Objects
Introduction
Installation
SysAdmin
Network
Storage
E-mail
Real-Time
Access
Services
Directory
Clusters
Applications
Miscellaneous

WebMail
PBX

Objects	Domains	Accounts	Groups	Forwarders	Named Tasks	Chronos

Accounts

An Account is the basic service unit: every user served with a CommuniGate Pro Server should have an Account on that Server.

Each Account is protected with a password, so only the Account owner (and, optionally, System and Domain Administrators) can have access to Account data.

The postmaster Account is automatically created in the Main Domain. The Master (unlimited) access right is granted to that Account.

The pbx Account is automatically created in the Main Domain. See the PBX section for more details.

Creating a New Account

To create a new Account, type a new Account name into the field on the right side of the Create Account button and click that button.
The selected Account name should meet the Domain Object name restrictions.

Use the pop-up menu to specify the Account type:

MultiMailbox: A folder-type Account that can contain several Mailboxes of various types, as well as File Storage. The INBOX Mailbox is automatically created within the new Account. All incoming E-mails are stored in the INBOX Mailbox by default. The user can create additional Mailboxes using any IMAP client or AirSync client software, or using the CommuniGate Pro Web E-mail Interface.
A-Grade, B-Grade, ...: Same as MultiMailbox, but depending on the license type some addtional Services may be available to the Account.

By default, the Account name becomes the person's E-mail name, so Account names should contain only letters, digits, dash and point (dot) symbol - some mail systems cannot send mail to E-mail addresses containing other symbols.

Click the Create Account button. When a new Account is created, its name appears in the Domain Objects list. The Server automatically displays the Settings page for the new Account.

The Settings of a newly created Account are automatically set to the Account Template values.

You can create several Accounts at once, by preparing an Account List file and using the Import option.

If you have the Domain Administrator (not the Server Administrator) access rights, you need to be granted the CanCreateAccounts access right.

Specifying Account Settings

Account Aliases

Each Account can have Aliases (alternative names).

If the john_smith Account has the jsmith and j.smith Aliases, E-mail directed to jsmith and to j.smith will be stored in the john_smith Account, and the Signals directed to to jsmith and to j.smith will be delivered to the john_smith Account.
To access the john_smith Account via POP, IMAP, XMPP, XIMSS, WebUser, or any other client application both the user names jsmith and j.smith can be specified in the client application settings.

You can modify existing Aliases, you can add an Alias by typing a new name in the empty field, and you can remove an Alias by deleting it from its field. Use the Update button to update the Account Aliases list.

Alias names should not be the same as the name of some other Account, or other Object in the same Domain.
The Alias names should meet the Domain Object name restrictions.

You can specify several Aliases in one field by separating them with the comma (,) symbol.

Account Telephone Numbers

Each Account can have zero, one, or more Telephone (PSTN) numbers assigned to it.

The Server maintains a global list of all Telephone Numbers assigned to all Accounts in all Domains.

Telephone numbers should be specified in the E.164 format: +country_code area_code local_number. The number should contain only digits and it can start with the plus (+) symbol.

Note:

Only when a Signal (a call) comes to your CommuniGate Pro Server or Cluster, these Telephone Number mappings take effect.
An assigned Telephone Number should be registered with one of the PSTN Gateways. When a PSTN call is made to that number, the Gateway should receive the call and it should direct the call to your CommuniGate Pro Server via a VoIP protocol (such as SIP).
When a call made to a PSTN number arrives to the Server, it is usually still directed to the dialed PSTN number, and not to the user Account name. The Server uses its global list of assigned Telephone Numbers to route the call to the proper Account.
Users may want to register their assigned Telephone Numbers with one of the global ENUM services.
If a Telephone number is linked to a CommuniGate Pro Domain using such a service, VoIP calls made by users of all VoIP systems employing that ENUM service will be routed to the CommuniGate Pro Account directly, via the Internet, bypassing PSTN.

To manage the Account Telephone Numbers, open the WebAdmin Account Management pages, then open the Call Settings page in the Real-Time section:

You can modify existing Telephone Numbers, you can add a Telephone Number by typing a new name in the empty field, and you can remove a Telephone Number by deleting it from its field. Use the Update button to update the Telephone Numbers list.

