Novell IFOLDER 3.7 - SECURITY ADMINISTRATION, Administration Manual

Page: 134 / 216

134 OES 2 SP1: Novell iFolder 3.7 Administration Guide
no
vd
ocx
(e
n)
13
Ma
y 20
09
7b You can edit the following LDAP related information. Click Edit to open a new page
where you can modify the entries. You must be authenticated to the LDAP server before
you can edit the entries.
7c Authenticate to the LDAP server and modify the LDAP Details, then click OK to apply
your changes:
Delete member
grace interval Specifies the time interval for the iFolder to remove the user information
completely from the iFolder server after the user is deleted from LDAP.
For example, if you specify 10 minutes as Delete member grace interval ,
iFolder removes all the user information 10 minutes after the deletion of the
user from the LDAP or after the change in LDAP context. However, you
can recover all the user data within the specified period.
Whenever an LDAP context is changed or some user are deleted from the
LDAP context, irrespective of the current grace interval period, the first
LDAP sync disables the users. The first LDAP sync can be manual by
using the
Sync Now button, or be scheduled. After the grace interval
period, any scheduled or manual LDAP sync removes all the users from
iFolder domain and all the user iFolders become orphans.
Disabled users are never deleted automatically after the grace interval
period. The users continue to exist in a disabled state even after the grace
interval period until the next LDAP sync cycle. If the users are again
created in the LDAP context or the removed context is configured again
within the grace interval period, the user becomes active with all the
iFolders.
LDAP Context Lists all the LDAP contexts. iFolder searches users only from the listed
LDAP contexts.
Parameter Description
LDAP Server Shows LDAP Server address.
LDAP SSL Allow you to enable or disable LDAP SSL connection.
Proxy User The iFolder Proxy user is the identity used to access the LDAP server to
retrieve lists of users in the specified containers, groups, or users that are
defined in the iFolder LDAP settings. This identity must have the Read right
to the LDAP directory. The iFolder Proxy user is created during the iFolder
install.
Proxy User
Password The password is used to authenticate the iFolder Proxy user to the LDAP
server when iFolder synchronizes users with the LDAP server.
LDAP Context Lists all the LDAP contexts. iFolder searches users only from the listed
LDAP contexts.
Parameter Description
LDAP Admin DN Specify the fully distinguished name of the LDAP Admin. This might be the
same or different as your iFolder Admin.
Parameter Description