Novell eDirectory Management

The OnDemand Services components perform tasks in Novell eDirectoryTM to manage applications, packages, and users' access to packages. In general, if OnDemand Services configures a setting in eDirectory, you should let OnDemand Services manage that setting. Listed below are some things you shouldn't do in eDirectory because they adversely affect the way OnDemand Services operates.

Disassociating Desktop and Thin-Client Applications: When a user purchases a package that includes desktop or thin-client applications, OnDemand Services associates the user with the applications through the Application object's Association page. When the user's purchase expires, OnDemand Services disassociates the user from the applications.

You should not manually disassociate a user from a packaged desktop or thin-client application. Doing so does not set the "Expired" flag on the Purchase object, so the application continues to appear in the user's Launch Item gadget and also in the budget holder's User Administration gadget. The user can continue to launch the application at no charge and the budget holder doesn't know that the user has been disassociated with the application.

For more information about application packages, see Creating Application Packages .

Removing Users from iChain ACL Rules' Apply To Lists: When a user purchases a package that includes a Web application that is secured through Novell iChainTM, OnDemand Services adds the user to the Apply To list for the Web application's ACL rule. You should not manually remove a user from the Apply To list. Doing so causes the user to be unable to launch the Web application, but the Web application still shows up in the user's Launch Item gadget.

For more information about OnDemand Services integration with iChain, see Securing Web Applications With Novell iChain .

Removing Purchase Objects: When a user purchases a package, OnDemand Services creates a Purchase object for the user under the Package object. The Launch Item gadget uses this object to know which applications to display to the user. After the purchase has expired, OnDemand Services will mark the Expired flag on the Purchase object and revoke the user's rights to the package's applications. At that point, the package's applications will no longer appear in the Launch Item gadget.

You should not manually remove the Purchase object. If you want to remove an expired Purchase object, make sure the Expired and Billed flags are marked. The Maintenance process will then remove the object (and any Usage objects associated with the Purchase object) the next time it processes the eDirectory tree.

For more information about Purchase objects, see Changing the Status of a Purchase . For more information about the Maintenance process, see Managing the Maintenance and UsageServer Processes .