See the PSTN section for more details.

Access Rights

The CommuniGate Pro Server maintains an Access Control List (ACL) for every Account.

The Access Control Lists are used to control what other users can do with this Account.

A Server Administrator with the All Domains access right has all access rights to all Server or Cluster Accounts.

The Account owner can grant certain limited access rights to other users, controlled with a Access Control List.

The following Account access rights are supported:

c (CreateMailbox): If you grant a user the CreateMailbox access right, that user will be able to create Mailboxes on the "top" of your Account (i.e. Mailboxes that are not sub-Mailboxes of existing Mailboxes in your Account).
x (Delegate): If you grant a user the Delegate access right, that user will be able to subscribe to the Account Event packages, access all folders of the Account and create calendar events on the Account behalf.
j (CallControl): If you grant a user the CallControl access right, that user will be able to access the information about your real-time communications.
This information includes the data about Signal objects handling your incoming calls, and it can be used to intercept your incoming calls ("call pick-up").

The Account Access Control Lists can be set and modified using the WebUser Interface, a XIMSS, or a MAPI client.

Renaming Accounts

If you want to rename an Account, open its Settings page, and enter a new Account name into the New Account Name field. Click the Rename Account button.

If there is no other Object with the same name as the specified new Account name, the Account is renamed and its Account Settings page should reappear on the screen under the new name.

You cannot rename an Account when it is in use.

If you are a Domain Administrator, you should have the Can Create Accounts Access Right to rename Accounts in your Domain.

You can move an Account into a different Domain, if you specify the new Account name as newName@domainName.
If you are a Domain Administrator, you should have the Can Create Accounts Access Right for both Domains.

Removing Accounts

If you want to remove an Account, open its Settings page, and click the Remove Account button. The confirmation page should appear.

If you confirm the action, the selected Account, all its Mailboxes, Settings, and other Account-related data files will be permanently removed from the Server disks.

The Account Aliases and all Mailing List owned by this Account will be removed, too.

You cannot remove an Account when it is in use.

If you are a Domain Administrator, you should have the Can Create Accounts Access Right to remove Accounts from your Domain.

Default Account Settings

An Account setting can have the default value. In this case the actual setting value is taken from the Default Account Settings for the Account Domain.
You can modify the Default Account Setting values by clicking the Account Defaults link on any Domain administration page of the WebAdmin Interface.

The Default Account Settings page resembles a regular Account Settings page.

The Domain Default Account Settings themselves can be assigned the default value.
In this case the setting value is retrieved from the Server-wide or Cluster-wide Default Account Settings.
You can modify the server-wide Default Account Settings by clicking the Account Defaults link on the Domains (Domain List) page.

A Dynamic Cluster installation maintains separate server-wide Default Account Settings for all Accounts in non-Shared (Local) Domains, and cluster-wide Default Account Settings for all Accounts in the Shared Domains. In the Cluster environment, the Default Account Settings page displays links that allow you to switch between the Server-wide and Cluster-wide Default Settings.

Settings

Example:

The global (Server)	Default Account Settings:	`Storage Limit = 10Mbytes`
The `company.dom`	Default Account Settings:	`Storage Limit = 30Mbytes`
The `client1.dom`	Default Account Settings:	`Storage Limit = default`

Now:

If you create an Account in any Domain, and set its Storage Limit to some value, that value will be used.
If you create an Account in the company.dom Domain, and set its Storage Limit value to default, the Account will be able to keep up to 30Mbytes of mail (the Default Account Setting for that Domain).
If you create an Account in the client1.dom Domain, and set its Storage Limit value to default, the Account will be able to keep up to 10Mbytes of mail (the global Default Account Setting for the Server).

When you serve many Accounts, you should try to specify most of the setting values as default, so you can easily change those settings for all Accounts. If some Account should be treated differently, you should explicitly specify the required setting value for that Account.

Class of Service

A Class of Service is an additional named Default Account Settings set. You can have several sets within each Domain, and you can specify a set to use for each Account, so Accounts in the same Domain can have different Default Settings.

To create a new Class of Service, use the WebAdmin Interface to open the Account Defaults page (a Domain one, a Server-wide, or a Cluster-wide one).

