Novell IFOLDER 3.7 - SECURITY ADMINISTRATION, Administration Manual

Page: 50 / 216

50 OES 2 SP1: Novell iFolder 3.7 Administration Guide
no
vd
ocx
(e
n)
13
Ma
y 20
09
Š
Apache 2 Web Server (The apache2-worker package is required for iFolder 3.7 enterprise
server, Web Admin server and for Web access server.)
Š Other iFolder dependencies as noted in YaST by the iFolder 3.7 install packages.
Installing other applications or services on the iFolder server affects iFolder performance and might
introduce conflicts with the required versions of applications iFolder depends on, such as Apache 2
or Mono.
5.2.5 Installing the OES 2.0 Linux SP1 Server
For detailed information about prerequisites, installation, and configuration of your OES 2.0 Linux
SP1 server, see the
OES for Linux Installation Guide (http://www.novell.com/documentation/oes/
install_linux/data/front.html) .
5.3 Novell eDirectory 8.8
Novell eDirectory
TM
8.8 is a secure identity management solution that provides centralized identity
management, infrastructure, Net-wide security, and scalability to all types of applications running
behind and beyond the firewall. It natively supports the directory standard Lightweight Directory
Access Protocol (LDAP) 3 and provides support for TLS/SSL services based on the OpenSSL
source code. eDirectory is available as a component of Novell Open Enterprise Server.
IMPORTANT: Ensure that you select Use eDirectory Certificate for HTTPS services option in the
eDirectory configuration for a proper SSL communication between the iFolder master and the slave
servers.
Before you configure iFolder, eDirectory must be configured and running. In iFolder, you specify
LDAP containers and groups that contain User objects of users who you want to be iFolder users.
You must create contexts and define users in eDirectory. For information, see the following topics in
the
Novell eDirectory 8.8 Administration Guide (http://www.novell.com/documentation/edir88/
edir88/data/a2iii88.html) :
Š
“Designing Your Novell eDirectory Network” (http://www.novell.com/documentation/edir88/
edir88/data/a2iiido.html)
Š
“Managing User Accounts” (http://www.novell.com/documentation/edir88/edir88/data/
afxkmdi.html)
Make sure your LDAP objects comply with the naming conventions for your LDAP services. For
information, see
Section 2.3, “Naming Conventions for Usernames and Passwords,” on page 26 .
5.4 Active Directory
If you are using Active Directory as the LDAP source for iFolder, follow the guidelines given
below:
Š
The iFolder Admin user is already created by using the Active Directory tools before you
configure Novell iFolder.
Š iFolder Admin user has the self read rights and read rights to the iFolder proxy user.
Š
iFolder proxy user has the read rights to all the LDAP contexts configured in iFolder.