Documentation Home
> Sun Java System Messaging Server 6 2005Q4 Administration Guide
Sun Java System Messaging Server 6 2005Q4 Administration Guide
Book Information
Index
Numbers and Symbols
A
B
C
D
E
F
G
H
I
J
K
L
M
N
O
P
Q
R
S
T
U
V
W
X
Preface
Chapter 1 Post-install Tasks and Layout
Creating UNIX System Users and Groups
To Create UNIX System Users and Groups
To Prepare Directory Server for Messaging Server Configuration
Location of comm_dssetup.pl
comm_dssetup.pl Requirements
Running the comm_dssetup.pl Script
To Run comm_dssetup.pl in Interactive Mode
To Run comm_dssetup.pl in Silent Mode
Creating the Initial Messaging Server Runtime Configuration
Messaging Server Prerequisites
Messaging Server Configuration Checklist
To Run the Configure Program
To Perform a Silent Installation
Installing Messaging Server Against a Directory Server Replica
To Install Messaging Server Against a Directory Server Replica
Installing Messaging Server Provisioning Tools
Schema 1 Delegated Administrator for Messaging
To Install iPlanet Delegated Administrator
LDAP Provisioning Tools
To Install Schema 1 LDAP Provisioning Tools
SMTP Relay Blocking
Enabling Startup After a Reboot
To Enable Messaging Server After a Reboot
Handling sendmail Clients
To Obtain the Proper Version of the /usr/lib/sendmail on Solaris 8
To Create the sendmail Configuration File on Solaris 9 Platforms
Configuring Messenger Express and Communications Express Mail Filters
Performance and Tuning
Post-Installation Directory Layout
Post-Installation Port Numbers
To Change Port Numbers
Chapter 2 Upgrading to Sun Java System Messaging Server
Before You Begin
Overview of the Upgrade Process
Creating Upgrade Files to Update your Configuration
About Upgrade Files
To Run the UpgradeMsg5toMsg6.pl Perl Script
Running the Upgrade Utility
Overview of the Upgrade Utility
To Run the do_the_upgrade.sh Utility
MTA Configuration
configutil Parameters
Backup Configuration
mboxlist Database
Migrating User Mailboxes
Migrating User Mailboxes to Another Messaging Server While Online
Incremental Mailbox Migration
On-line Migration Overview
To Migrate User Mailboxes from One Messaging Server to Another While Online
To Move Mailboxes Using an IMAP client
To Move Mailboxes Using the moveuser Command
To Move Mailboxes Using the imsimport Command
Chapter 3 Configuring High Availability
Supported Versions
Cluster Agent Installation
Messaging Server and High Availability Notes
Using the useconfig Utility
Veritas Cluster Server Agent Installation
Veritas Cluster Server Requirements
VCS 3.5 Installation and Configuration Notes
To Configure Messaging Server as an HA Service by Using Veritas Cluster Server 3.5
MsgSrv Attributes
Sun Cluster Agent Installation
Sun Cluster Requirements
About HAStoragePlus
Configuring Messaging Server with Sun Cluster and HA StoragePlus
To Configure HA support and HA StoragePlus
Binding IP Addresses on a Server
To Bind IP Addresses on a Server
Unconfiguring High Availability
To Unconfigure the Veritas Cluster Server
To Unconfigure Messaging Server HA Support for Sun Cluster 3.x
Chapter 4 Configuring General Messaging Capabilities
To Modify Your Passwords
Managing Mail Users, Mailing Lists and Domains
To Remove a User from Messaging Server
To Remove a Domain from Messaging Server
Managing Messaging Server with Sun ONE Console
To Manage Messaging Server with Sun ONE Console
Starting and Stopping Services
To Start and Stop Services in an HA Environment
To Start and Stop Services in a non-HA Environment
To Start Up, Shut Down, or View the Status of Any Messaging Services
To Specify What Services are Started
Automatic Restart of Failed or Unresponsive Services
Automatic Restart in High Availability Deployments
To Schedule Automatic Tasks
Scheduler Examples
To Configure a Greeting Message
To Create a New User Greeting with Console
To Set a Per-Domain Greeting Message
Greeting Message Theory of Operations
To Set a User-Preferred Language
To Set a Domain Preferred Language
To Specify a Site Language from Console
To Customize Directory Lookups
To Modify the Messaging Server LDAP User-lookup Settings by Using Console
Encryption Settings
Setting a Failover LDAP Server
To Set a Failover LDAP Server
Chapter 5 Configuring POP, IMAP, and HTTP Services
General Configuration
Enabling and Disabling Services
Specifying Port Numbers
Ports for Encrypted Communications
IMAP Over SSL
Pop Over SSL
HTTP Over SSL
Service Banner
Login Requirements
To Set the Login Separator for POP Clients
To Allow Log In without Using the Domain Name
Password-Based Login
Certificate-Based Login
Performance Parameters
Number of Processes
Number of Connections per Process
Number of Threads per Process
Dropping Idle Connections
Logging Out HTTP Clients
Client Access Controls
To Configure POP Services
To Configure the POP Service Using Console
To Configure IMAP Services
To Configure the IMAP Service from the Console
To Configure HTTP Services
To Configure Your HTTP service
Chapter 6 Enabling Single Sign-On (SSO)
Access Manager SSO for Sun Java System Servers
SSO Limitations and Notices
Configuring Messaging Server to Support SSO
Troubleshooting SSO
Trusted Circle SSO (Legacy)
Trusted Circle SSO Overview and Definitions
Trusted Circle SSO Applications
Trusted Circle SSO Limitations
Example Trusted Circle SSO Deployment Scenarios
Setting Up Trusted Circle SSO
To Set Up SSO for Messenger Express, Delegated Administrator, and Calendar Manager
Messenger Express Trusted SSO Configuration Parameters
Chapter 7 Configuring and Administering Multiplexor Services
Multiplexor Services
Multiplexor Benefits
About Messaging Multiplexor
How the Messaging Multiplexor Works
Encryption (SSL) Option
Certificate-Based Client Authentication
To Enable Certificate-based Authentication for Your IMAP or POP Service
User Pre-Authentication
MMP Virtual Domains
About SMTP Proxy
