manualshive.com logo in svg

Novell Account Management 2.1, Quick Start Manual

Share
Download
Novell Account Management 2.1 Quick Start Manual Download Page 7

160-000276-001

November 15, 2000
Novell Confidential

QuickStart

Rev 99a

29

22 June 00

VERSION 2.1

A C C O U N T   M A N A G E M E N T

Account Management Overview

Account Management Overview

Account Management Overview

Account Management Overview

Account Management is a full-service, platform-independent directory that serves as the 
foundation for many directory-enabled services. Account Management is composed of 
the following products:

!

NDS

®

 eDirectory

TM

!

Account Management

NDS eDirectory

NDS eDirectory is a highly scalable, high-performing, secure directory service. It can 
store and manage millions of directory objects. NDS eDirectory natively supports the 
directory standard LDAP 3 over Secure Socket Layer (SSL). 

SUPPORTED PLATFORMS

"

NetWare

®

"

Windows* NT*

"

Windows 2000

"

Solaris*

"

Linux*

"

Tru64 UNIX*

Account Management

Account Management is a directory-enabled application that simplifies and unifies the 
management of user profiles on Windows NT, Solaris, and Linux networks. It leverages all 
the scalability, utility, and extensibility of NDS eDirectory and adds crucial integration 
capability. With Account Management, you can eliminate many of the complexities of 
administering a mixed-platform network while smoothing over compatibility issues.

Summary of Contents for Account Management 2.1

Page 1: ......

Page 2: ... obligation to notify any person or entity of such changes This product may require export authorization from the U S Department of Commerce prior to exporting from the U S or Canada Copyright 2000 Novell Inc All rights reserved No part of this publication may be reproduced photocopied stored on a retrieval system or transmitted without the express written consent of the publisher U S Patent Nos 5...

Page 3: ...anager is a trademark of Novell Inc NetWare is a registered trademark of Novell Inc in the United States and other countries Novell is a registered trademark of Novell Inc in the United States and other countries Novell Client is a trademark of Novell Inc Novell Directory Services is a registered trademark of Novell Inc in the United States and other countries Third Party Trademarks All third part...

Page 4: ......

Page 5: ...ory 14 Lost Trustee Assignments on NFS Gateway Volumes 15 Installing or Upgrading NDS eDirectory on Windows NT 2000 17 System Requirements 17 Hardware Requirements 17 Forcing the Backlink Process to Run 18 Installing NDS eDirectory on Windows NT 2000 18 Prerequisites 19 Updating the NDS Schema 19 Installing NDS eDirectory 20 Installing NDS eDirectory on Solaris 23 System Requirements 23 Hardware R...

Page 6: ...gement on Tru64 UNIX 37 Installing Account Management on Windows NT 41 System Requirements 41 Installing Account Management on Windows NT 41 Integrating Windows NT Domains with NDS 42 Installing ConsoleOne 42 Upgrading from a Previous Version 42 Installing Account Management on Solaris 45 System Requirements 45 Installing Account Management on Solaris 45 Installing Account Management on Linux 49 S...

Page 7: ...ectory service It can store and manage millions of directory objects NDS eDirectory natively supports the directory standard LDAP 3 over Secure Socket Layer SSL SUPPORTED PLATFORMS NetWare Windows NT Windows 2000 Solaris Linux Tru64 UNIX Account Management Account Management is a directory enabled application that simplifies and unifies the management of user profiles on Windows NT Solaris and Lin...

Page 8: ...r more information on Account Management refer to the following sources Product information http www novell com products nds Product support http support novell com Online forums news forums novell com Product catalog http www novell com catalog Product documentation http www novell com documentation ...

Page 9: ... Support Pack 5 or later with NDS 8 35 or later NetWare 5 1 Support Pack 1 Windows NT 4 0 Support Pack 4 or Windows 2000 with eDirectory 8 38 or later NDS eDirectory 8 5 on NetWare Solaris Linux and Tru64 UNIX System Requirements If you are using RCONSOLE a ConsoleOneTM administrator workstation with the following A 200 MHz or faster processor A minimum of 64 MB RAM 128 MB recommended The Novell C...

Page 10: ...ltiple processors NDS itself is not processor intensive but it is I O intensive The following table illustrates typical system requirements for NDS eDirectory for NetWare Requirements for processors might be greater than the table indicates depending upon additional services available on the computer as well as the number of authentications reads and writes that the computer is handling Processes ...

Page 11: ... at the top of the NDS tree and must remain there Creates an Organizational Certificate Authority CA object Places the Organizational CA object in the Security container Only one Organizational CA object can exist in an NDS tree Because you must not move this object from one server to another ensure that the first NDS server is the one that you intend to permanently host the Organizational CA obje...

Page 12: ...ations Post NetWare 5 Schema Update 3 3 3 3 Enter the Admin name for example Admin VMP and password This step updates the schema and posts the results to a log file Ignore errors associated with adding object classes DSREPAIR NLM is simply applying the Post NetWare 5 Schema Update changes to each object 4 4 4 4 Using the table in Step 1 as a reference copy the appropriate patch version of DSREPAIR...

Page 13: ...rom Support Connection skip this step 2 2 2 2 Conditional Expand the support pack For NW51SP1 EXE the support pack might take several minutes to verify an ARJ SECURITY envelope After verification the support pack creates an NW5SPX directory and places subdirectories and files there If you purchased a CD from Support Connection skip this step The support pack is already expanded 3 3 3 3 At the serv...

Page 14: ...ase applications such as Sybase or Oracle backup applications and other programs that rely on files being continually open and volumes being mounted During the NDS eDirectory 8 5 installation the software must dismount volumes so that trustree assignments can be migrated Be aware that virus scanners and other programs might be embedded inside other products for example ZENworksTM ManageWiseTM and ...

Page 15: ...ines that you commented out in Step 1a on page 14 restart the server by clicking Yes Repeat this procedure for each NetWare 5 x server you want to upgrade to NDS eDirectory 8 5 for NetWare You can download an evaluation license from the NDS eDirectory Web page http www novell com products nds licenses eval_85 html LOST TRUSTEE ASSIGNMENTS ON NFS GATEWAY VOLUMES The NDS installation process does no...

Page 16: ...16 A C C O U N T M A N A G E M E N T ...

Page 17: ...g one of the following Novell ClientTM for Windows 95 98 3 0 or later Novell Client for Windows NT 4 5 or later NT client Administrative rights to the NT 2000 server and to all portions of the NDS tree that contain domain enabled User objects For an installation into an existing tree you need administrative rights to the Tree object so that you can extend the schema and create objects NOTE The Roo...

Page 18: ... NDS identifiers change when upgrading to NDS eDirectory the backlink process has to update backlinked objects for them to be consistent Backlinks keep track of external references to objects on other servers For each external reference on a server the backlink process ensures that the real object exists in the correct location and verifies all backlink attributes on the master of the replica The ...

Page 19: ...er transaction process than a FAT file system provides you can only install NDS on an NTFS partition Therefore if you only have FAT file systems do one of the following Create a new partition and format it as NTFS Use Disk Administrator Refer to Windows NT Server User Guide for more information Convert an existing FAT file system to NTFS using the CONVERT command If your server only has a FAT file...

Page 20: ... Service list 4 4 4 4 Enter ins in the Startup Parameters field click Start After the schema has been updated the status field next to the DSREPAIR module in NDSCONSOLE will be blank 5 5 5 5 To see the results of the schema update select DSREPAIR in NDSCONSOLE 6 6 6 6 Click Start File Open Log File Open The last entry of the log file will contain the results of the schema update INSTALLING NDS EDI...

Page 21: ...This option installs ConsoleOneTM 1 2d ConsoleOne can perform all the tasks previously performed in NetWare Administrator and NDS ManagerTM Follow the online instructions in the Installation Wizard The installation program checks for the following components If a component is missing or is an incorrect version the installation program automatically launches an installation for the component Micros...

Page 22: ...22 A C C O U N T M A N A G E M E N T ...

