[Mail] iPlanet Messaging Server 5.2 安装步骤，share it!

weixin_38067822 2003-10-24 04:12:33

iPlanet Messaging Server是一个强大的、可靠的、大容量的Internet邮件服务器，是为企业和服务提供商设计的。Messaging Server采用集中的LDAP数据库存储用户、组和域的信息。它支持标准的协议、多域名和Webmail，具有强大的安全和访问控制。

iPlanet Messaging Server的安装... 0

安装iPlanet Messaging Server 1

配置Directory Server Plug-ins. 7

安装iPlanet Web Server 7

安装iPlanet Delegated Administrator 7

服务自动启动文件/etc/rc3.d/S99iplanet 10

转入原有的邮件用户及其邮件... 10

日常维护... 11

创建用户... 11

用户使用... 11

iPlanet Messaging Server的安装
下图显示了iPlanet各产品之间的关系：

在安装光盘的solaris目录下，有三个需要安装的产品的目录：

m ES - iPlanet Web Server

m iDA - iPlanet Delegated Administrator for Messaging

m iMS - iPlanet Messaging Server

安装的顺序是：iPlanet Messaging Server，iPlanet Web Server，iPlanet Delegated Administrator for Messaging。

安装iPlanet Messaging Server
安装前先建立一个系统用户mailsrv，首要组是60001。

进入iMS目录，输入如下命令：

./setup

安装程序运行后会依次问下列问题：

（1）欢迎界面

Welcome to the iPlanet Server Products installation program. This

program will install iPlanet Server Products and the iPlanet

Console on your computer.

It is recommended that you have "root" privilege to install the

software.

Tips for using the installation program:

- Press "Enter" to choose the default and go to the next screen

- Type "Control-B" to go back to the previous screen

- Type "Control-C" to cancel the installation program

- You can enter multiple items using commas to separate them.

For example: 1, 2, 3

Would you like to continue with installation? [Yes]:

直接敲回车键。

（2）许可协议

BY INSTALLING THIS SOFTWARE YOU ARE CONSENTING TO BE BOUND BY AND

ARE BECOMING A PARTY TO THE AGREEMENT FOUND IN THE LICENSE.TXT

FILE. IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT,

PLEASE DO NOT INSTALL OR USE THIS SOFTWARE.

Do you agree to the license terms? [No]:

输入“y”敲回车键。

（3）安装Netscape服务器

Select the items you would like to install:

1. iPlanet Servers

Installs iPlanet Servers with the integrated Netscape Console

onto your computer.

2. Netscape Console

Installs Netscape Console as a stand-alone Java application

on your computer.

To accept the default shown in brackets, press the Enter key.

Select the component you want to install [1]:

直接敲回车键。

（4）安装类型

Choose an installation type:

1. Express installation

Allows you to quickly install the servers using the most

common options and pre-defined defaults. Useful for quick

evaluation of the products.

2. Typical installation

Allows you to specify common defaults and options.

3. Custom installation

Allows you to specify more advanced options. This is

recommended for experienced server administrators only.

To accept the default shown in brackets, press the Enter key.

Choose an installation type [2]:

直接敲回车键。

（5）安装位置

This program will extract the server files and install them into

a directory you specify. That directory is called the server root

in the product documentation and will contain the server

programs, the Administration Server, and the server configuration

files.

To accept the default shown in brackets, press the Enter key.

Install location [/usr/iplanet/server5]:

直接敲回车键。

（6）iPlanet Server产品组件

iPlanet Server Products components:

Components with a number in () contain additional subcomponents

which you can select using subsequent screens.

1. Netscape Server Products Core Components (3)

2. Directory (Not for new installs, use iDS 5.1 instead) (2)

3. Administration Services (2)

4. iPlanet Messaging Suite (5)

Specify the components you wish to install [All]:

直接敲回车键。

（7）Netscape Server产品核心组件

Netscape Server Products Core Components components:

Components with a number in () contain additional subcomponents

which you can select using subsequent screens.

1. Netscape Server Products Core Components

2. Netscape Core Java classes

3. Java Runtime Environment

Specify the components you wish to install [1, 2, 3]:

直接敲回车键。

（8）Directory组件

Directory (Not for new installs, use iDS 5.1 instead) components:

Components with a number in () contain additional subcomponents

which you can select using subsequent screens.

1. Netscape Directory Server

2. Netscape Directory Server Console

Specify the components you wish to install [1, 2]:

直接敲回车键。

（9）管理服务组件

Administration Services components:

Components with a number in () contain additional subcomponents

which you can select using subsequent screens.

1. Netscape Administration Server

2. Administration Server Console

Specify the components you wish to install [1, 2]:

直接敲回车键。

（10）iPlanet Messaging suite组件

iPlanet Messaging Applications components:

Components with a number in () contain additional subcomponents

which you can select using subsequent screens.

1. iPlanet Message Store and Message Access

2. iPlanet Internet Message Transport Agent

3. iPlanet Messaging Multiplexor

4. Sun Cluster 2.2/Veritas HA for iPlanet Messaging Server

5. iPlanet Delegated Administrator Command Line Utilities

Specify the components you wish to install [1, 2, 5,]:

直接敲回车键。

（11）完整域名

Enter the fully qualified domain name of the computer on which

you’re installing server software. Using the form

<hostname>;.<domainname>;

Example: eros.airius.com.

To accept the default shown in brackets, press the Enter key.

Computer name [budgie.siroe.com]:

输入“mail.abc.com”后敲回车键。

（12）系统用户与组

Choose a Unix user and group to represent the iPlanet server in

the user directory. The iPlanet server will run as this user. It

is recommended that this user should have no privileges in the

computer network system. The Administration Server will give

this group some permissions in the server root to perform

server-specific operations.

If you have not yet created a user and group for the iPlanet

server, create this user and group using your native UNIX system

utilities.

To accept the default shown in brackets, press the Return key.

System User [nobody]:

直接敲回车键。

System Group [nobody]:

直接敲回车键。

（13）是否用一个已经存在的Directory Server登记？

Netscape server information is stored in the Netscape

configuration directory server, which you may have already set

up. If so, you should configure this server to be managed by the

configuration server. To do so, the following information about

the configuration server is required: the fully qualified host

name of the form <hostname>;.<domainname>;(e.g.

hostname.domain.com), the port number, the suffix, and the DN and

password of a user having permission to write the configuration

information, usually the Netscape configuration directory

administrator.

If you want to install this software as a standalone server, or

if you want this instance to serve as your Netscape configuration

directory server, press Enter.

Do you want to register this software with an existing Netscape

configuration directory server? [No]:

直接敲回车键。

（14）是否希望用另外一个Directory Server存储用户和组的数据？

If you already have a directory server you want to use to store

your data, such as user and group information, answer Yes to the

following question. You will be prompted for the host, port,

suffix, and bind DN to use for that directory server.

If you want this directory server to store your data, answer No.

Do you want to use another directory to store your data? [No]:

直接敲回车键。

（15）Directory Server端口

The standard directory server network port number is 389.

However, if you are not logged as the superuser, or port 389 is

in use, the default value will be a random unused port number

greater than 1024. If you want to use port 389, make sure that

you are logged in as the superuser, that port 389 is not in use,

and that you run the admin server as the superuser.

Directory server network port [389]:

直接敲回车键。

（16）Directory Server标识

Each instance of a directory server requires a unique identifier.

Press Enter to accept the default, or type in another name and

press Enter.

Directory server identifier [mail]:

直接敲回车键。

（17）Configuration Server管理员的登录名与密码

To write configuration information into the Netscape

configuration directory, you must bind to the server as an entity

with the appropriate permissions. Usually, the Netscape

configuration directory administrator is used for this purpose,

although you can give other directory accounts the proper access.

Netscape configuration directory server administrator ID [admin]:

直接敲回车键，然后输入两遍设定的密码。

（18）后缀

The suffix is the root of your directory tree. You may have more

than one suffix.

Suffix [o=siroe.com]:

输入“o=isp”后敲回车键。

（19）Directory管理员的DN与密码

Certain directory server operations require an administrative

user. This user is referred to as the Directory Manager and

typically has a bind Distinguished Name (DN) of cn=Directory

Manager. Press Enter to accept the default value, or enter

another DN. In either case, you will be prompted for the

password for this user. The password must be at least 8

characters long.

Directory Manager DN [cn=Directory Manager]:

直接敲回车键，然后输入两遍设定的密码。

（20）管理域

The Administration Domain is a part of the configuration

directory server used to store information about Netscape

software. If you are managing multiple software releases at the

same time, or managing information about multiple domains, you

may use the Administration Domain to keep them separate.

If you are not using administrative domains, press Enter to

select the default. Otherwise, enter some descriptive, unique

name for the administration domain, such as the name of the

organization responsible for managing the domain.

