Sun Internet Mail ServerTM 4.0 Documentation Update




This documentation update covers documentation updates for the SIMS 4.0 documentation set after the initial release of the printed and online documentation set. The update is cumulative and also reflects changes introduced by SIMS product patch releases that affect the SIMS 4.0 documentation set.


Documentation Updates

The following information did not make it into the Sun Internet Mail Server 4.0 Documentation and is available only through the external web site updates.

General Documentation Updates  

 

New Member Added to the auth_user_info Structure (bug 4259469 and 4303295)  

3  

Family Accounts  

3  

URL to Online Documentation (bug 4250897)  

4  

Installation Guide  

 

Sun WebServer Admin Tool does not Listen to Port 2380 (bug 4244446)  

4  

Live Links (bug 4248156)  

5  

Appendix A, "Installing Netscape Directory Services 4.1"  

6  

Appendix B, "Installing Netscape Directory Services 4.1 for SIMS High Availability"  

6  

Chapter 9, "Post Installation Tasks"  

9  

Accessing the Online Documentation (bug 4250897)  

9  

VxFS Version (bug 4269589)  

10  

Adding the SIMS Directory Information Tree (bug 4271345)  

10  

Concepts Guide  

 

Removing Deleted Users (bug 4254131)  

11  

Delegated Management Tasks (bug 4266921)  

11  

Administrator's Guide  

 

Message Store Space Usage GUI (bug 4294471)  

12  

Chapter 12, Monitoring and Logging (bug 4248083)  

12  

Optimize Access and Relay Restrictions (bug 4259424)  

12  

Option Not Available in imquotacheck Command (bug 4264215)  

13  

Domain Name from IP Address (bug 4268613)  

13  

Populating the Directory with Users and Groups (bug 4268055)  

14  

Using dns_verify to Lookup Realtime Spam Sites (bug 4272482)  

14  

Reference Guide  

 

SMTP ETRN Command Default (bug 4271392)  

15  

Provisioning Guide  

 

Precedence Rules Error Page 53 (bug 4250544)  

16  

Precedence Rules Error Page 49 (bug 4250532)  

16  

Delegated Management Guide  

 

Inactive User (bug 4263876)  

17  

Man Pages  

 

The -n Option for imadmin-add-mg is not Valid (bug 4301174)  

17  

The -G Parameter for imadmin-search-mg is not Optional (bug 4301753)  

17  

Release Notes  

 

Wrong NSDS Location in Installation Guide (bug 4247530)  

18  


General Documentation Updates


New Member Added to the auth_user_info Structure (bug 4259469 and 4303295)

A new member, domain_info, was added to the auth_user_info structure to bring a domain name into the API. This domain name will either be the domain inferred from the IP address or, if that wasn't possible, the default domain for the server.

The existing auth_user_info structure member user_domain will hold the "definitive" domain on the way out of auth API. This means if the user logged in with uid+domain, that domain takes precedence over what was brought into the API through domain_info and user_domain must return that value to imaccessd. Otherwise, user_domain should have the same value as domain_info upon exit from the API call. The server will free domain_info.


Family Accounts

A new feature allows an individual customer of an ISP to request a special grouping of e-mail accounts. This grouping of e-mail accounts, called Family Accounts (or

Managed groups) can be administered by one member of the family; the family head. The electronic mail facilities for Family Accounts is provided by Sun Internet Mail Server (SIMS).

Family Accounts differ from distribution lists in two major ways:

A Family Account can have only one family head who serves as the "owner;" a distribution list can have multiple owners.
If a family member is removed from the family account, then that person is effectively removed from the entire mail system; deletion from a distribution list does not imply deletion from the mail system.

Family Accounts and domains are similar in that they are collections of users primarily for billing purposes. However, a Family Account is typically much smaller (around 10 users) than a domain (hundreds or thousands of users). Additionally, a family head generally has fewer administration privileges than a domain administrator.

