Release Notes for iPlanet Delegated Administrator for Messaging and Collaboration
Version 1.2 patch 1
Updated July 29, 2003
These release notes contain important information about iPlanetTM Delegated Administrator for Messaging and Collaboration 1.2 patch 1. Features and enhancements, installation notes, known problems, and other late-breaking issues are addressed here. Read this document before you install the iPlanet Delegated Administrator for Messaging and Collaboration patch release.
An electronic version of these release notes can be found at the iPlanet documentation web site: http://docs.iplanet.com/docs/manuals/messaging.html. Check the web site prior to installing and setting up your software and then periodically thereafter to view the most up-to-date release notes and manuals.
These release notes contain the following sections:
iPlanet Delegated Administrator for Messaging and Collaboration 1.2 patch 1
iPlanet Delegated Administrator for Messaging and Collaboration (also referred as iPlanet Delegated Administrator) is a web-based application for provisioning users, groups, and domains for iPlanet Messaging Server. This directory-based application provides you the ability to manage users, groups and domains in a hosted environment.
iPlanet Delegated Administrator helps in the management of user information and accounts in the iPlanet Directory Server by distributing the workload among a group of internal or external administrators.
The following list describes features available in iPlanet Delegated Administrator for Messaging and Collaboration 1.2 patch 1:
-
Hosted Domain Support. iPlanet Delegated Administrator provides virtual hosted domain support, which enables service providers to host domains and messaging for several companies.
-
Directory Integration. iPlanet Delegated Administrator supports iPlanet Directory Server which is based on the lightweight directory access protocol (LDAP) for managing and storing user and account information.
-
Delegated Administration. iPlanet Delegated Administrator gives the Top-level Administrator the ability to delegate user data management to other administrators at levels further down in the user tree.
-
Customizable User Interface. While designed to work right out of the box, iPlanet Delegated Administrator is also customizable. Delegated Administrator consists of HTML Templates that can be customized to meet an organization's specific needs.
-
Secure Communications. iPlanet Delegated Administrator ensures maximum security by integrating LDAP-based directory for delegating access and permissions for users and providing highly secure connections between the client and server through secure sockets layer (SSL).
-
Portal Interoperability. iPlanet Delegated Administrator is accessible through the portal gateway. This access is enabled for the End User Logins only.
Hardware and Software Requirements
Hardware Requirements
The minimum hardware requirements for iPlanet Delegated Administrator for Messaging and Collaboration are:
-
Approximately 1GB of disk space to support the product binaries.
-
128MB of RAM.
Client Software Recommendations
iPlanet recommends the following browsers to address the client software requirements:
-
Netscape Navigator 4.76 on Solaris 2.6, Solaris 2.8, HP Unix 11.0, Microsoft Windows NT 4.0 SP6a, Microsoft Windows 2000 SP2, and Microsoft Windows 98.
-
Internet Explorer 5.5 SP1 (Service Pack 1) on Microsoft Windows 98, Microsoft Windows 2000 SP2, and Microsoft Windows NT 4.0 SP6a.
-
End User Login is supported on Netscape Navigator 6.2 and Internet Explorer 6.0.
-
Netscape Navigator 6.2 is supported Microsoft Windows NT 4.0 SP6a, Microsoft Windows 2000 SP2, Microsoft Windows 98 SE, HP Unix 11.0, and Solaris 2.8.
-
Internet Explorer 6.0 is supported on Microsoft Windows NT 4.0 SP6a, Microsoft Windows 2000 SP2, and Microsoft Windows 98 SE.
Supported Platforms
iPlanet Delegated Administrator for Messaging and Collaboration is supported on the following platforms:
-
Solaris 2.6 for SPARC with recommended patches (see Solaris)
-
Solaris 8 for SPARC with recommended patches (see Solaris)
-
HP-UX 11.0 with recommended patches (see HP-UX)
-
Microsoft Windows NT 4.0 SP6a (see Microsoft Windows NT 4.0)
-
Windows 2000
Solaris
The supported Solaris platforms require the following patches.
-
Solaris 2.6 for SPARC with patch 105591-09 or later versions (Shared library patch for C++) and 106613-01 or later versions (character set conversion) in addition to the recommended patches listed in the link below.
-
If you install Messaging Server in the ja_JP.PCK locale, the imadmin command line utility will not work properly without the 106361-10 patch.
-
Solaris 8 for SPARC with the recommended patches listed in the link below:
A list of recommended patches for Solaris 2.6 and Solaris 8 can be found at http://access1.sun.com.
Additionally, ensure that your Solaris setup specifies how to route to hosts that are not on the local subnet. To do this, ensure that:
-
The /etc/defaultrouter file contains the IP address of the gateway system. This address must be on a local subnet.
-
The /etc/resolv.conf file exists and contains the proper entries for reachable DNS servers and domain suffixes.
-
The /etc/nsswitch.conf file includes the dns keyword in the hosts: line.
HP-UX
The HP-UX 11.0 platform requires the following operating system bundles and patches:
-
XSWGR1100 (HP-UX 11.0 General Release Patches, September 2000)
-
XSWHWCR1100 (HP-UX 11.0 Hardware Enablement and Critical Patches, September 2001)
-
PHCO_21902 (df(1M) cumulative patch)
-
PHCO_22314 (libc cumulative patch)
-
PHCO_23499 (LVM commands cumulative patch)
-
QPK1100 (HP-UX 11.00 Quality Pack, September 2001)
Note that switching the globalmutex back to native implementation can improve performance. To do so, use one of the following HP patches:
-
11.0 PHKL_23995
-
11i PHKL_24005
If you are running iPlanet Web Server on an HP-UX platform, you need to ensure that the following patches are installed on that machine. Table 1 lists the required patches for the HP-UX 11.0 (800 series), and Table 2 lists the required patches for the HP-UX 11.0 (700 series):
Table 1 Required Patches on HP-UX 11.0 (800 series) for iPlanet Web Server
|
HP-UX 11.0 (800 series) Patches for iPlanet Web Server
|
QPK1100 Quality Pack for HP-UX 11.00, September 2001 |
XSWHWCR1100 HP-UX Hardware Enablement and Critical Patches, September 2001 |
Table 2 Required Patches on HP-UX 11.0 (700 Series) for iPlanet Web Server
|
HP-UX 11.0 (700 Series) Patches for iPlanet Web Server
|
B8110AA (Java 2 SDK for HP-UX (700/800), PA1.1 + PA2.0 Add On) |
B8111AA (Java 2 RTE for HP-UX (700/800), PA1.1 + PA2.0 Add On) |
B9098AA (Java 2 Plug-in for HP-UX (700/800)) |
HPUXEng32RT (English HP-UX 32-bit Runtime Environment) |
UXCoreMedia (HP-UX Media Kit) |
XSWGR1100 (HP-UX Extension Pack, May 1999) |
XSWHWCR1100 (HP-UX Hardware Enablement and Critical Patches, September 2001) |
QPK1100 (Quality Pack for HP-UX 11.00, September 2001) |
To identify any existing patches on your system, use the swlist command. To install HP-UX patches, use the swinstall command. Refer to the HP documentation for more information.
A list of recommended patches for HP-UX 11.00 can be found at the following URL: http://us-support.external.hp.com/index.html
Microsoft Windows NT 4.0
Windows NT 4.0 SP6a (Service Pack 6a) is supported.
Product Hierarchy and Dependencies
iPlanet Delegated Administrator for iPlanet Messaging Server 5.1 patch 1 requires the following to be installed:
-
iPlanet Messaging Server 5.1 patch 1
-
iPlanet Web Server Enterprise Edition 6.0 SP2 or iPlanet Web Server 6.0.1
-
Netscape Directory Server 4.16
|
Note
|
-
iPlanet Messaging Server 5.1 patch 1 does not support iPlanet Directory Server 5.1.
|
iPlanet Delegated Administrator for iPlanet Messaging Server 5.2 patch 1 requires the following to be installed:
-
iPlanet Messaging Server 5.2 patch 1
-
iPlanet Web Server Enterprise Edition 6.0 SP2 or iPlanet Web Server 6.0.1
-
Netscape Directory Server 4.16 or iPlanet Directory Server 5.1
|
Note
|
-
iPlanet Delegated Administrator product requirements and dependencies are specific to the iPlanet Messaging Server patch it supports.
-
For information on iPlanet Messaging Server software and product requirements, see iPlanet Messaging Server Release Notes at:
-
http://docs.iplanet.com/docs/manuals/messaging.html
|
Installation Notes
This section contains information on installing iPlanet Delegated Administrator 1.2 patch 1 on iPlanet Messaging Server.
You need to uninstall the older version of iPlanet Delegated Administrator before installing iPlanet Delegated Administrator 1.2 patch 1 release.
-
To install iPlanet Delegated Administrator 1.2 Patch 1, you need to:
-
Backup the following configuration file:
-
IDA_root/nda/classes/netscape/nda/servlet/resource.properties
-
Uninstall the previous iPlanet Delegated Administrator for Messaging and Collaboration.
-
Delete the configuration subtree from the directory. The configuration subtree is specified in the NDADefaultConfiguration-basedn property in the resource.properties file at: iDA_ROOT/nda/classes/netscape/nda/servlet/resource.properties.
-
Use the information in the backed up resource.properties file to answer the iPlanet Delegated Administrator installation questions when installing the new version of iPlanet Delegated Administrator for Messaging and Collaboration.
Deprecated Features
The following feature will be deprecated in this release:
-
iPlanet Web Server 4.x support
-
Support for iPlanet Web Server 4.x is dropped in this iPlanet Delegated Administrator release. This release supports iPlanet Web Server 6.0 SP2 and iPlanet Web Server 6.0.1.
Fixed Bugs
This section describes the major bugs that were fixed in the iPlanet Delegated Administrator for Messaging and Collaboration 1.2 patch 1 release:
Table 3 iPlanet Delegated Administrator for Messaging and Collaboration 1.2 patch 1 Fixed Bugs
|
Bug Number
|
Description
|
Status
|
4540504 |
Class of Service schemes and templates do not display during new user creation. |
Fixed |
4631750 |
Bugs related to Netscape 6. |
Fixed |
4635892 |
iPlanet Directory Server 5.x Class of Service does not work with iPlanet Delegated Administrator. |
Fixed |
4639073 |
Cannot create hosted domain when user/groups suffix is complex (contains spaces, multiple domain names). |
Fixed |
4647990 |
Domain creation failure is not handled properly through GUI. |
Fixed |
4648535 |
Single Sign-On from iPlanet Delegated Administrator to iPlanet Messenger Express does not work. |
Fixed |
4650500 |
Cannot search over 1000 users using imadmin command. |
Fixed |
4654678 |
Invalid blank or return code are inserted into the "Mailing Address" field. |
Fixed |
4662055 |
User able to view the members list even after unsubscribing the Mailing List in MLMUnSubscribe.htm. |
Fixed |
4667171 |
iPlanet Delegated Administrator does not work for users stored with fully qualified domain name. |
Fixed |
4668141 |
End User not able to access iPlanet Delegated Administrator through portal gateway. |
Fixed |
4652020 |
iPlanet Delegated Administrator hangs. |
Fixed |
4671472 |
imadmin purge user command fails. |
Fixed |
4677712 |
Characters vanish when user inputs data into "Full Name" and "Full Name in Preferred Language" fields. |
Fixed |
4692157 |
Server error in CreateUserMailBasic.html on selecting Mail host. |
Fixed |
4693639 |
The mailquota Class of Service scheme and templates do not display while editing user. |
Fixed |
4696801 |
iPlanet Delegated Administrator should abort installation against iPlanet Web Server 4.x |
Fixed |
4634546 |
Domain Administrators can create alternate email addresses in domains they do not have authority. |
Fixed |
4643137 |
iPlanet Delegated Administrator display is corrupted in JA locale. |
Fixed |
4702321 |
User not able to save the value entered in the Message Maximum Size field for Mailing List on Netscape 6.x. |
Fixed |
4706028 |
While accessing iPlanet Delegated Administrator through portal gateway, the screen pointer and confirmation message is not displayed. |
Fixed |
Known Problems and Limitations
The following are known problems and limitations with iPlanet Delegated Administrator for Messaging and Collaboration.
-
When installing iPlanet Delegated Administrator for Messaging and Collaboration, if you want to activate the counters for users, mail lists, and domains, you must enable the counter plug-ins for the Directory Server. (no bugid)
-
If you are using iPlanet Messaging Server 5.1 patch 1, for more information on enabling counter plug-ins, see: http://docs.iplanet.com/docs/manuals/messaging/ims51/da/install.htm#28567
-
If you are using iPlanet Messaging Server 5.2 patch 1, for more information on enabling counter plug-ins, see: http://docs.iplanet.com/docs/manuals/messaging/ims52/da/install.htm#28567
-
Single Sign-On from iPlanet Delegated Administrator for Messaging and Collaboration to portal does not work. (no bugid)
-
iPlanet Web Server might not start with default minimum and maximum JVM heap sizes. (4524374)
-
In the jvm12.conf file in directory webserver-root/https-instance, increase the minHeapSize to 3.5M and maxHeapSize to 64M.
-
Internet Explorer browsers sometimes use cached information (4535742)
-
While using Internet Explorer, make sure you set your cache settings to check for a newer version of stored Web pages on every visit to the page. If you set it to `Automatically,' some pages will display cached values that might not be current.
-
When an attribute is specified through Class of Service (for example, MailQuota), it does not appear in iPlanet Delegated Administrator for Messaging and Collaboration, even though the server honors this attribute. (4537434).
-
Work-around: Perform an ldapsearch, and be sure to specify the attribute in the attribute list to be returned.
-
On Windows NT, native mail delivery is not supported. (4537964)
-
When using iPlanet Delegated Administrator for Messaging and Collaboration, to set the delivery options for a user whose mailhost is a Windows NT server, do not select Native as a delivery option. Selecting Native as the only option for mail delivery for such users will result in the mail message being bounced to the sender. The bounce message will be sent only after several days have elapsed. If you want bounce messages to be sent immediately for mail that is undeliverable because the user erroneously selected this inappropriate delivery method, add the following rewrite rule to msginstance/imta/config/imta.cnf:
native-daemon $?unix/native delivery not supported on server
-
When using the Delegated Administrator for Messaging and Collaboration GUI, only the Top-Level Administrator can remove a user from a Family Group. (4538101)
-
To remove a user from a family group, Service/Domain/Family group Administrators can use the imadmin family-member remove command, which is available from the command line interface.
-
Attempts to create a domain fail if a subdomain of it already exists. (4538206)
-
Messaging Server provisioning tools (iPlanet Delegated Administrator GUI and imadmin command) fail to create a hosted domain when a subdomain of that domain was previously created as a hosted domain. For example, if sales.sesta.com was created first, later attempts to create sesta.com as a hosted domain would fail.
-
To define sesta.com as a hosted domain, follow the procedure in the iPlanet Messaging Server Provisioning Guide in order to determine how to overlay the existing entry for sesta.com with the additional object classes. You also need to create an organization container for the domain sesta.com with all the required ACIs (Appendix A, iPlanet Messaging Server Provisioning Guide) and create the domain admin group for the domain.
-
In the Delegated Administrator for Messaging and Collaboration GUI, the Mail Filter tab option "To" should be "To or CC". (4538445)
-
Cannot store Delegated Administrator configuration in a separate directory from the User/Group directory. (4538853)
-
If your Messaging Server deployment has separate Configuration and User/Group directories, the iPlanet Delegated Administrator configuration cannot be stored in a separate directory from the User/Group directory. Instead, the iPlanet Delegated Administrator configuration must be stored in the User/Group directory.
-
On Solaris platforms, if the domain name is not configured in the /etc/resolv.conf file, the iPlanet Delegated Administrator for Messaging and Collaboration installation unexpectedly terminates. (4539065)
-
Cannot Create/Manage Mail Lists from My Account page of Top-Level Administrator. (4540027)
-
When logged-in as a Top-Level Administrator, you cannot create or manage a mail list. As a work-around, traverse to any of the hosted domains before clicking on the My Account icon.
-
You cannot create a domain with multi-byte characters in the domain organization name. (4540113)
-
You cannot create a new domain with an existing user/group subtree (Domain Container DN). (4540234)
-
iPlanet Delegated Administrator for Messaging and Collaboration allows you to create a new domain and have it point at an existing user/group subtree. This subtree must contain the domain administrator and postmaster groups. However, the creation of a domain when pointed at an existing user/group subtree fails as an invalid check is made for the domain administrator group under the root suffix of the user/group tree.
-
A workaround is to create these groups under the root suffix. The LDIF for creating these groups is shown below. The following variables are used in the LDIF examples and should be replaced with the appropriate values for the installation.
-
BASE SUFFIX = root suffix of the user/group tree for the hosted domain (for example: o=sesta.com, o=isp)
-
DOMAIN NAME = domain name of the domain being added
|
LDIF EXAMPLE: Creating a Domain Administrator Group
|
dn: cn=Domain Administrators,ou=groups,BASE SUFFIX
|
objectclass: top
|
objectclass: groupOfUniqueNames
|
objectclass: nsManagedDept
|
objectclass: inetMailAdministrator
|
nsmaxusers: Unlimited
|
mailadminrole: storeadmin
|
cn: Domain Administrators
|
nsnumusers: 0
|
|
-
|
LDIF EXAMPLE: Creating a Postmaster Group
|
dn: cn=Postmaster,ou=groups,BASE SUFFIX
|
objectclass: top
|
objectclass: groupOfUniqueNames
|
objectclass: inetMailGroup
|
objectclass: inetLocalMailRecipient
|
objectclass: inetMailGroupManagement
|
objectclass: nsManagedMailList
|
mail: postmaster@DOMAIN NAME
|
mailalternateaddress: postmast@DOMAIN NAME
|
inetmailgroupstatus: active
|
cn: Postmaster
|
nsnumusers: 0
|
|
-
Common Name in Preferred Language (cn:lang-xx) attribute cannot be modified with iPlanet Delegated Administrator for Messaging and Collaboration web interface. (4540372)
-
With iPlanet Delegated Administrator for Messaging and Collaboration, you can create cn:lang-xx attribute; however, the product does not have an interface to modify this attribute.
-
Changes made to Full Name is not saved. (4584685)
-
Work-around: Focus the cursor on the Full Name field in the Edit Basic Account Information page before saving the changes.
-
Upgrade for iPlanet Delegated Administrator for Messaging and Collaboration does not work. (4541709)
-
To upgrade, use the following procedure:
-
Back up the following configuration file:
-
IDA_root/nda/classes/netscape/nda/servlet/resource.properties
-
Uninstall the previous iPlanet Delegated Administrator for Messaging and Collaboration.
-
Delete the configuration subtree from the directory. The configuration subtree is specified in the NDADefaultConfiguration-basedn property in iDA_ROOT/nda/classes/netscape/nda/servlet/resource.properties.
-
Use the information in the backed up resource.properties file to answer the iPlanet Delegated Administrator installation questions when installing the new version of iPlanet Delegated Administrator for Messaging and Collaboration.
-
If you are using iPlanet Directory Server 5.1, counter plug-ins cannot be enabled with iPlanet Delegated Administrator for Messaging and Collaboration. (4547885)
-
If you want to activate the counters for users, mail lists, and domains, you can enable these plug-ins with Netscape Directory Server 4.16. Using iPlanet Directory Server 5.1, you will not be able to restrict the number of users or groups in a domain as these counter plug-ins are not available.
-
However, if you are using iPlanet Directory Server 5.1, these counter plug-ins are not available. Therefore, you will not be able to restrict the number of users or groups in a domain if you use iPlanet Directory Server 5.1.
-
The iPlanet Web Server publishing feature is incompatible with iPlanet Delegated Administrator for Messaging and Collaboration. (4554965)
-
By default, the web server publishing feature is turned off. Do not turn on this feature.
-
Domain Organization users cannot be purged using the imadmin user purge utility. (4621763)
-
Subject field is not stored in auto responder rule. (4627074)
-
If you set up auto-reply messages for users, and you enter multiple auto-reply subject and message texts for multiple languages at the same time, you need to save the changes for each individual language one at a time. If you enter the changes for all languages and attempt to save them at the same time, some of the information in the auto-reply message will be missing or not properly saved.
-
If you run the imadmin CLI with SSL, the connection to the web server does not work on Windows NT 4.0 SP6 dual processor and Windows NT 4.0 SP6a on Intel Pentium 4 Processors. (4627754)
-
On Windows NT, iPlanet Delegated Administrator for Messaging and Collaboration does not properly interpret the backslash (\) in directory path names in program delivery. (4632631)
-
Work-around: Use forward slashes (/) when specifying directory path names.
-
If you use Internet Explorer 5.5 SP2 (Service Pack 2), some modifications made through iPlanet Delegated Administrator for Messaging and Collaboration (for example, in the Edit User interface) might not be saved. (4637890)
-
If your changes in iPlanet Delegated Administrator for Messaging and Collaboration are not being saved, and the Save/Apply button does not appear to work, make sure that you shift the focus of the cursor from the last changed field by pressing the Tab key. Then, press the Save/Apply button to save the changes.
-
When adding members, moderators, authorized / unauthorized senders in the Create/Edit Mail List window, deselection does not work if you deselect the users after selecting them in the Search and Add window once. (4637892)
-
Work-around: Close and reopen the Search and Add window.
-
Common name (cn) not considered during new user creation for Family Group Administrator. (4698701)
-
Unable to edit the Filters when the 'Name' contains a whitespace in the beginning or the end. (4706013)
-
Autoreply language is not set correctly. (4536608)
-
Delegated Administrator allows the Domain Administrator to edit the Service Administrator's profile. This should not be allowed as the Service Administrator is the superuser. (4539731)
-
Editing mail lists with double byte characters from My Account page using Internet Explorer may return server error. (4735543)
-
Work-around: Use Netscape 4.7x or Netscape 6.x to edit the existing mail lists that have non-ASCII names.
-
Some of the radio buttons in Create Mail List page and Edit Mail List page may not work properly, if you are using Netscape 4.7x to access the iPlanet Delegated Administrator localized version. (no bugid)
-
Work-around: Use Internet Explorer or Netscape 6.x.
-
Modifying the Alternate email address for an user entry in Modify User page returns error. (4734336)
Considerations
-
iPlanet Delegated Administrator does not work for users stored with fully qualified domain name (4667171)
-
If the ineDomainSearchFilter attribute is set to %U<sep>%V for a domain, then iPlanet Delegated Administrator provisions users for that domain with compound user ID uidseperatorFQDN (example: john@iplanet.com). The separator in the compound user ID should match with the separator in the inetDomainSearchfilter attribute value. The valid separator characters for inetDomainSearchfilter attribute value are #@_.
-
Delegated Administrator will not be able to provision users with compound user ID for the domain, if the domain does not contain the ineDomainSearchFilter attribute.
-
imadmin purge user command fails for iPlanet Delegated Administrator 1. 2 patch 1 with iPlanet Messaging Server 5.1 patch 1.
For the imadmin purge user command to function, make the following changes in the resource.properties file:
-
Go to the directory where the file resource.properties is stored:
-
iDA_root/nda/classes/netscape/nda/servlet/
-
In the file resource.properties, go to the entry:
-
mailObject-allowPabDeletion=yes
-
Change the mailObject-allowPabDeletion entry to:
-
mailObject-allowPabDeletion=no
-
Restart the Enterprise Server.
-
Delegated Administrator supports portal interoperability for the end-users only. This does not include single sign-on. (no bugid)
-
Supporting documentation not available for setting up Class of Service for Directory Server (4671320)
Setting up Class of Service (CoS)
-
The Class of Service plug-in is automatically installed with Directory Server, to activate the plug-in modify the SLAPD configuration file.
|
Note
|
Configure the Class of Service plug-in before you install the Delegated Administrator for the plug-in to function properly.
|
Setting up Class of Service for Directory Server 5.x
-
Enable the Class of Service plug-in.
-
For information on how to configure the Class of Service plug-in, see iPlanet Delegated Administrator Messaging and Collaboration Installation and Administration Guide at:
-
http://docs.iplanet.com/docs/manuals/messaging.html
-
Restart the Directory Server.
-
The following entries create Class of Service templates and definition for a sample domain domain.cos, create these entries for your domain:
-
Create the following Class of Service container for Class of Service templates and definitions:
|
dn: ou=cos,o=domain.cos,<o=isp>
changetype: add
ou: cos
objectClass: top
objectClass: organizationalunit
|
|
-
Create the following Class of Service scheme under the Class of Service container:
|
dn: cn=mailscheme,ou=cos,o=domain.cos,<o=isp>
changetype: add
objectClass: top
objectClass: ldapsubentry
objectClass: cossuperdefinition
objectClass: cosdefinition
objectClass: cosClassicDefinition
cosAttribute: mailquota override
cn: mailscheme
uid: mailscheme
costargettree: o=domain.cos,<o=isp>
costemplatedn: ou=costemplates,ou=cos,o=domain.cos,<o=isp>
cosspecifier: inetcos
|
|
-
Create the following container for the Class of Service templates:
|
dn: ou=costemplates,ou=cos,o=domain.cos,<o=isp>
changetype: add
ou: costemplates
objectClass: top
objectClass: organizationalunit
|
|
-
Create the following Class of Service templates:
|
dn: uid=gold,ou=costemplates,ou=cos,o=domain.cos,<o=isp>
changetype: add
cosPriority: 1
mailQuota: 50000
objectClass: top
objectClass: costemplate
objectClass: extensibleobject
objectClass: ldapsubentry
uid: gold
cn: gold
dn: uid=silver,ou=costemplates,ou=cos,o=domain.cos,<o=isp>
changetype: add
cosPriority: 2
mailQuota: 30000
objectClass: top
objectClass: costemplate
objectClass: ldapsubentry
objectClass: extensibleobject
uid: silver
cn: silver
|
|
Setting up Class of Service for Directory Server 4.x
-
Enable the Class of Service plug-in.
-
For information on how to configure the Class of Service plug-in, see iPlanet Delegated Administrator Messaging and Collaboration Installation and Administration Guide at:
-
http://docs.iplanet.com/docs/manuals/messaging.html
-
Restart the Directory Server.
-
Use the following LDIF with the ldapmodify command to extend the Class of Service schema in the Directory Server:
|
dn: cn=schema
changetype: modify
add: attributetypes
attributetypes: ( 2.16.840.1.113730.3.1.550 NAME 'cosAttribute'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15')
attributetypes: ( 2.16.840.1.113730.3.1.551 NAME 'cosSpecifier'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15')
attributetypes: ( 2.16.840.1.113730.3.1.552 NAME 'cosTargetTree'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15')
attributetypes: ( 2.16.840.1.113730.3.1.553 NAME 'cosTemplateDn'
SYNTAX '1.3.6.1.4.1.1466.115.121.1.15')
dn: cn=schema
changetype: modify
add: objectclasses
objectclasses: ( 2.16.840.1.113730.3.2.84 NAME 'cosDefinition'
SUP 'top' MUST ( objectclass ) MAY ( aci $ cn $ uid $
costargettree $ costemplatedn $ cosspecifier $ cosattribute))
|
|
-
The following entries create Class of Service templates and definition for a sample domain domain.cos, create these entries for your domain:
-
Create the following container for Class of Service templates and definitions:
|
dn: ou=cos, o=domain.cos, <o=isp>
objectclass: top
objectclass: organizationalUnit
ou: cos
|
|
-
Create the following Class of Service scheme under the Class of Service container:
|
dn: uid=mailQuotaScheme, ou=cos, o=domain.cos, <o=isp>
objectclass: top
objectclass: cosDefinition
costemplatedn: ou=mailSchemeTemplates, ou=cos, o=domain.cos,
<o=isp>
costargettree: o=domain.cos, <o=isp>
cosspecifier: inetCos
cosattribute: mailQuota override
uid: mailQuotaScheme
|
|
-
Create the following container for the Class of Service templates:
|
dn: ou=mailSchemeTemplates, ou=cos, o=domain.cos, <o=isp>
objectclass: top
objectclass: organizationalUnit
ou: mailSchemeTemplates
|
|
-
Create the following Class of Service templates:
|
dn: cn=platinum, ou=mailSchemeTemplates, ou=cos, o=domain.cos,
<o=isp>
objectclass: top
objectclass: inetMailUser
mailquota: -1
cn: platinum
dn: cn=gold, ou=mailSchemeTemplates, ou=cos, o=domain.cos,
<o=isp>
objectclass: top
objectclass: inetMailUser
mailquota: 50000
cn: gold
dn: cn=silver, ou=mailSchemeTemplates, ou=cos, o=domain.cos,
<o=isp>
objectclass: top
objectclass: inetMailUser
mailquota: 30000
cn: silver
dn: cn=default, ou=mailSchemeTemplates, ou=cos, o=domain.cos,
<o=isp>
objectclass: top
objectclass: inetMailUser
mailquota: 10000
cn: default
|
|
By default iPlanet Delegated Administrator 1.2 patch 1 is configured for iPlanet Directory Server 5.x. To configure iPlanet Delegated Administrator 1.2 patch 1 for iPlanet Directory Server 4.x, modify the resource.properties file located at iDA_Root/nda/config/resource.properties
-
Uncomment the following lines in the resource.properties file:
|
# Start DS4.x #
#NDAUserCOSManager-cosDefFilter=(&(objectclass=cosDefinition)(cosspe
cifier=*))
# End DS4.x #
|
|
-
Comment the following lines in the resource.properties file:
|
# Start DS5.x #
NDAUserCOSManager-cosDefFilter=(|(&(objectclass=cosDefinition)(cos
specifier=*))(&(objectclass=ldapsubentry)(cosspecifier=*)))
NDAUserCOSManager-cosTemplateFilter=objectclass=ldapsubentry
# End DS5.x #
|
|
-
Restart the Web Server.
Configuring Class of Service for Directory Server 5.x using Directory Console
-
Create an organizational unit ou=cos.
-
Classic Class of Service is appropriate for Delegated Administrator, so configure Classic Class of Service in the Directory.
-
For more information on configuring Classic Class of Service, see iPlanet Directory Server Administration Guide at:
-
http://docs.iplanet.com/docs/manuals/directory.htm
-
Create an organizational unit ou=costemplates under the organizational unit ou=cos
-
Create the Class of Service templates from the Directory Console. Add the objectclass extensibleobject to the Class of Service templates while creating the templates from the console.
-
Add uid and cn to the Class of Service templates. cn should be the RDN.
|
Note
|
It is advisable to create the Class of Service templates under a separate organizational unit ou=costemplates.
|
-
Create the Class of Service schemes under the organizational unit ou=cos and add uid and costargettree attributes to the schemes.
Documentation Changes
This section describes the errors in the iPlanet Delegated Administrator for Messaging and Collaboration documentation set.
Delegated Administrator for Messaging and Collaboration Installation and Administration Guide
-
Supporting documentation for the Calendar Support installation question contains inaccurate information. (4627818)
-
The documentation supporting the Calendar Support question (Install Screen 5-Calendar Server) should state the following:
-
Install Screen 5—Calendar Server
-
--------------------------------------------------------------------------
-
Sun-Netscape Alliance
iPlanet Delegated Administrator for Messaging Installation/Uninstallation
--------------------------------------------------------------------------
-
If you want iPlanet Delegated Administrator for Messaging to manage an iPlanet Calendar Server, enter 'Yes'.
-
Manage Calendar Server [No]: __________________
-
-----------------------------------------------------------------------------
-
Select the default value No, since this feature is currently not available.
-
When this feature is supported in a future release, selecting Yes will enable iPlanet calendar service support through iPlanet Delegated Administrator for Messaging and Collaboration.
How to Report Problems
If you have problems with iPlanet Delegated Administrator for Messaging and Collaboration, contact iPlanet customer support using one of the following mechanisms:
So that we can best assist you in resolving problems, please have the following information available when you contact support:
-
Description of the problem, including the situation where the problem occurs and its impact on your operation.
-
Machine type, operating system version, and product version, including any patches and other software that might be affecting the problem.
-
Detailed steps on the methods you have used to reproduce the problem.
-
Any error logs or core dumps.
For More Information
Useful iPlanet information can be found at the following Internet locations: