Novell IFOLDER 3.7 - SECURITY ADMINISTRATION, Administration Manual

Page: 88 / 216

88 OES 2 SP1: Novell iFolder 3.7 Administration Guide
no
vd
ocx
(e
n)
13
Ma
y 20
09
6.8 Provisioning Users, Groups and iFolder
Services
After you configure your Novell iFolder 3.7 enterprise server, you must specify containers and
groups as Search DNs in the LDAP settings. iFolder uses these to provision user and group
accounts. You can provision users and iFolders through iFolder Web Admin console. For more
information, see the following:
Š Chapter 10, “Managing iFolder Services via Web Admin,” on page 121
Š
Chapter 11, “Managing iFolder Users,” on page 141
Š Chapter 12, “Managing iFolders,” on page 149
6.8.1 Prerequisites
Š “Users and LDAP Contexts” on page 88
Š
“Extending LDAP User Objects for iFolder 3.7” on page 88
Users and LDAP Contexts
The contexts you plan to use as LDAP Search DNs in the LDAP settings must exist in the LDAP
directory; they are not created and configured from within the iFolder plug-in.
For information about configuring user, group, and container objects, see the Novell eDirectory 8.8
Administration Guide (http://www.novell.com/documentation/edir88/treetitl.html) .
Extending LDAP User Objects for iFolder 3.7
To enable LDAP attribute-based provisioning, you must Extend the LDAP user schema with the
i
FolderUserProvision auxiliary object class with iFolderHomeServer as one attribute.
1 Login to iManager using iManager administrator credentials.
2 Click View Objects icon to open the Object view.
3 Browse and find the appropriate tree where the desired users are listed.
For more information on this, see the
Novell iManager 2.7 Administration Guide (http://
www.novell.com/documentation/imanager27/imanager_admin_27/data/bob1yft.html) .
4 Click the desired user object you want to extend, and open the Action window, then click
Object Extensions .
5 Click OK in the right-side panel that displays the object extensions detail.
6 In the new page that lists the current auxiliary class extensions, click Add.
7 From the pop-up window, select iFolderUserProvision entry, and click OK .
8 Click Close .
For more information on this, see the section Roles and Tasks (http://www.novell.com/
documentation/imanager27/imanager_admin_27/data/b8im2s7.html) in the iManager
Administration Guide .
9
To add iFolderHomeServer attribute, click the same object to pop-up the Tasks window.
10 Select Modify Objects to display the object modification details in the right panel.