Chapter 4 Communications Suite Advanced Features

This chapter describes some of the advanced features of Communications Suite.

This chapter contains the following sections:

• Using Advanced Instant Messaging Features

• Using the HTTP Proxy Gateway

• Delegated Administration Demo

• Starting and Stopping Services

Using Advanced Instant Messaging Features

This section describes how to use Access Manager to provision users and how to configure archiving for Instant Messaging. Access Manager enables you to create roles and policies and apply those to users to define their access rights. Previously, this guide described how easy it is to assign a user to a given role. This section enables you to examine policy and role creation to define a new Instant Messaging policy.

API Level Filtering

In The Instant Messaging Demo, you learned that access and privacy filters can be used by end users to block Instant Messaging traffic or presence updates from certain individuals. Additional flexibility can be obtained by deploying filters that perform text conversion or block certain payloads that contain viruses. For example, an administrator can create a filter that blocks or converts obscene words in an instant messaging conversation. Other uses include text translation, rich text to plain text conversion, or domain level blocking. Sun Java System Instant Messaging provides a Message Conversion API that developers can use to create more complex filters that can be applied to the Instant Messaging Server. Learn more about API level filtering from the Instant Messaging product documentation (http://docs.sun.com/app/docs/coll/1309.1).

To Provision Users with Access Manager

In this task, you perform feature-level access control, a powerful tool that enables or disables client functionality. You create a new instant messaging role and corresponding policy that limits the instant messaging functionality to the basic features. Users assigned to this new role are not able to join conference rooms, send polls, or perform any of the other advanced instant messaging tasks.

Access Manager uses the Instant Messaging Service and the Presence Service to manage the Instant Messaging policy. The Instant Messaging Service contains the policy rules for communicating with others, as well as the ability to chat, exchange files, join conferences, send alerts, and more. The Presence Service contains the policy rules for determining the ability of users to share their presence with others, as well as to access, manage, or publish one's presence.

Steps

1. Use a completely new web browser to start Access Manager.

   For example, http://wireless.map.beta.com/amconsole.

   If you are using Internet Explorer for the Portal Server desktop and Communications Express, start Mozilla or Firefox.

2. Log in as user amadmin with the password adminpass.

3. In the top level organization (o=isp), choose Roles from the View drop-down menu in the left pane of the Access Manager console.

4. Click New to create a new role.

   1. Select Static Role, type IM Limited User in the Name field, and click Next.

   2. Define the following:

      • Description: Limited access role

      • Type of Role: Service

      • Access Permissions: Organization Administrator

   3. Click Finish to create the role.

      Now that you have created this new role, create policies that apply to this role.

5. In the top level organization (o=isp), choose Policies from the View drop-down menu in the left pane of the Access Manager console.

6. Click New to create a new policy.

   1. Select Normal, and type Limited access instant messaging in the Name field.

   2. Click OK.

   3. In the Description field, type Policy for Limited access instant messaging users and click Save.

7. Choose Rules from the View drop-down menu in the right pane of the Access Manager Console.

8. Click the New button to define rules for this policy.

   1. Select Instant Messaging Service for the Rule Type and click Next.

   2. Type IMLimitedRule for the Rule Name.

   3. Type IMResource for the Resource Name.

   4. Select all Action check boxes.

   5. Click the Deny radio button for the following Actions:

      • Ability to Exchange Files

      • Ability to Join Conference Rooms

      • Ability to Manage Conference Rooms

      • Ability to Manage News Channels

      • Ability to Moderate Conference Rooms

      • Ability to Read News

      • Ability to Send Alerts

      • Ability to Send Polls

   6. Click Finish.

   7. Click Save.

      You have successfully created an Instant Messaging Service rule for this policy.

9. Click New to define another rule for this policy.

   1. Select Presence Service for the Rule Type and click Next.

   2. Type PresenceLimitedRule for the Rule Name.

   3. Type PresenceResource for the Resource Name.

   4. Select all Action check boxes, but do not click any Deny radio buttons.

      All Actions are allowed.

   5. Click Finish.

   6. Click Save.

      You have successfully created a Presence Service rule for this policy.

