Novell CLIENT LOGIN EXTENSION 3.7 - ADMINISTRATION, Руководство администратора, Страница: 13 / 32

Preliminary Tasks
3
13
no
vd
ocx
(e
n)
7 Ja
nua
ry 201
0
3
Preliminary Tasks
Before running the Novell
®
Client Login Extension, you must have a working identity manager
application (for example, Identity Manager 3.5 or later) system and have the User Application
configured correctly to enable the Password Self-Service feature. For information on installing
Identity Manager and the User Application, see the
Identity Manager 3.6.1 Installation Guide (http:/
/www.novell.com/documentation/idm36/idm_install/data/front.html) .
In order to have the Password Self-Service feature enabled, you need to perform at least the
following:
Š Enable Universal Password
Š
Create a password policy or select an existing password policy
Š Enable and configure the Forgotten Password option
Š
Assign the password policy to the appropriate users, groups, or container
Š Enable SSL
You initially set up the Password Self-Service feature through iManager by using the Passwords >
Password Policies > Forgotten Password and Policy Assignment options. For more information on
the Password Self-Service feature, see “Managing Passwords by Using Password Policies” (http://
www.novell.com/documentation/password_management32/pwm_administration/data/
ampxjj0.html)
and “Password Self-Service” (http://www.novell.com/documentation/
password_management32/pwm_administration/data/bqf5d1r.html) in the Password Management
3.2 Administration Guide .
Use the Identity Manager User Application to complete the password configuration. For information
about configuring Password Self-Service through the Identity Manager User Application, see
“Password Management Configuration” (http://www.novell.com/documentation/idmrbpm361/
agpro/data/b6mixux.html)
” in the Roles Based Provisioning Module 3.6.1 User Application
Administration Guide .
NOTE: After completing the Password Self-Service, restart the operating system in LDAP GINA,
LDAP CP, or Microsoft GINA mode to effect password recovery assistance.
You also need to turn on SSL in JBoss*. See “Self-Signed Certificates” (http://www.novell.com/
documentation/idmrbpm361/agpro/data/b2gx72y.html#b8gxrwv) in the Roles Based Provisioning
Module 3.6.1 User Application Administration Guide . The Client Login Extension does not work
without SSL.
You must enable the URL rewriting when the User Application is deployed on the IBM WebSphere
Application Server.
1
Log in to the Administration Console.
2 Go to the Server > Application Servers > Select your server (for example server1), then select
Session Management on the Configuration tab.
3 Select the check box against the Enable URL Rewriting .
4 Click Apply, then click Save .
5 Restart the WebSphere Application Server.