Novell OPEN ENTERPRISE SERVER - CONVERSION GUIDE 12-2010, Implementation Manual

Page: 266 / 296

266 OES 2 SP3: Planning and Implementation Guide
I.3 Common Proxy User - New in SP3

Section I.3.1, “Common Proxy User FAQ,” on page 266

Section I.3.2, “Managing Common Proxy Users,” on page 269
I.3.1 Common Proxy User FAQ

“Why Would I Want to Specify Common Proxy Users?” on page 267

“Why Has a Proxy User Been Added to Novell Cluster Services?” on page 267

“Which Services Leverage the Common Proxy User?” on page 267

“Can a Common Proxy User Service Multiple Servers?” on page 268

“Can I Change the Common Proxy User Name and Context?” on page 268

“Can I Assign the Common Proxy User After Services Are Installed?” on page 268

“What About Upgraded Servers Using a Common Proxy?” on page 268

“Are There Important Limitations to Keep in Mind?” on page 269
NetStorage NetStorage_Proxy

Additional eDirectory rights:
[Entry Rights]
Browse
LDAP ACL representation:
1#subtree#NetStorage_Proxy#
[All Attributes Rights]
Read, Compare
LDAP ACL representation:
3#subtree#NetStorage_Proxy#
NSS server_name admin

Additional eDirectory rights:
Supervisor right to the container it was
created in.
Samba (Novell) server_name -SambaProxy

The Universal Password policy
associated with the Samba users grants
this proxy user the right to retrieve user
passwords.

Additional eDirectory rights:
Rights to itself – Supervisor attribute
right
Rights to the OU where it is located
All Attribute rights – Read Write
Entry rights – Browse Create
samba* – Create Read Write
Associated Service Example Proxy User Name Default Rights Granted