4.3 Planning the GroupWise Internet Agent

Use the GroupWise Internet Agent Installation Summary Sheet to record your decisions about how to install the Internet Agent. The topics in this section present the required information in a convenient planning sequence. The Installation Summary Sheet organizes the information in the order in which you need it during installation.

For additional assistance in planning your GroupWise installation, see GroupWise Best Practices and GroupWise 8 Good and Bad Habits.

IMPORTANT:If you plan to install the Internet Agent in a clustered server environment, refer to the GroupWise 8 Interoperability Guide as you plan your Internet Agent installation.

4.3.1 Selecting the Internet Agent Platform

The Internet Agent is available as a NetWare NLM program, a Linux executable, and a Windows executable.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Software Platform, mark whether you plan to install the Internet Agent on NetWare, Linux, or Windows. Review Section 4.2, Internet Agent System Requirements to ensure that the specific server you have selected meets the listed requirements.

4.3.2 Gathering Server Information

Prior to GroupWise 7, the Internet Agent and the MTA communicated by transferring message files through message queue directories, as shown in diagrams in GroupWise 8 Troubleshooting 3: Message Flow and Directory Structure:

Starting in GroupWise 7, you can configure the Internet Agent so that it uses TCP/IP to communicate with the MTA, instead of message files, as shown in these additional diagrams:

The GroupWise Installation program needs to know the network address of the server where the Internet Agent will run. For best performance, install the Internet Agent on the same server with the domain it belongs to. In this configuration, in a GroupWise system with a single Internet Agent, UNC links between the Internet Agent and the MTA are sufficient. Therefore, the Internet Agent Installation program displays a default port number of 0 (zero), indicating that TCP/IP will not be used.

In a larger GroupWise system with multiple Internet Agents, you can configure the Internet Agent to communicate with the MTA by way of TCP/IP. This configuration enables you to designate an alternate Internet Agent for the domain. With this configuration, if the domain’s primary Internet Agent goes down, the MTA can fail over to another Internet Agent in your GroupWise system until the primary Internet Agent is up and running again. This feature is especially useful in larger GroupWise systems where multiple Internet Agents handle a large number of Internet messages.

If you want to enable TCP/IP communication between the Internet Agent and the MTA, use a port number of 7102 or any other available port number. If you do not want to enable TCP/IP communication, use 0 (zero) as the port number.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Server Information, list the IP address and DNS hostname of the server where you plan to install the Internet Agent. Also, specify the port number for TCP/IP communication if you want to enable it.

For a complete list of default port numbers used by the GroupWise agents, refer to GroupWise Port Numbers in the GroupWise 8 Administration Guide.

4.3.3 Selecting the Internet Agent Installation Directory

You should install the Internet Agent on the same server where the domain directory is located. The Internet Agent installation directory depends on the platform where you are installing it.

Consider these platform-specific guidelines:

NetWare:

When installing the NetWare Internet Agent, we recommend that you use the sys:\system directory on the NetWare server. This simplifies access to the Internet Agent configuration file and ensures that the NLM program is in the server’s search path. If you use a different directory, you must add that directory to the server’s search path.

Linux:

The Linux Internet Agent is automatically installed to /opt/novell/groupwise/agents.

Windows:

The default installation directory is c:\Program Files\Novell\GroupWise Server\GWIA. However, you can install the Internet Agent to any directory you want.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Installation Path, record the directory where you want to install the Internet Agent software.

4.3.4 Gathering Domain and Gateway Information

The Internet Agent requires a GroupWise gateway directory in which to store configuration information and work files. The gateway directory must be located under a GroupWise domain directory. The default directory name is gwia. If you change the name, use the following platform-specific conventions:

NetWare:

Use a maximum of 8 characters

Linux:

Use only lowercase characters

Windows:

No limitations.

After you specify the domain directory location and a gateway directory name, the GroupWise Installation program creates the gateway directory under the domain\wpgate directory (for example, provo\wpgate\gwia).

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under GroupWise Domain, specify the domain name and the full path to the domain directory where you want to create the gateway directory, then give the gateway directory a name.

If you are installing the Linux Internet Agent, record the eDirectory context of the Domain object in LDAP format (for example, cn=provo3,ou=groupwise,o=corporate).

