Chapter 4   Messaging Server Configuration


This chapter lists the configuration parameters for the Messaging Server. These parameters can be set via the configutil command. For a full description and syntax of the configutil command, see "configutil".

For information about configuring the MTA, see Chapter 5 "MTA Configuration."

configutil Parameters

---

Table 4-1    configutil Parameters 

Parameter	Description
alarm.msgalarmnoticehost	Machine to which you send warning messages. If not set, localhost will be used. Default: localhost
alarm.msgalarmnoticeport	Default: 25
alarm.msgalarmnoticercpt	Default: Postmaster@localhost
alarm.msgalarmnoticesender	Default: Postmaster@localhost
alarm.msgalarmnoticetemplate	Message template. %s in the template is replaced with the following (in order): sender, recipient, alarm description, alarm instance, alarm current value and alarm summary text
alarm.*.msgalarmdescription	Alarm description.
alarm.*.msgalarmstatinterval	Default: 3600
alarm.*.msgalarmthreshold	Alarm threshold
alarm.*.msgalarmthresholddirection	Checks for threshold condition. 1 (default) for over, -1 for under.
alarm.*.msgalarmwarninginterval	Minimum interval to send duplicate warning (hours). Default: 168
alarm.diskavail.msgalarmdescription	Percentage mail partition diskspace available.
alarm.diskavail.msgalarmstatinterval	checking interval (seconds). Set to 0 to disable checking of disk usage. Default: 3600.
alarm.diskavail.msgalarmthreshold	Default: 10
alarm.diskavail.msgalarmthresholddirection	Default: -1
alarm.diskavail.msgalarmwarninginterval	Default: 24
alarm.serverresponse.msgalarmdescription	Server response time in seconds.
alarm.serverresponse.msgalarmstatinterval	Checking interval (seconds). Set to 0 to disable checking of server response. Default: 600
alarm.serverresponse.msgalarmthreshold	Default: 10
alarm.serverresponse.msgalarmthresholddirection	Default: 1
alarm.serverresponse.msgalarmwarninginterval	Default: 24
encryption.nscertfile	cert file location.
encryption.nskeyfile	key file location.
encryption.nsssl2	Default: no
encryption.nsssl2ciphers	Comma-delineated list of ciphers
encryption.nsssl3	Default: yes
encryption.nsssl3ciphers	Default: rsa_rc4_40_md5, rsa_rc2_40_md5, rsa_des_sha,rsa_rc4_128_md5, rsa_3des_sha
encryption.nsssl3sessiontimeout	Default: 0
encryption.nssslclientauth	Default: 0
encryption.nssslsessiontimeout	Default: 0
encryption.fortezza.nssslactivation	Default: off
encryption.rsa.nssslactivation	Default: on
encryption.rsa.nssslpersonalityssl	Default: Server-Cert
encryption.rsa.nsssltoken	Default: internal
gen.accounturl	Location of the server administration resource for end users. Default: http://%U@[Hostname]:[AdminPort]/bin/user/admin/bin/enduser
gen.configversion	Configuration version. Default: 4.0.
gen.filterurl	URL for incoming mail (server side) filter.
gen.folderurl	URL for personal folder management.
gen.installedlanguages	Default: en
gen.listurl	URL for mailing list management.
gen.newuserforms	Welcome message for new users.
gen.sitelanguage	Default language tag. Default: en.
local.cgiexeclist	List of pattern string used to match command to be executed.
local.dbstat.captureinterval	Interval to capture db statistics into counters (seconds). Default: 3600.
local.defdomain	Default domain - set by install.
local.enduseradmincred	Password for end user administrator.
local.enduseradmindn	User id for end user administrator.
local.hostname	DN of Local hostname.
local.imta.imta_tailor	Location of the imta_tailor file for this MTA instance.
local.imta.ldsearchtimeout	Specifies the LDAP search timeout when searching for users and groups. Default: -1
local.imta.lookupandsync	Defines which type of entries should be synched when using the direct LDAP lookup module. Specify 1 for users (default), 2 for groups, or 3 for users and groups.
local.imta.lookupfallbackaddress	When using the direct LDAP lookup module, this parameter allows the last alias lookup to be skipped. Instead the recipient address is rewritten to a fixed address. This parameter is used in conjunction with a SEND_ACCESS mapping rule to return an error code.
local.imta.lookupmaxnbfailed	When using the direct LDAP lookup module, this parameter defines when the routing process stops performing unsuccessful LDAP searches (in processes). The default: no limit.
