7.6 Stopping Tree Walking

Checking for inherited values from higher level objects is referred to as “tree walking.” Each time the Novell SecureLogin user cache synchronizes with the directory, Novell SecureLogin checks for changed configuration data including preference values, password policies, preconfigured applications, and application definitions.

Novell SecureLogin data that is not manually configured at the user object level is automatically inherited from higher-level directory objects. To ensure that higher-level object settings are not inadvertently inherited by lower-level objects, you need to set the Stop walking here option to Yes before upgrading.

You can also use this option to limit directory traffic in organizations where the network is congested or geographically dispersed. Set his function at the organizational unit or container level to stop Novell SecureLogin from traversing the directory hierarchy past the specified level.To set the Stop walking here option at the Users container:

  1. Access iManager, then select Manage SecureLogin SSO from the left pane.

    You can run iManager from a directory on a server or a workstation.

    1. In a supported Web browser, type the following in the Address (URL) field:

      http://server_IP_address/nps/iManager.html

      For example: http://127.0.0.1/nps/iManager.html

      You might be redirected to an HTTPS secure page

      IMPORTANT:The URL is case sensitive.

    2. Log in using your username, password, and eDirectory™ tree name.

      You can substitute the IP address of an eDirectory server for the tree name.

      To have full access to all Novell iManager features, you must log in as a user with admin-equivalent rights to the tree.

  2. Select Preferences from the drop-down list.

  3. Select the Stop walking here option and change the value to Yes.

  4. Click apply.

All user objects in the Users container will now inherit their Novell SecureLogin configuration from the Users container level and below.