Previous Contents Index Next |
iPlanet Messaging Server 5.2 Installation Guide for UNIX |
Chapter 5 Installing the Messaging Multiplexor
This chapter contains the following sections to help you install and configure the Messaging Multiplexor:
Installing and Configuring Multiplexor
Installing and Configuring Multiplexor
The iPlanet Messaging Multiplexor (MMP) is a specialized messaging server that acts as a single point of connection to multiple messaging servers. With the Multiplexor, large-scale messaging-service providers can distribute POP and IMAP user mailboxes across many machines to increase messaging capacity. All users connect to the single Multiplexor server that will direct each connection to the appropriate messaging server.
Note To configure HTTP user mailboxes (like Messenger Express), see the chapter on "Configuring and Administering Multiplexor Support" in the iPlanet Messaging Server Administrator's Guide.
You can install the MMP at the same time as you install Messaging Server, or you can install it later using the setup program. Either way, you first need to prepare the system to support the MMP.
More information about the MMP can be found in the following:
Before You Install
Before installing the MMP:
Choose the machine on which you will install the MMP. It is best to use a separate machine for the MMP.
Note It is recommended that the MMP not be installed on a machine that is also running either Messaging Server or Directory Server.
Check that the system meets all the hardware and software requirements for using iPlanet Messaging Server. For more information about installation requirements, see System Requirements.
On the machine that the MMP is to be installed on, create a new user to be used by the MMP. This new user must belong to a group. Suggested names for the user are mmpsrv or mailsrv. The default is mailsrv.
Set up the LDAP Directory Server and its host machine for use with Messaging Server, if they are not already set up. For more information, see Chapter 2 "Installation Instructions."
If you already have an older version (prior to iPlanet Messaging Server 5.0) of the MMP installed and want to replace it, you must remove the old version of MMP before you can install the new one. To do this, run the Messaging Server uninstall script located in server-root. See also Appendix B, "Running the Uninstall Program."
Multiplexor Files
The Messaging Multiplexor files are stored in the mmp-hostname subdirectory of the server-root. Each MMP instance will have its own mmp-hostname directory that contains the files described in Table 5-1:
Table 5-1    Messaging Multiplexor Configuration Files
File
Description
Configuration file specifying configuration variables used for POP services.
POP services configuration template. If the PopProxyAService.cfg file does not exist, the PopProxyAService-def.cfg template is copied to create a new PopProxyAService.cfg file.
Configuration file specifying configuration variables used for IMAP services.
IMAP services configuration template. If the ImapProxyAService.cfg file does not exist, the ImapProxyAService-def.cfg template is copied to create a new ImapProxyAService.cfg file.
Configuration file specifying which services to start and a few options shared by both POP and IMAP services.
Configuration template specifying which services to start and a few options shared by both POP and IMAP services. If the AService.cfg file does not exist, the AService-def.cfg template is copied to create a new AService.cfg file.
Script used to start, stop, restart, and reload the MMP. For more information, see Starting the Multiplexor.
To enable automatic startup of the MMP after reboot, the AService.rc script can be copied to /etc/init.d and symbolically linked to the appropriate /etc/rc?.d directories. For more information about initialization and termination scripts, refer to the man page on init.d.
Optional configuration file specifying configuration variables used for SMTP proxy services. Required if you enable POP before SMTP; useful for maximizing support for SSL hardware even if POP before SMTP is not enabled. For more information on POP before SMTP, see the iPlanet Messaging Server Administrator's Guide.
Configuration template specifying configuration variables used for SMTP proxy services. If the SmtpProxyAService.cfg file does not exist, the SmtpProxyAService-def.cfg template is copied to create a new SmtpProxyAService.cfg file.
Multiplexor Installation
To install the MMP, you must use the Messaging Server setup program, which gives you the option of choosing to install the Messaging Multiplexor. For detailed information about the setup program refer to Running the Setup Program.
Login as root.
At this point, the installation begins. Messages are displayed as the installation proceeds.Run the Messaging Server setup program.
Answer yes or press Return for the following to continue with the installation:
- ./setup
Read the license agreement and answer yes to the following question to continue. The license agreement is located in the LICENSE.txt file in the directory where you downloaded the installation software.
- Welcome to the iPlanet Server Products installation program. This program will install iPlanet Server Products and the iPlanet Console on your computer.
- It is recommended that you have "root" privilege to install the software.
- Tips for using the installation program:
- Press "Enter" to choose the default and go to the next screen
- Type "Control-B" to go back to the previous screen
- Type "Control-C" to cancel the installation program
- You can enter multiple items using commas to separate them.
For example: 1, 2, 3
- Would you like to continue with installation? [Yes]:
Select option 1 from the following:
- BY INSTALLING THIS SOFTWARE YOU ARE CONSENTING TO BE BOUND BY AND ARE BECOMING A PARTY TO THE AGREEMENT FOUND IN THE LICENSE.TXT FILE. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT, PLEASE DO NOT INSTALL OR USE THIS SOFTWARE.
- Do you agree to the license terms? [No]:
Select either the Typical or Custom installation from the following menu:
- Select the items you would like to install:
- 1. iPlanet Servers
- Installs iPlanet Servers with the integrated Netscape Console
onto your computer.
- 2. Netscape Console
- Installs Netscape Console as a stand-alone Java application
on your computer.
- To accept the default shown in brackets, press the Enter key.
- Select the component you want to install [1]:
Note You cannot install the Messaging Multiplexor with the Express Installation; you must use either the Typical or Custom Installation.
Specify the desired installation location, or press Return to accept the default.
- Choose an installation type:
- 1. Express installation
- Allows you to quickly install the servers using the most
common options and pre-defined defaults. Useful for quick
evaluation of the products.
- 2. Typical installation
- Allows you to specify common defaults and options.
- 3. Custom installation
- Allows you to specify more advanced options. This is
recommended for experienced server administrators only.
- To accept the default shown in brackets, press the Enter key.
- Choose an installation type [2]:
Select option 4 from the following menu:
- This program will extract the server files and install them into a directory you specify. That directory is called the server root in the product documentation and will contain the server programs, the Administration Server, and the server configuration files.
- To accept the default shown in brackets, press the Enter key.
- Install location [/usr/iplanet/server5]:
Select option 3 from the following menu:
- iPlanet Server Products components:
- Components with a number in () contain additional subcomponents which you can select using subsequent screens.
- 1. Netscape Server Products Core Components (3)
2. Netscape Directory Suite (2)
3. Administration Services (2)
4. iPlanet Messaging Suite (5)
- Specify the components you wish to install [All]:
- Note that if you want to use SSL, you also have to install the Administration Server and Console on the same machine as MMP; in this case, select options 1, 3, and 4. You will need to answer additional questions to set up the Administration Server and Console. For more information on these questions, see Chapter 3 "Installation Questions."
Specify the fully qualified domain name of the installation machine.
- iPlanet Messaging Suite components:
- Components with a number in () contain additional subcomponents which you can select using subsequent screens.
- 1. iPlanet Message Store and Message Access
2. iPlanet Internet Message Transport Agent
3. iPlanet Messaging Multiplexor
4. High Availability for iPlanet Messaging Server
5. iPlanet Delegated Administrator Command Line Utilities
- Specify the components you wish to install [1, 2, 5]:
Specify a system user and system group.
- Enter the fully qualified domain name of the computer on which you're installing server software. Using the form <hostname>.<domainname>
Example: eros.airius.com.
- To accept the default shown in brackets, press the Enter key.
- Computer name [budgie.siroe.com]:
Specify the user ID under which the MMP will run:
- Choose a Unix user and group to represent the iPlanet server in the user directory. The iPlanet server will run as this user. It is recommended that this user should have no privileges in the computer network system. The Administration Server will give this group some permissions in the server root to perform server-specific operations.
- If you have not yet created a user and group for the iPlanet server, create this user and group using your native UNIX system utilities.
- To accept the default shown in brackets, press the Return key.
- System User [nobody]:
- The Mail Multiplexor runs as a privileged user. The account should already exist on the system and should be a member of the iPlanet Group.
- Please enter the Mail Multiplexor user [mailsrv]:
Configuring the MMP to use SSL
To configure the MMP to use SSL, do the following:
Note It is assumed that the MMP is installed on a machine that does not have a Message Store or MTA.
Install the Administration Console, Administration Server, and MMP on the machine.
If you just want server-side SSL support, you are finished. Start the MMP with the following command:
Go to your server-root and run startconsole to login to the Netscape Console:
- Point the MMP to a Directory Server on a different machine that is already configured as a Messaging Server Message Store.
Open up the "server group" for the MMP server.
- ./startconsole
Click the "configuration" tab and within that tab, click on the "Encryption" tab.
- The MMP server does not appear, but the Administration Server does; double-click on the Administration Server icon.
Click "Certificate Setup Wizard."
Install the certificate as the certificate for "This Server."
- The setup wizard walks you through a certificate request.
From the command line, make the following symbolic links to simplify things:
Create an sslpassword.conf file in this directory.
- cd server-root/mmp-hostname
ln -s ../alias/admin-serv-instance-cert7.db cert7.db
ln -s ../alias/admin-serv-instance-key3.db key3.db
ln -s ../admin-serv/config/secmod.db secmod.db
- Also, make sure that those files are owned by the user ID under which the MMP will run.
Edit the ImapProxyAService.cfg file and uncomment all the SSL settings.
- This file contains:
- Internal (Software) Token:password
- where password is the password you specified in the Certificate Setup Wizard.
If you want SSL and POP, edit the PopProxyAService.cfg file and uncomment all the SSL settings.
Make sure that the BindDN and BindPass options are set in the ImapProxyAService.cfg and PopProxyAService.cfg files.
- Additionally, you must edit the AService.cfg file and add "|995" after the "110" in the ServiceList setting.
- It is possible to copy these values from the local.ugldapbinddn and local.ugldapbindcred configutil options on the Messaging Server, but you can also create a new user with search privileges (for plain text support) or search privileges and user password read privileges (for CRAM-MD5/APOP support). You should also set the DefaultDomain option to your default domain (the domain to use for unqualified user names).
If you want client certificate based login, do the following:
Get a copy of a client certificate and the CA certificate which signed it.
Start the Netscape Console and Certificate Wizard as before (on the same machine as the MMP), but this time import the CA certificate as a "Trusted Certificate Authority."
Use the Store Administrator you created during your Messaging Server installation.
Create a certmap.conf file for the MMP. For example:
- For more information, see the iPlanet Messaging Server Administrator's Guide.
Edit your ImapProxyAService.cfg file and:
- certmap default default
default:DNComps
default:FilterComps e=mail
- This means to search for a match with the "e" field in the certificate DN by looking at the "mail" attribute in the LDAP server.
Set CertMapFile to certmap.conf
If you want client certificates with POP3, repeat Step 16 for the PopProxyAService.cfg file.Set StoreAdmin and StorePass to values from Step 14.
Set CertmapDN to the root of your Users and Groups tree.
If the MMP is not already running, start it with:
Import the client certificate into your client. In Netscape, click on the padlock (Security) icon, then select "Yours" under "Certificates," then select "Import a Certificate..." and follow the instructions.
- AService.rc start
- or
- AService.rc restart
Note All your users will have to perform this step if you want to use client certificates everywhere.
Creating Additional Instances
Use the Messaging Server setup program to create new instances of the MMP after an initial installation. You will run through the same installation procedure as when you created your first instance; you will be asked all the same questions. The setup program automatically creates a new instance in the server-root; for example, if you are installing on a machine called tarpit, the first instance you created would be called mmp-tarpit, and the second instance would be mmp-tarpit-1.
Modifying an Existing Instance
To modify an existing instance of the MMP, edit the ImapProxyAService.cfg and/or PopProxyAService.cfg configuration files as necessary. These configuration files are located in the mmp-hostname subdirectory.
Starting the Multiplexor
To start an instance of the Messaging Multiplexor, run the AService.rc script in the server-root/mmp-hostname directory:Optional parameters for the AService.rc script are described below in Table 5-2.
Table 5-2    Optional Parameters for the AService.rc Script
Option
Description
Causes an MMP that is already running to reload its configuration without disrupting any active connections.
Sample Messaging Topology
The fictional Siroe Corporation has two Multiplexors on separate machines, each supporting several Messaging Servers. POP and IMAP user mailboxes are split across the Messaging Server machines, with each server dedicated exclusively to POP or exclusively to IMAP. (You can restrict client access to POP services alone by removing the IMAP-server binary; likewise, you can restrict client access to IMAP services alone by removing the POP-server binary.) Each Multiplexor also supports only POP or only IMAP. The LDAP directory service is on a separate, dedicated machine.This topology is illustrated below in Figure 5-1.
Figure 5-1    Multiple MMPs Supporting Multiple Messaging Servers
IMAP Configuration Example
The IMAP Multiplexor in Figure 5-1 is installed on sandpit, a machine with two processors. This Multiplexor is listening to the standard port for IMAP connections (143). Multiplexor communicates with the LDAP server on the host phonebook for user mailbox information, and it routes the connection to the appropriate IMAP server. It overrides the IMAP capability string, provides a virtual domain file, and supports SSL communications.This is its ImapProxyAService.cfg configuration file:
POP Configuration Example
The POP Multiplexor example in Figure 5-1 is installed on tarpit, a machine with four processors. This Multiplexor is listening to the standard port for POP connections (110). Multiplexor communicates with the LDAP server on the host phonebook for user mailbox information, and it routes the connection to the appropriate POP server. It also provides a spoof message file.This is its PopProxyAService.cfg configuration file:
Previous Contents Index Next
Copyright © 2002 Sun Microsystems, Inc. All rights reserved.
Last Updated February 26, 2002