Novell GROUPWISE 7 - SECURITY POLICIES Скачать руководство пользователя страница 62

62

  GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide

    Novell Confidential

                                                                                           Manual (ENU)  21 December 2004

Establishing Gateway Administrators

A gateway administrator is any GroupWise user you assign to receive information and error 
messages from the Notes Gateway. The gateway does not require an administrator, but if you want 
to define one, the administrator must either be a user who is associated with GroupWise or with a 
GroupWise distribution list. There are several types of administrators that you can define for the 
Notes Gateway:

1

In ConsoleOne, browse to and select the Notes Gateway object, then click Properties.

2

Click GroupWise > Gateway Administrators to display the Gateway Administrators page.

3

Click Add to display the Select Object dialog box, then select the user you want to define as 
an administrator.

You can also select multiple users and/or distribution lists in the Select GroupWise Object 
dialog box.

4

Click OK to return to the Gateway Administrators page and add the user to the Gateway 
Administrators list. 

Administrator Type

Description

Operator

The Operator receives a message if the Notes Gateway cannot communicate 
with the GroupWise system.

Foreign Operator

The Foreign Operator receives a message if the Notes Gateway cannot 
communicate with the Notes system.

Postmaster

The Postmaster receives bad message files if the 

/badmsg

 switch is in use. 

See 

“Notifying the Notes Gateway Administrator about Bad Messages” on 

page 79

.

Accountant

The gateway keeps accounting records for every message it sends, unless you 
turn the Accounting feature off. Accounting data for the previous day’s activity 
is sent daily to the Accountant. For setup information, see 

“Setting Up 

Accounting” on page 59

.

Содержание GROUPWISE 7 - SECURITY POLICIES

Страница 1: ...Novell w w w n o v e l l c o m GroupWise Gateway for Lotus Notes 7 S e p t e m b e r 8 2 0 0 6 I N S T A L L A T I O N A N D A D M I N IS T R A T I O N G U ID E...

Страница 2: ...export to entities on the current U S export exclusion lists or to any embargoed or terrorist countries as specified in the U S export laws You agree to not use deliverables for prohibited nuclear mi...

Страница 3: ...Inc in the United States and other countries NetWare is a registered trademark of Novell Inc in the United States and other countries Novell is a registered trademark of Novell Inc in the United State...

Страница 4: ......

Страница 5: ...ing the GroupWise Address Book to Notes 25 Defining the GroupWise System As a Notes Foreign Domain 26 Registering the Notes Gateway As a Notes User 28 Setting Up Server and Database Access for the Not...

Страница 6: ...IP Address 64 Configuring Internet Connectivity 65 8 Monitoring the Notes Gateway 67 Using the Notes Gateway Server Console 67 Information Box 68 Status Box 68 Statistics Box 68 Log Message Box 69 Me...

Страница 7: ...Messages 93 Error Messages 93 B Notes Gateway Directory Structure 101 Domino Server Directory Structure 101 lotus directory 101 domino directory 101 Notes Gateway Server Directory Structure 102 lotus...

Страница 8: ...8 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Страница 9: ...ateway on page 45 Chapter 8 Monitoring the Notes Gateway on page 67 Chapter 9 Optimizing the Notes Gateway on page 81 Chapter 10 Using Notes Gateway Startup Switches on page 85 Appendix A Notes Gatewa...

Страница 10: ...on gwgateways Documentation Conventions In Novell documentation a greater than symbol is used to separate actions within a step and items in a cross reference path A trademark symbol TM etc denotes a...

Страница 11: ...and Notes users can be imported into the GroupWise Address Book This enables users to select recipients from either system in their respective familiar Address Books Directory synchronization so that...

Страница 12: ...2 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide New independent directory synchronization thread so that heavy directory synchronization loads do not impede message deliver...

Страница 13: ...me versions of Notes directory synchronization and exchange do not work on the same server with other versions of Notes However the Notes Gateway can still exchange messages between the two systems If...

Страница 14: ...14 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide The GroupWise 7 Gateway for Lotus Notes can connect your Notes system to GroupWise 6 5 and GroupWise 7 x systems...

Страница 15: ...mation Deciding Where to Install the Notes Gateway on page 15 Determining Where to Install the Notes Gateway Administrator Snap In to ConsoleOne on page 16 Gathering GroupWise System Information on pa...

Страница 16: ...the gateway as described in Installing the Notes Gateway Administrator Snap In to ConsoleOne on page 21 Gathering GroupWise System Information The Notes Gateway needs to access the GroupWise domain wh...

Страница 17: ...server you must create an eDirectory account with a username and password that match the Windows user account The eDirectory user must have Read Write Compare Edit Modify and File Scan rights to the...

Страница 18: ...you will install and run the Notes Gateway you must be logged in as a member of the Administrator group To add the SNMP service to a Windows 2000 2003 server 1 From the Control Panel double click Add...

Страница 19: ...ormation that the Notes Gateway will need in order to access the Notes system Notes Domino Server Specify the fully qualified name of the Notes Domino server hostname notes_domain that will route mess...

Страница 20: ...es a Gateway object under the Domain object 5 Continue with Installing the Notes Gateway Software Installing the Notes Gateway Software 1 Download the GroupWise Gateway for Lotus Notes from the Novell...

Страница 21: ...u can install the Notes Gateway Administrator snap in to ConsoleOne to additional locations as needed 1 Make sure that no one is running ConsoleOne from the location where you want to install the Note...

Страница 22: ...Notes Gateway on page 15 2 Domain Server Type NetWare Windows Mark the platform of the server where the gateway s domain is located See Gathering GroupWise System Information on page 16 3 eDirectory I...

Страница 23: ...ll the Notes Gateway If you do record the path where ConsoleOne and the GroupWise Administrator snap ins to ConsoleOne are currently installed along with the version of the GroupWise Administrator sna...

Страница 24: ...24 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Страница 25: ...onment Variables 3 In the User Variables for Administrator list add the Notes software directory typically c program files lotus notes to the end of the path variable value 4 Click Set then click OK 5...

Страница 26: ...tes ini file and exit the text editor You do not need to restart the Notes Domino server in order for this change to be put into effect 6 Continue with Defining the GroupWise System As a Notes Foreign...

Страница 27: ...Notes Gateway worksheet item 11 Gateway Mail File Name Specify the name of the mail file worksheet item 11 through which communication between the Notes and GroupWise systems will occur Do not specif...

Страница 28: ...e Notes Gateway on page 35 Registering the Notes Gateway As a Notes User Because you will run the Notes Gateway on a server other than the Notes Domino server you must register the gateway as a Notes...

Страница 29: ...select the Notes Domino server that the Notes Gateway will communicate with worksheet item 11 then click OK The Notes Gateway user s Mail Server must be the same Notes Domino server that you specified...

Страница 30: ...o server the user you just created in Registering the Notes Gateway As a Notes User on page 28 needs appropriate access to the Notes Domino server and Notes databases Providing Access to the Notes Dom...

Страница 31: ...ld select the Notes domain where you want to open the public Directory 2c In the Database field select the Directory for that domain 2d Click Open 3 On the Servers menu select the Notes Domino server...

Страница 32: ...The Notes Gateway creates the wpnames nsf file and the gateway mail file one time only This means that you can change the access rights of the Notes Gateway user after these databases have been create...

Страница 33: ...s Description names nsf Editor or Manager The Notes public Directory For instructions to set rights see Providing Access Rights to the Public Directory on page 33 wpnames nsf Manager or Editor The Gro...

Страница 34: ...a Notes User on page 28 specify the password for the user then click OK This updates the local notes ini file on the Notes Gateway server from that version of the notes ini file on the Notes Domain s...

Страница 35: ...One Providing Gateway Information on page 35 Setting Required Parameters on page 36 Providing Gateway Information 1 In ConsoleOne browse to and select the domain where you installed the Notes Gateway...

Страница 36: ...on page 26 5 Click Apply to save the gateway information 6 Continue with Setting Required Parameters Setting Required Parameters 1 Click Required Parameters to display the Required Parameters page 2...

Страница 37: ...at represent the Notes system in your GroupWise system Notes ID Password Specify the password for the Notes user registered for the gateway worksheet item 11 as set up in Registering the Notes Gateway...

Страница 38: ...38 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Страница 39: ...server If you installed the Notes Gateway on a server other than the Notes Domino server the recommended configuration you should have already provided access when you configured the Notes side of th...

Страница 40: ...ist of services the name of the Notes Gateway service starts with the name of the domain where the gateway is installed followed by the name of the gateway itself followed by Service For example if th...

Страница 41: ...licit Addressing on page 50 Understanding What GroupWise Send Options Are Available through the Gateway GroupWise users can use some but not all GroupWise send options through the Notes Gateway The fo...

Страница 42: ...Gateway If It Is Running As a Service on page 42 Stopping the Notes Gateway If It Is Running As an Application 1 At the Notes Gateway server console click File Exit or Press F7 2 Click Yes to stop th...

Страница 43: ...tes Gateway click Start Settings Control Panel 2 Double click Add Remove Programs select domain gateway Notes Gateway then click OK 3 If a message informs you that some files could not be deleted dele...

Страница 44: ...44 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Страница 45: ...Directory Exchange Causes the gateway to perform a nightly exchange of the Notes public Address Book and GroupWise Address Book Directory Synchronization Causes the gateway to update each Address Boo...

Страница 46: ...oupWise Foreign Domain and Notes ID Password fields are filled in as described in Setting Required Parameters on page 36 When you provided this information during the initial configuration before inst...

Страница 47: ...guration page You can turn directory synchronization and exchange on and off for the current gateway session on the Optional Gateway Settings page Configuring Addressing Instead of Using Directory Syn...

Страница 48: ...then click New External User 3 Type a username then click OK 4 Right click the new External User object then click Properties 5 Fill in fields as needed to provide information about the user that you...

Страница 49: ...the gateway you can define one now See Providing Gateway Information on page 35 Gateway Alias Specify the user s address as defined in Notes For example if SJones Provo is the user s address in Notes...

Страница 50: ...e a message to the Notes user For syntax and examples see Explicit Addressing from GroupWise to Notes on page 50 5 Click OK to save the new contact in the personal address book Using Explicit Addressi...

Страница 51: ...roupWise If the user ID is unique in the GroupWise system then shorter syntax can be used Syntax userID foreign_domain Example LTanaka GroupWise Changing the Link Protocol between the Notes Gateway an...

Страница 52: ...n send messages and to which Notes users Specify which GroupWise users can receive messages and from which Notes users Specify the maximum size for messages sent through the gateway Specify whether or...

Страница 53: ...keywords that you can use in the file However all lines are initially commented out and access control is off by default Print the initial access cfg file in the domain wpgate notes directory Reviewi...

Страница 54: ...control settings would apply to any users who did not fall under a more specific section header groupwise_domain In Out This section lists the access control settings for users in a particular GroupWi...

Страница 55: ...SysAdminsOut MaxSize 5000000 AllowRuleGenerated Yes This example allows users in the SysAdminsIn and SysAdminsOut access groups to receive messages up to 5 MB in size and to send rule generated messag...

Страница 56: ...hat the message is undeliverable Syntax Block notes_domain Block username notes_domain Block CN full_name O organization notes_domain Examples Corporate Temps In Block XYZCorp Corporate Temps Out Bloc...

Страница 57: ...Corporate Temps Out MaxSize 5000000 This example prevents GroupWise users in the Temps post office from receiving messages larger than 1 MB and from sending messages larger than 5 MB AllowRuleGenerate...

Страница 58: ...e access control group that you want this user to be associated with If you have not created an access control group you can put access control information unique to this user in the Gateway Access fi...

Страница 59: ...priority message type destination and size of each item passing through the gateway Enabling Accounting on page 59 Defining an Accountant on page 60 Understanding the Accounting File on page 61 Enabli...

Страница 60: ...istrators list select the user or distribution list that you want to function as the Accountant In the Administrators list you can also select multiple users and distribution lists as needed 5 In the...

Страница 61: ...sent or received Mail GroupWise Message Priority 0 High 2 Normal 4 Low 2 GroupWise User Domain The GroupWise domain where the sender s or receiver s post office is located Corporate GroupWise User Pos...

Страница 62: ...ct the user you want to define as an administrator You can also select multiple users and or distribution lists in the Select GroupWise Object dialog box 4 Click OK to return to the Gateway Administra...

Страница 63: ...collected in the status correlation database gwcorr db located by default in the domain wpgate notes directory 1 If you want to change the location of the status correlation database use the corr star...

Страница 64: ...and then start the Notes Gateway so that it reads the updated startup file Notes Gateway Web Console You can adjust these settings for the current gateway session on the Optional Gateway Settings pag...

Страница 65: ...nternet connector for sending messages from Notes users to Internet users As an alternative you can configure the gateway to use an Internet Agent in your GroupWise system for Internet connectivity Us...

Страница 66: ...66 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Страница 67: ...dministrator about Bad Messages on page 80 Understanding Notes Gateway Error Messages on page 80 Using the Notes Gateway Server Console The Notes Gateway server console displays the gateway s activity...

Страница 68: ...eceived if Other Link is Open If it is Closed the network connection has been terminated Check the status of the Notes system Program Where the gateway is in its current processing cycle sending recei...

Страница 69: ...Message box displays the Notes Gateway s activity The amount and detail in this display depends on the logging level you select For more information see Using Notes Gateway Log Files on page 76 For a...

Страница 70: ...e Web Console on page 72 Setting Up the Notes Gateway Web Console During installation the Installation program offered you the opportunity to set up the Notes Gateway Web console The information that...

Страница 71: ...POA for example 7175 4 Make a note of the HTTP port number You will need this information to access the Notes Gateway Web console 5 Click Apply to save your changes on the Network Address page If you...

Страница 72: ...tes Gateway startup file notes cfg to enable and secure the Notes Gateway Web console In addition you can use the httprefresh switch to control how often the Notes Gateway refreshes the information pr...

Страница 73: ...ion On the Notes Gateway Web console menu click Configuration to display the configuration information stored on various property pages on the Notes Gateway object in ConsoleOne To change the log sett...

Страница 74: ...ession For information about Notes Gateway log files see Using Notes Gateway Log Files on page 76 Checking and Changing Gateway Time Settings On the Notes Gateway Web console menu click Time Settings...

Страница 75: ...page 59 Enabling Message Status for Sent Items on page 63 Using Notes Gateway Startup Switches on page 85 Changing Gateway Access Control On the Notes Gateway Web console menu click Access Control to...

Страница 76: ...s to display the Log Settings page 3 Fill in the following fields Log File Path Select the path where the log file should be created By default log files are stored in the domain wpgate notes 000 prc...

Страница 77: ...the Log Settings link on the Log Files page You can also view and modify log settings at the Notes Gateway server console on the server where the gateway is running as listed in Menu Summary on page 6...

Страница 78: ...the ngwln mib file as required by your SNMP management program For example to compile the ngwln mib file for ZENworks for Servers 2a In ConsoleOne right click the Site Server object then click Propert...

Страница 79: ...ng then click OK ConsoleOne then notifies the Notes Gateway to restart so the new settings can be put into effect The Notes Gateway should now be visible to your SNMP monitoring program Notifying the...

Страница 80: ...gateway send the bad message files to the postmaster using badmsg send If you do not yet have a postmaster see Establishing Gateway Administrators on page 62 for setup instructions If you do not want...

Страница 81: ...82 Automating Network Reattachment on page 83 Reducing Network Traffic on page 84 Adjusting the Gateway s Send Receive Cycle The Notes Gateway s send receive cycle determines how much time the gatewa...

Страница 82: ...CPU cycles and to keep network traffic manageable Snap Shot Interval The Notes Gateway server console shows the gateway statistics for the last x minutes an interval you specify The default interval i...

Страница 83: ...nt the gateway to attempt to recover the network link The default is 10 times Retry Interval Specify the amount of time you want the gateway to wait between retry attempts The default value is 60 seco...

Страница 84: ...ueue_directory is the path to the directory where you want the gateway queues created For example you could use a c lngate directory on the local drive Make sure the directory is not used by any other...

Страница 85: ...Example ngate badmsg send You can also edit the Notes Gateway startup file notes cfg to include the switches you want to use when starting the gateway The notes cfg file is located in the domain wpga...

Страница 86: ...tablishing Gateway Administrators on page 62 Both Instructs the gateway to both move and send the bad message files Neither Instructs the gateway to delete the files Syntax badmsg option Example badms...

Страница 87: ...mbers of that group Group expansion is on by default Syntax group help Displays information about the Notes Gateway switches Syntax help home Specifies the path to the gateway root directory domain wp...

Страница 88: ...s See Using the Notes Gateway Web Console on page 70 Syntax httprefresh seconds Example httprefresh 30 See also httpuser httppassword and httpport httpuser Specifies the username for the Notes Gateway...

Страница 89: ...m lnsmb Specifies the name of the Notes mailbox used to transfer messages between systems The default is mail box The variable n can range from 1 to 10 Syntax lnsmb mailn box Example lnsmb mail2 box l...

Страница 90: ...is 1024 KB or 1 MB The range is from 256 KB to unlimited size Use 0 zero for unlimited disk space See Using Notes Gateway Log Files on page 75 Syntax logmax kilobytes Example logmax 2048 See also log...

Страница 91: ...lid values range from 1 to 4 See Adjusting the Number of Sender and Receiver Threads on page 82 Syntax st threads Example st 3 See also rt work Indicates the path where temporary files are stored whil...

Страница 92: ...92 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Страница 93: ...racter set translation file Error processing attachment attachment_name You are not authorized to perform that operation Error processing Notes Address Book information You are not authorized to use t...

Страница 94: ...Notes Gateway user should be provided with access rights to create databases on the Notes Domino server that the gateway communicates with See Providing Access to Notes Databases on page 32 After givi...

Страница 95: ...nsf file on Notes Domino server connected to GroupWise is damaged and the gateway is not able to find the People view in the Notes version of the GroupWise Address Book wpnames nsf Action Replace the...

Страница 96: ...Enabling Directory Synchronization and Exchange on page 45 Invalid password Source GroupWise Notes Gateway startup Possible Cause The Notes ID password entered on the Required Parameters page of the N...

Страница 97: ...25 No active recipients Source GroupWise Notes Gateway outbound messaging Possible Cause The message did not include the address of any active recipients Action Select users from the GroupWise Addres...

Страница 98: ...onal Gateway Settings page in ConsoleOne Action See Automating Network Reattachment on page 83 for more information about network reattachment Unable to locate GWWORK directory Source GroupWise Notes...

Страница 99: ...versions of Notes the gateway must run on a server other than the Notes Domino server See Chapter 2 Notes Gateway System Requirements on page 13 Action Make sure that the Notes ID Password field in Co...

Страница 100: ...100 GroupWise 7 Gateway for Lotus Notes Installation and Administration Guide...

Страница 101: ...ory The domino directory contains subdirectories and files pertaining to the Domino server notes ini file The notes ini file is the Domino server initialization file used by Lotus Notes You must manua...

Страница 102: ...herefore the Notes Gateway accesses some Notes client files on the Notes Gateway server lotus directory The lotus directory on the Notes Gateway server is the root directory for the Lotus Notes client...

Страница 103: ...r the Notes Gateway uninstallation program wpcsin 0 7 MTA input queue directory Priority queue subdirectories wpcsout notxxxx 0 7 problem MTA output queue directory Notes Gateway input queue Priority...

Страница 104: ...ormation is recorded See Using Notes Gateway Log Files on page 75 acct file The acct file contains information about the messages the Notes Gateway sends each day It is e mailed to the accounts each d...

Страница 105: ...d archives uninstnotes directory The uninstnotes directory contains the Notes Gateway uninstallation program and supporting files wpcsin directory The wpcsin directory is the MTA input queue where the...

Страница 106: ...ches from GroupWise users on Notes users 1 Not used by the Notes Gateway 2 High priority messages from GroupWise users to Notes users 3 Status messages notifying GroupWise users about the status of hi...

Страница 107: ...enables message status information to be exchanged between GroupWise users and Notes users See Enabling Message Status for Sent Items on page 63 The gwcorr dc file is the data dictionary file from wh...

Страница 108: ...ogram install exe setup inf file The setup inf file contains information used by the Installation program gwstrs fil file The gwtrs fil file is the strings resource file used by the Notes Gateway serv...

Отзывы: