These notes were last updated December 20, 1999.
Important Product Alert: Root Certificate Expiration
If you are are using SSL with Netscape Messaging server, you need to be aware of important information related to root certificate expiration by the end of 1999. At a minimum, you may need to ask your users to upgrade their browsers to Communicator 4.7. Depending on how you are using SSL, you may also need to update the root certificate in your server. For important and urgent information on root certificate expiration, see Digital Certificate Security Alert.
These release notes contain important information about Netscape Messaging Server 4.1 Patch 1. Please read these notes before using the product. Messaging Server 4.1 Patch 1 is available only for the Solaris 2.6 platform.
Use of this product is subject to the terms detailed in the license agreement accompanying it. For information on installing Netscape Messaging Server 4.1, see http://home.netscape.com/eng/server/messaging/4.1/.
These release notes contain the following sections:
The full release and the patch release install in the same manner.
Netscape Messaging Server 4.1 Patch 1 contains the following fixes to the Messaging Server 4.1 release:
The antirelay plugin failed to initialize an internal variable. This caused smtp failures or garbled messages.
When sending large messages with each line containing a small amount of text, the sendmail process size could grow to use up to 50 times normal.
A text search problem was fixed when using the -u option, upgrade now logs failures when corrupt messages are encountered, a core dump when using the -s option was fixed, and upgrade now correctly identifies a situation where duplicate messages could end up in the user's inbox.
The MTA now logs 5XX error codes from external MTAs and errors received from DNS.
The MMP now times out connections.
The mailaclbody.cgi and lscgi commands in the <serverroot>/bin/user/admin/bin directory must be setuid to the local.serveruid value, and setgid to the local.servergid value. The adm.conf and admpw files in the <serverroot>/admin-serv/config directory must be set to 0640 permissions.
Not having these could cause the following problems:
If the smtp daemon has address rewriting turned off, a Message sent by Messenger Express will not contain a Date: header.
If the vacation reply for a user was turned off and then on, the vacation reply was not reset properly.
When a change is made in the Administration Console which requires the smtp daemon to be restarted, the console might report that the smtp daemon started successfully, when it actually did not.
When a user makes changes on the Appearance screen, the changes sometimes caused the Account Summary screen to be displayed.
You cannot specify a symbolic-link directory or a mount-point directory as your server root. If you attempt to do this, the setup program displays a misleading error message.
To obtain Netscape Console for platforms other than the installed platform, you'll need to obtain the appropriate platform version of Netscape Console by visiting http://home.netscape.com/eng/server/console.
This will be fixed in the next release.
This will be fixed in the next release.
If you are using Directory Server 4.1, you must use Netscape Console 4.1 (packaged with Directory Server) to administer your Directory Server. (As of June 1999, Directory Server 4.1 is in beta release.)
All Netscape Console Java environments must be shut down before running uninstall. Close and exit all instances of the Netscape Console before running uninstall. Be sure there are no Netscape Console instances running on remote machines.
The server is compatible with Netscape Navigator 3.x and 4.x, and Internet Explorer 3.02 and above. These browsers support Javascript and therefore will support webmail access to Netscape Messaging Server 4.1. For optimal performance, Netscape recommends using Netscape Navigator 4.x or Internet Explorer 4.x browsers.
Netscape supports the XSERVER private extension for authenticating message submissions. Reconstructing a mailbox causes all of the authenticated sender information to be discarded.
If something interrupts the upgrade process that upgrades a Messaging Server 3.x mail store to the 4.x format, the process can be resumed. The upgrade process will not attempt to upgrade mailboxes that have already been upgraded to the 4.1 format. However, after the resumed upgrade is completed, you must run reconstruct -m before starting up the Messaging Server.
The program delivery option will not work with shells that are not considered valid. The /etc/shells file contains the path for all valid shells. If the file is missing or empty, the following are valid login shells for the user to which the message is addressed:
For more information about program delivery, see the Messaging Server Administrator's Guide.
This means a user might still receive "over quota" messages until the user receives a new message or until the user logs off and logs in again. You can fix this problem by sending mail to the user after you reset the quota limit.
If the server process terminates unexpectedly, shut down all Messaging Server processes before restarting the server. Otherwise, the remaining processes might stop responding while waiting for locks held by the terminated process.
For example, most SMTP configuration settings require server restart; most POP, IMAP, and HTTP settings do not. If you have questions about a particular configuration setting, contact Netscape Technical Support.
NFS is not supported for several reasons, including: open with O_EXCL is not atomic. This technique is used for synchronizing deferred handling between various threads.
You may encounter problems (JavaScript errors, white screens) using the resize or refresh buttons of the browser used for Messenger Express.
The Plugin API logging function has a hard-coded limit of 2048 characters. Care should be taken to not log more than 2048 characters through the PPLogPrintf() Plugin API function.
If you see a significant size growth of the smtpd process, please contact Netscape Technical Support.
During startup, the smtp log shows that the process is listening on port 0, no matter what value the port is actually set to listen on. This is a reporting error, and does not affect which port the server is actually listening on.
See also the previous section, Known Limitations and Considerations, and the following section, Corrections to the Documentation, for other issues that might affect product capability or use.
Solution: Install Messaging Server 4.1 with Directory Server Export version (which comes packaged with Netscape Messaging Server 4.1). Or, install Messaging Server and Directory Server in separate server roots.
Solution: After unpacking the Messaging Server 4.1 Patch 1 archive, modify the file msg/msg.inf so that it says:
[msg]
...
Dependencies = admin/4.1 (or whatever version of the Administration Server is in use)
For more information about using separate configuration and user directories, see your Messaging Server and Directory Server documentation.
Solution: After upgrade, change your Messaging Server configuration to reference the correct User Directory.
Solution: If you install Messaging Server on the same Unix machine more than once, make sure the /etc/nsserver.cfg file contains, on the first line, the server-root of the Messaging Server you will be using.
If you have multiple queues, the uninstall process will remove the default queue, but not alternate queues. If you have multiple partitions, the uninstall process will remove the primary partition, but not subpartitions.
Solution: You will need to delete any alternate queues or subpartitions manually.
Solution: You might need to add an ACI for the webmail administrator to the LDAP user/group DN entry. For more information, contact Netscape Technical Support.
Solution: You will need to save the 3.x information and recreate the entries for Messaging Server 4.1.
Solution: You will need to save the 3.x information and recreate the entries for Messaging Server 4.1.
Solution: If you want to create a custom DN for the end-user administrator, you must create these entries manually before the installation. You must create the end-user administrator group DN with the common name Enduser Administrators ("cn=Enduser Administrators"). You can create the end-user administrator user DN using any uid.
Solution: If you want to specify a custom location for the queue directory, you must ensure that Messaging Server has access to the custom location.
Solution: If anonymous search is not available on the User/Groups Directory Server, then during installation the DN for the User/Groups Administrator should be used, not the uid for the User/Groups Administrator.
Solution: After installation, copy the correct libUBEfilter.so and hide.so from <serverroot>/bin/msg/install/templates/msg-inst/smtp-bin/plugins/ to the instance directory <serverroot>/msg-<instance>/smtp-bin/plugins/.
Make sure the file permissions and ownerships are set properly.
Solution: They are not started by default as stated in the install script.
Solution: In the /etc/NscpMsg script, set the timezone (TZ) for Messaging Server by adding the following line after the LANG= variable:
export TZ=GMT-8
If you include a slash character (\) in an over-quota message, Messaging Server cannot parse the message and will not deliver the message to the user.
Solution: When specifying an over-quota message, do not use a slash character (\) in the message.
If you see any of the following error messages:
Problem getting messaging server instance serving user <user>
Error in configinit
Solution: Make sure the mailaclbody.cgi and lscgi commands in the <serverroot>/bin/user/admin/bin directory are setuid to the local.serveruid value, and setgid to the local.servergid value:
cd <serverroot>/bin/user/admin/bin
chmod 06550 lscgi mailaclbody.cgi
chown local.serveruid lscgi mailaclbody.cgi
chgrp local.servergid lscgi mailaclbody.cgi
and
cd <serverroot>/admin-serv/config && chmod 0640 adm.conf admpw
Solution: You can correct this problem by changing the line in the certmap.conf file from:
#default:FilterComps e, uid, ...
to
#default:FilterComps mail, uid, ...
For messages such as the greeting text, the message is limited in size to 1 KByte if the Administration console is used, and 2 KBytes if text is entered using the configutil command. This is due to a limitation in the administration SDK libraries used by the Messaging Server 4.1.
Solution:If a configuration message is greater than 1Kbytes, you will have a problem using the Netscape Console to view the information. Use the configutil command, instead.
If a configuration message is greater than 2Kbytes, you will have a problem using configutil to display that. The workaround is to dump the Directory Server content into an LDIF file and view that LDIF file.
Running configutil or setconf commands to change the values of the parameters local.ugldap* does not change the values.
Solution:The following values are read only. Their values are synchronized with the values retrieved from the administration server:
For local.ugldap* set the local.ugldapuselocal (to "yes") to ignore the administration server setting using configutil or setconf.
Another alternative is to leave local.ugldapuselocal as is and use Netscape Console to change the user and group DS in the administration server part of the console.
For local.ldaphost you cannot change it in the Messaging Server configuration. You have to change it in the administration server shared configuration (in serverroot/shared/config/dbswitch.conf).
On some platforms, it is not possible to use the counterutil command-line utility to list the set of counter objects in a given server's counter registry. The following list includes all counter objects recognized by the utility:
The Logging and Log Analysis document shows the wrong format for the Accept Log entry.
The documentation says the format is:
moduleName: envelopeID: mailFrom:[ peerAddress]: peerHost: msgID: msgSize:numRecipients: recipientList
but the correct format is:
moduleName: envelopeID: msgID: [peerAddress]: peerHost: mailFrom: msgSize: numRecipients: recipientList
The instructions currently read as follows:
Instead, the instructions should read:
This utility needs to be included in msg.z and installed under the <serverroot>/bin/msg/install/bin directory prior to installing the language package. This allows the installer to change the language configuration in the config database dynamically.
Usage: configlang [opt] [-s sitelanguage] [-a installedlanguages]
The utility itself is used as a post installer. Specify the sitelanguage using the -d option and the installedlanguages using the -a option. Please ensure that you specify the -b option to start the servers after reconfiguration.
The administrator's guide and related documents are posted at the location http://home.netscape.com/eng/server/messaging/4.1/.
Installation instructions and release notes for all Netscape servers are posted at the location http://home.netscape.com/eng/server/.
If you can't find the information you need, please contact Netscape technical support.