Groupwise Passwords; Mailbox Passwords - Novell GROUPWISE 7 - SECURITY ADMINISTRATION Manual

GroupWise Passwords

7 0
®
Access to GroupWise mailboxes is protected by post office security settings or GroupWise
passwords. Agent passwords grant access to remote servers and to Novell
protect access to GroupWise agent status information.
Section 70.1, "Mailbox Passwords," on page 1111
Section 70.2, "Agent Passwords," on page 1115
See also Part XVI, "Security Policies," on page

70.1 Mailbox Passwords

When you are setting up a new GroupWise system, you need to determine what kind of password
protection you want to have on users' GroupWise mailboxes before users start running GroupWise.
®
In ConsoleOne , you can choose where password information is obtained when users log in to
GroupWise and you can set defaults under Client Options to enforce your choices. You and
GroupWise client users should keep in mind that GroupWise passwords are case sensitive.
Section 70.1.1, "Using Post Office Security Instead of GroupWise Passwords," on page 1111
Section 70.1.2, "Requiring GroupWise Passwords," on page 1112
Section 70.1.3, "Managing GroupWise Passwords," on page 1112
Section 70.1.4, "Using LDAP Passwords Instead of GroupWise Passwords," on page 1114
Section 70.1.5, "Bypassing Mailbox Passwords to Respond to Corporate Mandates," on
page 1114
70.1.1 Using Post Office Security Instead of GroupWise
Passwords
When you create a new post office, you must select a security level for it.
If you select Low Security for the post office, users are not required to set passwords on their
GroupWise mailboxes. However, passwordless mailboxes are completely unprotected from other
users who know how to use the @u-user_ID startup switch.
If you select High Security for the post office, users are still not required to set passwords on their
GroupWise mailboxes, but they are required to be successfully logged in to a network before they
can access their own passwordless mailboxes. Users cannot access other users' passwordless
mailboxes.
After you select High Security, you can further enhance post office security by requiring specific
types of authentication before users can access their passwordless GroupWise mailboxes. You can
require eDirectory authentication so that users must be logged into eDirectory before they can
access their passwordless GroupWise mailboxes.
In spite of these passwordless solutions to GroupWise mailbox security, users are always free to set
their own GroupWise passwords on their mailboxes. When they do, the post office security settings
no longer apply (except for LDAP authentication as discussed below) and users are regularly faced
1159.
®
eDirectory , and
TM
GroupWise Passwords
70
1111