Novell IFOLDER 3 - ADMINISTRATION, Руководство пользователя

Страница: 88 / 148

88 Novell iFolder 3.x Administration Guide
no
vd
ocx (
E
NU)
01
F
ebr
ua
ry
200
6
8.4.3 What to Do If the iFolder Admin User Is Deleted from
LDAP
If the iFolder Admin user is accidentally deleted from LDAP, the iFolder enterprise server cannot be
managed from iManager, but the iFolder server is still usable. All services continue to run under the
existing settings.
1 In iManager, select the Users role, then re-create the iFolder Admin username with the same
GUID as the original iFolder Admin user.
2 Stop the iFolder server.
3 Edit the
Simias.config
file to add the new iFolder Admin user.
The default locations of the
Simias.config
file are the
/var/lib/wwwrun/.local/
share/simias
/ directory and the
/home/wwwrun/.local/share/simias/
directory.
In the Domain section, modify the AdminDN value by entering the username of the iFolder
Admin user in LDAP format. For example:
<section name="Domain">
<setting name="AdminDN" value="cn=
iFolderAdmin ,o= acme " />
</section>
4 Start the iFolder server.
8.4.4 Securing Access to the iFolder Proxy User Password
The password for the iFolder Proxy user is stored in clear text in the
/var/lib/wwwrun/
.local/share/simias/Simias.config
file on the iFolder enterprise server. To secure
access to the Simias.config file, administrators of the iFolder 3. x server computer must use every
precaution to not inadvertently assign file system rights to the
/var/lib/wwwrun/.local/
share/simias
directory to unauthorized users.
To protect the password when authenticating to the LDAP server, make sure to configure the LDAP
Server Port and Port Is Secure options in the iFolder LDAP settings for secure (default)
communications between the servers and the LDAP server. For information, see
Section 8.4.2,
“Modifying the iFolder LDAP Settings,” on page 85 .
8.4.5 Modifying the iFolder Proxy User Password
Manage the iFolder Proxy user and password with the Users role in iManager, as you would for any
network user. If you need to modify the iFolder Proxy User password, change it for the iFolder
Proxy user object in eDirectory, then update the value stored in the iFolder enterprise server’s LDAP
Settings for every server that uses that iFolder Proxy user. The Folder server cannot synchronize its
list of users with the LDAP server until the passwords match in the LDAP User object and the
eDirectory LDAP settings.
1 Log in to iManager in the tree where the LDAP server and iFolder enterprise server reside.
2 Modify the iFolder Proxy user password in its eDirectory object.
2a In Roles and Tasks, expand the eDirectory Users role, then click Modify User .
2b Specify the iFolder Proxy user in DN format or browse to locate the user object, then click
OK .