Iplanet messaging and OID

I have been trying to setup iplanet messaging
to use Oracle LDAP Server (OID), rather than using iplanet's directory server. I have run into many schema incompatibility issues.
Has anyone ever created this environment and can point me in the right direction.
Thanks,
Brenda

Brenda,
the iPlanet Messaging Server 5.0 Installation Guide mentions the following
Note:
iPlanet Messaging Server 5.0 is compatible with Netscape Directory Server version 4.11 or 4.12.
To configure an existing Directory Server, run the ims_dssetup utility. (See Running the ims_dssetup Utility.)
Step 2 of ims_dssetup also mentions that it will configure a Netscape Directory Server (only).
Same for Messaging Server 4.1 Installation Guide:
Configuring an Existing Directory Server:
Messaging Server 4.1 is compatible with both Netscape Directory 3.x and 4.x versions.
So I would assume that by default only Netscape/iPlanet Directory Servers are supported.
Only chance you have is if you have access to the IMS schema that will be loaded into the Directory and store this into OID.
You should get a hint where this schema is located by looking into the ims_dssetup PERL setup script.
Then you have to figure out the attributes and objectclasses that are needed before trying to load the schema.
You should also contact Netscape support and see if they can confirm if IMS at all is certified to use other Directories besides Netscape/iPlanet.
--Olaf

Similar Messages

Integrate Sun ONE Messaging and Sun ONE Calendar server with Portal 6.0

We need to integrate (implement a Single Sign On solution) Sun ONE/iPlanet Messaging and Calendar servers with Portal 6.0. The Msg and Cal. servers do not use Portal Profile server as their DS and have a different DS.This directory server is the external DS for Portal. After users login to Portal, they should be able to access Msg and Cal. servers without login to them again.
1. How do we do this without writing a java code/servlet ?
2. Is there any way that we could configure DSAME to create the URL,add userID and password to it and forward that URL to above servers ?

Hi,
The SunOne communication providers for version 6.0 will be released soon.
(you can get beta versions from early access program)
Like in the portal version 3.0 these channels
are enabling SSO for messaging and calendar servers.
(I tested them with iMSG5.2 and Calendar5.1.1)
Cheers,
Alex :-)

Is there a way to avoid a iPlanet Messaging Express home user to copy from the email message ( email content ) body and paste on to a local place( it Hard disk, for an ex )?

Is there a way to avoid a iPlanet Messaging Express home user to copy and paste email body content and avoid attachment deliver attempts?Cause this could grant home users to take ownership of enterprise's documents, sending to them selves and after that, in their own homes, they access Messaging Express, recieve their email with the forbbiden content and then copy and paste to it's own's hard disk.

It may be possible, but then what would prevent the user from running a "screen grabber" to capture the data. The underlying question that you need to ask is, "Who can you trust?" If you're concerned about confidential documents being stolen/disclosed, then that is where your security starts. If someone can't access a document, they can't E-mail it or transport it elsewhere. Who says they can only use E-mail? Using ftp is more efficient, or a floppy/Zip/Jazz drive could also be used. Trying to "secure" the E-mail client would be like plugging a single hole in a water pipe full of leaks. You have to shut off the water at the source.

IPlanet Messaging Server 5.2 (for Solaris 8 and 9) with patch 5.2hf2.13

Hi..
iPlanet Messaging Server 5.2 Patch 2 (built Jul 14 2004)
libimta.so 5.2 Patch 2 (built 19:30:12, Jul 14 2004)
I heard that SUN have released security vulnerability in Sun Java System or iPlanet Messaging Servers that may allow remote unprivileged users to craft specific messages which contain Javascript to be executed in the end user's browser.
The problem can be solved by using iPlanet Messaging Server 5.2 (for Solaris 8 and 9) with patch 5.2hf2.13 or later..
where can I download patch 5.2hf2.13 for messaging server 5.2 ?

Hi,
If you have a support contract with SUN you can log a service request to get a copy of the patch via:
http://www.sun.com/service/online/
Regards,
Shane.

Single directory Server for Messaging and Portal

We are trying to unify our directory services.
At present, there two directory servers, one for iPlanet messaging 5.2 and another for Portal server 6.0.
Messaging's Directory server is v5.1 and Portal's Directory server is v5.2. Their BaseDN is same.
Now, What we are planning to do is as below.
1. LDIF everything from Msgr Directory and import into Portal's Directory.
2. Point Msg Server to the Portal's directory.
But, we are not sure what to export or how to tell messaging server to look at the Portal's Directory. Any help will be greatly appreciated!!!
Thanks
Srini

What you are trying to do is non-trivial.
Setting the ldap server for user and groups on the mail server is easy enough -- look at the output of configutil and you will find the values of local.ugldap*
define the values you need to change.
e.g.:
local.ugldapbasedn
local.ugldapbindcred
local.ugldapbinddn
local.ugldaphost
local.ugldapport
etc.
These are all listed in the messaging reference manual.
You need to ensure that the schemas of the two apps. match. For example, if you are using schema 1 for mail and schema 2 for the portal (quite likely), there will be a lot more work to do on the directory than simply moving the user entries accross and merging them.
Unless you have done this sort of thing before, or feel very comfortable and knowlegable about how the messaging server in partuicular works with LDAP, I would suggest that you seriously consider getting help from Sun Professonal Services.

