4.3 Planning the GroupWise Internet Agent

Use Section 4.6, GroupWise Internet Agent Installation Worksheet to record your decisions about how to install the Internet Agent as you review the following considerations:

To help with the above tasks, you can also review the GroupWise Wiki, which includes a Best Practices section.

IMPORTANT:If you plan to install the Internet Agent in a clustered server environment, refer to the GroupWise 7 Interoperability Guide as you plan your Internet Agent installation.

4.3.1 Selecting the Internet Agent Platform

The Internet Agent is available as a NetWare NLM™ program, a Linux executable, and a Windows executable.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 1: Software Platform, mark whether you plan to install the Internet Agent on NetWare, Linux, or Windows. Review Section 4.2, Internet Agent System Requirements to ensure that the specific server you have selected meets the listed requirements.

4.3.2 Gathering Server Information

Prior to GroupWise 7, the Internet Agent and the MTA communicated by transferring message files through message queue directories, as shown in diagrams in GroupWise 7 Troubleshooting 3: Message Flow and Directory Structure:

Starting in GroupWise 7, you can configure the Internet Agent so that it uses TCP/IP to communicate with the MTA, instead of message files, as shown in these additional diagrams:

The Internet Agent Installation program needs to know the network address of the server where the Internet Agent will run. For best performance, install the Internet Agent on the same server with the domain it belongs to. In this configuration, in a GroupWise system with a single Internet Agent, UNC links between the Internet Agent and the MTA are sufficient. Therefore, the Internet Agent Installation program displays a default port number of 0 (zero), indicating that TCP/IP will not be used.

In a larger GroupWise system with multiple Internet Agents, you can configure the Internet Agent to communicate with the MTA by way of TCP/IP. This configuration enables you to designate an alternate Internet Agent for the domain. With this configuration, if the domain’s primary Internet Agent goes down, the MTA can fail over to another Internet Agent in your GroupWise system until the primary Internet Agent is up and running again. This feature is especially useful in larger GroupWise systems where multiple Internet Agents handle a large number of Internet messages.

If you want to enable TCP/IP communication between the Internet Agent and the MTA, use a port number of 7102 or any other available port number. If you do not want to enable TCP/IP communication, use 0 (zero) as the port number.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 3: Server Information, list the IP address and DNS hostname of the server where you plan to install the Internet Agent. Also, specify the port number for TCP/IP communication if you want to enable it.

4.3.3 Selecting the Internet Agent Installation Directory

You should install the Internet Agent on the same server where the domain directory is located. The Internet Agent installation directory depends on the platform where you are installing it.

Consider these platform-specific guidelines:

NetWare:

When installing the NetWare Internet Agent, we recommend you use the sys:\system directory on the NetWare server. This simplifies access to the Internet Agent configuration file and ensures that the NLM program is in the server’s search path. If you use a different directory, you must add that directory to the server’s search path.

Linux:

The Linux Internet Agent is automatically installed to /opt/novell/groupwise/agents.

Windows:

The default installation directory is c:\grpwise\gwia. However, you can install the Internet Agent to any directory you want.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 2: Installation Options, record the directory where you want to install the Internet Agent software.

4.3.4 Gathering Domain and Gateway Information

The Internet Agent requires a GroupWise gateway directory in which to store configuration information and work files. The gateway directory must be located under a GroupWise domain directory. The default directory name is gwia. If you change the name, use the following platform-specific conventions:

NetWare:

Use a maximum of 8 characters

Linux:

Use only lowercase characters

Windows:

No limitations.

After you specify the domain directory location and a gateway directory name, the Internet Agent Installation program creates the gateway directory under the domain\wpgate directory (for example, provo\wpgate\gwia).

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 6: GroupWise Domain, specify the domain name and the full path to the domain directory where you want to create the gateway directory, then give the gateway directory a name.

If you are installing the Linux Internet Agent, record the eDirectory™ context of the Domain object (for example, cn=provo3,ou=groupwise,o=corporate).

