CHAPTER 3

User/Group Management



This chapter describes how to add, delete, or modify user and group entries using the SIMS Admin Console. Corresponding command-line utilities are also referenced. See the utility's man page for complete information (imadmin utility man pages are at /opt/SUNWmail/admin/man or <basedir>/opt/SUNWmail/admin/man on an high availability installation).

FIGURE  3-1 User Manager Page

Note - We recommend using the Admin Console or imadmin utilities to create, delete, and modify mail entries, however, if you have modified the SIMS schema you may need to use the directory service commands ldapadd, ldapmodify and ldapdelete instead. For Refer to the man pages in /opt/SUNWconn/man.

User Management Topics and Tasks



TABLE  3-1   User Manager Topics and Tasks
Topic/Task
 Description
 Page

To Create a User Entry  

How to add a new mail/calendar user to the directory.  

28  

To Create a Group Entry  

How to add a group entry to the directory.  

33  

View a Domain  

View a domain in the DIT  

38  

To Find and View User/Group Entries  

Searching for an entry and displaying its property sheet.  

38  

To Delete a User or Group Entry from the Directory  

How to remove a user or group entry from the directory.  

41  

To Modify a User Entry  

Changing User entries.  

41  

To Modify a Group Entry  

Changing a group entry.  

49  

User Management Error Messages  

Error messages that occur when doing user management.  

329  

User/Group Management Commands and Attributes

Email users and groups are defined my entries in the SIMS directory server. Routing and personal information about groups and users are specified by assigning values to the desired SIMS LDAP attributes. This can be done directly by modifying a user or group's LDAP entry (see the SIMS Provisioning Guide), by using the imadmin provisioning utilities (see the imadmin man page), or by using the Admin Console. This chapter focuses primarily on the Admin Console.

TABLE  3-2   User and Group Management Commands

imadmin-add-user  

imadmin-add-group  

imadmin-modify-user  

imadmin-modify-group  

imadmin-delete-user  

imadmin-delete-group  

imadmin-search-user  

imadmin-modify-group  



TABLE  3-3   User Attributes/Fields  
Field
 Description

Personal Information/Name  

Distinguished name (dn)  

(Required.) A unique path name associated with a user entry that reflects the hierarchy of the directory information tree.  

Full name  

(Required.) Stores the possible variations of the first name, last name, and middle initial fields combined. The middle initial is optional. Examples of full names for one particular user are Harrison Green, Harry Green, and Harry A. Green.  

First Name  

(Not required.) For example, in the case of Harry Green, the first name is Harry.  

Last Name  

(Required.) A last name is a surname, for example, in the case of Harry Green, the last name is Green.  

Middle Initial  

(Not required.) The middle initial is the first letter of the middle name, for example, in the case of Harry A. Green, the initial is A.  

Title  

(Not required.) A business or personal title, for example, Accountant or Avid Science Fiction Fan, respectively.  

Personal Information/Telephone  

Telephone Number  

(Not required.) Can also include extension number.  

Fax Number  

(Not required.) Self explanatory.  

Pager Number  

(Not required.) Self explanatory.  

Mobile Phone Number  

(Not required.) Self explanatory.  

Personal Information/Address  

Postal address  

(Not required.) Self explanatory.  

Location  

(Not required.) Self explanatory.  

Office Number  

(Not required.) Self explanatory.  

Personal Information/Miscellaneous  

Home Page  

(Not required.) The Uniform Resource Locator (URL) for a home page.  

Description  

(Not required.) Self explanatory.  

Additional Information  

(Not required.) Self explanatory.  

System Information  

Login name  

(Required.) Unique identification (ID) for user, for example, harryg.  

Password  

(Required.) Password associated with login name field; can be stored clear (unscrambled) or encrypted (scrambled)  

Mail Information  

Email Person Status  

Active of inactive.  

Mail Host  

(Required.) Name of the user's mail server.  

Internet Mail Delivery Options  

(Required.)

Location of user's Inbox. Can be either /var/mail or the Sun Message Store. If

/var/mail, then must specify mailbox directory. Can optionally enable auto reply, program, forward, and append to file features.  

Program Delivery Info  

(Required if program feature is enabled in Internet Mail Delivery Options.)

Specifies one or more commands with arguments to deliver to a UNIX program.  

Forwarding Address  

(Required if forward feature is enabled in Internet Mail Delivery Options.)

Internet address to which email should be forwarded.  

Delivery File  

(Required if append to file feature is enabled in Internet Mail Delivery Options.)

Pathname of file to which email should be attached to the end of.  

Calendar Information  

Calendar Host  

(Required for Web Access calendars.) Calendar Server host name  

Default Calendar  

(Required for Web Access calendars.) Name of default Calendar.  



TABLE  3-4   Group Attributes/Fields  
Field
 Required
 Description

General info./General  

Distinguished name (dn)  

(Required.) A unique pathname associated with a group entry that reflects the hierarchy of the directory information tree (DIT).  

Full name  

(Required.) A full name is the possible variations of the group address. An example of a full name for one particular group is marketing.  

Mail domain  

(Required.) The mail domain in which a group's mail server resides, for example, sales.alpha.com.  

Send Error Conditions To  

(Required.) The individual who receives a notice when an error condition related to the distribution list arises, for example, if a message addressed to the distribution list cannot be delivered.  

Send Request Messages To  

(Required.) The individual who receives a notice when another individual requests being added as a distribution list member.  

Mail Host  

(Required.) The hostname of the group's mail server.  

Password  

(Required.) Password associated with group and with a shared mailbox; can be stored clear (unscrambled) or encrypted (scrambled). You are prompted for this password when attempting to modify group entry attributes using the command line interface or the user administration interface.  

General info./Telephone  

Expandable  

(Not Required.) Make list of members for a particular group or distribution list accessible to all users.  

Telephone Number  

(Not Required.) Telephone number for the group. Can include extension number.  

Fax Number  

(Not Required.) Fax number for the group.  

Pager Number  

(Not Required.) Pager number for the group.  

Mobile Phone Number  

(Not Required.) Mobile phone number for the group.  

General info./Address  

Postal address  

(Not Required.) Postal address for the group.  

Location  

(Not Required.) Location for the group.  

Building  

(Not Required.) Building of the group.  

Office Number  

(Not Required.) Office number for the group.  

Home Page  

(Not Required.) The Uniform Resource Locator (URL) for a home page.  

Description  

(Not Required.) Description for the group.  

Additional Information  

(Not Required.) Additional information for the group.  

Owner  

Owner  

(Required.) An owner is an individual who is responsible for a distribution list. An owner can add or delete distribution list members.  

Moderator  

Moderator  

(Not Required.) If moderator feature is enabled, a message addressed to a distribution list is initially sent to the moderator only. The moderator can take one of the following actions: forward the message to the distribution list, edit the message and then forward it, or not forward the message.  

Member Information  

Member  

A member is a user or group who receives a copy of an email addressed to a distribution list.  

Additional Delivery Options  

Shared Mailbox  

(Not Required.) Specifies that messages are delivered to a shared mailbox in the Sun Message Store.  

Program  

(Not Required.) Specifies one or more commands with arguments to deliver to a UNIX program.  

Append to File  

(Not Required.) Path name of file to which email should be appended (attached to the end of).  

Access Control  

Authorized Domain  

(Not Required.) Domain name from which users or groups are authorized to send messages to a particular distribution list.  

Unauthorized Domain  

(Not Required.) Domain name from which users or groups are not authorized to send messages to a particular distribution list.  

Authorized Submitter  

(Not Required.) Name of user or group who are authorized to send messages to a particular distribution list. If the user or group is internal to the email system, specify the distinguished name; if external to the email system, specify an email address in RFC 822 format.  

Unauthorized Submitter  

(Not Required.) Name of user or group who are not authorized to send messages to a particular distribution list. If the user or group is internal to the email system, specify the distinguished name; if external to the email system, specify an email address in RFC 822 format.  

Admin Console User Management

This section describes user management using the SIMS Admin Console.


 

To Create a User Entry

Utility: imadmin-add-user

There are three kinds of users: an email and e-calendar user, an email-only user, or a e-calendar-only user. The Admin Console is useful for manually adding or modifying a small number of user entries after initial directory population. To initially populate the directory or to add a large number of user entries at one time, refer to Chapter 9, "Populating SIMS with Users and Groups or the SIMS Provisioning Guide.

Note - Newly created users will not receive mail until after an incremental or full dirsync occurs. See "To Reconfigure the Alias Synchronization Schedule" on page 89.

