Novell Doc: Novell iFolder 3.7 Administration Guide

9.3 Managing the iFolder System

This section discuss how to manage the iFolder 3.7 services for a selected server.

9.3.1 Viewing and Modifying iFolder System Information

In Web Admin Console, System page opens to the System tab to view and modify the following information:

Table 9-1 System Information

Parameter	Description
System Name	The name assigned to the iFolder domain. To edit the name of the iFolder domain, enter the new name and click Save. To cancel the changes made, click Cancel.
Description	A short description about the iFolder Domain. To edit the system description, enter the new description and click Save. To cancel the changes made, click Cancel.
Enable SSL	Select the check box to enable the SSL communication among the iFolder Servers, iFolder client, iFolder Web Access console and iFolder Web Admin console.
Total Users (view only)	Reports the total number of users in the iFolder domain.
Total iFolders (view only)	Reports total number of iFolders that belongs to the iFolder domain.

9.3.2 Viewing Reprovisioning Status

You can move users across different servers. Click Reprovision Status to view the reprovisioning status for each user. You can view the following information:

Table 9-2 Reprovisioning Status

Parameter	Description
Type	indicates a provisioned user. indicates a unprovisioned user.
User Name	The username assigned to the user account, such as jsmith or john.smith@example.com.
Current Home	Shows the Home server assigned to a provisioned user.
New Home	Shows the new server to provision for the user.
Completed	Shows the reprovisioning status as a percentage.
Reprovision State	Shows any of the following reprovisioning states: Initializing Initialized Moving iFolder Resetting Home Finalizing

9.3.3 Configuring iFolder Administrators

This section discusses the following:

Understanding the iFolder Admin User

The iFolder Admin user is the primary administrator of the iFolder enterprise server. Whenever iFolders are orphaned, ownership is transferred to the iFolder Admin user for re-assignment to another user or for deletion.

The iFolder Admin user must be provisioned to enable the iFolder Admin to perform management tasks. iFolder tracks this user by the LDAP object GUID, allowing it to belong to any LDAP context in the tree, even those that are not identified as search contexts. The user’s movement can be tracked anywhere in the tree because it is known by the GUID, not the user DN.

The iFolder Admin right can be assigned to other users so that they can also manage iFolder services for the selected server. Use the User page in the Web Admin console to add or remove the iFolder Admin right for users. Only users who are in one of the contexts specified in the LDAP Search DN are eligible to be equivalent to the iFolder Admin user.

IMPORTANT:You cannot assign the Admin user right to an LDAPGroup

If you assign the iFolder Admin right to other users, those users are governed by the iFolder user list and Search DN relationship. The user is removed from the user list and stripped of the iFolder Admin right if you delete the user, remove the user’s context from the list of Search DNs, or move the user to a context that is not in the Search DNs.

Viewing the Admin User Details

The System page displays the following iFolder Admin details for the iFolder domain.

Table 9-3 Admin User Details

Parameter	Description
Type	Displays the Admin user icon.
User Name	The username assigned to the Admin user account, such as jsmith or john.smith@example.com.
Full Name	The first and last name of the Admin user account.

To view or edit Admin user details, click the Admin user link to open the User Details page. The User Details page displays the iFolders owned or shared by the user. Click the All tab to list all the iFolders, both owned and shared. To view the iFolder owned by the user, click the Owned tab. Shared tab lists all the shared iFolders for this particular user account. You can also change the policy settings for the selected Admin user.

Granting iFolder Admin Right to a User

You add the iFolder Admin right to one user at a time, but you can assign it to multiple users.

Repeat the following process for each user who you want to become an iFolder Admin user:

In the System page, click Add to open a list of iFolder Admin users.
Search for the user you want to grant Admin rights.
Select the User check box next to the user, then click Add.

The username is added in the list of users with the iFolder Admin right. You can assign the iFolder Admin right to multiple users.

Removing the iFolder Admin Right for a User

You can delete the iFolder Admin right from all users in the list except the original iFolder Admin user.

IMPORTANT:You cannot delete the Admin user configured during simias server set-up.

If you delete the iFolder Admin right from the username you used to log in to the server, you are immediately disconnected. You must log in to the iFolder server under a different username with the iFolder Admin right to continue managing the server.

You remove the iFolder Admin right for one user at a time. Repeat the following process for each user who you want to remove as an iFolder Admin user:

In the System page, locate the Admin user you want to delete.
Click Delete to remove iFolder Admin right from the selected user.

9.3.4 Configuring System Policies

Use the System Policies page to manage system-wide policies.

Viewing the Current System Policies

The following table lists the system policies you can manage for any given iFolder System. Click Save to apply the modifications.

