Novell ACCESS MANAGER 3.1 SP2 - README 2010, Руководство пользователя

Страница: 179 / 374

Defining Shared Settings 179
n
ov
do
cx (e
n)
16
Ap
ril 20
10
3 Enter a new shared secret name and, optionally, a secret entry name.
4 Click OK .
5 (Optional) To create additional entries for the secret, click the name of the secret, click New ,
specify an entry name, then click OK .
WARNING: The Identity Server currently has no mechanism to determine whether a secret is being
used by a policy. Before you delete a shared secret, you must make sure it is not being used.
6.4.2 Creating LDAP Attribute Names
LDAP attributes are available for all policies. LDAP attribute names can be created either on the
Custom Attributes page or in the associated policy that consumes them. The attribute names that you
specify must match the name of an attribute of the user class in your LDAP user store.
1 In the Administration Console, click Devices > Identity Servers > Shared Settings > Custom
Attributes .
This list contains the attributes for the inetOrgPerson class. It is customizable.
audio: Uses a u-law encoded sound file that is stored in the directory.
businessCategory: Describes the kind of business performed by an organization.
carLicense: Vehicle license or registration plate.
cn: The X.500 commonName attribute, which contains a name of an object. If the object
corresponds to a person, it is typically the person’s full name.
departmentNumber: Identifies a department within an organization.
displayName: The preferred name of a person to be used when displaying entries. When
displaying an entry, especially within a one-line summary list, it is useful to use this value.
Because other attribute types such as cn are multivalued, an additional attribute type is needed.
employeeNumber: Numerically identifies a person within an organization.
employeeType: Identifies the type of employee.
givenName: Identifies the person’s name that is not his or her surname or middle name.
homePhone: Identifies a person by home phone.
homePostalAddress: Identifies a person by home address.
initials: Identifies a person by his or her initials. This attribute contains the initials of an
individual, but not the surname.
jpegPhoto: Stores one or more images of a person, in JPEG format.
labeledURI: Uniform Resource Identifier with an optional label. The label describes the
resource to which the URI points.
mail: A user’s e-mail address.
manager: Identifies a person as a manager.
mobile: Specifies a mobile telephone number associated with a person.
o: The name of an organization.
pager: The pager telephone number for an object.
photo: Specifies a photograph for an object.