Novell OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION, Руководство по внедрению, Страница: 268 / 288

268 OES 2 SP2: Planning and Implementation Guide
n
ov
do
cx (e
n)
22
Ju
n
e 20
09
Per Server One for each
server This confines any security
vulnerabilities to individual
servers. This requires that a proxy user for
the server is created before the
server is installed.
For the first server in the tree,
eDirectory and iManager must be
installed with the server. Then
after the server installation
finishes, the proxy user can be
created. And finally the services
can be installed and configured to
use the proxy user for the server.
This is not generally
recommended. However, it can be
useful when each OES server is
managed by a separate
administrator, or for enterprises
where branch users access a
server in the branch office.
The install admin must know the
proxy user’s password.
Per Partition One for each
partition This confines any security
vulnerabilities to individual
partitions. This is useful when users are co-
located with the OES servers in a
single partition, and cross-partition
access of users to services is rare.
This is a good approach for
organizations where eDirectory
administration is done at a
partition level.
This requires that a proxy user for
the partition is created before
services are installed in the
partition.
The install admin must know the
proxy user’s password.
Per Service Up to nine
licenses
depending on
the number of
OES services
deployed This confines any security
vulnerabilities to individual
services.
It also ensures that proxy user
rights are not overloaded but
are distributed so that there is a
single proxy user for each type
of service
For example, you might have one
proxy user for file-access (AFP,
CIFS), one for DNS/DHCP, one for
iFolder, one for iPrint etc.
This is useful in trees where the
users and servers are not co-
located, and different services are
administered by different
administrators.
This requires that a proxy user for
the service is created before the
service is installed in the tree.
The install admin must know the
proxy user’s password.
Approach Licensing Impact Security Considerations Manageability Considerations