Environment
Novell GroupWise 7.0
Novell GroupWise 6
Novell GroupWise 6.5
Novell GroupWise Enhancement Pack
Novell GroupWise 5.5
Novell GroupWise WebAccess
Novell GroupWise 6
Novell GroupWise 6.5
Novell GroupWise Enhancement Pack
Novell GroupWise 5.5
Novell GroupWise WebAccess
Situation
The Webaccess Application install will ask for the location of the
GroupWise domain database.
Firewalls can block file access to the GroupWise domain database and other files structures
The installation will fail if the path to the domain database cannot be accessed.
The installation of the Webaccess Application requires access to the domain database structure of the domain that will own the gateway. This access is required to copy the commgr.cfg file from the Webaccess gateway directory to the Webserver.
Firewalls can block file access to the GroupWise domain database and other files structures
The installation will fail if the path to the domain database cannot be accessed.
The installation of the Webaccess Application requires access to the domain database structure of the domain that will own the gateway. This access is required to copy the commgr.cfg file from the Webaccess gateway directory to the Webserver.
Resolution
There are a few different ways to work around this issue:
1. If your domain resides on a NetWare server, temporarily open a hole in the firewall to allow NCP traffic through (this requires opening port 524 inbound) . This will allow file access back to the domain directory and allow the Windows machine performing the install to connect to the domain database. After the install, the hole can be closed.
If this is setup properly, you should be able to map a drive to a NetWare server inside the firewall.
2. Temporarily, move your webserver inside the firewall (physically move the computer or cabling) to be on the same physical network as your domain. Perform the installation of the Webaccess Application and then move your box back into the DMZ. When specifying IP addresses during the installation, you will need to use the IP addresses relative to the DMZ.
To test whether this is successful, simply attempt to create a connection between the box where the webaccess application resides and the webaccess agent. To do this, open a command prompt session on your webserver box and issue the following command:
telnet 7205
3. In most cases, copying the entire domain directory structure to a box in the DMZ will allow the installation to be performed without incident. No MTA needs to be run against this directory structure while in the DMZ.
1. If your domain resides on a NetWare server, temporarily open a hole in the firewall to allow NCP traffic through (this requires opening port 524 inbound) . This will allow file access back to the domain directory and allow the Windows machine performing the install to connect to the domain database. After the install, the hole can be closed.
If this is setup properly, you should be able to map a drive to a NetWare server inside the firewall.
2. Temporarily, move your webserver inside the firewall (physically move the computer or cabling) to be on the same physical network as your domain. Perform the installation of the Webaccess Application and then move your box back into the DMZ. When specifying IP addresses during the installation, you will need to use the IP addresses relative to the DMZ.
To test whether this is successful, simply attempt to create a connection between the box where the webaccess application resides and the webaccess agent. To do this, open a command prompt session on your webserver box and issue the following command:
telnet
3. In most cases, copying the entire domain directory structure to a box in the DMZ will allow the installation to be performed without incident. No MTA needs to be run against this directory structure while in the DMZ.
Additional Information
Formerly known as TID# 10022830