6.9 Provisioning Users, Groups and iFolder Services

After you configure your iFolder enterprise server, you must specify containers and groups as Search DNs in the LDAP settings. iFolder uses these to provision user and group accounts. You can provision users and iFolders through iFolder Web Admin console. For more information, see the following:

6.9.1 Prerequisites

Users and LDAP Contexts

The contexts you plan to use as LDAP Search DNs in the LDAP settings must exist in the LDAP directory; they are not created and configured from within the iFolder plug-in.

For information about configuring user, group, and container objects, see the Novell eDirectory 8.8 Administration Guide.

Extending LDAP User Objects for iFolder 3.9

To enable LDAP attribute-based provisioning, you must Extend the LDAP user schema with the iFolderUserProvision auxiliary object class with iFolderHomeServer as one attribute. For Active Directory, you must use Active Directory tools to extend User Objects with iFolderHomeServer as an attribute.

  1. Login to iManager using iManager administrator credentials.

  2. Click View Objects icon to open the Object view.

  3. Browse and find the appropriate tree where the desired users are listed.

    For more information on this, see the Novell iManager 2.7 Administration Guide.

  4. Click the desired user object you want to extend, and open the Action window, then click Object Extensions.

  5. Click OK in the right-side panel that displays the object extensions detail.

  6. In the new page that lists the current auxiliary class extensions, click Add.

  7. From the pop-up window, select iFolderUserProvision entry, and click OK.

  8. Click Close.

    For more information on this, see the section Roles and Tasks in the iManager Administration Guide.

  9. To add iFolderHomeServer attribute, click the same object to pop-up the Tasks window.

  10. Select Modify Objects to display the object modification details in the right panel.

  11. Under the General tab in that page, click the Other link, and select iFolderHomeServer from the Unvalued Attribute list, then click the arrow mark.

  12. In the pop-up window, provide a value for the iFolderHomeServer attribute and click OK.

    The value can either be the IP address or the DNS name of the iFolder server assigned to this user.

  13. click Apply to save the modifications.

  14. For all the users, repeat the Step 1 thru Step 13.

Command Line Option

You can also use the following script to extend the existing user objects or create a new user object with the iFolderUserProvision object class extension.

  1. In the terminal console, type /opt/novell/ifolder3/bin/iFolderLdapUserUpdate.sh.

  2. Type ./iFolderLdapUserUpdate.sh -h <Ldap URL> -d <admin DN> -w <admin password> -u <user DN> [-s <surname>] [-c <user password>] [-i <iFolder Home Server>].

    For example: ./iFolderLdapUserUpdate.sh -h ldaps:// -d admin,o=novell -w secret -u cn=abc,o=novell -s xyz -c secret -i