GroupWise Mobile Server Quick Start
- 1 GroupWise Mobile Server Documentation
- 2 GMS Server Build Checklist
- 3 Scenario 1
- 4 Troubleshooting
- 5 Additional TIDs or docs for GMS
- 6 Things to have done before opening a call
- 7 FAQ
- 8 Configuring GMS to use httpS/SSL
- 9 Configuring Push Theft/Loss Command to the device
- 10 Setting up Trusted App
- 11 Odd Issues
GroupWise Mobile Server Documentation
- Methods for removing GroupWise Mobile Server
- GroupWise Mobility Online Documentation
- Secure Gateway PDF
- GMS Install Guide
GMS Server Build Checklist
- Secure Gateway Server (Private NIC x.x.x.12) (Public NIC x.x.x.5)
- GroupWise Mobile Server (x.x.x.11)
- MS SQL server (x.x.x.10)
- POA (x.x.y.10)
High Level Install Steps - Scenario 1
- Install the Secure Gateway (Install the secure gateway 1st)
- REBOOT! Don't try to restart services, you MUST reboot
- After the Secure Gateway Server has been rebooted install the GMS on the GMS server
- With GMS 2, ensure IIS is disabled!!!
- Note that the NW client MUST be installed on the GMS Server if you plan to use "Trusted App".
- Note One can NOT select "Trusted App" during the install, this must be done later.
- After the install and you are ready to setup trusted app - make sure to hit apply! Not register once you get your key
- Note, if you get MSI errors 1601 etc, try running chkdisk /f (run on next reboot)
- After the install go to Services and ensure all 4 Services have user credentials. Note that only one service has the correct credentials. Ensure all 4 have user credentials.
- Address to Secure gateway is very picky. Here is an example tcp://ipOfSecureGateway:8865 Note you need the localhost AND the Secure Gateway's address.
- Reboot the GMS server
- Setup Accounts
- Go the http://IpAddrOfGMSbox | login as a GroupWise user | set your timezone info | often you'll want to select the left hand side to send a text/SMS message to your phone in order to download the GMS client.
- Any changes requires a restart of services (Generally).
- netstat -na | more look for ports that are common
- Secure Gateway on the public NIC shoud be listening on port 3102, 80 and 443 (incoming from the Internet)
- Secure Gateway Private NIC should be listening on 8865
- Secure Gateway Private NIC should be listening on port 80
- POA should be listening on SOAP port 7191
- GMS Server should be listening on 80 and 8191
- Important GMS troubleshooting URLs
- From the GMS server go to: https://www.syncsupport.com/test.asp If you can go to this, with success then your system is registered with intellisync.
- http://DNSnameOfGMSbox/sgadmin/status.html One of the most helpful URLS
- Note, if your internal DNS is not correct. It appears to use some kind of v-hosting, so you'll need to go to it by DNS name! So hack the c:\windows\system32\driver\hosts put the IPaddress yourGMSservername.yourdomain.com
- If the authentication source is removed in GMS then all of the users authentication sources will be changed to intellisync instead of GroupWise even if you repopulate the authentication source and each needs to be changed manually back to GroupWise.
- If a single user was syncing, and now it's stopped working, try a hard reset of the device. If that doesn't solve it, try to delete the user from GMS and perform a second hard reset of the device.
- If none of the users are syncing and nothing new appears in the WebPIM, yet a restart of GMS causes new items to appear initially but then no new additional items appears after that, verify that no firewall is blocking port 8191/tcp from the POA to GMS.
- Enabling sync on an address book where there are thousands of contacts in the corresponding mobile device's category may cause 820E errors on the user's user database to appear in the POA. If this happens, you will have to delete and recreate the user in GMS. Then do not enable syncing for that address book/category. The user will need to recategorize the contacts, making sure that the categories which are configured to sync do not contain as many contacts.
- Phone messages do not sync at this time. The only work around is to create a rule in GW that automatically forwards a phone message to yourself. Then it will become an e-mail which will sync.
- enabling verbose logs
- http://DNSnameOFGMSbox/diag | logging | Email Accelerator | enable verbose
- You may also want to enable verbose for a particular user. http://DNSnameOFGMSbox/diag | Email Accelerator | all accounts | select problem user | Verbose Logging click ENABLE
- At the very bottom of https://DNSnameOFGMSbox/admin/diag/pimsettings.jsp You'll see a "Add Property". Note this is case sensitive
- PROPERTY= GroupWise.LoggingLevel Value= 10
- PROPERTY= GroupWise.VerboseUser Value= username
Additional TIDs or docs for GMS
- More then 2 gigs or memory on the server causing Internal Server Error - ASP error
- Methods for removing GroupWise Mobile Server
- Is GMS supported on VMWare?
- Unable to synchronize contacts with GroupWise account(s) through GMS
- How to configure a mobile server with two GroupWise system
- GroupWise Mobile Server performance is slow.
- GroupWise Mobile Server Uncertified Devices Known to Work
Things to have done before opening a call
- Current log files when the problem is occuring along with any specific info regarding any users or occurance that is happening.
- GMS Version?
- How much memory on the server if more then 2 gigs have you changed the registry?
- Has a reset and or delete of the user with the problem made any difference?
- What database they are using?
- Do they have a multiple server setup ie do they have the database on a different server then the one gms services are running on?
- If they have just updated the server and not able to access the webpage have they restarted the server?
- If database is running on a different server then the GMS services do each of the GMS services have rights to the remote server?
- If issue seems to be device specific have they done a hard reset on the device?
- If using trusted app and mail flow stops working have you regenerated a trusted app key?
- Q: How to save Battery Life
- A: Setting up SMS push saves battery, your phone does not keep a constant connection to the internet and your email is delivered via SMS, if you do not have an unlimited SMS plan this can get expensive.
- Q: Which takes precedence - the phone or the backend?
- A: Sync settings are on the phone, although similar settings are both on the phone and the device, the phone wins. Settings on the server tell the server what to do, settings on the phone tell the device what to accept.
- Q: New address book does not sync to GMS or the phone.
- A: New address book does not have any contacts so will not sync the address book even if is told to sync.
- Q: Folder does not show up in WebPim or wireless device that has been selected to sync.
- A: No mail within the amount of days specified to sync is in the folder so it does not sync until there is mail in that folder in that date range.
- Q: Why in GMS 2 do you have to double click everything to open on a windows mobile device?
- A: It was a design decision to have everything work with double clicks rather then single clicks.
Configuring GMS to use httpS/SSL
You may find this information hard to find in the documentation, so here it is.
To Force website access to use https, please follow the steps listed below
- Click Start | Programs | Intellisync Mobile Suite | Admin Console
- Right Click on "Intellisync Mobile Suite" and click Properties
- Click the General Tab
- Put a check mark on "Force website access to use HTTPS"
- Click OK
- Restart the Intellisync Mobile Suite Services
Configuring Push Theft/Loss Command to the device
Unable to connect to the Intellisync Mobile Suite server hostname on port 8788. Ensure that Intellisync Mobile Suite is running on the server.
Change the "Internal Server Name" field to point to the Internal Groupwise Mobile Server (not the secure gateway).
From the admin side of things you want to send a "kill packet". So, as an admin you are on the inside and will send it to the outside right? So, lets configure that section for the internal GMS server and not the secure gateway.
On the GMS box, look on the server name tab in the admin console and look to see what the 4 boxes are configured as. Likely there is a </i> Internal Server Name" field</i> you can point to the internal DNS of the GMS server (not the Secure Gateway).
Setting up Trusted App
- Requires NW Client
- One must do it after the install and NOT DURING THE INSTALL
- run c:\program files\intellisync mobile suite\PIM\gwTrustedapp.exe with the UNC to your Domain directory. From a DOS BOX
- Once you have the KEY, copy/paste this to notepad and then copy/paste it into the GMS MMC console (see below) and Click APPLY
If the former GMS box is NOT up, then it fails to deliver messages to the new GMS server/devices
A common practice is to pilot a new system in vmware. Once proven good, the system is built on a real hardware server.
SYMPTOMS: Customer unable to get email unless the old GMS box was booted up (the GMS services were STOPPED and the sybase DB service was STOPPED), yet so long as the BOX was UP it would work. Power it off and it would fail.
TROUBLESHOOTING: With the services OFF and changing the port in the registry from 7191 to 8191 (hklm\software\synchrologic\install\mailserver\GWPORT) a packet trace showed the POA trying to SYN (FROM THE POA TO THE GMS BOX) and the GMS BOX would give a RESET/RST because it was NOT listening on that port.
FIX: Because of event notification based on the GW user, the POA is trying to contact the old GMS box. So, if the old GMS box deletes the users (with the services running and communicating with the POA) then that tells GW not to talk to the old GMS box anymore.
It was found that after deleting the users the POA no longer tried to SYN the Old GMS box and it no longer showed up in netstat -na > c:\net1.txt (even with the services RUNNING on the old gms box).