Page 23: ... 7 or Solaris 8 with the following required patches All recommended Solaris OS patches can be downloaded from the Sunsolve Online Web page http sunsolve sun com A minimum of 64 MB RAM 128 MB recommended 56 MB of disk space to install NDS Server Additional disk space requirements will depend on the number of objects you will have in NDS ConsoleOneTM requirements ConsoleOne 1 2d 32 MB disk space Ver...

Page 24: ...for NDS eDirectory for Solaris Requirements for processors might be greater than the table indicates depending upon additional services available on the computer as well as the number of authentications reads and writes that the computer is handling Processes such as encryption and indexing can be processor intensive Forcing the Backlink Process to Run Because the internal NDS identifiers change w...

Page 25: ...k 224 0 0 0 dev interface If you have more than one server in the tree the time on all the network servers should be synchronized Use Network Time Protocol NTP to synchronize time If you want to synchronize time on Solaris with NetWare servers use TIMESYNC NLM 5 09 or later If you are installing a secondary server all the replicas in the partition that you install the product on should be in the O...

Page 26: ...host 2 2 2 2 Enter the following command nds install 3 3 3 3 When prompted accept the license agreement The installation program displays a list of NDS eDirectory components that you can install 4 4 4 4 Specify the option for the component you want to install Based on the component you choose to install the installation program proceeds to add the packages in to the Solaris system 5 5 5 5 If you a...

Page 27: ...he master replica of the Tree object This is useful if you are installing across a WAN This is an optional parameter DB Files Dir Specifies the directory path to a location in which NDS database files are to be stored This is an optional parameter 7 7 7 7 Save the ndscfg inp file close the editor 8 8 8 8 Enter the password of the user with administration rights when prompted Upon successful instal...

Page 28: ...28 A C C O U N T M A N A G E M E N T ...

Page 29: ...ConsoleOneTM requirements ConsoleOne1 2d A minimum of 64 MB RAM 128 MB recommended 200 MHz processor a faster processor is recommended 32 MB disk space Hardware Requirements Hardware requirements depend on the specific implementation of NDS For example a base installation of NDS eDirectory with the standard schema requires about 74 MB of disk space for every 50 000 users However if you add a new s...

Page 30: ...pdate backlinked objects for them to be consistent Backlinks keep track of external references to objects on other servers For each external reference on a server the backlink process ensures that the real object exists in the correct location and verifies all backlink attributes on the master of the replica The backlink process occurs two hours after the database is open and then every 780 minute...

Page 31: ... Root object used in earlier versions of NDS has been renamed to Tree in NDS eDirectory 8 5 For secure NDS eDirectory operations you will need the NICI Foundation Key file filename nfk for example 01234567 nfk which is available in the license diskette that ships with NDS eDirectory Copy the nfk file to the var directory on the Linux system If you do not use the NICI Foundation Key you will not be...

Page 32: ... default location var the mounted license diskette or the current directory If the path you entered is not valid you will be prompted to enter the correct path if you continue with the installation without specifying the correct path nds install will not configure NDS Server You can use the ndsconfig utility to configure NDS Server after installation However to do so you need to ensure that the nf...

Page 33: ...al parameter 7 7 7 7 Save the ndscfg inp file close the editor 8 8 8 8 Enter the password of the user with administration rights when prompted Upon successful installation the replica is created and initialized with the basic schema Objects for the replica server LDAP and security are also created IMPORTANT Before you begin to use NDS eDirectory you must ensure that SLP has been installed properly...

Page 34: ...34 A C C O U N T M A N A G E M E N T ...

Page 35: ...ConsoleOne 1 2d 32 MB disk space You will need ConsoleOne 1 2d to administer the Tru64 UNIX installation of DirXML ConsoleOne can be installed on the same server on which DirXML is installed or on another Solaris workstation in the network Hardware Requirements Hardware requirements depend on the specific implementation of NDS For example a base installation of NDS eDirectory with the standard sch...

Page 36: ... to update backlinked objects for them to be consistent Backlinks keep track of external references to objects on other servers For each external reference on a server the backlink process ensures that the real object exists in the correct location and verifies all backlink attributes on the master of the replica The backlink process occurs two hours after the database is open and then every 780 m...

Page 37: ...Root object used in earlier versions of NDS has been renamed to Tree in NDS eDirectory 8 5 For secure NDS eDirectory operations you will need the NICI Foundation Key file filename nfk for example 01234567 nfk which is available in the license diskette that ships with NDS eDirectory Copy the nfk file to the var directory on the Tru64 UNIX system If you do not use the NICI Foundation Key you will no...

Page 38: ... in the default location var the mounted license diskette or the current directory If the path you entered is not valid you will be prompted to enter the correct path if you continue with the installation without specifying the correct path nds install will not configure NDS Server You can use the ndsconfig utility to configure NDS Server after installation However to do so you need to ensure that...

Page 39: ...nal parameter 7 7 7 7 Save the ndscfg inp file close the editor 8 8 8 8 Enter the password of the user with administration rights when prompted Upon successful installation the replica is created and initialized with the basic schema Objects for the replica server LDAP and security are also created IMPORTANT Before you begin to use NDS eDirectory you must ensure that SLP has been installed properl...

Page 40: ...40 A C C O U N T M A N A G E M E N T ...

Page 41: ...ing tree you need administrative rights to the Tree object to extend the schema NOTE The Root object used in earlier versions of NDS has been renamed to Tree in NDS eDirectory 8 5 A supported version of NetWare only if used in a mixed NetWare NT environment NetWare 5 with the latest Support Pack NetWare 4 11 4 2 server with Support Pack 8a or later with NDS 6 09b or later NetWare 5 server with Sup...

Page 42: ...then on any BDCs 1 1 1 1 Log in to the NDS tree as User Admin or an equivalent 2 2 2 2 Log in as Administrator or a user with administrative privileges to the domain with the same user account as in Step 1 in Installing Account Management on Windows NT on page 41 3 3 3 3 When the Domain Object Wizard launches follow the online instructions You can move NT domain users to NDS or associate existing ...

Page 43: ...43 A C C O U N T M A N A G E M E N T 2 2 2 2 Click Open select NDS4NT21 SCH 3 3 3 3 Click Done 4 4 4 4 Run SETUP EXE from the Account Management CD ...

Page 44: ...44 A C C O U N T M A N A G E M E N T ...

Page 45: ...s 95 3 0 or later or Novell Client for Windows NT 4 71 or later Installing Account Management on Solaris You can use the nds install utility to install Account Management on Solaris systems This utility is located in the Setup directory on the CD for the Solaris platform The utility adds the required packages based on what components you choose to install After adding the required packages the ins...

Page 46: ...orkstation Context of the root of the partition where Account Management will be installed 5 5 5 5 To create a partition if the partition does not exist specify Yes for the Create Partition parameter 6 6 6 6 Save the information close the editor 7 7 7 7 When prompted enter the password of the user with administration rights The following daemons will initialize after Account Management has been su...

Page 47: ...47 A C C O U N T M A N A G E M E N T etc slp conf The SLP configuration file etc pam conf nds The sample file for enabling NDS authentication on Solaris systems ...

Page 48: ...48 A C C O U N T M A N A G E M E N T ...

Page 49: ...agement on Linux You can use the nds install utility to install Account Management on Linux systems This utility is located in the Setup directory on the CD for the Linux platform The utility adds the required packages based on what components you choose to install After adding the required packages the installed Account Management will be configured based on inputs provided in the ndscfg inp file...

Page 50: ...nstalled 5 5 5 5 To create a partition if the partition does not exist specify Yes for the Create Partition parameter 6 6 6 6 Save the information close the editor 7 7 7 7 When prompted enter the password of the user with administration rights The following daemons will initialize after Account Management has been successfully installed slpuasa The SLP user and service agent daemon nds_uamcd The A...

Page 51: ...51 A C C O U N T M A N A G E M E N T etc pam d nds The directory containing the sample files for enabling NDS authentication for all services on Linux systems ...

Reviews:

No comments

Brands by name

Popular brands

Load more brands