Novell EDIRECTORY 8.8 SP1, Руководство по установке

Страница: 29 / 150

Installing or Upgrading Novell eDirectory on Windows 29
no
vd
ocx
(e
n)
6 Ap
ril 20
07
Š
If there are minor errors, the upgrade will prompt you to continue or exit.
Š
If there are critical errors, the upgrade will exit.
See Appendix B, “Server Health Checks,” on page 141 for a list of minor and critical error
conditions.
Skipping Server Health Checks
To skip server health checks, disable server health checks when prompted in the installation wizard
For more information, see Appendix B, “Server Health Checks,” on page 141 .
2.7.3 Communicating with eDirectory through LDAP
When you install eDirectory, you must select a port that the LDAP server monitors so that it can
service LDAP requests. The following table lists options for various installations:
Port 389, the Industry-Standard LDAP Clear-Text Port
The connection through port 389 is not encrypted. All data sent on a connection made to this port is
clear. Therefore, a security risk exists. For example, LDAP passwords can be viewed on a simple
bind request.
An LDAP Simple Bind requires only a DN and a password. The password is in clear text. If you use
port 389, the entire packet is in clear text. By default, this option is disabled during the eDirectory
installation.
Because port 389 allows clear text, the LDAP server services Read and Write requests to the
Directory through this port. This openness is adequate for environments of trust, where spoofing
doesn't occur and no one inappropriately captures packets.
To disallow clear passwords and other data, select the Require TLS for Simple Bind with Password
option during installation.
As the following figure illustrates, the page gives defaults of 389, 636, and Require TLS for Simple
Bind with Password .
Installation Option Result
eDirectory 8.8 Clear text (port 389) Selects port 389.
eDirectory 8.8 Encrypted (port 636) Selects port 636.
eDirectory 8.8 Require TLS for simple bind Keeps (on the LDAP Group object) a
parameter asked about during
installation.