Novell GROUPWISE 7 - SECURITY POLICIES, Installation And Administration Manual

Page 1: ...Novell w w w n o v e l l c o m GroupWise Gateway for Lotus Notes 7 S e p t e m b e r 8 2 0 0 6 I N S T A L L A T I O N A N D A D M I N IS T R A T I O N G U ID E...

Page 2: ...export to entities on the current U S export exclusion lists or to any embargoed or terrorist countries as specified in the U S export laws You agree to not use deliverables for prohibited nuclear mi...

Page 3: ...Inc in the United States and other countries NetWare is a registered trademark of Novell Inc in the United States and other countries Novell is a registered trademark of Novell Inc in the United State...

Page 4: ......

Page 5: ...ing the GroupWise Address Book to Notes 25 Defining the GroupWise System As a Notes Foreign Domain 26 Registering the Notes Gateway As a Notes User 28 Setting Up Server and Database Access for the Not...

Page 6: ...IP Address 64 Configuring Internet Connectivity 65 8 Monitoring the Notes Gateway 67 Using the Notes Gateway Server Console 67 Information Box 68 Status Box 68 Statistics Box 68 Log Message Box 69 Me...

Page 7: ...Messages 93 Error Messages 93 B Notes Gateway Directory Structure 101 Domino Server Directory Structure 101 lotus directory 101 domino directory 101 Notes Gateway Server Directory Structure 102 lotus...

Page 8: ...8 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Page 9: ...ateway on page 45 Chapter 8 Monitoring the Notes Gateway on page 67 Chapter 9 Optimizing the Notes Gateway on page 81 Chapter 10 Using Notes Gateway Startup Switches on page 85 Appendix A Notes Gatewa...

Page 10: ...on gwgateways Documentation Conventions In Novell documentation a greater than symbol is used to separate actions within a step and items in a cross reference path A trademark symbol TM etc denotes a...

Page 11: ...and Notes users can be imported into the GroupWise Address Book This enables users to select recipients from either system in their respective familiar Address Books Directory synchronization so that...

Page 12: ...2 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide New independent directory synchronization thread so that heavy directory synchronization loads do not impede message deliver...

Page 13: ...me versions of Notes directory synchronization and exchange do not work on the same server with other versions of Notes However the Notes Gateway can still exchange messages between the two systems If...

Page 14: ...14 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide The GroupWise 7 Gateway for Lotus Notes can connect your Notes system to GroupWise 6 5 and GroupWise 7 x systems...

Page 15: ...mation Deciding Where to Install the Notes Gateway on page 15 Determining Where to Install the Notes Gateway Administrator Snap In to ConsoleOne on page 16 Gathering GroupWise System Information on pa...

Page 16: ...the gateway as described in Installing the Notes Gateway Administrator Snap In to ConsoleOne on page 21 Gathering GroupWise System Information The Notes Gateway needs to access the GroupWise domain wh...

Page 17: ...server you must create an eDirectory account with a username and password that match the Windows user account The eDirectory user must have Read Write Compare Edit Modify and File Scan rights to the...

Page 18: ...you will install and run the Notes Gateway you must be logged in as a member of the Administrator group To add the SNMP service to a Windows 2000 2003 server 1 From the Control Panel double click Add...

Page 19: ...ormation that the Notes Gateway will need in order to access the Notes system Notes Domino Server Specify the fully qualified name of the Notes Domino server hostname notes_domain that will route mess...

Page 20: ...es a Gateway object under the Domain object 5 Continue with Installing the Notes Gateway Software Installing the Notes Gateway Software 1 Download the GroupWise Gateway for Lotus Notes from the Novell...

Page 21: ...u can install the Notes Gateway Administrator snap in to ConsoleOne to additional locations as needed 1 Make sure that no one is running ConsoleOne from the location where you want to install the Note...

Page 22: ...Notes Gateway on page 15 2 Domain Server Type NetWare Windows Mark the platform of the server where the gateway s domain is located See Gathering GroupWise System Information on page 16 3 eDirectory I...

Page 23: ...ll the Notes Gateway If you do record the path where ConsoleOne and the GroupWise Administrator snap ins to ConsoleOne are currently installed along with the version of the GroupWise Administrator sna...

Page 24: ...24 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Page 25: ...onment Variables 3 In the User Variables for Administrator list add the Notes software directory typically c program files lotus notes to the end of the path variable value 4 Click Set then click OK 5...

Page 26: ...tes ini file and exit the text editor You do not need to restart the Notes Domino server in order for this change to be put into effect 6 Continue with Defining the GroupWise System As a Notes Foreign...

Page 27: ...Notes Gateway worksheet item 11 Gateway Mail File Name Specify the name of the mail file worksheet item 11 through which communication between the Notes and GroupWise systems will occur Do not specif...