local.imta.hostnamealiases	List of hostname aliases. Dirsync uses the hostnames in this list and those listed in local.hostname to check if an entry is local and compares it to the mailhost attribute of the entry.
local.imta.mailalises	List of comma-delineated LDAP attributes that override the default attributes. These attributes should be routable email addresses. For example: if local.imta.mailaliases=mail,mailAlternateAddress,rfc822mailbox, rfc822mail alias, the MTA will consider these attributes when routing messages. Default: mailAlternateAddress
local.imta.schematag	Defines the types of LDAP entries that are supported by Dirsync. Default: ims50.
local.imta.ugfilter	Sets the LDAP search filter that Dirsync uses when searching for users and groups. For example, if you want to consider only LDAP entries with the inetLocalMailRecipient and myispSubscriber objectclass, you would set this parameter to: local.imta.ugfilter=(&(objectClass=inetLocalMailRecipient) (objectClass=myispSubscriber)). The default filter is: objectClass=inetLocalMailRecipient. Note: In the case of an incremental dirsync, a timestamp filter will be added to this uglfilter. As a result, you will need to wrap your custom filter with parentheses.
local.imta.statssamplesize	Sets whether or not Dirsync displays a report of the number of users and group entries. Default: yes.
local.imta.reversenabled	Triggers the generation of the reverse database. Default: yes.
local.imta.vanityenabled	Controls whether or not vanity domains are enabled. Setting to yes enables vanity domain. If the variable does not exist, the MTA assumes that vanity domain is enabled. Default: yes.
local.imta.catchallenabled	Controls whether or not catch all addresses (mail or mailAlternateAddress in the form @domain) are enabled. Default: yes.
local.imta.scope	Prompts dirsync to cache only entries for which the mailhost attribute is the local host.
local.imta.ssrenabled	Triggers the generation of the server side rule database. Default: yes
local.installeddir	Full pathname of software installation directory.
local.instancedir	Full pathname of server instance directory.
local.lastconfigfetch	Last configuration fetch timestamp.
local.ldapbasedn	Base DN.
local.ldapcachefile	Location of cached configuration.
local.ldaphost	LDAP server for SIE.
local.ldapisiedn	Installed software DN.
local.ldappoolrefreshinterval	Length of time before LDAP connections are automatically closed then re-established to the LDAP server. Also, length of elapsed time until the failover directory server reverts back to the primary directory server. Default: -1 (never refresh)
local.ldapport	LDAP port. Default: 389.
local.ldapsiecred	Server credential.
local.ldapsiedn	Server instance entry DN.
local.ldapusessl	Sets whether or not LDAP auth uses SSL. Default: no.
local.queuedir	Full pathname of spool directory.
local.report.reportercmd	Command to run in order to generate reports. Default: server_root/bin/msg/admin/bin/reporter.pl
local.report.runinterval	Interval for job generation process to sleep in between checking for jobs (seconds). Default: 3600.
local.report.counterlogfile.expirytime	Maximum time (in seconds) a logfile is kept. Default: 604800.
local.report.counterlogfile.interval	The frequency that the counter is captured in seconds. Default: 600.
local.report.counterlogfile.logdir	Directory path for log files.
local.report.counterlogfile.loglevel	Default: Notice.
local.report.counterlogfile.maxlogfiles	Maximum number of files. Default: 10.
local.report.counterlogfile.maxlogfilesize	Maximum size (bytes) of each log file. Default: 2097152.
local.report.counterlogfile.maxlogsize	Maximum size of all logfiles. Default: 20971520
local.report.counterlogfile.minfreediskspace	Minimum amount of free disk space (bytes) that must be available for logging. Default: 5242880.
local.report.counterlogfile.rollovertime	The frequency in which to rotate logfiles (in seconds). Default: 86400.
local.report.counterlogfile.separator	Field separator in counter logfile. Default: `\t'.
local.report.job.desc.sample	Description for report job sample.
local.report.job.range.sample	Time range of input data.
local.report.job.schedule.sample	The time to start reporting process.
local.report.job.target.sample	Location to send the report.
local.report.job.type.sample	Type of report for this job. Default: listmbox.
local.report.type.cmd.listmbox	Command to execute listmbox report type.
local.report.type.desc.listmbox	Description for listmbox report type.
local.rfc822header.fixcharset	Character set where improperly encoded 8-bit message headers are interpreted by Messenger Express.
local.rfc822header.fixlang	Specifies two-letter language ID where improperly encoded 8-bit message headers are interpreted by Messenger Express. This parameter must be used in conjunction with the fixcharset parameter.
