problems, so you can then recover or rebuild the database.
Page 395
The Database Recovery Process Figure 26-1 wpdomain.db Check the number of records (X) in wpdomain.db. wpdomain.db recover.ddb Rename wpdomain.db to recover.ddb. creating.ddb Read and copy records from recover.ddb into creating.ddb . Skip invalid records. Check the number of records (Y) in creating.ddb . Successful? creating.ddb recover.ddb...
Page 396
If you have administration rights in the primary domain, you can recover the primary domain database, the post office databases in the primary domain, and any secondary domain databases. From a secondary domain, you can recover the secondary domain database and the post office databases in the secondary domain.
26.3 Rebuilding Domain or Post Office Databases In addition to correcting the physical problems resolved by the database recover process, the rebuild process updates user and object information in a domain database ( ) or post office wpdomain.db database ( ).
Page 398
The Database Rebuilding Process Figure 26-2 Primary Domain creating.ddb wpdomain.db wpdomain.db Copy records from the primary domain wpdomain.db into creating.ddb. Successful? creating.ddb Delete wpdomain.db. Delete creating.ddb. creating.ddb wpdomain.db wpdomain.db Rename creating.ddb wpdomain.db remains to wpdomain.db. unchanged. Notify the administrator that wpdomain.db could not be rebuilt.
6 Click Rebuild Database > Run. 7 When prompted, make sure the Path to Database is correct. If an incorrect path is displayed, browse to and select the path to the database being rebuilt. Click OK. 26.4 Rebuilding Database Indexes Each domain database ( ) and post office database ( ) contains three indexes...
Page 400
4 Select Rebuild Indexes for Listing, then click Run. 5 When prompted, make sure the Path to Database is correct. If an incorrect path is displayed, browse to and select the path to the database being whose indexes are being rebuilt. Click OK. 400 GroupWise 8 Administration Guide...
Maintaining User/Resource and Message Databases It is sometimes necessary to perform maintenance tasks on user and resource databases ) and message databases ( ). The frequency depends on the reliability of userxxx.db msgnnn.db your network and your own experience of how often problems are likely to occur. The following tasks help you maintain the integrity of your user and message databases.
Page 402
3 From the Action drop-down menu, select Analyze/Fix Databases. 4 Select from the following options: Structure: When a user experiences a problem that is related to the user, message, or library databases, you should perform a structure check. The structure check verifies the integrity of the databases and reports the amount of space that could be recovered.
Fix Problems: This option tells Mailbox/Library Maintenance to fix any problems it finds. Otherwise, Mailbox/Library Maintenance just reports the problems. Update User Disk Space Totals: Recalculates the total disk space a GroupWise user is using by reading the selected user mailboxes and updating the poll record used for disk space management.
3 From the Action drop-down list, select Structural Rebuild. 4 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 445 “Logging” on page 445 “Results” on page 446 “Misc” on page 446 Selected options can be saved for repeated use.
Page 405
3 From the Action drop-down list, select Re-create User Database. 4 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 445 “Logging” on page 445 “Results” on page 446 “Misc” on page 446 Selected options can be saved for repeated use.
Maintaining Library Databases and Documents ® GroupWise Document Management Services (DMS) uses libraries as repositories for documents. For a review of library database structure, see Section 25.5, “Library Databases,” on page 390. Section 28.1, “Analyzing and Fixing Databases for Libraries and Documents,” on page 407 Section 28.2, “Analyzing and Fixing Library and Document Information,”...
Structure: When a user experiences a problem that is related to the library databases, you should perform a structure check. The structure check verifies the integrity of the databases and reports the amount of space that could be recovered. If there is a structural problem, the databases are rebuilt with free space reclaimed.
Page 409
2 Click Tools > GroupWise Utilities > Mailbox/Library Maintenance. 3 From the Action drop-down menu, select Analyze/Fix Library. 4 Select from the following options: Verify Library: This is a post office-level check. It verifies that all libraries are on the libraries list.
Page 410
Validate All Document Security: This option validates document security for the Author, Creator and Security (document sharing) fields. The validation replaces the results of selecting the Validate Author/Creator Security option, and is more thorough. Therefore, you only need to select one option or the other. Synchronize User Name: The Author and Creator fields display users’...
Synchronizing Database Information ® In general, synchronization of object information throughout your GroupWise system occurs automatically. Whenever you add, delete, or modify a GroupWise object, the information is automatically replicated to all appropriate databases. Ideally, each domain database (wpdomain.db) in your system contains original records for all objects it owns and accurately replicated records for all objects owned by other domains.
However, this process requires exclusive access to the post office database. See Section 26.3, “Rebuilding Domain or Post Office Databases,” on page 397. ® Occasionally, GroupWise user information can get out of sync with Novell eDirectory user information. This requires a different type of synchronization process. See Section 41.4.1, “Using...
See also Section 26.3, “Rebuilding Domain or Post Office Databases,” on page 397. 29.3 Synchronizing a Library If information for a library does not display the same throughout your GroupWise system, you can synchronize the library. 1 In ConsoleOne, connect to the domain that owns the library, as described in Section 9.1, “Connecting to a Domain,”...
29.5 Synchronizing the Primary Domain from a Secondary Domain Information about a secondary domain stored in the secondary domain database is considered more current and correct than information about that secondary domain stored in the primary domain database. If the primary domain database contains out-of-date information, you can synchronize the primary domain from the secondary domain.
Managing Database Disk Space One of the most common maintenance issues in a growing system is running out of disk space. In ® addition to sending messages, users tend to use GroupWise for all sorts of communication, such as transferring large files. Library documents created with Document Management Services (DMS) can use huge amounts of disk space.
Page 416
3 From the Action drop-down menu, select Mailbox Statistics. 4 Select Mailbox Statistics. Mailbox Statistics: Specify a maximum number of items to see a report showing each user whose mailbox has more items in it than the number you specify. Select Expire Statistics.
The Only Backed-Up Items option interacts with the Do Not Purge Items Until They Are Backed Up setting under Tools > GroupWise Utilities > Client Options > Environment Options > Cleanup. If items are not allowed to be deleted before they are backed up, then they cannot be deleted during an Expire/Reduce operation.
Page 418
3 From the Action drop-down menu, select Expire/Reduce Messages. 4 Click Reduce Only to delete items that have already expired (that is, items that have been archived or deleted by users). Click Expire and Reduce to expire items in addition those that users have already archived or deleted, based on the criteria you select.
The Only Retained Items option interacts with third-party messages retention application, as described in Chapter 33, “Retaining User Messages,” on page 435. 6 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases” on page 445 “Logging”...
30.4 Reducing the Size of Libraries and Document Storage Areas The amount of disk space you allow at each post office for your library databases varies according to the GroupWise features they use. If you are using GroupWise Document Management Services, you must determine storage requirements for your documents.
To archive/delete documents from one library or all libraries in the selected post offices: 1 In ConsoleOne, select one or more Library objects or Post Office objects for the documents you want to archive/delete. 2 Click Tools > GroupWise Utilities > Mailbox/Library Maintenance. 3 From the Action drop-down menu, select Archive/Delete Documents.
Page 422
3 From the Action drop-down menu, select Delete Activity Logs. 4 Specify the number of days in the Delete Activity Logs Older Than field. The default is 60 days. 5 Using the tabs at the bottom of the Mailbox/Library Maintenance dialog box, set the following options: “Databases”...
For a list of compatible products, see the Partner Product Guide (http:// www.novell.com/partnerguide). You can also use the GroupWise Database Copy utility (DBCopy) and the GroupWise Time Stamp utility (GWTMSTMP) to assist with backups. For details about how to use these utilities, see Section 34, “Standalone Database...
You should need to restore data in a document storage area only if files have been damaged or become inaccessible due to a hard disk failure. See also Section 32.3, “Restoring a Library,” on page 428. 31.4 Backing Up Individual Databases If you need to back up individual databases separately from backing up a post office, you can use your backup software of choice.
Restoring GroupWise Databases from Backup Database damage can usually be repaired using the database maintenance tools provided with ® GroupWise . Only very occasionally should you need to restore databases from backup. Section 32.1, “Restoring a Domain,” on page 427 Section 32.2, “Restoring a Post Office,”...
3 If you do not use GWTSA or TSAFSGW to restore the post office, time-stamp the restored user databases so that old items are not automatically purged during nightly maintenance. 3a In ConsoleOne, browse to and select the Post Office object, then click Tools > GroupWise Utilities >...
User databases are stored in the subdirectory in the post office. Message databases are ofuser stored in the subdirectory. ofmsg 3 To update the restored database with the most current information available, run Analyze/Fix Databases with Contents selected, as described in Section 27.1, “Analyzing and Fixing User and Message Databases,”...
Page 430
3 On the Identification tab, specify a unique name for the new restore area. If desired, provide a lengthier description to further identify the restore area. 4 In the UNC Path field, browse to and select an existing directory that you want to use as a restore area.
9 Use the backup software for your platform, as listed in Section 31.2, “Backing Up a Post Office,” on page 423, to restore a backup copy of the post office into the restore area. 10 Grant the POA Read, Write, and File Scan rights to the restore area. 11 If the restore area is located on a different server from where the post office directory is located, provide the POA with a username and password for logging in to the remote server.
After a restore area has been set up: 1 In the GroupWise client, click File > Open Backup. 2 Browse to and select the restore area directory, then click OK. 3 In the Password field, type your GroupWise password, then click OK to access the backup copy of your mailbox.
Page 433
6 If desired, click Save to Clipboard, paste it into a file, then save or print it. 7 Click Next. 8 Click Finish. At this point, you have restored the user’s or resource’s GroupWise account into the GroupWise system. However, this does not restore ownership of resources, nor does the account’s mailbox contain any item at this point.
Retaining User Messages ® GroupWise enables you to retain user messages until they have been copied from message databases to another storage location. This means that a user cannot perform any action, such as emptying the mailbox Trash, that results in a message being removed from the message database before it has been copied.
When ConsoleOne reads a trusted application record that has the Provides Message Retention Service setting turned on, it adds a Retention tab to the GroupWise Client Environment Options (Tools > GroupWise Utilities > Client Options > Environment). Environment Options Dialog Box with the Retention Tab Open Figure 33-2 You use this Retention tab to enable message retention at the domain, post office, or user level, meaning that you can enable it for all users in a domain, all users in a post office, or individual users.
(http://www.novell.com/partnerguide). For information about developing a message retention application, see the GroupWise Object API and GroupWise Trusted Application API documentation at the Novell Developer Kit Web site (http:/ /developer.novell.com/wiki/index.php/Category:Novell_Developer_Kit). 33.3 Enabling Message Retention This section assumes that you have installed a message retention application as a GroupWise trusted application and that it is configured to provide a message retention service.
Page 438
Message retention is not enabled until you designate the users whose messages you want retained by the application. You can designate users at the domain level, post office level, or individual user level. 1 In ConsoleOne, right-click the domain, post office, or user for which you want to enable message retention, click GroupWise Utilities >...
Standalone Database Maintenance Programs ® Some aspects of GroupWise database maintenance are performed by standalone maintenance programs that can be incorporated into batch files along with other system maintenance programs. Section 34.1, “GroupWise Check,” on page 439 Section 34.2, “GroupWise Target Service Agent,” on page 451 Section 34.3, “GroupWise Time Stamp Utility,”...
Page 440
Three Databases That GWCheck Compares Table 34-1 WPHOST.DB NGWGUARD.DB FILE SYSTEM The post office database The guardian database The file system for this post office is ) is checked for ) is checked to find checked to see if the user database wphost.db ngwguard.db the file ID (FID) of the...
GWCheck creates the user in , using database . Even if ngwguard.db userabc.db ngwguard.db damaged, it is unlikely that data is lost. Case 3 - Missing User Database (userxxx.db) In this example, a GWCheck is run either against all users on the post office or against one user, “ABC.”...
For the Repair Mailbox item to display on the GroupWise Windows client Tools menu, the following files must be installed in the GroupWise software directory; by default, this is c:\Program Files\Novell\GroupWise gwcheck.exe (Replace xx with your language code) gwchkxx.dll (Replace xx with your language code) gwchkxx.chm...
Page 443
GroupWise 8 DVD or downloaded GroupWise 8 image if an updated software distribution directory is not available. 2 Install GWCheck. rpm -i groupwise-gwcheck-version-mmdd.i386.rpm 3 Change to the directory. /opt/novell/groupwise/gwcheck/bin 4 Enter to start GWCheck. ./gwcheck 5 To view online help in GWCheck, click Help. 6 Continue with Performing Mailbox/Library Maintenance Using GWCheck.
4 Copy the GWCheck RPM to a convenient location on the text-only server. 5 Install GWCheck on the text-only server. rpm -i groupwise-gwcheck-version-mmdd.i386.rpm 6 Copy the GWCheck options file you created in Step 3 to the /opt/novell/groupwise/ directory. gwcheck/bin 7 Change to the directory. /opt/novell/groupwise/gwcheck/bin 8 Enter to run text-based GWCheck.
3 To view online help in GWCheck, click Help. 4 Continue with Performing Mailbox/Library Maintenance Using GWCheck. 34.1.5 Performing Mailbox/Library Maintenance Using GWCheck With only a few differences in interface functionality, as described in the online help, you can perform the same maintenance activities in GWCheck as you can in Mailbox/Library Maintenance in ConsoleOne: “Using Mailbox/Library Maintenance Tab Options”...
Page 446
Select Individual Users to send each user the results that pertain to him or her. Click Message to include a message with the results file. Misc ® If you need to run a Mailbox/Library Maintenance check with special options provided by Novell Support, click Misc. Misc. Tab in the Mailbox/Library Maintenance Dialog Box Figure 34-4 Use the Support Options field to specify command line parameters.
Exclude Tab in the Mailbox/Library Maintenance Dialog Box Figure 34-5 Click Add, select one or more users to exclude, then click OK. Reusing Library/Mailbox Maintenance Settings For convenience, you can store the options you select in Mailbox/Library Maintenance and GWCheck so that you can retrieve them for later use. “Saving Mailbox/Library Maintenance Options”...
Linux,” on page 442 2 Create a script to execute GWCheck using the following syntax: /opt/novell/groupwise/gwcheck/bin/gwcheck --opt options_file --batch If you did not create the options file in your home directory, specify the full path to the options file.
Page 449
Linux GWCheck Windows GWCheck Syntax: --lang language_code /lang language_code The table below lists the valid language codes. Contact your local Novell sales office for information about language availability. Language Language Language Language Code Code Arabic Hungarian Chinese-Simplified Italian Chinese-Traditional Japanese...
Page 450
--pr path_to_mailbox /pr path_to_mailbox For example, to specify the Remote mailbox that a user keeps on a computer at home, you would use: Linux: ./gwcheck --opt gwcheck.opt --pr /novell/groupwise\of7bharc Windows: gwcheck /opt gwcheck.opt /pa \novell\groupwise\of7bharc 450 GroupWise 8 Administration Guide...
Section 34.2.6, “TSAFSGW Startup Switches,” on page 459 34.2.1 System Requirements TSAFS and TSAFSGW are available on NetWare 6.5 and Novell Open Enterprise Server (OES) ® NetWare. They are also available with the Storage Management Services (SMS) package on SUSE Linux Enterprise Server (SLES) 9 and OES Linux.
Administration Guide on the Novell Open Enterprise Server Documentation Web site (http:// www.novell.com/documentation/oes). You can use TSAFS as it ships with your operating system to back up GroupWise data, or you can enhance its functionality by using TSAFSGW along with it.
Page 454
2 Use the following command to start TSAFS with GroupWise functionality: load tsafs /EnableGW=True The switch setting is saved in a configuration file ( ), so that you do sys:\etc\sms\tsa.cfg not need to include the switch when you load in the future. tsafs.nlm If you need to run TSAFS without GroupWise functionality in the future, unload TSAFS, then reload using:...
Page 455
With TSAFSGW running, you are ready to back up GroupWise data with Novell Storage Management Services (SMS), as described in Storage Management Services Administration Guide on the Novell Open Enterprise Server Documentation Web site (http://www.novell.com/...
./smsconfig -t Results should include: The loaded TSAs are: tsafs --EnableGW NOTE: On the latest version of Novell Open Enterprise Server, GroupWise functionality is always enabled and you do not need to use the --EnableGW switch. 456 GroupWise 8 Administration Guide...
Page 457
6 To make GroupWise functionality the default, modify the SMS configuration file: 6a Change to the directory where the SMS configuration file is located. cd /etc/opt/novell/sms 6b In a text editor, open the file. smdrd.conf 6c Change the following line:...
Page 458
5 To establish the specified GroupWise locations as defaults for automatic backups in the future, modify the SMS configuration file: 5a Change to the directory where the SMS configuration file is located. cd /etc/opt/novell/sms 5b In a text editor, open the smdrd.conf file. 5c Locate the following line:...
NOTE: The example is formatted for readability. The entry is a single line of text. 5e Save the file and exit. With TSAFSGW running, you are ready to back up GroupWise data with Novell Storage Management Services (SMS), as described in Storage Management Services Administration Guide on the Novell Open Enterprise Server Documentation Web site (http://www.novell.com/...
Page 460
/home Specifies the GroupWise location to back up or restore to. Multiple instances of the /home switch are typical. Use a /home switch for each domain and post office to back up. Also use a /home switch for each post office restore area and any other temporary location to which you want to restore GroupWise data outside the standard GroupWise directory structure.
/tempdir Specifies where TSAFSGW places files during the backup process. You need sufficient disk space to accommodate the largest database, but not the entire domain or post office. The default locations are platform specific: NetWare: sys:\system\tsa\temp Linux: /tmp For example, to change the temporary directory, you would use: NetWare: /tempdir-vol1:\temp Linux:...
If you use TSAFS on NetWare 6.5/OES NetWare or Linux to back up user databases, the backup time stamp is automatically added as part of the backup process. However, if you do not use TSAFS, you must use GWTMSTMP to make sure that user databases are time-stamped so that items will not be prematurely purged.
/opt/ along with the GroupWise agents (POA and MTA). You can copy it novell/groupwise/agents to additional locations if needed. To check the existing time stamp on all GroupWise user databases in a post office, use the following command: Syntax: ./gwtmstmp -p /post_office_directory...
Example: gwtmstmp.exe /p-m:\gwsystem\acct /set A basic backup time stamp can also be set in ConsoleOne. Select a Post Office object, then click Tools > GroupWise Utilities > Backup/Restore Mailbox. On the Backup tab, select Backup, then click Yes. More specialized functionality is provided through additional GWTMSTMP startup switches. 34.3.5 GWTMSTMP Startup Switches The following startup switches can be used with GWTMSTMP: GWTMSTMP Startup Switches...
Page 465
NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: /backup /restore /retention -b --backup -r --restore -n -- /backup /restore /retention retention For example, to set the restore time stamp, you would use: NetWare: gwtmstmp /p-j:\dev /restore /set Linux: ./gwtmstmp -p /gwsystem/dev -r -s Windows: gwtmstmp /p-j:\dev /restore /set /get...
Page 466
Windows: gwtmstmp /p-j:\dev /backup /set NetWare: gwtmstmp /p-j:\dev /set Linux: ./gwtmstmp -p /gwsystem/dev -s Windows: gwtmstmp /p-j:\dev /set -c, --clear Clears existing time stamps. NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: /clear -c --clear /clear For example, to clear all time stamps on databases in a post office, you would use: NetWare: gwtmstmp /p-j:\dev /clear Linux:...
Page 467
NetWare GWTMSTMP Linux GWTMSTMP Windows GWTMSTMP Syntax: /time-hh:mm am|pm -t hh:mm am|pm --time /time-hh:mm am|pm hh:mm am|pm Example: /time-11:30pm -t 2:00am --time 2:00am /time-6:15pm For example, to set the restore time to 4:45 p.m., you would use: NetWare: gwtmstmp /p-j:\dev /restore /time-4:45pm Linux: ./gwtmstmp -p /gwsystem/dev -r -t 4:45pm Windows:...
Windows: gwtmstmp /p-j:\dev /userdb user3gh.db /retention /set 34.4 GroupWise Database Copy Utility The GroupWise Database Copy utility (DBCopy) copies files from a live GroupWise post office or domain to a static location for backup. During the copy process, DBCopy prevents the files from being modified, using the same locking mechanism used by other GroupWise programs that access databases.
GroupWise 8 DVD or downloaded GroupWise 8 image. 2 Install DBCopy. rpm -i groupwise-dbcopy-version-mmdd.i386.rpm 3 Change to the directory. /opt/novell/groupwise/agents/bin 4 Use the following command to back up a post office: ./dbcopy /post_office_directory /destination_directory Use the following command to back up a domain: ./dbcopy /domain_directory /destination_directory Use the following command to back up a remote document storage area: ./dbcopy -b /storage_area_directory /destination_directory...
Some startup switches can be used for both backups and migration. Other startup switches are used only for migration. For detailed information about how to use the migration startup switches, see the GroupWise Server Migration Utility Installation and Migration Guide. (http://www.novell.com/ documentation/gwutilities)
Page 471
Windows NetWare DBCopy Linux DBCopy Usage DBCopy Migration only Migration only Migration only Migration only Migration only Migration only Backups and migration Migration only Backups and migration Backups and migration /a (migration only) Specifies the IP address to bind to for the migration process. The default is all available IP addresses.
Page 472
/l (migration only) Performs the GroupWise Check function of on the migrated GroupWise storelowercase databases. /m (migration only) Copies all directories and files associated with a domain, post office, or document storage area as part of a migration. This includes files and directories that do not need to be included in backups. /o (migration only) Skips the second copy of the post office directory during the migration...
Post Office Agent Chapter 35, “Understanding Message Delivery and Storage in the Post Office,” on page 475 Chapter 36, “Configuring the POA,” on page 487 Chapter 37, “Monitoring the POA,” on page 529 Chapter 38, “Optimizing the POA,” on page 561 Chapter 39, “Using POA Startup Switches,”...
Understanding Message Delivery and Storage in the Post Office ® A post office is a collection of user mailboxes and GroupWise objects. Messages are delivered into mailboxes by the Post Office Agent (POA). The following topics help you understand the post office and the functions of the POA: Section 35.1, “Post Office Representation in ConsoleOne,”...
GroupWise View Showing Post Offices in Relationship to Domains Figure 35-2 35.2 Post Office Directory Structure Physically, a post office consists of a set of directories that house all the information stored in the post office. See “Post Office Directory” in GroupWise 8 Troubleshooting 3: Message Flow and Directory Structure.
Page 477
Message Body: The message body contains the message text in an encrypted format and a distribution list containing user IDs of the sender and recipients. File Attachments (optional): File attachments can be any type of file that is attached to the message.
Outgoing messages from local senders are stored in the message database assigned to each sender. Incoming messages from users in other post offices are stored in the message database that corresponds to the message database assigned to the sender in his or her own post office. In each case, only one copy of the message is stored in the post office, no matter how many members of the post office it is addressed to.
MTA Output Queue in the Post Office The MTA output queue in each post office is the directory. post_office\wpcsout If the MTA has a mapped or UNC link to the post office, the MTA writes user messages directly into its output queue, which requires write access to the post office. If the MTA has a TCP/IP link to the post office, the MTA transfers user messages to the POA by way of TCP/IP.
Library Databases The databases for managing libraries are stored in the directory and its subdirectories in the gwdms post office. file is a database shared by all libraries in the post office. It contains information about dmsh.db where each library in the post office is located. Each library has its own subdirectory in the gwdms directory.
Historical Note: In GroupWise 5.x, the GroupWise client allowed the user to enter a path to the post office directory to facilitate direct access mode. The GroupWise 6.x and later clients no longer offer the user that option. However, you can force the GroupWise 6.x and later client to use direct access by starting it with the /ph switch and providing the path to the post office directory.
In client/server mode, the POA is enabled for secure SSL connections by default. If necessary, you can configure the POA to force SSL connections with all clients. See Section 36.3.3, “Securing the Post Office with SSL Connections to the POA,” on page 511.
Post offices can be located on the following platforms: ® ® Novell NetWare Windows Server Linux The GroupWise agents can run on the following platforms: Novell NetWare Windows Server Linux Understanding Message Delivery and Storage in the Post Office 483...
In general, GroupWise is most efficient if you match the agent platform with the network operating system, so the POA and the post office should be on the same platform, and the client should be on a compatible platform. Those with mixed networks might wonder what combinations are possible. You have several alternatives.
Page 485
NetWare POA Linux POA Windows POA Post Office on Windows Post Office on Macintosh For these combinations, an NFS* connection is required, which is not a supported configuration for the agents. The NetWare POA cannot service a post office on a Windows server because Windows does not support the required cross-platform connection.
Configuring the POA For detailed instructions about installing and starting the POA for the first time, see “Installing GroupWise Agents” in the GroupWise 8 Installation Guide. ® As your GroupWise system grows and evolves, you might need to modify POA configuration to meet the changing needs of the post office it services.
POAs for an existing post office if message traffic in the post office is heavy. To accomplish this, you must create additional POA objects as well. ® To create a new POA object in Novell eDirectory: 1 In ConsoleOne, browse to and right-click the Post Office object for which you want to create a new POA object, then click New >...
7 In the Description field, type one or more lines of text describing the POA. This description displays on the POA server console as the POA runs. When you run multiple POAs on the same server, the description should uniquely identify each one. If multiple administrators work at the server where the POA runs, the description could include a note about who to contact before stopping the POA.
Page 490
ConsoleOne Properties Pages Corresponding Tasks and Startup Switches and Settings Domain.PO Section 36.1.1, “Creating a POA Object in eDirectory,” on page 488. Distinguished Name Name Agent Type Description Platform POA Agent Settings Page Message File Processing Section 38.2.2, “Configuring a Dedicated Message File Processing POA,”...
Page 491
ConsoleOne Properties Pages Corresponding Tasks and Startup Switches and Settings Disable Administration Task See /noada. Processing HTTP User Name Section 37.2.1, “Setting Up the POA Web Console,” on page 544. HTTP Password See also /httpuser and /httppassword. Network Address Page TCP/IP Address Section 36.2.1, “Using Client/Server Access to the Post Office,”...
Page 492
ConsoleOne Properties Pages Corresponding Tasks and Startup Switches and Settings Maintenance Handler Threads See Section 38.4.1, “Adjusting the Number of POA Threads for Database Maintenance,” on page 575. See also /gwchkthreads and /nogwchk. Perform User Upkeep Section 36.4.3, “Performing Nightly User Upkeep,” on page 526.
ConsoleOne Properties Pages Corresponding Tasks and Startup Switches and Settings LDAP Authentication Section 36.3.4, “Providing LDAP Authentication for GroupWise Users,” on page 514. See also /ldapipaddr, /ldapport, /ldapuser, /ldappwd, ldapuserauthmethod, /ldapdisablepwdchg, /ldapssl, /ldapsslkey, ldaptimeout, and /noldapx. See also /ldapippooln, /ldappoolresettime, ldapportpooln, /ldapsslpooln, and /ldapsslkeypooln.
Page 494
5 In the Message Transfer field, specify the TCP port on which the POA will listen for incoming messages from the MTA. The default message transfer port for the POA to listen on is 7101. 6 Click OK to save the TCP/IP information and return to the main ConsoleOne window. Corresponding Startup Switches You can also use the /mtpinipaddr /mtpinport...
For a sample message flow for this configuration, see “TCP/IP Link Open: Transfer between Post Offices Successful” in “Message Delivery to a Different Post Office” in GroupWise 8 Troubleshooting 3: Message Flow and Directory Structure. Corresponding Startup Switches You can also use the /mtpoutipaddr /mtpoutport startup...
Corresponding Startup Switches You can also use the /mtpoutport startup switch in the POA startup file to establish an exclusive bind to the specified IP address. 36.1.5 Moving the POA to a Different Server As your GroupWise system grows and evolves, you might need to move a POA from one server to another.
The full post office name is used in the filename. However, all letters are lowercase and any spaces in the post office name are removed. The startup file is located in the directory. /opt/novell/groupwise/agents/share 3 Adjust the setting of the /home switch to point to the new location of the post office directory.
Log File Path: Browse to and select the directory where you want this POA to store its log files. The default location varies by platform: NetWare: post_office\wpcsout\ofs Linux: /var/log/novell/groupwise/post_office.poa Windows: post_office\wpcsout\ofs For more information about log settings and log files, see Section 37.3, “Using POA Log Files,”...
Page 499
Configure the POA so network management and monitoring programs can use TCP/IP to send SNMP requests to this POA Set up an external server with Internet access for the POA Configure the POA to provide a Web console for use with GroupWise Monitor Configure the POA to communicate with IMAP (Internet Message Application Protocol) clients Configure the POA to communicate with SOAP (Simple Object Access Protocol) clients...
Page 500
6 On the Network Address page, click the pencil icon for the TCP/IP Address field to display the Edit Network Address dialog box. 7 Select IP Address, then specify the IP address, in dotted decimal format, of the server where the POA is running.
11 Click OK to save the network address and port information and return to the main ConsoleOne window. ConsoleOne then notifies the POA to restart with client/server processing enabled. For a sample message flow for this configuration, see “Message Delivery in the Local Post Office”...
How a GroupWise Name Server Helps the GroupWise Client Start After a server has been designated as , and a POA using the default port number of ngwnameserver 1677 is running on that server, the GroupWise client can connect to the POA of the appropriate post office by contacting the POA located on .
Page 503
3 Fill in the following fields: Enable IMAP: Select Enable IMAP to turn on IMAP processing. Max IMAP Threads: Specify the maximum number of IMAP threads you want to the POA to start. The default maximum number of IMAP threads is 40. This is adequate for most post offices, because each IMAP thread can service multiple IMAP clients.
36.2.4 Supporting SOAP Clients Simple Object Access Protocol (SOAP) is used by e-mail clients such as Evolution to access mailboxes. You can configure the POA to communicate with SOAP-enabled e-mail clients much like the GroupWise client does. 1 In ConsoleOne, browse to and select the POA object to configure, then click Properties. 2 Click GroupWise >...
Users of Evolution 2.0 and later can find instructions for connecting to a GroupWise system in the Evolution online help. For more information about using Evolution to access a GroupWise mailbox, see “Evolution” in “Non-GroupWise Clients” in the GroupWise 8 Interoperability Guide.
6 Click OK to save the GroupWise version and/or date settings. ConsoleOne then notifies the POA to restart so the new settings can be put into effect. Corresponding Startup Switches You can also use the /gwclientreleaseversion, gwclientreleasedate, and /enforceclientversion startup switches in the POA startup file to configure the POA to check client version and/or date information.
3 Set Max Thread Usage for Priming and Moves as needed. By default, the POA allocates 30% of its client/server handler threads for priming mailboxes for users who are using Caching mode for the first time. By default, the POA starts 10 client/ server handler threads, so in a default configuration, three threads are available for priming.
4 In the Maximum Send Message Size field, specify in megabytes the size of the largest message you want users to be able to send outside the post office, then click OK. 5 To exit the Link Configuration tool and save your changes, click File > Exit > Yes. ConsoleOne then notifies the POA to restart using the new maximum message size limit.
Section 36.3.5, “Enabling Intruder Detection,” on page 519 Section 36.3.6, “Configuring Trusted Application Support,” on page 520 36.3.1 Securing Client/Server Access through an External Proxy Server If the server where the POA runs is behind your firewall, you can link it to an external proxy server in order to provide client/server access to the post office for GroupWise client users who are outside the firewall.
5 Select IP Address, then specify the external IP address, in dotted decimal format, of the external server that GroupWise client users access from outside your firewall. Typically, this is the public IP address presented by your external proxy server, generic proxy, NAT, or PAT.
addresses and a second POA to always redirect users to proxy IP addresses. Users are then redirected based on which POA IP address they provide in the GroupWise Startup dialog box when they start the GroupWise client to access their mailboxes. 1 Configure the initial POA for the post office with the IP address that you want for internal users.
Page 512
3 To force SSL connections between the POA and its MTA, select Required in the Message Transfer SSL drop-down list. The POA must use a TCP/IP link with the MTA in order to use SSL for the connection. See “Using TCP/IP Links between the Post Office and the Domain” on page 493.
Page 513
For optimum security, select Required in the IMAP SSL drop-down list if you want the POA to force SSL connections, so that non-SSL connections from IMAP clients are denied. 8 To use SSL connections between the POA and SOAP clients, select Required in the Internal SOAP SSL drop-down list and/or the External SOAP SSL drop-down list so that internal and/or external SOAP clients must use SSL connections to the POA.
“Configuring a Pool of LDAP Servers” on page 517 “Specifying Failover LDAP Servers (Non-SSL Only)” on page 518 NOTE: If multiple eDirectory trees are involved, refer to TID 10067272 in the Novell Support Knowledgebase (http://www.novell.com/support) for additional instructions. Providing LDAP Server Configuration Information Information about your available LDAP servers must be provided in ConsoleOne before you can enable LDAP authentication for users.
Page 515
If you do not specify a full path, the POA looks in the following locations for the trusted root certificate: NetWare: POA installation directory Linux: /opt/novell/groupwise/agents/lib/nldap Windows: POA installation directory For more information about the trusted root certificate, see Section 75.3, “Trusted Root Certificates and LDAP Authentication,”...
Page 516
5 If you want the POA to access the LDAP server with specific rights to the LDAP directory, specify a username that has those rights. If you are using a Novell LDAP server, you can browse for an eDirectory User object. The information returned from eDirectory uses the following format:...
Page 517
For more information about LDAP usernames, see Section 76.3, “Authenticating to GroupWise with Passwords Stored in an LDAP Directory,” on page 1169. 6 If you want to prevent GroupWise users from changing their LDAP passwords by using the Password dialog box in the GroupWise client, select Disable LDAP Password Changing. This option is deselected by default, so that if users change their passwords in the GroupWise client through the Security Options dialog box (GroupWise Windows client >...
Page 518
4 Select one or more LDAP servers in the Available Servers list, then click the arrow button to move them into the Selected Servers list. 5 Click OK to save the list of LDAP servers. 6 Click OK to save the security settings for the post office. ConsoleOne then notifies the POA to restart so the new LDAP settings can be put into effect.
36.3.5 Enabling Intruder Detection You can configure the POA to detect system break-in attempts in the form of repeated unsuccessful logins. This feature can be especially helpful when allowing Remote client users to establish client/ server connections to MTAs in your system. See Section 41.2.2, “Enabling Live Remote,”...
POA Web Console You can view current intruder detection settings on the Configuration page and change them using the Intruder Detection link. You cannot disable intruder detection from the POA Web console. 36.3.6 Configuring Trusted Application Support For background information about setting up trusted applications in ConsoleOne, see Section 4.12, “Trusted Applications,”...
Page 521
By default, the POA performs the following maintenance events: Default Daily Maintenance Event: The default daily maintenance event occurs at 2:00 a.m. The POA performs a Structure check on user, message, and document databases and fixes any problems it encounters. Default Weekly Maintenance Event: The default weekly maintenance event occurs on Saturday at 3:00 a.m.
Page 522
5 To modify a default database maintenance action, select one of the existing actions, then click Edit. To create a new database maintenance action, click Create, then type a name for the new database maintenance action. Database maintenance actions and options you can schedule include: Actions Options on Actions Analyze/Fix Databases...
36.4.2 Scheduling Disk Space Management By default, the POA performs one recurring disk space management event. Every 5 minutes, the POA checks to make sure there is at least 2048 MB of free disk space in the post office directory. If there is ever less than 2048 MB of free disk space, the POA performs a Reduce operation on the user and message databases in the post office.
Page 524
The Scheduled Events page lists a pool of POA events available to all POAs in your GroupWise system. 7 To modify the default disk space management event, which affects all POAs that have this disk space management event enabled, select Default Disk Check Event, then click Edit. To create a new disk space management event, which is added to the pool of POA events that can be enabled for any POA in your GroupWise system, click Create, then type a name for the new disk space management event.
Page 525
9 In the Trigger Actions At field, specify the minimum amount of available disk space you want to have in the post office. When the minimum amount is reached, the Disk Check actions are triggered 10 In the Stop Mail Processing At field, specify the minimum amount of available disk space at which you want the POA to stop receiving and processing messages.
You might want to create several disk space management events with different triggers and actions. For some specific suggestions on implementing disk space management, see Section 12.3, “Managing Disk Space Usage in the Post Office,” on page 190. POA Web Console You can view the currently scheduled disk check events on the Scheduled Events page.
Page 527
3 Select Perform User Upkeep. 4 In the Start User Upkeep field, specify the number of hours after midnight for the POA to start performing user upkeep. The default is 1 hour. 5 If you have Remote or Caching users, select Generate Address Book for Remote. 6 Specify the number of hours after midnight for the POA to generate the daily copy of the GroupWise Address Book for Remote and Caching users.
Section 37.3, “Using POA Log Files,” on page 553 Section 37.4, “Using GroupWise Monitor,” on page 554 Section 37.5, “Using Novell Remote Manager,” on page 555 Section 37.6, “Using an SNMP Management Console,” on page 555 Section 37.7, “Notifying the GroupWise Administrator,” on page 559 Section 37.8, “Using the POA Error Message Documentation,”...
Page 530
® NetWare The POA server console always displays on the NetWare server console. Linux: You must use the --show startup switch in order to display the Linux POA server console. “Starting the Linux Agents with a User Interface” in “Installing GroupWise Agents”...
Page 531
Processing: Displays a rotating bar when the POA is running. If the bar is not rotating, the POA has stopped. For assistance, see “Post Office Agent Problems” in GroupWise 8 Troubleshooting 2: Solutions to Common Problems. Busy: Displays the number of POA threads currently in use (busy) for client/server connections, message files, or both, depending on POA configuration.
Page 532
Requests Pending (for client/server processing): Displays the number of client/server requests from GroupWise clients the POA has not yet been able to respond to. If the number is large, see “POA Statistics Box Shows Requests Pending” in “Post Office Agent Problems”...
Error Messages If the POA encounters a problem processing a message, it displays an error message in the POA Log Message box. See “Post Office Agent Error Messages” in GroupWise 8 Troubleshooting 1: Error Messages. POA Admin Thread Status Box The POA admin thread updates the post office database (wphost.db) when users and/or user information are added, modified, or removed, and repairs it when damage is detected.
Page 534
“Displaying Detailed Statistics about POA Functioning” on page 536 “Displaying Client/Server Information” on page 537 “Listing Message Queue Activity” on page 538 “Displaying Message Transfer Status” on page 538 “Restarting the MTP Thread” on page 539 “Displaying POA Admin Thread Status” on page 539 “Recovering the Post Office Database Automatically or Immediately”...
Page 535
Stopping the Linux POA When It Is Running As a Daemon To stop the Linux POA when it is running in the background as a daemon and you started it using script: grpwise 1 Make sure you are logged in as root 2 Change to the directory.
Page 536
POA Web Console You can suspend and resume the POA admin thread from the Configuration page. Under the General Settings heading, click Admin Task Processing > Suspend or Resume > Submit. Displaying the POA Software Date It is important to keep the POA software up-to-date. You can display the date of the POA software from the POA server console.
Page 537
POA Web Console You can display statistics on the Status page. Displaying Client/Server Information When the POA and the GroupWise clients communicate in client/server mode, you can display statistics to indicate the performance level of the TCP/IP communication. 1 At the server where the POA is running, display the POA server console. 2 Click Statistics >...
Page 538
Listing Message Queue Activity The POA uses eight queues to process message files. You can view the activity in each of these queues. For more information about message queues, see “Post Office Directory” in GroupWise 8 Troubleshooting 3: Message Flow and Directory Structure.
Page 539
Restarting the MTP Thread When the POA links to the MTA by way of TCP/IP, you can restart the Message Transfer Protocol (MTP) thread that provides the link between the POA and the MTA. 1 At the server where the POA is running, display the POA server console. 2 Click Actions >...
Page 540
Admin Thread Box The Admin Thread box displays the following information: Status: Displays one of the following statuses: Running: The POA admin thread is active. Suspended: The POA admin thread is not processing administrative messages. Starting: The POA admin thread is initializing. Terminated: The POA admin thread is not running.
Page 541
To change the setting permanently, see Section 36.1.2, “Configuring the POA in ConsoleOne,” on page 489. POA Web Console You can see whether automatic message and user database recovery is enabled on the Configuration page under the Performance Settings heading. Updating QuickFinder Indexes GroupWise uses QuickFinder technology to index messages and documents stored in post offices.
Page 542
To recreate QuickFinder indexes for the post office: 1 At the server where the POA is running, display the POA server console. 2 Click Actions > QuickFinder > Delete and Regenerate Indexes. NetWare Note: Use Options (F10) > Actions > Delete and QuickFinder Indexes. You can also press Ctrl+Q.
Page 543
Windows Note: For the Windows POA, you can select the viewer to use by providing the full path to the viewer program. The default viewer is Notepad. 4 Click View. For explanations of messages in the POA log file, see “Post Office Agent Error Messages”...
NetWare Note: Press F1 for information in any dialog box or menu. 37.2 Using the POA Web Console The POA Web console enables you to monitor and control the POA from any location where you have access to a Web browser and the Internet. This provides substantially more flexible access than the POA server console, which can only be accessed from the server where the POA is running.
Page 545
9b Click Set Password. 9c Type the password twice for verification. 9d Click Set Password. ® Unless you are using an SSL connection, do not use a Novell eDirectory username and password because the information passes over the non-secure connection between your Web browser and the POA.
Corresponding Startup Switches You can also use the /httpport, /httpuser, /httppassword, and httpssl startup switches in the POA startup file to enable and secure the POA Web console. In addition, you can use the /httprefresh switch to control how often the POA refreshes the information provided to your Web browser.
Page 547
“Viewing and Searching POA Log Files” on page 548 “Listing POA Scheduled Events” on page 549 “Checking Link Status to the MTA” on page 550 “Taking Performance Snapshots” on page 550 Monitoring POA Status When you first access the POA Web console, the Status page is displayed. Online help on the Status page helps you interpret the status information being displayed.
Page 548
POA Web Console Environment Page for a NetWare Server Figure 37-5 On a Linux server, the following information is displayed: POA Web Console Environment Page for a Linux Server Figure 37-6 On a Windows server, the following information is displayed: POA Web Console Environment Page for a Windows Server Figure 37-7 Viewing and Searching POA Log Files...
Page 549
POA Web Console with the Log Files Page Displayed Figure 37-8 To view a particular log file, select the log file, then click View Events. To search all log files for a particular string, type the string in the Events Containing field, select Select All, then click View Events.
Page 550
QuickFinder indexing and remote downloadable Address Book generation can be controlled using links from the Configuration page. The Configuration page also displays information about disk check events and database maintenance events. However, scheduled events must be created and modified using ConsoleOne. Checking Link Status to the MTA On the POA Web console menu, click MTP Status to view status information about the link between the POA for the post office and MTA for the domain.
The POA takes a snapshot every 60 seconds. 3 Refresh your browser window to display data as it is collected. 4 Specify the interval at which you want to write data to a file on disk for permanent storage. Performance data is saved to the file, where represents the current month mmddsnap.nnn...
Page 552
POA Web Console with the Configuration Page Displayed Figure 37-11 Click any hyperlinked configuration items to change settings for the current agent session. The settings that can be modified are much the same as those that can be changed at the POA server console, as described in Section 37.1.2, “Controlling the POA from the POA Server Console,”...
POA Web Console with the Message Transfer Protocol Settings Page Displayed Figure 37-13 On this page, you can restart MTA processing between the POA and the MTA. On the MTP status page, you can restart the send and receive threads separately. 37.3 Using POA Log Files Error messages and other information about POA functioning are written to log files as well as displaying on the POA server console.
