Novell IFOLDER 3 - ADMINISTRATION, Manual

Page: 61 / 148

Installing and Configuring iFolder Services 61
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
• Section 6.6.2, “Configuring the Search DNs for Provisioning Users,” on page 61
• Section 6.6.3, “Synchronizing the List of Provisioned Users with the LDAP Directory,” on
page 62
6.6.1 Prerequisites
iFolder Plug-Ins
The iFolder plug-in in Novell iManager 2.5 must be installed, and the iManager server must be
running. For information, see
Section 6.4, “Installing the Novell iFolder 3 Plug-In for iManager,” on
page 57 .
Users and LDAP Contexts
The contexts you plan to use as Search DNs in the LDAP settings must exist in the LDAP directory;
they are not created and configured from within the iFolder plug-in.
For information about configuring user, group, and container objects, see the Novell eDirectory
8.7.3 Administration Guide (http://www.novell.com/documentation/edir873/treetitl.html) .
6.6.2 Configuring the Search DNs for Provisioning Users
All users in the containers and groups listed in the iFolder LDAP settings’ Search DN field are
automatically provisioned as iFolder users.
1 In iManager, expand the Novell iFolder 3 role, select System , then wait for the page to refresh.
2 Select LDAP to open the System page to the LDAP tab, then click Modify .
3 Repeat the following for each context you want to add or modify:
3a Specify the context:
• Add: Type the DN of the LDAP context you want to add in the Search DN field.
• Search: To search, click the Search icon to open a browsable list of LDAP objects,
then select the context to add.
The LDAP object selector is not available if you logged into iManager in a different
LDAP tree than the one where the Server Host (iFolder’s LDAP server) resides.
• Edit: To edit a value, select it from the list of Search DNs, click the Edit icon (pen),
then make your changes.
DNs are entered in LDAP format. For example:
o=acme
ou=group,o=acme
Embedded help for completing the fields is available if you mouse-over the field.
The iFolder Admin User is provisioned for services during the install. It is tracked by its
GUID, so it is available even if the Search DN is empty, or if you specify Search DNs that
do not contain the Folder Admin user. This identity must be provisioned to enable the
iFolder Admin to perform management tasks.
3b Click OK to apply the change.