Page 28: ...e Notes Gateway on page 35 Registering the Notes Gateway As a Notes User Because you will run the Notes Gateway on a server other than the Notes Domino server you must register the gateway as a Notes...

Page 29: ...select the Notes Domino server that the Notes Gateway will communicate with worksheet item 11 then click OK The Notes Gateway user s Mail Server must be the same Notes Domino server that you specified...

Page 30: ...o server the user you just created in Registering the Notes Gateway As a Notes User on page 28 needs appropriate access to the Notes Domino server and Notes databases Providing Access to the Notes Dom...

Page 31: ...ld select the Notes domain where you want to open the public Directory 2c In the Database field select the Directory for that domain 2d Click Open 3 On the Servers menu select the Notes Domino server...

Page 32: ...The Notes Gateway creates the wpnames nsf file and the gateway mail file one time only This means that you can change the access rights of the Notes Gateway user after these databases have been create...

Page 33: ...s Description names nsf Editor or Manager The Notes public Directory For instructions to set rights see Providing Access Rights to the Public Directory on page 33 wpnames nsf Manager or Editor The Gro...

Page 34: ...a Notes User on page 28 specify the password for the user then click OK This updates the local notes ini file on the Notes Gateway server from that version of the notes ini file on the Notes Domain s...

Page 35: ...One Providing Gateway Information on page 35 Setting Required Parameters on page 36 Providing Gateway Information 1 In ConsoleOne browse to and select the domain where you installed the Notes Gateway...

Page 36: ...on page 26 5 Click Apply to save the gateway information 6 Continue with Setting Required Parameters Setting Required Parameters 1 Click Required Parameters to display the Required Parameters page 2...

Page 37: ...at represent the Notes system in your GroupWise system Notes ID Password Specify the password for the Notes user registered for the gateway worksheet item 11 as set up in Registering the Notes Gateway...

Page 38: ...38 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Page 39: ...server If you installed the Notes Gateway on a server other than the Notes Domino server the recommended configuration you should have already provided access when you configured the Notes side of th...

Page 40: ...ist of services the name of the Notes Gateway service starts with the name of the domain where the gateway is installed followed by the name of the gateway itself followed by Service For example if th...

Page 41: ...licit Addressing on page 50 Understanding What GroupWise Send Options Are Available through the Gateway GroupWise users can use some but not all GroupWise send options through the Notes Gateway The fo...

Page 42: ...Gateway If It Is Running As a Service on page 42 Stopping the Notes Gateway If It Is Running As an Application 1 At the Notes Gateway server console click File Exit or Press F7 2 Click Yes to stop th...

Page 43: ...tes Gateway click Start Settings Control Panel 2 Double click Add Remove Programs select domain gateway Notes Gateway then click OK 3 If a message informs you that some files could not be deleted dele...

Page 44: ...44 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Page 45: ...Directory Exchange Causes the gateway to perform a nightly exchange of the Notes public Address Book and GroupWise Address Book Directory Synchronization Causes the gateway to update each Address Boo...

Page 46: ...oupWise Foreign Domain and Notes ID Password fields are filled in as described in Setting Required Parameters on page 36 When you provided this information during the initial configuration before inst...

Page 47: ...guration page You can turn directory synchronization and exchange on and off for the current gateway session on the Optional Gateway Settings page Configuring Addressing Instead of Using Directory Syn...

Page 48: ...then click New External User 3 Type a username then click OK 4 Right click the new External User object then click Properties 5 Fill in fields as needed to provide information about the user that you...

Page 49: ...the gateway you can define one now See Providing Gateway Information on page 35 Gateway Alias Specify the user s address as defined in Notes For example if SJones Provo is the user s address in Notes...

Page 50: ...e a message to the Notes user For syntax and examples see Explicit Addressing from GroupWise to Notes on page 50 5 Click OK to save the new contact in the personal address book Using Explicit Addressi...

Page 51: ...roupWise If the user ID is unique in the GroupWise system then shorter syntax can be used Syntax userID foreign_domain Example LTanaka GroupWise Changing the Link Protocol between the Notes Gateway an...

Page 52: ...n send messages and to which Notes users Specify which GroupWise users can receive messages and from which Notes users Specify the maximum size for messages sent through the gateway Specify whether or...

Page 53: ...keywords that you can use in the file However all lines are initially commented out and access control is off by default Print the initial access cfg file in the domain wpgate notes directory Reviewi...

Page 54: ...control settings would apply to any users who did not fall under a more specific section header groupwise_domain In Out This section lists the access control settings for users in a particular GroupWi...

Page 55: ...SysAdminsOut MaxSize 5000000 AllowRuleGenerated Yes This example allows users in the SysAdminsIn and SysAdminsOut access groups to receive messages up to 5 MB in size and to send rule generated messag...

Page 56: ...hat the message is undeliverable Syntax Block notes_domain Block username notes_domain Block CN full_name O organization notes_domain Examples Corporate Temps In Block XYZCorp Corporate Temps Out Bloc...

Page 57: ...Corporate Temps Out MaxSize 5000000 This example prevents GroupWise users in the Temps post office from receiving messages larger than 1 MB and from sending messages larger than 5 MB AllowRuleGenerate...

Page 58: ...e access control group that you want this user to be associated with If you have not created an access control group you can put access control information unique to this user in the Gateway Access fi...

Page 59: ...priority message type destination and size of each item passing through the gateway Enabling Accounting on page 59 Defining an Accountant on page 60 Understanding the Accounting File on page 61 Enabli...

Page 60: ...istrators list select the user or distribution list that you want to function as the Accountant In the Administrators list you can also select multiple users and distribution lists as needed 5 In the...

Page 61: ...sent or received Mail GroupWise Message Priority 0 High 2 Normal 4 Low 2 GroupWise User Domain The GroupWise domain where the sender s or receiver s post office is located Corporate GroupWise User Pos...

Page 62: ...ct the user you want to define as an administrator You can also select multiple users and or distribution lists in the Select GroupWise Object dialog box 4 Click OK to return to the Gateway Administra...

Page 63: ...collected in the status correlation database gwcorr db located by default in the domain wpgate notes directory 1 If you want to change the location of the status correlation database use the corr star...

Page 64: ...and then start the Notes Gateway so that it reads the updated startup file Notes Gateway Web Console You can adjust these settings for the current gateway session on the Optional Gateway Settings pag...

Page 65: ...nternet connector for sending messages from Notes users to Internet users As an alternative you can configure the gateway to use an Internet Agent in your GroupWise system for Internet connectivity Us...

Page 66: ...66 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Page 67: ...dministrator about Bad Messages on page 80 Understanding Notes Gateway Error Messages on page 80 Using the Notes Gateway Server Console The Notes Gateway server console displays the gateway s activity...

Page 68: ...eceived if Other Link is Open If it is Closed the network connection has been terminated Check the status of the Notes system Program Where the gateway is in its current processing cycle sending recei...

Page 69: ...Message box displays the Notes Gateway s activity The amount and detail in this display depends on the logging level you select For more information see Using Notes Gateway Log Files on page 76 For a...

Page 70: ...e Web Console on page 72 Setting Up the Notes Gateway Web Console During installation the Installation program offered you the opportunity to set up the Notes Gateway Web console The information that...

Page 71: ...POA for example 7175 4 Make a note of the HTTP port number You will need this information to access the Notes Gateway Web console 5 Click Apply to save your changes on the Network Address page If you...

Page 72: ...tes Gateway startup file notes cfg to enable and secure the Notes Gateway Web console In addition you can use the httprefresh switch to control how often the Notes Gateway refreshes the information pr...

Page 73: ...ion On the Notes Gateway Web console menu click Configuration to display the configuration information stored on various property pages on the Notes Gateway object in ConsoleOne To change the log sett...

Page 74: ...ession For information about Notes Gateway log files see Using Notes Gateway Log Files on page 76 Checking and Changing Gateway Time Settings On the Notes Gateway Web console menu click Time Settings...

Page 75: ...page 59 Enabling Message Status for Sent Items on page 63 Using Notes Gateway Startup Switches on page 85 Changing Gateway Access Control On the Notes Gateway Web console menu click Access Control to...

Page 76: ...s to display the Log Settings page 3 Fill in the following fields Log File Path Select the path where the log file should be created By default log files are stored in the domain wpgate notes 000 prc...

Page 77: ...the Log Settings link on the Log Files page You can also view and modify log settings at the Notes Gateway server console on the server where the gateway is running as listed in Menu Summary on page 6...

Page 78: ...the ngwln mib file as required by your SNMP management program For example to compile the ngwln mib file for ZENworks for Servers 2a In ConsoleOne right click the Site Server object then click Propert...

Page 79: ...ng then click OK ConsoleOne then notifies the Notes Gateway to restart so the new settings can be put into effect The Notes Gateway should now be visible to your SNMP monitoring program Notifying the...

Page 80: ...gateway send the bad message files to the postmaster using badmsg send If you do not yet have a postmaster see Establishing Gateway Administrators on page 62 for setup instructions If you do not want...

Page 81: ...82 Automating Network Reattachment on page 83 Reducing Network Traffic on page 84 Adjusting the Gateway s Send Receive Cycle The Notes Gateway s send receive cycle determines how much time the gatewa...

Page 82: ...CPU cycles and to keep network traffic manageable Snap Shot Interval The Notes Gateway server console shows the gateway statistics for the last x minutes an interval you specify The default interval i...

Page 83: ...nt the gateway to attempt to recover the network link The default is 10 times Retry Interval Specify the amount of time you want the gateway to wait between retry attempts The default value is 60 seco...

Page 84: ...ueue_directory is the path to the directory where you want the gateway queues created For example you could use a c lngate directory on the local drive Make sure the directory is not used by any other...

Page 85: ...Example ngate badmsg send You can also edit the Notes Gateway startup file notes cfg to include the switches you want to use when starting the gateway The notes cfg file is located in the domain wpga...

Page 86: ...tablishing Gateway Administrators on page 62 Both Instructs the gateway to both move and send the bad message files Neither Instructs the gateway to delete the files Syntax badmsg option Example badms...

Page 87: ...mbers of that group Group expansion is on by default Syntax group help Displays information about the Notes Gateway switches Syntax help home Specifies the path to the gateway root directory domain wp...

Page 88: ...s See Using the Notes Gateway Web Console on page 70 Syntax httprefresh seconds Example httprefresh 30 See also httpuser httppassword and httpport httpuser Specifies the username for the Notes Gateway...

Page 89: ...m lnsmb Specifies the name of the Notes mailbox used to transfer messages between systems The default is mail box The variable n can range from 1 to 10 Syntax lnsmb mailn box Example lnsmb mail2 box l...

Page 90: ...is 1024 KB or 1 MB The range is from 256 KB to unlimited size Use 0 zero for unlimited disk space See Using Notes Gateway Log Files on page 75 Syntax logmax kilobytes Example logmax 2048 See also log...

Page 91: ...lid values range from 1 to 4 See Adjusting the Number of Sender and Receiver Threads on page 82 Syntax st threads Example st 3 See also rt work Indicates the path where temporary files are stored whil...

Page 92: ...92 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Page 93: ...racter set translation file Error processing attachment attachment_name You are not authorized to perform that operation Error processing Notes Address Book information You are not authorized to use t...

Page 94: ...Notes Gateway user should be provided with access rights to create databases on the Notes Domino server that the gateway communicates with See Providing Access to Notes Databases on page 32 After givi...

Page 95: ...nsf file on Notes Domino server connected to GroupWise is damaged and the gateway is not able to find the People view in the Notes version of the GroupWise Address Book wpnames nsf Action Replace the...

Page 96: ...Enabling Directory Synchronization and Exchange on page 45 Invalid password Source GroupWise Notes Gateway startup Possible Cause The Notes ID password entered on the Required Parameters page of the N...

Page 97: ...25 No active recipients Source GroupWise Notes Gateway outbound messaging Possible Cause The message did not include the address of any active recipients Action Select users from the GroupWise Addres...

Page 98: ...onal Gateway Settings page in ConsoleOne Action See Automating Network Reattachment on page 83 for more information about network reattachment Unable to locate GWWORK directory Source GroupWise Notes...

Page 99: ...versions of Notes the gateway must run on a server other than the Notes Domino server See Chapter 2 Notes Gateway System Requirements on page 13 Action Make sure that the Notes ID Password field in Co...

Page 100: ...100 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Page 101: ...ory The domino directory contains subdirectories and files pertaining to the Domino server notes ini file The notes ini file is the Domino server initialization file used by Lotus Notes You must manua...

Page 102: ...herefore the Notes Gateway accesses some Notes client files on the Notes Gateway server lotus directory The lotus directory on the Notes Gateway server is the root directory for the Lotus Notes client...

Page 103: ...r the Notes Gateway uninstallation program wpcsin 0 7 MTA input queue directory Priority queue subdirectories wpcsout notxxxx 0 7 problem MTA output queue directory Notes Gateway input queue Priority...

Page 104: ...ormation is recorded See Using Notes Gateway Log Files on page 75 acct file The acct file contains information about the messages the Notes Gateway sends each day It is e mailed to the accounts each d...

Page 105: ...d archives uninstnotes directory The uninstnotes directory contains the Notes Gateway uninstallation program and supporting files wpcsin directory The wpcsin directory is the MTA input queue where the...

Page 106: ...ches from GroupWise users on Notes users 1 Not used by the Notes Gateway 2 High priority messages from GroupWise users to Notes users 3 Status messages notifying GroupWise users about the status of hi...

Page 107: ...enables message status information to be exchanged between GroupWise users and Notes users See Enabling Message Status for Sent Items on page 63 The gwcorr dc file is the data dictionary file from wh...

Page 108: ...ogram install exe setup inf file The setup inf file contains information used by the Installation program gwstrs fil file The gwtrs fil file is the strings resource file used by the Notes Gateway serv...