Novell IFOLDER 3.7 - SECURITY ADMINISTRATION, Administration Manual

Page: 135 / 216

Managing iFolder Services via Web Admin 135
no
vd
ocx
(e
n)
13
Ma
y 20
09
LDAP Admin
Password The password is used to authenticate the LDAP Admin user to the LDAP
server.Click
OK to update the password stored in the LDAP settings.
LDAP Server Specify the DNS name or IP address of the LDAP server. This might be the
same or a different server as any of the iFolder servers in the iFolder
system.
LDAP SSL Select Yes to enable LDAP SSL. If SSL is enabled on the server, the value
is
Yes ; otherwise, the value is No .
Proxy User The iFolder Proxy user is an existing proxy user identity used to access the
LDAP server with Read access to retrieve a list of authorized users. The
proxy user is automatically created during the iFolder enterprise server
configuration in YaST. The username is auto-generated to be unique on the
system.
Make sure that the user account assigned as the iFolder Proxy user is
different than the one used for the iFolder Admin user and other system
users. Separating the proxy user from the administrator provides privilege
separation and is also important because the proxy user password is
stored in the file system on the iFolder server.
Specify the fully distinguished name of an existing user that you want to
make the iFolder Proxy user. This identity must have the Read right to the
LDAP directory. For example:
cn=iFolderProxy,o=acme
Make sure to also enter the new user's password in the Proxy Password
field. After you modify the Proxy user, you might want to immediately
synchronize the LDAP user lists, using the new iFolder proxy information;
otherwise, it is not tested until the next scheduled synchronization of the
user list. Use the
Sync Now option under LDAP Details on the Server
Details page to synchronize the iFolder user list on demand and verify your
new Proxy user settings.
Proxy User
Password To modify the iFolder Proxy User password, you don't need to use
iManager or update the value stored in LDAP settings for the iFolder
system. You can directly use this interface to modify the password.This
password must match the password stored in the iFolder Proxy user’s
eDirectoryTM object.Specify the password twice, then click
OK to update
the password stored in the LDAP settings.
Parameter Description