30.6 Advanced Certificate Information for OES Linux

Table 30-2 contains information about the authentication certificates used by each of the OES Linux components.

Table 30-2 Certificate Information for OES Linux Products and Services

Product/Service

Certificate Information

Apache

The Apache Web server that is installed with OES is not configured as an LDAP client by default. The /etc/opt/novell/httpd/conf/httpd.conf file contains an LDAP section toward the end that has been commented out. This can be modified to turn on LDAP authentication and configure the settings. The file can point to either a .b64 or .der certificate for server authentication.

To enable HTTPS connectivity, the OES install creates a default certificate using OpenSSL and adds it to the JVM* (keytool) for Tomcat to use.

eGuide

eGuide uses the same basic mechanisms as iManager, except that it doesn't retrieve a certificate from the server if a certificate isn't found in the keystore.

iManager 2.5 and Virtual Office

Virtual Office requires that iManager is installed and configured. Both products use LDAP over SSL, meaning that all communications with the LDAP server are encrypted.

However, if server authentication is not configured, iManager retrieves a certificate from the server and then uses that certificate for encryption.

If server authentication is configured, the administrator can add the server’s exported certificate to the JVM CACerts keystore using the Java* keytool tool.

iPrint

iPrint is not configured by default to require user authentication. This can be changed using iManager. For more information, see Setting Up a Secure Printing Environment in the OES iPrint Administration Guide for Linux .

Linux User Management (LUM)

LUM looks for certificates in /var/nam. The certificates are named IP.cer or DNS.der, where IP and DNS represent the IP address and DNS name of the server, respectively.

LUM automatically retrieves a certificate if one is not supplied.

You can edit the /etc/nam.conf file to change the name of the certificate file or the location to another directory on the file system. LUM uses .der files.

Novell iFolder® 2.1 x

Novell iFolder can use either no SSL or SSL with server authentication. For more information, see the Novell iFolder 2.1 Installation and Administration Guide .