4.3 Planning the GroupWise Internet Agent

Use the GroupWise Internet Agent Installation Worksheet to record your decisions about how to install the Internet Agent (GWIA). The topics in this section present the required information in a convenient planning sequence. The Installation Worksheet organizes the information in the order in which you need it during installation.

For additional assistance in planning your GroupWise installation, visit the GroupWise Best Practices Wiki.

IMPORTANT:If you plan to install the GWIA in a clustered server environment, refer to the GroupWise 2012 Interoperability Guide as you plan your GWIA installation.

4.3.1 Selecting the GWIA Platform

The GWIA is available as a Linux executable and a Windows executable.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Software Platform, mark whether you plan to install the GWIA on Linux or Windows. Review Section 4.2, Internet Agent System Requirements to ensure that the specific server you have selected meets the listed requirements.

4.3.2 Gathering Server Information

The GWIA and the MTA can communicate by transferring message files through message queue directories, as shown in diagrams in GroupWise 2012 Troubleshooting 3: Message Flow and Directory Structure:

As an alternative, you can configure the GWIA so that it uses TCP/IP to communicate with the MTA, instead of message files, as shown in these additional diagrams:

The GroupWise Installation program needs to know the network address of the server where the GWIA will run. For best performance, install the GWIA on the same server with the domain it belongs to. In this configuration, in a GroupWise system with a single GWIA, UNC links between the GWIA and the MTA are most effective. Therefore, the GWIA Installation program displays a default port number of 0 (zero), indicating that TCP/IP will not be used.

In a larger GroupWise system with multiple GWIAs, you can configure the GWIA to communicate with the MTA by way of TCP/IP. This configuration enables you to designate an alternate GWIA for the domain. With this configuration, if the domain’s primary GWIA goes down, the MTA can fail over to another GWIA in your GroupWise system until the primary GWIA is up and running again. This feature is especially useful in larger GroupWise systems where multiple GWIAs handle a large number of Internet messages.

If you want to enable TCP/IP communication between the GWIA and the MTA, use a port number of 7102 or any other available port number. If you do not want to enable TCP/IP communication, use 0 (zero) as the port number.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Server Information, list the IP address and DNS hostname of the server where you plan to install the GWIA. Also, specify the port number for TCP/IP communication if you want to enable it.

For a complete list of default port numbers used by the GroupWise agents, refer to GroupWise Port Numbers in the GroupWise 2012 Administration Guide.

4.3.3 Selecting the GWIA Installation Directory

The GWIA installation directory depends on the platform where you are installing it.

Linux:

The Linux GWIA is automatically installed to /opt/novell/groupwise/agents.

Windows:

The default installation directory is c:\Program Files\Novell\GroupWise Server\GWIA. However, you can install the GWIA to any directory you want.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Installation Path, record the directory where you want to install the GWIA software.

4.3.4 Gathering Domain and Gateway Information

The GWIA requires a GroupWise gateway directory in which to store configuration information and work files. The gateway directory must be located under a GroupWise domain directory. The default directory name is gwia. If you change the name, use the following platform-specific conventions:

Linux:

Use only lowercase characters

Windows:

No limitations.

After you specify the domain directory location and a gateway directory name, the GroupWise Installation program creates the gateway directory under the domain\wpgate directory (for example, provo\wpgate\gwia).

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under GroupWise Domain, specify the domain name and the full path to the domain directory where you want to create the gateway directory, then give the gateway directory a name.

If you are installing the Linux GWIA, record the eDirectory context of the Domain object in LDAP format (for example, cn=provo,ou=groupwise,o=corporate).

4.3.5 Selecting the Gateway Object Name

The GWIA also requires a GroupWise Gateway object in Novell eDirectory. By default, it is named the same as the gateway directory and is referred to as the GWIA object. This object stores the GWIA’s information and enables configuration of the agent through ConsoleOne.

The GWIA object is created below the Domain object. If you have multiple domains, the GroupWise Installation program uses the Domain object associated with the domain directory where you are creating the GWIA gateway directory.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Internet Agent Object Name, specify the name you want to give the GWIA’s eDirectory object. The default name is the same as the gateway directory name you chose under GroupWise Domain.

4.3.6 Specifying the Internet Mail Domain Name for Your GroupWise System

When email users across the Internet address messages to GroupWise users, the address includes the Internet mail domain for your GroupWise system (for example, novell.com). Typically, the Internet mail domain name for your GroupWise system is the name of your company, with its accompanying domain type (.com, .edu, and so on).

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Internet Mail Domain Name, specify the name you want your GroupWise system to be known by across the Internet.

4.3.7 Handling Outbound Mail

If the GWIA is connected to the Internet and is able to perform DNS name resolution, it can send messages from GroupWise users directly across the Internet to Internet users. However, you might prefer to keep the GWIA behind your firewall. To accomplish this, you can configure the GWIA to route all outbound messages to a relay host.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEETT

Under Relay Host, mark how you want to handle outbound mail. If you plan to use a relay host, specify the IP address of the relay host.

