Article

m_clark's picture
article
Reads:

5497

Score:
2.5
2.5
2
 
Comments:

3

Protecting GroupWise Archive Paths

Author Info

26 June 2007 - 5:17am
Submitted by: m_clark

(View Disclaimer)

Problem

A Forum reader recently asked:

"I have set up a global Groupwise archive root with each user having his own subfolder beneath this root, mapping to the X: drive. Thus, user1 maps x: to server:archive/user1. Then I hardcode and lock the Archive path to the X: drive in ConsoleOne.

However, what I'm now finding is that users are using their X: drives to store personal files (they have a separate O: drive for that use) and I'm even having users accidently delete their archives.

I would like to lock down or hide their X: drive so they can't access or mess with it, but so that Groupwise would still be able to get to it. I've tried removing the "F" flag in their rights, and while that hides the individual files, they can still see and delete folders.

Is their any way I can protect this path or hide it while still ensuring that Groupwise can use it as well?"

And here's the response from Mark Clark ...

Solution

We have a similar setup, in that we have a global archive on the network. However, we do not map drives to this archive. In GroupWise, we have a UNC path to the archive. The user does not know anything about this archive unless they go to the File Locations section of GroupWise. Futhermore, the archive base folder is marked as hidden, so it doesn't show up in Explorer. Finally, for NetWare rights, we have "E" and "F" shut off, so users cannot delete files or view files. This setup has worked fine for us for about 3-4 years now.

We don't map anything manually. It just happens automatically in GroupWise.

Here's how we did it:

1. In ConsoleOne, right-click the domain object and select GroupWise Utilities > Client Options.

2. In the Environment section, click the File Location tab.

3. In the Archive Directory, UNC path, enter the base directory, such as \\GWVOL\GWDATA\archive.

You can lock this setting so user's can't change it if you want (we did). Then when GW wants to create an archive, or the user creates one by archiving an item, they will have an "of<xxx>arc" folder automatically created under this base folder. Their GroupWise client will then show \\GWVOL\GWDATA\archive\of<xxx> arc as their archive path.

As I mentioned before, in NetWare we were able to shut off the File Scan right because GroupWise knows what files it wants, and the user doesn't have to be able to scan them. We were also able to shut off the Erase right, and it hasn't seemed to cause any problems that we have seen. The only Windows right we set was Hidden on the base folder (\\GWVOL\GWDATA\archive), which carried down to the subfolders.


Disclaimer: As with everything else at Cool Solutions, this content is definitely not supported by Novell (so don't even think of calling Support if you try something and it blows up).

It was contributed by a community member and is published "as is." It seems to have worked for at least one person, and might work for you. But please be sure to test, test, test before you do anything drastic with it.




User Comments

jonas_driessen's picture

BEWARE! Do NOT to this when you have more than one Postoffice

Submitted by jonas_driessen on 18 March 2010 - 5:08am.

I know this article is 3 years old, but because of this, we screwed our archives and here is why, so you don't make the same mistake.

The OF-FID-ARC folder is generated based on the FID, logically.
This FID however is unique only within a single postoffce and not in the entire system. In other words, if you have more than one post office, you can have several users sharing the same FID, as is the case in our environment. Thus, when you create a global archive location and use the same archiving path on more than one postoffice, you can end up with several users using the same OF-FID-ARC folder, effectively mixing their archives and messing up eachothers msg.db files in those archives.

As a result, we now have 174 users with one or sometimes even two FID "doppelgangers" and "shared" archives which now have to be sorted out.

So please make sure you don't get the same problem.

With regards,
Jonasd

swicklund's picture

The multiple postoffice issue is simple to fix.

Submitted by swicklund on 30 June 2011 - 12:28pm.

Don't set the archive path at the domain level. Instead use a different UNC path for each postoffice and set them at the postoffice level.

Done.

ad1az's picture

Another Gotcha!!!

Submitted by ad1az on 1 July 2011 - 2:31pm.

This issue goes beyond Jonasd case. For instance, moving a user whose FID already exists in the target PO will automatically change the moved user's FID, no errors, no warnings, nothing. If the moved user has an existing archive prior to the move, then you are up for some FID editor job (if you don't break your head trying to figure out what happened. Therefore, until and IF Novell addresses this, we need to verify the FID of the moved user before and after the move and take the necessary actions in the remotely possible case that this happens.

Regards,

Agustin

© 2013 Novell