10. Choose Subjects from the View drop-down menu in the right pane of the Access Manager console.

11. Click New to define the mapping between policies and roles.

    1. Ensure that the Subject Type is Access Manager Roles and click Next.

    2. Type IM Limited User in the Name field then click Search to search through the list of available Access Manager Roles.

    3. Find the role isp > im limited user, highlight this role, and click Add.

    4. Click Finish.

    5. Click Save.

    The new roles and policies have been created. Next you assign Tina to this new Role and note the effect on her Instant Messaging client.

12. Choose Roles from the View drop-down menu in the left pane of the Access Manager console.

13. Click on the properties arrow to the right of the IM Limited User role.

    The IM Limited User pane appears.

14. In the right pane, choose Users from the View drop-down menu.

    1. Click Add on the right pane.

    2. Type Tina in the User ID field and click Next.

    3. Select the check box next to Tina's name and click the Finish button.

       You have assigned Tina the Instant Messaging Limited User Role, so she has limited access to Instant Messaging.

    Duncan initially has kathy and robert in his Instant Messaging buddy list. The user tina has not yet been added. You can click the Start button from the same Instant Messenger window you used to start kathy. If you start Tina's Instant Messenger, notice that her window has very limited Instant Messaging functionality. This type of provisioning is feature-level provisioning that involves defining roles and policies for these roles. Changing the policy has the effect of removing or adding functionality to the client itself. You can experiment changing the policy and restarting Tina's client to observe the effect. You can also apply the appropriate role to others and see its effect as you start Instant Messaging as those users.

To Archive Chat Sessions

The Sun Java Communications Suite provides the following two ways to archive chat sessions:

• Archive provider API. Using this API, developers can extend the archive capability.

• Portal Server search database or Message Store. Without changing any capabilities, you can archive chat sessions in Portal Server's search database or in Messaging Server's Message Store.

By default, the single host deployment example, on which this evaluation guide is based, uses the Message Store to archive chat sessions. By viewing Duncan's inbox, you can see that he has several messages that contain the chat conversations he had with Kathy and others.

To change the Message Store to the Portal Server search database to archive chat sessions, do the following:

Steps

1. Edit the /etc/opt/SUNWiim/default/config/iim.conf file and set the following parameter:

   iim_server.msg_archive.provider = "com.iplanet.im.server.IMPSArchive"

2. Restart the Instant Messaging server.

   /opt/SUNWiim/sbin/imadmin refresh

3. Perform a poll, or a chat, to generate some Instant Messaging data. For performing poll or chat, see The Instant Messaging Demo.

4. Click the Search tab from within Duncan's Portal Server desktop.

5. In the Find field, type a key word such as poll or a word from the chat, and click Search.

   The results of the search are displayed. Note that the poll results look like actual final poll results, not extraneous data points. Also, the entire conversation is returned, not just the sentence containing the keyword.

Using the HTTP Proxy Gateway

Sun Java System Instant Messaging has an HTTP proxy gateway to connect simple HTTP clients to the Instant Messaging server. Uses for this include phone clients, simple web-based clients, or other clients. You can install web-based clients such as jwchat into a web container and use them in conjunction with your host.

Delegated Administration Demo

In addition to command-line tools and Access Manager, Communications Suite has a graphical user interface called Delegated Administrator, that you can use to provision users, domains, and service packages.

This section walks you through a scenario that uses Delegated Administrator as if you were a service provider hosting email for several small companies. As this service provider, you have just signed an agreement with a new company. You now need to provision the new domain and add the required mail service for that domain. As the administrator for the service provider, you must also create a domain administrator who has access to that specific domain only.

To Create a Domain

In this task, you create a new domain for hosting email and you assign different levels of service to this domain.

Steps

1. Type the following URL of Delegated Administrator in your web browser.

   http://hostname/da/DA/Login

   For example, http://wireless.map.beta.com/da/DA/Login.

2. Log in as user amadmin with password adminpass.

   The main Delegated Administrator view appears. You are logged in to the root organization and the default domain appears in the organization list.

3. Click New Organization.

   The New Organization pop-up window appears.

4. For the Organization name, type demoone.com, and for Domain Status, select Active and click Next.

5. Skip the Contact Information screen and click Next.

   The Account Information screen appears.

6. Type demoone.com in the Domain field and click Next.

   The Select Service Packages screen appears.

