Novell OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION, Руководство по внедрению, Страница: 152 / 288

152 OES 2 SP2: Planning and Implementation Guide
n
ov
do
cx (e
n)
22
Ju
n
e 20
09
About Service Access on OES 2
Novell Linux User Management (LUM) lets you use eDirectory to centrally manage remote users
for access to one or more OES 2 servers.
In other words, LUM lets eDirectory users function as local (POSIX) users on an OES 2 server.
Access is enabled by leveraging the Linux Pluggable Authentication Module (PAM) architecture.
PAM makes it possible for eDirectory users to authenticate with the OES 2 server through LDAP.
In OES, the terms LUM-enabling and Linux-enabling are both used to describe the process that adds
standard Linux (POSIX) attributes and values to eDirectory users and groups, thus enabling them to
function as POSIX users and groups on the server.
You can use iManager to enable eDirectory users for Linux. For instructions, see “About Enabling
eDirectory Users for Linux Access” on page 156 .
Services in OES 2 That Require LUM-Enabled Access
Some services on an OES 2 server require that eDirectory users be LUM-enabled:
Š
Novell Samba (CIFS) Shares on the Server: Windows workgroup users who need access to
Samba shares defined on the server must be LUM-enabled eDirectory users who are configured
to access the server. This is because Samba requires POSIX identification for access.
By extension, NetStorage users who need access to Samba (CIFS) Storage Location objects
that point to the server must also be LUM-enabled eDirectory users with access to the server.
NOTE: Although Samba users must be enabled for LUM, Samba is not a PAM-enabled
service. Logging in to the OES 2 server through Samba does not create a home directory.
Š Core Linux Utilities Enabled for LUM: These are the core utilities and other shell
commands that you can specify during the OES install to be enabled for authentication through
eDirectory LDAP. In Linux, these are known as PAM-enabled utilities.
IMPORTANT: Before you accept the default PAM-enabled service settings, be sure you
understand the security implications explained in Section 21.2.2, “User Restrictions: Some
OES 2 Limitations,” on page 221 .
The core utilities available for LUM-enablement are summarized in Table 15-2 .
Table 15-2
PAM-enabled Services Controlled by LUM
Command Where Executed Task
ftp
Another host Transfer files to and from the OES 2 server which,
in this case, is a remote host.
login
Š
OES 2 server
Š
SSH session with OES 2
server
Log in to the OES 2 server, either directly or in an
SSH session with the server.
openwbem Local host Required for iPrint, NSS, SMS, Novell Remote
Manager, and iManager.