A Family Account can only be administered by two classes of users: an ISP system administrator, and the family head. The ISP system administrator is the person who creates the Family Account; this person also creates the e-mail accounts of the family head. The family head can then proceed to create additional accounts for family members, up to a predetermined maximum number of accounts; this number is agreed upon by the ISP system administrator and the family head.

The family head can also allocate quotas for each family member.


URL to Online Documentation (bug 4250897)

The URL to the online documentation set was not documented in the SIMS 4.0 documentation. Once SIMS 4.0 is installed on your machine, you can access the documentation set at:

http://<machine-name>/sims/en/DocSet.html


Installation Guide

The SIMS 4.0 Installation Guide has been updated. The updated version includes changes and bug fixes made to the SIMS 4.0 Installation Guide after the initial release of the printed and online version. The updated version is available in postscript, PDF, and HTML formats and can be found at: http://www.sun.com/sims/Docs_4.0/html/.

This section provides descriptions for the changes made to the SIMS 4.0 Installation Guide.


Sun WebServer Admin Tool does not Listen to Port 2380 (bug 4244446)

Not enough documentation was provided in the Installation Guide about

The Sun WebServer administration server uses port 2380 by default, but you may specify any port for the Sun WebServer administration server to use. To change the default port, edit the administration server's configuration file (located in /usr/http/admin_server/conf/admin.httpd.conf) and change the port number for the port{} block. If the administration server is already running, you must restart it to use the new port.

The default port{} block looks like:

port 2380 {
...
}


Start Sun WebServer

To start Sun WebServer, run htserver start with the -a option:

# htserver start -a
  admin: Started.

To verify that your server is running, use the htserver list command. If the server instance named admin has a process ID listed, then the server is running:

# htserver list
  Instance: admin
  Enabled: Yes
  pid: 29159
  COnfig file: /usr/http/admin_server/conf/admin.httpd.conf

If you want the administration server automatically restarted if it stops or at reboot, you must enable the server. If the administration server is enabled, it will be restarted whenever htserver start is run with no arguments.

To enable the server:

# htserver enable -a
  admin: Enabled.

For more information on htserver, refer to the htserver(1m) man page.


Live Links (bug 4248156)

All hard coded internal references throughout the manual have been replaced with live links.


Appendix A, "Installing Netscape Directory Services 4.1"


Stopping and Starting the LDAP Server (bug 4250205)

On Page 131, added Step 2. This step stops the LDAP server before editing the slapd.conf configuration file.

and on Page 132 added Step 7. This step starts the LDAP server after the schema and configuration files have been modified to preserve the changes.


Installing NSDS for SIMS from a Separate CD (bug 4247530)

On page 129, added Steps 2 through 4. These steps install NSDS from a separate CD that is included in the SIMS 4.0 packaging.


Appendix B, "Installing Netscape Directory Services 4.1 for SIMS High Availability"


Misprint in Instructions to Re-Register SIMS/HA Service (bug 4278651)

On page 153, step 5, there is a misprint. The existing text reads:

5. Re-register the SIMS/HA service.
# /opt/SUNWhadf/bin/hareg -r Sun_Internet_Mail -b
/opt/SUNWimha/clust_proga -m START_NET=imha_start_net, STOP_NET=imha_stop_net -t START_NET=120,STOP_NET=30 -v 4.0 -d NSDS

There is no such /opt/SUNWimha/clust_proga command; it should read
/opt/SUNWimha/clust_progs.


Installing NSDS for SIMS/HA from a Separate CD (bug 4247530)

On page 141, added Steps 2 through 4. These steps install NSDS from a separate CD that is included in the SIMS packaging.


Changes to the nsserveraddress and LD_LIBRARY_PATH (bug 4249816)

On page 145, changed hostname in the nsserveraddress, ha-logical-host-ipaddress, to ipaddress, ha-logical-host-ipaddress.

On page 144, added a note to indicate that LD_LIBRARY_PATH needs to include shared-file-systemNSDS/lib.


