Novell iManager 2.7.5 Administration Guide - NetIQ

To further tighten security, do not allow AutoUpdate and use only the system keystore. If you do this,
you must manually import the certificates that you want to reside in the default system keystore by
using the tools that come with Java. If you disable UpdateAllowAll, then certificate imports occur
only from a successful iManager authorized user login.
6.4.2 Security
These settings affect your entire Web server configuration and are saved in the config.xml file. You
can either save as you go or click Save once after you have made all your changes.
Warn When Using a Nonsecure Connection
Select this option if you want users without a secure connection between the Web browser and the
Web server to receive the following warning: You are using a non-secure connection.
Enable Novell Audit
Make sure you have met the Novell Audit Prerequisites. Select the Enable Novell Audit option and
select specific iManager logging events, then click Save.
Auto Import Tree Certificate for Secure LDAP
Secure LDAP connections require a certificate. If you select this feature, the system automatically
imports a public tree certificate for secure LDAP.
Authorized Users and Groups
Authorized users and groups are those that iManager permits to perform its various administrative
tasks. Authorized user data is saved in TOMCAT_HOME\webapps\nps\WEB-
INF\configiman.properties. The iManager installation process creates this file only if authorized
user and group information is provided, but doing it, is not required. Failure to do it results in
iManager allowing any user to install iManager plug‐ins and modify iManager server settings (not
recommended long‐term.)
When a group or an organizational role is added to this list, all members of the group or the
organizational role become authorised users. Adding a nested group supports only first level of
members. But adding a dynamic group is not supported because it can have any type of objects as its
members.
After installing iManager, you can add an authorized user, group, or organizational role by
specifying, or by using the Objector Selector icon next to the Authorized Users and Groups list. Doing
this modifies the configiman.properties file.
To designate all users of the tree as authorized users, type AllUsers.
NOTE: You can add and save only valid users to the Authorized Users and Groups list. If you add
invalid users and click Save, an error message, which says that the object is not found, is displayed. If
you add only invalid users to the list and click Save, the error message is displayed and the list of
invalid users is automatically replaced by AllUsers. If you do not want all the users of the tree to be
authorized users, remove AllUsers from the list, add desired valid users to the list, and click Save.
70 Novell iManager 2.7.5 Administration Guide