Environment
Novell GroupWise 2012 Support Pack 2
Novell GroupWise 2014
Novell GroupWise 2014
Situation
After changing access permissions for domain, post office, user, distribution list, or resource in the gwac.xml file, users are still permitted/denied access through WebAccess.
Tomcat has been stopped and restarted.
Tomcat has been stopped and restarted.
Resolution
The gwac.xml file needs to be configured as follows:
<?xml version="1.0" encoding="UTF-8"?>
<!--
This is a sample file. Please use this file as a starting point to allow/prevent access users from accessing GroupWise WebAccess.
-->
<gwac access="prevent">
<!-- allow access to everyone by default -->
</gwac>
<!-- To allow access to all EXCEPT a few, use this technique. -->
<gwac access="prevent">
<domain name="domain1" />
<postOffice name="po2.domain2" />
<user name="jdoe.po3.domain3" />
<user name="bmiller.po3.domain3" />
<user name="ssmith.po3.domain3" />
<distributionList name="external.hhcupo1.gwmail1" />
<resource name="confroom.po4.domain4" />
</gwac>
<!--
<!-- To prevent access to all EXCEPT a few, use this technique -->
<gwac access="allow">
<domain name="domain1" />
<domain name="domain5" />
<postOffice name="po2.domain2" />
<postOffice name="po6.domain6" />
<user name="jdoe.po3.domain3" />
<distributionList name="Testdl.Testpo.Testdom" />
<resource name="confroom.po4.domain4" />
</gwac>
-->
The above example is for a distribution list to have its contents denied access. Make sure that the distribution list, post office and domain names are case-sensitive to their names in ConsoleOne.
Make sure to stop and start tomcat after the changes are made.
<?xml version="1.0" encoding="UTF-8"?>
<!--
This is a sample file. Please use this file as a starting point to allow/prevent access users from accessing GroupWise WebAccess.
-->
<gwac access="prevent">
<!-- allow access to everyone by default -->
</gwac>
<!-- To allow access to all EXCEPT a few, use this technique. -->
<gwac access="prevent">
<domain name="domain1" />
<postOffice name="po2.domain2" />
<user name="jdoe.po3.domain3" />
<user name="bmiller.po3.domain3" />
<user name="ssmith.po3.domain3" />
<distributionList name="external.hhcupo1.gwmail1" />
<resource name="confroom.po4.domain4" />
</gwac>
<!--
<!-- To prevent access to all EXCEPT a few, use this technique -->
<gwac access="allow">
<domain name="domain1" />
<domain name="domain5" />
<postOffice name="po2.domain2" />
<postOffice name="po6.domain6" />
<user name="jdoe.po3.domain3" />
<distributionList name="Testdl.Testpo.Testdom" />
<resource name="confroom.po4.domain4" />
</gwac>
-->
The above example is for a distribution list to have its contents denied access. Make sure that the distribution list, post office and domain names are case-sensitive to their names in ConsoleOne.
Make sure to stop and start tomcat after the changes are made.