Table 9-4 System Policies

Parameter	Description
No of iFolders per users	Specifies the maximum number of iFolder allowed per user. After Applying this policy, each user is limited to own a certain number of iFolders. The users who exceed their limit receive an error message about the policy violation. If the limit is zero, users cannot create any iFolders. The policy setting does not affect the number of iFolder a user already owns. If the number of iFolders owned by a user already exceeds the limit that you set, he or she can still own those iFolders
Disk Quotas	The total combined administrative size (in MB) of space allocated for use by all iFolder users on this system. The administrative total can exceed the actual physical size of the system disks. Space is assigned as needed; it is not reserved.
File Size	Specifies the maximum file size (in MB) that iFolder system is allowed to synchronize.
Excluded Files	Specifies a list of file types to include or to exclude from synchronization for all iFolders on the system. For example, to block all .mp3 files you need to specify *.mp3.
Synchronization	If this option is enabled, specifies the minimum interval (in minutes) for synchronizing iFolder data for the system. Larger values are more restrictive. If the option is disabled, the value is No Limit. The interval timer is reset to the Synchronization Interval value at the end of a synchronization session. When the time elapses, another session is started.
Encryption	Specifies the encryption policy for the iFolder system. System-wide settings supersede user policies.
Sharing	Specifies the sharing policy for the iFolder system. System-wide settings supersede user policies.

Modifying iFolder System Policies

Select the policy, specify values for the policy, then click Save to apply it:

Click Cancel to cancel the changes.

Parameter	Description
No of iFolders per users	Specifies the maximum number of iFolder allowed per user. After Applying this policy, each user is limited to own a certain number of iFolders. The users who exceed their limit receive an error message about the policy violation. If the limit is zero, users cannot create any iFolders. The policy setting does not affect the number of iFolder a user already owns. If the number of iFolders owned by a user already exceeds the limit that you set, he or she can still own those iFolders
Disk Quota	Select the check box to enable a system-wide quota, then specify the total space quota (in MB) for the current iFolder domain. Deselect the check box to disable a system-wide quota. If you enable a system-wide quota that is less than a user’s current total space for iFolder data, the user’s data stops synchronizing until the data is decreased below the limit or until the quota is increased to a value that is larger than the user’s total space consumed. Enabling or modifying the system-wide quota does not affect existing individual user quotas. Any existing user quota always overrides system-wide quota, whether the user quota is lower or higher than the system-wide quota. Default value: 100 MB
File Size	Deselect the check box to disable the Maximum File Size Limit policy. If the policy is disabled, the value is reported as No Limit. Select the check box to enable the Maximum File Size Limit policy, then specify the maximum allowed file size in MB. Consider the following demands on your system to determine an appropriate file size limit for iFolders in your environment: Intended use How often the largest files are modified How the applications that use the largest files actually save changes to the file (whole file or deltas) How frequently the files are synchronized by each member How many users share an iFolder Whether users access iFolder on the local network or across WAN or Internet connections The average and peak available bandwidth Even if you set a very large value as a file size limit and if there is no quota to limit file sizes, the practical limit is governed by the file system on the user’s computer. For example, FAT32 volumes have a maximum file size of 4 GB minus 1 byte. Default value: Disabled, No Limit
Excluded Files	Specify whether to restrict file types that are synchronized by exclusion filters. Type a file extension, then click Add to add it to the list. You can only add or delete file extensions; subsequent editing is not allowed on the entries.
Synchronization	To enable a policy, select the check box, then specify the minimum synchronization interval in minutes. For example, a practical value is 600 seconds (10 minutes). Larger values are more restrictive. To disable the policy, deselect the check box. The value is reported as No Limit. Default value: Disabled The effective minimum synchronization interval is always the largest value of the following settings: The system policy (default of zero), unless there is a user policy set. If a user policy is set, the user policy overrides the system policy, whether the user policy is larger or smaller in value. The local machine policy, or the setting on the client machine synchronizing with the server. The iFolder (collection) policy.
Encryption	Select On to enable the encryption feature for the iFolder system. This permits a user to set an encryption policy for his or her iFolders. Select Enforced to enable the encryption feature for all users. When it is set to Enforced, a user cannot change the encryption settings for his or her iFolders.
Sharing	On: By default, iFolder sharing is enabled. Select On to disable sharing for the iFolder system. After applying this policy, users of this iFolder system cannot share his or her iFolders with others. However, you can change the policy settings at the user level for any selected user. Enforce: You can enforce both enable sharing and disable sharing. When you enforce disable sharing, policy settings for sharing at iFolder and User level are automatically disabled and you are not allowed to change the settings. However, you are allowed to set the policy for Revoke option. Revoke: Select Revoke to remove the shared members of all the iFolders under the iFolder system.