local.servergid	Server groupid in UNIX. Default: nobody.
local.servername	Server name.
local.serverroot	Server root.
local.servertype	Server type. Default: msg.
local.serveruid	User id of server in UNIX. Default: msgsrv.
local.service.http.maxcollectmsglen	Maximum message size the server collects from a remote POP mailbox. If any message in the mailbox to be collect exceeds this size, the collection will halt when that message is encountered.
local.service.http.rfc2231compliant	Enables WebMail's RFC-2231 encoder so that the attachment filename will be encoded in the method defined by RFC-2231.
local.service.http.smtpauthpassword	Password for end user AUTH SMTP user.
local service.http.smtpauthuser	User id for end user AUTH SMTP user. This parameter allows someone using Messenger Express to receive the same authenticated SMTP messages that they would normally receive using Netscape Communicator. In order for this to work, the user ID and password given to the mshttpd must be a store administrator; they must exist in the store.admins list (for example, admin and admin). After setting these parameters, any mail received from a local user should have the word "Internal" appearing next to the "From:" header in the Message View window.
local.service.pab.alwaysusedefaulthost	Enables one PAB server to be used. Default: False
local.service.pab.attributelist	Add new attributes to a personal address book entry. With this parameter, you can create an attribute that does not already exist. Default: pabattrs.
local.service.pab.enabled	Enable or disable PAB feature. Default: 1
local.service.pab.ldapbasedn	Base DN for PAB searches. Default: o=pab
local.service.pab.ldapbinddn	Bind DN for PAB searches.
local.service.pab.ldaphost	Hostname where Directory Server for PAB resides.
local.service.pab.ldappasswd	Password for user specified by local.service.pab.ldapbinddn.
local.service.pab.ldapport	Port number of the PAB Directory Server.
local.service.pab.maxnumberofentries	Maximum number of entries a single PAB can store. Default: 500
local.service.pab.migrate415	Enables PAB migration when set to "on". The default value is "off".
local.store.snapshotinterval	Message Store DB snapshot interval. Default: 0.
local.store.snapshotpath	Pathname for Message Store DB snapshot storage.
local.store.deadlock.autodetect	Sets whether all or just one thread resolves deadlock. Default: no.
local.store.deadlock.checkinterval	Specifies the sleep length (in microseconds) before lock_detect is set again. Default: 1000.
local.supportedlanguages	Languages supported by server code.
local.tmpdir	Default value for service.http.spooldir.
local.ugldapbasedn	Root of the user/group configuration tree in the Directory Server.
local.ugldapbindcred	Password for the user/group administrator.
local.ugldapbinddn	DN of the user/group administrator.
local.ugldaphasplainpasswords	Sets whether the user/groups LDAP server is configured to store user passwords in plaintext and readable to the server. Default: no.
local.ugldaphost	LDAP server for user lookup.
local.ugldapport	LDAP port. Default: 389.
local.ugldapuselocal	Default: yes
local.ugldapusessl	Sets whether or not to use SSL to connect to LDAP server. Default: no.
local.webmail.sso.cookiedomain	Specifies the value to include in the domain field of any SSO cookie that is sent back to the client.
local.webmail.sso.enable	Performs all SSO functions, including accepting and verifying SSO cookies presented by the client when the login page is fetched. It returns an SSO cookie to the client for a successful login and responds to requests from other SSO partners to verify its own cookies. If set to zero, the server does not perform any SSO functions. The default is 0. This parameter takes an integer value.
local.webmail.sso.id	Specifies the application ID value when formatting SSO cookies set by the WebMail server. The default is NULL. This parameter takes a string value.
local.webmail.sso.prefix	Specifies the prefix value when formatting SSO cookies set by the WebMail server. Only SSO cookies with this prefix value are recognized by the server; all other SSO cookies are ignored. The default is NULL. This parameter takes a string value.
local.webmail.sso.singlesignoff	Clears all SSO cookies on the client with prefix values matching the value configured in local.webmail.sso.prefix when the client logs out. If set to 0, the WebMail server only clears its own SSO cookie. The default is 0.
logfile.*.buffersize	Size of log buffers (in bytes). Default: 0. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.expirytime	Amount of time logfile is kept (in seconds). Default: 604800. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.flushinterval	Time interval for flushing buffers to log files (in seconds). Default: 60. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.logdir	Directory path for log files. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.loglevel	* can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.logtype	* can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.maxlogfiles	Maximum number for files. Default: 10. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.maxlogfilesize	Maximum size (bytes) of each log file. Default: 2097152. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.maxlogsize	Maximum size of all logfiles. Default: 20971520. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.minfreediskspace	Minimum amount of free disk space (bytes) that must be available for logging. Default: 5242880. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.rollovertime	The frequency in which to rotate logfiles (in seconds). Default: 86400. * can be one of the following components: admin, default, http, imap, imta, pop.