AdminConsole>User Manager>Select Domain in Mail Directory>Create pulldown>User  

  1. In the Admin Console home page, click the User Manager icon.
  2. Select the domain in the Mail Directory in which you wish to create the user.
  If you are displaying the domain in which you wish to create a user, go to step 2. If it is not displayed, select User Manager>Select Choose Domain to Browse. Enter the fully qualified domain name under which the user entry will be created. For example: stream.com.
  3. Select Create>User.
  4. Select one of the three user types as shown below and click Next.
 

FIGURE  3-2 Add User Task Mentor Dialog for User Type

  5. Enter user's login name in First Step window and click Next
 
  6. Enter the full name and password (password is case-sensitive) and click Next.
 

FIGURE  3-3 Add User Task Mentor Dialog for User Credentials

Note - The option you select in Step 4 determines the next dialog window to appear.
  7. Enter the information for the option you selected in Step 4and click Next. If you chose Calendar Use Only for Step 4, press Create User for Option 3 Calendar User Only.
 

FIGURE  3-4 Options for Mail and Calendar, Mail Only, or Calendar Only Users.

  8. For Mail and Calendar Users, enter the Mail Host name and Mail Domain.
 

FIGURE  3-5 Mail User's Host and Domain Dialog.

  9. If necessary, enter the preferred originator address for the user.
 

FIGURE  3-6 Dialog for Preferred Originator.

  10. If finished, click Create User.

 

To Create a Group Entry

Utility: imadmin-add-group

A group entry is also known as a distribution list. When a message is sent to the group address, SIMS sends the message to all members in the group. You can also create a shared mailbox to which all the messages sent to the group are saved. To do this, first create a group entry (instructions below), then modify the group entry by following the instructions in "To Modify a Group Entry" on page 49, for creating the shared mailbox.

Note - The Admin Console is practical for adding small numbers of group entries. To add large numbers of group entries at one time, see Chapter 9, "Populating SIMS with Users and Groups" and the SIMS Provisioning Guide.

AdminConsole>User Manager>Create pulldown>Group  

  1. In the Admin Console home page, click User Manager.
  2. Select the domain in which you wish to create the group.
  If the desired domain is not displayed, Select User Manager>Select Choose Domain to Browse. Enter the fully qualified domain name under which the user entry will be created. For example: stream.com. You must have a domain before you can create a group.
  3. Choose Group from the Create menu.
  The Add Group Task Mentor dialog displays.
  4. Enter the group name, mail domain, and password. Press the Enter or Return key after entering each field.
  The login name is case-insensitive. The mail domain must be fully qualified. For example, you could input the following for the distribution list writers:
  Name: writers
Mail Domain: bridge.net
Password: ******
Verify password: ******
  5. Click the Next button.
  6. Identify the owner of the distribution list.
  The owner can add or delete distribution list members. The owner must be a user in that domain.
  a. Specify the owner's email address.
  The email address must be fully qualified. For example, to specify Chamique Campbell as the owner of the distribution list, enter the following email address:
  chamique.campbell@bridge.net
  b. Click the Next button.
  The next Add Group Task Mentor dialog appears.
  7. Do you want the distribution list to be moderated?
  A moderator is member of the group--usually the owner of the distribution
list--who initially receives a message addressed to a distribution list. Upon receipt of a message, the moderator can forward the message to the distribution list, edit the message then forward it to the distribution list, or not forward the message to the distribution list. During creation you can only designate one moderator, however, you can add additional moderators by modifying the group entry ("To Modify a Group Entry" on page 49)
  a. Click the Yes radio button if you want the distribution list to be moderated. Click No if you do not want the distribution list to be moderated.
  b. If you decided to have the distribution list moderated, specify the moderator's email address.
  The email address must be fully qualified, though it can be outside of the email domain. For example, to specify Bernie Miller as the moderator of the distribution list, enter the following email address:
  bernie.miller@bridge.net
  c. Click the Next button.
  8. Do you want the group members viewable by the <expn> command?
  a. Click the Yes radio button if you want the distribution list members to be viewable by all users in the email system. Click the No radio button if not.
  b. If you clicked the Yes button, you must set up a mail host through which the distribution list members can be viewed.
  Enter a fully qualified mail host name. For example, to designate mailhost1 in the bridge.net domain as the mail host through which the members can be viewed, enter the following:
  mailhost.bridge.net
  Users in the email system can view the list of members by establishing a telnet session with the specified mail host, specifying port 25, and using the following syntax:
  expn <distribution-list-name>
  For example, to view the distribution list of writers, enter the following command:
  expn writers
  c.

