Novell EDIRECTORY 8.8 SP3, Administration Manual, Page: 246 / 634

246 Novell eDirectory 8.8 Administration Guide
n
ov
do
cx (e
n)
11
Ju
ly 20
08
This section contains the following information:
Š
“Enabling and Disabling Access to Encrypted Attributes Over Clear Text Channels Using
iManager” on page 246
Š
“Enabling and Disabling Access to Encrypted Attributes Over Clear Text Channels Using
LDAP” on page 246
Enabling and Disabling Access to Encrypted Attributes Over Clear Text Channels Using
iManager
To enable or disable the access to encrypted attributes over clear text channels using iManager,
enable or disable Always Require Secure Channel in the Encrypted Attributes Policies Management
Wizard while
Š
Creating and defining encrypted attributes policies .
Š Editing encrypted attributes policies .
Enabling and Disabling Access to Encrypted Attributes Over Clear Text Channels Using
LDAP
To enable or disable access to encrypted attributes over clear text channels using LDAP, add the
following attribute to the encrypted attributes policy:
attrEncryptionRequiresSecure
Setting this attribute to 0 makes a secure channel not always necessary, that is, you can access the
encrypted attributes over a clear text channel. Setting it to 1 makes a secure channel always
necessary, that is, you can access the encrypted attributes over a secure channel only.
Refer to Step 3 on page 243 for more information.
10.1.4 Viewing the Encrypted Attributes
Viewing the attributes that are encrypted depends on whether you have enabled or disabled the
Always Require Secure Channel option. This means whether you have specified that the encrypted
attributes need a secure channel to access them or not.
Š “Viewing Encrypted Attributes Using iManager” on page 246
Š
“Viewing Encrypted Attributes Using DSBrowse” on page 247
Š “SNMP Traps” on page 247
Viewing Encrypted Attributes Using iManager
If Always Require Secure Channel is enabled, you cannot view the encrypted attributes. You get the
error -6089, indicating that you need a secure channel to access the encrypted attributes.
If Always Require Secure Channel is disabled, you can see the encrypted attributes values in
iManager.
For more information, refer to “Browsing Objects in Your Tree” on page 212 .