Changes to ipaddress, syntax, package name, and pathname (bug 4250211)

On Page 141, added domainame to ha-logical-hostname to clarify that a fully qualified domain name (FQDN) of the directory server on which the Netscape Directory Services software is being installed must be provided for the Computer Name. The correct name is ha-logical-hostname.domainame.

On Page 145, corrected the syntax for the command that changes the nsserveraddress to the logical address for the system. The correct syntax is:

dn: cn=configuration, cn=admin-serv-<ha-logical-hostname>, cn=Netscape Administration Server, cn=Server Group, cn=<ha- logical-hostname>, ou=<root domain name>, o=NetscapeRoot

On Page 147, corrected one of the SunCluster package names. The correct name is SUNWscnsl.

On Page 148, added the path to the nsldap_svc_stop script. The correct path is /opt/SUNWcluster/ha/nsldap.


Changes to the syntax (bug 4247488)

On page 153, corrected the syntax (pv to -v) for the command that re-registers the SIMS/HA service. The correct syntax is:

# /opt/SUNWhadf/bin/hareg -r Sun_Internet_Mail -b /opt/SUNWimha/clust_proga -m START_NET=imha_start_net, STOP_NET=imha_stop_net -t START_NET=120,STOP_NET=30 -v 4.0 -d NSDS


Chapter 9, "Post Installation Tasks"


Adjusting dirsync and impurge

On Page 92, added the instructions to adjust IMTA dirsync and impurge schedules after installing SIMS.

On Page 93, added the instructions to configure dirsync and impurge after installing SIMS.


Starting the Delegated Management Console (bug 4266933)


Note - The following has not been included in the updated SIMS 4.0 Installation Guide.

Some corrections are made to the instructions on starting the Delegated Management Console on page 98, "Starting the Delegated Management Console." The correct instructions for steps 1 and 2 are:

  1. Bring up your web browser.
  You need access to an HTML 2.0 compliant browser or higher.
  2. Enter the URL specific to your domain.
  The URL is http://<machine-name>/sims/<locale>/login.html. The URL is language specific. For example, the login URL for English might be: http://medical3.stream.com/sims/en/login.html. The <machine-name> variable should be the fully qualified name of the machine or server that is running your mail server and is recognizable from outside of your domain.

See chapter 2, "Getting Started" of the SIMS 4.0 Delegated Management Guide for complete steps on starting and logging into the Delegated Management Console.


Accessing the Online Documentation (bug 4250897)

On page 95, added the URL to access the SIMS 4.0 online documentation set that can be used by users who have installed the SIMS documentation from the product CD.


VxFS Version (bug 4269589)


Note - The following has not been included in the updated SIMS 4.0 Installation Guide.

The version numbers for the VxVM volume manager and VxFS file system, as specified in Table 3-2 "SIMS/HA Software Requirements" of chapter 3 needs to be more specific. For the volume manager, the version number for VxVM should read "VxVM 2.6 or higher." For the file system, the version number for VxFS should read "VxFS File 3.2.5 or higher."


Adding the SIMS Directory Information Tree (bug 4271345)


Note - The following has not been included in the updated SIMS 4.0 Installation Guide.

An error exists in the section "Adding the SIMS Directory Information Tree (DIT)" of Appendix A, "Installing Netscape Directory Services for SIMS."

The correct command to create the DIT for your directory is:

# /usr/netscape/server4/shared/bin/ldapmodify -a -c -h <hostname>\
-p <portnumber> -D "cn=<Directory_Manager>" -w passwd -f \
/etc/opt/SUNWmail/slapd.ldif


Concepts Guide

This section describes any changes or updates to the SIMS 4.0 Concepts Guide.


Removing Deleted Users (bug 4254131)

An error exists on page 60 (Table 7-1) of the SIMS 4.0 Concepts Guide. The table entry indicates the following:

IMTA-Directory Cache Update
Performed During Full Synchronization?
Performed During Incremental Synchronization?

