21.1 Directory Attributes

The protocom attributes hold user or container data that is used by Novell SecureLogin to provide Single Sign-On functionality. These attributes are named as follows:

• protocom-SSO-Auth-Data
• protocom-SSO-Entries
• protocom-SSO-Entries-Checksum
• protocom-SSO-Profile
• protocom-SSO-Security-Prefs
• protocom-SSO-Security-Prefs-Checksum

The function for each of these attributes is as follows:

protocom-SSO-Auth-Data:

• This attribute is only for a User object. It is an octet-string type.

• It contains all user-specific authentication data, such as the passphrase.

protocom-SSO-Entries:

• This attribute is for User, Container, and Organizational Unit objects. It is an octet-string type. This attribute contains the following:

• All the user's login user IDs and passwords

• Specific preferences and application definitions at the User object

• Corporate application definitions and preferences at the Container and Organizational Unit objects

protocom-SSO-Entries-Checksum:

• This attribute optimizes the loading of data from the Directory. Whenever data changes in the protocom-SSO-Entries attributes, the Checksum attribute is updated. When SecureLogin loads, it reads the checksum and compares it to the checksum in memory. If the checksums are different, SecureLogin reloads the Entries attribute from the directory.

protocom-SSO-Profile:

• This attribute is used to instruct SecureLogin to read the settings and preferences from another container.

protocom-SSO-Security-Prefs:

• This attribute stores data required for SecureLogin to operate before loading the users datastore. This data can include Administrator-set Passphrase questions, Passphrase help information, settings, and similar things.

protocom-SSO-Security-Prefs-Checksum:

• This attribute functions with the protocom-SSO-Security-Prefs attribute much like the protocom-SSO-Entries-Checksum functions with the protocom-SSO-Entries attribute.