Tenon Intersystems Please see text links at bottom of page for navigation Please see text links at bottom of page for navigation
Please see text links at bottom of page for navigation Please see text links at bottom of page for navigation
Please see text links at bottom of page for navigation
Search this site:

Program name: iTools 7
1. Administration
1.1. SSL Adminstration
I really only want to use SSL for secure administration. It looks like an SSL certificate is already enabled, because when I try to create a certificate, it says, 'Warning: There is an existing certificate for this virtual host....'
Is there already an SSL certificate that I can use to securely administer my machine?
iTools Manager 7 is communicating with Admin server via SSL connection.
The SSL certificate for the Admin server is a self signed certificate, and it should be fine to use. Since Tenon is not an official Certification Authority, browsers will complain. If you want to eliminate those annoying "Unknown issuer" messages from the browser, then you need to buy a real certificate and place it in:


1.2. Setting up phpMyAdmin
I installed php and MySQL, but clicking MySQL in the iTools Manager does not take me to a phpMyAdmin page. What went wrong?
If the old iTools6.x version of mysql is running, you will not be able to get to the iTools7 phpMyAdmin

Here is how to fix it:

In an editor that doesn't add ^M characters, edit

so that instead of it saying "YES" it needs to say "NO".

1.3. Accessing Log Reports
I've never set up logs on my machine before, but I notice that iTools 7 is supposed to have a web log analyzer. I can't see this in either the web-based administration or the iTools Manager. What am I missing?
You need to set up virtual hosts to see the logs.

Check System Status -> Log Reports.

1.4. iTools Settings vs. System Settings: IP management
I see that iTools 7 includes a Network Setup Screen. What do we need to enter there?
If you have entered IP addresses via the System Preferences, they are carried over to iTools. The virtual host section will find IP addresses that are setup by either System Preferences or iTools Network Settings. The reason we have our own IP management is to support users that don't have console access and are unable to add IP addresses remotely.

1.5. Subadministration
Can I assign one of my clients the ability to manage his own websites?
Yes. In Users Settings, create a user. When that user's settings are displayed, click on the lock in the lower left hand corner of the panel. This invokes the Authorization Service. You can give your client administration privileges over his own virtual host area.

1.6. Subadministration Limitations
Are there any restrictions to subadministration?
The subadministrator can do everything that an iTools administrator can do, except add users and add virtual hosts. This limitation is necessary to protect the system resources, since we don't have quotas implemented yet.

1.7. Applying Updates
I am trying to update my software, but it seems to be taking forever. What's going on?
With the very first release of the iTools Manager, the update package description was longer than the allowed characters in the iTools Manager. Use the iTools web-based Administration Server to update your system. This bug is corrected in the first update, so subsequent updates can be done via the iTools Manager.

1.8. iTools not starting after reboot
iTools is not starting after a system reboot, what should I do?
One of Apple's components is conflicting with part of iTools. Check that the /etc/hostconfig file (`cat /etc/hostconfig` from the terminal) has the following services set to NO or not listed.


If any of these are set to -YES- you need to turn them off in system preferences or set them in the hostconfig and then reboot iTools should now start.

1.9. Deleted virtual host still has directory entry
I deleted a virtual host but I still see a entry in my httpd.conf, can I delete this?
Yes, you can either delete it from the conf file manually, or remove it through access controls in iTools.

1.10. Store websites on a Volume other than the root partition
I want to store my websites on a harddrive other than my root drive, how would I do this?
The recommended way to store your websites on a different drive is to move the /Library/Tenon/WebServer/WebSites folder and create a symbolic link to the other drive in it's place. This can be done as follows:

cd /Library/Tenon/WebServer

mv WebSites WebSites.bak

ln -s /Volumes/OtherDisk/WebSites/ ./WebSites

If you wish to only store one or a few websites on a differnt partition it would be recommended to simply point their DocumentRoot to the new location.

1.11. Is there a limit to the number of virtual hosts iTools supports?
Is there a limit to the number of virtual hosts iTools supports?
Not really. In theory it can support 32,767, and practically it can reach upward of 1200 virtual hosts. Most systems are not likely to come even close to this limit.

1.12. AWStats -Can awstats create static html pages?
AWStats - Can awstats create static html pages?
Yes, you will need the awstats.pl file from awstats.sourceforge.net. Save it to /Library/Tenon/WebLog/cgi-bin/awstats.cgi Don't replace the current awstats.pl, call it awstats.cgi instead. Next you will need to create your static html pages, this can be done through the terminal as follows:

cd /Library/Tenon/WebLog/cgi-bin
./awstats.cgi -output -config=example.com >> /path/to/static.html

1.13. AWStats - I reinstalled, now awstats doesn't show my old log files
AWStats - I reinstalled, now awstats doesn't show my old log files
You need to remove the cache files from /Library/Tenon/WebLog/cache/awstatsxx2004.example.txt Where xx is the month that you wish to remove and example is replaced with your domain. You will also need to remove all cache files after xx month. Finally you need to rebuild the cache from the log files. You need to parse the logs in order of the time the log was generated.

For example, if you have log files: example.access.log.1 example.access.log.2.

cd /Library/Tenon/WebLog/cgi-bin

./awstats.pl -update -config=example.com -logfile=/Library/Tenon/WebServer/Logs/example.access.log.1

./awstats.pl -update -config=example.com -logfile=/Library/Tenon/WebServer/Logs/example.access.log.2

1.14. How can I see real-time statistics on what apache is doing?
How can I see real-time statistics on what apache is doing?


Replace yourdomain.com with your server's name and when prompted login as your admin user. This page will show you information on how many processes there are and what they doing including what requests are being served.

2. Installing, Upgrading, or Removing
2.1. Uninstalling iTools 7
How do I uninstall iTools 7?
cd /Library/Receipts
sudo /Library/Tenon/System/Scripts/installer.sh --delete iTools7.pkg

2.2. Uninstalling iTools on Panther
Where is the iTools uninstall script? I need to uninstall iTools from my Panther system.
The uninstall script does not work on Panther because the format of the bill of materials changed.

There are two ways to uninstall on Panther:
1) using the new uninstaller application


2) following the manual instructions below.

If you decide to use the manual instructions, follow them very carefully, otherwise you may lose valuable elements of your Panther OS.

As root or admin user, do the following:

cd /Library/Receipts/iTools7.pkg/Contents/Resources
sudo ./iTools7.pre_delete
sudo ./iTools7.post_delete
cd /Library/Receipts
rm -rf iTools7.pkg
cd /Library
sudo rm -rf Tenon/AdminServer
sudo rm -rf Tenon/DNSServer
sudo rm -rf Tenon/FTPServer
sudo rm -rf Tenon/MailServer
sudo rm -rf Tenon/Perl
sudo rm -rf Tenon/System
sudo rm -rf Tenon/WebLog
sudo rm -rf Tenon/WebServer
sudo rm -rf Tenon/patches

If Tenon folder is empty, then:
sudo rm -rf Tenon

The iTools7.pre_delete script stops various iTools services from running. The iTools7.post_delete restores webperfcache, snemail configuration, inetd configuration, apachectl script, and hostconfig files to their original state.

If you attempt to delete things from the Tenon folder before running these scripts, your original Panther OS installation will be damaged.

2.3. Importing Settings from Apple's Apache
I've been using an Xserve box with Apple's pre-installed Apache. Now that I've installed iTools 7, how do I get iTools to reflect my existing virtual host set up?
iTools 7 settings are installed in a location that differs from the Apple Apache settings. If you want the original Apache configuration to show up in iTools 7, just do the following:

In a terminal window (Finder/Applications/Utilities/terminal) change to "root" with the "su" command or use the command: sudo tcsh

enter your password when prompted.
type in:

cd /Library/Tenon/System/Scripts

This will add the settings to iTools7

Note that the name of the script is "Import.iTools.6.5". The reason this will work for you is because iTools 6.5 (our previous version) settings were in the same place that Apple's Apache settings are.

2.4. Importing Settings from iTools 6.5
Are there any special issues in moving from iTools 6.5 to iTools 7.0?
When you install iTools 7, the new Apache 2 will automatically pick up the settings from your iTools 6.5 installation. The only thing to be aware of is that if you don't turn off the Squid cache before the transition, the new virtual hosts will be running on port 81 instead of port 80, so you will think they are not there.

If this happens, if you installed iTools 7 without turning of iTools 6.5 Squid cache, just change the new virtual hosts from port 81 to 80 and all will be well.

2.5. Updating iTools 7
When I try to update using iTools Manager "update", nothing seems to happen...no feedback that an update has started. What's going on?
There is a bug in the iTools Manager. The package description is longer than the allowed characters in the iTools Manager. So it might seem like the update is loading forever, but in fact it's not running at all. The first three system updates will have to be addded thru the Administration Server (https://localhost:85).

After the third update, you will be able to use the iTools Manager to update your system.

2.6. Swapping WebSTAR & MacRadius for iTools 7 and Radicate
I am swapping out my old WebSTAR and MacRadius server to one with Mac OS X that has iTools 7 and Radicate (the new Radius server for Mac OS X) installed.

I would like to simply renumber the new machine to the old machine's IP address. Will this be problematic?
This will be fine. Renumber the iTools 7 machine first in an isolated environment and test that the IP address and the websites are functioning properly. If everything works as expected, then power down both the iTools machine and the WebSTAR machine. Disconnect WebSTAR from the net and connect the iTools machine to the net. Then power on the iTools machine and you should be done.

2.7. Installing Lasso 6
I'm having trouble getting Lasso 6 to run with iTools 7.1. What am I doing wrong?
You need to install iTools 7.1 before installing Lasso Professional 6.x. If you installed Lasso 6 before installing iTools, you can try uninstalling Lasso and then re-installing Lasso.

If that doesn't work, add the following four lines to your
/Library/tenon/WebServer/configuration/httpd-1.3.conf file:

LoadModule lasso_module /usr/libexec/httpd/LassoConnectorforApache.so
AddModule LassoConnectorforApache.c
AddHandler lasso-handler lasso
AddHandler lasso-handler lassoapp

2.8. Installing eShox 3.2
Now that I have iTools 7.1 installed, how do I install eShox 3.2?
If you already have iTools installed, then all you need is the eShox standalone package. You should use iTools PHP and MySQL packages, and not the ones supplied by eShox.

eShox 3.2 can be installed into any directory. The GUI installer allows you to change the location of eShox to anywhere on the harddisk. It is recommended that you put eShox into your virtual host directory.

After installation, use http://virtualhost/shop to access the set up screen of eShox, where 'virtualhost' is the name of the virtual host.

During installation you will be prompted for the location of your database. Use localhost if MySQL is installed on the same server. Make sure the MySQL root user and password are input as the corresponding fields in the set up screen. Then use the eShox set up screen to complete the installation.

2.9. Installing eShox 3.2 - MySQL
On Secure.cc's web site it states that iTools 7.1 users should download and install their MySQL version (4.0.14). Will this cause any issues with the Tenon MySQL package (4.0.13) I have currently installed?
Tenon recommends that eShox users install the iTools MySQL package. So just keep the MySQL you already have. That way you will be able to start/stop and manage MySQL within iTools.

2.10. How do I transfer my iTools to a new server?
How do I transfer my iTools to a new server?
You will need to copy the /Library/Tenon folder from your old server to the new machine. You also need to copy the /Library/Receipts/iTools7.pkg and any other Tenon packages you have installed (such as PHP, MySQL, etc.). If you have PHP installed then you also need to copy the /usr/local folder. After this is done you should download the iTools installer from our website and re-run it. It should say upgrade not install otherwise you probably didn't get the /Library/Receipts/iTools7.pkg file on to the new server.

If you have FTP users that need to be copied over you can do that as follows:

(On the old server)

`nidump passwd . |grep iTools > /tmp/it-ftp-users`

Copy /tmp/it-ftp-users to the new server

(On the new server)

`niload passwd . < /tmp/it-ftp-users`

3. Backup, Restore Configuration
no entries
4. Software Updates
4.1. Q30020401: Known issue with OpenSSL
I applied this patch #1, but my browser still insists that the certificate issuer is unknown. What should I do?
By default, an SSLCACertificateFile was not specified. Therefore, a SSL enabled website with a real certificate will display as the certificate was signed by unknown issuer. This patch fixes this problem by adding "SSLCACertificateFile /Library/Tenon/WebServer/Configuration/ssl.crt/ca-bundle.crt".

If the browser persists with an unknown issuer warning, please obtain a copy of the SSL Certificate Authority's credential. The credential should be appended to the /Library/Tenon/WebServer/Configuration/ssl.crt/ca-bundle.crt.

4.2. Q30020402: Known issues with Add Virtual Host and Rename Virtual Host
If I rename a virtual host, how do I get the Web Log Report to reflect this?
The Q30020402 patch synchronizes the Web Log Report to look for updated hostnames. After applying the patch, the virtual host administrator will need to adjust the logging file to reflect the new hostname manually.

This patch also corrects a problem with duplicated IP addresses being displayed in the IP selection pull down menu.

4.3. Q30020403: Known issues with iTools Manager System Update and iTools Users
Will iTools users be independent of System users?
This patch changes User management to manage iTools users only. The users created using System Preferences are independent of iTools users with only one exception. If a user home directory is changed using iTools User Management it will affect the system user's home directory location. Password changes or user deletion in iTools User Serttings will not change system users.

This patch also corrects a problem with iTools Manager System Update. This patch and earlier patches must be installed using iTools 7 Administration Server. Future updates can be installed using the iTools Manager.

This patch also adds the ability to convert secondary DNS zones to primary DNS zones and fixes an issue with crontab message in Web Log Reports.

4.4. Q30020404: Known issue with Access Control
When I installed iTools 7 I noticed that my http://mywebserver/~user directories went away. Does iTools 7 support this?
User based realm control (/~username) caused the WebServer to panic because AuthType is not set from inherited authentication scheme. This patch adds AuthType and associated directives to all realm controls.

4.5. Q30020501: Known issue with server side includes
What does patch Q30020501 address?
This patch addresses the following:

- Adds Apache 2 Proxy Module
- Adds Apache 2 Server Side Includes
- Fixes bug with DNS Converting Secondary Zone to Primary Zone
- Disables Default IP Address field from Default Virtual Host
- Adds Progress Indicator for loading or adding virtual host in iTools Manager

4.6. Q30020502: Known issue with rotating error log
What does patch Q30020502 address?
This patch fixes the following:
- a rotating error log bug
- aligned cache module activation sequence with Apache 2.0.45
- a default welcome generation bug

4.7. Q30020601: Updates Apache to 2.0.46
What's new in update Q30020601?
This patch updates Apache to the latest release 2.0.46. It also updates PHP to 4.3.2 and makes the web log traffic reporting more efficient.

4.8. Q30020701: Adds Apache 1.3 & Disk Quotas
What's new in this patch?
This patch creates iTools 7.1. iTools now supports both Apache 1.3 and Apache 2. A simple switch lets you revert back to the older Apache release. Some web add-ons are not yet supporting Apache 2 (Lasso, FileMaker, NetCloak). iTools 7.1 also adds support for disk quotas and fixes a number of bugs:
• web log report "never updated" bug
• sendmail configuration changes automatically trigger mail server restart
A new MySQL 'root' account password reset option has been added and the bind syntax has been improved.

4.9. Q30020801: Apache 1.3 Access Control & DNS Enhancement
What does this update do?
This update synchronizes the user database with Apple's in-place Apache 1.3.x to enable iTools Access Control to work.

In addition, the DNS server configuration syntax has been improved. DNS $ORIGIN is now embedded in the BIND configuration.

4.10. Q30020901: Preforked Apache 2
What does this update address?
This update converts Apache 2 from a threaded model to a preforked model to improve compatibility with PHP.

4.11. Q30021001: iTools 7.2 Panther Update
What does this update address?
This update includes the following:

- Panther 10.3 compatibility
- Postfix intergration for Panther 10.3
- New Log report module for Mail log and FTP log.
The mail log report module will automatically parse Post.Office, Postfix, and Sendmail logs, depending upon which one is running.
- Template change to remove unnecessary wording in Access Control.
- Template change to remove unnecessary file browsing icon from Server Path.
- DNS syntax parser changes to fix domain names that might clash with Bind 9 syntax.
- Prevent .DS_Store to be record in vhosts.conf.
- Bug fix for folder names with space in Access Control.

4.12. Q30021101: Security Update
What does this update address?
Ptfix configuration file changed for Mac OS X 10.3.1
- Fix a bug for unable to generate FTP log report
- Enable web log yearly report and migrate old awstats configuration files to awstats 5.9 format
-Fix a bug for GMT+ time zone for mail log report
- Patch for "unable to FTP for newly created system users for Panther"
- Fix hfs module for Apache 1.3/2 to protect case insensitive realm
- Polished Access Control User Interface.

The system update might be stalled by cron job, if the system update has been running for more than 24 hours. When this happens, please reboot the machine and the update will complete gracefully.

5. DNS
no entries
6. FTP
6.1. The difference between FTP and System users
What is the difference between iTools FTP users and System users?
The system/ftp user is a very complex issue. Although system users and iTools FTP users both have their data stored in the Mac OS X user library there are many differences between the two. Normal iTools users are NOT stored in Mac OS X user library hence you do not need to worry about the issues that exist with iTools FTP users. The following is a list of some of the differences between iTools FTP users and System users:

System users:

  • System user has a shell, and they can have SSH access.

  • System users (With Admin access) can be in no group (10.3 system), or staff (10.2 system).

  • System users (Without Admin access) can be in no group (10.3 system), or users (10.2 system).

iTools FTP users:

  • iTools FTP users don't have a shell. They can't use SSH access.

  • iTools FTP users are assigned to group www (for iTools 6 they were in group ftpguest).

  • iTools FTP users will be jailed in their own home directory if the user is NOT in group staff**.

Creating users:

  • If you create a iTools FTP user with the same name of a system user. The user is still a system user with his password changed to match the password of iTools FTP user and his home directory changed to the same directory as specified in User Home of iTools Admin Server. This is usually not recommended, but this is done to allow administrators to add their existing users to iTools without much change to the system.

  • You won't be able to create a system user with the same name of iTools FTP user, the system preference will tell you that the user already exist.

Deleting users:

  • If you delete iTools FTP users or system users from System Preference, then the FTP access is automatically cancelled.

Accessing the file system:

  • If you have iTools 7.0-7.1, and on Mac OS X 10.2 (including those that upgraded OS to 10.3 from 10.2) then you will be able to see the entire harddisk when you log into ftp as the system administrator.

  • If you have iTools 7.0+, and on Mac OS X 10.3 then you will be locked inside your own directory, and it doesn't matter if you are system administrator or not.

  • ** For iTools 7.0 - 7.1 they will also be jailed if the user is in group ftpguest. If you installed with 7.0 then upgraded to 7.3 your behavior will remain the same as 7.0 unless you copy over the new proftpd.conf file from /Library/Tenon/System/Defaults/proftpd.conf to /Library/Tenon/FTPServer/Configuration/proftpd.conf . To do that you can use this command in the terminal `sudo cp /Library/Tenon/System/Defaults/proftpd.conf /Library/Tenon/FTPServer/Configuration/proftpd.conf`

    6.2. Cannot delete folders via ftp
    I have some "empty" folders that I cannot delete via ftp.
    Although they may look empty through your ftp client some folders contain hidden files (files with names that begin with a .). The finder often adds a .DS_Store file to folders it has viewed. To remove all of these files from a given directory tree run the following command:

    rm "`find /Library/WebServer/WebSites/ -name .DS_Store`"

    6.3. FTP doesnt work even though I opened port 20/21 in my firewall
    I opened ports 20 and 21 on my firewall, however, I still cannot get ftp to work.
    You need to open up ports 49152 to 65534 as well. These ports are used by passive ftp for data connections. If you do not want to open those ports on your firewall you could suggest that your users switch off passive ftp in their clients.

7. Mail
7.1. Using WEBmail 5.1 with iTools 7
How do I tranfer my WEBmail 5.1 setup to iTools 7?
To get WEBmail 5.1 to work with iTools 7 you need to add an alias in the virtual host page (in web settings):

Virtual Hosts —> Aliases
Mime—>Handlers—>add .cgi .fcgi to cgi-script Handler
Click on Access Controls.
and click on Select.
Check mark (under options on the right) the following:
Execute CGI Scripts
Follow Symlinks
Server Side Includes

URL Path: /webmail
Directory: /Library/WebServer/web_mail/html/

7.2. Running iTools 7 and Post.Office on Different IPs
I have iTools and Post.Office on the same machine with only one network card. How do I separate iTools and Post.Office so that they run on different IPs?

You can do this.

Click System Preferences & select Network.
Show: select Network Port Configurations
Duplicate Built-in Ethernet. Then you can select "Built-in Ethernet" or "Built-in Ethernet Copy" to give them different IP addresses.

7.3. Creating a Mail-only user
I am using iTools with sendmail. I know that if I create an FTP user and the POP/IMAP modules are installed, that user will also have mail access. However, I want to give the majority of users on my system mail access, but no FTP. How do I set this in iTools 7?
Install the POP3/IMAP modules and create the users. Remember to specify a user home directory to hold the mail. The FTP box should remain unchecked. When you restart the FTP server the configuration will become effective.

7.4. What happened to 'sendmail'?
Previous versions of iTools included a 'sendmail' package. Where is it?
iTools 7 relies on the default 'sendmail' delivered with Mac OS X Server. This is for two reasons: 1) it is better for Apple to manage the sendmail binary releases; and 2) we strongly recommend using Post.Office for your mail needs. http://www.tenon.com/products/post_office

7.5. POP3 and IMAP modules
There is a separate download for POP3 and IMAP? What is this for and why do you need these if you are relying on Apple's sendmail?
POP3 and IMAP are only for mail clients. We use Apple's sendmail and have our own sendmail configuration file in a different place. The sendmail configuration files are controlled from the Administration Server.

If you are only using your machine for outgoing mail, for example, HTML form mail, then you don't need POP3 and IMAP. You will still be able to control the relay options of sendmail from within iTools 7 Admin Server.

7.6. Post.Office as a 'sendmail' replacement
I need to support CGI scripts that rely on sendmail and further sendmail is free. How can you recommend Post.Office?
Even though Post.Office is a proprietary mail server, not based on sendmail, Post.Office can seamlessly support anything that relies on sendmail. So you can transparently replace sendmail with Post.Office. If you are only using sendmail to support your HTML form mail, Post.Office is FREE.

Just download and start using. For 10 mail accounts or less, there is no charge. And it will make your administration much simpler.

7.7. Integrating Post.Office into iTools
Now when I click the Mail Settings icon in the iTools Manager, I go directly to sendmail. What happens if I install Post.Office?
Post.Office is automatically integrated into iTools. When Post.Office is installed, the iTools Mail Settings icon takes you to the Post.Office Administration page.

7.8. Using WEBmail 5.2 without iTools
I am only using Post.Office and WEBmail 5.2. Why do I need iTools 7?
WebMail 5.2 installation instructions for systems without iTools:

iTools is required to set up the proper operational environment for WEBmail 5.2. iTools includes MySQL (needed for WEBcalendar). The WEBmail setup can be accomplished with the freely downloadable iTools.

Please don’t hesitate to contact support@tenon.com if any issues arise.

1. Download the following packages from http://www.tenon.com/products/itools7/done.html

MySQL.dmg.gz (4.0.15 or later)
PHP.dmg.gz (4.3.2 or later)

2. Make sure you have a mail server that is already enabled for mail operation.
3. Install the downloaded packages according to the following sequence:

- Once iTools is installed, launch iTools Administration Server by bringing up a web browser on the server machine and pointing it to:
- Type in your user name and password. The default is admin for the user
- name and admin for the password.
- This will bring you to the main menu. You are now logged into iTools.
- Switch the iTools web server to use Apache 1.3. (This is very important).

Click on Web Settings. In the Web Settings (Virtual Hosts) page, go to the menu at the top of the browser and click on the Advanced tab. On the right hand side, just underneath the word "Value" change the toggle button by clicking on the arrows from "Apache 2.0" to "Apache 1.3" Go to the bottom of the page and click on "Apply".

- Shut down MySQL server from iTools Manager or Administration Server (System Status).
- Setup MySQL root user with a private password.
- Click on the System Status stoplight icon. If there is not a Green button next to MySQL server, click on "Restart Service" to the right of the MySQL service.
- Go back to the Main Menu in iTools by clicking on the Main Menu section in the upper left hand corner of the browser window. Click on:
- MySQL Database Settings.
- Type in a new password where it says (at the bottom of the screen)
- Enter new root MYSQL password:
- and click on "apply".
- Restart MySQL server from iTools Manager or iTools Administration Server (System Status).

- If you are using Post.Office or already have IMAP and POP installed on the server, please select customize, and uncheck ipop3d-imapd package.

4. Drag out iTools Manager.app from /Applications to the trash can. If you do not have an iTools license, we recommend dragging the iTools Manager.app from the Applications folder to the Trash. Without a license, the iTools Manager & iTools Administration Server will only operate for 14 days from installation. An iTools license is not necessary for the WEBmail to operate. The server is now installed with WebMail and it should be able to operate mail functions from local or remote mail servers.

Other reasons to use iTools with WEBmail 5.2:

There are reasons why you may want to purchase iTools:
- iTools includes Apache 2; WEBmail 5.2 under Apache 2 can utilize FastCGI -- resulting in significantly enhanced performance
- iTools contains a mail server logging analyzer. This can help the system administrator monitor the incoming and out going mail traffic.
- iTools contains a firewall to protect WebMail from hacker and unwanted internet traffic.
- iTools contains monitoring tools to make sure the WEBmail web server and mail server are running.
- iTools will help you easily host multiple WebMail virtual hosts on one machine.

Note: If you are running Apple's Apache, please contact Tenon Technical Support. iTools has the capability of importing your configuration into iTools but you may need assistance in adding this data into iTools.

8. Security
8.1. Multiple SSL Certs on the same server
I have multiple virtual hosts on the same machine, and I would like to have each use it's own SSL Certificate.
SSL Certificates are per ip address. You will need to set up the virtual hosts with different certificates on different ip addresses (or ports). This is part of the http/ssl protocol, the ssl certificate is checked before the http host header is sent, hence ssl certificates must be the same for all sites on a given ip address.

8.2. How does apple's 2004-12-02 security update affect me?
How does apple's security update for HFS+ with apache affect me?
If you are running iTools 7.3.3 or older you will need to make the following change to your httpd.conf file:

iTools 7 uses Apple's Apache for 1.3, however if you are running 1.3 and if the Apple security update installer replaced the link to our config file with their default config file you may need to make these changes to your httpd-1.3.conf configuration file and re-link it to /etc/httpd/httpd.conf.

If you are running Apache 2 (the default) with iTools 7 then you will need to make the following change to your httpd.conf file.

In the file "/Library/Tenon/WebServer/Configuration/httpd.conf", replace:

<Files ~ "^.ht">
Order allow,deny
Deny from all



<Files ~ "^.([Hh][Tt]|[Dd][Ss]_[Ss])">
Order allow,deny
Deny from all
Satisfy All
<Files "rsrc">
Order allow,deny
Deny from all
Satisfy All
<DirectoryMatch ".*..namedfork">
Order allow,deny
Deny from all
Satisfy All