Novell OPEN ENTERPRISE SERVER - CONVERSION GUIDE 12-2010, Руководство по внедрению

Страница: 267 / 296

System User and Group Management in OES 2 SP3 267
Why Would I Want to Specify Common Proxy Users?
The implementation of a common proxy user in OES 2 SP3 addresses the following administrative
needs:

Limit the Number of Proxy Users: By default, the number of proxy users in an eDirectory
tree can quickly become quite large. And even though proxy users don’t consume user license
connections, many administrators are disconcerted by the sheer number of objects to manage
and track.
Common proxy users reduce the default number of proxy users from one per service to
basically one per OES 2 SP3 server.

Accommodate Password Security Policies: Many organizations have security policies that
require periodic password changes. Some administrators are overwhelmed by having to
manually track all proxy users, change their passwords, and restart the affected services after
every change.
Common proxy users can have their passwords automatically generated and changed at
whatever interval is required. Services are restarted as needed with no manual intervention
required.

Prevent Password Expiration: When proxy user passwords expire, OES 2 services are
interrupted, leading to network user frustration and administrator headaches.
Automatic password management for common proxy users ensures that services are never
disrupted because of an expired password.
Why Has a Proxy User Been Added to Novell Cluster Services?
For SP3 the eDirectory communication functionality that was previously performed by the
designated NCS administrator, has been separated out so that it can now be performed by a system
user if so desired.
This aligns NCS functionality with other OES services that use proxy (system) users for similar
functions. For more information, see “
OES Common Proxy User in eDirectory 8.8.6 ” in the OES 2
SP3: Novell Cluster Services 1.8.8 Administration Guide for Linux .
Which Services Leverage the Common Proxy User?

“Services That Can Leverage the Common Proxy User” on page 267

“Services that Cannot Leverage the Common Proxy User” on page 268
Services That Can Leverage the Common Proxy User
The following OES services can be automatically configured at install time to use your specified
Common Proxy User:

Novell CIFS

Novell DNS

Novell DHCP

Novell iFolder

Novell NetStorage