Novell IFOLDER 3 - ADMINISTRATION, Manual

Page: 33 / 148

Planning iFolder Services 33
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
Length and Format Considerations for an LDAP Object
In iManager, the maximum number of characters for most LDAP objects is 64 characters. Some
fields require common name format and others require fully distinguished name format for objects.
View the iManager Help for the different plug-ins to make sure your entries comply with length and
format restrictions for the individual plug-in.
Multilingual Considerations
If you have workstations running in different languages, you might want to limit User object names
to characters that are viewable on all the workstations. For example, a name entered in Japanese
cannot contain characters that are not viewable in Western languages.
IMPORTANT: eDirectory supports only English language characters for usernames and passwords
on Linux and HP-UNIX. This applies to OES Linux and Novell Linux Desktop.
For information, see “Multilingual Considerations” (http://www.novell.com/documentation/
edir873/edir873/data/a2iiidp.html#a2iiie7) in the Novell eDirectory 8.7.3 Administration Guide.
3.4 Admin User Considerations
During the iFolder install, iFolder creates two administrator users, the iFolder Admin user and the
iFolder Proxy user. After the install, you can also configure other users with the iFolder Admin right
to make them equivalent to the iFolder Admin user.
iFolder Admin User and Equivalent Users
The iFolder Admin user is the primary administrator of the iFolder enterprise server. Whenever
iFolders are orphaned, ownership is transferred to the iFolder Admin user for reassignment to
another user or for deletion. You initially specify the iFolder Admin user during the iFolder
enterprise server configuration in YaST.
The iFolder Admin user must be provisioned to enable the iFolder Admin to perform management
tasks. iFolder tracks this user by the LDAP object GUID, allowing it to belong to any LDAP
container or group in the tree, even those that are not identified as Search DNs. The user’s
movement can be tracked anywhere in the tree because it is known by the GUID, not the user DN.
The iFolder Admin right can be assigned to other users so that they can also manage iFolder services
for the selected server. Use the Administrators page in the Novell iFolder 3 plug-in to add or remove
the iFolder Admin right for users. Only users who are in one of the DNs specified in the LDAP
Search DN are eligible to be equivalent to the iFolder Admin user.
If you assign the iFolder Admin right to other users, those users are governed by the roster and
Search DN relationship. The user is removed from the roster and stripped of the iFolder Admin right
if you delete the user, remove the user’s DN from the list of Search DNs, or move the user to a DN
that is not in the Search DNs.
iFolder Proxy User
The iFolder Proxy user is the identity used to access the LDAP server to retrieve lists of users in the
specified containers, groups, or users that are defined in the iFolder LDAP settings. This identity
must have the Read right to the LDAP directory. The iFolder Proxy user is created during the iFolder
install. You probably never need to modify this value.