4.3.5 Selecting the Gateway Object Name

The Internet Agent also requires a GroupWise Gateway object in Novell eDirectory. By default, it is named the same as the gateway directory and is referred to as the Internet Agent object. This object stores the Internet Agent’s information and enables configuration of the agent through ConsoleOne®.

The Internet Agent’s object is created below the Domain object. If you have multiple domains, the Installation Advisor uses the Domain object associated with the domain directory where you are creating the Internet Agent’s gateway directory.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 6: GroupWise Internet Agent Name, specify the name you want to give the Internet Agent’s object. The default name is the same as the gateway directory name you chose under Item 5.

4.3.6 Specifying the Internet Mail Domain Name for Your GroupWise System

When e-mail users across the Internet address messages to GroupWise users, the address includes the Internet mail domain for your GroupWise system (for example, novell.com). Typically, the Internet mail domain name for your GroupWise system is the name of your company, with its accompanying domain type (.com, .edu, and so on).

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 8: Internet Mail Domain Name, specify the name you want your GroupWise system to be known by across the Internet.

4.3.7 Handling Outbound Mail

If the Internet Agent is connected to the Internet and is able to perform DNS name resolution, it can send messages from GroupWise users directly across the Internet to Internet users. However, you might prefer to keep the Internet Agent behind your firewall. To accomplish this, you can configure the Internet Agent to route all outbound messages to a relay host.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 5: Relay Host, mark how you want to handle outbound mail. If you plan to use a relay host, specify the IP address of the relay host.

4.3.8 Enabling the Internet Agent Web Console

The Internet Agent server console enables you to monitor the Internet Agent from the server where it is running. If you want, you can enable the Internet Agent Web console. The Web console lets you view the Internet Agent’s statistical and diagnostic information through a Web browser, which is useful if want to see the Internet Agent’s activity without physically visiting the agent’s server.

You access the Web console by entering the Internet Agent’s network address and HTTP port number in a Web browser (for example, http://172.16.5.18:7211). If necessary, you can change the Internet Agent’s default HTTP port number (9850).

If you want to restrict access to the Web console, you can assign a username and password. This can be any username and password you want. By default, the username and password are passed through an unsecure connection between the Web browser and the Internet Agent. Therefore, we recommend that you do not use an existing eDirectory username and password unless you secure this connection using SSL. For information about securing the Internet Agent’s connections, see Internet Agent in the GroupWise 7 Administration Guide.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 4: Web Console Information, select Yes if you want to enable the Internet Agent Web console. If you want to restrict access to the Web console, enter a username and password.

4.3.9 NetWare Installation Options: Automatic Startup and Clustering

When you install the NetWare Internet Agent, the following options specific to NetWare are available in the Internet Agent Installation program:

Automatic Startup

You can have the Internet Agent Installation program add a reference to the gwia.ncf file in the NetWare server’s autoexec.ncf file so that the Internet Agent is automatically loaded whenever the server is started.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 2: Installation Options, mark whether or not you want to configure the NetWare server to start the Internet Agent automatically.

Novell Cluster Services

Novell Cluster Services™ is a server clustering system that ensures high availability and manageability of critical network resources including volumes (where GroupWise domains reside) and applications (such as the Internet Agent). Novell Cluster Services supports failover, failback, and migration of individually managed cluster resources.

The NetWare Internet Agent can be configured to take advantage of the fault‑tolerant environment provided by Novell Cluster Services if the following requirements are met:

  • The domain where the Internet Agent is installed has already been created on a shared NSS volume in the cluster.

  • The NetWare Internet Agent is being installed to a server that is part of the same cluster.

When the Internet Agent is configured for clustering, its startup file is configured with shared volume names rather than specific server names.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 2: Installation Options, mark whether or not you want to configure the NetWare Internet Agent for clustering. If you do, follow the installation instructions in Implementing the Internet Agent in a NetWare Cluster or Implementing the Internet Agent in a Linux Cluster in the GroupWise 7 Interoperability Guide, rather than the installation instructions in this guide.