FIGURE  3-7 Add Group Task Mentor Dialog

  d. Add members by clicking the Add button.
 

FIGURE  3-8 Add Member Dialog with Yes Button Pressed.

  e. If a desired member is a mail user in your organization, click the Yes radio button. If the desired member is not a user in your organization, click No.
  Two versions of the Add Member dialog exist. The version that appears will depend on whether you selected the Yes or No radio button.
  f. If you are specifying a member who is a user in the organization, perform the following steps:
  i. Search for the member's user entry by specifying a portion of the user's full name.
  A full name is any of the possible variations of a user's first name, last name, and middle initial. For example, if you want to specify Bernie Miller as a member, you can specify portion of the following full names that appear in Bernie's user entry:
  Bernard Miller
Bernie Miller
Bernard A. Miller
Bernie A. Miller
  Click the Find button. Once the search is completed, the mail address(es) of the user entry(ies) that match the search parameters appears in the table. Click the address of the desired member. If the search did not yield desired results, perform another search.
  ii. Click the Add button.
  iii. Repeat the previous two steps for each internal member you want to add.
  iv. When you are finished adding internal members, click the Done button.
  g. If you are adding a member who is not a user within your organization, press

FIGURE  3-9 Add Member Dialog for External Members.

  Perform the following steps:
  i. Enter the Internet address of the desired member.
  Enter an address in ASCII characters. You can enter the characters in either uppercase or lowercase. For example: cstengel@stream.com
  ii. Click the Add button.
  iii. Repeat previous two steps for each external member you want to add.
  iv. When you are finished adding external members, click the Done button.
  h. To delete a member, click the member entry in the display to highlight it, then click the Delete button.
  9. Click the Create Group button.
  10. If finished, click the Done button.

 

View a Domain

  1. From the Admin Console home page, click the User Manager icon.
  2. Select User Manager>Choose Domain to Browse.
 

FIGURE  3-10 Viewing Domains

Note - You cannot browse ROOT to view top-level domains such as .com, .org, .gov, or .edu. To view a top-level domain (that is, any child of o=internet) you must enter the domain name in the Choose Domain to Browse dialog. For example, to view all the .org domains, you would enter org. Note also that the Mail directory presents a view of the Domain Component (DC) tree, not the OSI tree. If your data is in an OSI tree, SIMS will map it to a DC tree. Refer to the Schema chapter in the SIMS Reference Manual for mapping details.
  3. Click on the domain folder to view People and Groups.

 

To Find and View User/Group Entries

Utility: imadmin-search-user/group



AdminConsole>User Manager>User Manager pulldown to Choose Domain to Browse>Highlight People or Groups>Find  

  1. From the Admin Console home page, click the User Manager icon.
  2. Set the Maximum Number of Hits.
  If there are many thousands of entries in your system, you may wish to limit the number of entries displayed on a search. On the User Manager pull-down, select Configure Maximum Hits and enter the maximum number of entries you would like displayed.
  3. Select the domain and organizational unit (People or Group) that contains entry you wish to view.
  4. Select User Manager>Choose Domain to Browse.
  Enter a fully qualified domain name to view. For example, entering com lists all its subdomains. Next click the root folder and any subsequent folders to view the domain containing the desired entry to view. Finally click People or Group.
 

FIGURE  3-11 Browsing the Mail Directory

  5. Type the name or part of the entry you want to view and press Find, or press Display All to display entries without regard to find parameters.
  Pressing Find or Display All loads the first 50 entries. Load additional entries by scrolling down. The number of entries loaded will equal Maximum Hit. (Maximum Hit can be configured by selecting Configure Maximum Hits from the User Manager pull-down menu. The default is 2000.)
Note - If your browser does not scroll down, and you know you have more than 50 entries, you need to set the security property to low for the browser. See "Preventing the "Warning Applet" Banner" on page 270.
 

FIGURE  3-12 Full Find Menu

  6. Once you find the entry you are searching for, double-click the entry.
 

FIGURE  3-13 User Property Book


 

To Delete a User or Group Entry from the Directory

Utility: imadmin-delete-user/group, imadmin-purge-user/group

To completely remove a user or group from SIMS you must mark deletion of the user/group's entry from the SIMS directory and run imadmin-purge-user/group.