Setting Up the Messaging Multiplexor
Before You Configure MMP
Multiplexor Configuration
To Configure the MMP
Multiplexor Files
Starting the Multiplexor
Modifying an Existing MMP
Configuring MMP with SSL
To Configure MMP with SSL
To Configure MMP with Client Certificate-based Login
A Sample Topology
IMAP Configuration Example
POP Configuration Example
MMP Tasks
To Configure Mail Access with MMP
To Set a Failover MMP LDAP Server
About Messaging Multiplexor
How Messenger Express Multiplexor Works
Setting Up the Messenger Express Multiplexor
To Install Messaging Server on Proxy Machine
Configuring Messenger Express Multiplexor Parameters
To Configure Messenger Express Multiplexor Parameters
LDAP Parameters
dcroot
Default Domain
Login Separator
To Enable Messenger Express Multiplexor
Testing Your Setup
To Access Messenger Express Client
Error Messages
Administering Your Messenger Express Multiplexor
To Configure and Administer SSL
To Set Up Multiple Proxy Servers
To Manage Different Versions of Messaging Server and Messenger Express Multiplexor
To Configure the Port of the Back-end Messaging Server with the Messenger Express Multiplexor
To Configure Single Sign-on
Chapter 8 MTA Concepts
The MTA Functionality
MTA Architecture and Message Flow Overview
Dispatcher and SMTP Server (Slave Program)
Routing and Address Rewriting
Channels
Message Delivery
The Dispatcher
Creation and Expiration of Server Processes
To Start and Stop the Dispatcher
Rewrite Rules
Channels
Master and Slave Programs
Channel Message Queues
Channel Definitions
The MTA Directory Information
The Job Controller
To Start and Stop the Job Controller
Chapter 9 MTA Address Translation and Routing
The Direct LDAP Algorithm and Implementation
Domain Locality Determination
Rewrite Rule Machinery
Domain Map Determination of Domain Locality
Caching Of Domain Locality Information
Error Handling
Pattern for Domain Check Rewrite Rule
Putting It All Together
Alias expansion of local addresses
Alias Checking with LDAP URLs
The $V Metacharacter
Calling a Mapping from a URL
The $R Metacharacter
Determining the Attributes to Fetch
Handling LDAP Errors
Sanity Checks on the LDAP Result
Support for Vanity Domains
Support for Catchall Addresses
Processing the LDAP Result
Object Class Check
Entry Status Checks
UID Check
Message Capture
Seeding the Reversal Cache
Mail Host and Routing Address
Miscellaneous Attribute Support
Delivery Options Processing
Additional Metacharacters for Use in Delivery Options
Delivery Option Defaults
Start and End Date Checks
Optin and Presence Attributes
Sieve Filter Handling
Deferred Processing Control
Group Expansion Attributes
Address Reversal
Asynchronous LDAP Operations
Settings Summary
Chapter 10 About MTA Services and Configuration
Compiling the MTA Configuration
The MTA Configuration File
Mappings File
File Format in the Mappings File
Including Other Files in the Mappings File
Mapping Operations
Mapping Entry Patterns
IP Matching
Mapping Entry Templates
Wildcard Field Substitutions ($n)
Controlling Text Case ($\, $^, $_)
Processing Control ($C, $L, $R, $E)
Check for Special Flags
Entry Randomly Succeeds or Fails ($?x?)
Sequence Number Substitutions ($#...#)
LDAP query URL substitutions, $]...[
Mapping Table Substitutions ($|...|)
General Lookup Table or Database Substitutions (${...})
Site-Supplied Routine Substitutions ($[...])
Generate UTF-8 Strings
Other MTA Configuration Files
Alias File
TCP/IP (SMTP) Channel Option Files
Conversion File
Dispatcher Configuration File
Mappings File
Option File
Tailor File
Job Controller File
Examples of Use
Example of Adding Additional Pools
Aliases
The Alias Database
The Alias File
Including Other Files in the Alias File
Command Line Utilities
SMTP Security and Access Control
Log Files
To Convert Addresses from an Internal Form to a Public Form
To Set Address Reversal Controls
General Reverse Mapping Example
Channel-Specific Reverse Mapping Example
The Forward Lookup Table and FORWARD Address Mapping
The FORWARD Mapping Table
The Forward Lookup Table
Controlling Delivery Status Notification Messages
To Construct and Modify Status Notifications
To Customize and Localize Delivery Status Notification Messages
Internationalization of Generated Notices
Additional Status Notification Message Features
To Block Content Return on Large Messages
To Remove non-US-ASCII Characters from Included Headers in the Status Notification Messages
To Set Notification Message Delivery Intervals
To Include Altered Addresses in Status Notification Messages
To Send, Block and Specify Status Notification Messages to the Postmaster
Returned Failed Messages
Warning Messages
Blank Envelope Return Addresses
Postmaster Returned Message Content
Setting Per Channel Postmaster Addresses
Controlling Message Disposition Notifications
To Customize and Localize Message Disposition Notification Messages
Chapter 11 Configuring Rewrite Rules
Before You Begin
Rewrite Rule Structure
Rewrite Rule Patterns and Tags
A Rule to Match Percent Hacks
A Rule to Match Bang-Style (UUCP) Addresses
A Rule to Match Any Address
Tagged Rewrite Rule Sets
Rewrite Rule Templates
Ordinary Rewriting Templates, A%B@C or A@B
Repeated Rewrites Template, A%B
Specified Route Rewriting Templates, A@B@C@D or A@B@C
Case Sensitivity in Rewrite Rule Templates
How the MTA Applies Rewrite Rules to an Address
Step 1. Extract the First Host or Domain Specification
Step 2. Scan the Rewrite Rules
Step 3. Rewrite Address According to Template
Step 4. Finish the Rewrite Process
Rewrite Rule Failure
Syntax Checks After Rewrite
Handling Domain Literals
Template Substitutions and Rewrite Rule Control Sequences
Username and Subaddress Substitution, $U, $0U, $1U
Host/Domain and IP Literal Substitutions, $D, $H, $nD, $nH, $L
Literal Character Substitutions, $$, $%, $@
LDAP Query URL Substitutions, $]...[
General Database Substitutions, $(...)
