Novell IFOLDER 3 - ADMINISTRATION, Руководство пользователя

Страница: 87 / 148

Managing iFolder Services 87
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
Proxy User
Password Specify the password twice, then click OK to update the password stored in the
LDAP Settings .
Whenever you modify the Proxy User DN, you must also specify the password
associated with the new iFolder Proxy user. The password is used to
authenticate the iFolder Proxy user to the LDAP server when iFolder
synchronizes users for the iFolder user list. This password must match the
password stored in the iFolder Proxy user’s eDirectory object.
For information, see Section 8.4.5, “Modifying the iFolder Proxy User
Password,” on page 88 .
Search DNs Specify the LDAP containers and groups where iFolder 3. x searches for a list of
authorized users to provision for iFolder services on this enterprise server. DNs
are entered in LDAP format. For example:
o=acme
ou=group,o=acme
To add a DN, type it in the Search DN field, then click OK .
To edit a DN in the list, select it, then click the Edit icon (pen) to bring it to the
Search DN field. Make your changes, then click OK to accept the changes.
To search, click the Search icon to open a browsable list of LDAP objects, select
the container or group you want to add, then click OK . The LDAP Object
selector is not available if you logged into iManager in a different LDAP tree than
the one where the Server Host (iFolder’s LDAP server) resides.
To delete a DN from the list, select it, click the Delete icon (red X), then click OK .
When you delete a DN from the Search DNs, users in that DN are removed from
the iFolder user list the next time the iFolder server synchronizes LDAP
information.
During LDAP synchronization, the iFolder server queries the LDAP server to
retrieve a list of users in the DNs (as specified in the Search DN field). The
usernames in the iFolder user list are matched against this official LDAP list.
Any new user in the specified Search DNs are added to the iFolder user list. If a
user is no longer in the specified DNs, the username is removed from the user
list, any iFolders the user owns are orphaned and reassigned to the iFolder
Admin user, and the user is removed as a member of other iFolders.
The iFolder Admin User is provisioned for services during the install. It is tracked
by its GUID, so it is available even if the Search DN is empty, or if you specify
Search DNs that do not contain the Folder Admin user. This identity must be
provisioned to enable the iFolder Admin to perform management tasks.
Minimum
Synchronization
Interval Specify the synchronization interval (in seconds) for the elapsed time to wait
between attempts to retrieve an updated list of system users from the LDAP
server.
Default Value: 86400 seconds (elapsed time of 24 hours from whenever the
timer is reset)
Synchronization
on Start Specify Yes to immediately synchronize the list of users with the LDAP server
when you start the iFolder server, or specify No to wait until the specified
Synchronization Interval has elapsed after startup to begin synchronizing.
Default Value: Yes
Parameter Description