Deleted user entries removed  

Yes  

No  

The entry should be changed to:

IMTA-Directory Cache Update
Performed During Full Synchronization?
Performed During Incremental Synchronization?

User entry marked as deleted  

Yes  

Yes  


Delegated Management Tasks (bug 4266921)

An error exists on page 111 (Table 11-3) of the SIMS 4.0 Concepts Guide. The table entry for "Create, modify distribution lists" incorrectly states that a distribution list owner can create a distribution list using the Delegated Management Console. Only the delegated administrator or SIMS administrator can create distribution lists.


Administrator's Guide

This section describes any changes or updates to the SIMS 4.0 Administrator's Guide.


Message Store Space Usage GUI (bug 4294471)

The Administrator's Guide describes the Message Store Space Usage graphical user interface (GUI) as having the following fields:

Path Device Mounted Or Size

However, the actual fields as they appear in the GUI are:

Path Device Size Available


Chapter 12, Monitoring and Logging (bug 4248083)

Page 251, Table 12-1: dsweb.log.log should be dsweb.log.

Page 259, Table 12-6: deliveredqueue_count should be delivered_queue_count.

Page 266, last bullet: The cron entry has multiple -m entries:

-m 20g -m 90‰

there should only be one entry:

-m 90‰

Page 267: Delete text under table begins with "crontab entries:"


Optimize Access and Relay Restrictions (bug 4259424)

On page 140, step 3, replace libimtamap.so with libimtamap.so.1


Option Not Available in imquotacheck Command (bug 4264215)

Page 166 states: The imquotacheck command sends an email warning to users who are approaching their mail store quota. This command can be put in a cron file to provide a daily check on mail store users. You can configure the desired warning message using the -f flag. See the man page.

The -f option is no longer available for the imquotacheck command.


Domain Name from IP Address (bug 4268613)

On page 168, section "To Set Up the System So that Users Can Log in Without Entering their Domain Name" make the following corrections:

  1. In step 3, replace:
  mail.bridge.net IN A 209.20.10.2
mail.bridge.net IN A 209.20.10.3
  with:
  mail.bridge.net IN A 209.20.10.1
mail.beam.com IN A 209.20.10.2
mail.stream.com IN A 209.20.10.3
  2. In step 4, replace:
  ims-bind-address: mail.beam.com=beam.com
ims-bind-address: mail.stream.com=stream.com
  with:
  # beam.com uses connect to mail.beam.com
ims-bind-address: mail.beam.com=beam.com
# stream.com uses connect to mail.stream.com
ims-bind-address: mail.stream.com=stream.com
# other users connect to mail.bridge.net
ims-bind-address: mail.bridge.net

Populating the Directory with Users and Groups (bug 4268055)

The following changes should be made:

  1. On page 202 replace all instances of ispAuthorizedServices with inetAuthorizedServices.
  2. On page 322, step 4, replace imldifsync.conf with imldifsync.users.conf.
  3. On page 322, step 5, replace the first sentence and code sample with the following:
  5. Uncomment the passwd-file and aliases-file and set these values to the files you wish to use:

passwd-file = "/tmp/passwd"
aliases-file = "/tmp/aliases"

  4. Remove step 2 on page 326. It is unnecessary.

Using dns_verify to Lookup Realtime Spam Sites (bug 4272482)

The following changes should be made:

  1. On page 129, add the following line after the second paragraph under the section entitled "dns_verify Arguments."
  The default delimiter `|' can be changed by placing a new delimiter character (must be non-alphanumeric) immediately preceding the hostname.
  2. On page 130, replace the first paragraph and code sample in the section entitled "Using dns_verify to Lookup Realtime Spam Sites" with the following:
  You can use dns_verify to look up addresses on a realtime black hole list by setting ENABLE_RBL=1 in your dispatcher configuration file (/etc/opt/SUNWmail/imta/dispatcher.cnf--see page 196 of the SIMS Reference Manual) or by creating the appropriate dns_verify entry in your PORT_ACCESS mapping table in the mappings file. Below is an example mapping table entry (note that the argument delimiter has been changed to `+'):

PORT_ACCESS

TCP|*|25|*.*.*.*|* $[/opt/SUNWmail/imta/lib/ dns_verify,dns_verify,\
+$4.$3.$2.$1.rbl.maps.vix.com\
+$$N500$ 5.7.1$ Mail$ from$ $$1.$$2.$$3.$$4\
$ refused,$ see$ http://maps.vix.com/rbl/\
+$$CTCP|$$0|25|$$1.$$2.$$3.$$4|$$5]


Reference Manual

This section describes any changes or updates to the SIMS 4.0 Reference Manual.


SMTP ETRN Command Default (bug 4271392)

Page 113 of the section "Receiving an SMTP ETRN Command (allowetrn, blocketrn, domainetrn, silentetrn)" states: "The allowetrn, blocketrn, domainetrn, and silentetrn keywords control the IMTA response when a sending SMTP client issues the SMTP ETRN command, requesting that the IMTA attempt to deliver messages in the IMTA queues. allowetrn is the default; the IMTA will attempt to honor all ETRN commands."

allowetrn is not the default. The default behavior is silentetrn.


Provisioning Guide

This section describes any changes or updates to the SIMS 4.0 Provisioning Guide.


Precedence Rules Error Page 53 (bug 4250544)

Precedence rule 2 on Page 53 of the SIMS Provisioning Guide states:

  2. if authorizedSubmitter attribute exists in the LDAP entry, the sender's address must match either the mail attribute or rfc822MailAlias attribute of any DN listed in the form of a ldap:///<DN> address and must not match the RFC-822 address listed in the form of a mailto:<RFC-822> address.

It should read:

  2. if authorizedSubmitter attribute exists in the LDAP entry, the sender's address must match either the mail attribute or rfc822MailAlias attribute of any DN listed in the form of a ldap:///<DN> address or it must match the RFC-822 address listed in the form of a mailto:<RFC-822> address.

Precedence Rules Error Page 49 (bug 4250532)

The code sample that reads:

dn: cn=basketball,ou=groups,dc=stream,dc=com,o=internet
changetype: modify
add: owner
uniqueMember: cn=Kevin Cox (Lighting),ou=people,dc=stream,dc=com,o=internet

is incorrect. The last line should be as follows:

owner: cn=Kevin Cox (Lighting),ou=people,dc=stream,dc=com,o=internet


Delegated Management Guide

This section describes any changes or updates to the SIMS 4.0 Delegated Management Guide.


Inactive User (bug 4263876)

Page 23 of the section "Enabling or Disabling a User" states: "If a user account is inactive, the user cannot log onto the system nor can e-mail be sent from that account."

This description should be changed to: "If a user account is inactive, the user cannot log onto the system. E-mail sent to the user will be returned to the sending MTA with a temporary failure code so that it can retry the message delivery at a later time."


Man Page Updates

This section describes any changes or updates to the SIMS 4.0 man pages.


The -n Option for imadmin-add-mg is not Valid (bug 4301174)

The imadmin add mg command does not support the -n option. References to this option have been changed to the -d option.


The -G Parameter for imadmin-search-mg is not Optional (bug 4301753)

The -G option for the imadmin search mg command is mandatory:

# imadmin search mg -D siteadmin -w secret "-G "

The man page has been changed accordingly.


Release Notes

This section describes any changes or updates to the SIMS 4.0 Release Notes.


Wrong NSDS Location in Installation Guide (bug 4247530)

In the description for the bug 4247530 in the SIMS 4.0 Release Notes, the word "directory" needs to be changed to "directry." That is the letter "o" needs to be dropped

This is indicated in step 2 as:

2. untar the /cdrom/directory_41ue/solaris/directory/directory.tar package into an installation directory.

Should be:

2. untar the /cdrom/directory_41ue/solaris/directry/directry.tar package into an installation directory.


Copyright © 2000 Sun Microsystems, Inc. All Rights Reserved.