Apply Specified Mapping, ${...}
Customer-supplied Routine Substitutions, $[...]
Single Field Substitutions, $&, $!, $*, $#
Unique String Substitutions
Source-Channel-Specific Rewrite Rules ($M, $N)
Destination-Channel-Specific Rewrite Rules ($C, $Q)
Direction-and-Location-Specific Rewrite Rules ($B, $E, $F, $R)
Host-Location-Specific Rewrites ($A, $P, $S, $X)
Changing the Current Tag Value, $T
Controlling Error Messages Associated with Rewriting ($?)
Handling Large Numbers of Rewrite Rules
Testing Rewrite Rules
Rewrite Rules Example
Chapter 12 Configuring Channel Definitions
Configuring Channel Defaults
Channel Keywords Listed Alphabetically
Channel Keywords Categorized by Function
Configuring SMTP Channels
Configuring SMTP Channel Options
SMTP Command and Protocol Support
Channel Protocol Selection and Line Terminators
EHLO Command Support
ETRN Command Support
Responding to ETRN Commands
Sending ETRN Commands
VRFY Command Support
Sending a VRFY Command
Responding to a VRFY Command
EXPN Support
DNS Domain Verification
Character Set Labeling and Eight-Bit Data
Character Set Labeling
Eight-Bit Data
Protocol Streaming
TCP/IP Connection and DNS Lookup Support
TCP/IP Port Number and Interface Address
Caching for Channel Connection Information
Reverse DNS Lookups
IDENT Lookups
TCP/IP MX Record Support
Nameserver Lookups
Last Resort Host
Alternate Channels for Incoming Mail (Switch Channels)
Target Host Choice
SMTP Authentication, SASL, and TLS
Using Authenticated Addresses from SMTP AUTH in Header
Specifying Microsoft Exchange Gateway Channels
Transport Layer Security
Configuring Message Processing and Delivery
Setting Channel Directionality
Implementing Deferred Delivery Dates
Specifying the Retry Frequency for Messages that Failed Delivery
Processing Pools for Channel Execution Jobs
Service Job Limits
Setting Connection Transaction Limits
Message Priority Based on Size
SMTP Channel Threads
Expansion of Multiple Addresses
Enable Service Conversions
Configuring Address Handling
Address Types and Conventions
822 (sourceroute)
733 (percents)
uucp (bangstyle)
header_822
header_733
header_uucp
Interpreting Addresses that Use ! and %
Adding Routing Information in Addresses
Disabling Rewriting of Explicit Routing Addresses
Address Rewriting Upon Message Dequeue
Specifying a Host Name to Use When Correcting Incomplete Addresses
Legalizing Messages Without Recipient Header Lines
Stripping Illegal Blank Recipient Headers
Enabling Channel-Specific Use of the Reverse Database
Enabling Restricted Mailbox Encoding
Generating of Return-path Header Lines
Constructing Received Header Lines from Envelope To and From Addresses
Handling Comments in Address Header Lines
Handling Personal Names in Address Header Lines
Specifying Alias File and Alias Database Probes
Subaddress Handling
Enabling Channel-specific Rewrite Rules Checks
Removing Source Routes
Specifying Address Must be from an Alias
Configuring Header Handling
Rewriting Embedded Headers
Removing Selected Message Header Lines
Generating/Removing X-Envelope-to Header Lines
Converting Date to Two- or Four-Digits
Specifying Day of Week in Date
Automatic Splitting of Long Header Lines
Header Alignment and Folding
Specifying Maximum Length Header
Sensitivity Checking
Setting Default Language in Headers
Attachments and MIME Processing
Ignoring the Encoding Header Line
Automatic Defragmentation of Message/Partial Messages
Defragmentation Channel Retention Time
Automatic Fragmentation of Large Messages
Imposing Message Line Length Restrictions
Limits on Messages, Quotas, Recipients, and Authentication Attempts
Limits on Unsuccessful Authentication Attempts
Specifying Absolute Message Size Limits
Retargeting Messages Exceeding Limit on Size or Recipients
Handling Mail Delivery to Over Quota Users
Handling SMTP Mail with Lines Exceeding 1000 Characters
Controlling the Length of General and Filename Content-type and Content-disposition Parameters
Limiting Message Recipients
Limiting Header Size
File Creation in the MTA Queue
Controlling How Multiple Addresses on a Message are Handled
Spreading a Channel Message Queue Across Multiple Subdirectories
Setting Session Limits
Configuring Logging and Debugging
Logging Keywords
Debugging Keywords
Setting Loopcheck
Miscellaneous Keywords
Process Channel Overrides
Channel Operation Type
Pipe Channel
Specifying Mailbox Filter File Location
Spam Filter Keywords
Routing After Address Validation But Before Expansion
NO-SOLICIT SMTP Extension Support
Setting Limits on Bad RCPT TO Addresses
Chapter 13 Using Predefined Channels
Predefined Channels
To Deliver Messages to Programs Using the Pipe Channel
To Configure the Native (/var/mail) Channel
To Temporarily Hold Messages Using the Hold Channel
The Conversion Channel
MIME Overview
Message Construction
MIME Headers
Content-type Header
Content-disposition Header
Selecting Traffic for Conversion Processing
To Control Conversion Processing
Conversion Channel Information Flow
To Use Conversion Channel Environmental Variables
Mail Conversion Tags
To Use Conversion Channel Output Options
Headers in an Enclosing MESSAGE/RFC822 Part
To Call Out to a Mapping Table from a Conversion Entry
To Bounce, Delete, or Hold Messages Using the Conversion Channel Output
To Bounce Messages