logfile.*.syslogfacility	Specifies whether or not logging goes to syslog. Default: no. * can be one of the following components: admin, default, http, imap, imta, pop.
logfiles.admin.alias	Default:|logfile|admin
logfiles.default.alias	Default:|logfile|default
logfiles.http.alias	Default:|logfile|http
logfiles.imap.alias	Default:|logfile|imap
logfiles.imta.alias	Default:|logfile|imta
logfiles.pop.alias	Default:|logfile|pop
service.authcachesize	Each entry takes 60 bytes. Default: 10000
service.authcachettl	Cache entry TTL in seconds. Default: 900.
service.dcroot	Root of DC tree in Directory Server. Default: o=Internet.
service.defaultdomain	Used to complete email address without domains.
service.dnsresolveclient	Sets whether or not to reverse name lookup client host. Default: no.
service.http.allowadminproxy	Sets whether or not to allow admin to proxy auth. Default: no.
service.http.allowanonymouslogin	Sets whether or not to allow anonymous login. Default: no.
service.http.connlimits	Maximum number of connections per IP address.
service.http.domainallowed	List of domains and/or IP address allowed HTTP access.
service.http.domainnotallowed	List of domains and/or IP addresses not allowed HTTP access.
service.http.enable	Sets whether or not the server is started automatically. Default: yes.
service.http.enablesslport	Sets whether or not the service is started on a sslport. Default: no.
service.http.extraldapattrs	Extra LDAP attributes for customization.
service.http.fullfromheader	Sets whether or not to send complete "from" header. Default: no.
service.http.idletimeout	Idle timeout (in minutes). Default: 3.
service.http.ipsecurity	Sets whether or not to restrict session access to login IP addresses. Default: yes.
service.http.ldappoolsize	Number of LDAP connections. Default: 1.
service.http.maxmessagesize	Maximum message size client is allowed to send. Default: 5242880.
service.http.maxpostsize	Maximum http post content length. Default: 5242880.
service.http.maxsessions	Maximum number of sessions per server process. Default: 6000.
service.http.maxthreads	Maximum number of threads per server process. Default: 250.
service.http.numprocesses	Number of processes. Default: 1.
service.http.plaintextmincipher	Sets plain text login allowance. Specify 0 to allow plain text login always. Specify -1 to never allow plain text login. Specify 40 or 128 to require login using encryption using 40 or 128 bit key. Default: 0.
service.http.port	Server port number. Default: 80.
service.http.proxydomainallowed	List of domain and IP addresses allowed to proxy auth.
service.http.resourcetimeout	Webmail resource reduction timeout (in seconds). Default: 900.
service.http.sessiontimeout	Webmail client session timeout. Default: 7200.
service.http.smtphost	SMTP relay host.
service.http.smtpport	SMTP relay port. Default: 25.
service.http.sourceurl	Webmail server URL.
service.http.spooldir	Spool directory for outgoing client mail.
service.http.sslcachesize	Number of SSL sessions to be cached. Default: 0.
service.http.sslport	SSL server port number. Default: 443.
service.http.sslsourceurl	Webmail server URL.
service.http.sslusessl	Sets whether or not to disable SSL. Default: yes.
service.imap.allowanonymouslogin	Allows anonymous login. Default: no.
service.imap.banner	IMAP protocol welcome banner.
service.imap.connlimits	Maximum number of connections per IP address.
service.imap.domainallowed	List of domains and/or IP addresses allowed IMAP access.
service.imap.domainnotallowed	List of domains and/or IP addresses not allowed IMAP access.
service.imap.enable	Sets whether or not the server is started automatically. Default: yes.
service.imap.enablesslport	Sets whether or not service is started on sslport. Default: no.
service.imap.idletimeout	Idle timeout (in seconds). Default: 30.
service.imap.ldappoolsize	Number of LDAP connections. Default: 1.
service.imap.maxsessions	Maximum number of sessions per server process. Default: 4000.
service.imap.maxthreads	Maximum number of threads per server process. Default: 250.
service.imap.numprocesses	Number of processes. Default: 1.
service.imap.plaintextmincipher	Sets plain text login allowance. Specify 0 to allow plain text login always. Specify -1 to never allow plain text login. Specify 40 or 128 to require login using encryption using 40 or 128 bit key. Default: 0.
