Novell IFOLDER 3.7 - SECURITY ADMINISTRATION, Administration Manual

Page: 142 / 216

142 OES 2 SP1: Novell iFolder 3.7 Administration Guide
no
vd
ocx
(e
n)
13
Ma
y 20
09
Setting LDAP-Based Attribute at Container Level
Currently, LDAP attribute based provisioning is supported only at user and group level. You cannot
set it at the container level directly. However, you can achieve this by the following:
1 Create an LDAPGroup.
2
Add all the container users as members to it.
3 Set the LDAP provisioning attribute on this LDAPGroup.
An iFolder shared with this group is available to all the members of the group (all container
members).
11.1.2 Manual Provisioning
Use the iFolder Web Admin console to provision users for iFolder servers.
1 Log in to the iFolder Web Admin console and open Users page.
2 Do either of the following:
Š
Locate and select the user, select the server from the drop-down list, then click Save .
Š
Locate and select the users, then click Provision to open a new page. From the drop-down
list in the new page, select the server and click Provision/Reprovision .
11.1.3 Manual Reprovisioning
With reprovisioning functionality, you can reassign a new server to an already provisioned user.
Thus, you can manually move the users across different servers in any given iFolder domain.
1 Log in to the iFolder Web Admin console and open Users page.
2 Perform the following:
Š
Locate and select the users, then click Provision to open a new page. From the drop-down
list in the new page, select the new server and click Provision / Reprovision .
11.1.4 Round-Robin Provisioning
If users and LDAPGroups are not provisioned either through the LDAP attribute or manually, they
are automatically provisioned to iFolder servers on a round-robin basis. When a new user or member
of an LDAPGroup logs in to iFolder for the first time, iFolder checks for the server with the fewest
number of users provisioned to it, and provisions the user to that server.
For example, suppose your iFolder system has three servers named
server A
,
server B
and
server C
and each server has users provisioned to it. If
server A
has 10 users,
server B
has 5
users, and
server C
has 12 users and a new iFolder user joins, the user is automatically provisioned
to
server B,
which has the fewest users. Provisioning users to
server B
continues until it has 10
users, which is equal to the number of users provisioned to
server A,
so that
server B
gets the
next new user. When all the three servers are provisioned with an equal number of users, the next
new user is provisioned to any of these servers.