Facilitating Access To Edirectory; Protecting The Agent Web Consoles; Protecting The Groupwise Monitor Web Console - Novell GROUPWISE 7 - SECURITY ADMINISTRATION Manual

70.2.2 Facilitating Access to eDirectory

If you have enabled eDirectory user synchronization, the MTA must be able to log in to eDirectory
in order to obtain the updated user information. An eDirectory-enabled MTA should be installed on
a server where a local eDirectory replica is located.
If the eDirectory-enabled NetWare MTA is running on a different server from where the domain is
located, you must add the /user and /password switches, or the /dn switch, to the MTA startup file so
that the MTA can authenticate to eDirectory. The /dn switch is preferable, so that username and
password information is not exposed in the MTA startup file. If the NetWare MTA is running on the
same server where the domain is located, the MTA can look up the distinguished name in the
domain database.
For the eDirectory-enabled Windows MTA, you must add the /user and /password switches to the
MTA startup file in order to specify the network user account that the MTA should use to
authenticate to eDirectory.
For more information, see

70.2.3 Protecting the Agent Web Consoles

When you install the POA and the MTA, they are automatically configured with an agent Web
console and no password protection is provided. When you install the Internet Agent and the
WebAccess Agent, you can choose whether to enable the agent Web console during installation. If
you do, you can provide password protection at that time.
If you do not want agent Web console status information available to anyone who knows the agent
network address and port number, you should set passwords on your agent Web console, as
described in the following sections:
If you plan to access the agent Web consoles from GroupWise Monitor, it is most convenient if you
use the same password on all agent Web consoles. That way, you can provide the agent Web console
password once in GroupWise Monitor, rather than having to provide various passwords as you view
the Web consoles for various agents. For information about providing the agent Web console
password in GroupWise Monitor, see
page

70.2.4 Protecting the GroupWise Monitor Web Console

Along with the agent Web consoles, you can also provide password protection for the Monitor Web
console itself, from which all the agent Web consoles can be accessed. For instructions, see
Section 59.8, "Configuring Authentication and Intruder Lockout for the Monitor Web Console," on
page
1116 GroupWise 7 Administration Guide
Section 41.4.1, "Using eDirectory User Synchronization," on page
Section 37.2, "Using the POA Web Console," on page 530
Section 42.2, "Using the MTA Web Console," on page 657
Section 49.2, "Using the Internet Agent Web Console," on page 787
Section 56.1.2, "Using the WebAccess Agent Web Console," on page 929
978.
985.
Section 59.4, "Configuring Polling of Monitored Agents," on
638.