Novell iManager 2.7.5 Administration Guide - NetIQ

Plain Text:
RBS Report Query Settings
User: admin.novell
Date: Thursday, June 26, 2008 (10:33:17 AM IST)
Types: User, Group, Dynamic Group, Organizational Role, Container
-------------------------------------------------
Dynamic Group Search Settings:
Search Enabled: yes
Role Search: parent sub-directory (novell)
Role Search: Dynamic Group Objects
Container Role Search: up to parent (novell)
-------------------------------------------------
Role Name: eDirectory Administration Role Object: eDirectory Administration.Role
Based Service 2.novell Type: User Member: jdoe.novell Scope: novell Assigned: true
Inherit: true
-------------------------------------------------
6.4 iManager Server
If you do not see this task, you are not an authorized user. See “Authorized Users and Groups” on
page 70. This topic includes the following information:
• Section 6.4.1, “Configure iManager,” on page 69
• Section 6.4.2, “Security,” on page 70
• Section 6.4.3, “Look and Feel,” on page 71
• Section 6.4.4, “Logging Events,” on page 71
• Section 6.4.5, “Redirection After Logout,” on page 72
• Section 6.4.6, “Authentication,” on page 72
• Section 6.4.7, “RBS,” on page 73
• Section 6.4.8, “Plug‐In Download,” on page 73
• Section 6.4.9, “Misc,” on page 74
• Section 6.4.10, “Encryption,” on page 75
6.4.1 Configure iManager
There are three settings in the config.xml file that control the security and the certificates used when
iManager creates an LDAP SSL connection:
Security.Keystore.AutoUpdate: If the value of AutoUpdate is True, when a user successfully logs in
to iManager, the certificate from that eDirectory server might automatically be imported into the
iManager‐specific keystore. Select the setting Auto Import Tree Certificate for Secure LDAP (Configure
iManager > Security).
Security.Keystore.UpdateAllowAll: When UpdateAllowAll is True, then any successful user login
imports/updates a certificate into the iManager certificate keystore. If the setting is false, only an
authorized user login imports/updates certificates.
Security.Keystore.Priority: The priority setting contains two words that define the search order for
certificates during a connection: system, and imanager.system uses the default JVM* keystore to locate
certificates when created the SSL context. If that fails, it then goes to the iManager keystore.
You can change the search order of system and iManager by removing either word from the entry.
Configuring and Customizing iManager 69