Configuration Roadmaps for the Mail Service

17-6 Oracle Fusion Middleware Administrators Guide for Oracle WebCenter ■ Section 17.3.2, Mail Server - Configuration ■ Section 17.3.3, Mail Server - Security Considerations ■ Section 17.3.4, Mail Server - Limitations

17.3.1 Mail Server - Installation

See your mail server documentation for installation information.

17.3.2 Mail Server - Configuration

You can allow WebCenter to create and manage Space distribution lists in WebCenter Spaces or in WebCenter Portal applications leveraging WebCenter Spaces Space management. This feature is supported only with Microsoft Exchange. The Space distribution list is created automatically whenever a Space is created. Users added or removed from the Space are implicitly added or removed from the corresponding Space distribution list, provided that the LDAP Base DN does not change only one LDAP Base DN is supported and that users created on Microsoft Exchange Active Directory correspond with users created in the identity store used by the WebCenter application. To disable this feature, do not enter the LDAP Active Directory server details in the mail connection. For more information, see step 7 of Section 17.4.1, Registering Mail Servers Using Fusion Middleware Control. For information about adding users on a mail server, see the mail servers product documentation. For information about adding users to the WebCenter applications identity store, see Section 28.3, Adding Users to the Embedded LDAP Identity Store. Microsoft Exchange 2007 is the only mail server for which there are configuration prerequisites. If you are working with a different mail server including Microsoft Exchange 2003, then you can skip the rest of this section.

17.3.2.1 Configuring Microsoft Exchange Server 2007 for WebCenter

The Microsoft Exchange Server 2007 certificate must be added to the WebCenter keystore. This requires the following steps. 1. Section 17.3.2.1.1, Obtain the Certificate from the Microsoft Exchange Server 2007 2. Section 17.3.2.1.2, Add the Certificate to the WebCenter Keystore 3. Restart the server after the certificate is imported.

17.3.2.1.1 Obtain the Certificate from the Microsoft Exchange Server 2007 Obtain the

certificate from your mail server installation administrator. This section describes one way to get the certificate from the Microsoft Exchange Server 2007. Follow these steps to obtain the certificate from a Microsoft Exchange 2007 server. 1. Open a browser and connect to your IMAP server with the following command: https:host_nameowa Where host_name is the name of the Microsoft Exchange Server 2007.

2. Place your cursor on the page, right-click, and select Properties, then click

Certificate . 3. In the popup window, click the Details tab, and click Copy to File... Managing the Mail Service 17-7 Be sure to use the DER encoded binary X.509 format, and copy to a file. 4. Convert the .DER format certificate to .PEM format. Use Firefox 3.0 or later to download the certificate directly to .PEM format. For other browsers, use the WebLogic Server der2pem tool to convert to .PEM format. For more information about der2pem see Oracle Fusion Middleware Command Reference for Oracle WebLogic Server.

17.3.2.1.2 Add the Certificate to the WebCenter Keystore

1. Import the downloaded certificate into the keystore, which is generally the file named cacerts in the JAVA_HOME. For example: keytool -import -alias imap_cer -file cert_file.cer -keystore cacerts -storepass changeit Where cert_file is the name of the certificate file you downloaded. In a standard installation, the JAVA_HOME is in the following location: scratchwcinstallps21225wlshomejrockit_160_17_R28.0.0-616 See Section 30.4.2.1.3, Configuring and Exporting the Certificates, for information about adding the certificate to the keystore. 2. Restart the server.