4.3.5 Selecting the Gateway Object Name

The Internet Agent also requires a GroupWise Gateway object in Novell eDirectory. By default, it is named the same as the gateway directory and is referred to as the Internet Agent object. This object stores the Internet Agent’s information and enables configuration of the agent through ConsoleOne.

The Internet Agent’s object is created below the Domain object. If you have multiple domains, the GroupWise Installation program uses the Domain object associated with the domain directory where you are creating the Internet Agent’s gateway directory.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Internet Agent Object Name, specify the name you want to give the Internet Agent’s eDirectory object. The default name is the same as the gateway directory name you chose under GroupWise Domain.

4.3.6 Specifying the Internet Mail Domain Name for Your GroupWise System

When e-mail users across the Internet address messages to GroupWise users, the address includes the Internet mail domain for your GroupWise system (for example, novell.com). Typically, the Internet mail domain name for your GroupWise system is the name of your company, with its accompanying domain type (.com, .edu, and so on).

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Internet Mail Domain Name, specify the name you want your GroupWise system to be known by across the Internet.

4.3.7 Handling Outbound Mail

If the Internet Agent is connected to the Internet and is able to perform DNS name resolution, it can send messages from GroupWise users directly across the Internet to Internet users. However, you might prefer to keep the Internet Agent behind your firewall. To accomplish this, you can configure the Internet Agent to route all outbound messages to a relay host.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEETT

Under Relay Host, mark how you want to handle outbound mail. If you plan to use a relay host, specify the IP address of the relay host.

4.3.8 Enabling the Internet Agent Web Console

The Internet Agent server console enables you to monitor the Internet Agent from the server where it is running. If you want, you can enable the Internet Agent Web console. The Web console lets you view the Internet Agent’s statistical and diagnostic information through a Web browser, which is useful if want to see the Internet Agent’s activity without physically visiting the agent’s server.

You access the Web console by entering the Internet Agent’s network address and HTTP port number in a Web browser (for example, http://172.16.5.18:9850). If necessary, you can change the Internet Agent’s default HTTP port number (9850).

If you want to restrict access to the Web console, you can assign a username and password. This can be any username and password you want. By default, the username and password are passed through a non-secure connection between the Web browser and the Internet Agent. Therefore, we recommend that you do not use an existing eDirectory username and password unless you secure this connection by using SSL. For information about securing the Internet Agent’s connections, see Internet Agent in the GroupWise 8 Administration Guide.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Enable Web Console, select Yes if you want to enable the Internet Agent Web console. If you want to restrict access to the Web console, enter a username and password.

4.3.9 NetWare Installation Options: Automatic Startup, Protected Mode, and Clustering

When you install the NetWare Internet Agent, the following options specific to NetWare are available in the GroupWise Installation program:

Automatic Startup

You can have the Installation program add a reference to the gwia.ncf file in the NetWare server’s autoexec.ncf file so that the Internet Agent is automatically loaded whenever the server is started.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under NetWare Installation Options, mark whether you want to configure the NetWare server to start the Internet Agent automatically.

Protected Mode

You can have the Installation program configure the NetWare Internet Agent to run in Protected Mode, which starts it in its own protected address space on the NetWare server.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under NetWare Installation Options, mark whether or not you want to configure the NetWare server to start the Internet Agent in Protected Mode.

Novell Cluster Services

Novell Cluster Services is a server clustering system that ensures high availability and manageability of critical network resources including volumes (where GroupWise domains reside) and applications (such as the Internet Agent). Novell Cluster Services supports failover, failback, and migration of individually managed cluster resources.

The NetWare Internet Agent can be configured to take advantage of the fault‑tolerant environment provided by Novell Cluster Services if the following requirements are met:

  • The domain where the Internet Agent is installed has already been created on a shared NSS volume in the cluster.

  • The NetWare Internet Agent is being installed to a server that is part of the same cluster.

When the Internet Agent is configured for clustering, its startup file is configured with shared volume names rather than specific server names.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under NetWare Installation Options, mark whether you want to configure the NetWare Internet Agent for clustering. If you do, follow the installation instructions in Implementing the Internet Agent in a NetWare Cluster in the GroupWise 8 Interoperability Guide, rather than the installation instructions in this guide.

4.3.10 Linux Installation Options: LDAP Information, Automatic Startup, and Clustering

When you install the Linux Internet Agent, the following Linux-specific options are available in the Installation program:

LDAP Information

The Installation program needs to access eDirectory through LDAP. eDirectory access is required in order to create the Internet Agent object. To obtain access, the Installation program needs the IP address and port number of an LDAP server, along with an eDirectory username and password to log in with. The user must have sufficient rights to create GroupWise objects in eDirectory. Because the Installation program uses LDAP to access eDirectory, you must provide the username in LDAP format. For example:

cn=admin,ou=users,o=corporate

If you want to secure the connection to eDirectory with SSL, you can specify a certificate file. For background information about SSL, see Trusted Root Certificates and LDAP Authentication in Security Administration in the GroupWise 8 Administration Guide.

IMPORTANT:If you do not want to use SSL, the LDAP server must be configured to accept clear text passwords. This is configured on the server’s LDAP Group object in ConsoleOne by deselecting Require TLS for Simple Binds with Password. The LDAP snap-in to ConsoleOne is required in order to change the setting.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Linux LDAP Authentication, specify the IP address and port number of an LDAP server, a username in LDAP format, the password for the username, and if necessary, the full path to your SSL root certificate file.

Automatic Startup

The Linux Internet Agent is Run Control compliant. You can have the Installation program create symbolic links to the grpwise script in the rc3.d and rc5.d directories so that the Internet Agent starts on server restart into run level 3 or 5, depending on the configuration of your Linux system.

If you want to configure the Internet Agent for high availability, as described in Enabling the Groupwise High Availability Service for the Linux GroupWise Agents, it must be configured to start automatically on system startup.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Linux Installation Options, mark whether or not you want to configure the Linux server to start the Internet Agent automatically.

Clustering on Linux

On Linux, you can install the Internet Agent on Novell Cluster Services. The Linux GroupWise Installation program provides a Configure GroupWise for Clustering option that simplifies the process of installing the Linux Internet Agent on multiple nodes in the cluster.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Linux Installation Options, mark whether or not you want to configure the Linux Internet Agent for clustering using Novell Cluster Services. If you do, follow the installation instructions provided in Implementing the Internet Agent in a Linux Cluster in Novell Cluster Services on Linux in the GroupWise 8 Interoperability Guide, rather than the installation instructions provided in this guide.

4.3.11 Windows Installation Options: SNMP Traps and Service vs. Application

When you install the Windows Internet Agent, you have choices about how the Internet Agent interacts with the Windows operating system.

SNMP Traps

If you want to use an SNMP manager program, such as the Management and Monitoring Services component of Novell ZENworks Server Management, to monitor the Windows Internet Agent, you must install some SNMP components along with the Internet Agent software.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Windows Installation Path, mark Install and Configure SNMP for GroupWise Agents if you want to use an SNMP manager program.

If this option is dimmed during installation, the SNMP service has not been enabled on the Windows server where you are installing the Internet Agent. If you want to monitor the Internet Agent from an SNMP management program, the SNMP service must be enabled so you can select this option.

NOTE:The NetWare and Linux Internet Agents rely on operating system components for SNMP functionality and do not require this installation option.

Service vs. Application

When you run the Windows Internet Agent as a service, it can start automatically and run without a user interface, just like any Windows service.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Windows Installation Path, mark Install as Windows Service if you want to run the Internet Agent as a service.

When you run the Windows Internet Agent as a service, it must run under a specific Windows user account.

When the Internet Agent domain is located on the same server where you are installing the Internet Agent, the Internet Agent can run under the local system account. Installing the Internet Agent on the same server with its domain is recommended.

If the Internet Agent domain is located on a remote server, you must specify a user with rights to access the domain directory.

Windows

If the Windows Internet Agent needs to log in to another Windows server, provide a Windows username and password.

NetWare:

If the Windows Internet Agent needs to log in to a NetWare server, provide an existing eDirectory username and password, or create a new account for the agents, as described in Creating a NetWare Account for Agent Access (Optional).

Linux:

Configuring the Windows Internet Agent to log in to a Linux server is not recommended.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Windows Service Information, record the account the Internet Agent will run under, and if necessary, the password for the account.

As with all Windows services, the Windows Internet Agent can be started automatically or manually as a service each time the Windows server restarts.

GROUPWISE INTERNET AGENT INSTALLATION SUMMARY SHEET

Under Windows Service Information, mark how you want the Windows Internet Agent to start each time the server is restarted.

NOTE:On Windows Server 2008, the Windows Internet Agent running as a service cannot interact with the desktop. It must run as a background process.