AdminConsole>User Manager>Highlight user>Selected Delete  

  1. Display the entry to delete in the Content Table of the User Manager Property Book.
  See "To Find and View User/Group Entries" on page 38.
  2. Highlight the entry and choose Delete from the selected menu.
  A dialog box prompts you to confirm the deletion of the entry. Click OK. The entry is now marked for deletion from the SIMS LDAP directory. The entry still exists until the imadmin-purge-user command is executed.
  3. Synchronize the cached directory.
  Even though the entry is removed from the SIMS directory, it still remains in the IMTA directory cache until the cache is synchronized with the SIMS directory. Run an incremental dirsync (imta dirsync) is to update the IMTA cache after a delete and before a purge. A full dirsync (imta dirsync -F) is necessary to update the cache following a purge. You can run a full directory synchronization or simply wait until the scheduled dirsync occurs.
  4. Remove the user's folders and mailboxes from the mailstore.
  Wait at least two minutes after running imta dirsync -F, then execute the
imadmin-purge-user or imadmin-purge-group utility. This short wait ensures that the message queue is cleared before removing the folders and mailboxes. The /imadmin-purge-* command can be run immediately or periodically as desired.

 

To Modify a User Entry

Utility: imadmin-modify-user

A user entry or user profile contains information on a user. TABLE 3-3 describes each user entry field. Note that since the entry was already successfully created, no additional fields need to be added for the entry to be operational. This section describes fields that can be modified or added to the entry.

AdminConsole>User Manager>Display then double click the user entry  

  1. Display the user's Property Book.
  See "To Find and View User/Group Entries" on page 38. The user's property book contains a number of configurable property fields (see TABLE 3-3 on page 25 for a complete list of fields). The following fields are mandatory:
Full name
Last name
Login name
Password
Mail host
Preferred originator address
Mail aliases
  If you specify the delivery channel type as Internet in the Mail Information section, you must also configure Internet mail delivery options. The configuration of all other fields is not required.
  2.

FIGURE  3-14 Name Section

  The full name and last name fields are required. All other fields in this section are not required.
  a. Enter full name(s).
  You can also enter variations of the full name. Click the Add button under the Full Name field for each full name you enter.
  b. Enter last name.
  Enter the same last name specified in the full name field.
  c. Optional: Enter the First Name, Middle Initial, and Title Fields if desired.
  For the first name field, you can enter first name variations. For each given name you enter, click the Add button under the First Name field.
  3. Optional: Enter the fields in the Telephone section (see FIGURE 3-15).
  Click the Telephone tab. Enter the telephone numbers in any desired syntax. For each entry, click the Add button under the appropriate field.

FIGURE  3-15 Telephone Section

  4. Optional: Enter the fields in the Address section.
  Click the Address tab (FIGURE 3-16). Configure the desired fields.

FIGURE  3-16 Address Section

  5. Optional: Enter the fields in the Miscellaneous section.
 

FIGURE  3-17 Miscellaneous Section

  6. Configure the fields in the System Information section.
 

FIGURE  3-18 System Information Section

  a. Configure the password field.
  Enter a password for the user in ASCII characters, once in each Password text field. You can enter the characters in either uppercase or lowercase. For example, a valid entry is as follows:
  Abra_CaDabra
  For security reasons, the mail server by default stores the password in an encrypted or scrambled state. Later, the user can change the default password. (See the SIMS Delegated Management Guide for information on how the user can change the mail password.)
  If the group has an existing encrypted password, you can use either of the following syntaxes to load the encrypted password into the mail server:
  {crypt}<password> or
{sunds}<password> (If you are using the Sun Directory Server)
  Refer to the Netscape documentation for the encryptions methods that it supports.
  7. Configure the fields in the Mail Information section.
 

FIGURE  3-19 Mail Information Section

  The mail host and preferred originator address in this section are required. All other fields in this section is not required.
Note - There are two radio buttons labeled Disable Mail Fields and Enable Mail Fields in the mail information section. If an entry is defined as a calendar-only user, then the Mail Information section will be disabled. Later, if you wish to change the entry to support mail, you can click the Enable Mail Fields button and enter mail information in this section.
  a. Set user status.
  Status can be set to Active (user's account is active and the user may use all service granted) or Inactive (user's account is inactive and the user may not use any services granted; service requests for a user marked as Inactive return transient failures). Inactive maybe used to suspend usage of the group without actually deleting the group entry or mailbox.
  b. Configure the mail host field.
  Enter the host name, including the full domain name, of the user's mail server in ASCII characters. Enter the characters in lowercase. For example, if the host name for user Harry Green's mail server is mailserver1 and this mail server exists in the stream.com domain, then the following is a valid entry:
  mailserver1.stream.com
  c. Configure the preferred originator address field.
  Enter the email address that a recipient within the email system will see when a message from the user is received. Enter the address in uppercase or lowercase ASCII characters. The format of the address must be in RFC 822 format:
  harry.green@mailserver1.stream.com
  d. Configure the mail aliases field.
  Enter alternate email aliases, if any, defined for the user. Mail to this alias will be delivered to the user associated with this entry. The value in this attribute must be unique in the domain. Example:
  harryg@stream.com
  Click the Add button under the mail aliases field for each address that you enter.
  8. If necessary configure the Internet Delivery Options (FIGURE 3-20).
 

FIGURE  3-20 Internet Mail Delivery Options (Composite Picture)

  a. Check Enable Inbox to enable reading of mail.
  b. Press which message store the user's Inbox will reside in.
  Click the radio button for either the Sun Message Store or /var/mail (VarMail Store). We highly recommend the Sun Message Store as it is more secure, more space efficient, more centralized, and much more easy to back up than /var/mail.
  i. If you specified the Sun Message Store, set the maximum amount of hard disk space or quota that the user's mailboxes can occupy.
  This message store quota only takes effect if the User Quota Enforcement option in the Message Store Property Book is set to On. (See "User Quota Enforcement" on page 168 and "To Configure Advanced Options" on page 170 for details.). The following size limit options are offered:
  Use Default User Quota - Default user quota is set in the Advanced Options section of the Message Store Property Book. It is factory set to 20 Mbytes.
  No Store Limit - the user has unlimited message store space.
  Set Individual Quota - Select a number and the unit of measure (Kilobytes or Mbytes). This quota will not take effect until an incremental or full directory synchronization occurs (see "Alias Synchronization Schedule" on page 87 or see the dirsync, iminitquota, and imquotacheck man pages for more information).
  ii. If you specified that the user's Inbox will reside in /var/mail, then a user directory will automatically be created in /var/mail/<userID>.
  If you want it to be under some other directory, you need to create it. Any mail sent to the user before the directory is created will be lost.
  c. Optional: Enable the delivery of email to UNIX programs by clicking the Program check box.
  Enter a pre-configured method name defined by the
imta program -a -m <method name> -p <program name>
command (see the imta-program man page and "To Make Delivery Programs Available to Users" on page 86, and press Add.
  d. Optional: You can enable the forwarding of email to specified addresses by clicking the Forward check box.
  When specifying a forwarding address, use the following syntax:
  <user>@<domain>
  For example, to forward a message to Harry Green, enter the following:
  harry.green@stream.com
  Enter the forwarding address in ASCII characters and press Add. You can enter the characters in either uppercase or lowercase. You can provide multiple forwarding addresses. For each address, click the Add button under the Forward field. (See the SIMS Delegated Management Guide for information on how the user can set the forwarding address.)
  e. Optional: You can enable the appending of email to specified files by clicking the Append to File check box.
  Specify the full path name of the file. For example, you can specify the following:
  /home/harryg/widget/component.txt
  The email will be attached to the end of the component.txt file. Enter the file name in ASCII characters. You can enter the characters in either uppercase or lowercase. You can provide multiple file names. For each file name, click the Add button under the Append to File field.
  9. Configure the Calendar Information.
 

FIGURE  3-21 Calendar Information

  If the entry is a calendar-only entry, the Internet Mail Delivery Options are disabled. That is, the Disable Mail Field radio button in the Internet Mail Delivery Options section will be pressed. If you press the Enable Mail Field radio button, then you must fill in the mandatory mail configuration fields: mail host, preferred originator address, and mail aliases.
  10. When you have input required and optional fields for a user, click the Apply button at the bottom of the Add User page.
  If you entered a field incorrectly, an error message will identify the field. Refer to the documentation for the correct syntax and reenter the field. Click either the OK or Apply button.

 

To Modify a Group Entry

Utility: imadmin-modify-group

A group or distribution list entry contains information about a distribution list. TABLE 3-3 describes each group entry field and whether a field is required or optional.