Administration Domain [abc.com]:

直接敲回车键。

（21）Directory Server复制

Replication is used to duplicate all or part of a directory

server to another directory server. This can be used for

failsafe purposes, to ensure that the directory data is always

online and up-to-date in case one server goes down. It is also

useful for distributing directory data from a central main

repository to remote directory servers.

Do you want to configure this directory server to use

replication? [No]:

直接敲回车键。

（22）例子入口

You may install some sample entries in this directory instance.

These entries will be installed in a separate suffix and will not

interfere with the normal operation of the directory server.

Do you want to install the sample entries? [No]:

直接敲回车键。

（23）Administration Server端口

The Administration Server is separate from any of your

application servers since it listens to a different port and

access to it is restricted.

Pick a port number between 1024 and 65535 to run your

Administration Server on. You should NOT use a port number which

you plan to run an application server on, rather, select a number

which you will remember and which will not be used for anything

else.

The default in brackets was randomly selected from the available

ports on your system. To accept the default, press return.

Administration port [1029]:

直接敲回车键。

（24）Administration Server的用户名

The Administration Server program runs as a certain user on your

system. This user should be different than the one which your

application servers run as. Only the user you select will be able

to write to your configuration files. If you run the

Administration Server as "root", you will be able to use the

Server Administration screen to start and stop your application

servers.

Run Administration Server as [root]:

直接敲回车键。

（25）Messaging Server的标识

The instance name is the unique identifier for this installed

Messaging Server. It is customary to use the host name as

instance name. However, you may choose any name you wish.

The instance name will be prefixed with "msg-" to identify the

installed server as a Messaging Server.

Instance Name [mail]:

直接敲回车键。

（26）Messaging Server的主机名和域名

The Messaging Server responds to requests for a particular host

and domain. It is recommended you use the host and domain name of

the machine on which you are installing the Messaging Server.

Host Name [mail.abc.com]:

直接敲回车键。

（27）Messaging Server的用户名

The Messaging Server runs as a privileged user. The account

should already exist on the system and should be a member of the

iPlanet Group.

User Name [mailsrv]:

直接敲回车键。

（28）Messaging Server的缺省域和组织

Please enter the default domain and the default organization DN

below. The default domain is the domain of unqualified user-id’s

that do not belong to any particular domain.

The default organization DN should represent the subtree under

which all users that belong to the default domain are located.

All users that belong to the default domain are managed under

this subtree.

Default Domain [abc.com]:

Default Organization DN [o=abc.com, o=isp]:

直接敲回车键。

（29）放置iPlanet Delegated Administrator for Messaging的Web Server的主机名和端口

The Messaging Server requires the use of a Delegated

Administration Server. The Delegated Administration Server is

used by administrators and endusers to manage user accounts and

their preferences.

A Delegated Administration Server does not have to exist at the

given host and port. It may be installed later.

Host Name [mail.abc.com]:

直接敲回车键。

（30）确认Messaging Server是否在防火墙后运行

The Messaging Server can route mail through a firewall. The

firewall controls access between the Internet and your internal

network.

If you choose to operate your Messaging Server behind a firewall,

you must specify the fully qualified host name of the Smart Host,

which has the Messaging Server routing information.

If your Messaging Server cannot route mail to a recipient’s

address, it forwards the message to its Smart Host.

[1] Yes, the Messaging Server is behind a firewall.

[2] No, the Messaging Server will not use a firewall.

Will the Messaging Server use a firewall [2]:

直接敲回车键。

（31）域组件树的根

Please specify the root of your domain component tree.

[o=internet]:

直接敲回车键。

（32）基本信息存储目录

The Messaging Server will use the directory shown below as its

primary message store.

Store Directory

[/usr/iplanet/server5/msg-budgie/store/partition/primary]:

直接敲回车键。

（33）POP3, IMAP, SMTP和 Messenger Express的端口

The Messaging Server uses TCP/IP ports for sending and receiving

messages.

POP3 Port [110]:

IMAP Port [143]:

SMTP Port [25]:

Messenger Express Port [80]:

直接敲回车键。

（34）Service Administrator的登录名和口令。

The Messaging Server requires a Service Administrator account to

exist in the Users Directory Server. The account has privileges

to manage the various services of the Messaging Server.

The account will be created and given the necessary privileges.

User ID [ServiceAdmin]:

直接敲回车键，然后输入两遍设定的密码。

（35）加入postmaster组的E-mail

A Postmaster alias will be created and used to distribute

administrative email related to the Messaging Server. Mail sent

to the Postmaster will be distributed to the members of the

postmaster group. An email address that will be the initial

member of the postmaster group is required. The given address

(e.g. admin@domain.com) must be a valid address (it will NOT be

created during the install).

