2.7 Using an LDAP Directory Management Tool for Adding LDAP Users and Groups to GroupWise

In an environment where GroupWise users are associated with User objects in an LDAP directory, it can be convenient to assign new GroupWise users to post offices at the same time as they are created in the LDAP directory. It can also be convenient to use LDAP groups as GroupWise groups.

GroupWise integration is available for both Novell iManager and Microsoft Management Console (MMC).

2.7.1 Adding GroupWise Users and Groups in Novell iManager

If your organization has one administrator for GroupWise and a different administrator for eDirectory, you can install the GroupWise plugin for iManager for the eDirectory administrator in order to streamline the process of adding users on your network. The eDirectory administrator can add new users in iManager, and then immediately add the new users to GroupWise post offices.

Installing the GroupWise Plugin for iManager

  1. In the GroupWise Admin console, add eDirectory as an LDAP directory.

    For instructions, see Section 6.1, Setting Up an LDAP Directory.

  2. In the GroupWise Admin console, configure LDAP user synchronization between GroupWise and eDirectory.

    For instructions, see Section 6.1.2, Configuring User Synchronization for an LDAP Directory.

  3. Log in to iManager, then click Configure on the menu bar.

  4. Click Plug-in Installation > Available Novell Plug-In Modules.

  5. In the list of plugins, select GroupWise Plugins, then click Install.

  6. When the installation is complete, click Close.

  7. Restart Tomcat to make the GroupWise plugin available in iManager.

  8. Continue with Configuring the GroupWise Plugin for iManager.

HINT:If you need to manually download and install the GroupWise iManager plugin, visit in your web browser, then select iManager and your version number from the Product or Technology drop-down menu. Click Submit, and the GroupWise plugin for iManager appears below the search area. Follow the instructions in the download to install the plugin.

Configuring the GroupWise Plugin for iManager

  1. Log in to iManager again.

  2. Click Roles and Tasks on the menu bar, then click Directory Administration > Modify Object on the navigation bar.

  3. On the Modify Object page, browse to and select the eDirectory administrator user, then display the Object properties.

    A GroupWise tab is now available.

    GroupWise tab now available

  4. Click the GroupWise tab, then click GroupWise Configuration.

  5. Provide the configuration information about your GroupWise system:

    1. Specify the IP address of the primary domain server and the port number for the Admin Service (9710 by default).

    2. Specify the GroupWise Directory Name that represents eDirectory in your GroupWise system.

      You set up this Directory name in Step 1 in Installing the GroupWise Plugin for iManager.

    3. Specify the GroupWise Super Admin user name and password.

    4. Click OK.

  6. Continue with Adding GroupWise Users in iManager.

Adding GroupWise Users in iManager

  1. In iManager, create a new eDirectory user as usual., then click Modify.

  2. Click the GroupWise tab.

  3. Select the new user’s post office, then click OK.

    The new user is quickly available in the GroupWise Admin console. GroupWise establishes the user’s email address.

    If the eDirectory administrator changes the user’s name in eDirectory, the changes synchronize over to GroupWise.

    If you want the user’s email address to synchronize over to eDirectory, see Section 6.1.2, Configuring User Synchronization for an LDAP Directory.

  4. Continue with Adding an eDirectory Group to GroupWise in iManager.

Adding an eDirectory Group to GroupWise in iManager

You can use an eDirectory group as a GroupWise group by associating it with a GroupWise post office.

  1. In iManager, create a new group as usual, then click Modify.

    NOTE:You cannot associate an existing eDirectory group with GroupWise.

  2. Click the GroupWise tab.

  3. Select the post office that you want to own the new group, then click OK.

    The new group quickly displays in the GroupWise Admin console, but you cannot add members to the group in the Admin console.

  4. In iManager, add GroupWise users as members of the group.

  5. In the GroupWise Admin console, browse to and click the name of the new group, then click Synchronize to immediately pull the group membership from eDirectory into GroupWise.

    NOTE:On an ongoing basis, LDAP user synchronization transfers changes in the group membership from eDirectory over to GroupWise. For more information, see Section 6.1.2, Configuring User Synchronization for an LDAP Directory. You cannot change group membership in the GroupWise Admin console.

    GroupWise establishes the new group’s email address.