AdminConsole>User Manager>Display the Group Entry and double click on it.  

  1. Display the group entry property book.
 

FIGURE  3-22 Group Entry Property Book--General Information.

  2. Modify the fields in the General Information section as desired (FIGURE 3-22).
  a. Full Name cannot be modified.
  b. Enter the Send Error Conditions To and the Send Request Messages To fields.
 

FIGURE  3-24 External Address Lookup Dialog

  To specify someone in your organization, search for their mail user entry by specifying their full name or a portion of it and then clicking the Find button to display a list of matches. If the search did not yield desired results, perform another search. Click the address of the desired user and click Add.
  To specify someone outside your organization, enter their Internet address in either uppercase or lowercase ASCII characters. Click the Add button.
  Pressing the delete button will remove the entry from the corresponding field. Pressing Apply after making those entries blank will send error and request messages to the originator.
  c. Configure the mail host field.
  The host name should be the fully qualified name of the group's mail server in lowercase ASCII characters.
  d. Configure a password.
  Enter a default password for the group and the shared mailbox, if applicable, in ASCII characters. Enter the characters in either uppercase or lowercase. For example:
  Abra_CaDabra
  This password is required when attempting to modify the group entry fields using the imadmin-modify-group command. For security reasons, the mail server by default stores the password in an encrypted or scrambled state.
  Later, the group can change the default password using the email user's configuration interface. (See the SIMS Delegated Management Guide for information on how the user can change the mail password.)
  If the group has an existing encrypted password, you can use either of the following syntaxes to load the encrypted password into the mail server:
  {crypt}<password> or
{sunds}<password> (If you are using the Sun Directory Server)
  e. Make the member list accessible to all users if desired.
  Click the check box labeled Expandable to make the distribution list members accessible to all users. Users can use the SMTP EXPN command to expand (get the membership of) distribution lists. If not checked, SMTP will have an Access to List Denied message.
  3. Optional: Enter the fields in the Telephone section.
  Click the Telephone tab to display the Telephone section (FIGURE 3-25). Enter the desired fields. You can provide multiple entries for each field in this section. For each entry, click the Add button under the appropriate field.

FIGURE  3-25 Telephone Section

  4. Optional: Configure the fields in the Address section.
  Click the Address tab to display the Address section and fill in the address as desired.
  5. Optional: Complete the fields in the Miscellaneous section if desired.
 

FIGURE  3-26 Miscellaneous Section

  6. Configure the fields in the Owner/Moderator section.
 

FIGURE  3-27 Owner/Moderator Section

  An owner is an individual who is responsible for a distribution list. An owner can add or delete distribution list members and must be a local email user. A moderator is an individual, usually the owner of the distribution list, who initially receives a message addressed to a distribution list. Upon receipt of a message, the moderator can forward the message to the distribution list, edit the message, and then forward it to the distribution list, or not forward the message to the distribution list. A moderator can be local or non-local. External indicates that the address is not local to the mail system.
  Although a distribution list is created with an owner, you can configure a group as moderator only. Both owner and moderator fields are not required.
  a. To modify an existing owner/moderator, click the Modify button.
  Click the check boxes labeled Owner and Moderator to modify the role(s) of the existing owner as appropriate. Click the Add button.
  b. To delete an existing owner/moderator, click the owner/moderator entry in the Owner/Moderator screen to highlight it, then click the Delete button.
  c. To configure an owner/moderator for the group, click the Add button.
  i. If the group owner/moderator is a user in the email system, click the radio button labeled Internal. FIGURE 3-28 is displayed. If the group owner/ moderator is not configured as a user in the email system, click the External button. FIGURE 3-29 is displayed.
 

FIGURE  3-28 Internal Add Owner Dialog

 

FIGURE  3-29 External Add Owner Dialog

  ii. If the owner/moderator is a local user, perform a search for her entry by entering her name or a portion of it and clicking the Find button. Click the preferred recipient address of the desired owner/moderator. If the search did not yield desired results, perform another search.
  Click the check box labeled owner. If desired, click the check box labeled moderator.
  Click the Add button.
  iii. If the owner/moderator is not in the local email system, specify her Internet address.
  Enter the address and click the check box labeled moderator. Note that group owners must be local. Click the Add button. Press Done when finished.
  7. Add or delete members to the group.
  Click Member Info Section (FIGURE 3-30).
 

