Novell OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION, Руководство по внедрению, Страница: 271 / 288

System User and Group Management in OES 2 SP2 271
n
ov
do
cx (e
n)
22
Ju
n
e 20
09
These problems can be avoided by:
Š
Not assigning proxy users a password policy that enforces password expiration.
Š
Not using real user credentials for proxy users. See “Avoid Assigning an Admin User As a
Proxy User” on page 266 .
If password expiration policies cannot be avoided, or a security policy dictates that proxy user
passwords must be changed periodically, you can do the following.
Š
Ensure that the responsible administrator knows or has a record of each proxy user’s password
and is aware of when they expire.
Š
Before passwords expire, change them in eDirectory and reset them on the server. See the
information in
Table I-7 .
I.4 Implementing Your Proxy User Plan
The proxy users in OES can be configured at different levels within eDirectory, depending on your
needs.
IMPORTANT: The brief instructions that follow assume that you are installing into an existing
tree. For new trees you will need to install and configure eDirectory on the first server without
configuring any other OES services.
After the server is installed and you have created the required proxy users and passwords, then you
can install the OES services and configure them to use the proxy users you have created.
The exception to this is installing all services without changing the default configuration settings
(see
Table I-5 on page 264 ). In most cases a default configuration assigns the install admin as the
proxy user for the service.
I.4.1 Tree-Wide Proxy Users
Do the following:
1. Create a proxy user in the eDirectory tree where the OES servers will be installed, and set the
password.
Consider naming the user to reflect its purpose. For example, name the proxy user
oes_service_proxy_user.
2. Use this proxy user and password while configuring the services on all of the OES servers in
that tree.