Novell GROUPWISE 7 System

I
System
Chapter 1, “GroupWise System Administration,” on page 37
Chapter 2, “ConsoleOne Administration Tool,” on page 39
Chapter 4, “GroupWise System Operations,” on page 51
Chapter 5, “GroupWise Utilities,” on page 73
Chapter 6, “GroupWise Address Book,” on page 85
Chapter 7, “Multilingual GroupWise Systems,” on page 105
novdocx (en) 11 December 2007
I
System
35
novdocx (en) 11 December 2007
36 GroupWise 7 Administration Guide
1

GroupWise System Administration

As a GroupWise® system administrator, it is your responsibility to keep your GroupWise system running smoothly for your GroupWise users. This GroupWise 7 Administration Guide provides a wealth of information to help you accomplish this task. This System section provides an overview of the GroupWise administration tool, ConsoleOne tasks that affect your GroupWise system as a whole and provides links to more specialized instructions.
The following sections of the Administration Guide detail the eDirectory GroupWise information is stored. Instructions are provided for creating and managing all GroupWise object types.
“Domains” on page 109
“Post Offices” on page 153
“Users” on page 201
“Resources” on page 247
®
, and its capabilities. It summarizes administrative
TM
objects where
novdocx (en) 11 December 2007
1
“Distribution Lists, Groups, and Organizational Roles” on page 261
“Libraries and Documents” on page 291
The following sections of the Administration Guide detail the GroupWise software components that make your GroupWise system run. Instructions are provided for configuring, monitoring, and optimizing each software component.
“Post Office Agent” on page 461
“Message Transfer Agent” on page 603
“Internet Agent” on page 701
“WebAccess” on page 853
“Monitor” on page 963
The following additional sections of the Administration Guide provide supporting details and background information:
“Databases” on page 371
“Client” on page 1033
“Security Administration” on page 1109
“Security Policies” on page 1159
GroupWise System Administration
37
novdocx (en) 11 December 2007
38 GroupWise 7 Administration Guide
2

ConsoleOne Administration Tool

GroupWise® is administered using ConsoleOne®, a Java*-based tool for managing your network and its resources. When you create your GroupWise system, GroupWise snap-ins are added to your ConsoleOne installation and GroupWise objects are created in Novell manage your GroupWise system, you use ConsoleOne to create additional GroupWise objects, modify GroupWise object properties, and so on.
IMPORTANT: Because the GroupWise snap-ins to ConsoleOne are required in order to work with GroupWise objects, you cannot use other network management tools, such as Novell iManager, to administer your GroupWise system. Also, you should not use older network management tools, such as NetWare includes legacy gateways that require such tools to administer the corresponding Gateway objects and their properties.
Because GroupWise is a cross-platform product, you might have components of your GroupWise system located on NetWare servers, Linux servers, and Windows* servers. You can run ConsoleOne on Windows or Linux to manage GroupWise domains and post offices located on any of these platforms.
®
Administrator, to administer your GroupWise system, unless your GroupWise system
®
eDirectoryTM. As you
novdocx (en) 11 December 2007
2
Section 2.1, “ConsoleOne on Windows,” on page 39
Section 2.2, “ConsoleOne on Linux,” on page 40
Section 2.3, “ConsoleOne in a Multiple-Platform Environment,” on page 41
NOTE: For a GroupWise system on NetWare, you cannot run ConsoleOne to administer GroupWise at the NetWare server console. The GroupWise Administrator snap-ins to ConsoleOne do not run in that environment.

2.1 ConsoleOne on Windows

You can run ConsoleOne on Windows on any Windows machine that meets the requirements listed in “GroupWise Administration Requirements” in the GroupWise 7 Installation Guide.
Section 2.1.1, “Installing ConsoleOne on Windows,” on page 39
Section 2.1.2, “Starting ConsoleOne on Windows,” on page 40

2.1.1 Installing ConsoleOne on Windows

When you create your initial GroupWise system using the GroupWise Installation program (install.exe) on Windows, the GroupWise snap-ins to ConsoleOne are installed to the ConsoleOne installation on that machine. If necessary, you can install ConsoleOne itself to the machine where you are running the GroupWise Installation program. You are also given the opportunity to copy the GroupWise snap-ins to ConsoleOne into a GroupWise software distribution directory for later use.
After you have set up your GroupWise system, you can use the GroupWise Installation program to install ConsoleOne and the GroupWise snap-ins from the GroupWise 7 Administrator for NetWare/
ConsoleOne Administration Tool
39
Windows CD or you can run admin\install.exe to install the snap-ins from the software distribution directory to additional locations as needed.

2.1.2 Starting ConsoleOne on Windows

When you install ConsoleOne, a ConsoleOne icon is automatically created on your Windows desktop for starting ConsoleOne.
Before you start ConsoleOne, turn off file caching in the Novell Client to protect database integrity.
1 Right-click the red N in the notification area, then click Novell Client Properties.
2 Click Advanced Settings, select File Caching, then select Off.
3 Click OK to save your change.

2.2 ConsoleOne on Linux

You can run ConsoleOne on Linux on any Linux machine that meets the requirements listed in “GroupWise Administration Requirements” in the GroupWise 7 Installation Guide.
novdocx (en) 11 December 2007
Section 2.2.1, “Installing ConsoleOne on Linux,” on page 40
Section 2.2.2, “Starting ConsoleOne on Linux,” on page 40

2.2.1 Installing ConsoleOne on Linux

When you create your initial GroupWise system using the GroupWise Installation program (install) on Linux, ConsoleOne should already be installed before you begin. If you are running Novell Open Enterprise Server Linux, you can install ConsoleOne from YaST using Software > Install and Remove Software. Linux ConsoleOne is also available on the Novell Downloads page
(http://download.novell.com/index.jsp).
After ConsoleOne is installed, the GroupWise Installation program on Linux installs the GroupWise snap-ins to ConsoleOne to the ConsoleOne installation on that machine. You are also given the opportunity to copy the GroupWise Administration RPM into a GroupWise software distribution directory for later use.
After you have set up your GroupWise system, you can use the GroupWise Installation program to the GroupWise snap-ins from the GroupWise 7 Administrator for Linux CD or you can install the GroupWise Administration RPM from the admin subdirectory of the software distribution directory to install the snap-ins to additional locations as needed.

2.2.2 Starting ConsoleOne on Linux

1 In a terminal window, become root by entering sux and the root password.
The sux command enables the X Window System*, which is required for running ConsoleOne.
2 Enter the following command:
/usr/ConsoleOne/bin/ConsoleOne
40 GroupWise 7 Administration Guide

2.3 ConsoleOne in a Multiple-Platform Environment

If your GroupWise system includes multiple platforms, you can administer Linux domains from Windows ConsoleOne or to administer NetWare or Windows domains from Linux ConsoleOne. The cross-platform connections required for cross-platform GroupWise administration are described in the following sections of “Migration” in the GroupWise 7 Installation Guide:
Using Windows ConsoleOne to Access Domains and Post Offices on Linux
Using Linux ConsoleOne to Access Domains and Post Offices on NetWare or Windows
novdocx (en) 11 December 2007
ConsoleOne Administration Tool 41
novdocx (en) 11 December 2007
42 GroupWise 7 Administration Guide
3

GroupWise View

When administering GroupWise® in ConsoleOne®, you can use the standard Novell® eDirectoryTM View or you can use the GroupWise View. The following sections discuss the GroupWise View and how to use it:
Section 3.1, “eDirectory View vs. GroupWise View,” on page 43
Section 3.2, “GroupWise Object Icons,” on page 44
Section 3.3, “Customizing the GroupWise View,” on page 46
Section 3.4, “Searching in the GroupWise View,” on page 48
Section 3.5, “Performing Administrative Tasks from the GroupWise View,” on page 48
NOTE: The ConsoleOne illustrations used in the guide show ConsoleOne on Windows. ConsoleOne on Linux appears different but provides substantially the same functionality.
novdocx (en) 11 December 2007
3

3.1 eDirectory View vs. GroupWise View

The eDirectory View displays the GroupWise objects in their contexts in the eDirectory tree, as shown in the following example.
Figure 3-1 eDirectory View
The GroupWise View filters out all non-GroupWise objects and shows how the GroupWise objects relate to each other in the GroupWise system, as shown in the following example.
GroupWise View
43
Figure 3-2 GroupWise View
In the left pane, all Domain objects are displayed under the GroupWise system, and all Post Office objects are subordinate to the domains where they reside. You can select the GroupWise system, a domain, or a post office in the left pane and then use the drop-down list of GroupWise objects on the toolbar to display associated objects (Users, Resources, Message Transfer Agents, and so on) in the right pane. In the above example, the GroupWise System is selected in the left pane and the GroupWise Object list is set to Users, so the right pane is displaying all users in the entire GroupWise system.
novdocx (en) 11 December 2007

3.2 GroupWise Object Icons

The following table lists all the GroupWise objects that are displayed in the eDirectory View or GroupWise View in ConsoleOne.
Table 3-1 Object Icons
Icon GroupWise Object Additional Information
GroupWise System Represents the GroupWise system you are currently connected
to. The GroupWise system’s name is displayed in the lower left corner of the ConsoleOne window.
Primary Domain Represents the system’s primary domain. To ensure
consistency, all replication of GroupWise information to the GroupWise domain and post office databases takes place through the primary domain. For additional information, see
Part II, “Domains,” on page 109.
Secondary Domain Represents any additional domains, other than the primary,
created in the GroupWise system. For additional information, see Part II, “Domains,” on page 109.
Current Domain Represents the domain to which ConsoleOne is currently
connected. For information about changing the current domain, see Section 9.1, “Connecting to a Domain,” on page 127.
44 GroupWise 7 Administration Guide
Icon GroupWise Object Additional Information
External Domain Represents a domain from another GroupWise system.
Non-GroupWise Domain Represents all or part of a non-GroupWise system.
Post Office Represents a collection of user accounts (mailboxes). For
additional information, see Part III, “Post Offices,” on page 153.
External Post Office Represents a post office in an external GroupWise system or a
non-GroupWise system.
User Represents an eDirectory user who has been given a
GroupWise account in a post office. For additional information, see Part IV, “Users,” on page 201.
External Entity Represents a user not listed in eDirectory who has been given a
GroupWise account in a post office. For additional information, see Part IV, “Users,” on page 201.
External User Represents a user in an external GroupWise system or a non-
GroupWise system.
novdocx (en) 11 December 2007
Resource Represents a conference room or some other resource that can
be scheduled by users. For additional information, see Part V,
“Resources,” on page 247.
External Resource Represents a resource that belongs to an external GroupWise
system or a non-GroupWise system.
Distribution List Represents a group of users or resources that can all be
addressed by using the distribution list’s name. For additional information, see Part VI, “Distribution Lists, Groups, and
Organizational Roles,” on page 261.
Group Represents an eDirectory group. eDirectory groups, like
distribution lists, can be addressed by using the group’s name. Any members of the group who have GroupWise accounts receive the message. For additional information, see Part VI,
“Distribution Lists, Groups, and Organizational Roles,” on page 261.
Organizational Role Represents an eDirectory organizational role. eDirectory
organizational roles, like distribution lists, can be addressed by using the organizational role’s name. Any members of the role who have GroupWise accounts receive the message. For additional information, see Part VI, “Distribution Lists, Groups,
and Organizational Roles,” on page 261.
Library Represents a collection of documents. For additional
information, see Chapter 21, “Document Management Services
Overview,” on page 293.
Nickname Represents an additional address associated with a user,
resource, or distribution list. For additional information, see
Part IV, “Users,” on page 201, Part V, “Resources,” on page 247, or Part VI, “Distribution Lists, Groups, and Organizational Roles,” on page 261.
Message Transfer Agent Represents a Message Transfer Agent (MTA) associated with a
domain. For additional information, see Part X, “Message
Transfer Agent,” on page 603.
GroupWise View 45
Icon GroupWise Object Additional Information
Post Office Agent Represents a Post Office Agent (POA) associated with a post
office. For additional information, see Part IX, “Post Office
Agent,” on page 461.
Gateway Represents a method of linking to another e-mail system or
transport. For additional information, see the GroupWise
gateway guides (http://www.novell.com/documentation/ gwgateways).

3.3 Customizing the GroupWise View

You can change the column display, order, and width to customize the GroupWise View.
Changes are preserved from one ConsoleOne session to the next. In addition, your last view is persistent from session to session. For example, if you last used the Distribution Lists view, the next time you start ConsoleOne and open the GroupWise View, the Distribution Lists view is displayed. If the last-used view is not applicable (for example, you had the Gateways view open and when the new ConsoleOne session starts you select a Post Office object), the GroupWise View defaults to the Users view.
novdocx (en) 11 December 2007
Section 3.3.1, “Changing the Column Display and Order,” on page 46
Section 3.3.2, “Changing the Column Widths,” on page 47

3.3.1 Changing the Column Display and Order

For each view (Users, Distribution Lists, Gateways, Post Offices, and so forth), you can determine which columns are displayed and the order in which they are displayed.
1 Select GroupWise System in the left (tree) pane, then select the view (for example, Users).
2 If you are changing the Users view, use the drop-down list to select how you want to sort users
(ID Sort, User Name Sort, First Name Sort, or Last Name Sort).
46 GroupWise 7 Administration Guide
The Users view allows you to sort by ID, user name, first name, or last name. Each of these is treated as a separate Users view for which you can determine the column display and order. The views for different objects offer different sort options.
3 Click Vie w > Edit Columns to display the Select GroupWise View Columns dialog box.
novdocx (en) 11 December 2007
4 To add a column, select the column in the Available Fields list, then click the left-arrow to add
it to the Selected Columns list.
5 To determine the display order, select a column in the Selected Columns list, then click the up-
arrow and down-arrow to move it to the desired position.
6 To remove a column, select the column in the Selected Columns list, then click the right-arrow
to add it to the Available Fields list.
7 When you are finished, click OK to save your changes.

3.3.2 Changing the Column Widths

You can change column widths in a view by dragging the right or left edge of the column label.
GroupWise View 47

3.4 Searching in the GroupWise View

You can search for a specific entry in a view. The search is performed on the first column. For example, if the Resources view is displayed, you can search for a specific resource based on its object ID. If the Users view (with Last Name Sort selected) is displayed, you can search for a specific user based on the user’s last name.
With the Users view, if you have First Name Sort or Last Name Sort selected, you can search for a complete user name (both first and last name) by using a comma as a delimiter between the names. A space after the comma is optional.
For example, if the Users view displays first names in the first column and last names in the second column, you can type John,Smith to go directly to that user name. If the columns were reversed, you could use Smith,John.
To perform a search:
1 Change to the view you want to search.
2 Select the first entry in the view.
3 Type the text to search for.
As you type text, a text box appears in the lower right corner of the GroupWise View.
novdocx (en) 11 December 2007

3.5 Performing Administrative Tasks from the GroupWise View

You can perform many GroupWise administrative tasks from the GroupWise View as well as from the eDirectory View. For example, you can:
Create new objects.
Modify the properties of an object.
Move, rename, or delete an object from the GroupWise system.
Use the GroupWise utilities, system operations, and diagnostic options on the Tools menu.
In addition, external objects must be created and managed in the GroupWise View because they are, by definition, external to eDirectory and have no eDirectory context. For example, if you install the
48 GroupWise 7 Administration Guide
GroupWise Internet Agent and want to simplify addressing for your users by adding the Internet as a non-GroupWise domain, you must perform the task in the GroupWise View.
novdocx (en) 11 December 2007
GroupWise View 49
novdocx (en) 11 December 2007
50 GroupWise 7 Administration Guide
4

GroupWise System Operations

The GroupWise® system operations in ConsoleOne® allow you to perform various tasks to maintain and optimize your GroupWise system. The following sections provide information about the system operations included on the To ol s menu (To ol s > GroupWise System Operations):
Section 4.1, “Select Domain,” on page 51
Section 4.2, “System Preferences,” on page 53
Section 4.3, “eDirectory User Synchronization,” on page 59
Section 4.4, “Admin-Defined Fields,” on page 60
Section 4.5, “Pending Operations,” on page 60
Section 4.6, “Addressing Rules,” on page 61
Section 4.7, “Time Zones,” on page 61
Section 4.8, “External System Synchronization,” on page 64
Section 4.9, “Software Directory Management,” on page 64
novdocx (en) 11 December 2007
4
Section 4.10, “Restore Area Management,” on page 68
Section 4.11, “Internet Addressing,” on page 69
Section 4.12, “Trusted Applications,” on page 69
Section 4.13, “LDAP Servers,” on page 70
Section 4.14, “Global Signatures,” on page 71
NOTE: If the majority of the items on the GroupWise System Operations menu are dimmed, you are connected to a secondary domain in a GroupWise system where Restrict System Operations to Primary Domain has been selected under System Preferences. For more information, see
Section 4.2, “System Preferences,” on page 53.

4.1 Select Domain

By default, ConsoleOne must be connected to a GroupWise domain in order for you to administer your GroupWise system. Being connected to a GroupWise domain ensures that information is replicated not only in Novell databases.
You can be connected to any domain in the GroupWise system. As shown in the following example, the domain to which you are connected is indicated by a plug on the domain’s icon. In addition, the connected domain is listed at the bottom of the ConsoleOne window.
®
eDirectoryTM but also in the GroupWise domain and post office
GroupWise System Operations
51
Figure 4-1 ConsoleOne Window Showing the Domain You Are Connected To
Some administrative tasks require you to be connected to a specific domain but others do not. In general, operations that create new GroupWise container objects or delete GroupWise container objects require you to be connected to the domain where the object resides. Operations that add or delete leaf object or modify the properties of an existing object do not require you to be connected to the object’s domain.
novdocx (en) 11 December 2007
To change the domain to which you are connected:
1 In ConsoleOne, click Too ls > GroupWise System Operations > Select Domain.
2 Browse to and select the domain directory, then click OK to connect to the domain.
NOTE: You can also connect to a domain by right-clicking the domain in the GroupWise View and clicking Connect.
Being connected to a domain means that ConsoleOne has write access to the domain database (wpdomain.db). How the write access is achieved depends on the platform where you are running ConsoleOne and the platform where the domain is located.
52 GroupWise 7 Administration Guide
Table 4-1 Domain Connection Options
novdocx (en) 11 December 2007
ConsoleOne Platform
Windows ConsoleOne
Linux ConsoleOne
Domain Platform Connection Options
NetWare server Mapped drive
Linux server Samba mount where the path to the domain on the Linux server is
prefixed by the Linux server hostname from the point of view of ConsoleOne
Windows server Local drive
Mapped drive
NetWare server File system mount where the mount point directory matches the
NetWare server hostname and volume name
Linux server Local directory
Mounted file system where the mount point directory matches the domain directory on the mounted file system
Windows server Mounted file system where the mount point directory matches the
Windows server hostname and share
The database location is stored internally in UNC path format (\\server\volume\directory) but is displayed on the Domain object Identification page in ConsoleOne based on the platform of ConsoleOne and the database location.
Table 4-2 Database Locations
ConsoleOne Platform
Windows ConsoleOne
Linux ConsoleOne
Domain Platform Database Location
NetWare server \\NetWare_server\volume\domain_directory
Linux server \\Linux_server\domain_directory
Windows server \\Windows_server\share\domain_directory
NetWare server /mnt/NetWare_server/volume/domain_directory
Linux server /domain_directory
Windows server /mnt/Windows_server/share/domain_directory
When you click Connect, ConsoleOne uses the domain’s UNC path to automatically connect you to the correct domain if possible; otherwise, you must manually browse to and select the domain database in order to connect to the domain.

4.2 System Preferences

You can use the GroupWise system preferences to configure the defaults for various GroupWise system settings.
To change the system preferences:
GroupWise System Operations 53
1 In ConsoleOne, click Too ls > GroupWise System Operations > System Preferences.
The GroupWise System Preferences dialog box contains the following tabs:
Admin Preferences: Controls how rights are assigned and what network ID format is used
when creating new GroupWise users. By default, rights are assigned automatically and the fully distinguished name format is used.
Routing Options: Controls default message routing for your GroupWise system. By
default, no routing domain is assigned.
External Access Rights: Controls the access that users on external GroupWise systems
have to your GroupWise users’ information. By default, Busy Search and status tracking information is not returned to users on external GroupWise systems.
Nickname Settings: Controls what happens when you move a user from one post office to
another. By default, nicknames representing old addresses are not automatically created when users are moved.
Default Password: Assigns a default password for new GroupWise user accounts. By
default, you must manually assign a password for each GroupWise account you create.
novdocx (en) 11 December 2007
Admin Lockout Settings: Controls access to the GroupWise administration functions in
ConsoleOne. By default, there are no restrictions.
Linux Settings (Linux ConsoleOne Only): Establishes the mount directory where
ConsoleOne can find mounted file systems where domains and post offices are located.
2 Change the system preferences as needed.
3 Click OK to save the changes.

4.2.1 Admin Preferences

1 Click the Admin Preferences tab to modify any of the following options:
54 GroupWise 7 Administration Guide
Set Access Rights Automatically: Users require specific eDirectory and file system rights in order to use GroupWise (see Chapter 77, “GroupWise User Rights,” on page 1149). Select this option to automatically grant these rights when creating a GroupWise account for users.
Appropriate eDirectory object rights enable the GroupWise client to log in to the user’s post office without prompting the user for the post office location (IP address, UNC path, or mapped drive.)
Appropriate file system rights enable the GroupWise client to directly access the post office directory rather than use client/server access.
novdocx (en) 11 December 2007
When Creating or Modifying Objects, For Network ID Use: Select Full Distinguished
®
Name (for example, paul.engineering.ny) when users’ mailboxes reside on a NetWare
4.1x or
later server and users have an eDirectory connection to the server where the post office resides.
Select Common Name (for example, paul) under the following circumstances:
The users’ mailboxes reside on a NetWare 3.1 server.
The users’ mailboxes reside on a NetWare 4.1x server but users have a bindery emulation
connection to the server where the post office resides.
Users’ GroupWise IDs are different from their NetWare IDs.
Display Identity Manager (DirXML) Warnings: The Identity Manager Driver for GroupWise provides data integration between GroupWise users and groups in eDirectory. For example, you can have an e-mail account automatically created as soon as an employee is hired. The same driver can also disable an e-mail account when a user is no longer active.
If you are using the Identity Manager Driver for GroupWise, some GroupWise operations that you perform in ConsoleOne require you to take preliminary actions with the driver. For example, if you recover a deleted account, you need to stop the driver before recovering the account and restart it after the operation is complete.
This option enables you to receive a warning message whenever you perform a GroupWise operation in ConsoleOne that is affected by the Identity Manager driver. The warning message includes instructions about the actions you need to take with the driver before continuing with the GroupWise operation. If you are using the Identity Manager Driver for GroupWise, we strongly recommend that you enable this option. If you are not using the driver, you can disable the option to avoid receiving unnecessary messages.
For more information, see “GroupWise DirXML Driver for Novell Identity Manager” in the
GroupWise 7 Interoperability Guide.
2 Click OK to save the changes.

4.2.2 Routing Options

1 Click the Routing Options tab to modify any of the following options:
GroupWise System Operations 55
Default Routing Domain: If a domain’s MTA cannot resolve a message’s address, the message is routed to this default domain’s MTA. The default domain’s MTA can then be configured to handle the undeliverable messages. This might involve routing the message to another GroupWise domain or to an Internet address (by performing a DNS lookup). Browse to and select the GroupWise domain you want to use as the default routing domain.
Force All Messages to this Domain: This option applies only if you select a default routing domain. Select this option to force all messages to be routed through the default routing domain regardless of the links you have configured for your GroupWise system’s domains.
novdocx (en) 11 December 2007
MTAs Send Directly to Other GroupWise Systems: Select this option if you want all MTAs in your GroupWise system to perform DNS lookups and route messages out across the Internet. If you deselect this option, you can designate individual MTAs to perform DNS lookups and route messages to the Internet. For more information, see “Using Dynamic Internet Links” in “Connecting to GroupWise 5.x, 6.x, and 7.x Systems” in the GroupWise 7 Multi-System
Administration Guide.
2 Click OK to save the changes.

4.2.3 External Access Rights

1 Click the External Access Rights tab to modify any of the following options:
Allow External Busy Search: Select this option to enable users in other GroupWise systems to perform Busy Searches on your GroupWise users’ Calendars.
Allow External Status Tracking: Select this option to enable users in other GroupWise systems to receive message status information (such as whether a message has been delivered, opened, and so on) when messages arrive in your GroupWise system.
2 Click OK to save the changes.
56 GroupWise 7 Administration Guide
Loading...
+ 51 hidden pages