7. Because you are interested in only enabling hosted mail, choose Service Packages that only contain mail.

   Several packages are available, depending on the desired mail quota. Select the bronze, gold, and platinum check boxes and click Next.

   The Mail Service Details screen appears where you allow the administrator to define disk and attachment quotas for the domain.

8. For the Preferred Mail Host, type your host name, for example, wireless.map.beta.com and click Next.

   The Quantity of Service Packages screen appears.

9. (Optional) If calendar service packs were chosen, establish calendar session timeouts and other attributes through Calendar Service Details.

   Calendar Server has not been configured for hosted domains, so leave all the fields blank and click Next.

10. Define the number of Service Packages you would like to assign to this domain.

    Because this is a small company of less than 50 people, assign 30 service packages for each type of service.

    1. Change the number from 1 to 30 for gold, platinum, and bronze service packages and click Next.

       The Summary screen appears. The Organization Administrator is automatically created and a password is generated.

    2. Write down the Organization Administrator's user ID and password for later.

11. Click Finish.

    You have created your first domain.

12. Click the Log Out link to exit Delegated Administrator.

To Create Users

You have just learned to create domains. In this demo, you will log in as the organization administrator and create users.

Steps

1. At the Delegated Administrator Login screen, log in as the domain-level administrator.

   Use the ID admin_demoone.com. Use the password from the sectionTo Create a Domain.

2. To Create users for this company, click the New button.

   The New User pop-up window appears.

   1. Type the following:

      • First Name: Larry

      • Last Name: Brown

      • Display Name: Larry Brown

   2. Click Next.

   3. Skip the Contact Information screen and click Next.

      The Select Service Package screen appears.

   4. Select one of the three packages, for example, bronze. Click Next.

   5. Type the mail service details.

      Instead of accepting the default Email Address, change the email address to lbrown@demoone.com and click Next.

   6. (Optional) If you chose a service pack that included calendar service when you originally created your domain, you will see a Calendar Service Details screen.

      If you left all the calendar fields blank when you created the domain, you can leave all the fields blank in this screen also and click Next.

   7. Change the Login ID from Larry_Brown to lbrown. Type the password demo and click Next.

   8. Verify the User Information then click Finish to create the user.

3. Look in the Delegated Administrator user interface to see that the new user has been added to the demoone.com domain.

4. Click the Log Out link to exit Delegated Administrator.

5. Continue with the next task to verify that the user ID can log in.

To Log in as a Newly Created User

Steps

1. Type the following URL of Communications Express in your web browser. For example,

   http://wireless.map.beta.com/uwc

   For this example, the User Name is lbrown@demoone.com and the password is demo.

   You are now logged into Communications Express as Larry Brown.

2. Send test messages to yourself or to other users, such as duncan, kathy, tina, and robert in the map.beta.com domain.

   ---

   Note –

   Although a Calendar tab exists in Communications Express, the tab is not functional because you did not enable hosted domains for Calendar Server during the initial installation. You can add or remove this Calendar tab at a later date if you deploy calendar hosted domains.

   ---

Starting and Stopping Services

This section describes the commands needed to start and stop all the Communications Suite services.

To Start and Stop Services

Before You Begin

You should stop services before attempting to start them.

Steps

1. To stop services:

   Instant Messaging

   /opt/SUNWiim/sbin/imadmin stop

   Access Manager

   /etc/init.d/amserver stop

   Web Server

   /opt/SUNWwbsvr/https-wireless.map.beta.com/stop

   Calendar Server

   /opt/SUNWics5/cal/sbin/stop-cal

   Messaging Server

   /opt/SUNWmsgsr/sbin/stop-msg

   Administration Server

   /opt/DSServers/stop-admin

   Directory Server

   /opt/DSServers/sladp-wireless/stop-slapd

2. To start all services:

   Administration Server

   /opt/DSServers/start-admin

   Directory Server

   /opt/DSServers/slapd-wireless/start-slapd

   Messaging Server

   /opt/SUNWmsgsr/sbin/start-msg

   Calendar Server

   /opt/SUNWics5/cal/sbin/start-cal

   Web Server

   /opt/SUNWwbsvr/https-wireless.map.beta.com/start

   Access Manager

   /etc/init.d/amserver start

   Instant Messaging

   /opt/SUNWiim/sbin/imadmin start