Administrator's Guide - Kerio Software Archive

Chapter 31 KMS Web Administration4. Enable the User can administer aliases, users and groups for his/her own domain option(see figure 31.3).5. Click OK to confirm changes.31.3 Settings allowing web administrationTo make the administration via the web interface working smoothly, the following settingsmust be done in the Kerio Administration Console:1. The HTTP service or the HTTPS service (see chapter 6) must be running in Kerio MailServer.2. In the administration console, in the Configuration → Remote Administration section, administrationvia the web interface must be enabled. To keep the server as safe as possible,it is also possible to allow this administration for a specific IP group only (see chapter12.3).3. Web administration rights must be assigned to the user. To set these rights, go to theDomain Settings → User Accounts section. Access rights for web administration must beset for a specific user in the Configuration → Domain Settings → User Accounts. In thedialog where the user’s parameters are defined, it is necessary to enable the User canadminister aliases, users and groups for their own domain option on the Rights tab (referto chapter 31.2).The same right may be assigned also to an entire group of users (Domain Settings →Groups).4. Kerio MailServer enables limiting of number of users within a domain. Users with administrationrights cannot break this limit. The limit can be set under Configuration →Domains. In the last configuration window for a domain, it is necessary to enable the Usercount limit option on the General tab (see chapter 7.2).31.4 Users logged inTo access the HTTP service using a web browser, insert the IP address (or the name ifit is contained in DNS) of the computer where Kerio MailServer is running. A protocolhas to be specified in the URL — either HTTP for non-secured access or HTTPS for SSLencryptedaccess. The URL can have the following form: http://192.168.1.1/admin orhttps://mail.company.com/admin.It is recommend to use the HTTPS protocol for remote access to the service (simpleHTTP can be tapped and the user login data can be misused). By default, the HTTP andHTTPS services use the standard ports (80 and 443). If the standard ports are changed,specify the port number in the URL address, like http://192.168.1.1:8000/admin orhttps://mail.company.com:8080/admin.If the URL has been entered correctly, a login page will be displayed in the browser. Enterthe username and password on this page (if the user does not belong to the primary domain,a complete email address is required).316