6. Import/Deploy: What's New

(Home)     Previous     Next

1. Improved Performance

The compare and import operations have been optimized to decrease wire traffic between the Designer client and the Identity Vault. The following table shows the percent of decrease in network traffic as well as the percent of increase in performance for high-speed and wireless or broadband connections.

	Network		High-Speed		Wireless
	Traffic		Connection		Broadband
Compare	30-40%		10-15%		30-40%
Import	10-15%		5-10%		15-20%

2. Enhanced Security Equivalences Dialog

The driver security and exclusions dialogs have been redesigned in this version of Designer, allowing you to configure security equivalences and driver exclusions on a driver-by-driver basis. Previous versions of Designer allowed you to configure only one set of equivalences or exclusions for all deployed drivers. The Live > Set Up Driver Security option was also limited to a single driver selection, forcing you to launch the action for each driver.

The Security Equivalences page launches after deploying a new driver to the Identity Vault. It can also be launched manually from the Live menu or from the context sub-menu of a driver. You can perform this operation for a single driver or for multiple drivers. The Deploy - Security Equivalences page displays the selected drivers in a multi-select table. Selecting a single driver shows the security equivalences for the selected driver. Selecting multiple drivers shows the common security equivalences for the selected drivers.

The Add and Remove buttons allow you to browse the Identity Vault for objects that the driver will be "security equivalent to." If multiple drivers are selected, the action applies to all selected drivers. For example, the following image shows two drivers being set security equivalent to the object "admin.novell." If you select the Remove button with both drivers selected, the object is removed from both drivers.



Security equivalences cannot be setup for multiple drivers across Identity Vaults. When selecting two drivers that cross Identity Vault boundaries, the Add and Remove buttons are disabled and an error displays, as shown in the following image:

3. Enhanced Security Exclusions Dialog

The Exclude Administrative Roles page is similar to the Security Equivalence page. The list of drivers along with the driver set and Identity Vault are displayed at the top of the page, while the object exclusion list is displayed below. Selecting a single driver shows the exclusions for the selected driver. Selecting multiple drivers shows the common administrative exclusions for the selected drivers.

The Add and Remove buttons allow the user to browse the Identity Vault for objects that can be excluded from the Identity Manager processing. If multiple drivers are selected, the action applies to all of the selected drivers. For example, the following image shows both drivers excluding the object "admin.novell." Selecting the Remove button removes this object from both the ActiveDirectory and Delimited Text driver.



The following image shows that the Active Directory driver has an additional object "Administrator.users.novell" that is being excluded. This object does not show when both drivers are selected because it is not excluded from the Delimited Text driver.



Administrative exclusions, like security equivalences, cannot be set up for multiple drivers across Identity Vaults. When selecting two drivers that cross Identity Vault boundaries, the Add and Remove buttons are disabled and an error is displayed, as shown in the following image.

4. Filtering Passwords in Summary Dialog

Designer 3.0 adds a new preference that allows you to filter passwords out of the import and deploy Summary pages, as well as the Compare pages. Passwords are encrypted in the Identity Vault and cannot be compared in Designer. Previously, these passwords have been displayed in the Summary and Compare pages with an unknown status. The new preference allows passwords to be filtered, so they do not affect the summary and compare status.

The preference is located on the Import/Deploy Preferences page. The preference is labeled Filter Passwords out of summary and compare dialogs. The Preference page can be accessed from the Window menu under Preferences > Novell > Identity Manager > Import/Deploy. It can also be accessed from a new Preference button in the upper right corner of the Summary and Compare pages. The default preference is to include passwords in the Summary and Compare pages.

The Import/Deploy Preferences page has been reorganized in this release of Designer. The options to control the behavior of import, deploy, export and the summary dialog have been combined under a single Behaviors tab. Previous versions of Designer had separate tabs for the import, deploy and export options. The reorganized Preferences page is shown in the following image. The new filter password preference is located under the Summary Dialog heading.



As stated previously, the filter password preference controls whether or not passwords are included in the Summary and Compare pages. The following image displays a Deployment Summary page of a driver that has the driver object password and a named password set in Designer. Note that the driver status is Unknown and the DirXML-ShimAuthPassword and DirXML-NamedPassword attributes appear in the attribute list.



Selecting the preference to filter passwords from the summary dialog changes the summary status as displayed in the following image. Note that the compare status has changed to Equal and the two attributes no longer appear in the Attribute list.

(Home)     Previous     Next