To Conditionally Delete Message Parts
To Hold a Message
Conversion Channel Example
Automatic Arabic Character Set Detection
To Automatically Detect Arabic Character Sets
Character Set Conversion and Message Reformatting
Character Set Conversion
Message Reformatting
Non-MIME Binary Attachment Conversion
Relabelling MIME Headers
MacMIME Format Conversions
Service Conversions
Chapter 14 Integrating Spam and Virus Filtering Programs Into Messaging Server
Integrating Spam Filtering Programs Into Messaging Server—Theory of Operations
Deploying and Configuring Third Party Spam Filtering Programs
Loading and Configuring the Spam Filtering Software Client Library
Specifying the Spam Filtering Software Library Paths
Specifying the Messages to Be Filtered
To Specify User-level Filtering
User-level Filtering Example
To Specify Domain-level Filtering
Domain-level Filtering Example
To Specify Channel-level Filtering
Channel-level Filtering Examples
To Filter from an MTA Relay to a Backend Message Store
Specifying Actions to Perform on Spam Messages
Using Symantec Brightmail Anti-Spam
How Brightmail Works
Brightmail Architecture
Brightmail Requirements and Performance Considerations
Deploying Brightmail
Brightmail Configuration Options
Using SpamAssassin
SpamAssassin Overview
SpamAssassin/Messaging Server Theory of Operations
SpamAssassin Requirements and Usage Considerations
Where Should You Run SpamAssassin?
Deploying SpamAssassin
SpamAssassin Configuration Examples
To File Spam to a Separate Folder
To Add a Header Containing SpamAssassin Score to Spam Messages
To Add the SpamAssassin Result String to the Subject Line
Testing SpamAssassin
SpamAssassin Options
The SpamAssassin mode Option
Using Symantec Anti-Virus Scanning Engine (SAVSE)
SAVSE Overview
SAVSE Requirements and Usage Considerations
Where Should You Run SAVSE?
Deploying SAVSE
SAVSE Configuration Example
To Configure SAVSE
Other Possible Configurations
SAVSE Options
The ICAP mode Option
Support for Sieve Extensions
Chapter 15 LMTP Delivery
LMTP Delivery Features
Messaging Processing in a Two-Tier Deployment Without LMTP
Messaging Processing in a Two-Tier Deployment With LMTP
LMTP Overview
To Configure LMTP Delivery
To Configure the Inbound MTA Relays with LMTP
To Configure Back End Stores with LMTP and No MTA
Configuring Relays for Sending Messages Via LMTP to Back End Systems with Message Stores and Full MTAs
Configuring LMTP on Back End Message Store Systems Having Full MTAs
LMTP Protocol as Implemented
Chapter 16 Vacation Automatic Message Reply
Vacation Autoreply Overview
Configuring Autoreply
Configuring Autoreply on the Back-end Store System
To Configure Autoreply on a Relay
Vacation Autoreply Theory of Operation
Vacation Autoreply Attributes
Chapter 17 Mail Filtering and Access Control
PART 1. MAPPING TABLES
Controlling Access with Mapping Tables
Access Control Mapping Tables—Operation
Access Control Mapping Table Flags
SEND_ACCESS and ORIG_SEND_ACCESS Tables
MAIL_ACCESS and ORIG_MAIL_ACCESS Mapping Tables
FROM_ACCESS Mapping Table
PORT_ACCESS Mapping Table
To Limit Specified IP Address Connections to the MTA
When Access Controls Are Applied
To Test Access Control Mappings
To Add SMTP Relaying
Allowing SMTP Relaying for External Sites
Configuring SMTP Relay Blocking
How the MTA Differentiates Between Internal and External Mail
Differentiate Authenticated Users' Mail
To Add Distinguishing Authenticated Submissions
Prevent Mail Relay
To Use DNS Lookups Including RBL Checking for SMTP Relay Blocking
Support for DNS-based Databases
Handling Large Numbers of Access Entries
PART 2. MAILBOX FILTERS
Sieve Filter Support
Sieve Filtering Overview
To Create User-level Filters
To Create Channel-level Filters
To Create a Channel-level Filter
To Create MTA-Wide Filters
To Create MTA-Wide Filters
Routing Discarded Messages Out the FILTER_DISCARD Channel
To Debug User-level Filters
To Debug User-level Filters
imsimta test -exp Output
imsimta test -exp Syntax
Chapter 18 Managing the Message Store
Overview
Message Store Directory Layout
How the Message Store Removes Messages
Specifying Administrator Access to the Store
To Add an Administrator Entry
To Modify an Administrator Entry
To Delete an Administrator Entry
To Protect Mailboxes from Deletion or Renaming Except by an Administrator
About Shared Folders
Shared Folder Tasks
To Create a Public Folder
To Add Shared Folders with an Email Group
To Adding an Email Group to a Shared Folder
To Set or Change a Shared Folder’s Access Control Rights
Examples
To Enable or Disable Listing of Shared Folders
To Set Up Distributed Shared Folders
Setting Up Distributed Shared Folders—Example
To Monitor and Maintain Shared Folder Data
To Monitor Shared Folder Usage
To List Users and Their Shared Folders
To Remove Inactive Users
To Set Access Rights
About Message Store Quotas
User Quotas
Domain Quotas
Exceptions for Telephony Application Servers
Message Store Quota Attributes and Parameters
Configuring Message Store Quotas
To Specify a Default User Quota
To Specify Individual User Quotas
To Specify Domain Quotas
To Deploy Quota Notification
To Enable Quota Notification
To Define a Quota Warning Message
To Specify a Quota Threshold
To Enable or Disable Quota Enforcement
To Enable Quota Enforcement
Enabling Quota Enforcement at the Domain Level