4.3.10 Linux Installation Options: LDAP Information and Clustering

When you install the Linux Internet Agent, the following Linux-specific options are available in the Internet Agent Installation program:

LDAP Information

The Linux Internet Agent Installation program needs to access eDirectory through LDAP. eDirectory access is required in order to create the Internet Agent object. To obtain access, the Installation program needs the IP address and port number of an LDAP server, along with an eDirectory username and password to log in with. The user must have sufficient rights to create GroupWise objects in eDirectory. Because the Linux Installation program uses LDAP to access eDirectory, you must provide the username in LDAP format. For example:

cn=admin,ou=users,o=corporate

If you want to secure the connection to eDirectory with SSL, you can specify a certificate file. For background information about SSL, see Encryption and Certificates in Security Administration in the GroupWise 7 Administration Guide.

IMPORTANT:If you do not want to use SSL, the LDAP server must be configured to accept clear text passwords. This is configured on the server’s LDAP Group object in ConsoleOne by deselecting Require TLS for Simple Binds with Password. The LDAP snap-in to ConsoleOne is required in order to change the setting.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 9: LDAP Authentication, specify the IP address and port number of an LDAP server, a username in LDAP format, the password for the username, and if necessary, the full path to your SSL certificate file.

Clustering Alternatives on Linux

On Linux, you can install the Internet Agent in three different clustering environments, as described in the GroupWise 7 Interoperability Guide:

If you are using Novell Cluster Services, the Linux GroupWise Installation program provides a Configure GroupWise for Clustering option that simplifies the process of installing the Linux Internet Agent on multiple nodes in the cluster.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 2: Installation Options, mark whether or not you want to configure the Linux Internet Agent for clustering using Novell Cluster Services. If you do, follow the installation instructions provided in Implementing the Internet Agent in a Linux Cluster in Novell Cluster Services on Linux in the GroupWise 7 Interoperability Guide, rather than the installation instructions provided in this guide.

If you are installing the Linux Internet Agent on PolyServe Matrix Server, the Linux GroupWise Installation program does not assist you with the setup. See the GroupWise 7 Interoperability Guide for installation instructions.

4.3.11 Windows Installation Options: Service vs. Application and SNMP Traps

When you install the Windows Internet Agent, you have choices about how the Internet Agent interacts with the Windows operating system.

Service vs. Application

When you run the Windows Internet Agent as a service, it can start automatically and run without a user interface, just like any Windows service.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 2: Installation Options, mark Install as Windows Service if you want to run the Internet Agent as a service.

When you run the Windows Internet Agent as a service, it must run under a specific Windows user account.

When the Internet Agent domain is located on the same server where you are installing the Internet Agent, the Internet Agent can run under the local system account. Installing the Internet Agent on the same server with its domain is recommended.

If the Internet Agent domain is located on a remote server, you must specify a user with rights to access the domain directory.

Windows

If the Windows Internet Agent needs to log in to another Windows server, provide a Windows username and password.

NetWare:

If the Windows Internet Agent needs to log in to a NetWare server, provide an existing eDirectory username and password, or create a new account for the agents, as described in Creating a NetWare Account for Agent Access (Optional).

Linux:

Configuring the Windows Internet Agent to log in to a Linux server is not recommended.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 10: Windows Service Information, record the account the Internet Agent will run under, and if necessary, the password for the account.

As with all Windows services, the Windows Internet Agent can be started automatically or manually as a service each time the Windows server restarts.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 10: Windows Service Information, mark how you want the Windows Internet Agent to start each time the server is restarted.

SNMP Traps

If you want to use an SNMP manager program, such as the Management and Monitoring Services component of Novell ZENworks Server Management, to monitor the Windows Internet Agent, you must install some SNMP components along with the Internet Agent software.

GROUPWISE INTERNET AGENT INSTALLATION WORKSHEET

Under Item 2: Installation Options, mark Install and Configure SNMP for GroupWise Agents if you want to use an SNMP manager program.

If this option is dimmed during installation, the SNMP service has not been enabled on the Windows server where you are installing the agents. If you want to monitor the agents from an SNMP management program, the SNMP service must be enabled so you can select this option.

NOTE:The NetWare and Linux Internet Agents rely on operating system components for SNMP functionality and do not require this installation option.