Chapter 7. Domain Administration

Accessing Domain Administration

The Web Administration Interface is designed to provide a convenient means of administering M-Store remotely. The administrative functions include managing domains, users, and mailboxes. They are, in essence, a web-based implementation of the command line administration utility (msadm_tclsh).

To access the interface, use a standards-based Java Script enabled Web browser and means of connecting to the M-Store domain. The administration tools URL is determined by the location where the httpd server was installed. To access the interface, simply provide an URL that points to this domain. For example:

httpd was installed on:

www.yoursite.com

means the URL for the Administration Interface is http://www.yoursite.com/msadm/

Once one is at the Administration site, the following displays:

Figure 7-1. M-Store Web Administration Tools Welcome Page


Select the Domain Administration link.

Please see Chapter 6, “ Site Administration” for details regarding Administration Permission levels.

Domain Administration

A domain can be administered by both site administrators and domain administrators. The first domain administrator for a domain is added using msadm_tclsh or by logging into the domain as a site administrator and creating a user with administration rights.

When presented with the login page, the Auth ID for domain administrators is their username. The target domain is selected from the drop-down list of domains at the bottom of the domain administration login page. The target domain is the domain they have been assigned to administer. If authentication is successful, a secure session is established.

In contrast, for Site Administrators, if the target domain is different from the admin-domain specified in ms.conf, the Auth ID must be in the form of username@target_domain. The Domain Administration page is accessed by selecting the target domain from the Administer Domain drop-list, which is located in the navigation area of any Site Administration page.

The main tools that are available on the Domain Administration page are User Accounts and Shared Mailbox Management.

User Accounts

Click on User Accounts to reach the User Accounts page. Use this page to add, delete and modify user accounts.

Add Users

Click on the Add New User button and fill out the resulting dialog. By default, Create Personal Folder Space, Create Internal Authentication Account, and Enable Internal Authentication Account are selected. The User Name must not contain the "@" character. If the Administrator option is selected, the new user is added as an administrator to the current domain. The new user now has access to the Domain Administration pages.

Figure 7-2. Add New User Dialog


The Create Personal Folder Space selection generates a namespace, including an INBOX, for the user allowing for the creation of additional folders that allow them to receive and organize mail. The Quota Size field is blank by default; a quota of 2 Mbytes is a typical setting. A default quota setting can be specified in the defaults.php3 file.

Enabling the Create Internal Authentication Account option creates an authentication ID of username@domain_name if the multi-domain mode was set during M-Store installation. If in single-domain mode, the authentication ID is username only. If Create Internal Authentication Account is checked, a password must be provided. If the Enable Internal Authentication Account is checked, the user can use the provided Auth ID and Password to authenticate themselves to the mailstore, otherwise they will be unable to login. Click on OK when finished.

Delete Users

To delete users, select the checkbox next to the users to be deleted. Click on the Delete Users button; a warning dialog then appears. Click on OK to delete the user(s), or click on Cancel to abort the deletion.

Change Quotas

Click on the user name in the User List of the user to be created, deleted, or modified. In the resulting dialog Modify User (see Figure 7-3), the Folder Information section has a field named Quota Size (in MB). Here, enter the user's mail quota size in megabytes. For example, an entry of '2' means the quota is now set to 2 Mbytes. To change the quota simply highlight the current setting with the mouse pointer and enter the new setting. If you set the quota to zero or delete the current value (that is, leave the Quota Size field blank), you will prevent any more mail from being delivered to the user's mailbox:

Figure 7-3. Modify User Dialog


 Click on OK when finished.

Change Passwords

Click on the user name in the User List for whom a password is to be created, deleted, or changed. In the resulting dialog, the section entitled Authentication Information allows one to delete an internal authentication account, and enable an internal authentication account as well as change the password. Please see the above section Adding Users (“Add Users”) for details on these settings. To change the password, enter the new password in both the Password and Verify Password fields. The old password, if one existed, is overwritten. Click on OK when finished.

Provide Domain Administrative Rights

By selecting the Administrator check-box, a user can be designated as an administrator for the given domain. The designated user can add, modify, or delete users, mailboxes, and perform other domain administration duties. However, they cannot perform site administration duties such as adding domains. Once a user has been added, the domain rights can be set or edited. Click on OK when finished or Cancel to return to the previous page.

Shared Mailbox Management

With the Shared Mailbox Management page, one can add, delete and modify mailboxes.

Figure 7-4. Shared Mailbox Management Page


Add Shared Mailboxes

To add a new mailbox, one must either have an existing user or first create a new user. Please see above, Domain Administration: Add Users (“Add Users”). To modify an existing mailbox, click on the target mailbox in the Mailbox List.

Add a new mailbox by clicking on the Add Mailbox button. If modifying an existing mailbox, click on the target mailbox in Shared Mailbox list. The New Shared Mailbox dialog is divided into Basic Information, Mailbox Rights and Quota Information. For Basic Information: Shared Mailbox, just enter the new mailbox name. The Quota Size is blank by default; a typical setting is 2 Mbytes. Click on OK to return to Shared Mailboxes.

Figure 7-5. New Shared Mailbox Dialog


Mailbox Hierarchy

If, for example, the shared mailbox public were added, we would need to provide the username of the shared mailbox administrator. Essentially, this is the owner of the mailbox who gives other users rights as they see fit. At this stage, we can also give other users their rights on the new mailbox, but it need not be done at this time. After a new mailbox has been created, any new sub-folder of that new mailbox inherits the rights of the parent mailbox. For example, if we were to add public/things, then the sub-folder things would inherit all rights from public. However, if one chooses, the rights of the sub-folder things can be edited by first selecting the mailbox path from the picklist and then clicking on the Add or Modify button.

Figure 7-6. Add Rights Dialog


In the Add Rights dialog, enter the username username and select the rights level from one of Read, Read/Write, and Administrator. The Modify Rights dialog operates in the same manner, with the exception of the username username which is not required.

Users can modify, add, or delete their own mailbox, folder and sub-folder rights via their own mail client.

Delete Shared Mailboxes

To delete a shared mailbox, select the checkboxes next to the mailboxes to be deleted. Click on the Delete Mailboxes button; a warning dialog appears. Click on OK to delete the mailbox(es), or click on Cancel to abort the deletion.

Change Mailbox Quota

To change a mailbox quota, click on the mailbox name in the Shared Mailbox list. The Modify Shared Mailbox dialog is then presented (see “Change Access Rights”). If there is an existing mailbox quota, highlight the existing quota and then enter the new quota. To effectively set the quota to zero, or no quota, leave the Quota Size field blank. Click on OK when finished.

Change Access Rights

To change access rights, click on the target mailbox in the Shared Mailbox List. The Modify Shared Mailbox dialog appears.

Figure 7-7. Modify Shared Mailbox Dialog


When the existing shared mailbox settings are displayed, click on the user name in the Mailbox Rights field. Then click on the Modify button. Another dialog is displayed; click on the level of rights required. To delete mailbox rights, select the user name and click on the Remove button.

Figure 7-8. Modify Rights Dialog


Click on OK when finished.