FIGURE  3-30 Member Info Section

  a. To delete an existing member, click the member entry in the Member screen to highlight it, then click the Delete button.
  b. To add group members, click the Add.
  i. If the desired member is a user in the local email system, click the radio button labeled Internal.
  An internal Add Member Dialog is displayed (see FIGURE 3-23 on page 51). If the desired member is not configured as a user in the email system, click the External button to display external Add member dialog (see FIGURE 3-27 on page 54).
  ii. If the desired member is a local user, perform a search for her entry by entering her name or a portion of it and clicking the Find button.
  Click the address of the new member. Click the Add button and repeat this step for each member you want to add to a group. If the search did not yield desired results, perform another search.
  iii. If the member is not part of the local email system, enter her Internet address and click Add.
  Repeat this step for each member you want to add to the group.
  8. Optional: Set Group Status, Preferred Originator Address, and Mail Aliases.
 

FIGURE  3-31 Mail Information Section

  a. Status can be set to Active (group's account is active and the group may use all service granted) or Inactive (group's account is inactive and the group may not use any services granted; mail sent to a group is marked as Inactive and returned as a transient failure) using the pulldown menu. Inactive maybe used to suspend usage of the group without actually deleting the group entry or mailbox.
  b. Preferred Originator Address is the address replicated when a member presses Reply in his mail client software.
  c. Internet Mail Aliases are alternative email addresses to which mail can be sent to the group. Add or delete as desired.
  9. Optional: Configure the fields in the Additional Delivery Options section.
  Click Additional Delivery Options (FIGURE 3-32) to send mail to a shared mailbox, to a UNIX program, or to append mail to a file.
 

FIGURE  3-32 Additional Delivery Options Section

  a. If the messages will be delivered to a shared mailbox in the Sun Message Store, click the check box labeled Shared Mailbox.
  Members can only access the shared mailbox from an IMAP server, and by entering the mailbox name as follows: #shared/<distribution list name>. Note that messages are also delivered to each user as will as each group member.
  b. To enable the email delivery to UNIX programs, click the Program checkbox.
  Enter a preconfigured method name defined by the
imta program -a -m <method name> -p <program name>
command (See the imta-program man page and "To Make Delivery Programs Available to Users" on page 86).
  c. To append email to specified files, click the Append to File check box.
  Specify the full pathname of the file. For example, you can specify the following:
  /home/janec/widget/component.txt
  The email will be attached to the end of the component.txt file. You can provide multiple file names. For each file name, click the Add button under the Append to File field.
  10. Optional: Configure the fields in the Access Control section.
  These fields block specified domains and users from sending messages to the group. If nothing is specified, anyone can send messages to the list. If a moderator is created, the message first goes to the moderator. Without a moderator, the message goes to all group members.
 

FIGURE  3-33 Group Entry Access Control Section

  a. To delete an existing domain or submitter, highlight the entry, click Delete.
  b. To add an authorized or unauthorized domain, click the Add button below either the Authorized or Unauthorized Domain screen.
  The Add Domain dialog appears as shown in FIGURE 3-34. Enter the unauthorized domain and click Add. Note that you can use the wildcard character (*) as part of the specified domain.
 

FIGURE  3-34 Add Domain Dialog

  c. To add an authorized or unauthorized submitter, perform the following steps:
  i. If the submitter is a user in the local email system, click the radio button labeled Internal.
  An internal Add Submitter Dialog is displayed (seeFIGURE 3-23 on page 51). If the desired member is not configured as a user in the email system, click the External button to display external Submitter Dialog (see FIGURE 3-24 on page 51).
  ii. If the desired member is a local user, perform a search for her entry by entering her name or a portion of it and clicking the Find button.
  Click the address of the new member. Click the Add button and repeat this step for each submitter to add to the list. If the search did not yield desired results, perform another search.
  If you want to specify all members of the distribution list, you can specify the full name of the entry.
  iii. If the owner is not part of the local email system, enter her Internet address and click Add.
  Repeat this step for each member to add to the list. If you are specifying a submitter who is not a configured user or group in the email system, specify the Internet address of the desired submitter.
  11. After you have made your desired changes, click the Apply button at the bottom of the Group dialog.
  If you entered a field incorrectly, an error message will identify the field. Refer to the documentation for the correct syntax and reenter the field. Click Apply button.


Copyright© 1999 Sun Microsystems, Inc. All Rights Reserved.