4.3.8 Enabling the GWIA Web Console

The GWIA server console enables you to monitor the GWIA from the server where it is running. If you want, you can enable the GWIA Web console. The Web console lets you view the GWIA’s statistical and diagnostic information through a Web browser, which is useful if want to see the GWIA’s activity without physically visiting the agent’s server.

You access the Web console by entering the GWIA’s network address and HTTP port number in a Web browser (for example, http://172.16.5.18:9850). If necessary, you can change the GWIA’s default HTTP port number (9850).

If you want to restrict access to the Web console, you can assign a user name and password. This can be any user name and password you want. By default, the user name and password are passed through a non-secure connection between the Web browser and the GWIA. Therefore, we recommend that you do not use an existing eDirectory user name and password unless you secure this connection by using SSL. For information about securing the GWIA’s connections, see Internet Agent in the GroupWise 2012 Administration Guide.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Enable Web Console, select Yes if you want to enable the GWIA Web console. If you want to restrict access to the Web console, enter a user name and password.

4.3.9 Linux Installation Options: LDAP Information, Automatic Startup, and Clustering

When you install the Linux GWIA, the following Linux-specific options are available in the Installation program:

LDAP Information

The Installation program needs to access eDirectory through LDAP. eDirectory access is required in order to create the GWIA object. To obtain access, the Installation program needs the IP address and port number of an LDAP server, along with an eDirectory user name and password to log in with. The user must have sufficient rights to create GroupWise objects in eDirectory. Because the Installation program uses LDAP to access eDirectory, you must provide the user name in LDAP format. For example:

cn=admin,ou=users,o=corporate

If you want to secure the connection to eDirectory with SSL, you can specify a certificate file. For background information about SSL, see Trusted Root Certificates and LDAP Authentication in Security Administration in the GroupWise 2012 Administration Guide.

IMPORTANT:If you do not want to use SSL, the LDAP server must be configured to accept clear text passwords. This is configured on the server’s LDAP Group object in ConsoleOne by deselecting Require TLS for Simple Binds with Password. The LDAP snap-in to ConsoleOne is required in order to change the setting.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Linux LDAP Authentication, specify the IP address and port number of an LDAP server, a user name in LDAP format, the password for the user name, and if necessary, the full path to your SSL root certificate file.

Automatic Startup

The Linux GWIA is Run Control compliant. You can have the Installation program create symbolic links to the /etc/init.d/grpwise script in the rc3.d and rc5.d directories so that the GWIA starts on server restart into run level 3 or 5, depending on the configuration of your Linux system.

If you want to configure the GWIA for high availability, as described in Enabling the GroupWise High Availability Service for the Linux GroupWise Agents, it must be configured to start automatically on system startup.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Linux Installation Options, mark whether or not you want to configure the Linux server to start the GWIA automatically.

Clustering on Linux

On Linux, you can install the GWIA on Novell Cluster Services. The Linux GroupWise Installation program provides a Configure GroupWise for Clustering option that simplifies the process of installing the Linux GWIA on multiple nodes in the cluster.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Linux Installation Options, mark whether or not you want to configure the Linux GWIA for clustering using Novell Cluster Services. If you do, follow the installation instructions provided in Implementing the Internet Agent in a Linux Cluster in Novell Cluster Services on Linux in the GroupWise 2012 Interoperability Guide, rather than the installation instructions provided in this guide.

4.3.10 Windows Installation Options: SNMP Traps and Service versus Application

When you install the Windows GWIA, you have choices about how the GWIA interacts with the Windows operating system.

SNMP Traps

If you want to use an SNMP manager program to monitor the Windows GWIA, you must install some SNMP components along with the GWIA software.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Windows Installation Path, mark Install and Configure SNMP for GroupWise Agents if you want to use an SNMP manager program.

If this option is dimmed during installation, the SNMP service has not been enabled on the Windows server where you are installing the GWIA. If you want to monitor the GWIA from an SNMP management program, the SNMP service must be enabled so you can select this option.

NOTE:The Linux GWIA relies on operating system components for SNMP functionality and does not require this installation option.

Service versus Application

You can run the Windows GWIA as a Windows service or application.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Windows Installation Options, mark whether you want to run the GWIA as a Windows service.

When you run the GWIA as a Windows service, it must run under a specific user account. The user account you use depends on where the domain directory is located:

  • When the domain directory is located on the same server where you are installing the GWIA, the GWIA can run under the local system account and no password is required.

    When the GWIA runs under the local system account, you can enable it to display the GWIA server consoles on the server desktop on Windows Server 2003. This interaction with the desktop is not available on Windows Server 2008 or later Windows versions.

  • When the domain directory is located on a remote Windows server, you must specify a user with rights to access the domain directory, along with the user’s associated password.

IMPORTANT:For simplicity of GWIA administration, running the GWIA as the Windows Administrator user is highly recommended.

As with all Windows services, you can start the GWIA manually or have it start automatically each time the Windows server restarts.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Windows Service Information, record the Windows user account that the GWIA service will run under, and if necessary, the password for the account. If you are using the local system account, indicate whether you want to allow the GWIA service to interact with the desktop to display the GWIA server console. Select whether you want the GWIA service to start automatically or manually.