4 Enabling Core Services for Convergence

You can integrate Oracle Communications Convergence with other Oracle Communications products to provide the following core services:

  • Email and messaging, provided by Oracle Communications Messaging Server.

  • Calendar, provided by Oracle Communications Calendar Server.

  • Address book, provided by Convergence or Oracle Communications Contacts Server.

  • Instant messaging, provided by Oracle Communications Instant Messaging Server.

  • Indexing and search, provided by Oracle Communications Indexing and Search Service.

Convergence allows you to provide services for a specified set of users or domains. You might want to provide or disable services at the following levels:

  • The entire Convergence installation

  • An individual domain (or set of domains)

  • An individual user (or set of users)

Enabling Services for the Entire Convergence Installation

The address book service is enabled by default. You can enable or disable any of the other services without customizing Convergence.

After you install Convergence, you must initially configure the software by running the init-config utility. When you run init-config, you can enable and configure mail, calendar, and instant messaging services for the entire installation. You can enable any combination of these services. Thus, the "default" setting for whether a service is enabled or not depends on whether you select it for configuration when you run init-config. See Convergence Installation and Configuration Guide for more information.

After the initial configuration, you can enable or disable a service for your entire Convergence deployment. This encompasses all domains in the deployment and all users under the domains.

Use the Convergence iwcadmin command-line utility to set the following options to either true or false:

  • mail.enable

  • cal.enable (for Calendar Server 6.3) or caldav.enable (for Calendar Server 7)

  • ab.enable (for Convergence address book service) or nab.enable (for Contacts Server address book service)

  • im.enable

  • ISS.enable

    Note:

    In a calendar server co-existence scenario, be sure to set both cal.enable (Calendar 6.3) and caldav.enable (Calendar 7) parameters.

    Only one address book service parameter can be set to true, either ab.enable or nab.enable.

Enabling Services for an Individual User or Domain

To enable or disable a service for a user or domain, you must set the appropriate LDAP attributes for that service in the user entry or domain entry in the LDAP. You can use Oracle Communications Delegated Administrator to set the LDAP attributes that determine service availability.

For detailed descriptions of the Delegated Administrator command-line utility, see Delegated Administrator System Administrator’s Guide.

Managing Service Access Through LDAP

Managing services through LDAP affects user access to Convergence and to the software products that deliver the Convergence services. This is a very different conceptual territory than controlling the services available through Convergence, the client. When you disable LDAP service attributes, user access to the software that provides service is also disabled. All clients are disabled for those users, not only Convergence.

To manage access to services in the LDAP:

  1. Install and configure the Oracle Communications software that delivers services in Convergence: Messaging Server, Calendar Server, Contacts Server (optional), and Instant Messaging (optional).

  2. Manage the services available to users and domains in the LDAP directory. When you change a user's access to a service in the LDAP directory, you affect that user's access to Messaging Server, Calendar Server, or Instant Messaging, no matter which clients that user may use to access these services. Similarly, when you change domain-level services in LDAP, you affect the access to services for all users in the domain.

  3. Manage the services available in Convergence. This affects Convergence users only.

To enable a service for an individual domain or user, you must perform all three preceding tasks. To make a service available to one Convergence user, you must enable that service for the entire Convergence installation. See "Enabling Services for the Entire Convergence Installation" for more information.

See "Enabling Services for an Individual User or Domain" for more information.

Using the Delegated Administrator Command-Line Utility to Manage Services

You can use the Delegated Administrator commadmin command-line utility to manage services in Convergence.

For detailed information about the commadmin command, see Delegated Administrator System Administrator’s Guide.

The following examples manage Convergence services using the example.com domain.

  • To create a domain with the mail and calendar services:

    commadmin domain create -D username -d example.com -n example.com -w bolton -S mail,cal -H mailhost.example.com
    
  • To add the mail and calendar services to an existing domain:

    commadmin domain modify -D username -w bolton -n example.com -d example.com -S mail, cal
    
  • To delete the mail and calendar services from an existing domain:

    commadmin domain delete -D username -w bolton -d example.com -n example.com -S mail,cal
    
  • To create a user with the mail and calendar services in an existing domain:

    commadmin user create -D username -n example.com -w secret -F last_name -l first_name -L major -W secret -S mail,cal -H mailhost.example.com
    
  • To enable the mail and calendar services for an existing user:

    commadmin user modify -D username -n example.com -w bolton -l user_name -A description:"description" -S mail,cal -H mailhost.example.com
    
  • To disable the mail and calendar services for an existing user:

    commadmin user delete -D chris -n example.com -w bolton -l user_name -S mail, cal
    

Using Delegated Administrator to Manage Services

In the Delegated Administrator Administration Console, you can manage services by service packages. Sets of service packages are allocated to an organization or domain, and then the service packages are assigned to individual users. The service packages provide mail and calendar services to users.

To manage domain-level or organization-level services with the Delegated Administrator Administration Console, you must log in as a top-level administrator.

For information about service packages and how to use them, see Delegated Administrator System Administrator’s Guide.

Enabling and Disabling Services with Direct LDAP Provisioning

You can configure mail, calendar, and instant messaging services by setting the appropriate LDAP user and domain attributes. You can use direct LDAP tools or provisioning scripts (if they have been developed at your site).

LDAP Attributes for Mail Service

To enable mail service to an individual user, set the following attribute in the user's entry in the User/Group tree:

mailUserStatus: active

To disable a user's mail service, set:

mailUserStatus: deleted

To enable mail service to an individual domain, set the following attribute in the domain entry:

mailDomainStatus: active

To disable access to mail service for all users in the domain, set:

mailDomainStatus: deleted

LDAP Attributes for Calendar Service

To enable calendar service to an individual user, set the following attribute in the user's entry in the User/Group tree:

icsStatus: active

Note:

When the icsStatus attribute is used in a user entry, it must be associated with the icsCalendarUser object class.

To disable a user's calendar service, set:

icsStatus: deleted

To enable the calendar service to an individual domain, set the following attribute in the domain entry:

icsStatus: active

Note:

When the icsStatus attribute is used in a domain entry, it must be associated with the icsCalendarDomain object class.

To disable access to calendar service for all users in the domain, set:

icsStatus: deleted

LDAP Attributes for Instant Messaging Service

To enable instant messaging service to an individual user, you can use the imadmin assign services command, or you can add the following instant messaging object classes in the user's LDAP entry in the User/Group tree:

sunIMUser
sunPresenceUser

To disable access to instant messaging service for a user, remove the above object classes from the user's LDAP entry.

Enabling and Configuring IM Service After Initial Configuration of Convergence

To enable IM service after having configured Convergence, perform the following steps:

  1. Set the im.enable=true using the iwcadmin command.

  2. In /var/opt/sun/comms/iwc/config, edit httpbind.conf. Set the IM server name, domain name, component JIDs, and password for httpbind and avatar.

    Note:

    The component JID and password should match the ones specified in the iim.conf file that you specified when you configured Convergence with the Instant Messaging Server during the installation.

    The passwords for the httpbind and the avatar component must be encrypted. See "Verifying passwords in Convergence" for information on generating the encrypted password.

  3. Restart the GlassFish server.

  4. Type the following:

    /opt/sun/comms/im/sbin/imadmin assign_services
    

    to add IM object classes to the users.