    If you want the group’s email address to synchronize over to eDirectory, see Publishing Email Addresses to Your LDAP Directory.

NOTE:After you associate an eDirectory group with a GroupWise post office, the GroupWise tab no longer appears in iManager. You can see which post office the group is associated with by displaying the Group object properties in the GroupWise Admin console.

2.7.2 Managing GroupWise Users and Groups in Microsoft Management Console

If your organization has one administrator for GroupWise and a different administrator for Active Directory, you can install the GroupWise plugin for Microsoft Management Console (MMC) for the Active Directory administrator in order to streamline the process of adding new users on your network. The Active Directory administrator can add the new users in the Computers and Users component of MMC, and then immediately add the new users to GroupWise post offices.

Installing the GroupWise Plugin for Microsoft Management Console

  1. In the GroupWise Admin console, add Active Directory as an LDAP directory.

    For instructions, see Section 6.1, Setting Up an LDAP Directory.

  2. In the GroupWise Admin console, configure LDAP user synchronization between GroupWise and Active Directory.

    For instructions, see Section 6.1.2, Configuring User Synchronization for an LDAP Directory.

  3. Download the GroupWise 2014 R2 Windows software image to the Windows server where you want to run Computers and Users to create GroupWise users and groups.

  4. Run setup.exe at the root of the downloaded GroupWise 2014 R2 software image to start the GroupWise Installation Wizard.

  5. Click GroupWise MMC Plugin.

  6. Select the language for the Installation Wizard, then click OK.

  7. Click Next to continue.

  8. Accept the License Agreement, then click Next.

  9. Click Next, then click Install.

  10. When the installation complete, click Finish to display the GroupWise MMC Plugin Configuration dialog box.

  11. Configure the MMC Plugin for GroupWise:

    1. Specify the IP address of the primary domain server and the port number for the Admin Service (9710 by default).

    2. Specify the name of the LDAP Server object that represents Active Directory in your GroupWise system.

      You set up this LDAP Server object in Step 1 in Installing the GroupWise Plugin for Microsoft Management Console.

    3. Specify the GroupWise Super Admin user name and password.

    4. Click Test to ensure that you have provided the correct information.

    5. Click OK to exit the Configuration dialog box, then click OK to confirm the successful configuration.

      If you need to change the configuration in the future, run the following program:

      c:\Program Files\Novell\GroupWise MMC Plugin\gwisepluginconfig.exe

  12. Continue with Adding a GroupWise User in Active Directory.

Adding a GroupWise User in Active Directory

  1. In Computers and Users, click Action > New > User.

  2. In the New Object - User dialog box, provide the standard user information, then click Next.

  3. Specify and confirm the password, select other password options as needed, then click Next.

    A new dialog box appears where you can add the user to a post office.

  4. Select the new user’s post office, then click Next.

  5. Click Finish.

    The new user is quickly available in the GroupWise Admin console. GroupWise establishes the user’s email address.

    If the Active Directory administrator changes the user’s name, the changes synchronize over to GroupWise.

    If you want the user’s email address to synchronize over to Active Directory, see Publishing Email Addresses to Your LDAP Directory.

  6. Continue with Adding a GroupWise User to a GroupWise Group in Active Directory.

Adding a GroupWise User to a GroupWise Group in Active Directory

  1. In Computers and Users, click Actions > New > Group.

  2. In the New Object - Group dialog box, provide the standard group information, then click Next.

    A new dialog box appears where you can add the group to a post office.

  3. Select the post office, then click Next.

  4. Click Finish.

  5. In MMC, add GroupWise users as members of the group.

  6. In the GroupWise Admin console, browse to and click the name of the new group, then click Synchronize to immediately pull the group membership from Active Directory into GroupWise.

    NOTE:On an ongoing basis, LDAP user synchronization transfers changes in the group membership from Active Directory over to GroupWise. For more information, see Section 6.1.2, Configuring User Synchronization for an LDAP Directory. You cannot change group membership in the GroupWise Admin console.

    GroupWise establishes the new group’s email address.

    If you want the group’s email address to synchronize over to eDirectory, see Publishing Email Addresses to Your LDAP Directory.

NOTE:After you associate an Active Directory group with a GroupWise post office, you cannot see the post office that the group belongs to in MMC. You can see this information by displaying the Group object properties in the GroupWise Admin console.