Do not use an email address that begins with "ostmaster@". This

email address is already assigned to the Postmaster alias.

Email Address:

输入user1@abc.com后敲回车键。

配置Directory Server Plug-ins
编辑文件

/usr/iplanet/server5/slapd-mail/config/slapd.ldbm.conf

把下面两行的#去掉，

#plugin postoperation on "Class of Service" /usr/iplanet/server5/lib/cos-plugin.so cos_init o=iplanet.com

#plugin preoperation on "Class of Service init" /usr/iplanet/server5/lib/cos-plugin.so cos_preop_init

加入下面一行，

include "/usr/iplanet/server5/slapd-mail/config/counters.ldbm.conf"

重新启动Directory Server。

安装iPlanet Web Server
进入ES目录，输入如下命令：

./setup

按照提示向下安装就可以，但Web Server端口要改为8080。

安装iPlanet Delegated Administrator
进入iDA目录，输入如下命令：

./setup

安装程序运行后会依次问下列问题：

1.                提示

---------------------------------------------------------

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging and Collaboration

Installation/Uninstallation

---------------------------------------------------------

Welcome to the iPlanet Delegated Administrator for Messaging and

Collaboration installation program. This program will install iPlanet Server

Products and the iPlanet Console on your computer.

It is recommended that you have "root" privilege to install the software.

Tips for using the installation program:

- Press "Enter" to choose the default and go to the next screen

- Type "Control-B" to go back to the previous screen

- Type "Control-C" to cancel the installation program

- You can enter multiple items using commas to separate them.

For example: 1, 2, 3

Would you like to continue with installation? [Yes]:

直接敲回车键。

2.                许可

---------------------------------------------------------

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging and Collaboration

Installation/Uninstallation

---------------------------------------------------------

BY INSTALLING THIS SOFTWARE YOU ARE CONSENTING TO BE BOUND BY

AND ARE BECOMING A PARTY TO THE AGREEMENT FOUND IN THE

LICENSE.TXT FILE. IF YOU DO NOT AGREE TO ALL OF THE TERMS

OF THIS AGREEMENT, PLEASE DO NOT INSTALL OR USE THIS SOFTWARE.

Do you agree to the license terms? [n]:

输入“y”后敲回车键。

3.                安装位置

---------------------------------------------------------

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging and Collaboration

Installation/Uninstallation

---------------------------------------------------------

This program will extract the iPlanet Delegated Administrator for Messaging

and Collaboration application from the distribution media and install it into a

directory you specify.

Install location [/usr/netscape/ida10]:_______________________________

输入“/usr/netscape/ida10”后敲回车键。

（4）相关信息

---------------------------------------------------------

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging Installation/Uninstallation

---------------------------------------------------------

If you want iPlanet Delegated Administrator for Messaging to manage a

Messaging Server, you will be asked for the Messaging Server identifier

and it’s Administration Server URL.

Manage Messaging Server [Yes]:

Specify Host Name [mail.abc.com]: ______________________________

Specify Admin URL: ______________________________________________

Specify CGI Path [msg-mail/Tasks/operation]:________________________

Specify Default Domain[abc.com]:__________________________________

除Admin URL输入“http://mail.abc.com:1029”外，其他直接敲回车键。

1.                Calenda Server

---------------------------------------------------------

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging Installation/Uninstallation

---------------------------------------------------------

If you want iPlanet Delegated Administrator for Messaging to manage an

iPlanet Calendar Server, enter ’Yes’.

Manage Calendar Server [No]: __________________

直接敲回车键。

（6）Enterprise Server

---------------------------------------------------------

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging Installation/Uninstallation

---------------------------------------------------------

iPlanet Delegated Administrator for Messaging requires the configuration

directory of the Enterprise server instance. The Enterprise server must

be installed locally on this computer system, and iPlanet Delegated

Administrator for Messaging will be accessible only for this Enterprise

server instance.

Example: /home/es/https-machine/config

Specify Enterprise server config directory: ________________________

Specify web server port [8080]: _________________________________

在Enterprise server config directory处输入“/usr/iplanet/servers/https-mail.abc.com/config”，在web server port处直接敲回车键。

1.                LDAP Server注机与端口

---------------------------------------------------------

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging Installation/Uninstallation

---------------------------------------------------------

iPlanet Delegated Administrator for Messaging requires the use of a

LDAP-based Directory Server for the administration of User/Group data.

This server is called the User/Group Directory.

