Novell IFOLDER 3.7 - SECURITY ADMINISTRATION, Administration Manual

Page: 141 / 216

Managing iFolder Users
11
141
no
vd
ocx
(e
n)
13
Ma
y 20
09
11
Managing iFolder Users
This section discusses how to manage iFolder users with Novell
®
iFolder
®
3.7 enterprise server.
Š
Section 11.1, “Provisioning / Reprovisioning Users and LDAP Groups for iFolder,” on
page 141
Š Section 11.2, “Searching for a User Account,” on page 143
Š
Section 11.3, “Accessing And Viewing General User Account Information,” on page 143
Š Section 11.4, “Configuring User Account Policies,” on page 145
Š
Section 11.5, “Enabling and Disabling iFolder User Accounts,” on page 148
11.1 Provisioning / Reprovisioning Users and
LDAP Groups for iFolder
In a multi-server environment, each user or LDAPGroup member is provisioned to a home server
when he or she logs in to the iFolder for the first time. When a user logs in for the first time, iFolder
checks whether the user is already provisioned to a server manually.
If manual provisioning is not done, iFolder checks whether the user is provisioned to a server as
specified in the LDAP attribute. It checks whether the LDAP home server attribute is set for the user
or any of the user's LDAPGroups. If LDAP home server attribute is set, user is provisioned based on
that.
If all of the above cases fail to provision the user, iFolder automatically select a server in the iFolder
system and provision to the user on a round-robin basis.
NOTE: Provisioning a user or an LDAP Group to a slave server does not reflect immediately in the
Web Admin console of the slave server. This is because you have done the provisioning at the
Master server-level. The slave server receives the data only after a minimum of 30 seconds
depending upon the network load and the Master server load for it to reflect in the Web Admin
console of the slave server.
Š
Section 11.1.1, “Automatic Provisioning Through the LDAP Attribute,” on page 141
Š
Section 11.1.2, “Manual Provisioning,” on page 142
Š
Section 11.1.3, “Manual Reprovisioning,” on page 142
Š
Section 11.1.4, “Round-Robin Provisioning,” on page 142
11.1.1 Automatic Provisioning Through the LDAP Attribute
To enable LDAP attribute-based provisioning:
1 Install LDAPGroup plug-ins during installation.
2 Extend the LDAP user schema with the
iFolderLdapObject
auxiliary object class with
iFolderHomeServer
as one attribute. For more information, see “Extending LDAP User
Objects for iFolder 3.7” on page 88 .
3 Specify a home server in the LDAP attribute.