his section describes the concepts behind the administration server and its Server Manager forms you use to configure your Netscape® servers. This chapter also gives you an overview of some new features and provides instructions to start and stop the server. For online step-by-step directions on using specific forms in the Server Manager, click the Help button that appears at the bottom of each form.
Because every Netscape server is configured using an administration server and the Server Manager forms, you can easily configure your servers remotely, using any computer in your network.
Remotely configuring your Netscape servers
http://myserver.novell.com:12345
Before you can get to any forms, the administration server prompts you to authenticate yourself. This means you need to type a username and password. You set up the "superuser" username and password when you install the first Netscape server and administration server on your computer. The first page you see when you access the administration server is called the Server Administration page (Figure 1.2). The Server Administration page has three or four sections, depending on the servers you have installed. Figure 1.2 shows all three sections:
The first page you see when you access the administration server is called the Server Administration page (Figure 1.2). The Server Administration page has three sections, depending on the servers you have installed. Figure 1.2 shows all three sections, which are described here.
The Server Administration
Using the Server Manager forms
As stated earlier, the collection of forms used to configure a single server is called the Server Manager. The administration server contains a Server Manager for each Netscape server installed on the computer, including one for the administration server itself.
The Server Administration page, shown in Figure 1.2, contains links to each Server Manager.
The administration server's Server Manager form
To return to the Server Administration page (Figure 1.2), click the Server Administration button in the top frame of the Server Manager.
Before installing or configuring your servers
This section describes the issues you need to resolve before you install your Netscape SuiteSpot servers. You should also read the online Administrator's Guide for each server before installation, because it might include other special considerations specific to that server type.
Setting up the SuiteSpot user and group
If you plan to install multiple servers on a single computer (for example, FastTrack Server and Messaging Server--you cannot currently install multiple versions of the same server on a single NetWare® server; you can set up software virtual servers to simulate multiple servers), create a system group that includes the system user account you plan to use for each server installed on the computer. (During installation, you specify the user account you want the server to use.) This gives any servers installed on the computer read and execute permissions to the files or directories owned by other servers (for example, the local directory of users and groups used in access control).
For example, if you're installing Netscape Messaging Server and Netscape FastTrack Server on the same computer, you might create a group called suitespot with system users mail and web.
When you create these accounts, you should create them so that no other system users or groups have write access to the files owned by the servers. In particular, you'll want to write protect the administration server's password file located at <server_root>/admin-serv/config/admpw. You should also consider protecting any encryption key-pair files and certificates (in the directory <server_root>/alias), and the local database (in the directory <server_root>/userdb).
Logging in to the administration server
When you first connect to the administration server, you must provide a username and a password.
There are two general levels of users:
<server_root>/admin-serv/config/admpw. This is the username (and password) you specified during installation. This user has full access to all features in the administration server and sees all forms in the administration server except the Users & Groups forms, which depends on the superuser having a valid account in an LDAP server. If you use the local database, superuser will always have access to the Users & Groups forms.
Stopping the administration server
If you enable end-user access to the administration server, you should keep the administration server running as much as possible. If you don't enable end-user access, consider shutting down the administration server when you aren't using it. This minimizes chances of a break in, which could happen if someone learns any of your superuser or administrator passwords.
To shut down the administration server from the Server Administration page, perform the following: