User Authentication
275
n
ov
do
cx (e
n)
16
Ap
ril 20
10
Extending the eDirectory Schema to enable Shared Secret Authentication
To authenticate in to ZENworks by using Shared Secret authentication mechanism, the schema of
the eDirectory specified when the user source is added must have been extended using novell-
zenworks-configure tool.
Perform the following steps to extend the eDirectory schema:
1
Run the
novell-zenworks-configure
utility on a ZENworks Server:
On Windows:
At the command prompt, change to
ZENworks_installation_path\bin
and
enter the following command:
novell-zenworks-configure.bat -c ExtendSchemaForSmartCard
On Linux:
At the console prompt, change to
/opt/novell/zenworks/bin
and enter the
following command:
./novell-zenworks-configure -c ExtendSchemaForSmartCard
2
You are prompted to continue with the action of extending the Novell eDirectory schema and
adding an optional zcmSharedSecret attribute to the user class. By default, 1 is selected. Press
Enter.
3
Enter the DNS name or IP address of the Novell eDirectory server to extend the schema.
4
You are prompted to select Secure Socket Layer (SSL) or Clear Text communication for
communicating with the eDirectory server. Enter 1 for SSL communication or 2 for Clear Text
Communication, then press
Enter
again.
5
Enter the port for communicating with the eDirectory server.
The default port for SSL communication is 636 and for Clear Text communication is 389.
6
Enter the fully distinguished name (FDN) of the Administrative User.
For example, cn=admin,o=organization
7
Enter the password for the Administrative User specified in
Step 6
.
8
(Optional) Enter the fully distinguished name for the ZENworks user source admin for whom
the ACL would be applied.
The ZENworks user source admin is configured as a user in the ZENworks user source
configuration for reading users from the user source and need not be the Administrative User
specified in
Step 6
. If you specify the fully distinguished name of this user, the program sets
ACLs at the specified containers to provide read access to zcmSharedSecret attribute for this
user.
9
Enter the user containers for which you want to extend the schema.
Multiple containers can be given separated by + sign. For example, o=sales or o=sales +
o=marketing.
10
Press
Enter
to generate random secret for all the users within the above containers.
11
(Conditional) If you have chosen SSL communication for communicating with the eDirectory
server, the server presents a certificate. Enter
y
to accept the certificate.
