Novell IFOLDER 3 - ADMINISTRATION, Руководство пользователя

Страница: 86 / 148

86 Novell iFolder 3.x Administration Guide
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
Parameter Description
Server Host Specify the DNS name or IP address of the LDAP server.
This might be the same or a different server as your iFolder enterprise server or
iFolder Web Access server. Make sure this new LDAP server is in the same
LDAP tree as the original LDAP server that you specified as Server Host when
you configured the iFolder enterprise server in YaST.
Server Port Specify port 636 (secure) or port 389 (insecure). If the LDAP server is on the
same machine as the iFolder servers, a secure port is unnecessary.
Default Value: 636
Port Is Secure
(SSL) Specify whether the iFolder server is configured for SSL exchanges. If SSL is
enabled on the server, the value is Yes; otherwise, the value is No.
Default Value: Yes
Proxy User DN The iFolder Proxy user is an existing proxy user identity used to access the
LDAP server with Read access to retrieve a list of authorized users. The proxy
user is automatically created during the iFolder enterprise server configuration
in YaST. The username is autogenerated to be unique on the system. For most
deployments, this username should never change. Keep the autogenerated
iFolder Proxy username.
The iFolder Admin user or equivalent can use the iFolder 3 plug-in for iManager
to change the iFolder Proxy user identity in the LDAP settings for the iFolder
server. Make sure that the user account assigned as the iFolder Proxy user is
different than the one used for the iFolder Admin user and other system users.
Separating the proxy user from the administrator provides privilege separation
and is also important because the proxy user password is stored in the file
system on the iFolder server.
Specify the fully distinguished name of an existing user that you want to make
the iFolder Proxy user. This identity must have the Read right to the LDAP
directory. For example:
cn=iFolderProxy1234,o=acme
Make sure to also enter the new user’s password in the Proxy Password field.
After you modify the Proxy user, you might want to immediately synchronize the
LDAP user lists, using the new iFolder proxy information; otherwise, it is not
tested until the next scheduled synchronization of the user list. Use the
Update
and Synchronize option on the LDAP Settings page to synchronize the iFolder
user list on demand and verify your new Proxy user settings. (In iManager,
expand the
Novell iFolder 3 role, select Systems , select the LDAP tab, then click
Update and Synchronize Now .)