Enter the non-SSL URL for the directory server:

ldap://<host>;:<port>;

Specify LDAP URL: ____________________________________

输入“ldap://mail.abc.com:389”。

2.                Directory Manager与密码

---------------------------------------------------------

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging Installation/Uninstallation

---------------------------------------------------------

In order to create the suffix for iPlanet Delegated Administrator for

Messaging, enter the base DN and password of the user who can access the

Directory Server.

Specify Directory Manager [cn=Directory Manager]: ________________

Password: [from above]_________________________________________

对于Directory Manager直接敲回车键，在Password处输入原来设定的密码。

3.                用户数据后缀

---------------------------------------------------------

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging Installation/Uninstallation

---------------------------------------------------------

iPlanet Delegated Administrator for Messaging requires a suffix to store

it’s user data. If this base suffix does not exist the Installation

program will attempt to create it.

Example: o=isp

Exmaple: dc=isp, dc=com

Specify Suffix: ________________________________________

输入“o=isp”后敲回车键。

4.                DC后缀

---------------------------------------------------------

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging Installation/Uninstallation

---------------------------------------------------------

This suffix is already present in the directory.

Continue without installing iDA information in the directory? [No]: Yes

Specify DC Suffix [o=internet]:_____________________________

直接敲回车键。

5.                配置后缀

Sun-Netscape Alliance

iPlanet Delegated Administrator for Messaging Installation/Uninstallation

---------------------------------------------------------

iPlanet Delegated Administrator for Messaging requires a suffix to store

it’s configuration data. If this base suffix does not exist the

Installation program will attempt to create it.

Example: o=isp

Exmaple: dc=isp, dc=com

Specify Suffix [o=abc.com]:

直接敲回车键。

服务自动启动文件/etc/rc3.d/S99iplanet
编写文件/etc/rc3.d/S99iplanet，内容如下：

/usr/iplanet/server5/start-admin

/usr/iplanet/server5/msg-mail/start-ens

/usr/iplanet/server5/msg-mail/start-msg

/usr/iplanet/server5/slapd-mail/start-slapd

/usr/iplanet/servers/https-mail.abc.com/start

保存后，执行下面的命令增加执行权限。

chmod +x /etc/rc3.d/S99iplanet

转入原有的邮件用户及其邮件
编写一个shell程序/export/home/a/shell/create_sh.sh，用来生成转用户和邮件的shell程序，内容如下：

echo “” >; create_user.sh

echo “CONFIGROOT=/usr/iplanet/server5/msg-mail/config” >; create_mbox.sh

echo “export CONFIGROOT” >;>; create_mbox.sh

echo “cd /usr/iplanet/server5/bin/msg/store/bin” >;>; create_mbox.sh

for i in `ls /export/home/a/mail|more|awk ‘{ print $1 }’`

do

  echo “/usr/iplanet/server5/ndacli/bin/imadmin user create –D ServiceAdmin –w abc123 –l $i –W $i –F $i –L $i –p 8080” >;>; create_user.sh

  echo “./imsimport –u $i –s /export/home/a/mail/$i –d INBOX” >;>; create_mbox.sh

done

echo “/usr/iplanet/server5/msg-mail/imsimta dirsync –F” >;>; create_user.sh

保存后，执行下面的命令增加执行权限。

chmod +x create_sh.sh

把原来邮件服务器上/var/mail下的所有文件传到/export/home/a/mail目录下。进入/export/home/a/shell目录，执行create_sh.sh生成转用户的shell程序create_user.sh和转邮件的shell程序create_mbox.sh。

./create_sh.sh

执行下面的命令增加执行权限。

chmod +x create_user.sh

chmod +x create_mbox.sh

执行create_user.sh生成邮件用户。

./create_user.sh

执行create_mbox.sh转入原邮件。

./create_mbox.sh

日常维护
创建用户
打开浏览器，访问http://mail.abc.com:8080/nda/start.htm，点机“登录”，以ServiceAdmin登录。登录成功后，依次点击“com”、“abc”，进入“abc.com”后，点击“创建新用户”，在创建用户的页面里输入用户信息，点击“启动其他服务”，选中“邮件”。

用户使用
通过浏览器使用

打开浏览器，访问http://mail.abc.com，用自己的用户名和密码登录。登录成功后，可以点击“选项”来修改个人信息和密码；可以点击“获取邮件”来收邮件；可以点击“撰写邮件”撰写并发送邮件。

通过Outlook使用

“外发邮件服务器”要选中“我的服务器要求身份认证”。

...全文