37.3.2 Viewing POA Log Files You can view the contents of the POA log file from the POA server console and Web console. See the following tasks presented in Section 37.1.1, “Monitoring the POA from the POA Server Console,” on page 529: “Browsing the Current POA Log File”...
37.5 Using Novell Remote Manager If the POA is running on NetWare 6.5 or on Novell Open Enterprise Server (OES), you can use the IP Address Management feature in Novell Remote Manager (Manage Server > IP Address Management) to view the IP address and port configuration for the POA. This is also true for other GroupWise agents (MTA, Internet Agent, and WebAccess Agent) running on NetWare 6.5/OES...
Page 556
3 Locate the file on your Linux server. snmpd.conf 4 In a text editor, open the file and add the following line: snmpd.conf dlmod Gwsnmp /opt/novell/groupwise/agents/lib/libgwsnmp.so 5 Save the file and exit the text editor. snmpd.conf 556 GroupWise 8 Administration Guide...
Page 557
6 Restart the SNMP daemon (snmpd) to put the changes into effect. IMPORTANT: Make sure that the SNMP daemon always starts before the POA starts. 7 Skip to Section 37.6.2, “Copying and Compiling the POA MIB File,” on page 558. Setting Up SNMP Services for the Windows POA SNMP support is provided for up to eight Windows POAs on the same Windows server.
4 Continue through the rest of the installation process as prompted by the Agent Installation program. The Agent Installation program copies the SNMP support files to the agent installation directory, makes the appropriate Windows registry entries, and restarts the Windows SNMP service.
37.6.3 Configuring the POA for SNMP Monitoring In order for SNMP monitoring programs to monitor the POA, the POA must be configured with a network address and SNMP community string. 1 Browse to and right-click the POA object, then click Properties. 2 Click GroupWise >...
Corresponding Startup Switches By default, the POA generates error mail if an administrator has been assigned for the domain. Error mail can be turned off using the /noerrormail switch in the POA startup file. POA Web Console Another way to receive e-mail notification of POA problems is to use GroupWise Monitor to access the POA Web console.
Optimizing the POA You can adjust how the POA functions to optimize its performance. Before attempting optimization, you should run the POA long enough to observe its efficiency and its impact on other network applications running on the same server. See Chapter 37, “Monitoring the POA,”...
Page 562
If GroupWise client users cannot connect to the POA immediately or if response is sluggish, you can increase the number of threads. ® 1 In ConsoleOne , browse to and right-click the POA object, then click Properties. 2 Click GroupWise > Agent Settings to display the Agent Settings page. 3 Increase the number in the Client/Server Handler Threads field to increase the maximum number of threads the POA can create for client/server processing.
38.1.2 Adjusting the Number of Connections for Client/Server Processing Connections are the number of “sockets” through which client/server requests are communicated from the GroupWise client to the POA. Application connections: Each GroupWise user uses one application connection when he or she starts GroupWise.
5 Click OK to save the new connection settings. ConsoleOne then notifies the POA to restart so the new connection settings can be put into effect. Corresponding Startup Switches You can also use the /maxappconns /maxphysconns switches in the POA startup file to adjust the POA client/server processing. POA Web Console The Status page helps you assess whether the POA is currently meeting the...
Page 565
5 Increase the number in the Client/Server Handler Threads field as needed to increase the maximum number of threads the POA can create. The optimum number of threads for a POA is affected by many factors, including available system resources, number of users in Caching mode, number of users priming Caching mailboxes, and so on.
38.2 Optimizing Message File Processing If you run only one POA for the post office, you can adjust the number of POA threads for message file processing. If message file processing needs are extremely heavy for a post office, you can set up a dedicated message file processing POA to meet those needs.
POA uses, the more incoming messages it can process simultaneously. However, the more threads the POA uses, the fewer threads are available to other processes running on the same server. 4 Click OK to save the new thread setting. ConsoleOne then notifies the POA to restart so the new setting can be put into effect. Corresponding Startup Switches You can also use the /threads switch in the POA startup file to...
5 Increase the number in the Message Handler Threads field as needed. You can configure as many as 20 message handler threads. The optimum number is affected by many factors, including available system resources. 6 Deselect Enable Client/Server. Make sure another POA handles client/server processing. 7 Select Disable Administration Task Processing, so that this POA does not run an admin thread.
For a list of the file types that the POA can index, see Oracle Outside In Technology Supported Formats (http://www.oracle.com/technology/products/content-management/oit/ds_oitFiles.pdf). 38.3.1 Regulating Indexing By default, the POA indexes messages and documents in the post office every 24 hours at 8:00 p.m. You can modify this interval if users need messages and documents indexed more quickly.
For security reasons, you should enable the quarantine only to collect sample problem documents in order to submit them to Novell for investigation. Then you should turn off the quarantine to reestablish appropriate security for attached documents.
3 Select Quarantine Files That Fail during Conversion, then click OK. 4 Collect problem files for investigation. 5 Disable the quarantine to return to normal POA operations with full security for attached files. POA Web Console: You can see whether the quarantine is on or off on the Configuration page.
Page 572
To configure a basic dedicated indexing POA: 1 Create a new POA object for the post office as described in Section 36.1.1, “Creating a POA Object in eDirectory,” on page 488. 2 Right-click the new POA object, then click Properties. 3 Click GroupWise >...
14 Deselect Enable Automatic Database Recovery. Make sure another POA handles database recovery. 15 Set Maintenance Handler Threads to 0 (zero). Make sure another POA handles database maintenance and disk space management. 16 Deselect Perform User Upkeep and deselect Generate Address Book for Remote. Make sure another POA handles these tasks.
Page 574
When you have a large number of user databases that need to be indexed, you can configure the POA to index a specific range of databases based on user FIDs. For a task of this magnitude, you should run multiple dedicated indexing POAs with each POA configured to process a specific range of databases.
files to conserve disk space during periods of heavy indexing. It is primarily applicable when .inc using /qflevel=1 where indexing is a lower priority task. For /qflevel=2 and /qflevel=3, indexing itself is a higher priority than compression and deletion cleanup tasks. 38.4 Optimizing Database Maintenance If you run only one POA for the post office, you can adjust the number of database maintenance threads.
4 Click OK to save the new thread setting. ConsoleOne then notifies the POA to restart so the new setting can be put into effect. Corresponding Startup Switches You can also use the /gwchkthreads switch in the POA startup file to increase the number of POA threads started for database maintenance activities. POA Web Console The Status page helps you assess whether the POA is currently meeting the...
8 Click Apply to save the updated information on the Maintenance page. 9 Click GroupWise > Scheduled Events, then create database maintenance events as needed, as described in Section 36.4.1, “Scheduling Database Maintenance,” on page 520 Section 36.4.2, “Scheduling Disk Space Management,” on page 523.
3 Increase the number in the CPU Utilization field to allow the NetWare POA to use more server resources. Decrease the number in the CPU Utilization field to give the NetWare POA fewer server resources so those resources can be used by other programs on the server. 4 Decrease the number in the Delay Time field to allow NetWare POA threads to take on new tasks more quickly.
Page 579
By default, the POA is configured to handle a typical amount of purging efficiently. However, if the default configuration is unacceptably slow during periods of heavy purging, you can prevent users' client response time from degrading by adjusting the POA’s configuration so that it passes pass additional purge operations to background threads.
Using POA Startup Switches ® You can override settings provided in ConsoleOne by using startup switches in the POA startup file. When you run the Agent Installation program, an initial POA startup file is created in the agent installation directory. It is named using the first 8 characters of the post office name with a .poa extension.
Page 582
NetWare POA Linux POA Windows POA ConsoleOne Settings /httprefresh --httprefresh /httprefresh /httpssl --httpssl /httpssl HTTP SSL /httpuser --httpuser /httpuser HTTP User Name /imap --imap /imap IMAP /imapmaxthreads --imapmaxthreads /imapmaxthreads Max IMAP Threads /imapport --imapport /imapport IMAP Port /imapreadlimit --imapreadlimit /imapreadlimit /imapssl --imapssl /imapssl...
Page 583
NetWare POA Linux POA Windows POA ConsoleOne Settings /log --log /log Log File Path /logdays --logdays /logdays Max Log File Age /logdiskoff --logdiskoff /logdiskoff Logging Level /loglevel --loglevel /loglevel Logging Level /logmax --logmax /logmax Max Log Disk Space /maxappconns --maxappconns /maxappconns Max Application Connections /maxphysconns...
Page 584
NetWare POA Linux POA Windows POA ConsoleOne Settings /notcpip --notcpip /notcpip Enable Client/Server /nuuoffset --nuuoffset /nuuoffset Start User Upkeep /password --password /password Remote Password /port --port /port Client/Server Port /primingmax --primingmax /primingmax Max Thread Usage for Priming and Moves /qfbaseoffset --qfbaseoffset /qfbaseoffset Start QuickFinder Indexing...
The full path must be included if the file does not reside in the same directory with the POA program. Linux: The startup file always resides in the /opt/novell/groupwise/agents/share directory. Windows: The full path must be included if the file does not reside in the same directory with the POA program.
For information about clustering the POA, see the GroupWise 8 Interoperability Guide. If you are running the NetWare POA on the latest version of NetWare 6.5/OES NetWare and Novell Cluster Services , the POA can detect the cluster automatically. NetWare POA...
NetWare POA Linux POA Windows POA Syntax: /enforceclientversion-setting --enforceclientversion setting /enforceclientversion-setting Exampl /enforceclientversion-version --enforceclientversion date /enforceclientversion-both See also /gwclientreleasedate, and /gwclientreleaseversion. 39.8 /evocontrol Determines which versions of Evolution are allowed to access the post office. Users might experience problems using Evolution to connect to their GroupWise mailboxes if they are using Evolution 2.6.0 or earlier.
39.10 /gwchkthreads Specifies the number of threads the POA starts for Mailbox/Library Maintenance activities. The default is 4; valid values range from 1 to 8. See Section 38.4.1, “Adjusting the Number of POA Threads for Database Maintenance,” on page 575. NetWare POA Linux POA Windows POA...
NetWare POA Linux POA Windows POA Syntax: /help or /? --help /help or /? Example: load gwpoa /help ./gwpoa --help gwpoa.exe /help 39.14 /home Specifies the post office directory, where the POA can find the message and user databases to service.
39.17 /httprefresh Specifies the rate at which the POA refreshes the status information in your Web browser. The default is 60 seconds. See Section 37.2, “Using the POA Web Console,” on page 544. NetWare POA Linux POA Windows POA Syntax: /httprefresh-seconds --httprefresh seconds /httprefresh-seconds...
NetWare POA Linux POA Windows POA Example: /imap-enabled --imap disabled /imap-enabled See also /imapmaxthreads, /imapport, /imapssl, /imapsslport, and /imapreadlimit. 39.21 /imapmaxthreads Specifies the maximum number of IMAP threads the POA can create to service IMAP clients. The default is 40. This setting is appropriate for most systems. See Section 36.2.3, “Supporting IMAP Clients,”...
39.24 /imapssl Sets the availability of secure SSL communication between the POA and IMAP clients. Valid settings are enable and disable. See Section 36.3.3, “Securing the Post Office with SSL Connections to the POA,” on page 511. NetWare POA Linux POA Windows POA Syntax: /imapssl-setting...
IP addresses. See Section 36.1.4, “Binding the POA to a Specific IP Address,” on page 495. See also “Editing Clustered Agent Startup Files” in “Novell Cluster Services on NetWare” in the GroupWise 8 Interoperability Guide. NetWare POA Linux POA Windows POA...
/language-code Example: /language-de --language de /language-fr Contact your local Novell sales office for information about language availability. See Chapter 7, “Multilingual GroupWise Systems,” on page 111 for a list of language codes. 39.33 /ldapdisablepwdchg Prevents GroupWise users from changing their LDAP passwords by using the Password dialog box in the GroupWise client.
39.34 /ldapipaddr Specifies the LDAP server’s network address as either an IP address or a DNS hostname. You can specify multiple network addresses to provide failover capabilities for your LDAP servers. See “Specifying Failover LDAP Servers (Non-SSL Only)” on page 518.
39.37 /ldapport Specifies the port number that the LDAP server listens on for authentication. The default is 389. See Section 36.3.4, “Providing LDAP Authentication for GroupWise Users,” on page 514. NetWare POA Linux POA Windows POA Syntax: /ldapport-port_number --ldapport port_number /ldapport-port_number Example: /ldapport-390...
See also /ldapipaddr, /ldapport, /ldapuser, /ldappwd, /ldapuserauthmethod, /ldapdisablepwdchg, ldapsslkey and /ldaptimeout. 39.41 /ldapsslpooln Indicates to the POA that the pooled LDAP server it is logging in to is using SSL. See “Configuring a Pool of LDAP Servers” on page 517. NetWare POA Linux POA Windows POA...
NetWare POA Linux POA Windows POA Exampl /ldapsslkeypool4- --ldapsslkeypool4 /certs/ /ldapsslkeypool4-\ldap\gwkey.der \ldap\gwkey.der gwkey.der /ldapsslkeypool4- /ldapsslkeypool4- m:\ldap\gwkey.der svr2\sys:\ldap\gwkey.der /ldapsslkeypool4- /ldapsslkeypool4- \\svr2\c\ldap\gwkey.der \\svr2\sys\ldap\gwkey.de See also /ldapippooln, /ldapportpooln, /ldappoolresettime, and /ldapsslpooln. 39.44 /ldaptimeout Specifies the number of seconds that the POA connection to the LDAP server can be idle before the POA drops the connection.
See also /intruderlockout, /incorrectloginattempts, and /attemptsresetinterval. 39.48 /log Specifies the directory where the POA stores its log files. The default location varies by platform. NetWare: post_office\wpcsout\ofs Linux: /var/log/novell/groupwise/post_office_name.poa Windows: post_office\wpcsout\ofs For more information, see Section 37.3, “Using POA Log Files,” on page 553.
Typically you find multiple log files in the specified directory. The first 4 characters represent the date. The next 3 characters identify the agent. A three-digit extension allows for multiple log files created on the same day. For example, a log file named indicates that it is a POA log 0518poa.001 file, created on May 18.
39.52 /logmax Sets the maximum amount of disk space for all POA log files. When the specified disk space is consumed, the POA deletes existing log files, starting with the oldest. The default is 102400 KB (100 MB). See Section 37.3, “Using POA Log Files,” on page 553.
NetWare POA Linux POA Windows POA Syntax: /mtpinipaddr-network_addr --mtpinipaddr network_addr /mtpinipaddr-network_addr Example: /mtpinipaddr-172.16.5.18 --mtpinipaddr 172.16.5.19 /mtpinipaddr-172.16.5.20 /mtpinipaddr-server1 --mtpinipaddr server2 /mtpinipaddr-server3 See also /mtpinport, /mtpoutipaddr, /mtpoutport, /mtpsendmax, and /nomtp. 39.56 /mtpinport Sets the message transfer port number the POA listens on for messages from the MTA. The default is 7101.
39.59 /mtpsendmax Sets the maximum size in megabytes for messages being sent outside the post office. By default, messages of any size can be transferred to the MTA. See Section 36.2.7, “Restricting Message Size between Post Offices,” on page 507. NetWare POA Linux POA Windows POA...
The POA admin thread must run for at least one POA for each post office. However, it can be disabled for POAs with specialized functioning where the database update and repair activities of the POA admin thread could interfere with other, more urgent processing. NetWare POA Linux POA Windows POA...
39.67 /nogwchk Turns off Mailbox/Library Maintenance processing for the POA. The default is for the POA to perform Mailbox/Library Maintenance tasks requested from ConsoleOne and configured as POA scheduled events. NetWare POA Linux POA Windows POA Syntax: /nogwchk --nogwchk /nogwchk See also /gwchkthreads.
See also /nomf and /nomflow. 39.71 /nomflow Turns off processing lower priority messages files (message queues 2 through 7). For information about message queues, see “Post Office Directory” in GroupWise 8 Troubleshooting 3: Message Flow and Directory Structure. NetWare POA Linux POA Windows POA Syntax:...
39.75 /nordab Disables daily generation of the GroupWise Address Book for Remote users. See Section 36.4.3, “Performing Nightly User Upkeep,” on page 526. NetWare POA Linux POA Windows POA Syntax: /nordab --nordab /nordab See also /rdaboffset. 39.76 /norecover Disables automatic database recovery. The default is for automatic database recovery to be turned If the POA detects a problem with a database when automatic database recovery has been turned off, the POA notifies the administrator, but it does not recover the problem database.
Two specialized configurations that require turning off automatic database recovery are described in Section 38.2.2, “Configuring a Dedicated Message File Processing POA,” on page 567 Section 38.3.3, “Configuring a Dedicated Indexing POA,” on page 571. 39.79 /nuuoffset Specifies the number of hours after midnight for the POA to start performing user upkeep. The default is 1 hour;...
39.82 /primingmax Sets the maximum number of client/server handler threads that POA can use for priming users’ Caching mailboxes. The default is 30 per cent. See Section 36.2.6, “Supporting Forced Mailbox Caching,” on page 506. NetWare POA Linux POA Windows POA Syntax: /primingmax-percentage --primingmax percentage...
NetWare POA Linux POA Windows POA Syntax: /qfdeleteold --qfdeleteold /qfdeleteold See also /qflevel, /qfnolibs, /qfnopreproc, /qfnousers, /qfusefidbeg, and /qfuserfidend. 39.86 /qfinterval Specifies the interval in hours for the POA to update the QuickFinder indexes in the post office. The default is 24 hours. See Section 38.3.1, “Regulating Indexing,”...
QuickFinder Indexing Priority Levels Table 39-2 Priority Level Description Index a maximum of 1000 items at a time, rather than the default of 500. Index a maximum of 500 items at time using a low priority thread. This keeps frequent daytime indexing cycles from interfering with users’...
NetWare POA Linux POA Windows POA Syntax: /qfnousers --qfnousers /qfnouser See also /qfdeleteold, /qflevel, /qfnolibs, /qfnopreproc, /qfusefidbeg, and /qfuserfidend. 39.92 /qfuserfidbeg Specifies the beginning of a range of FIDs associated with user databases ( ) that you userxxx.db want to index. The xxx in the user database filename is the FID. To determine what FIDs are in use, list the contents of the directory in the post office directory.
NetWare POA Linux POA Windows POA Example: /rdaboffset-2 --rdaboffset 3 /rdaboffset-4 See also /nordab. 39.95 /rights Verifies that the POA has the required network rights or permissions to all directories where it needs access in the post office directory. When started with this switch, the POA lists directories it is checking, which can be a lengthy process.
NetWare POA Linux POA Windows POA Syntax: /soap-enabled or disabled --soap enabled or disabled /soap-enabled or disabled Example: /soap-enabled --soap enabled /soap-disabled See also /soapmaxthreads, /soapport, /soapsizelimit, soapssl, and /soapthreads. 39.99 /soapmaxthreads Specifies the maximum number of SOAP threads the POA can create to service SOAP clients. The default is 4;...
39.102 /soapssl Sets the availability of secure SSL communication between the POA and SOAP clients. Valid settings are enable and disable. See Section 36.3.3, “Securing the Post Office with SSL Connections to the POA,” on page 511. NetWare POA Linux POA Windows POA Syntax: /soapssl-setting...
NetWare POA Linux POA Windows POA Syntax: /threads-number --threads number /threads-number Example: /threads-10 --threads 15 /threads-20 39.106 /user Provides the network user ID for the POA to use when accessing post offices and/or document storage areas on remote servers. You can also provide user and password information on the Post Office Settings page in ConsoleOne.
Message Transfer Agent Chapter 40, “Understanding Message Transfer between Domains and Post Offices,” on page 619 Chapter 41, “Configuring the MTA,” on page 627 Chapter 42, “Monitoring the MTA,” on page 661 Chapter 43, “Optimizing the MTA,” on page 689 Chapter 44, “Using MTA Startup Switches,”...
Understanding Message Transfer between Domains and Post Offices A domain organizes post offices into a logical grouping for addressing, routing, and administration ® purposes in your GroupWise system. Messages are transferred between post offices and domains by the Message Transfer Agent (MTA). The following topics help you understand domains and the functions of the MTA: Section 40.1, “Domain Representation in ConsoleOne,”...
GroupWise View Showing Post Offices in Relationship to Domains Figure 40-2 40.2 Domain Directory Structure Physically, a domain consists of a set of directories that house all the information stored in the domain. See “Domain Directory” in GroupWise 8 Troubleshooting 3: Message Flow and Directory Structure.
40.3.3 Gateways Gateways are installed and configured at the domain level of your GroupWise system. For a list of gateways, see the GroupWise Gateways Documentation Web site (http://www.novell.com/ documentation/gwgateways). Understanding Message Transfer between Domains and Post Offices 621...
Replicates updates to all domains and post offices throughout your GroupWise system. This keeps the Address Book up to date for all GroupWise users. ® Synchronizes GroupWise user information with Novell eDirectory user information. This handles updates made in ConsoleOne without the GroupWise Administrator snap-in running.
GroupWise 6.5 Troubleshooting 3: Message Flow and Directory Structure. 40.7 Cross-Platform Issues between Domains and Post Offices Domains can be located on the following platforms: ® Novell NetWare Windows Server Linux The GroupWise agents can run on the following platforms: Novell NetWare Windows Server...
Section 40.7.4, “MTA/Domain Platform Independence through TCP/IP Links,” on page 625 Section 40.7.5, “MTA/Domain Platform Independence through the Transfer Pull Configuration,” on page 625 40.7.1 MTA Platform Dependencies Because of Direct Access Requirements to Post Offices The MTA must always have direct access to the domain directory. In addition, if using mapped or UNC links to post offices, the MTA must have direct access to each post office directory as well.
The table below summarizes the various combinations of the platform of MTA for the source domain and the platform where the destination domain is located, and indicates which combinations work for direct access and which ones do not: MTA Platforms and Domain Platforms Table 40-2 NetWare MTA for Linux MTA for Source...