17.3.2.1.3 Microsoft Exchange Server Considerations

■ The IMAP port is 993 and secured true. SMTP port is 587 and secured true. Microsoft Exchange Server 2005 used 465. ■ If you see the following error, then you must change the trust store entry in the domain startup file setDomainEnv.sh: Caused by: java.io.IOException: Keystore was tampered with, or password was incorrect at sun.security.provider.JavaKeyStore.engineLoadJavaKeyStore.java:771 at sun.security.provider.JavaKeyStoreJKS.engineLoadJavaKeyStore.java:38 at java.security.KeyStore.loadKeyStore.java:1185 at com.sun.net.ssl.internal.ssl.TrustManagerFactoryImpl.getCacertsKeyStore TrustManagerFactoryImpl.java:202 at com.sun.net.ssl.internal.ssl.DefaultSSLContextImpl.getDefaultTrustManager DefaultSSLContextImpl.java:70 To change the entry: a. Shutdown the managed server on which WebCenter is deployed. b. Edit the domain startup script setDomainEnv located at: UNIX: DOMAIN_HOMEbinsetDomainEnv.sh Windows: DOMAIN_HOME\bin\setDomainEnv.cmd c. Add the Java property, as follows: -Djavax.net.ssl.trustStore=path to truststore -Djavax.net.ssl.trustStorePassword=truststore password Note: WebLogic only recognizes .PEM format. 17-8 Oracle Fusion Middleware Administrators Guide for Oracle WebCenter For example: set JAVA_PROPERTIES= -Dplatform.home=WL_HOME -Dwls.home=WLS_HOME -Dweblogic.home=WLS_HOME -Djavax.net.ssl.trustStore=C:\jive\mailtool\jssecacerts -Djavax.net.ssl.trustStorePassword=changeit d. Restart the managed server.

17.3.3 Mail Server - Security Considerations

For more information, see Section 31.8, Securing the WebCenter Spaces Connection to IMAP and SMTP with SSL.

17.3.4 Mail Server - Limitations

In WebCenter Spaces, the Mail service requires a Microsoft Exchange mail server connection to enable automatic Space distribution list management.

17.4 Registering Mail Servers

You can register multiple mail server connections. To start using the new mail connections you must restart the managed server on which the WebCenter application is deployed. This section includes the following subsections: ■ Section 17.4.1, Registering Mail Servers Using Fusion Middleware Control ■ Section 17.4.2, Registering Mail Servers Using WLST

17.4.1 Registering Mail Servers Using Fusion Middleware Control

To register a mail server with WebCenter applications:

1. Log in to Fusion Middleware Control and navigate to the home page for the

WebCenter application. For more information, see: ■ Section 6.2, Navigating to the Home Page for WebCenter Spaces ■ Section 6.3, Navigating to the Home Page for WebCenter Portal Applications

2. Do one of the following:

■ For WebCenter Spaces - From the WebCenter menu, choose Settings Service Configuration . ■ For WebCenter Portal applications - From the Application Deployment menu, choose WebCenter Service Configuration.

3. From the list of services on the WebCenter Service Configuration page, select Mail

Server .

4. To connect to a new mail server, click Add

Figure 17–3 . Note: If LDAP is configured to run in secure mode, then add the LDAP Secured property set to truefalse to use LDAP while creating distribution lists. For more information, see Table 17–5 . Managing the Mail Service 17-9 Figure 17–3 Configuring Mail Servers

5. Enter a unique name for this connection, and indicate whether this connection is

the active or default connection for the application Table 17–3 .

6. Enter connection details for the mail server

Table 17–4 . Table 17–3 Mail Server Connection - Name Field Description Name Enter a unique name for the connection. The name must be unique across all connection types within the WebCenter application. Active Connection Select to indicate whether this connection is the default or active connection for the Mail service. You can register multiple mail server connections: ■ WebCenter Spaces supports multiple mail connections. The mail connection marked active is the default connection for mail services in WebCenter Spaces. All additional connections are offered as alternatives; WebCenter Spaces users can choose which one they want to use through user preferences. ■ WebCenter Portal applications only use one mail connection—the connection marked active. Any additional connections are ignored. Table 17–4 Mail Server Connection Parameters Field Description IMAP Host Enter the host name of the computer where the IMAP Internet Message Access Protocol service is running. IMAP Port Enter the port on which the IMAP service listens. IMAP Secured Indicate whether a secured connection SSL is required for incoming mail over IMAP. SMTP Host Enter the host name of the computer where the SMTP Simple Mail Transfer Protocol service is running. SMTP Port Enter the port on which the SMTP service listens. SMTP Secured Indicate whether a secured connection SSL is required for outgoing mail over SMTP.