OIM User Creation Error After OIM and OID Intregation

Hi,
I am new in oim and i am getting popup error message for user creation from OIM application after oim and oid intregation through libovd.
Error message : LDAP create event failed : orclguid attribute has duplicate value.
please guide me for resolving error.
Thanks & Regards,
Rajeev

Hi,
Thanks for reply...i checked1307549.1 in metalink, In that link they are telling us to modify some tables in the data base.i have some question regarding the following steps please help.
=== ODM Solution / Action Plan ===
1. Use the following query to find fields with "plain text" values:
select svr.svr_name, spd.spd_field_name, svp.svp_key, svp_field_value
from svp
inner join spd on spd.spd_key = svp.spd_key
inner join svr on svr.svr_key = svp.svr_key
2. Set these plain text values to null after making backup of table.
*(kashyap:: Which fields values we have to change)*
3. Edit the Directory Server to re-set values.
*(kashyap:: could you please explain this)*
Expected error at this stage:
-- no "System Error call admin...", but that makes sense since the values in question pertained directly to the Directory Server --

Where can i find the IPlanet Messaging Server API

I am trying to log a user into the IPlanet Messaging Server when the user logs into the IPlanet Portal Server. I would like to create a SSO effect between the portal server and the messaging server.
Thanks

Check out the documentation for PMDF API and SIMS API. The MTA comes from PMDF. I just did a quick check and could not find out when documentation will be out regarding iMS-MTA API.
For what you want to accomplish I don't think the MTA-API is where you need to be looking. I know that ME and iDA SSO can be enabled, and I think it can be done with Portal as well, but I do not know how.

Please help me about the Iplanet Messaging Server,SOS!!!!!

I have just installed Iplanet DS and IPlanet Messaging Server 5.2 .But I can only use web to check or send mail . When I use Out Look Express ,I can only send mail and not check mail.Please give me the reason and solution.

How did you set the user up? Have you implemented "direct ldap", per Appendix A in the Admin Guide?

IPlanet Message installation problem

hi,
I am getting the following error while installing iPlanet Message Server.
Anyone encoutered this problem please help.
ERROR
A serious problem occurred while installing the iPlanet Messaging Server Domain
Component Tree (msg.ugldap.dctree.inf). It reported the following problem:
The server configuration for the Domain Component Tree (msg.ugldap.dctree.inf) c
annot be created.
Press any key to continue.
Thanks and Regards
Arun

Can you give more details? access and error logs from DS?
-Bruno

Sun Directory Server and OID Synchronization

I'm having a problem with synchronizing OID with our existing Sun Directory Server. This is a one way synchronization, using Sun DS as the source, and OID as the destination. I've successfully installed OID with SSL enabled (this is part of an Oracle Portal installation), and followed what docs I could find. I created an integration profile based off the iPlanet Import profile, and imported a custom mapping profile based off a differing DIT naming convention (o=company.com vs dc=company,dc=com). I have applied an ACI that should allow the synchronization profile user to update entries on the OID side, and a user in Sun DS that has access to the appropriate areas on that side. I was able to successfully bootstrap and import all of our users, and it was also able modify the last changelog number.
Having said all of that, incremental changes aren't propagating to OID. I'm not sure where to look or what steps to take to troubleshoot this, as I'm brand new to OID. There's an agent execution command that is blank in the integration profile, but according to what I've found that's the default and is acceptable.
Am I missing a step here? According to the docs, all I need to do is enable the profile, and away it goes.
One last thing I had to do to overcome an issue with the changelog number not updating was adding our internal root ca's certificate to the local JVM's cacerts file. I accomplished this with the keytool command, and it seemed to work fine. I'm unsure if it's the SSL config that is hosed and is causing this, or if it's a configuration parameter I'm missing.. but I don't have anywhere to start as far as troubleshooting is concerned.

On your integration profile, did you set the debug level to 63? You should have a _____.aud and a _____.trc file in your $ORACLE_HOME/ldap/odi/log directory that will provide more info. Did you start your DIP server (odisrv) with the oidctl command?
You might also look at downloading the "diptester" utility for troubleshooting OID synchronization issues.
- Brian

Does anyone knows how to install Iplanet Messaging Express under iWS 6.0

Does anyone knows how to install Sun One Messaging Express in iWS 6.0?
I have a server which has been installed with iWS 6.0 and another server which installed Iplanet Messaging Server 5.2.
anyone can help me on this?

The Webmail interface for Messaging Server is implemented as its own daemon - it's not a CGI or Servlet that runs through another web server. As such it can not be deployed through Sun ONE Web Server (or any other web server).

IPlanet Messaging Server -- kill session at browser close

iPlanet Messaging Server 5.2 HotFix 2.09
We found a potential security risk.
When a person loads Messenger Express through the web and closes their browser, another person can come in behind them and resume the previous persons session. This is accomplished by going through the browser history and accessing any of the links that point inside the mail client.
When the browser closes, the session isnt killed. Its only killed/inaccessible if the user times out or clicks log-out. We've tested this on just about any browser we can get our hands on.
Is there a fix/patch/workaround for this? I've combed the documentation and the site and can find nothing.
We are using the product in an University environment and this can be particularly nasty in the labs.
Thanks!

iPlanet Messaging Server 5.2 HotFix 2.09
We found a potential security risk.
When a person loads Messenger Express through the web
and closes their browser, another person can come in
behind them and resume the previous persons session.
This is accomplished by going through the browser
history and accessing any of the links that point
inside the mail client.Yep. that's true. And, it 's not possible to "fix" that. The reason it cannot be fixed, is that http is stateless. The server can't know when you simply close a browser, instead of you still being there.
There is an idletimeout that defaults to 10 minutes.
>
When the browser closes, the session isnt killed. Its
only killed/inaccessible if the user times out or
clicks log-out. We've tested this on just about any
browser we can get our hands on.Right. This is a basic limitation of the http protocol. It's not something we CAN fix.
>
Is there a fix/patch/workaround for this? I've combed
the documentation and the site and can find nothing.
We are using the product in an University environment
and this can be particularly nasty in the labs.You will have to educate your users to log out. That's all I can suggest.
>
Thanks!
ashley

Migrating from Netscape Messaging Server 4.15 Plug-in to iPlanet Messaging Server 5.1 Channel

Hi, there.
I wrote a custom plug-in for Netscape Messaging Server 4.15. The client for
whom I did this is now upgrading to iPlanet Messaging Server 5.1 and has
requested that I update the custom plug-in accordingly. Unfortunately, as
specified in the iPlanet migration documents, you have to re-code the
plug-in as a channel to get it to work under iPlanet Messaging Server...
I've scoured the documentation about how to go about doing this, but I don't
know how to get started as I don't know anything about writing a channel.
The plug-in processes incoming messages to see if they were sent from a
specific domain. It then adds an arbitrary signature to each appropriate
MIME part in the message before letting the messaging server relay it.
1. Can anyone direct me to some explicit directions about how to write a
channel for iPlanet Messaging Server? The documentation for Netscape
Messaging Server was extremely helpful; I haven't found anything equivalent
for iPlanet channels.
2. Channels run as daemons? Do you have to start them when the machine
boots, or are they started for you by the MTA as a result of the channel
configuration file?
3. Do channels listen with sockets on a particular port for communication?
Do I have to parse incoming data and encode outgoing data as if it was an
SMTP communication?
4. Can an SMTP channel co-exist with other SMTP channels on the same
machine? Do the channels have to listen on unique ports? (Sorry, my socket
programming is a little rusty.)
Anxiously awaiting your reply...
Sean Dockery
[email protected]

What is the expected result of the plug-in?
Also, if you set the smtp log level to debug do you see it initializing the plugin at startup time and also entering the plugin during the smtp-accepts?

How do can we see the iplanet messaging server statistics?

I need to know how many emails our iplanet messaging server is processing per day/month/year etc and the volume of data that this represents. How can I read the logs? Is there a tool for doing this?
Thanks
Paul

The imap, pop, and http processes have counters, as does the MTA. Check out the manual for the command line utlities for iMS.
As for the MTA logs, the format is documented and thus you can easily write your own tool to parse and report on what you need. I did it years ago and I would share that with you but it has fallen behind in the format and thus needs serious updating.
There is no built in tool to process log files.

Failure installing iPlanet Messaging Suite.

Good Day!!!
I'm trying to install the Iplanet Messaging Server 5.1 on Unix-Solaris Platform and I've got this message during the installation process.....
Here goes.....
"Stopping Messaging Server
Run-time exception error; current exception:
LApplicationException Unexpected exception thrown.
Abort - core dumped ERROR. Failure installing
iPlanet Messaging Suite."
I've got this error after the menu appeared that I have a Messaging Server instance already installed.
What could be the problem? And also, How can I delete/remove the message that says I have already instances installed for the Messaging Server?
Could anyone email me personally regarding this matter, and here's my private email-address: [email protected]..
Any help would be greatly appreciated....
Thanks and more power.....

try removing the /etc/msregistry.inf file before running the installer.

Iplanet messaging and OID

Similar Messages

Maybe you are looking for