If you are a Server Administrator, or a Domain Administrators with the ServiceClasses Access Right, you can create additional Classes of Service:

Enter the new Class of Service name and click the Create Class of Service button. A new Class of Service will be created.

The Account Defaults page lists all created Classes of Service:

Classes of Service
FreeUser	Basic
Premium	Business

To open the Class of Service settings, click its name. The Class of Service settings page is the same as the Account Defaults page.

Account Defaults can be viewed as an unnamed Class of Service.

If you are a Server Administrator, or a Domain Administrators with the ServiceClasses Access Right, you can rename or remove Classes of Service. Use the WebAdmin Interface to open the Class of Service page, and scroll to the bottom of the page:

When there is at least one Class of Service created on the Domain or Server/Cluster level, the Account Settings page includes the Class of Service setting. If you are a Server Administrator, or a Domain Administrators with the ServiceClass Access Right, you can modify this setting:

When an Account Class of Service setting is not empty, the following algorithm is used to retrieve an Account settings:

If the Account has a setting value explicitly assigned, that value is used.
If the Domain has a Class of Service with the specified name, and that Class of Service settings contain a setting value, that value is used.
If the Server-wide (a Cluster-wide for Accounts in shared Domains) has a Class of Service with the specified name, and that Class of Service settings contain a setting value, that value is used.
Finally, the Server-wide (a Cluster-wide for Accounts in shared Domains) Account Default settings are used to retrieve the setting value.

You can create a Domain Class of Service with the same name as a Server-wide (or Cluster-wide) Class of Service to override some of its settings.

Account Template

When you need to create many Accounts, you may want to specify some non-default setting for all new Accounts. Each Domain has its own Account Template, and you can modify it by clicking the Template link on the Account List page.

The Accounts Template page resembles a regular Account Settings page.

All the settings set there will be copied to all newly created Accounts in this Domain.

Note: The Default Account Settings and Account Template are quite different. The Account Template is used only when an Account is being created. All template settings with non-default values are copied to the new Account settings. If you modify the template settings after an Account has been created, those Account settings will not change.

Besides the initial, non-Default setting values, the Account Template can be used to instruct the Server to create additional Mailboxes in each new Account (by default only the INBOX Mailbox is created), to subscribe the Account to certain Mailboxes, and to create Mailbox Aliases in all newly created Accounts.

Enter a name into the empty field to add a Mailbox name to the list.

For non-mail Mailboxes, specify the Mailbox Class from the pop-up menu.
If you select the Lock checkbox, it will be impossible to delete or rename the created Mailbox.

In this sample, when a new multi-mailbox Account is created in this Domain, the mail Mailboxes Sent and Drafts, and the calendar Mailbox Calendar will be created in that Account, along with the INBOX Mailbox.
The Account users will not be able to delete or rename the Calendar Mailbox.

See the Mailboxes section to learn about Mailbox Subscriptions.

Creating initial non-empty subscription:

simplifies the initial set-up of some client mailers that can access only those Account Mailboxes that are included into the Mailbox Subscription list;
helps new users to subscribe to public Mailboxes containing administrative information, news, etc.

See the Mailboxes section to learn about Mailbox Aliases.

Specifying a non-empty list of Mailbox Aliases simplifies the initial set-up for Microsoft Outlook users that need access to public Mailbox and other Foreign Mailboxes, but cannot use their mailers to access foreign Mailboxes directly.

This field can contain a mail message in the RFC822 format. If this field is not empty, then the specified message is stored in the INBOX Mailbox of every newly created Account.

The text can contain the following macro combinations, replaced with the newly created Account data:

^A - the newly created Account name.
^D - the Domain name.
^E - the newly created Account Real Name.

The Date: header field is automatically added to the stored messages.

The message text can start with a [charsetName] prefix, then the text will be converted from UTF-8 to the specified character set. Specify the Content-Type header field with the proper the charset= parameter:

Templates can be used to generate an initial default Web (HTML) page in the File Storage for all newly created Accounts:

This field can contain an HTML text. If this field is not empty, then the specified text is stored as the Default Web Page file in the File Storage of each newly created Account.

Importing User Account Information

The built-in Account Loader allows the administrator to register sets of users. The user names and Account attributes should be placed into a tab-delimited text file on the administrator (client) computer, and that file should be uploaded to the server using the Import field.

Click the browse button to select a file on your local system, and then click the Import Accounts button to create Accounts listed in the selected file.

Below is a sample IMPORT file:

`Name`	`Ignore`	`Storage`	`Aliases`
`johnd`	`sales dept`	`50M`
`susan`	`mgmnt`	`10M`	`susan.s,susan_smith`
`sales`	`dummy`	`30M`
`info`	`dummy`	`50M`	`help`

Note: The import file must be prepared on the client computer (on the computer you use to run your browser). The browser allows you to upload files from disks connected to that computer, not to the CommuniGate Pro Server computer.

Note: When using Netscape and some other Unix browsers, make sure that the file name ends with the .txt suffix - otherwise the browser won't upload the file as a text one, and the file will be ignored.

Note: The MacOS 9.x versions of the Microsoft Internet Explorer upload Macintosh files in the encoded x-macbinary format if the file contains a resource fork. Most text files created with Macintosh text editor applications contain resource forks that keep the information about the file fonts, file window position, and other Macintosh data. Such files cannot be used as import files with the Microsoft Internet Explorer browser. Either use a text editor application that saves text files without resource forks or use a browser that uploads Macintosh files without encoding.

The first file line describes the file contents. It should contain tab-delimited names of Account attributes. The following names are supported:

Name: This column contains the Account names. This attribute is not required to be in the first column, but it must exist. All other attributes are optional.
RealName: This column contains the Account user "real name".
Password: This column contains the Account password. If the file does not contain this column, or this field is empty, the CommuniGate Password and the Use CommuniGate Password settings are taken from the Domain Account Template.
UnixPassword: This column can be used instead of the Password column. If it exists, it should contain crypt-encrypted Account passwords. The Account Loader will add the binary prefix to those strings, so these CommuniGate passwords will be used as U-crpt encrypted passwords. See the Migration section for more details.
ChangePassword: If this column value is Yes string then the user will be asked to change the password on next login to the Account via WebUser Interface or Samoware client.
Storage: This column contains the maximum Account Mail Storage size (in bytes, or in kilobytes, if the number is followed with K, or in megabytes, if the number is followed with M). The column data can contain -1 or unlimited to specify unlimited storage.
Aliases: This column contains the Account Aliases; to specify several Aliases, separate them with the comma symbol.
Telnums: This column contains the Account Telnums; to specify several Telnums, separate them with the comma symbol.
MailInRules: This column contains the Account Mail Processing Rules. Rules should be represented in the internal format, as an array of individual Rules. Each Rule is an array, where the first element is the Rule priority, the second element is the Rule Name string, the third element is the Rule conditions array, and the last element is the Rule Actions array.
SignalInRules: This column contains the Account Signal Processing Rules.
Ignore: This column is ignored. An Account list file can contain several Ignore columns.
setting name: You can use columns that contain initial values for various additional Account settings (File Storage file and size limit, type or Rule actions enabled, etc.). Any additional column should have the same name as the selected Account setting name (keyword). For example, you can use the column named MaxWebSize to specify the storage limit for the Account File Storage, and you can also use the column named MaxAccountSize instead of the Storage column.
Custom Setting: You can use columns that contain initial values for various Custom Account Settings. For example, if the Directory Integration page contains the Custom Setting city, you can include a column named city in your Account Import file.

If the first line is parsed, all other lines are processed. Each line should contain tab-delimited fields, with the field contents specified in the first line. A line can contain less fields than the first line, in this case missing fields are processed as empty fields.

Attribute values for empty and missing fields are taken from the Account Template.

If an error occurs while processing some file line (missing name field, duplicate name, etc.), all Accounts created while processing previous lines are removed, and the number of the line that caused the problem is displayed. You can fix the file and try again.

Accounts

Creating a New Account

Specifying Account Settings

Authentication Methods

Two-factor Authentication

Application-Specific Passwords

Enabled Services

Access Settings

Mail Storage Settings

Incoming Mail Transfer Settings

Outgoing Mail Transfer Settings

Signaling Settings

File Storage Settings

WebUser Interface Settings