Novell EDIRECTORY 8.8 SP3, Administration Manual, Page: 366 / 634

366 Novell eDirectory 8.8 Administration Guide
n
ov
do
cx (e
n)
11
Ju
ly 20
08
Description: Proxy User field
The proxy user is a Distinguished Name. You can grant that proxy identity different rights than the
Public identity has. With the proxy user, you can control LDAP Anonymous access to specific
containers in the eDirectory tree.
NOTE: Don't set login restrictions for the proxy user unless you want to have them apply to all
Anonymous LDAP users.
Scenario: Setting Up an NLDAP Proxy User— Digital Airlines has contracted with DataSure, a
research group. DataSure will use LDAP to access and store research on DigitalAir43, a NetWare 6
server at Digital Airlines. You don't want DataSure to have Public rights to directories on
DigitalAir43.
Therefore, you create an LDAP proxy user and assign that user specific rights to the DataSure
directory. You populate the proxy Distinguished Name on the LDAP Group object and refresh the
server. The server automatically starts using the proxy user rights for any new or existing
Anonymous users.
1 In Novell iManager, click the Roles and Tasks button Description: Roles and Tasks button .
2 Click eDirectory Administration > Create Object , then create a proxy user (for example,
LDAPProxy).
3
Assign a null password to that user.
4 (Optional) Assign the proxy user rights to specified directories.
5
Click LDAP > LDAP Overview > View LDAP Groups > the LDAP Group object.
6 In the Proxy User field, click the Browse button, browse to and select the LDAPProxy user,
then click OK .
14.6.9 Using SASL
Simple Authentication and Security Layer (SASL) is a mechanism for adding authentication support
and data security services to connection-based protocols through different mechanisms. It presents a
well-formed interface between the protocols and mechanisms. In addition, it provides a protocol for
securing subsequent protocol exchanges within a data security layer along with data integrity, data
confidentiality, and other services.