service.imap.port	Server port number. Default: 143.
service.imap.sslcachesize	Number of SSL sessions to be cached. Default: 0.
service.imap.sslport	SSL server port number. Default: 993.
service.imap.sslusessl	Sets whether or not SSL is disabled. Default: yes.
service.ldapmemcache	Sets whether to enable or disable LDAP SDK memcache feature. Default: no.
service.ldapmemcachesize	Cache size in bytes. Default: 131072.
service.ldapmemcachettl	Length of time cache entry lives (in seconds). Default: 30.
service.ldappoolsize	Number of LDAP connections. Default: 1.
service.listenaddr	The IP address on which to listen.
service.loginseparator	The character to be used as the login separator. Default: @.
service.plaintextloginpause	The pause interval after successful login. Default: 0.
service.pop.allowanonymouslogin	Sets whether or not anonymous login is allowed. Default: no.
service.pop.banner	POP protocol welcome banner.
service.pop.connlimits	Maximum number of connections per IP address.
service.pop.domainallowed	List of domains and/or IP addresses allowed POP access.
service.pop.domainnotallowed	List of domains and/or IP address not allowed POP access.
service.pop.enable	Sets whether or not the server is started automatically. Default: yes.
service.pop.idletimeout	Idle timeout (in minutes). Default: 10.
service.pop.ldappoolsize	Number of LDAP connections. Default: 1.
service.pop.maxsessions	Maximum number of sessions per server process. Default: 600.
service.pop.maxthreads	Maximum number of threads per server process. Default: 250.
service.pop.numprocesses	Number of processes.
service.pop.plaintextmincipher	Sets plain text login allowance. Specify 0 to allow plain text login always. Specify -1 to never allow plain text login. Specify 40 or 128 to require login using encryption using 40 or 128 bit key. Default: 0.
service.pop.popminpoll	Minimum client poll interval in seconds. Default: 0.
service.pop.port	POP server port number. Default: 110.
service.pop.sslusessl	Sets whether or not to disable SSL. Default: yes.
service.readtimeout	Length of time permitted to receive "hello" string when checking for server response time. Default: 10.
service.sslpasswdfile	Password for each keyfile.
store.admins	Space separated list of user ids with Message Store Administrator privileges.
store.cleanupage	Minimum amount of time between expunge and cleanup (in hours). Default: 1.
store.dbcachesize	Mailbox list database cache size. Default: 8388608
store.dbtmpdir	Mailbox list database temporary directory.
store.defaultacl	Default ACL.
store.defaultmailboxquota	Default mailbox quota, if not specified in user account. Default: -1 (infinite).
store.defaultmessagequota	Default message quota, if not specified in user account. Default: -1 (infinite).
store.defaultpartition	Default partition.
store.diskflushinterval	Default: 15
store.expirerule.*.exclusive	When this parameter is set to `yes,' it is the only rule applied even if other rules match the given criteria. Default: no
store.expirerule.*.folderpattern	Folders by which the rules apply
store.expirerule.*.foldersizebytes	Maximum number of bytes in a folder.
store.expirerule.*.messagecount	Upper limit on number of messages to be kept in the specified folders.
store.expirerule.*.messagedays	Upper limit on how long a message is kept in the specified folders.
store.expirerule.*.messagesize	Maximum number of bytes in a message.
store.expirerule.*.messagesizedays	Length of time messagesize message can stay.
store.expirestart	Specifies the hour at which stored starts cleanup and expire on a daily basis. Default: 23
store.partition.*.path	Store partition directory path.
store.partition.primary.path	Full path name of the primary partition Default: server-root/msg-instance/store/ partition/primary
store.quotaenforcement	Turns quotaenforcement on or off. Default: on.
store.quotaexceededmsg	Message to be sent to user when quota exceeds store.quotawarn. To enable this parameter, you can set the following configuration variables: configutil -o store.quotaexceededmsg -v 'Subject: WARNING: User quota exceeded\$\$User quota threshold exceeded - reduce space used.' configutil -o store.quotanotification -v on Default: off
store.quotaexceededmsginterval	Interval (in days) to wait before sending another quotaexceededmsg. Default: 7.
store.quotagraceperiod	Time (in hours) after a mailbox is over quota, before mail to that mailbox gets rejected. Default: 120.
store.quotanotification	Turns quotanotification on or off. Default: off
store.quotawarn	Percentage of quota that is exceeded before clients are warned. Default: 90.
store.serviceadmingroupdn	DN of service administrator group.
store.umask	umask Default: 077