Novell GROUPWISE 7 - SECURITY POLICIES User manual

System
I
novdocx (en) 11 December 2007
35
I
System
Chapter 1, “GroupWise System Administration,” on page 37
Chapter 2, “ConsoleOne Administration Tool,” on page 39
Chapter 3, “GroupWise View,” on page 43
Chapter 4, “GroupWise System Operations,” on page 51
Chapter 5, “GroupWise Utilities,” on page 73
Chapter 6, “GroupWise Address Book,” on page 85
Chapter 7, “Multilingual GroupWise Systems,” on page 105

36 GroupWise 7 Administration Guide
novdocx (en) 11 December 2007

GroupWise System Administration
1
novdocx (en) 11 December 2007
37
1
GroupWise System Administration
As a GroupWise®system administrator, it is your responsibility to keep your GroupWise system
running smoothly for your GroupWise users. This GroupWise 7 Administration Guide provides a
wealth of information to help you accomplish this task. This System section provides an overview of
the GroupWise administration tool, ConsoleOne®, and its capabilities. It summarizes administrative
tasks that affect your GroupWise system as a whole and provides links to more specialized
instructions.
The following sections of the Administration Guide detail the eDirectoryTM objects where
GroupWise information is stored. Instructions are provided for creating and managing all
GroupWise object types.
“Domains” on page 109
“Post Offices” on page 153
“Users” on page 201
“Resources” on page 247
“Distribution Lists, Groups, and Organizational Roles” on page 261
“Libraries and Documents” on page 291
The following sections of the Administration Guide detail the GroupWise software components that
make your GroupWise system run. Instructions are provided for configuring, monitoring, and
optimizing each software component.
“Post Office Agent” on page 461
“Message Transfer Agent” on page 603
“Internet Agent” on page 701
“WebAccess” on page 853
“Monitor” on page 963
The following additional sections of the Administration Guide provide supporting details and
background information:
“Databases” on page 371
“Client” on page 1033
“Security Administration” on page 1109
“Security Policies” on page 1159

38 GroupWise 7 Administration Guide
novdocx (en) 11 December 2007

ConsoleOne Administration Tool
2
novdocx (en) 11 December 2007
39
2
ConsoleOne Administration Tool
GroupWise®is administered using ConsoleOne®, a Java*-based tool for managing your network
and its resources. When you create your GroupWise system, GroupWise snap-ins are added to your
ConsoleOne installation and GroupWise objects are created in Novell®eDirectoryTM. As you
manage your GroupWise system, you use ConsoleOne to create additional GroupWise objects,
modify GroupWise object properties, and so on.
IMPORTANT: Because the GroupWise snap-ins to ConsoleOne are required in order to work with
GroupWise objects, you cannot use other network management tools, such as Novell iManager, to
administer your GroupWise system. Also, you should not use older network management tools, such
as NetWare®Administrator, to administer your GroupWise system, unless your GroupWise system
includes legacy gateways that require such tools to administer the corresponding Gateway objects
and their properties.
Because GroupWise is a cross-platform product, you might have components of your GroupWise
system located on NetWare servers, Linux servers, and Windows* servers. You can run ConsoleOne
on Windows or Linux to manage GroupWise domains and post offices located on any of these
platforms.
Section 2.1, “ConsoleOne on Windows,” on page 39
Section 2.2, “ConsoleOne on Linux,” on page 40
Section 2.3, “ConsoleOne in a Multiple-Platform Environment,” on page 41
NOTE: For a GroupWise system on NetWare, you cannot run ConsoleOne to administer
GroupWise at the NetWare server console. The GroupWise Administrator snap-ins to ConsoleOne
do not run in that environment.
2.1 ConsoleOne on Windows
You can run ConsoleOne on Windows on any Windows machine that meets the requirements listed
in “GroupWise Administration Requirements” in the GroupWise 7 Installation Guide.
Section 2.1.1, “Installing ConsoleOne on Windows,” on page 39
Section 2.1.2, “Starting ConsoleOne on Windows,” on page 40
2.1.1 Installing ConsoleOne on Windows
When you create your initial GroupWise system using the GroupWise Installation program
(install.exe) on Windows, the GroupWise snap-ins to ConsoleOne are installed to the ConsoleOne
installation on that machine. If necessary, you can install ConsoleOne itself to the machine where
you are running the GroupWise Installation program. You are also given the opportunity to copy the
GroupWise snap-ins to ConsoleOne into a GroupWise software distribution directory for later use.
After you have set up your GroupWise system, you can use the GroupWise Installation program to
install ConsoleOne and the GroupWise snap-ins from the GroupWise 7 Administrator for NetWare/

40 GroupWise 7 Administration Guide
novdocx (en) 11 December 2007
Windows CD or you can run admin\install.exe to install the snap-ins from the software distribution
directory to additional locations as needed.
2.1.2 Starting ConsoleOne on Windows
When you install ConsoleOne, a ConsoleOne icon is automatically created on your Windows
desktop for starting ConsoleOne.
Before you start ConsoleOne, turn off file caching in the Novell Client to protect database integrity.
1Right-click the red N in the notification area, then click Novell Client Properties.
2Click Advanced Settings, select File Caching, then select Off.
3Click OK to save your change.
2.2 ConsoleOne on Linux
You can run ConsoleOne on Linux on any Linux machine that meets the requirements listed in
“GroupWise Administration Requirements” in the GroupWise 7 Installation Guide.
Section 2.2.1, “Installing ConsoleOne on Linux,” on page 40
Section 2.2.2, “Starting ConsoleOne on Linux,” on page 40
2.2.1 Installing ConsoleOne on Linux
When you create your initial GroupWise system using the GroupWise Installation program
(install) on Linux, ConsoleOne should already be installed before you begin. If you are running
Novell Open Enterprise Server Linux, you can install ConsoleOne from YaST using Software >
Install and Remove Software. Linux ConsoleOne is also available on the Novell Downloads page
(http://download.novell.com/index.jsp).
After ConsoleOne is installed, the GroupWise Installation program on Linux installs the GroupWise
snap-ins to ConsoleOne to the ConsoleOne installation on that machine. You are also given the
opportunity to copy the GroupWise Administration RPM into a GroupWise software distribution
directory for later use.
After you have set up your GroupWise system, you can use the GroupWise Installation program to
the GroupWise snap-ins from the GroupWise 7 Administrator for Linux CD or you can install the
GroupWise Administration RPM from the admin subdirectory of the software distribution directory
to install the snap-ins to additional locations as needed.
2.2.2 Starting ConsoleOne on Linux
1In a terminal window, become root by entering sux and the root password.
The sux command enables the X Window System*, which is required for running
ConsoleOne.
2Enter the following command:
/usr/ConsoleOne/bin/ConsoleOne

ConsoleOne Administration Tool 41
novdocx (en) 11 December 2007
2.3 ConsoleOne in a Multiple-Platform
Environment
If your GroupWise system includes multiple platforms, you can administer Linux domains from
Windows ConsoleOne or to administer NetWare or Windows domains from Linux ConsoleOne. The
cross-platform connections required for cross-platform GroupWise administration are described in
the following sections of “Migration” in the GroupWise 7 Installation Guide:
“Using Windows ConsoleOne to Access Domains and Post Offices on Linux”
“Using Linux ConsoleOne to Access Domains and Post Offices on NetWare or Windows”

42 GroupWise 7 Administration Guide
novdocx (en) 11 December 2007

GroupWise View
3
novdocx (en) 11 December 2007
43
3
GroupWise View
When administering GroupWise®in ConsoleOne®, you can use the standard Novell®eDirectoryTM
View or you can use the GroupWise View. The following sections discuss the GroupWise View and
how to use it:
Section 3.1, “eDirectory View vs. GroupWise View,” on page 43
Section 3.2, “GroupWise Object Icons,” on page 44
Section 3.3, “Customizing the GroupWise View,” on page 46
Section 3.4, “Searching in the GroupWise View,” on page 48
Section 3.5, “Performing Administrative Tasks from the GroupWise View,” on page 48
NOTE: The ConsoleOne illustrations used in the guide show ConsoleOne on Windows.
ConsoleOne on Linux appears different but provides substantially the same functionality.
3.1 eDirectory View vs. GroupWise View
The eDirectory View displays the GroupWise objects in their contexts in the eDirectory tree, as
shown in the following example.
Figure 3-1 eDirectory View
The GroupWise View filters out all non-GroupWise objects and shows how the GroupWise objects
relate to each other in the GroupWise system, as shown in the following example.

44 GroupWise 7 Administration Guide
novdocx (en) 11 December 2007
Figure 3-2 GroupWise View
In the left pane, all Domain objects are displayed under the GroupWise system, and all Post Office
objects are subordinate to the domains where they reside. You can select the GroupWise system, a
domain, or a post office in the left pane and then use the drop-down list of GroupWise objects on the
toolbar to display associated objects (Users, Resources, Message Transfer Agents, and so on) in the
right pane. In the above example, the GroupWise System is selected in the left pane and the
GroupWise Object list is set to Users, so the right pane is displaying all users in the entire
GroupWise system.
3.2 GroupWise Object Icons
The following table lists all the GroupWise objects that are displayed in the eDirectory View or
GroupWise View in ConsoleOne.
Table 3-1 Object Icons
Icon GroupWise Object Additional Information
GroupWise System Represents the GroupWise system you are currently connected
to. The GroupWise system’s name is displayed in the lower left
corner of the ConsoleOne window.
Primary Domain Represents the system’s primary domain. To ensure
consistency, all replication of GroupWise information to the
GroupWise domain and post office databases takes place
through the primary domain. For additional information, see
Part II, “Domains,” on page 109.
Secondary Domain Represents any additional domains, other than the primary,
created in the GroupWise system. For additional information,
see Part II, “Domains,” on page 109.
Current Domain Represents the domain to which ConsoleOne is currently
connected. For information about changing the current domain,
see Section 9.1, “Connecting to a Domain,” on page 127.