Disabling Quota Enforcement
To Set a Grace Period
To Set a Grace Period for Messages Held in the Queue
Netscape Messaging Server Quota Compatibility Mode
To Set the Automatic Message Removal (Expire and Purge) Feature
imexpire Theory of Operation
To Deploy the Automatic Message Removal Feature
To Define Automatic Message Removal Policy
Examples of Automatic Message Removal Policy
To Set Rules Implementing Automatic Message Removal Policy
Expiration Rules Guidelines
Setting imexpire Rules Textually
Setting imexpire Folder Patterns
To Set Global Automatic Message Removal Rules with the Console
To Schedule Automatic Message Removal and Logging Level
imexpire Scheduling Using the Console
Setting imexpire Logging Levels
Excluding Specified Users from Automatic Message Remove
Configuring Message Store Partitions
To Add a Partition
To Add a Message Store Partition
To Move Mailboxes to a Different Disk Partition
To Move Mailboxes to a Different Disk Partition
Changing the Default Message Store Partition Definition
Performing Message Store Maintenance Procedures
Adding More Physical Disks to the Message Store
To Manage Mailboxes
The mboxutil Utility
Mailbox Naming Conventions
Examples
To Remove Orphan Accounts
The hashdir Utility
The readership Utility
To Monitor Quota Limits
To Monitor Disk Space
Using the stored Utility
Reducing Message Store Size Due to Duplicate Storage of Identical Messages
Relinker Theory of Operations
Using Relinker in the Command Line Mode
Using Relinker in the Realtime Mode
Configuring Relinker
Backing Up and Restoring the Message Store
Creating a Mailbox Backup Policy
Peak Business Loads
Full and Incremental Backups
Parallel or Serial Backups
To Create Backup Groups
Pre-defined Backup Group
Messaging Server Backup and Restore Utilities
The imsbackup Utility
Incremental Backup
The imsrestore Utility
Excluding Bulk Mail When You Perform Backups
Considerations for Partial Restore
To Restore Messages from a Mailbox that has Been Incrementally Backed-up
To Use Legato Networker
To Back Up Data Using Legato Networker
Restoring Data Using Legato Networker
To Use a Third Party Backup Software (Besides Legato)
To Use a Third Party Backup Software (Besides Legato)
Troubleshooting Backup and Restore Problems
Message Store Disaster Backup and Recovery
Monitoring User Access
Troubleshooting the Message Store
Standard Message Store Monitoring Procedures
Check Hardware Space
Check Log Files
Check User IMAP/POP Session by Using Telemetry
Check stored Processes
Check Database Log Files
Check User Folders
Check for Core Files
Message Store Startup and Recovery
Automatic Startup and Recovery—Theory of Operations
Error Messages Signifying that reconstruct -m is Needed
Database Snapshots
Message Store Database Snapshot—Theory of Operations
To Specify Message Store Database Snapshot Interval and Location
Repairing Mailboxes and the Mailboxes Database
To Rebuild Mailboxes
Checking and Repairing Mailboxes
reconstruct Performance
Common Problems and Solutions
Messenger Express or Communications Express Not Loading Mail Page
Command Using Wildcard Pattern Doesn’t Work
Unknown/invalid Partition
User Mailbox Directory Problems
Store Daemon Not Starting
Migrating or Moving Mailboxes to a New System
Chapter 19 Configuring Security and Access Control
About Server Security
About HTTP Security
Configuring Authentication Mechanisms
To Configure Access to Plaintext Passwords
To Configure Directory Server to Store Cleartext Passwords
To Configure Messaging Server for Cleartext Passwords
To Transition Users
To Transition Users
User Password Login
IMAP, POP, and HTTP Password Login
SMTP Password Login
Configuring Encryption and Certificate-Based Authentication
Obtaining Certificates through the Administration Console
To Manage Internal and External Modules
To Request a Server Certificate
To Install the Certificate
To Install Certificates of Trusted CAs
To Request and Install a New CA Certificate
Managing Certificates and Trusted CAs
Creating a Password File
To Create Self-signed Certificates
To Create Self-signed Certificates
To Enable SSL and Selecting Ciphers
About Ciphers
To Set Up Certificate-Based Login
To Set Up Certificate-Based Login
How to Optimize SSL Performance Using the SMTP Proxy
Network Security Services Tools
Managing Certificates and Keys
certutil
cmsutil
modutil
pk12util
ssltap
Configuring Administrator Access to Messaging Server
Hierarchy of Delegated Administration
To Provide Access to the Server as a Whole
To Restrict Access to Specific Tasks
To Restrict the Task Access of a User or Group
Configuring Client Access to POP, IMAP, and HTTP Services
How Client Access Filters Work
Filter Syntax
Wildcard Names
Wildcard Patterns
EXCEPT Operator
Server-Host Specification
Client User-Name Specification
Filter Examples
Mostly Denying
Mostly Allowing
Denying Access to Spoofed Domains
Controlling Access to Virtual Domains
To Create Access Filters for Services
To Create Filters
To Create Access Filters for HTTP Proxy Authentication
To Create Access Filters for HTTP Proxy Authentication
Enabling POP Before SMTP
To Install the SMTP Proxy
Configuring Client Access to SMTP Services
User/Group Directory Lookups Over SSL
Chapter 20 Administering S/MIME for Communications Express Mail
What is S/MIME?
Concepts You Need to Know
Required Software and Hardware Components
Requirements for Using S/MIME
Private and Public Keys
Keys Stored on Smart Cards
Keys Stored on the Client Machine
Publish Public Keys in LDAP Directory
Give Mail Users Permission to Use S/MIME
Multi-language Support
Getting Started After Installing Messaging Server
The S/MIME Applet
Logging In for the First Time
Downloading the S/MIME Applet
To Enable Caching for Java 2 Runtime Environment, Version 1.4
A Basic S/MIME Configuration
To Configure the S/MIME
Accessing LDAP for Public Keys, CA certificates and CRLs Using Credentials
Setting Passwords for Specific URLs
Summary of Using LDAP credentials
Parameters of the smime.conf File
Messaging Server Options
To Set Messaging Server Options that Apply to S/MIME
Securing Internet Links With SSL
Securing the Link Between Messaging Server and Communications Express Mail
Securing the Link Between the Messaging Server and S/MIME Applet
To Secure the Communications Link with SSL
Key Access Libraries for the Client Machines
Example
Verifying Private and Public Keys
Finding a User’s Private or Public Key
When is a Certificate Checked Against a CRL?
Accessing a CRL
Proxy Server and CRL Checking
Using a Stale CRL
Determining Which Message Time to Use
Trouble Accessing a CRL
When a Certificate is Revoked
Granting Permission to Use S/MIME Features
S/MIME Permission Examples
Managing Certificates
CA Certificates in an LDAP Directory
Public Keys and Certificates in an LDAP Directory
Verifying That Keys and Certificates Exist in the LDAP Directory
Searching for One CA Certificate
Searching for a Several Public Keys
Searching for One Public Key
Network Security Services Certificates
Communications Express S/MIME End User Information
Logging In for the First Time
Prompts for Windows
Signature and Encryption Settings
Enabling the Java Console
Chapter 21 Managing Logging
Overview of Logging
Types of Logging Data
Types of Messaging Server Log Files
Tracking a Message Across the Various Log Files
Tools for Managing Logging
Managing MTA Message and Connection Logs
Understanding the MTA Log Entry Format
Enabling MTA Logging
To Enable MTA Logging on a Specific Channel
To Enable MTA Logging on All Channels
Specifying Additional MTA Logging Options
To Send MTA Logs to syslog
To Correlate Log Message Entries
To Identify Message Delivery Retries
To Log TCP/IP Connections
To Write Entries to the connection.log File
To Correlate Log Messages by Process ID
To Save User Names Associated with a Process That Enqueues Mail to the mail.log File
MTA Message Logging Examples
MTA Logging Example: User Sends an Outgoing Message
MTA Logging Example: Including Optional Logging Fields
MTA Logging Example – Sending to a List
MTA Logging – Sending to a Nonexistent Domain
MTA Logging Example – Sending to a Nonexistent Remote User
MTA Logging Example – Rejecting a Remote Side's Attempt to Submit a Message
MTA Logging Example – Multiple Delivery Attempts
MTA Logging – Incoming SMTP Message Routed Through the Conversion Channel
MTA Logging Example: Outbound Connection Logging
MTA Logging Example: Inbound Connection Logging
Enabling Dispatcher Debugging
To Enable Dispatcher Error Debugging Output
To Set Dispatcher Parameters (Solaris)
Managing Message Store, Admin, and Default Service Logs
Understanding Service Log Characteristics
Logging Levels
Categories of Logged Events
Service Log File Directories
Understanding Service Log File Format
Defining and Setting Service Logging Options
Flexible Logging Architecture
Planning the Options You Want
Understanding Logging Options
Searching and Viewing Service Logs
Search Parameters
Working With Service Logs
To Send Service Logs to syslog
To Set Logging Options Using Console
To Disable HTTP Logging
To Set the Server Log Level
To Specify a Directory Path for Server Log Files
To Specify a Maximum File Size for Each Service Log
To Specify a Service Log Rotation Schedule
To Specify a Maximum Number of Service Log Files Per Directory
To Specify a Storage Limit
To Specify the Minimum Amount of Free Disk Space to Reserve
To Specify an Age for Logs at Which They Expire
To Specify a Search and View Results
Using Message Tracing for Message Store Logging
To Enable Message Tracing
To Redirect Message Tracing to a Single Log File
To Unconfigure Message Trace Logging
To Configure LMTP Logging
Other Message Store Logging Features
Message Store Logging Examples
Message Store Logging Example: Bad Password
Message Store Logging – Account Disabled
Message Store Logging Example: Message Appended
Message Store Logging Example: Message Retrieved by a Client
Message Store Logging Example: Message Removed from a Folder
Message Store Logging Example: Duplicate Login Messages
Chapter 22 Troubleshooting the MTA
Troubleshooting Overview
Standard MTA Troubleshooting Procedures
Check the MTA Configuration
Check the Message Queue Directories
Check the Ownership of Critical Files
Check that the Job Controller and Dispatcher are Running
Check the Log Files
Run a Channel Program Manually
Starting and Stopping Individual Channels
To Stop Outbound Processing (dequeueing) for a Specific Channel
To Stop Inbound Processing from a Specific Domain or IP Address (enqueuing to a channel)
An MTA Troubleshooting Example
Identify the Channels in the Message Path
Manually Start and Stop Channels to Gather Data
To Manually Start and Stop Channels
To Identify the Point of Message Breakdown
Common MTA Problems and Solutions
TLS Problems
Changes to Configuration Files or MTA Databases Do Not Take Effect
The MTA Sends Outgoing Mail but Does Not Receive Incoming Mail
Dispatcher (SMTP Server) Won’t Start Up
Timeouts on Incoming SMTP connections
To Identify the Causes of Timeouts on Incoming SMTP Connections
Messages are Not Dequeued
To Create a New Channel
To Create a New Channel
MTA Messages are Not Delivered
Messages are Looping
Diagnosing and Cleaning up .HELD Messages
Received Message is Encoded
Server-Side Rules (SSR) Are Not Working
Testing Your SSR Rules
Common Syntax Problems
Slow Response After Users Press Send Email Button
Asterisks in the Local Parts of Addresses or Received Fields
General Error Messages
Errors in mm_init
bad equivalence for alias. . .
cannot open alias include file. . .
duplicate aliases found. . .
duplicate host in channel table. . .
duplicate mapping name found. . .
mapping name is too long. . .
error initializing ch_ facility compiled character set version mismatch
error initializing ch_ facility no room in. . .
local host alias or proper name too long for system. . .
no equivalence addresses for alias. . .
no official host name for channel. . .
official host name is too long
Compiled Configuration Version Mismatch
Swap Space Errors
File open or create errors
Illegal Host/Domain Errors
Errors in SMTP channels, os_smtp_* errors
Chapter 23 Monitoring Messaging Server
Automatic Monitoring and Restart
Daily Monitoring Tasks
Checking postmaster Mail
Monitoring and Maintaining the Log Files
Setting Up the msprobe Utility
Monitoring System Performance
Monitoring End-to-end Message Delivery Times
Symptoms of Poor End-to-end Message Delivery Times
To Monitor End-to-end Message Delivery Times
Monitoring Disk Space
Symptoms of Disk Space Problems
To Monitor Disk Space
Monitoring the Message Store
Monitoring Message Store Partitions
Monitoring the MTA Queues and Logging Space
Monitoring CPU Usage
Symptoms of CPU Usage Problems
To Monitor CPU Usage
Monitoring the MTA
Monitoring the Size of the Message Queues
Symptoms of Message Queue Problems
To Monitor the Size of the Message Queues
Monitoring Rate of Delivery Failure
Symptoms of Rate of Delivery Failure
To Monitor the Rate of Delivery Failure
Monitoring Inbound SMTP Connections
Symptoms of Unauthorized SMTP Connections
To Monitor Inbound SMTP Connections
Monitoring the Dispatcher and Job Controller Processes
Symptoms of Dispatcher and Job Controller Processes Down
To Monitor Dispatcher and Job Controller Processes
Monitoring LDAP Directory Server
Monitoring slapd
Symptoms of slapd Problems
To Monitor slapd
Monitoring Message Access
Monitoring imapd, popd and httpd
Symptoms of imapd, popd and httpd Problems
To Monitor imapd, popd and httpd
Monitoring stored
Symptoms of stored Problems
To Monitor stored
Monitoring the Message Store
Monitoring the State of Message Store Database Locks
Symptoms of Message Store Database Lock Problems
To Monitor Message Store Database Locks
Monitoring the Number of Database Log Files in the mboxlist Directory
Symptoms of Database Log File Problems
To Monitor Database Log Files
Utilities and Tools for Monitoring
immonitor-access
stored
counterutil
counterutil Output
Alarm Statistics Using counterutil
IMAP, POP, and HTTP Connection Statistics Using counterutil
Disk Usage Statistics Using counterutil
Server Response Statistics
Log Files
imsimta counters
Implementation on UNIX and NT
imsimta qm counters
MTA Monitoring Using SNMP
imquotacheck for Mailbox Quota Checking
Monitoring Using msprobe and watcher Functions
Alarm Messages
Appendix A SNMP Support
SNMP Implementation
SNMP Operation in the Messaging Server
Configuring SNMP Support for Messaging Server on Solaris 8
Monitoring from an SNMP Client
Co-existence with Other Sun Java System Products on Unix Platforms
SNMP Information from the Messaging Server
applTable
applTable Usage
assocTable
assocTable Usage
mtaTable
mtaTable Usage
mtaGroupTable
mtaGroupTable Usage
mtaGroupAssociationTable
mtaGroupErrorTable
mtaGroupErrorTable Usage
Appendix B Administering Event Notification Service in Messaging Server
Loading the ENS Publisher in Messaging Server
To Load the ENS Publisher on Messaging Server
Running Sample Event Notification Service Programs
To Run the Sample ENS Programs
Administering Event Notification Service
Starting and Stopping ENS
To Start and Stop ENS
Event Notification Service Configuration Parameters
Appendix C Managing Mail Users and Mailing Lists with the Console Interface (NOT RECOMMENDED)
Managing Mail Users
To Access Mail Users
To Create a New User
To Create a New User
To Access an Existing User
To Access an Existing User
To Specify User Email Addresses
To Specify User Email Addresses
To Configure Delivery Options
To Configure Delivery Options
Specifying POP/IMAP Delivery
To Enable POP/IMAP Delivery
Specifying Program Delivery
To Enable Program Delivery for this User
To Specify UNIX Delivery
To Specify UNIX Delivery
To Specify Forwarding Addresses
To Specify Forwarding-address Information
To Configure Auto-Reply Settings
To Enable an Auto-reply Service
To Configure Authorized Services
To Configure Authorized Services
Managing Mailing Lists
To Access Mailing Lists
To Create a New Group
To Create a New Group
To Access an Existing Group
To Access an Existing Group
To Specify Mailing List Settings
To Specify Mailing List Settings
To Specify List Members
To Define Dynamic Membership Criteria
To Add Mailing-List Members
To Add Mailing-List Members
To Define Message-Posting Restrictions
To Define Message-Posting Restrictions
To Define Moderators
To Define Moderators
Appendix D Short Message Service (SMS)
Introduction
One-Way SMS
Two-Way SMS
Requirements
SMS Channel Theory of Operation
Directing Email to the Channel
The Email to SMS Conversion Process
Sample Email Message Processing
The SMS Message Submission Process
Site-defined Address Validity Checks and Translations
Site-defined Text Conversions
Message Header Entries
Message Body Entries
Example SMS Mapping Table
Explanatory Text
SMS Channel Configuration
Adding an SMS Channel
Adding the Channel Definition and Rewrite Rules
To Add Channel Definition and Rewrite Rules
Controlling the Number of Simultaneous Connections
Creating an SMS Channel Option File
Available Options
Email to SMS Conversion Options
GATEWAY_NOTIFICATIONS
MAX_MESSAGE_PARTS
MAX_MESSAGE_SIZE
MAX_PAGE_SIZE
MAX_PAGES_PER_MESSAGE
ROUTE_TO
SMSC_DEFAULT_CHARSET
USE_HEADER_FROM
USE_HEADER_PRIORITY
USE_HEADER_REPLY_TO
USE_HEADER_RESENT
USE_HEADER_SENSITIVITY
USE_UCS2
SMS Gateway Server Option
GATEWAY_PROFILE
SMS Options
DEFAULT_DESTINATION_NPI
DEFAULT_DESTINATION_TON
DEFAULT_PRIORITY
DEFAULT_PRIVACY
DEFAULT_SERVICE_TYPE
DEFAULT_SOURCE_ADDRESS
DEFAULT_SOURCE_NPI
DEFAULT_SOURCE_TON
DEFAULT_VALIDITY_PERIOD
DESTINATION_ADDRESS_NUMERIC
DESTINATION_ADDRESS_PREFIX
PROFILE
USE_SAR
SMPP Options
ESME_ADDRESS_NPI
ESME_ADDRESS_TON
ESME_IP_ADDRESS
ESME_PASSWORD
ESME_SYSTEM_ID
ESME_SYSTEM_TYPE
MAX_PAGES_PER_BIND
REVERSE_ORDER
SMPP_MAX_CONNECTIONS
SMPP_PORT
SMPP_SERVER
TIMEOUT
Localization Options
CONTENT_PREFIX
DSN_DELAYED_FORMAT
DSN_FAILED_FORMAT
DSN_RELAYED_FORMAT
DSN_SUCCESS_FORMAT
FROM_FORMAT
FROM_NONE
LANGUAGE
LINE_STOP
NO_MESSAGE
SUBJECT_FORMAT
SUBJECT_NONE
DEBUG
Formatting Templates
Adding Additional SMS Channels
Adjusting the Frequency of Delivery Retries
Sample One-Way Configuration (MobileWay)
Debugging
Configuring the SMS Channel for Two-Way SMS
SMS Gateway Server Theory of Operation
Function of the SMS Gateway Server
Behavior of the SMPP Relay and Server
Remote SMPP to Gateway SMPP Communication
SMS Reply and Notification Handling
Routing Process for SMS Replies
SMS Gateway Server Configuration
Setting Up Bidirectional SMS Routing
Set the SMS Address Prefix
Set the Gateway Profile
Configure the SMSC
Enabling and Disabling the SMS Gateway Server
Starting and Stopping the SMS Gateway Server
SMS Gateway Server Configuration File
Configuring Email-To-Mobile on the Gateway Server
A Gateway Profile
To Configure an Email-to-mobile Gateway Profile
An SMPP Relay
To Configure an SMPP Relay
An SMPP Server
To Configure an SMPP Server
Configuring Mobile-to-Email Operation
Configure a Mobile-to-Email Gateway Profile
To Configure the Gateway Profile
Configure a Mobile-to-Email SMPP Server
Configuration Options
Global Options
Thread Tuning Options
THREAD_COUNT_INITIAL
THREAD_COUNT_MAXIMUM
THREAD_STACK_SIZE
Historical Data Tuning
HISTORY_FILE_DIRECTORY
HISTORY_FILE_MODE
HISTORY_FILE_ROLLOVER_PERIOD
RECORD_LIFETIME
Miscellaneous
DEBUG
LISTEN_CONNECTION_MAX
SMPP Relay Options
LISTEN_BACKLOG
LISTEN_CONNECTION_MAX
LISTEN_INTERFACE_ADDRESS
LISTEN_PORT
LISTEN_RECEIVE_TIMEOUT
LISTEN_TRANSMIT_TIMEOUT
MAKE_SOURCE_ADDRESSES_UNIQUE
SERVER_HOST
SERVER_PORT
SERVER_RECEIVE_TIMEOUT
SERVER_TRANSMIT_TIMEOUT
SMPP Server Options
LISTEN_BACKLOG
LISTEN_CONNECTION_MAX
LISTEN_INTERFACE_ADDRESS
LISTEN_PORT
LISTEN_RECEIVE_TIMEOUT
LISTEN_TRANSMIT_TIMEOUT
Gateway Profile Options
CHANNEL
EMAIL_BODY_CHARSET
EMAIL_HEADER_CHARSET
FROM_DOMAIN
PARSE_RE_0, PARSE_RE_1, ..., PARSE_RE_9
PROFILE
SELECT_RE
SMSC_DEFAULT_CHARSET
USE_SMS_PRIORITY
USE_SMS_PRIVACY
Configuration Example for Two-Way SMS
Additional sms_option File Settings
Performing the Loopback Test
SMS Gateway Server Storage Requirements
Appendix E Installation Worksheets
Directory Server Installation
Administration Server Initial Runtime Configuration
Directory Server Setup Script (comm_dssetup.pl)
Messaging Server Initial Runtime Configuration
Glossary
© 2010, Oracle Corporation and/or its affiliates