Configuring the MTA For detailed instructions about installing and starting the MTA for the first time, see “Installing GroupWise Agents” in the GroupWise 8 Installation Guide. ® As your GroupWise system grows and evolves, you will probably need to modify MTA configuration to meet changing system needs.
Do not attempt to create more than one MTA object for a domain. ® To create a new MTA object in Novell eDirectory: 1 In ConsoleOne, browse to and right-click the Domain object for which you need to create an MTA object, then click New.
7 In the Description field, type one or more lines of text describing the MTA. This description displays on the MTA server console as the MTA runs. If multiple administrators work at the server where the MTA will run, the description includes a note about who to contact before stopping the MTA.
Page 630
3 Right-click the MTA object, then click Properties. The table below summarizes the MTA configuration settings in the MTA object properties pages and how they correspond to MTA startup switches (as described in Chapter 44, “Using MTA Startup Switches,” on page 697): MTA Configuration Settings Table 41-1...
Page 631
ConsoleOne Properties Pages and Corresponding Tasks and Startup Switches Settings SNMP Community "Get" String Section 42.6, “Using an SNMP Management Console,” on page 683. HTTP User Name Section 42.2.1, “Setting Up the MTA Web Console,” on page 673. HTTP Password See also /httpuser and /httppassword.
ConsoleOne Properties Pages and Corresponding Tasks and Startup Switches Settings Allow MTA to Send Directly to Other “Using Dynamic Internet Links” in “Connecting to Other GroupWise Systems GroupWise Systems” in the GroupWise 8 Multi-System Administration Guide. See also /nodns. MTA SSL Settings Page Certificate File Section 41.2.3, “Securing the Domain with SSL Connections to the MTA,”...
Page 633
4 On the Network Address page, click the pencil icon for the TCP/IP Address field to display the Edit Network Address dialog box. 5 Select IP Address, then provide the IP address, in dotted decimal format, of the server where the MTA is running.
Page 634
Corresponding Startup Switches You can also use the /tcpport switches in the MTA startup file to provide the IP address and the message transfer port number. MTA Web Console You can view the MTA TCP/IP information on the Configuration page under the TCP/IP Settings heading.
Page 635
8 Repeat Step 4 through Step 7 for each domain in the Outbound Links list where you want the MTA to use a TCP/IP link. Selecting multiple domains is also allowed. 9 Double-click a domain in the Inbound Links list. 10 Set Link Type to Direct.
Async Gateway documentation at the GroupWise Gateway Documentation Web site (http://www.novell.com/documentation/gwgateways). Using the Internet Agent to Link Domains You can use the Internet Agent to link a domain into your GroupWise system across the Internet. When you use the Internet Agent as the transport mechanism between domains, it encapsulates GroupWise messages (both e-mail messages and administrative messages) within SMTP messages in order to transport them across the Internet.
Page 637
Using TCP/IP Links between a Domain and its Post Offices To change from mapped or UNC links to TCP/IP links between a domain and its post offices, you must perform the following two tasks: “Configuring the Agents for TCP/IP” on page 637 “Changing the Link Protocol between a Domain and its Post Offices to TCP/IP”...
Page 638
7 In the Message Transfer Port field, specify a unique TCP port on which the POA will listen for incoming messages from the MTA. The default is 7101. 8 For optimum security, select Enabled in the SSL drop-down list for the message transfer port. For more information, see Section 41.2.3, “Securing the Domain with SSL Connections to the MTA,”...
6 Make sure the information displayed in the Edit Post Office Link dialog box matches the information provided in the Edit Network Address dialog box in “Configuring the Agents for TCP/IP” on page 637. 7 Click OK. 8 Repeat Step 4 through Step 7 for each post office in the domain where you want to use TCP/IP...
41.1.6 Moving the MTA to a Different Server As your GroupWise system grows and evolves, you might need to move an MTA from one server to another. For example, you might decide to run the MTA on a different platform, or perhaps you want to move it to a server that has more disk space for the mslocal directory.
The full domain name is used in the filename. However, all letters are lowercase and any spaces in the domain name are removed. The startup file is located in the /opt/ novell/groupwise/agents/share directory. 3 Adjust the setting of the /home switch to point to the new location of the domain directory.
41.2 Configuring User Access through the Domain Although users do not access the domain as they use the GroupWise client, their messages often pass through domains while traveling from one post office to another. Section 41.2.1, “Restricting Message Size between Domains,” on page 642 Section 41.2.2, “Enabling Live Remote,”...
If a message file exceeds the delay message size, the message file is moved into the low priority (6) message queue, where only one MTA thread is allocated to process very large messages. This arrangement allows typical messages to be processed promptly, while delaying large messages that exceed the specified size.
Page 644
3 To use SSL connections between the MTA and the POAs for its post offices, which provides optimum security, select Enabled in the Message Transfer SSL drop-down list. The MTA must use a TCP/IP connection to each POA in order to enable SSL for the connection.
For background information about certificate files and SSL key files, see Section 75.2, “Server Certificates and SSL Encryption,” on page 1161. 7 In the Certificate File field, browse to and select the public certificate file provided to you by your CA. 8 In the SSL Key File field: 8a Browse to and select your private key file.
41.3.1 Using Routing Domains As an alternative to configuring individual links between individual domains throughout your GroupWise system, you can establish a system of one or more routing domains under the following circumstances. Domains must connect to the routing domains with TCP/IP links. GroupWise 5.5 and later domains can be part of the routing domain system.
Page 647
If you want only undeliverable GroupWise messages to be routed to the default routing domain, deselect Force All Messages to This Domain. If you do not force all messages to the system default routing domain, then you have the option of allowing selected MTAs to provide routing domain services in addition to the system default routing domain.
MTA Web Console You can check routing information on the Configuration page under the General Settings heading. 41.3.2 Scheduling Direct Domain Links When domains link across an expensive medium such as long-distance phone lines, you can reduce the cost of the link by controlling when it is open. You can choose to have some types of messages wait in the message queues for the lowest phone rate.
Page 649
The link schedule grid displays the current schedule for the selected direct link. The grid consists of half-hour time slots showing the link profile assigned to each time slot. Available link profiles are listed below the link schedule grid. Each link profile defines the following values to set the conditions under which the link opens: Which message queues to monitor Maximum wait time for any message in any monitored queue Maximum number of waiting messages allowed in all monitored queues...
Page 650
8 In the Description field, provide whatever additional information is necessary to describe the purpose of the link profile. 9 Use the scroll bar in the Time Threshold box to select which queues to monitor and process when this link profile is in effect. Queue Purpose Busy Search requests...
41.3.3 Using a Transfer Pull Configuration Typically for a mapped or UNC link, the MTA for the sending domain writes (or “pushes”) message files into the input queue subdirectories of the receiving domain. However, it is possible to change this configuration so the MTA for the receiving domain picks up (or “pulls”) message files from the sending domain.
9 Click File > Exit > Yes to save the link changes for the sending domain and return to the main ConsoleOne window. 10 Continue with “Modifying the Incoming Transfer Pull Link” on page 652. Modifying the Incoming Transfer Pull Link 1 In ConsoleOne, connect to the receiving domain: 1a Click Tools >...
Administrator snap-in running. The user information was changed using Novell iManager. The user information was changed using Novell eGuide and the GroupWise Identity Manager driver is not in use In these situations, user information in eDirectory no longer matches corresponding user information in GroupWise.
Page 654
The eDirectory User Synchronization Configuration dialog box lists all domains in your GroupWise system, the MTA currently assigned to provide eDirectory user synchronization for each domain, and the current status of that agent’s ability to perform eDirectory user synchronization. 2 Click Configure Agents. 3 Select a NetWare MTA that you want to perform eDirectory user synchronization.
Page 655
6b Fill in the following fields: Available LDAP Servers: Select the LDAP server that you want the Linux or Windows MTA to log into in order to gain access to eDirectory, then click Set Preferred. LDAP User Name: Browse to and select the user that the Linux or Windows MTA can use to log in as.
Page 656
If some domains are still disabled, continue with “Assigning an eDirectory-Enabled MTA to Synchronize Other Domains” on page 656. Assigning an eDirectory-Enabled MTA to Synchronize Other Domains After at least one MTA is performing eDirectory user synchronization, other MTAs not performing eDirectory user synchronization themselves can have an eDirectory-enabled MTA gather the eDirectory information for them.
Page 657
Performing eDirectory User Synchronization Manually After eDirectory user synchronization is enabled, you can perform eDirectory user synchronization at any time from the NetWare MTA server console. See “Performing eDirectory User Synchronization” on page 671. This manual option is not available for Linux or Windows MTAs. Scheduling eDirectory User Synchronization By default, one eDirectory user synchronization event is scheduled at 1:00 a.m.
4 Set Type to eDirectory User Synchronization. 5 In the Trigger box, specify when you want the eDirectory user synchronization event to take place. You can have the synchronization event take place once a week, once a day, or at any other regular interval, at whatever time you choose.
Page 659
3 In the Message Logging field, select a logging level to turn message logging on. 4 In the Message Log Path field, specify the full path of the file where the MTA will record the logging information. 5 Select the types of information you want to track: Correlate Delivery Status Reports: Select this option to maintain the relationship between user messages and their corresponding delivery status reports in the logged information.
Section 42.3, “Using MTA Log Files,” on page 681 Section 42.4, “Using GroupWise Monitor,” on page 682 Section 42.5, “Using Novell Remote Manager,” on page 683 Section 42.6, “Using an SNMP Management Console,” on page 683 Section 42.7, “Notifying the Domain Administrator,” on page 687 Section 42.8, “Using the MTA Error Message Documentation,”...
Page 662
NetWare: The MTA server console always displays on the NetWare server console. Linux: You must use the --show startup switch in order to display the Linux MTA server console. “Starting the Linux Agents with a User Interface” in “Installing GroupWise Agents”...
Page 663
Domains: Displays the total number of domains the MTA links to and the number that are currently closed. Post Offices: Displays the total number of post offices in the domain and the number that are currently closed. Gateways: Displays the total number of gateways in the domain and the number that are currently closed.
MTA Admin Thread Status Box The MTA admin thread updates the domain database (wpdomain.db) when domains, post offices, users, and other types of object information are added, modified, or removed, and repairs it when damage is detected. To display the MTA Admin Thread Status box from the MTA server console, click Configuration >...
Page 665
“Displaying MTA Admin Thread Status” on page 669 “Recovering the Domain Database Automatically or Immediately” on page 670 “Performing eDirectory User Synchronization” on page 671 “Browsing the Current MTA Log File” on page 671 “Viewing a Selected MTA Log File” on page 671 “Cycling the MTA Log File”...
Page 666
4 Use the following command to verify that the MTA has stopped. ./grpwise status To stop the Linux MTA when it is running in the background as a daemon and you started it manually (not using the grpwise script): 1 Make sure you are logged in as root 2 Determine the process IDs (PIDs) of the MTA: ps -eaf | grep gwmta...
Page 667
To resume the MTA for a location: 1 At the server where the MTA is running, display the MTA server console. 2 Click Configuration > Status. 3 Click the location (or multiple locations) to resume, then click Resume. NetWare Note: Use Options (F10) > Configuration Status. Select the location, then click Resume.
Page 668
To display the current MTA settings: 1 At the server where the MTA is running, display the MTA server console. 2 Click Configuration > Agent Settings. NetWare Note: Use View Log File (F9) to check the MTA settings recorded at the top of the log file.
Page 669
Last Closed/Opened: Provides the date and time when the location was last closed and opened. Last Closure Reason: Indicates why a closed location is closed. To look up last closure reasons, see “Message Transfer Agent Error Messages” in GroupWise 8 Troubleshooting 1: Error Messages.
Page 670
Status: Displays one of the following statuses: Normal: The MTA admin thread is able to access the domain database normally. Recovering: The MTA admin thread is recovering the domain database. DB Error: The MTA admin thread has detected a critical database error. The domain database ( ) cannot be recovered.
Page 671
General Settings heading, click Admin Task Processing. Select Automatic Recovery or Perform DB Recovery as needed. Performing eDirectory User Synchronization ® You can configure the MTA to perform Novell eDirectory user synchronization at regular intervals. See Section 41.4.1, “Using eDirectory User Synchronization,” on page 653.
Page 672
For explanations of messages in the MTA log file, see “Message Transfer Agent Error Messages” in GroupWise 8 Troubleshooting 1: Error Messages. MTA Web Console You can view and search MTA log files on the Log Files page. Cycling the MTA Log File You can have the MTA start a new log file as needed.
42.2 Using the MTA Web Console The MTA Web console enables you to monitor the MTA from any location where you have access to a Web browser and the Internet. This provides substantially more flexible access than the MTA server console, which can only be accessed from the server where the MTA is running. Section 42.2.1, “Setting Up the MTA Web Console,”...
Page 674
6 If you want to use an SSL connection for the MTA Web console, which provides optimum security, select Enabled in the HTTP SSL drop-down list. For additional instructions about using SSL connections, see Section 75.2, “Server Certificates and SSL Encryption,” on page 1161.
42.2.2 Accessing the MTA Web Console To monitor the MTA from your Web browser, view the URL where the MTA is located by supplying the network address and port number as provided in ConsoleOne. For example: http://172.16.5.18:7100 http://172.16.5.18:7180 http://server1:7100 https://server2:7180 When viewing the MTA Web console, you can specify either the message transfer port or the HTTP port.
Page 676
MTA Web Console with the Status Page Displayed Figure 42-4 Click the Router link to display details about the MTA routing queue ( ). You can quickly gwinprog determine how many messages are awaiting processing, how large they are, and how long they have been waiting in the routing queue.
Page 677
On a Windows server, the following information is displayed: MTA Web Console with the Environment Page Displayed for a Windows Server Figure 42-7 Viewing and Searching MTA Log Files On the MTA Web console menu, click Log Files to display and search MTA log files. MTA Web Console with the Event Log Filter Page Displayed Figure 42-8 To view a particular log file, select the log file, then click View Events.
Page 678
Message Transfer (MTP): The message transfer threads communicate with other MTAs and with POAs in the local domain to transfer messages to domains and post offices to which the local MTA is linked by way of TCP/IP. See “Using TCP/IP Links between Domains” on page 632 “Using TCP/IP Links between a Domain and its Post Offices”...
Click a location to view its holding queue. Click View Link Configuration to determine the address of each location and access the agent Web consoles of other domains and of post offices that belong to the local domain. Click View TCP/IP Connections to view incoming and outgoing TCP/IP links. Click View Gateways to restrict the list to just gateways.
Page 680
MTA Web Console with the Configuration Page Displayed Figure 42-12 Click the Event Log Settings heading to change the MTA log settings for the current MTA session. Controlling the MTA Admin Thread On the Configuration page, click Admin Task Processing. MTA Web Console with the Admin Task Status Page Displayed Figure 42-13 Modify the functioning of the MTA admin thread as needed, then click Submit.
MTA Web Console with the Links Page Displayed Figure 42-14 Select one or more locations, then click Suspend or Resume as needed. 42.3 Using MTA Log Files Error messages and other information about MTA functioning are written to log files as well as displaying on the MTA server console.
42.3.2 Viewing MTA Log Files You can view the contents of the MTA log file from the MTA server console and Web console. See the following tasks: “Browsing the Current MTA Log File” on page 671 “Viewing a Selected MTA Log File” on page 671 “Cycling the MTA Log File”...
42.5 Using Novell Remote Manager If the MTA is running on NetWare 6.5 or on Novell Open Enterprise Server (OES), you can use the IP Address Management feature in Novell Remote Manager (Manage Server > IP Address Management) to view the IP address and port configuration for the MTA. This is also true for other GroupWise agents (POA, Internet Agent, and WebAccess Agent) running on NetWare 6.5/OES...
Page 684
3 Locate the file on your Linux server. snmpd.conf 4 In a text editor, open the file and add the following line: snmpd.conf dlmod Gwsnmp /opt/novell/groupwise/agents/lib/libgwsnmp.so 5 Save the file and exit the text editor. snmpd.conf 684 GroupWise 8 Administration Guide...
Page 685
6 Restart the SNMP daemon (snmpd) to put the changes into effect. IMPORTANT: Make sure that the SNMP daemon always starts before the MTA starts. 7 Skip to Section 42.6.2, “Copying and Compiling the MTA MIB File,” on page 686. Setting Up SNMP Services for the Windows MTA SNMP support is provided for up to eight Windows MTAs on the same Windows server.
4 Continue through the rest of the installation process as prompted by the Agent Installation program. The Agent Installation program copies the SNMP support files to the agent installation directory, makes the appropriate Windows registry entries, and restarts the Windows SNMP service.
42.6.3 Configuring the MTA for SNMP Monitoring In order for SNMP monitoring programs to monitor the MTA, the MTA must be configured with a network address and SNMP community string. 1 In ConsoleOne, browse to and right-click the MTA object, then click Properties. 2 Click GroupWise >...
MTA Web Console Another way to receive e-mail notification of MTA problems is to use GroupWise Monitor to access the MTA Web console. See Section 63.5.1, “Configuring E-Mail Notification,” on page 1018. 42.8 Using the MTA Error Message Documentation MTA error messages are documented with the source and explanation of the error, possible causes of the error, and actions to take to resolve the error.
Optimizing the MTA You can adjust how the MTA functions to optimize its performance. Before attempting optimization, you should run the MTA long enough to observe its efficiency and its impact on other network applications running on the same server. See Chapter 42, “Monitoring the MTA,”...
By default, the MTA waits 5 seconds for a response when trying to contact another MTA or a POA across a TCP/IP link. If no response is received from the other MTA or the POA, the sending MTA tries again three more times. If all four attempts fail, the MTA reports an error, then waits 10 minutes before it tries again.
Page 691
By default, when using mapped or UNC links, the MTA scans its high priority queues every 5 seconds and its regular and low priority queues every 15 seconds. You can adjust the scan cycle ® settings to meet the needs of your GroupWise system.
43.2.3 Adjusting the Number of MTA Scanner Threads for the Domain and Post Offices When using mapped or UNC links, the MTA automatically starts four scanner threads, one for each of the following subdirectories of its input queues: Priority Used For Subdirectory Busy Search requests from GroupWise client users GroupWise Remote user requests...
Page 693
With these default settings, the MTA always starts four scanner threads. You can deselect either option so that the MTA starts fewer scanner threads 3 Deselect scanner thread options to allocate threads to priority subdirectories as shown in the table below. Two High Two Mail Priority...
43.3 Optimizing the Routing Queue Using startup switches in the MTA startup file, you can fine-turn MTA processing in of the routing queue. When the MTA starts, it starts one or more router threads to process its routing queue ). As messages arrive in the routing queue, it starts additional routers as needed, within gwinprog parameters you can set.
Page 695
3 Decrease the number of seconds in the Attach Retry field if you want the MTA to try to contact closed locations more often. Increase the number of seconds in Attach Retry field if you want the MTA to try to contact closed locations less often.
Using MTA Startup Switches ® You can override settings provided in ConsoleOne by using startup switches in the MTA startup file. When you run the Agent Installation program, an initial MTA startup file is created in the agent installation directory. It is named using the first 8 characters of the domain name with a .mta extension.
Page 698
NetWare MTA Linux MTA Windows MTA ConsoleOne Settings /keypassword --keypassword /keypassword SSL Key File Password /language --language /language /liveremote --liveremote /liveremote /log --log /log Log File Path /logdays --logdays /logdays Max Log File Age /logdiskoff --logdiskoff /logdiskoff Logging Level /loglevel --loglevel /loglevel Logging Level...
MTA program. On Linux, the startup file always resides in the directory. The startup /opt/novell/groupwise/agents/share file must reside on the same server where the MTA is installed. NetWare MTA...
44.4 /cluster Informs the MTA that it is running in a cluster. A clustered MTA automatically binds to the IP address configured for the MTA object even if the Bind Exclusively to TCP/IP Address option is not selected on the MTA Network Address page in ConsoleOne. This prevents unintended connections to other IP addresses, such as the loopback address or the node’s physical IP address.
Example: /defaultroutingdomain- --defaultroutingdomain /defaultroutingdomain-inethub inethub inethub 44.8 /dn ® Specifies the Novell eDirectory distinguished name of the NetWare MTA object to facilitate logging into remote servers and authenticating to eDirectory. It can be used instead of the /user password switches.
NetWare MTA Linux MTA Windows MTA Syntax: /help or /? --help or --? /help or /? Example: load gwmta.nlm /help ./gwmta --help gwmta.exe /help 44.12 /home Specifies the domain directory, where the MTA can access the domain database (wpdomain.db). There is no default location. You must use this switch in order to start the MTA NetWare MTA Linux MTA Windows MTA...
44.15 /httprefresh Specifies the rate at which the MTA refreshes the status information in your Web browser. The default is 60 seconds. See Section 42.2, “Using the MTA Web Console,” on page 673. NetWare MTA Linux MTA Windows MTA Syntax: /httprefresh-seconds --httprefresh seconds /httprefresh-seconds...
Exampl /ip-172.16.5.18 --ip 172.16.5.18 /ip-172.16.5.18 /ip-”mtasvr.provo.novell.com” --ip “mtasvr.provo.novell.com” /ip-”mtasvr.provo.novell.com” 44.19 /keyfile Specifies the full path to the private file used to provide secure SSL communication between the MTA and other programs. See Section 41.2.3, “Securing the Domain with SSL Connections to the MTA,”...
Example: /language-es --language de /language-fr Contact your local Novell sales office for information about language availability. Chapter 7, “Multilingual GroupWise Systems,” on page 111 for a list of language codes. 44.22 /liveremote Turns on re-direction of Remote client requests and provides the TCP port on which the MTA listens for Remote client requests.
See also /loglevel, /logdiskoff, /logdays, and /logmax. 44.24 /logdays Sets the number of days you want MTA log files to remain on disk before being automatically deleted. The default log file age is 30 days. See Section 42.3, “Using MTA Log Files,” on page 681.
44.27 /logmax Sets the maximum amount of disk space for all MTA log files. When the specified disk space is consumed, the MTA deletes existing log files, starting with the oldest. The default is 102400 KB (100 MB) of disk space for all MTA log files. See Section 42.3, “Using MTA Log Files,”...
NetWare MTA Linux MTA Windows MTA Example: /maxidlerouters-5 --maxidlerouters 10 /maxidlerouters-12 See also /maxrouters. 44.31 /maxrouters Specifies the maximum number of router threads the MTA can start. The default is 16; valid values range from 1 to 16. See Section 43.3, “Optimizing the Routing Queue,” on page 694.
44.34 /messagelogpath Specifies the directory for the MTA message log. The default location is mloscal\msglog. See Section 41.4.2, “Enabling MTA Message Logging,” on page 658. NetWare MTA Linux MTA Windows MTA Syntax: /messagelogpath-[svr\][vol:]\dir --messagelogpath /dir /messagelogpath-[drive:]\dir /messagelogpath-\\svr\vol\dir /messagelogpath- \\svr\sharename\dir Exampl /messagelogpath-\mta\log --messagelogpath /gwsys/ /messagelogpath-\mta\log...
Historical Note: In GroupWise 5.2 and earlier, a separate agent, the Administration Agent (ADA), handled the functions now consolidated into the MTA admin thread. Hence the switch name, /noada. 44.38 /nodns Disables DNS lookups for the MTA. See “Using Dynamic Internet Links”...
NetWare MTA Linux MTA Windows MTA Syntax: /nosnmp --nosnmp /nosnmp 44.43 /password Provides the password for the NetWare MTA to use when accessing domains and post offices on remote servers NetWare MTA Linux MTA Windows MTA Syntax: /password-NetWare_password Example: /password-GWise See also /user and /dn.
NetWare MTA Linux MTA Windows MTA Syntax: /tcpport-port_number --tcpport port_number /tcpport-port_number Example: /tcpport-7200 --tcpport 7200 /tcpport-7200 44.47 /tcpwaitconnect Sets the maximum number of seconds the MTA waits for a connection to another MTA. The default is 5. See Section 43.1.2, “Adjusting the MTA Wait Intervals for Slow TCP/IP Connections,” on page 689.
44.50 /user Provides the NetWare user ID for the NetWare MTA to use when accessing domains and post offices on remote servers. See “Creating a NetWare Account for Agent Access (Optional)” in the GroupWise 8 Installation Guide. NetWare MTA Linux MTA Windows MTA Syntax: /user-NetWare_user_ID...
Internet Agent Chapter 45, “Configuring Internet Addressing,” on page 717 Chapter 46, “Configuring Internet Services,” on page 731 Chapter 47, “Managing Internet Access,” on page 763 Chapter 48, “Configuring the Internet Agent,” on page 785 Chapter 49, “Monitoring the Internet Agent,” on page 793 Chapter 50, “Optimizing the Internet Agent,”...
Internet-style addressing, users have the same address within the GroupWise system as ® they do outside the GroupWise system. For example, if John Smith’s address at Novell jsmith@novell.com, this address can be used by users within the GroupWise system and users external to the system.
Internet domain at the domain, post office, or user level, meaning that different users within your GroupWise system can be assigned different preferred Internet domains. For example, users in one domain can be assigned gw.novell.com as their preferred Internet domain while users in another domain are assigned support.novell.com.
Page 719
userID.post_office@internet_domain_name userID@internet_domain_name firstname.lastname@internet_domain_name lastname.firstname@internet_domain_name firstinital lastname@internet_domain_name As with the preferred Internet domain, you must assign a preferred address format to be used as the default for your GroupWise system. The system’s preferred address format is applied to all users in your GroupWise system.
Page 720
Backwards-compatible with previous versions of GroupWise. (Users won’t need to update their business cards.) Addresses do not change as users are moved. Disadvantages When you first enable this address format, you might have duplicate user IDs in your ® GroupWise system. However, in the future, ConsoleOne prevents you from creating duplicate user IDs within the same Internet domain name.
If you select all five formats, the Internet Agent accepts messages addressed to users in any of the formats. For example, John Peterson would receive messages sent using any of the following addresses: jpeterson.research@novell.com jpeterson@novell.com john.peterson@novell.com peterson.john@novell.com jpeterson@novell.com You must designate the allowed address formats to be used as the default formats for your GroupWise system.
45.1.6 Override Options In spite of the best planning, some e-mail addresses do not fit the rules and are not processed correctly. You can handle such addresses by overriding the regular address processing, as described Section 45.2.3, “Overriding Internet Addressing Defaults,” on page 725.
Page 723
3 Specify the Internet domain name (for example, Corporate.com), then click OK to set up the first Internet domain for your GroupWise system. 4 If you want your GroupWise system to receive e-mail addressed to additional Internet domain names: 4a Repeat Step 2 Step 4b When you are finished adding Internet domain names to the list, select the preferred...
Page 724
(for example, John Peterson’s user ID is 46789 so his address is 46789@novell.com). In this case, you could publish users’ addresses as the first initial last name (for example, jpeterson@novell.com) and enable this option so that the Internet Agent resolves the addresses to the appropriate users.
45.2.3 Overriding Internet Addressing Defaults All domains, post offices, and users/resources in your GroupWise system inherit the defaults (Internet Agent for outbound messages, preferred Internet domain name, preferred address format, and allowed address formats) you established when enabling Internet addressing for your system. However, if desired, you can override these defaults for individual domains, post offices, or users/ resources.
Page 726
Post Office Overrides At the post office level, you can override the preferred Internet domain name, preferred address format, and allowed address formats the post office has inherited from its domain. You cannot override the Internet Agent that is assigned to handle outbound messages. 1 In ConsoleOne, right-click a Post Office object, then click Properties.
John Petersons, each on a different post office in your system, you would end up two users having the same address (John.Peterson@novell.com). You could use this field to differentiate them by including their middle initials in their address (John.S.Peterson@novell.com and John.A.Peterson@novell.com).
for overriding the current e-mail address format, as described in Section 14.7.2, “Changing a User’s Internet Addressing Settings,” on page 247. The Gateway Alias Migration utility can also update users’ preferred Internet domain names based on their existing gateway aliases. Section 45.3.1, “Planning to Migrate Gateway Aliases,”...
Page 729
4 In the SMTP Gateway Alias Type drop-down list, select the type of alias you want to migrate. The list of available gateway alias types is generated from the Gateway Alias Type fields on the Identification property pages of the Internet Agent objects in your GroupWise system. The resulting alias list provides the SMTP gateway aliases for all users associated with the object selected in Step...
If you do, the domain name is transferred into the Internet Domain Name field on the Internet Addressing property page of the User object. NOTE: For an internal user, if the Internet domain name is not defined in your GroupWise system under Tools > GroupWise System Operations > Internet Addressing, then the Internet domain name is not transferred into the Internet Domain Name field on the Internet Addressing property page of the User object.
Configuring Internet Services For detailed instructions about installing and starting the Internet Agent for the first time, see “Installing the GroupWise Internet Agent” in the GroupWise 8 Installation Guide. The Internet Agent offers several useful services that you can configure to meet the needs of your ®...
Page 732
How to handle messages that cannot be sent immediately and must be deferred Whether to notify senders when messages are delayed Whether to display GroupWise version information when establishing an SNMP connection To set the Internet Agent basic SMTP/MIME settings: ®...
Page 733
Internet Agent resides, or in other words the A Record in your DNS table that associates a hostname with the server’s IP address (for example, gwia.novell.com). This setting corresponds with the Internet Agent’s switch.
Return Notification to Sender When a Message Is Delayed: Select this option to provide a notification message to users whose e-mail messages cannot be immediately sent out across the Internet. This provides more noticeable notification to users than manually checking the Properties page of the sent item to see whether it has been sent.
Enable Delivery Status Notification: Turn on this option to allow the Internet Agent to request status notifications for outgoing messages and to supply status notifications for incoming messages. This requires the external e-mail system to also support Delivery Status Notification. Currently, notification consists of two delivery statuses: successful or unsuccessful.
Page 736
3 Fill in the fields: Ignore GroupWise Internet Addressing: GroupWise supports both Internet-style addressing (user@host) and GroupWise proprietary addressing (user_ID.post_office.domain). By default, the Internet Agent uses Internet-style addressing. If you do not want the Internet Agent to use standard Internet-style addressing (user@host), turn on the Ignore GroupWise Internet Addressing option.
Page 737
The Foreign ID field (Internet Agent object > GroupWise > Identification) identifies the Internet domain names for which the Internet Agent accepts messages. The field should always include your mail domain name (for example, novell.com). You can include additional domain names by separating them with a space, as in the following example: novell.com gw.novell.com gwia.novell.com...
When you list multiple Internet domain names, the Internet Agent accepts messages for a GroupWise user if any of the Internet domain names are used (for example, jsmith@novell.com, jsmith@gw.novell.com, or jsmith@gwia.novell.com). The field limit is 255 characters. If you need to exceed that limit, you can create a frgnames.cfg...
Default Message Encoding: The default message encoding setting lets you select the encoding method for your outbound Internet messages. You can select either Basic RFC-822 formatting or MIME formatting. MIME is the default message format. This setting corresponds with the Internet Agent’s /mime switch.
3 Fill in the fields: Commands: The Commands setting lets you specify how long the Internet Agent waits for an SMTP command. The default is 5 minutes. This setting corresponds with the Internet Agent’s switch. Data: The Data setting lets you specify how long the Internet Agent waits for data from the receiving host.
Page 741
To set the Internet Agent undeliverable message options: 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click SMTP/MIME > Undeliverables. 3 Fill in the fields: Amount of Original Message to Return to Sender When Message is Undeliverable: This setting lets you specify how much of the original message is sent back to the sender when a message is deemed undeliverable.
For information about configuring the Internet Agent’s dial-up feature with routing software, see TID 10007366 in the Novell Support Knowledgebase (http://www.novell.com/support). Enabling Dial-Up Services After you have the appropriate routing software in place, you can enable and configure the Internet Agent’s dial-up services.
Page 743
/etrnhost switch. ETRN Queue: Specify your e-mail domain as provided by your Internet Service Provider (for example, novell.com). This setting corresponds with the Internet Agent’s /etrnqueue switch. Username: The Username setting applies only if you are using a Windows Remote Access Server (RAS) and the Internet Agent is not running on the same server as the RAS.
Page 744
3 Continue with the desired task: “Applying a Profile” on page 744 “Creating a Profile” on page 744 “Editing a Profile” on page 745 “Deleting a Profile” on page 745 Applying a Profile 1 Select the profile in the Profiles list. 2 Click the desired hour.
For example, if you set Messages to 20, Kilobytes to 100, and Minutes to 60, the Internet Agent instructs the routing service to initiate a dial-up connection when 20 messages have accumulated in the queue, when the total size of the messages in the queue reaches 100 K, or when 60 minutes have passed since the last connection.
Page 746
In both the From and To fields, you can use either an IP address or a DNS hostname, as shown in the following examples: novell.com 10.1.1.10 You can enter a specific address, as shown above, or you can use wildcards and IP address ranges to specify multiple addresses, as follows: *.novell.com...
IP address. For example: novell.com gwia.novell.com unixbox [172.16.5.18] Make sure to include a hard return after the last entry. In addition, if you use an IP address, it must be included in square brackets, as shown in the second example.
The following sample code shows the elements and default text of the Undeliverable Message status: <STATUS_MESSAGE type="undeliverableMessage" xml:lang="en-US"> <SUBJECT>Message status - undeliverable</SUBJECT> <MESSAGE_BODY> <TEXT>\r\nThe attached file had the following undeliverable recipient(s):\r\n</TEXT> <RECIPIENT_LIST format="\t%s\r\n" <SESSION_TRANSCRIPT> <TEXT>\r\nTranscript of session follows:\r\n<TEXT> </SESSION_TRANSCRIPT> <ATTACH_ORIGINAL_MSG></ATTACH_ORIGINAL_MSG> </MESSAGE_BODY>...
Page 749
Because MIME handles such a variety of file types, you might need to customize aspects of MIME for your users. “Customizing MIME Preamble Text” on page 749 “Customizing MIME Content-Type Mappings” on page 749 Customizing MIME Preamble Text An ASCII file called is installed in the Internet Agent gateway directory preamble.txt ).
Page 750
file is located in the directory. The following section mimetype.cfg domain\wpgate\gwia provide information you need to know to modify the file: “Mapping Format” on page 750 “File Organization” on page 751 Mapping Format Each mapping entry in the file uses the following format: content-type .ext|dtk-code|mac-ttttcccc [/parms] ["comment"] Element Description...
Page 751
Element Description "comment" Optional content description File Organization file contains the following four sections: mimetype.cfg [Parameter-Override] [Mac-Mappings] [Detect-Mappings] [Extension-Mappings] [Parameter-Override] section take priority over other sections. You can use this section to [Parameter-override] force the encoding scheme for certain file types. This section also contains defaults for sending various kinds of multipart messages.
The Internet Agent uses the detect code to map to a MIME content type and then encode the file according to the assigned encoding scheme. If there is no mapping specified or if the file type cannot be determined, one of the other mapping methods, such as Extension-Mappings, are used. The detect codes associated with attachments are GroupWise internal codes and cannot be changed.
Page 753
3 To enable POP3, fill in the following fields: Enable POP3 Service: POP3 service is off by default. Select this option to allow POP3 downloads from a GroupWise mailbox. It corresponds with the Internet Agent’s /pop3 switch. Number of Threads for POP3 Connections: The POP3 threads setting lets you specify the number of connections for POP3 download requests.
Maximum Number of Items to Read: Specify in thousands the maximum number of items that you want the Internet Agent to download at one time. By default, the Internet Agent downloads 10,000 items at a time. For example, specify 15 to download 15,000 items at a time. This setting corresponds with the Internet Agent’s /imapreadlimit switch.
3 In the Post Offices list, select the post office whose link information you want to change, then click Edit Link to display the Edit Post Office Link dialog box. 4 Define the following properties: Access Mode: The access mode determines whether the Internet Agent uses client/server access, direct access, or both client/server and direct access to connect to the post office.
Page 756
Most e-mail clients are configured differently. However, all Internet clients need to know the following information: POP3/IMAP4 Server: The DNS hostname or IP address of the Internet Agent. Login Name: The user’s GroupWise user ID. For POP3 clients, there are several user ID login options you can use to control how the Internet Agent handles the user’s messages.
Option Explanation Example The p option purges the messages from the GroupWise User_ID:p mailbox after they have been downloaded to the POP3 client. t=1-1000 The t option defines the download period, starting with the User_ID:t=14 current day. For example, if you specify 14, then only messages that are 14 days old or newer are downloaded.
LDAP Context: Use this option to limit the directory context in which the LDAP server searches. For example, if you want to limit LDAP searches to the Novell organization container located under the United States country container, enter O=Novell,C=US. This setting corresponds with the Internet Agent’s...
3 Fill in the fields: LDAP Defaults: Select one of the following defaults for public access: Allow Access or Prevent Access. If you select Allow Access, the GroupWise fields (in the Visible Fields lists) default to Visible for an LDAP search. If you select Prevent Access, the GroupWise fields default to Not Visible.
User block control: By using the /l=length and /b=number switches on the message’s To line, the sender can control the block length and number of blocks to send to the pager. By default, the Internet Agent sends 255 bytes per block (/l=255 /b=1). To set up and use paging services, complete the tasks in the following sections: Section 46.4.1, “Setting Up Paging,”...
5 In the Link Type field, select Gateway. 6 In the Gateway Link field, select the Internet Agent. 7 In the Gateway Access String field, type -page 8 Click OK to save the information. 9 Click File > Exit > Yes to save your changes and exit the Link Configuration tool. 10 Restart the Internet Agent.
Managing Internet Access After you have configured the Internet services that you want the Internet Agent to provide in your ® GroupWise system, you need to take control of the information that flows in and out between your GroupWise system and the Internet. Section 47.1, “Controlling User Access to the Internet,”...
The default class of service, which all users belong to, allows incoming and outgoing SMTP/MIME messages, and allows POP3 and IMAP4 access. You can control user access, at an individual, distribution list, post office, or domain level, by creating different classes of service and adding the appropriate members to the classes.
Page 765
3 Click Create to display the Create New Class of Service dialog box. 4 Type a name for the class, then click OK to display the Edit Class of Service dialog box. 5 On the SMTP Incoming tab, choose from the following options: Managing Internet Access 765...
Page 766
Inherit Access: Select this option if you want members of this class of service to inherit their SMTP Incoming access from a class of service assigned at a higher level. For example, a post office inherits the domain’s access. If the domain is not a member of a class of service, the post office inherits the default class of service.
Page 767
Inherit Access: Select this option if you want members of this class of service to inherit their SMTP Outgoing access from a class of service assigned at a higher level. For example, a post office inherits the domain’s access. If the domain is not a member of a class of service, the post office inherits the default class of service.
Page 768
Prevent Access: Select this option to prevent members of the class from sending and receiving messages with an IMAP4 client. 8 Click POP3, then choose from the following options: Inherit Access: Select this option if you want members of this class of service to inherit their POP3 access from a class of service assigned at a higher level.
Page 769
Maximum Number of Messages to Download: This option applies only if you selected Allow Access. Select the maximum number of messages a user can download at one time from a GroupWise Mailbox to a POP3 client. The default is 100 messages. POP3 client users can override this option by using the userID:l=x login option when initiating their POP session.
47.1.3 Testing Access Control Settings If you created multiple classes of service, you might not know exactly which settings are being applied to a specific object (domain, post office, distribution list, or user) and which class of service the setting is coming from. To discover an object’s settings, you can test the object’s access. 1 In ConsoleOne, right-click the Internet Agent object, then click Properties.
6 To view the source for a specific setting, select the setting in the Setting box The Setting Source fields display the class of service being applied to the object. It also displays the Member ID through which the class is being applied. 7 When finished, click OK.
Page 772
Validating the Database 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click Access Control > Database Management to display the Database Management page. 3 Click Validate Now. 4 After the database has been validated, click OK. 5 If errors were found, see Recovering the Database below.
3 Click Recover Now. 4 Click OK. 5 Check your class of service list to make sure that it is complete. 47.2 Blocking Unwanted E-Mail from the Internet The GroupWise Internet Agent includes the following features to help you protect your GroupWise system and users from unwanted e-mail: Section 47.2.1, “Real-Time Blacklists,”...
Page 774
Defining a Blacklist Address 1 In ConsoleOne, right-click the Internet Agent object, then click Properties. 2 Click Access Control > Blacklists to display the Blacklists page. The Blacklist Addresses list displays the addresses of all blacklists that the Internet Agent checks when it receives a message from another SMTP host.
5 If you have multiple blacklists in the Blacklist Addresses list, use the up-arrow and down-arrow to position the blacklists in the order you want them checked. The Internet Agent checks the blacklists in the order they are listed, from top to bottom. 6 Click OK to save your changes.
You can block on any segment of the hostname. For example: Hostname Blocks provo*.novell.com provo.novell.com provo1.novell.com provo2.novell.com *.novell.com gw.novell.com (but not novell.com itself) There is no limit to the number of IP addresses and hostnames that you can block in the file blocked.txt 3 Save the file as blocked.txt 47.2.4 Mailbomb (Spam) Protection...
Reject if PTR Record Does Not Exist: This setting lets you prevent messages if the sender’s host is not authentic. When this setting is turned on, the Internet Agent refuses messages from a smart host if a DNS reverse lookup shows that a PTR record does not exist for the IP address of the sender’s host. When this setting is turned off, the Internet Agent accepts messages from any host, but display a warning if the initiating host is not authentic.
Page 778
3 Select Flag Any Messages, then specify the strings in the text box. Anti-spam services use different indicators to mark potential spam. One might use a string of asterisks; the more asterisks, the greater the likelihood that the message is spam. Another might use a numerical value;...
For example: smtp.novell.com remotehost novell 2 If you have multiple SMTP hosts that require authentication before they accept messages from your system, create an entry for each host. Make sure to include a hard return after the last entry.
3 Turn on the Reject Mail if Sender’s Identity Cannot Be Verified option. This setting corresponds with the Internet Agent’s /rejbs switch. 4 Click OK to save your changes. 47.3 Tracking Internet Traffic with Accounting Data The Internet Agent can supply accounting information for all messages, including information such as the message’s source, priority, size, and destination.
3 Click Add, browse for and select the user you want to add, then click OK to add the user to the list of administrators. 4 Select the user in the list of administrators, then click Accountant. 5 Click OK to save the changes. 47.3.2 Enabling Accounting 1 In ConsoleOne, right-click the Internet Agent object, then click Properties.
5 Click OK. 47.3.3 Understanding the Accounting File The following is an Accounting file entry for a single event. Each field in the entry is described below. O,11/25/2009,21:58:39,3DE29CD2.14E:7:6953, Mail,2,Provo,Research,jsmith,48909,Meeting Agenda,Provo,GWIA,sde23a9f.001,MIME,hjones@novell.com,1,2,11388,0 Accounting File Entry Fields Table 47-2 Field Example Description Displays I for inbound messages and O for...
Page 783
(001) is incremented by one for each message sent. MIME The message type (MIME, etc.) Foreign message type hjones@novell.com The foreign user’s e-mail address. For inbound Foreign user’s address messages, the foreign user is the message sender. For outbound messages, the foreign user is the message recipient.
Configuring the Internet Agent ® As your GroupWise system grows and evolves, you might need to modify Internet Agent configuration to meet the changing needs of your system. The following topics help you configure the Internet Agent: Section 48.1, “Changing the Link Protocol between the Internet Agent and the Message Transfer Agent,”...
3 In the TCP/IP Address field, click Edit, specify the IP address of the server where the Internet Agent is running, then click OK to return to the Network Address page. 4 In the Message Transfer Port field, specify a unique port number; for example, 7102. 5 Click OK to save the new link configuration for the Internet Agent.
4 In the Alternate Internet Agent for Outbound SMTP/MIME Messages field, select an Internet Agent as an alternate for this domain. 5 Click OK to save your changes. The MTA always tries to transfer outbound Internet messages to the primary Internet Agent first, so after an outage the primary Internet Agent automatically resumes its normal processing for the domain.
3 Deselect Bind Exclusively to TCP/IP Address, then click OK to save your change. Corresponding Startup Switches You can use the startup switch in the Internet Agent startup file to establish an exclusive bind to the specified IP address. If you have used this switch in the Internet Agent startup file, remove it to turn off the exclusive bind.
3 Fill in the Certificate File, SSL Key File, and Set Password fields: Certificate File: Specify the server certificate file that the Internet Agent will use. The certificate file must be in Base64/PEM or PFX format. If you type the filename rather than using the Browse button to select it, use the full path if the file is not in the same directory as the Internet Agent program.
Page 790
For more information about POP3 and IMAP4 clients, see Section 46.2, “Configuring POP3/IMAP4 Services,” on page 752. For more information about LDAP clients, see Section 46.3, “Configuring LDAP Services,” on page 757. To configure connections to use SSL: 1 In ConsoleOne, if the Internet Agent object’s property pages are not already displayed, right- click the Internet Agent object, then click Properties.
Page 791
Enabled: The POP client determines whether an SSL connection or non-SSL connection is used with an SSL-enabled Internet Agent. An SSL-enabled Internet Agent allows SSL connections on port 995 and non-SSL connections on port 110. Required: The Internet Agent forces SSL connections on port 995 and port 110. Non-SSL connections are denied.
Section 49.1, “Using the Internet Agent Server Console,” on page 793 Section 49.2, “Using the Internet Agent Web Console,” on page 805 Section 49.3, “Using Novell Remote Manager,” on page 807 Section 49.4, “Using an SNMP Management Console,” on page 807 Section 49.5, “Assigning Operators to Receive Warning and Error Messages,”...
Windows: If the Internet Agent is running as a Windows service under the Local System User, it is displayed on the desktop only if the Allow Service to Interact with Desktop option was selected during installation or has been configured on the Internet Agent service’s General property page.
Internet Agent Server Console Figure 49-3 Processing: Displays a rotating bar if the Internet Agent is running. If there is no bar, or if the bar is stationary for more than one minute, the Internet Agent is not running. GroupWise: Displays whether the Internet Agent’s network connection is OPEN or CLOSED. This network connection is the Internet Agent’s only link to GroupWise.
Page 796
Message Statistics The Message Statistics section of the console, shown below, is the default statistics section displayed by the Internet Agent console. Internet Agent Server Console Figure 49-4 Message Statistics shows the number of inbound and outbound messages processed by the Internet Agent.
Page 797
Linux and Click Statistics > SMTP Service. Windows: SMTP Service Statistics Section of the Internet Agent Server Console Figure 49-5 Messages Sent: Displays the total number of SMTP messages sent by the Internet Agent during its current up time. Send Threads: The first number displays the number of threads currently being used to send SMTP messages.
Page 798
Hosts Down: Displays the number of SMTP hosts that the Internet Agent could not establish a connection with in order to send or receive messages. The Internet Agent was able to resolve the hostname to an IP address, but the connection could not be established. Connections Denied: Displays the number of connections denied by the Internet Agent.
Page 799
POP Service Statistics Section of the Internet Agent Server Console Figure 49-6 Total Sessions: Displays the total number of POP3 sessions processed by the Internet Agent during its current up time. Active Sessions: Displays the number of currently active POP3 sessions. Idle Sessions: Displays the number of threads still available to the Internet Agent for POP3 sessions.
Page 800
TCP/IP Write Errors: Displays the number of TCP write errors encountered by the Internet Agent. A TCP write error occurs if the Internet Agent successfully opens a POP3 session but is unable to process a TCP write command during the session. Denied Access Count: Displays the number of POP3 sessions that were denied because the user does not have POP3 access.
Page 801
Normal Threads: Displays the number of IMAP threads that are busy and the number that are available. Secure Threads: Displays the number of IMAP SSL threads that are busy and the number that are available. Unknown Users: Displays the number of user logins that failed because the user does not exist in the GroupWise system.
LDAP Service Statistics Section of the Internet Agent Server Console Figure 49-8 Public Sessions: Displays the total number of LDAP sessions handled by the Internet Agent. Authenticated Sessions: This field is not used. Sessions Active: Displays the total number of LDAP sessions currently being processed by the Internet Agent.
Internet Agent Server Console Figure 49-9 49.1.5 Menu Functions The following sections explain the menu options available in the Internet Agent console: “NetWare Internet Agent Console” on page 803 “Linux and Windows Internet Agent Console” on page 804 NetWare Internet Agent Console The menu functions on the NetWare Internet Agent console provide you with the following options.
Page 804
F6-Colors: Select this option to scroll through the several color options. This option is useful if the Internet Agent station has a monochrome monitor. You can also use this option to help you quickly identify an Internet Agent if more than one is running. F8-Zero Stats: Select this option to reset the values in the Statistics section of the screen.
49.2 Using the Internet Agent Web Console You can use a Web browser interface, referred to as the Web console, to monitor the Internet Agent. You cannot use the Internet Agent Web console to change any of the Internet Agent’s settings. Changes must be made through ConsoleOne, the server console, or the startup file.
7 In the HTTP User Name field, enter an arbitrary username (for example, gwia). 8 Click Set Password to assign a password (for example, monitor). 9 Click OK to save your changes. ConsoleOne then notifies the Internet Agent to restart to put the new settings into effect. 49.2.2 Monitoring the Internet Agent at the Web Console 1 In a Web browser, enter the following: (non-secure server)
Status). You can click Help on any page for information about the page. 49.3 Using Novell Remote Manager If the Internet Agent is running on NetWare 6.5 or on Novell Open Enterprise Server (OES), you can use the IP Address Management feature in Novell Remote Manager (Manage Server > IP Address Management) to view the IP address and port configuration for the Internet Agent.
Before you can monitor the Internet Agent through an SNMP management console, you must compile the Internet Agent’s MIB (Management Information Base) file. The Internet Agent’s MIB file, named , is located in the directory on the GroupWise 8 DVD or gwia.mib agents\snmp downloaded GroupWise 8 image, or in the GroupWise software distribution directory.
3 Click Add, select a user, then click OK to add the user to the Gateway Administrators list. 4 Make sure Operator is selected as the Administrator Role. 5 If desired, add additional operators. 6 Click OK. 49.6 Using Internet Agent Log Files You can use the Internet Agent logging options to help you monitor its operation.
Startup NetWare Linux Windows ConsoleOne Switches Console Console Console Maximum Disk Space Log File Location The log settings in ConsoleOne are used as the default settings. Startup switches override the ConsoleOne log settings, and console settings override startup switches. Section 49.6.1, “Modifying Log Settings in ConsoleOne,” on page 810 Section 49.6.2, “Modifying Log Settings through Startup Switches,”...
IP address of any inbound SMTP connections; the Internet Agent-specific MSG number; and SMTP connection messages such as “Connect to novell.com” and “Accepted connection from 172.16.5.18 novell.com”. Diagnostic: Displays detailed function calls made by the Internet Agent. This level is not useful for most troubleshooting.
IP address of any inbound SMTP connections; the Internet Agent-specific MSG number; and SMTP connection messages such as “Connect to novell.com” and “Accepted connection from 172.16.5.18 novell.com”. Diag: Displays detailed function calls made by the Internet Agent. This level is not useful for most troubleshooting.
SMTP connections; the Internet Agent-specific MSG number; and SMTP connection messages such as “Connect to novell.com” and “Accepted connection from 172.16.5.18 novell.com”. Select Diagnostic to display a detailed trace of gateway messages, errors, and operations that can be useful for troubleshooting.
Log files are named according to the date they were created. If the Internet Agent was restarted during the day, the file extension indicates which session is logged (for example 0518log.003 indicates the third session logged for May 18). Archived log files are saved in ASCII. You can use any text editor to open a file or to print it. You can also view the log files from the Internet Agent console or the Internet Agent Web console.
49.9.3 Using a Mail Message The Internet Agent can be stopped by sending a shutdown message to the Internet Agent. In order to shut down the program with a message, the user sending the message must be defined as an operator for the Internet Agent.
Optimizing the Internet Agent The following sections provide information about some of the methods you can use to optimize the ® speed and reliability of the GroupWise Internet Agent: Section 50.1, “Relocating the Internet Agent’s Processing Directories,” on page 817 Section 50.2, “Increasing Internet Agent Speed,”...
Page 818
3 Fill in the fields: Conversion Directory: Select the directory where the Internet Agent stores temporary files for message conversion. The default conversion directory depends on the Internet Agent platform. NetWare: domain\wpgate\gwia000.prc\gwwork Linux: domain/wpgate/gwia/000.prc/gwwork Windows: c:\grpwise\gwia If you type a path to a Windows drive (rather than using the Browse button to select the directory), you must use UNC path syntax.
50.2 Increasing Internet Agent Speed You can implement the following procedures to help enhance the Internet Agent’s processing speed: Section 50.2.1, “Sending and Receiving Threads,” on page 819 Section 50.2.2, “Changing the Maximum Packet Received Buffers,” on page 819 Section 50.2.3, “Increasing Polling Time,” on page 819 Section 50.2.4, “Decreasing the Timeout Cycles,”...
3 Modify the following settings: Idle Sleep Duration: Select the time, in seconds, you want the Internet Agent to idle after it has processed its queues. A low setting, such as 5 seconds, speeds up processing but requires more resources. A higher setting slows down the Internet Agent but requires fewer resources by reducing the number of network polling scans.
Page 821
2 Click Reattach > Settings to display the NetWare reattachment Settings page. 3 Define the following properties: ® Tree: Specify the Novell eDirectory tree that the Internet Agent logs in to. If the Internet Agent does not use an eDirectory user account, leave this field blank.
Connecting GroupWise Systems and Domains Using the Internet Agent ® The Internet Agent can be used as a link between GroupWise systems and between domains in the same GroupWise system. Section 51.1, “Connecting GroupWise Systems,” on page 823 Section 51.2, “Linking Domains,” on page 828 51.1 Connecting GroupWise Systems If you have two independent GroupWise systems, you can use the Internet Agent to connect the two systems.
After you have connected the two systems, users can send messages between the two systems by entering the recipients’ full addresses (userID.post_office.domain or user@host). If desired, you can simplify addressing by exchanging information between systems, which causes user information to be displayed in the Address Book. The easiest way to exchange information is to enable the External System Synchronization feature in both systems.
4 Repeat Step 1 through Step 3 to define an external domain in the second GroupWise system. If you do not have administrative rights to that system, you must coordinate with that GroupWise system’s administrator. 5 Continue with Linking to the External Domain.
Page 826
2 In the Outbound Links list, double-click the external domain to display the Edit Domain Link dialog box. 3 Modify the following fields: Link Type: Select Gateway. Gateway Link: Select the name of your Internet Agent. Gateway Access String: Specify the hostname (Internet Agent object > SMTP/MIME > Settings) or foreign ID (Internet Agent object >...
By default, the rest of the domains in your system should have an indirect link to the external domain. To verify this for a domain: 5 In the list of domains on the Link Configuration utility’s toolbar, select the domain whose link you want to check, then verify that the external domain is displayed in the Indirect column of the Outbound Links list.
For more information about link protocols, see Chapter 10, “Managing the Links between Domains and Post Offices,” on page 145. 51.1.5 Sending Messages Between Systems After you have established links between the Internet Agent domains in the two GroupWise systems, users in one system can send message to recipients in the other system by including the recipients’...
Page 829
To configure gateway links between two domains: 1 In ConsoleOne, right-click the Provo domain, then click GroupWise Utilities > Link Configuration to display the Link Configuration utility. 2 In the Outbound Links list, double-click the Cambridge domain to display the Edit Domain Link dialog box.
Page 830
By default, any domains that are already linked to your Provo domain should have an indirect link to the Cambridge domain through the Provo domain. To verify this for a domain: 5 In the list of domains on the Link Configuration utility’s toolbar, select the domain whose link you want to check, then verify that the Cambridge domain is displayed in the Indirect column of the Outbound Links list.
Using Internet Agent Startup Switches Before GroupWise 7 SP1, Internet Agent configuration information was stored both in eDirectory, as properties of the Internet Agent object, and in the Internet Agent configuration file ( gwia.cfg Starting in GroupWise 7 SP1, all primary configuration settings have been consolidated into the properties of the Internet Agent object.
; if you do, the changes do not affect the Internet Agent. Linux: file used by the Linux Internet Agent is located in the gwia.cfg /opt/novell/ directory. groupwise/agents/share Windows: file used by the Windows Internet Agent is located in the gwia.cfg...
You can use either a hyphen (-) or an equals sign (=) to separate a switch from its value. For example, you can use /sd-12 or /sd=12. If you use a hyphen rather than a forward slash as the switch delimiter, you must use an equal sign (for example, -sd=12). If you use the Linux double-hyphen standard, you must user a space (for example, --sd 12).
Page 834
NetWare Internet Windows Internet Linux Internet Agent ConsoleOne Settings Agent Agent /dhome --dhome /dhome Server Directories > Settings > SMTP Queues Directory /defaultcharset --defaultcharset /defaultcharset --delayedmsgnotifica SMTP/MIME > Settings delayedmsgnotifi tion delayedmsgnotifi cation cation --nodelayedmsgnotif ication nodelayedmsgno nodelayedmsgno tification tification /dia --dia /dia...
Page 835
NetWare Internet Windows Internet Linux Internet Agent ConsoleOne Settings Agent Agent /forceinboundauth --forceinboundauth /forceinboundauth /forceoutboundauth --forceoutboundauth /forceoutboundauth /fut --fut /fut SMTP/MIME > Undeliverables > Forward Undeliverable Inbound Messages /group --group /group SMTP/MIME > Address Handling > Expand Groups on Incoming /nogroup --nogroup /nogroup...
Page 836
NetWare Internet Windows Internet Linux Internet Agent ConsoleOne Settings Agent Agent --it POP3/IMAP4 > Settings > Number of Threads for IMAP4 Connections /keepsendgroups --keepsendgroups /keepsendgroups SMTP/MIME > Address Handling > Retain Distribution Lists on Outgoing --nokeepsendgroups Messages nokeepsendgrou nokeepsendgrou /keyfile --keyfile /keyfile GroupWise >...
Page 837
NetWare Internet Windows Internet Linux Internet Agent ConsoleOne Settings Agent Agent /maxdeferhours --maxdeferhours /maxdeferhours SMTP/MIME > Settings > Maximum Number of Hours to Retry a Deferred Message /mbcount --mbcount /mbcount SMTP/MIME > Security Settings > Enable Mailbomb Protection and Mailbomb Threshold /mbtime --mbtime /mbtime...
Page 838
NetWare Internet Windows Internet Linux Internet Agent ConsoleOne Settings Agent Agent /notfamiliar --notfamiliar /notfamiliar /familiar --familiar /familiar /nqpmt --nqpmt /nqpmt SMTP/MIME > Message Formatting > Enable Quoted Printed Message Text Line Wrapping SMTP/MIME > Settings > Scan Cycle for Send Directory /password /pop3 --pop3...
Telnet session. You should enter the hostname assigned to you by your Internet service provider. Syntax: /hn=host_name Example: /hn=gwia.novell.com This switch is required only under certain circumstances. Normally, the Internet Agent gets the information from another source and does not need this switch. If you receive a message that the /hn switch is required, you must use the switch.
52.3.4 /user (NetWare Only) Sets the login ID that the NetWare Internet Agent must use to log into a remote file server to access the domain database and Internet Agent directories. Syntax: /user-login_ID 52.3.5 /password (NetWare Only) Sets the password that the NetWare Internet Agent must use to log into a remote file server to access the domain database and Internet Agent directories.
Syntax: --show 52.5 Environment Switches The following switches configure Internet Agent environment settings such as working directories, NetWare clustering support, and SNMP support. /cluster /ipa /nosnmp /smtphome /work 52.5.1 /cluster Informs the Internet Agent that it is running in a cluster. A clustered Internet Agent automatically binds to the IP address configured for the Internet Agent object even if the Bind Exclusively to TCP/ IP Address option is not selected on the Internet Agent Network Address page in ConsoleOne.
Sets the directory where the Internet Agent stores its temporary files. On NetWare and Linux, the work directory is located in the domain by default. On Windows, it is not. NetWare: domain\wpgate\gwia\000.prc\gwwork Linux: domain/wpgate/gwia/\000.prc/gwwork Windows: c:\grpwise\gwia Syntax: /work-pathname NetWare Example: /work-sys:\tmp\work Linux Example: -work /opt/novell/groupwise/tmp Windows Example: /work-j:\tmp\work Using Internet Agent Startup Switches 843...
52.5.8 /nasoq By default, the Internet Agent sends the accounting file ( ) to users specified as accountants in acct ConsoleOne (Internet Agent object > GroupWise > Gateway Administrators). The file is sent daily at midnight and any time the Internet Agent shuts down. This switch instructs the Internet Agent to send the acct file once daily at midnight, not each time the Internet Agent quits or is shut down.
Syntax: /nosmtpversion 52.6.2 iCal Enabled The following switch enables iCal. /imip /imip Converts outbound GroupWise Calendar items into MIME text/calendar iCal objects and converts incoming MIME text/calendar messages into GroupWise Calendar items. Syntax: /imip 52.6.3 Address Handling The following switches determine how the Internet Agent handles e-mail addresses: /aql /aqor /ari...
Page 846
For example, if the /aqor switch is used (in conjunction with the /aql-domain switch), Bob Thompson’s fully qualified Internet address (headquarters.advertising.bob@novell.com) would be resolved to bob@advertising.headquarters.novell.com for all outbound messages. If the /aqor switch is used with the /aql-po switch, Bob’s Internet address would be resolved to bob@advertising.novell.com for all outbound messages.
Page 847
Example: /ari-never /blockrulegenmsg In ConsoleOne, you can control whether or not rule-generated messages are allowed to leave your GroupWise system by selecting or deselecting the Rule-Generated Messages options available in each class of service defined for the Internet Agent. This switch allows you to be specific in the types of rule-generated messages that are blocked.
Page 848
/fd822 Specifies a return address for GroupWise replies. A message that has been received by a GroupWise user through the Internet Agent and is replied to has this return address form. These switches cause the Internet Agent to produce a return address of the form foreign domain.type:"user host." Foreign domain can be any foreign domain you have configured and linked to the Internet Agent.
Page 849
/group Turns on distribution list expansion. By default, the Internet Agent does not expand distribution lists, which means that recipients listed in distribution lists do not receive incoming Internet messages that are addressed to distribution lists. Use this switch to expand distribution lists into individual e-mail addresses of the distribution list members, so that the recipients in distribution lists do receive incoming Internet messages addressed to distribution lists.
/notfamiliar Instructs the Internet Agent to not include the user’s familiar name, or display name, in the From field of the message’s MIME header. In other words, the From field is address rather than "familiar_name" address. Syntax: /notfamiliar /realmailfrom Instructs the Internet Agent to use the real user in the Mail From field instead of having auto- forwards come from Postmaster and auto-replies come from Mailer-Daemon.
Page 851
confidence level is 25, meaning that if the detection process returns a confidence level of 25 or above, the Internet Agent uses the detected character set, but if the confidence level is less than 25, the Internet Agent uses the default character set. Valid values range from 0 to 100. Syntax: /charsetconfidencelevel-number Example: /charsetconfidencelevel-35 /dbchar822...
Page 852
Syntax: /force7bitout /iso88591is Instructs the Internet Agent to map inbound MIME ISO-8859-1 messages to another character set that you specify. Syntax: /iso88591is-charset Example: /iso88591is-big5 /koi8 Instructs the Internet Agent to map all outbound MIME messages to the KOI8 (Russian) character set.
Specifies the maximum number of threads that the Internet Agent uses when converting inbound messages from MIME or RFC-822 format to the GroupWise message format. The default setting is 4. See Section 46.1.4, “Determining Format Options for Messages,” on page 738.
/flatfwd Automatically strips out the empty message that is created when a message is forwarded without adding text, and retains the original sender of the message, rather than showing the user who forwarded it. This facilitates users forwarding messages from GroupWise to other e-mail accounts. Messages arrive in the other accounts showing the original senders, not the users who forwarded the messages from GroupWise.
Syntax: /noesmtp /dsn Enables Delivery Status Notification (DSN). The Internet Agent requests status notifications for outgoing messages and supplies status notifications for incoming messages. This requires the external e-mail system to also support Delivery Status Notification. Currently, notification consists of two delivery statuses: successful and unsuccessful. See Section 46.1.2, “Using Extended SMTP (ESMTP) Options,”...
Specifies the maximum number of threads used for processing SMTP send requests (outbound messages). Each thread is equivalent to one connection. The default is 8 threads. See Section 46.1.1, “Configuring Basic SMTP/MIME Settings,” on page 731. Syntax: /sd-number_of_threads Example: /sd-12 /killthreads Instructs the Internet Agent to quickly terminate any active send/receive threads when it restarts.
Services” on page 742. Syntax: /etrnqueue-email_domain Example: /etrnqueue-novell.com /dialuser (Windows Only) Specifies the RAS Security user if you are using a Windows Remote Access Server (RAS) and the Internet Agent is not running on the same server as the RAS.
Specifies how long the program waits for the receiving host to establish a connection. The default is 5 minutes. Syntax: /te-minutes Example: /te-2 Specifies how long the program waits for the initial greeting from the receiving host. The default is 3 minutes.
For example: smtp.novell.com remotehost novell You can define multiple hosts in the file. Make sure you include a hard return after the last entry. If you use this switch, you need to include your Internet Agent as an entry in the gwauth.cfg file to enable status messages to be returned to GroupWise users.
Do with Undeliverable Messages,” on page 740. Syntax: /fut-host Example: /fut-novell.com /mudas Controls how much of the original message is sent back when a message is undeliverable. By default, only 2 KB of the original message is sent back. The value is specified in KB (8=8KB). See Section 46.1.6, “Determining What to Do with Undeliverable Messages,”...
Page 861
/mbcount Sets the number of messages that can be received from a single IP address in a given number of seconds before the Internet Agent denies access to its GroupWise system. It provides a form of system security to protect your system from mailbombs. For example, with /mbcount set to 25 and /mbtime set to 60 seconds, if these limits are exceeded the...
This switch corresponds to the Blacklist Addresses list (Internet Agent object > Access Control > Blacklists). For details about this setting, see Section 47.2.1, “Real-Time Blacklists,” on page 773. 52.7 POP3 Switches The following optional startup switches that can be used to configure the Internet Agent’s POP3 service: /nopopversion /pop3...
52.7.5 /popsport By default, the Internet Agent listens for secure (SSL) POP3 connections on port 995. This switch allows you to change the POP3 SSL listen port. Syntax: /popsport-port_number Example: /popsport-996 52.7.6 /popssl Disables, enables, or requires secure (SSL) connections between POP3 clients and the Internet Agent.
52.8 IMAP4 Switches The following optional startup switches that can be used to configure the Internet Agent’s IMAP4 service: /imap4 /imapport /imapreadlimit /imapsport /imapssl /noimapversion /sslit 52.8.1 /imap4 Enables IMAP4 client access to GroupWise mailboxes through the Internet Agent. See Section 46.2.1, “Enabling POP3/IMAP4 Services,”...
52.8.5 /imapssl Disables, enables, or requires secure (SSL) connections between IMAP4 clients and the Internet Agent. See Section 48.4, “Securing Internet Agent Connections with SSL,” on page 788. Syntax: /IMAP4ssl-enabled|disabled|required Example: /popssl-required Option Description enabled The IMAP4 client determines whether an SSL connection or non-SSL connection is used. By default, the Internet Agent listens for SSL connections on port 993 and non-SSL connections on port 143.
52.9 HTTP (Web Console) Switches The following switches enable the HTTP Web console and control its configuration settings. The Web console enables you to monitor the Internet Agent through a Web browser. For more information, see Section 49.2, “Using the Internet Agent Web Console,” on page 805.
Internet Agent program. Syntax: /keyfile-filename Example: /keyfile-\\server1\sys\server1.key 52.10.3 /keypasswd Specifies the private key password. If the key does not require a password, do not use this switch. Syntax: /keypasswd-password Example: /keypasswd-novell Using Internet Agent Startup Switches 867...
52.10.4 /smtpssl Enables the Internet Agent to use a secure connection to other SMTP hosts. The SMTP host must also be enabled to use SSL or TLS (Transport Layer Security); if it is not, a non-secure connection is used. Valid settings are enabled and disabled. Syntax: /smtpssl-setting Example: /smtpssl-enabled 52.10.5 /httpssl...
Option Description enabled The IMAP4 client determines whether an SSL connection or non-SSL connection is used. By default, the Internet Agent listens for SSL connections on port 993 and non-SSL connections on port 143. You can use the /imapsport /imapport switches to change these ports.
/ldappwd /ldapipaddr Specifies the IP address of the LDAP server through which GroupWise authentication takes place. Syntax: /ldapipaddr-address Example: /ldapipaddr-172.16.5.18 /ldapport Specifies the port number being used by the LDAP server. The standard non-SSL LDAP port number is 389. The standard SSL LDAP port number is 636. Syntax: /ldapport-number Example: /ldapport-389 /ldapssl...
Page 871
/ldapcntxt Limits the directory context in which the LDAP server searches. For example, you could limit LDAP searches to a single Novell organization container located under the United States country container. If you restrict the LDAP context, you must make sure that users, when defining the directory in their e-mail client, enter the same context (using the identical text you did) in the Search Base or Search Root field.
/log switch to redirect the log files to a different location. Syntax: /log-log_file_directory NetWare Example: /log-sys:\log\gwia Linux Example: --log /opt/novell/groupwise/agents/log Windows Example: /log-c:\log\gwia 52.12.2 /logdays By default, log files are deleted after 30 days. This switch overrides the default setting. The range is from 1 to 360 days.
The values are: Diagnostic Verbose Normal (Default) Syntax: /loglevel-level Example: /loglevel-verbose 52.12.4 /logmax Controls the maximum amount of disk space for all log files. The amount of disk space each log file consumes is added together to determine the total amount of disk space used. When the limit is reached, the Internet Agent deletes the existing log files, starting with the oldest one.
WebAccess X I I Chapter 53, “Scaling Your WebAccess Installation,” on page 877 Chapter 54, “Configuring WebAccess Components,” on page 891 Chapter 55, “Managing User Access,” on page 935 Chapter 56, “Monitoring WebAccess Operations,” on page 945 Chapter 57, “Using WebAccess Startup Switches,” on page 965 WebAccess...
Scaling Your WebAccess Installation ® If your GroupWise system is relatively small (one domain and a few post offices) and all post offices reside in the same location, a basic installation of GroupWise WebAccess might very well meet your needs. However, if your GroupWise system is large, spans multiple locations, or requires failover support, you might need to scale your GroupWise WebAccess installation to better meet the reliability, performance, and availability needs of your users.
Multiple WebAccess Agents Figure 53-2 WebAccess Post Office Agent Post Office Domain WebAccess Post Office Agent Post Office Web Server with Domain WebAccess and WebPublisher Applications WebAccess Post Office Agent Post Office Domain There are various reasons why you might want to add additional WebAccess Agents, including: Improving reliability: One WebAccess Agent might provide sufficient access and performance, but you want to protect against downtime that would occur if the WebAccess Agent became unavailable because of server failure or some other reason.
Page 879
The WebAccess Application and WebPublisher Application Installed to Multiple Web Servers Figure 53-3 Web Server with WebAccess and WebPublisher Applications WebAccess Post Office Agent Post Office Domain Web Server with WebAccess and WebPublisher Applications Some reasons for wanting to use this type of configuration include: Enabling WebAccess users on an intranet to access GroupWise through an internal Web server and WebAccess users on the Internet to access GroupWise through an exposed Web server.
3 Deselect all components except the GroupWise WebAccess Agent, then click Next. 4 Follow the prompts to create the WebAccess Agent’s gateway directory, install the WebAccess ® Agent software, and create the WebAccess Agent’s object in Novell eDirectory 880 GroupWise 8 Administration Guide...
If you are installing to a domain where another WebAccess Agent already exists, you must use a different directory and object name than the one used for the existing WebAccess Agent. 5 When installation is complete, you need to configure your system so that the WebAccess and WebPublisher Applications know about the WebAccess Agent and can direct the appropriate user requests to it.
WebPublisher using an SSL connection. NOTE: The option to install Apache and Tomcat along with the WebAccess Application is not available if you are installing to Novell Open Enterprise Server Linux because Apache and Tomcat are already installed and configured correctly in that environment.
The GroupWiseProvider object. This is the service provider used by the WebAccess Application to connect to WebAccess Agents. The commgr.cfg file. This file located in the WebAccess Application’s home directory, which varies by platform. NetWare: sys:\Novell\GroupWise\WebAccess on the Web server OES Linux: /var/opt/novell/groupwise/webaccess SLES:...
Page 884
If no other WebAccess Agents are defined (as is the case by default), the WebAccess Application directs all user requests to the WebAccess Agent (Agent 1) listed in the file. This file is commgr.cfg located in the WebAccess Application’s home directory on the Web server. The file commgr.cfg contains the IP address and encryption key for the WebAccess Agent that was associated with the...
Location WebAccess Agent Agent 2 commgr.cfg Using this information, the WebAccess Application would create the following redirection/failover list: List Entry Taken From Agent 1 GroupWise service provider Agent 2 GroupWise service provider Agent 3 GroupWise service provider Because there is no WebAccess Agent defined in the WebAccess URL, user’s post office, or user’s domain, the WebAccess Application redirects the user’s request to the first WebAccess Agent (Agent 1) in the GroupWise service provider’s list.
3 Make the encryption key the same as the key for any other WebAccess Agents with which the WebAccess Application communicates. 4 Click OK to save the changes. 53.3.3 Specifying a WebAccess Agent in the WebAccess URL To have the WebAccess Application connect to a WebAccess Agent other than the one specified in file, you can add the WebAccess Agent’s IP address and port number to the URL commgr.cfg that calls the WebAccess Application.
<UL> <LI><A HREF="http://172.16.5.18/gw/ webacc?GWAP.ip=172.16.6.10&GWAP.port=7204>San Francisco </A></LI> <LI><A HREF="http://172.16.5.18/gw/webacc?GWAP.ip=172.16.6.12>New York </A></LI> <LI><A HREF="http://172.16.5.18/gw/ webacc?GWAP.ip=172.16.6.33&GWAP.port=7203>London </A></LI> </UL> The displayed HTML page would contain the following list of locations: San Francisco New York London When a user selects a location, the WebAccess Application routes all requests to the WebAccess Agent at the selected location.
3 Select the Override box to turn on the option. 4 In the Default WebAccess Gateway box, browse for and select the WebAccess Agent that you want to assign as the default agent. When you have multiple WebAccess Agents and a user logs in to GroupWise WebAccess, the GroupWise Application running on the Web server checks to see if a default WebAccess Agent has been assigned to the user’s post office.
3 Select the Override box to turn on the option. 4 In the Default WebAccess Gateway box, browse for and select the WebAccess Agent that you want to assign as the default agent. When you have multiple WebAccess Agents and a user logs in to GroupWise WebAccess, the GroupWise Application running on the Web server checks to see if a default WebAccess Agent has been assigned to the user’s post office, as described in Section 53.3.4, “Assigning a Default...
Page 890
The GroupWise WebAccess Agents list displays the WebAccess Agents the GroupWise service provider can communicate with when attempting to complete a request. By default, the list includes the WebAccess Agent that is defined in the file (listed in the commgr.cfg Configuration File field).
Configuring WebAccess Components ® GroupWise WebAccess consists of a number of components. The GroupWise 8 Installation Guide presented a simple overview of those components: WebAccess Components: Simplified Figure 54-1 WebAccess Application Post Office WebAccess Browser Server Agent Library WebPublisher Application Viewer Agent This section of the GroupWise 8 Administration Guide provides additional details about those and...
54.1 Configuring the WebAccess Agent The WebAccess Agent receives user requests from the WebAccess Application and WebPublisher Application, accesses post offices and libraries to process the requests, and then passes information back to the applications. WebAccess Agent Figure 54-3 LDAP Speller Server Application...
3 Modify any of the following fields: Maximum Threads: This is the maximum number of threads the agent uses at one time to process requests. The default (12) enables the agent to process 12 requests at one time, which is usually sufficient.
Page 894
To add a library to the list, click Add, then browse for and select the library. To change the display name or description for the library, select the library, then click ® Properties. By default, the library’s Novell eDirectory object name is used for the display name.
IMPORTANT: When you first set up WebPublisher, library documents are not visible to WebPublisher users until they have been indexed by the POA. You can wait until documents are indexed as part of the POA’s next indexing cycle or you can start the indexing process manually.
Page 896
4 Define the following properties: Access Mode: The access mode determines whether the WebAccess Agent uses client/server access, direct access, or both client/server and direct access to connect to the post office. With client/server and direct, the WebAccess Agent first tries client/server access; if client/server access fails, it then tries direct access.
3 Define the following properties: Tree: Specify the eDirectory tree that the WebAccess Agent logs in to. If the WebAccess Agent does not use an eDirectory user account, leave this field blank. Context: Specify the eDirectory context of the WebAccess Agent’s user account. If the WebAccess Agent does not use an eDirectory user account, leave this field blank.
Page 898
2 Click GroupWise > SSL Settings to display the SSL Settings page. 3 Fill in the Certificate File, SSL Key File, and Set Password fields: Certificate File: Select the server certificate file for the WebAccess Agent to use. The certificate file must be in Base64/PEM or PFX format. If you type the filename rather than using the Browse button to select it, use the full path if the file is not in the same directory as the WebAccess Agent program.
3 In the HTTP field, select Enabled to enable the WebAccess Agent to use a secure connection when passing information to the WebAccess Agent Web console. The Web browser must also be enabled to use SSL; if it is not, a non-secure connection is used. 54.1.5 Changing the WebAccess Agent’s Network Address or Port Numbers If you change the network address (IP address or DNS hostname) of the WebAccess Agent’s server...
3 To change the WebAccess Agent’s IP address, click the pencil icon to display the Edit Network Address dialog box. 4 Change the IP address or DNS hostname as necessary, then click OK to return to the Network Address page. 5 To change the port numbers used by the WebAccess Agent, type the new port number in the appropriate field.
During installation, the WebAccess Application is set up with a default configuration. However, you can use the information in the following sections to optimize the WebAccess Application configuration: Section 54.2.1, “Modifying the WebAccess Application Environment Settings,” on page 901 Section 54.2.2, “Adding or Removing Service Providers,” on page 903 Section 54.2.3, “Modifying WebAccess Application Template Settings,”...
Page 902
Configuration File: The WebAccess Application does not have access to Novell eDirectory or the GroupWise domain database. Therefore, ConsoleOne writes the application’s configuration information to the file specified in this field. By default, this is the file located in webacc.cfg the WebAccess Application’s home directory, which varies by platform.
54.2.2 Adding or Removing Service Providers The WebAccess Application receives requests from users and then passes the requests to the appropriate service provider. The service provider fills the requests and returns the required information to the WebAccess Application. The WebAccess Application merges the information into the appropriate template and displays it to the user.
Add: To add a service provider to the list, click Add, browse for and select the service provider’s object, then click OK. Edit: To edit a service provider’s information, select the provider in the list, then click Edit. For information about the modifications you can make, see Section 54.4, “Configuring the GroupWise Service Provider,”...
Page 905
GroupWise WebAccess. If you create your own templates, you need to place the templates in a new subdirectory in the template base directory. The default template path is based on the Tomcat installation location and varies by platform: NetWare: sys:\tomcat\4\webapps\gw\WEB-INF\classes\templates\webacc OES Linux: /var/opt/novell/tomcat5/ webapps/gw/WEB-INF/classes/templates/webacc SLES: /srv/www/tomcat5/base/ webapps/gw/WEB-INF/classes/templates/webacc Windows: c:\Novell\GroupWise\Tomcat5.5\...
Page 906
Defining WebAccess User Interfaces 1 From the WebAccess Application object’s Templates page, click Define User Interfaces to display the Define User Interfaces dialog box. The dialog box includes three tabs: User Interfaces: The User Interfaces tab lets you add, modify, and remove user interfaces, as well as determine whether or not GroupWise data added to an interface should be cached on proxy servers.
Page 907
The User Interface list displays all available user interfaces. The list includes the following information: User Interface: This column displays the name assigned to the user interface (for example, Standard HTML or Wireless Markup Language). Template: This column displays the directory in which the template files are located. Only the directory name is shown.
Page 908
The Browser User Agents tab lets you associate a user interface with a Web browser. The association is based on the browser’s User Agent information (signature, platform, version, and so forth). For example, if a browser’s User Agent information includes Windows CE (one of the predefined entries), the WebAccess Application uses the Basic HTML interface (no-frames interface).
Add: Click Add to add an entry to the list. Edit: Select an entry from the list, then click Edit to edit the entry’s information. Delete: Select an entry from the list, then click Delete to remove the entry. 5 Click OK to save your changes and return to the WebAccess Application object’s Templates page.
Page 910
Inactive sessions are automatically deleted after a period of time. The default path is to the users directory, located in the WebAccess Application’s home directory, which varies by platform. NetWare: on the Web server sys:\Novell\GroupWise\WebAccess\users OES Linux: /var/opt/novell/groupwise/webaccess/users SLES: /var/opt/novell/groupwise/webaccess/users...
Single Sign-On: The WebAccess Application supports authentication to GroupWise using Base64 authentication header credentials generated by a trusted server (for example, a Novell ® Access Manager Authentication Server).
Page 912
Change their GroupWise mailbox passwords Use Document Management Services Open attachments in native format Open documents in native format View attachments in HTML format View documents in HTML format All users who log in through a single Web server have the same feature access. You cannot configure individual user settings.
Page 913
Open Attachments in Native Format: By default, the Save As option enables users to save message attachments to their local drives and then open them in their native applications. You can turn on this option to enable the Open option. The Open option enables users to open message attachments directly in their native applications without first saving the files to the local drive.
This option and the Open Documents in Native Format option can both be enabled at the same time. Doing so gives users both the View option and the Open option, which means they have the choice of viewing a document as HTML or opening it in its native application. Exclude Files With These Extensions: If you want to exclude certain file types from having the View option, specify the file types in the Exclude Files With These Extensions field.
Page 915
2 Click Application > Environment to display the Environment page. 3 Modify any of the following fields: Configuration File: The WebPublisher Application does not have access to Novell eDirectory or the GroupWise domain database. Therefore, ConsoleOne writes the application’s configuration information to the file specified in this field. By default, this is the webpub.cfg...
54.3.2 Adding or Removing Service Providers The WebPublisher Application receives requests from users and then passes the requests to the appropriate service provider. The service provider fills the requests and returns the required information to the WebPublisher Application. The WebPublisher Application merges the information into the appropriate template and displays it to the user.
The default template path is based on the Tomcat installation location and varies by platform: NetWare: sys:\tomcat\4\webapps\gw\WEB-INF\classes\templates\webacc OES Linux: /var/opt/novell/tomcat5/ webapps/gw/WEB-INF/classes/templates/webacc SLES: /srv/www/tomcat5/base/ webapps/gw/WEB-INF/classes/templates/webacc Windows: c:\Novell\GroupWise\Tomcat5.5\...
Page 918
The default relative URL is: tomcat_directory/webapps /gw/com/novell/webpublisher/help Enable Template Caching: To speed up access to the template files, the WebPublisher Application can cache the files to the server’s memory. Select this option to turn on template caching.
Page 919
Browser User Agents: The Browser User Agents tab lets you associate a user interface with a Web browser. The association is based on the browser’s User Agent information (signature, platform, version, and so forth). Browser Accept Types: The Browser Accept Types tab lets you associate a user interface with a Web browser.
Page 920
3 To associate a user interface with a Web browser based on the browser’s User Agent information, click the Browser User Agents tab. The Browser User Agents tab lets you associate a user interface with a Web browser. The association is based on the browser’s User Agent information (signature, platform, version, and so forth).
The Browser Accept Types tab lets you associate a user interface with a Web browser. The association is based on the content type the browser accepts. Many browsers accept more than one content type (for example, both text/html and text/plain). If the list contains more than one acceptable content type, the WebPublisher Application uses the browser’s preferred content type, which is the type that is listed first in the browser’s Accept Type header.
Page 922
3 Configure the following settings: Open Documents in Native Format: By default, the Save As option enables user to save library documents to their local drives and then open them in their native applications. You can turn on this option to enable the Open option. The Open option enables users to open documents directly in their native applications without first saving the files to the local drive.
The GroupWise service provider is installed and configured when you install the WebAccess Application to a Web server. The WebAccess installation program creates a Novell eDirectory object for the GroupWise service provider in the same context as the WebAccess Application. The object is named GroupWiseProvider.
Page 924
IP address and the encryption key required by the GroupWise service provider to communicate with the WebAccess Agent. By default, the file is stored in the commgr.cfg WebAccess Application’s home directory, which varies by platform. NetWare: sys:\Novell\GroupWise\WebAccess on the Web server OES Linux: /var/opt/novell/groupwise/webaccess SLES: /var/opt/novell/groupwise/webaccess...
Application Service Provider Viewer Agent The GroupWise WebAccess installation program creates a Novell eDirectory object for the LDAP service provider in the same context as the WebAccess Application. The object is named ® LDAPProvider. Using ConsoleOne , you can modify the LDAPProvider object to define the LDAP services that the service provider can contact.
Page 926
ConsoleOne writes the information to the file. ldap.cfg By default, the file is stored in the WebAccess Application’s home directory, which ldap.cfg varies by platform. NetWare: sys:\Novell\GroupWise\WebAccess\users on the Web server OES Linux: /var/opt/novell/groupwise/webaccess/users SLES: /var/opt/novell/groupwise/webaccess/users Windows: on the Web server c:\Novell\GroupWise\WebAccess\users You should avoid changing the location of the file.
Service Provider Viewer Agent The WebAccess installation program creates a Novell eDirectory object for the GroupWise Document service provider in the same context as the WebPublisher Application. The object is named GroupWiseDocumentProvider. Using ConsoleOne, you can modify the GroupWiseDocumentProvider object to define the WebAccess Agents that the service provider contacts to fill GroupWise document requests.
Page 928
IP address and the encryption key required by the GroupWise Document service provider to communicate with the WebAccess Agent. By default, the file is stored commgr.cfg in the WebPublisher Application’s home directory, which varies by platform. NetWare: sys:\Novell\GroupWise\WebPublisher on the Web server OES Linux: /var/opt/novell/groupwise/webpublisher SLES: /var/opt/novell/groupwise/webpublisher...
Viewer Agent is sufficient to provide basic document conversion functionality. The Viewer Agent is configured by editing its startup file ( ). The default location for the startup files gwdva.dva varies by platform. NetWare: sys:\system Linux: /opt/novell/groupwise/agents/share Windows: c:\Program Files\Novell\GroupWise Server\WebAccess Configuring WebAccess Components 929...
In the Viewer Agent startup file, you can configure the following aspects of Viewer Agent functioning: Section 54.7.1, “Viewer Agent Web Console,” on page 930 Section 54.7.2, “Document Conversion,” on page 930 Section 54.7.3, “Document Quarantine,” on page 931 Section 54.7.4, “Document Cache,” on page 931 Section 54.7.5, “Agent Performance,”...
54.7.3 Document Quarantine You can configure the Viewer Agent to quarantine documents that cannot be converted to HTML so that they can be examined manually if necessary. To enable the file quarantine feature, uncomment the /hold startup switch in the Viewer Agent startup file. Documents that fail HTML conversion are then placed in the subdirectory of the Viewer Agent working directory ( hold...
54.7.5 Agent Performance By default, the Viewer starts 5 worker threads and adds additional threads as needed until reaching 15 threads. If users experience unacceptable delays when trying to view documents, you can increase the number of worker threads so that documents can be processed more quickly. By default, the Viewer Agent has limits on the amount of time it can spend converting a single document and on how large a converted document can become.
7 Restart Apache. 54.8.2 Apache 2 on Open Enterprise Server (OES) Linux 1 As , change to the directory and open the root /etc/opt/novell/httpd/conf httpd.conf file. 2 Locate the entries in the file. LoadModule 3 Add the following entry:...
54.8.3 Apache 2 on SUSE Linux Enterprise Server 9 The steps for Apache 2 on SUSE Linux Enterprise Server 9 are essentially the same as those for Novell Open Enterprise Server, as described in Section 54.8.2, “Apache 2 on Open Enterprise Server (OES) Linux,”...
Managing User Access You can manage various aspects of user experience with the WebAccess client. Section 55.1, “Controlling User Access to Mailboxes,” on page 935 Section 55.2, “Setting the Timeout Interval for Inactive Sessions,” on page 940 Section 55.3, “Configuring User Access to WebAccess Features,” on page 941 Section 55.4, “Customizing the WebAccess Interface,”...
If a user’s membership in two classes of service is based upon the same level of membership (for example, both through individual user membership), the class that applies is the one that allows the most privileges. For example, if the user belongs to one class of service that allows access to WebAccess and another class that prevents access, the class that allows access applies to the user.
If you select Allow Access, you must also set a timeout interval. The timeout interval determines how long the WebAccess Agent keeps open a dedicated connection to the post office on behalf of the user. If the agent does not receive a user request within the specified interval, it closes the user’s connection to the post office in order to free up its resources and the Post Office Agent’s resources for other uses.
3 In the Class of Service list, select the class you want to add members to, then click Add to display the Select GroupWise Object dialog box. 4 Select Domains, Post Offices, Distribution Lists, or Users to display the list you want. 5 In the list, select the domain, post office, distribution list, or user you want, then click Add to add the object as a member in the class.
Page 939
3 Click Validate Now. 4 After the database has been validated, click OK. If inconsistencies are found, see “Recovering the Access Database” on page 939. Recovering the Access Database When you recover the Access database, a new database is created and all salvageable records are copied to the new database.
3 Click Recover Now. 4 After the database has been recovered, click OK. 55.2 Setting the Timeout Interval for Inactive Sessions By default, users are logged out of GroupWise WebAccess after 20 minutes if they have not performed any actions that generate requests. Actions such as opening or sending a message generate requests.
2 In the Timeout for Inactive Sessions box, select the number of minutes for the timeout interval. 3 In the Path for Inactive Sessions box, select the path for the directory where you want inactive sessions stored. 4 Click OK. The timeout interval applies to all users who log in through the Web server where the WebAccess Application is running.
Page 942
To configure the WebAccess feature settings: 1 In ConsoleOne, right-click the WebAccess Application object, then click Properties. 2 Click Application > Settings to display the Application Settings page. 3 Configure the following settings: Spell Check Items: Enable this option if you want users to be able to spell check an item’s text before sending the item.
4 Click OK. 55.4 Customizing the WebAccess Interface GroupWise WebAccess enables you to change the default Novell logo and colors used in the WebAccess interface. For example, you can add your company logo to the main WebAccess window and change the colors to match your company colors.
Page 944
The file is located in the following directory: tomcat_directory/webapps/gw/WEB-INF/classes/templates/webacc 2 If you want to change the logo image: 2a Locate the CUSTOMIZABLE IMAGE FOR GROUPWISE WEBACCESS section at the beginning of the file. 2b To turn on customization for the logo image, set the property to TRUE: WebAccess.Customize.Image.enable WebAccess.Customize.Image.enable=true...
Section 56.1.1, “Using the WebAccess Agent Server Console,” on page 945 Section 56.1.2, “Using the WebAccess Agent Web Console,” on page 949 Section 56.1.3, “Using Novell Remote Manager,” on page 952 Section 56.1.4, “Using an SNMP Management Console,” on page 952 Section 56.1.5, “Assigning Operators to Receive Warning and Error Messages,”...
Page 946
WebAccess Agent Server Console Figure 56-1 The console and its options are described below. Up Time The Up Time field displays how long it has been since the WebAccess Agent was started. Threads The default of 12 threads enables the WebAccess Agent to service 12 user requests at one time. The Busy field displays the number of threads that are currently servicing user requests.
Page 947
Logging Box The Logging box displays the logged information. The current log level determines the amount of information that is displayed (see “F10 = Options” on page 947). For each line, the first item is the number of the thread that processed the user’s request, the second item is the time of the request, and the third item is the information associated with the request.
Page 948
Linux WebAccess Agent Server Console Figure 56-2 Windows: Using the WebAccess Agent Server Console The Windows WebAccess Agent server console lets you monitor the operation of the agent. The server console, shown below, is displayed in a DOS window. Windows WebAccess Agent Server Console Figure 56-3 The console and its options are described below.
F1 or F7 Shuts down and exits the agent. Cycles the logging level among Normal, Verbose, and Diagnostic. Normal displays initial statistics, user logins, warnings, and errors; Verbose displays Normal logging plus user requests; and Diagnostic displays Verbose logging plus thread information. The default is Normal logging. Use Verbose only if you are troubleshooting a problem with WebAccess.
Page 950
You cannot use the Web console to change any of the WebAccess Agent’s settings. Changes must be made through ConsoleOne, the WebAccess Agent console, or the startup file. Refer to the following sections for information about enabling and using the Web console: “Enabling the WebAccess Agent Web Console”...
Page 951
5 In the HTTP User Name field, enter an arbitrary username (for example, webcon). 6 Click Set Password to assign a password (for example, monitor). 7 Click OK to save your changes. Viewing the WebAccess Agent Web Console 1 In a Web browser, enter the following: http://IP_address:agent_port https://IP_address:agent_port where IP_address is the IP address of the server where the WebAccess Agent is running, and...
56.1.3 Using Novell Remote Manager If the WebAccess Agent is running on NetWare 6.5 or on Novell Open Enterprise Server (OES), you can use the IP Address Management feature in Novell Remote Manager (Manage Server > IP Address Management) to view the IP address and port configuration for the WebAccess Agent. This is also true for other GroupWise agents (MTA, POA, and Internet Agent) running on NetWare 6.5/...
Page 953
To assign an operator: 1 In ConsoleOne, right-click the WebAccess Agent object, then click Properties. 2 Click GroupWise > Gateway Administrators to display the Gateway Administrators page. 3 Click Add, select a user, then click OK to add the user to the Gateway Administrators list. 4 Make sure Operator is selected as the Administrator Role.
Section 56.2.2, “Using the WebAccess Application Web Console,” on page 955 56.2.1 Enabling the WebAccess Application Web Console 1 Edit the file, located in the WebAccess Application’s home directory, which webacc.cfg varies by platform. NetWare: sys:\Novell\GroupWise\WebAccess on the Web server OES Linux: /var/opt/novell/groupwise/webaccess SLES: /var/opt/novell/groupwise/webaccess Windows:...
6 Restart Tomcat. NetWare: unload java load tomcat4 Linux: Novell Open Enterprise Server 2 Linux installation of Apache: /etc/init.d/novell-tomcat5 stop /etc/init.d/novell-tomcat5 start SUSE Linux Enterprise Server 10 installation of Apache: /etc/init.d/tomcat5 stop /etc/init.d/tomcat5 start Windows 1. At the Windows server, click Start > Administrative Tools > Services.
Linux: /opt/novell/groupwise/agents/share Windows: c:\Program Files\Novell\GroupWise Server\WebAccess 2 Scroll down to the HTTP monitoring section. 3 Remove the comment character (;) from the /http startup switch to enable HTTP for the Document Viewer Agent. 4 If the default HTTP port of 7439 is already in use on the server, remove the comment marker from the /httpport switch and provide a unique port number.
The Web console is displayed. Through the Web console you can view the following information: Status: Displays how long the Document Viewer Agent has been up, the number of worker threads it has started, the current server utilization, and statistics about the files the worker threads have processed.
Section 56.4.2, “Controlling WebAccess Application Logging,” on page 961 Section 56.4.3, “Controlling Document Viewer Agent Logging,” on page 963 Section 56.4.4, “Viewing WebAccess Log Files,” on page 964 Section 56.4.5, “Interpreting WebAccess Log File Information,” on page 964 56.4.1 Controlling WebAccess Agent Logging The WebAccess Agent provides logging options to help you monitor the operation of the agent.
Page 959
NetWare and domain\wpgate\webac80a\000.prc Windows: Linux: /var/log/novell/groupwise/domain_name.gateway_name/000.prc For information about modifying log settings, see the following sections: “Modifying WebAccess Agent Log Settings in ConsoleOne” on page 959 “Modifying WebAccess Agent Log Settings through Startup Switches” on page 960 “Modifying WebAccess Agent Log Settings through the WebAccess Agent Server Console”...
Page 960
Logging Level: There are four logging levels: Off, Normal, Verbose, and Diagnostic. Off turns logging off; Normal displays initial statistics, user logins, warnings, and errors; Verbose displays normal logging plus user requests; and Diagnostic displays Verbose logging plus thread information. The default is Normal logging. Use Diagnostic only if you are troubleshooting a problem with WebAccess.
Modifying Log Settings through the Windows WebAccess Agent Server Console You can use the Windows WebAccess Agent’s console to modify the logging level. All other log settings must be modified through ConsoleOne or startup switches. See “Modifying WebAccess Agent Log Settings in ConsoleOne” on page 959 “Modifying WebAccess Agent Log Settings through Startup Switches”...
Page 962
NetWare: on the Web server sys:\Novell\GroupWise\WebAccess\logs OES Linux: /var/opt/novell/groupwise/webaccess/logs SLES: /var/opt/novell/groupwise/webaccess/logs Windows: c:\Novell\GroupWise\WebAccess\logs on the Web server To modify the application log settings: 1 In ConsoleOne, browse to and select the Domain object where the application object is located. 2 Right-click the application object (GroupWiseWebAccess, or GroupWiseWebPublisher), then click Properties.
Linux: /var/log/novell/groupwise/gwdva Windows: c:\Program Files\Novell\GroupWise Server\WebAccess\gwdva.dir\log Because the Document Viewer Agent is currently configured using switches in its startup file, you must activate the switches in order to change how logging is performed. 1 Use an ASCII text editor to edit the Document Viewer Agent startup file ( gwdva.dva...
56.4.4 Viewing WebAccess Log Files You can view the log file for the current WebAccess Agent session, or you can view archived log files. The current WebAccess Agent log file is viewable through the NetWare WebAccess Agent console, as described in “NetWare: Using the WebAccess Agent Server Console”...
NetWare: sys:\system Linux: /opt/novell/groupwise/agents/share/ Windows: c:\Program Files\Novell\GroupWise Server\WebAccess The table below summarizes WebAccess Agent startup switches for all platforms and how they correspond to configuration settings in ConsoleOne. Switch starts with: a b d e f g s t u...
NetWare: load sys:system\gwinter @webac80a.waa Linux: /opt/novell/groupwise/agents/bin/gwinter @webac80a.waa Windows: c:\Program Files\Novell\GroupWise Server\WebAccess\gwinter.exe @webac80a.waa During installation of the WebAccess Agent, the Installation program creates a default startup file, , where agent_name is the name assigned to the WebAccess Agent object (for agent_name.waa example, ).
GroupWise 8 Interoperability Guide. ® If you are running the NetWare WebAccess Agent on the latest version of NetWare 6.5/OES NetWare and Novell Cluster Services, the WebAccess Agent can detect the cluster automatically. NetWare WebAccess Linux WebAccess Agent Windows WebAccess Agent Agent...
NetWare WebAccess Agent Linux WebAccess Agent Windows WebAccess Agent Syntax: /home-[svr\][vol:]\dir --home /dir /home-[drive:]\dir /home-\\svr\vol\dir /home-\\svr\sharename\dir Example: /home-\provo1 --home /gwsystem/provo1 /home-\provo1 /home-mail:\provo1 /home-m:\provo1 /home-server2\mail:\provo1 /home-\\server2\c\provo1 /home-\\server2\mail\provo1 57.1.5 /http If the WebAccess Agent’s Web console is disabled in ConsoleOne, this switch enables the Web console.
See also /logdays, /logdiskon, /loglevel, and /logmax 57.1.11 /logdays Specifies the maximum number of days to keep log files. This setting works in combination with the /logmax setting. Log files are deleted when the maximum number of days or disk space size is reached, whichever comes first.
/maxusers-300 --maxusers 400 /maxusers-500 57.1.16 /password Used by the NetWare WebAccess Agent only. Specifies the Novell eDirectory password to use to access the network servers where the GroupWise domain directory and post office directories reside. NetWare WebAccess Agent Linux WebAccess Agent Windows WebAccess Agent...
NetWare WebAccess Agent Linux WebAccess Agent Windows WebAccess Agent Syntax: /port-port_number --port port_number /port-port_number Example: /port-1678 --port 1679 /port-1680 See also /ip. 57.1.18 --show Used by the Linux WebAccess Agent only. Running the WebAccess Agent with this option disabled (the default) causes the WebAccess Agent to run as a daemon without a user interface. Enabling this option causes the logging UI to appear in a terminal window.
NetWare: sys:\system Linux: /opt/novell/groupwise/agents/share Windows: c:\Program Files\Novell\GroupWise Server\WebAccess The table below summarizes Document Viewer Agent startup switches for all platforms and how they correspond to configuration settings in ConsoleOne. Switch starts with: c d e u v w x y z...
Syntax: /domain-domain_name --domain domain_name /domain-domain_name Example: /domain-corporate.com --domain novell.com /domain-suse.com See also /hold, /maxhold, /email, and /relay. 57.2.4 /email Provides the e-mail address of a user that the Viewer Agent should notify when it places a document in quarantine. See Section 54.7.3, “Document Quarantine,”...
57.2.7 /httpport Sets the HTTP port number used for the Viewer Agent to communicate with the WebAccess Agent. The default is 7439; the setting must be unique. See “Enabling the Document Viewer Agent Web Console” on page 956. NetWare Viewer Agent Linux Viewer Agent Windows Viewer Agent Syntax:...
Sets the directory where the Viewer Agent stores its log files. The default location varies by platform. NetWare: sys:\system\gwdva.dir\log Linux: /var/log/novell/groupwise/gwdva Windows: c:\Program Files\Novell\GroupWise Server\WebAccess\gwdva.dir\log For more information, see Section 56.4.3, “Controlling Document Viewer Agent Logging,” on page 963. NetWare Viewer Agent Linux Viewer Agent...
Typically you find multiple log files in the specified directory. The first 4 characters represent the date. The next 3 characters identify the agent. A three-digit extension allows for multiple log files created on the same day. For example, a log file named 0518dva.001 indicates that it is a Viewer Agent log file, created on May 18.
57.2.16 /maxcache Specifies in megabytes the maximum amount of disk space that the library cache can occupy. The default is 100. To clear out the contents of the library cache, set /maxcache to 0 (zero); this also disables the library cache in the future. See Section 54.7.4, “Document Cache,”...
See also /maxtime. 57.2.20 /maxtime Specifies in seconds the maximum amount of time a worker thread can work on a converting a single document. The default is 120 (2 minutes). Section 54.7.5, “Agent Performance,” on page 932. NetWare Viewer Agent Linux Viewer Agent Windows Viewer Agent Syntax:...
NetWare Viewer Agent Linux Viewer Agent Windows Viewer Agent Example: /maxworkers-6 --maxworkers 7 /maxworkers-8 See also /minworkers. 57.2.24 /minworkers Specifies the minimum number of worker threads that the Viewer Agent starts. The default is 5. The maximum number of threads is limited only by available memory resources on the server. See Section 54.7.5, “Agent Performance,”...
Sets the path to the directory where the Viewer Agent creates its temporary files. The default varies by platform. See Section 54.7.2, “Document Conversion,” on page 930. NetWare: sys:\system\gwdva.dir\temp Linux: /opt/novell/groupwise/agents/bin/gwdva.dir/temp Windows: c:\Program Files\Novell\GroupWise Server\WebAccess\gwdva.dir\temp NetWare Viewer Agent Linux Viewer Agent Windows Viewer Agent Syntax: /temp-[svr\][vol:]\dir --temp /dir /temp-[drive:]\dir /temp-\\svr\vol\dir...
XIII Calendar Publishing Host X I I I Chapter 58, “Configuring the Calendar Publishing Host,” on page 985 Chapter 59, “Monitoring Calendar Publishing,” on page 993 Chapter 60, “Creating a Corporate Calendar Browse List,” on page 995 Chapter 61, “Managing Your Calendar Publishing Host,” on page 997 Calendar Publishing Host...
Configuring the Calendar Publishing Host ® For detailed instructions about installing and setting up the GroupWise Calendar Publishing Host for the first time, see “Installing the GroupWise Calendar Publishing Host” in the GroupWise 8 Installation Guide. The default configuration of the Calendar Publishing Host is adequate to begin publishing calendars.
The Post Office page provides the information that the Calendar Publishing Host needs in order to communicate with a POA to obtain calendar and free/busy information. The initial information was provided during installation, as described in “Configuring a POA for Calendar Publishing”...
Page 987
2 Change the Calendar Publishing Host log settings as needed: Enable Logging: Deselect this option to turn off Calendar Publishing Host logging. Log File Path: The default log file location varies by Web server platform: NetWare: sys:\Novell\GroupWise\calhost\logs OES Linux: /var/opt/novell/groupwise/calhost/logs SLES:...
NetWare: sys:\tomcat\4\logs OES Linux: /var/opt/novell/tomcat5/logs SLES: /srv/www/tomcat5/base/logs Windows: c:\Novell\GroupWise\tomcat5.5\logs 3 If you make changes, click Save. 58.4 Configuring LDAP Authentication 1 Log in to the Calendar Publishing Host Administration Web console, then click Authentication. The Authentication page provides the information that the Calendar Publishing Host needs in order to log into eDirectory.
Required LDAP Attribute: By default, the Calendar Publishing Host checks users for membership in a specific group before it grants access to the Calendar Publishing Host Administration Web console. This default is typically appropriate. Required LDAP Value: If you retain the default LDAP attribute of groupMembership, specify the full context of the group to which Calendar Publishing Host administrator users must belong in order to log in to the Administration Web console.
If you want your changes to take effect immediately, restart Tomcat: NetWare: unload java load tomcat4 Linux: Novell Open Enterprise Server 2 Linux installation of Apache: /etc/init.d/novell-tomcat5 stop /etc/init.d/novell-tomcat5 start SUSE Linux Enterprise Server 10 installation of Apache: /etc/init.d/tomcat5 stop /etc/init.d/tomcat5 start...
Page 991
5 Restart the Web server: NetWare: unload apache2 unload java tomcat4 apache2 Linux: Novell Open Enterprise Server 2 Linux installation of Apache: /etc/init.d/apache2 stop /etc/init.d/novell-tomcat5 stop /etc/init.d/novell-tomcat5 start /etc/init.d/apache2 start SUSE Linux Enterprise Server 10 installation of Apache: /etc/init.d/apache2 stop /etc/init.d/tomcat5 stop...
Monitoring Calendar Publishing By monitoring the Calendar Publishing Host and the POAs it communicates with, you can determine whether or not its current configuration is meeting the needs of your GroupWise users. Section 59.1, “Viewing Calendar Publishing Status at the POA Web Console,” on page 993 Section 59.2, “Using Calendar Publishing Host Log Files,”...
59.2 Using Calendar Publishing Host Log Files The default log file location varies by Web server platform: NetWare: sys:\Novell\GroupWise\calhost\logs OES Linux: /var/opt/novell/groupwise/calhost/logs SLES: /var/opt/novell/groupwise/calhost/logs Windows: c:\Novell\GroupWise\calhost\logs Logging is enabled by default. You can increase the amount of information that is logged, as described in Section 58.3, “Adjusting Log Settings,”...
Creating a Corporate Calendar Browse List The Calendar Publishing Host creates a browse list of published calendars. However, by default, no calendars are displayed in the calendar browse list. To create a corporate calendar browse list, you need to grant rights to specific users, or at the post office or domain level, to publish to the corporate calendar browse list.
Managing Your Calendar Publishing Host As circumstances change over time, you might need to change the configuration of your Calendar Publishing Host to better meeting the needs of your GroupWise users. Section 61.1, “Adding Multiple Calendar Publishing Hosts,” on page 997 Section 61.2, “Assigning a Different Calendar Publishing Host to Users,”...
4 In the Web Calendar Publishing Host field, select the new Calendar Publishing Host, then click the Lock button to ensure that the new Calendar Publishing Host setting overrides the previous setting. 5 Click OK, then click Close. 6 Repeat Step 1 through Step 5...
3 Select the Calendar Publishing Host whose configuration you need to change, then click Edit. Do not change the URL unless absolutely necessary. Changing the URL would obsolete the URL that GroupWise users have sent to Internet colleagues to access published calendars and free/busy information.
Page 1000
3 Select the Calendar Publishing Host to delete, then click Delete. 4 Click OK. 5 Restart Tomcat where the Calendar Publishing Host has been deleted, as described in Section 58.6.1, “Restarting Tomcat,” on page 990. 6 Restart the POA that used to communicate with the deleted Calendar Publishing Host, so that the POA does not try to reestablish the connection.
Need help?
Do you have a question about the GROUPWISE 8 - ADMINISTRATION and is the answer not in the manual?
Questions and answers