16.3 Security Configuration

The following table provides a summary of the options you can change to allow or limit access to the server through Novell Remote Manager.

Table 16-2 Security Configuration Options

Issue/Feature

Recommendation

For More Information

Let all users access the server through NRM with default eDirectory rights

This is the default setting. All user access is controlled by eDirectory.

Logging In to Novell Remote Manager for NetWare

Restrict access to only users that have the Supervisor right to the Server object.

Click the Enable Supervisor Only Access link on the Novell Remote Manager Configuration Options page.

Users that have rights equivalent to user Admin in eDirectory have the Supervisor right to the Server object.

Controlling User Access to the Server through Novell Remote Manager

Restrict access to specific workstations or a range of IP address

Click the Access IP Address Access Control Page link on the Novell Remote Manager Configuration Options page and complete the applicable field on the IP Address Access Control Page.

Changing User Access by Using the IP Address Access Control Page

Remove access to the utility for all users

Unload httpstk.nlm and portal.nlm. Remove commands to load these files from autoexec.ncf and restart the server.

System Requirements

Allow access to an emergency console so you can troubleshoot your server when it is in a state where eDirectory is not functioning correctly (user SADMIN)

Click the Enable the Emergency Account (SADMIN) and Set Password link on the Novell Remote Manager Configuration Options page.

Controlling the Emergency Account

Remove access to an emergency console

Click the Disable the Emergency Account (SADMIN) and Clear Password link on the Novell Remote Manager Configuration Options page.

Controlling the Emergency Account

Allow access to a trusted user to debug your server (user SDEBUG)

Click the Enable Debug Account (SDEBUG user) and Clear Password link on the Novell Remote Manager Configuration Options page.

To control specific tasks that this user can perform, click the Configure Additional SDEBUG User Access link, and then click the Yes or No buttons next to each tasks (depending whether you want the user to be able to perform it).

Certain tasks are enabled and disabled by default.

Controlling the Debug Account

Remove access from the debug user

Click the Disable Debug Account (SDEBUG user) and Clear Password link on the Novell Remote Manager Configuration Options page.

Controlling the Debug Account