GroupWise 2012 Administration Guide

  GroupWise 2012 Administration Guide
    System
      GroupWise System Administration
      ConsoleOne Administration Tool
        ConsoleOne on Linux
        ConsoleOne on Windows
        ConsoleOne in a Multiple-Platform Environment
        Remote Access to ConsoleOne on a Linux Server
      GroupWise View
        eDirectory View versus GroupWise View
        GroupWise Object Icons
        Customizing the GroupWise View
        Searching in the GroupWise View
        Performing Administrative Tasks from the GroupWise View
      GroupWise System Operations
        Select Domain
        System Preferences
        eDirectory User Synchronization
        Admin-Defined Fields
        Pending Operations
        Addressing Rules
        Time Zones
        External System Synchronization
        Software Directory Management
        Restore Area Management
        Internet Addressing
        Trusted Applications
        LDAP Servers
        Global Signatures
      GroupWise Utilities
        Mailbox/Library Maintenance
        System Maintenance
        Backup/Restore Mailbox
        Recover Deleted Account
        Client Options
        Expired Records
        Email Address Lookup
        Synchronize
        User Move Status
        Link Configuration
        Document Properties Maintenance
        New System
        Check eDirectory Schema
        Gateway Alias Migration
        GW / eDirectory Association
        Standalone GroupWise Utilities
      GroupWise Address Book
        Customizing Address Book Fields
        Controlling Object Visibility
        Updating Address Book Information
        Controlling Users’ Frequent Contacts Address Books
        Controlling Address Book Synchronization for Caching and Remote Client Users
        Publishing Email Addresses to eDirectory.
        Enabling Wildcard Addressing
        Adding External Users to the GroupWise Address Book
      Multilingual GroupWise Systems
        GroupWise User Languages
        GroupWise Administration and Agent Languages
        International Character Considerations
        MIME Encoding
        Multi-Language Workstations
    Domains
      Creating a New Domain
        Understanding the Purpose of Domains
        Planning a New Domain
        Setting Up the New Domain
        What’s Next
        New Domain Summary Sheet
      Managing Domains
        Connecting to a Domain
        Editing Domain Properties
        Converting a Secondary Domain to a Primary Domain
        Replacing the Primary Domain Database with a Secondary Domain Database
        Moving a Domain
        Deleting a Domain
        Changing the MTA Configuration to Meet Domain Needs
      Managing the Links between Domains and Post Offices
        Understanding Link Configuration
        Using the Link Configuration Tool
        Interpreting Link Symbols
        Modifying Links
    Post Offices
      Creating a New Post Office
        Understanding the Purpose of Post Offices
        Planning a New Post Office
        Setting Up the New Post Office
        What’s Next
        New Post Office Summary Sheet
      Managing Post Offices
        Connecting to the Domain That Owns a Post Office
        Editing Post Office Properties
        Managing Disk Space Usage in the Post Office
        Auditing Mailbox License Usage in the Post Office
        Viewing Current Client Usage in the Post Office
        Tracking and Restricting Client Access to the Post Office
        Securing the Post Office with LDAP Authentication
        Refreshing the Client View Files in the Post Office
        Disabling a Post Office
        Moving a Post Office
        Deleting a Post Office
        Changing POA Configuration to Meet Post Office Needs
    Users
      Creating GroupWise Accounts
        Establishing a Default Password for All New GroupWise Accounts
        Creating GroupWise Accounts for eDirectory Users
        Creating GroupWise Accounts for Non-eDirectory Users
        Educating Your New Users
      Managing GroupWise Accounts and Users
        Adding a User to a Distribution List
        Allowing Users to Modify Distribution Lists
        Adding a Global Signature to Users’ Messages
        Moving GroupWise Accounts
        Renaming Users and Their GroupWise Accounts
        Managing Mailbox Passwords
        Managing User Email Addresses
        Checking GroupWise Account Usage
        Disabling and Enabling GroupWise Accounts
        Unlocking GroupWise Accounts
        Removing GroupWise Accounts
    Resources
      Creating Resources
        Understanding Resources
        Planning Resources
        Creating a New Resource
      Managing Resources
        Creating Rules for a Resource
        Changing a Resource’s Owner
        Adding a Resource to a Distribution List
        Moving a Resource
        Renaming a Resource
        Deleting a Resource
        Managing Resource Email Addresses
    Distribution Lists, Groups, and Organizational Roles
      Understanding Distribution Lists, Groups, and Organizational Roles
        Public vs. Personal Address Lists
        Distribution Lists
        eDirectory Groups and Organizational Roles
      Creating and Managing Distribution Lists
        Creating a New Distribution List
        Adding Members to a Distribution List
        Removing Members from a Distribution List
        Moving a Distribution List
        Renaming a Distribution List
        Enabling Users to Modify a Distribution List
        Controlling Access to a Distribution List
        Deleting a Distribution List
        Managing Email Addresses
        Adding External Users to a Distribution List
      Using eDirectory Groups as GroupWise Distribution Lists
        Setting Up an eDirectory Group for Use in GroupWise
        Seeing Which Members of an eDirectory Group Have GroupWise Accounts
        Changing a Group’s Visibility in the Address Book
        Moving a Group
        Renaming a Group
        Removing a Group from GroupWise
      Using eDirectory Organizational Roles as GroupWise Distribution Lists
        Setting Up an Organizational Role for Use in GroupWise
        Seeing Which Members of an Organizational Role Have GroupWise Accounts
        Changing an Organizational Role’s Visibility in the Address Book
        Moving an Organizational Role
        Renaming an Organizational Role
        Removing an Organizational Role from GroupWise
    Libraries and Documents
      Document Management Services Overview
        Libraries
        Document Storage Areas
        Documents
        Integrations
      Creating and Managing Libraries
        Planning a Basic Library
        Setting Up a Basic Library
        Planning Full-Service Libraries
        Setting Up a Full-Service Library
        Viewing a New Library in Your GroupWise System
        Managing Libraries
        Library Worksheets
      Creating and Managing Documents
        Adding Documents to Libraries
        Organizing Documents in Libraries
        Indexing Documents in Libraries
        Managing Documents in Libraries
      Integrations
        Setting Up Integrations during Windows Client Installation
        Setting Up Integrations Using the gwappint.inf File
        Controlling Integrations in the GroupWise Windows Client
    Databases
      Understanding GroupWise Databases
        Domain Databases
        Post Office Databases
        User Databases
        Message Databases
        Library Databases
        Guardian Databases
      Maintaining Domain and Post Office Databases
        Validating Domain or Post Office Databases
        Recovering Domain or Post Office Databases
        Rebuilding Domain or Post Office Databases
        Rebuilding Database Indexes
      Maintaining User/Resource and Message Databases
        Analyzing and Fixing User and Message Databases
        Performing a Structural Rebuild of a User Database
        Re-creating a User Database
      Maintaining Library Databases and Documents
        Analyzing and Fixing Databases for Libraries and Documents
        Analyzing and Fixing Library and Document Information
      Synchronizing Database Information
        Synchronizing Individual Users or Resources
        Synchronizing a Post Office
        Synchronizing a Library
        Synchronizing a Secondary Domain
        Synchronizing the Primary Domain from a Secondary Domain
      Managing Database Disk Space
        Gathering Mailbox Statistics
        Reducing the Size of User and Message Databases
        Reclaiming Disk Space in Domain and Post Office Databases
        Reducing the Size of Libraries and Document Storage Areas
      Backing Up GroupWise Databases
        Backing Up a Domain
        Backing Up a Post Office
        Backing Up a Library and Its Documents
        Backing Up Individual Databases
      Restoring GroupWise Databases from Backup
        Restoring a Domain
        Restoring a Post Office
        Restoring a Library
        Restoring an Individual Database
        Restoring Deleted Mailbox Items
        Recovering Deleted GroupWise Accounts
      Retaining User Messages
        How Message Retention Works
        Acquiring a Message Retention Application
        Enabling Message Retention
      Stand-Alone Database Maintenance Programs
        GroupWise Check
        GroupWise Time Stamp Utility
        GroupWise Database Copy Utility
    Post Office Agent
      Understanding Message Delivery and Storage in the Post Office
        Post Office Representation in ConsoleOne
        Post Office Directory Structure
        Information Stored in the Post Office
        Post Office Access Mode
        Role of the Post Office Agent
        Message Flow in the Post Office
      Configuring the POA
        Performing Basic POA Configuration
        Configuring User Access to the Post Office
        Configuring Post Office Security
        Configuring Post Office Maintenance
      Monitoring the POA
        Using the POA Server Console
        Using the POA Web Console
        Using POA Log Files
        Using GroupWise Monitor
        Using Novell Remote Manager
        Using an SNMP Management Console
        Notifying the GroupWise Administrator
        Using the POA Error Message Documentation
        Employing POA Troubleshooting Techniques
        Using Platform-Specific POA Monitoring Tools
      Optimizing the POA
        Optimizing Client/Server Processing
        Optimizing Message File Processing
        Optimizing Thread Management
        Optimizing Database Maintenance
        Optimizing Client Purge Operations
        Optimizing Calendar Publishing
      Managing Indexing of Attachment Content
        Regulating Indexing
        Configuring the Document Converter Agent (DCA)
        Enabling the Document Viewer Agent (DVA) for Indexing
        Controlling Maximum Document Conversion Size and Time
        Configuring a Dedicated Indexing POA (Windows Only)
        Customizing Indexing
      Using POA Startup Switches
        @file_name
        ‑‑attemptsresetinterval
        ‑‑certfile
        ‑‑cluster
        --dcamaxsize
        --dcamaxtime
        --dvanipaddr
        --dvanport
        --dvanssl
        ‑‑enforceclientversion
        ‑‑evocontrol
        ‑‑externalclientssl
        ‑‑gwchkthreads
        ‑‑gwclientreleasedate
        ‑‑gwclientreleaseversion
        ‑‑help
        ‑‑home
        ‑‑httppassword
        ‑‑httpport
        ‑‑httprefresh
        ‑‑httpssl
        ‑‑httpuser
        ‑‑imap
        ‑‑imapmaxthreads
        ‑‑imapreadlimit
        --imapreadnew
        ‑‑imapport
        ‑‑imapssl
        ‑‑imapsslport
        ‑‑incorrectloginattempts
        ‑‑internalclientssl
        ‑‑intruderlockout
        ‑‑ip
        ‑‑keyfile
        ‑‑keypassword
        ‑‑language
        ‑‑ldapdisablepwdchg
        ‑‑ldapipaddr
        ‑‑ldapippooln
        ‑‑ldappoolresettime
        ‑‑ldapport
        ‑‑ldapportpooln
        ‑‑ldappwd
        ‑‑ldapssl
        ‑‑ldapsslpooln
        ‑‑ldapsslkey
        ‑‑ldapsslkeypooln
        ‑‑ldaptimeout
        ‑‑ldapuser
        ‑‑ldapuserauthmethod
        ‑‑lockoutresetinterval
        ‑‑log
        ‑‑logdays
        ‑‑logdiskoff
        ‑‑loglevel
        ‑‑logmax
        ‑‑maxappconns
        ‑‑maxphysconns
        ‑‑mtpinipaddr
        ‑‑mtpinport
        ‑‑mtpoutipaddr
        ‑‑mtpoutport
        ‑‑mtpsendmax
        ‑‑mtpssl
        ‑‑name
        ‑‑noada
        ‑‑nocache
        ‑‑noconfig
        ‑‑nodca
        ‑‑noerrormail
        ‑‑nogwchk
        ‑‑nomf
        ‑‑nomfhigh
        ‑‑nomflow
        ‑‑nomtp
        ‑‑nonuu
        ‑‑noqf
        ‑‑nordab
        ‑‑norecover
        ‑‑nosnmp
        ‑‑notcpip
        ‑‑nuuoffset
        ‑‑password
        ‑‑port
        ‑‑primingmax
        ‑‑qfbaseoffset
        ‑‑qfbaseoffsetinminute
        ‑‑qfdeleteold
        ‑‑qfinterval
        ‑‑qfintervalinminute
        ‑‑qflevel
        ‑‑qfnolibs
        ‑‑qfnopreproc
        ‑‑qfnousers
        ‑‑qfuserfidbeg
        ‑‑qfuserfidend
        ‑‑rdaboffset
        ‑‑rights
        ‑‑show
        ‑‑soap
        ‑‑soapmaxthreads
        ‑‑soapport
        ‑‑soapsizelimit
        ‑‑soapssl
        ‑‑soapthreads
        ‑‑tcpthreads
        ‑‑threads
        --usedva
        ‑‑user
    Message Transfer Agent
      Understanding Message Transfer between Domains and Post Offices
        Domain Representation in ConsoleOne
        Domain Directory Structure
        Information Stored in the Domain
        Role of the Message Transfer Agent
        Link Configuration between Domains and Post Offices
        Message Flow between Domains and Post Offices
      Configuring the MTA
        Performing Basic MTA Configuration
        Configuring User Access through the Domain
        Configuring Specialized Routing
        Configuring Domain Maintenance
      Monitoring the MTA
        Using the MTA Server Console
        Using the MTA Web Console
        Using MTA Log Files
        Using GroupWise Monitor
        Using Novell Remote Manager
        Using an SNMP Management Console
        Notifying the Domain Administrator
        Using the MTA Error Message Documentation
        Employing MTA Troubleshooting Techniques
        Using Platform-Specific MTA Monitoring Tools
        Using MTA Message Logging
      Optimizing the MTA
        Optimizing TCP/IP Links
        Optimizing Mapped/UNC Links
        Optimizing the Routing Queue
        Adjusting MTA Polling of Closed Locations
      Using MTA Startup Switches
        @file_name
        ‑‑activelog
        ‑‑certfile
        ‑‑cluster
        ‑‑cyhi
        ‑‑cylo
        ‑‑defaultroutingdomain
        ‑‑fast0
        ‑‑fast4
        ‑‑help
        ‑‑home
        ‑‑httppassword
        ‑‑httpport
        ‑‑httprefresh
        ‑‑httpssl
        ‑‑httpuser
        ‑‑ip
        ‑‑keyfile
        ‑‑keypassword
        ‑‑language
        ‑‑log
        ‑‑logdays
        ‑‑logdiskoff
        ‑‑loglevel
        ‑‑logmax
        ‑‑maxidlerouters
        ‑‑maxrouters
        ‑‑messagelogdays
        ‑‑messagelogmaxsize
        ‑‑messagelogpath
        ‑‑messagelogsettings
        ‑‑msgtranssl
        ‑‑noada
        ‑‑nodns
        ‑‑noerrormail
        ‑‑nondssync
        ‑‑norecover
        ‑‑nosnmp
        ‑‑show
        ‑‑tcpinbound
        ‑‑tcpport
        ‑‑tcpwaitconnect
        ‑‑tcpwaitdata
        ‑‑vsnoadm
        ‑‑work
    Document Viewer Agent
      Understanding Document Conversion
      Scaling Your DVA Installation
        DVA Configurations
        DVA Installation on Additional Servers
      Configuring the DVA
        Editing the gwdva.dva File
        Performing Basic DVA Configuration
        Enabling the DVA Document Quarantine
        Putting DVA Configuration Changes into Effect
      Monitoring the DVA
        Using the DVA Server Console (Windows Only)
        Using the DVA Web Console
        Using DVA Log Files
      Optimizing the DVA
        Controlling Thread Usage
        Controlling Maximum Document Conversion Size and Time Limits
      Using Document Viewer Agent Startup Switches
        --home
        --httpmaxthread
        --httpport
        --httppassword
        --httpssl
        --httpthread
        --httpuser
        --ip
        --lang
        --log
        --logdays
        --loglevel
        --logmax
        --maxquarantineage
        --maxquarantinesize
        --maxsize
        --maxtime
        --quarantine
        --sslcert
        --sslkey
        --sslkeypassword
        --temp
        --template
    Internet Agent
      Configuring Internet Addressing
        Planning Internet Addressing
        Setting Up Internet Addressing
        Transitioning from SMTP Gateway Aliases to Internet Addressing
      Configuring Internet Services
        Configuring SMTP/MIME Services
        Configuring POP3/IMAP4 Services
        Configuring LDAP Services
        Configuring Paging Services
      Managing Internet Access
        Controlling User Access to the Internet
        Blocking Unwanted Email from the Internet
        Tracking Internet Traffic with Accounting Data
      Configuring the GWIA
        Changing the Link Protocol between the GWIA and the MTA
        Configuring an Alternate GWIA for a Domain
        Binding the GWIA to a Specific IP Address
        Securing GWIA Connections with SSL
      Monitoring the GWIA
        Using the GWIA Server Console
        Using the GWIA Web Console
        Using Novell Remote Manager
        Using an SNMP Management Console
        Assigning Operators to Receive Warning and Error Messages
        Using GWIA Log Files
        Using GWIA Error Message Documentation
        Employing GWIA Troubleshooting Techniques
        Stopping the GWIA
      Optimizing the GWIA
        Relocating the GWIA’s Processing Directories
        Increasing GWIA Speed
      Connecting GroupWise Systems and Domains Using the GWIA
        Connecting GroupWise Systems
        Linking Domains
      Using GWIA Startup Switches
        How to Use Startup Switches
        Alphabetical List of Switches
        Required Switches
        Console Switches
        Environment Switches
        SMTP/MIME Switches
        POP3 Switches
        IMAP4 Switches
        HTTP (Web Console) Switches
        SSL Switches
        LDAP Switches
        Log File Switches
    WebAccess
      Accessing Your GroupWise Mailbox in a Web-Based Environment
        Using WebAccess on a Desktop Workstation
        Using WebAccess on a Tablet Device
        Using the WebAccess Basic Interface on a Mobile Device
      Scaling Your GroupWise WebAccess Installation
        WebAccess Configurations
        WebAccess Installation on Additional Web Servers
      Configuring the WebAccess Application
        Customizing the WebAccess Application
        Managing User Access
        Customizing User Functionality
      Monitoring the WebAccess Application
        Using the WebAccess Application Web Console
        Using WebAccess Application Log Files
    Calendar Publishing Host
      Configuring the Calendar Publishing Host
        Using the Administration Web Console
        Using the calhost.cfg File
      Monitoring Calendar Publishing
        Viewing Calendar Publishing Status at the POA Web Console
        Using Calendar Publishing Host Log Files
        Using POA Log Files
      Creating a Corporate Calendar Browse List
      Managing Your Calendar Publishing Host
        Adding Multiple Calendar Publishing Hosts
        Assigning a Different Calendar Publishing Host to Users
        Editing Calendar Publishing Host Configuration
        Deleting a Calendar Publishing Host
    Monitor
      Understanding the Monitor Agent Consoles
        Monitor Agent Server Console
        Monitor Agent Web Console
        Monitor Web Console
      Configuring the Monitor Agent
        Selecting Agents to Monitor
        Creating and Managing Agent Groups
        Configuring Monitoring Protocols
        Configuring Polling of Monitored Agents
        Configuring Email Notification for Agent Problems
        Configuring Audible Notification for Agent Problems
        Configuring SNMP Trap Notification for Agent Problems
        Configuring Authentication and Intruder Lockout for the Monitor Web Console
        Configuring Monitor Agent Log Settings
        Configuring Proxy Service Support for the Monitor Web Console
        Monitoring Messenger Agents
        Supporting the GroupWise High Availability Service on Linux
      Configuring the Monitor Application
        Editing the gwmonitor.cfg File
        Setting the Timeout Interval for Inactive Sessions
        Adjusting Session Security
        Accommodating Single Sign-On Products
        Configuring Monitor Application Log Settings
        Putting the Monitor Configuration Changes into Effect
      Using GroupWise Monitor
        Using the Windows Monitor Agent Server Console
        Using the Monitor Web Console
        Generating Reports
        Measuring Agent Performance
        Collecting Gateway Accounting Data
        Assigning Responsibility for Specific Agents
        Searching for Agents
      Comparing the Monitor Consoles
      Using Monitor Agent Startup Switches
        ‑‑hapassword
        ‑‑hapoll
        ‑‑hauser
        ‑‑help
        ‑‑home
        ‑‑httpagentpassword
        ‑‑httpagentuser
        ‑‑httpcertfile
        ‑‑httpmonpassword
        ‑‑httpmonuser
        ‑‑httpport
        ‑‑httpssl
        ‑‑ipa
        ‑‑ipp
        ‑‑lang
        ‑‑log
        ‑‑monwork
        ‑‑nmaddress
        ‑‑nmhome
        ‑‑nmpassword
        ‑‑nmuser
        ‑‑nosnmp
        ‑‑pollthreads
        ‑‑proxy
        ‑‑tcpwaitconnect
    Client
      Using GroupWise Windows Client Custom Installation Options
      Setting Up GroupWise Client Modes and Accounts
        GroupWise Client Modes
        Email Accounts
      Setting Defaults for the GroupWise Client Options
        Client Options Summary
        Setting Client Options
        Resetting Client Options to Default Settings
      Distributing the GroupWise Windows Client
        Using GroupWise AutoUpdate and SetupIP to Distribute the GroupWise Windows Client
        Using ZENworks Configuration Management to Distribute the GroupWise Windows Client
      Supporting the GroupWise Client in Multiple Languages
        Providing the GroupWise Client Software in Multiple Languages
        Providing Post Office Support for Multiple Languages
      Tools for Analyzing and Correcting GroupWise Client Problems
        GroupWise Exception Handler for the Windows Client
        GroupWise Check
      Startup Options for the GroupWise Windows Client
        /@u-?
        /@u-user_ID
        /bl
        /c
        /cm
        /iabs
        /ipa-IP_address_or_hostname
        /ipp-port_number
        /l-xx
        /la-network_ID
        /nu
        /ph-path_name
        /pc-path_to_caching_mailbox
        /pr-path_to_remote_mailbox
    Security Administration
      Native GroupWise Security
      GroupWise Passwords
        Mailbox Passwords
        Agent Passwords
      Encryption and Certificates
        Personal Digital Certificates, Digital Signatures, and S/MIME Encryption
        Server Certificates and SSL Encryption
        Trusted Root Certificates and LDAP Authentication
      LDAP Directories
        Accessing Public LDAP Directories from GroupWise
        Offering the GroupWise Address Book as an LDAP Directory
        Authenticating to GroupWise with Passwords Stored in an LDAP Directory
        Accessing S/MIME Certificates in an LDAP Directory
      Message Security
      Address Book Security
        eDirectory Information Displayed in the Address Book
        Suppressing the Contents of the User Description Field
        Controlling GroupWise Object Visibility in the Address Book
        Controlling GroupWise Object Visibility between GroupWise Systems
      GroupWise Administrator Rights
        Setting Up a GroupWise Administrator as an Admin Equivalent
        Assigning Rights Based on Administration Responsibilities
        eDirectory Object and Properties Rights
        Granting or Removing Object and Property Rights
      GroupWise Agent Rights
      GroupWise User Rights
        eDirectory Rights
        File System Rights
      Spam Protection
        Configuring the GWIA for Spam Protection
        Configuring the GroupWise Client for Spam Protection
      Virus Protection
    Security Policies
      Securing GroupWise Data
        Limiting Physical Access to GroupWise Servers
        Securing File System Access
        Securing Domains and Post Offices
      Securing GroupWise Agents
        Setting Up SSL Connections
        Protecting Agent Web Consoles
        Protecting Agent Startup and Configuration Files
        Protecting Agent and Application Log Files
        Protecting Agent Processes on Linux
        Protecting Trusted Applications
      Securing GroupWise System Access
        Using a Proxy Server with Client/Server Access
        Using LDAP Authentication for GroupWise Users
        Managing Mailbox Passwords
        Enabling Intruder Detection
      Secure Migrations
        GroupWise Server Migration Utility
      Undocumented Diagnostic Tools
    Appendixes
      GroupWise Port Numbers
        Opening Ports for GroupWise Agents and Applications
        Protocol Flow Diagram with Port Numbers
        Post Office Agent Port Numbers
        Message Transfer Agent Port Numbers
        Document Viewer Agent Port Numbers
        Internet Agent Port Numbers
        WebAccess Application Port Numbers
        Calendar Publishing Host Port Numbers
        Monitor Agent Port Number
        Monitor Application Port Numbers
        GroupWise High Availability Service Port Number (Linux Only)
        Port Numbers for Products Frequently Used with GroupWise
      GroupWise URLs
      Linux Commands, Directories, and Files for GroupWise Administration
        Linux Operating System Commands
        GroupWise Directories and Files on Linux
        Linux GroupWise Commands
      Documentation Updates
        April 16, 2013 (GroupWise 2012 SP2)
        September 20, 2012 (GroupWise 2012 SP1)
        August 18, 2014 (GroupWise 2012 SP3)
    Legal Notices