Quick Start: Filr Hands-on for Windows

Quick Start: Filr Hands-on for Windows

September 2013

This Quick Start contains abbreviated instructions for performing a brief evaluation of Novell Filr in a Microsoft Windows Active Directory environment. It features macro-task, high-level instructions, and is actually an abbreviated version of the Filr 1.0.1 Hands-on Guide for Windows. If you get stuck as you go, or if you are unsure about something, click one of the numerous links to the Hands-on Guide There you will find screen shots and other details to help you get un-stuck.

Here’s an outline of the topics covered.

Choosing a Deployment Type

System Requirements

Downloading Filr Software

Creating Test Users

Preparing Folders and Files

Deploying and Configuring the Filr Appliances

Securing LDAP Communications between Filr and Active Directory

Administering Filr

Using Filr

Choosing a Deployment Type

Filr can be deployed as a small deployment (a single, “all-in-one” appliance) for test purposes, or as a large deployment (separate appliances) for more robust, production deployments.

IMPORTANT:Small deployments are not covered in this Quick Start. For small deployment hands-on instructions, see the sections marked Small Deployment: in the Filr 1.0.1 Hands-on Guide for Windows.

System Requirements

IMPORTANT:This Quick Start assumes a VMware environment. If you are using Xen or Microsoft Hyper-V, you might need to adjust some of the system requirements and setup steps.

The following is an overview of the system requirements for a Filr deployment with separate appliances. For detailed information, see System Requirements in the Filr 1.0.1 Hands-on Guide for Windows.

A Windows 2003 R2 or 2008 R2 Active Directory server on which you have administrative rights

Software for the three Filr appliances

One of the supported virtualization platforms with 18 GB RAM and 250 GB hard drive space for Filr appliance use

Three IP addresses on the AD network

At least one internal and one external email address for receiving Filr invitations and notifications

An enterprise-level (non-home) Windows XP, 7, or 8 workstation that is joined to the AD domain and meets the other requirements listed in the Filr 1.0.1 Hands-on Guide for Windows

Wireless connectivity on your network

At least one mobile device (iOS 5 or later or Android 2.3 or later) that is capable of connecting to your network’s wireless connection

Downloading Filr Software

Filr is distributed as a set of ready-to-deploy virtual machine files that are packaged together in three .zip or .tar files, depending on your virtualization platform.

The hands-on exercises require that you also download a zip file containing exercise folders and files.

Access the Novell Download site and download the following:

The files for the three Filr appliances: Filr, Filrsearch, and MySQL

The Hands-on_Filr-windows.zip file that contains the exercise folders and files

For more information, including screen shots, see Large Deployment: Software in the Filr 1.0.1 Hands-on Guide for Windows.

Creating Test Users

In order for AD users to access Filr, their user accounts must be synchronized with the Filr appliance through LDAP.

The user tasks in this quick start involve eight test users plus a proxy user named Filr Proxyuser, as shown in Test Users to Create.

Table Test Users to Create

First Name

Last Name

User Logon Name

Home Folder

A

Red

ared

Yes

A

Pink

apink

No

A

Blue

ablue

Yes

A

Green

agreen

No

A

Yellow

ayellow

Yes

A

Orange

aorange

No

A

Black

ablack

Yes

A

Gray

agray

No

Filr

Proxyuser

filrproxyuser

No

In your Active Directory Domain, create an organizational unit container named testusers.

In the testusers container, create the users listed in Test Users to Create.

Assign the users that have color users the password F1lrrock$, or another password that complies with your AD password policy.

Assign Filr Proxyuser the password N0v3llfi!r (or a policy-compliant password if required).

Preparing Folders and Files

The hands-on exercises require that you set up specific folders and files.

Unzipping the Exercise Folders and Files

On your Windows server, extract the Filr-Exercise-Folders-w.zip file at the root of Drive C.

Setting Up the Home_Folders Share

Configuring Home_Folders Share Permissions

Access the Filr-Exercise-Folders folder, then share Home_Folders as a hidden share named Home_Folders$.

Remove access to the share by the Everyone group, then add the Domain Users group and assign it full control.

Configuring Home_Folders NTFS Permissions

Remove NTFS permissions for the Users groups, then add full control for filrproxyuser.

Assigning Home Folders

Access the properties for each user in Test Users to Create that needs a home folder (last column) and set up a home folder connection in their profile tabs.

Ensure that the home folders were created as expected.

Setting Up the Other Hands-on Exercise Folders and Files

Creating Shares and Changing Share Permissions

Table Share Permission Assignments

Folder Name

Users to Assign Full Share Permissions

Dev

ared; filrproxyuser

IS

ablue; filrproxyuser

Mrktg

ayellow; filrproxyuser

Sales

ablack; filrproxyuser

Starting with folder Dev, share the folder, remove access for group Everyone, then add access and assign full control for the users listed in Share Permission Assignments.

Changing the NTFS Permissions

Table NTFS Permission Assignments

Folder Name

Users to Assign Full NTFS Permissions

Filr-Exercise-Folders

filrproxyuser

Dev

ared

IS

ablue

Mrktg

ayellow

Sales

ablack

Remove NTFS permissions for the Users groups to Filr-Exercise-Folders.

Add full control for filrproxy user to Filr-Exercise-Folders (as shown in NTFS Permission Assignments).

Add full control to the other folders (starting with Dev), for the users listed in the right column.

Deploying and Configuring the Filr Appliances

You deploy Filr, then Filrsearch, and finally MySQL. Then you configure them in reverse order, ending with Filr.

For details, including screen shots, see Large Deployment: Deploying and Configuring in the Filr 1.0.1 Hands-on Guide for Windows.

Deploying Filr

In a location that is accessible from the vSphere client, unzip the three files that you downloaded in Downloading Filr Software.

Using the vSphere client, attach to the VMware ESX server, click File > Deploy OVF Template, then select the Filr .ovf file and proceed through the dialogs until the appliance is deployed.

Edit the virtual machine settings and add a 100 GB second disk to the appliance.

Power on the virtual machine. When prompted accept the license, then fill in the required password and IP/network information and accept the defaults until you see a terminal screen with a message that the system is ready for appliance configuration.

Deploying Search

Deploy the Filrsearch appliance in the same way, adding a 25 GB second disk, and entering the IP addresses and settings you identified for the search appliance.

Deploying MySQL

Deploy the MySQL appliance in the same way, adding a 100 GB second disk, and entering the IP addresses and settings you identified for the MySQL appliance.

Configuring the MySQL Appliance

Configure the MySQL appliance by launching a management browser and entering the following URL:

https://MySQL-appliance-ip-address:9443

Click the phpMyAdmin icon, type Username root and Password root, then click Go.

Add a database user named filr for the Filr appliance and create a database with the same name and all privileges.

Secure the MYSQL appliance by changing the root user password.

Configuring the Search Appliance

Configure the Filrsearch appliance by entering the following URL in the management browser:

https://Filrsearch-appliance-ip-address:9443

Log in as the vaadmin user, using the password you specified in Step 1.

Click the Filr Search Appliance Configuration icon, click Next, type and confirm a Password for the search service, then click Finish > Submit.

Configuring the Filr Appliance

Configure the Filr appliance by entering the following URL in the management browser:

https://Filr-appliance-ip-address:9443

Log in as the vaadmin user, using the password you specified in Step 4.

Click the Novell Filr Appliance Configuration icon, select Large Deployment, then click Next,

In the Database dialog, specify the full DNS name for the MySQL appliance and the Password that you specified in Step 1, then click Next.

In the Search Appliance dialog, specify the full DNS name of the Filrsearch appliance and the Password that you specified in Step 1, then click Next.

Select a Locale, then click Finish.

Securing LDAP Communications between Filr and Active Directory

To secure communications between Filr and Active Directory, you need to create a self-signed certificate in Active Directory and export it in DER encoded binary X.509 format.

For details, including screen shots, see Securing LDAP Communications between Filr and Active Directory in the Filr 1.0.1 Hands-on Guide for Windows.

(Conditional) If you haven’t installed the Internet Information Services (IIS) Manager snap-in in the Microsoft Management Console (MMC) on your Windows server, do so now.

On the Windows server, launch MMC, then type Ctrl+M.

Open the IIS Manager Snap-in and select the Windows server that you plan to connect with Filr for LDAP synchronization.

Create a self-signed certificate for the server.

Export the certificate in DER encoded binary X.509 format.

In your management browser, access the Filr appliance’s system configuration tools, then click the Digital certificate icon.

Click File > Import > Trusted Certificate, browse to the certificate file, then click Open > OK > Close.

Reboot the appliance.

Administering Filr

For details, including screen shots, see Administering Filr in the Filr 1.0.1 Hands-on Guide for Windows.

Synchronizing LDAP Users

The Active Directory users that you created must be synchronized to Filr through an LDAP synchronization process.

In the administrative browser, access the following URL:

https://Filr-appliance-IP-address:8443

Sign in as User: admin with Password: admin, then change the password as prompted.

Click admin (upper right), select Administration Console, then under System, click LDAP.

Click Add a New LDAP Source OK > OK.

Enter the LDAP Source information.

Skip to the Base DN field, then type the DN of your testusers container.

Set the synchronization options: Run immediately, Synchronize user profiles, and Register LDAP user profiles automatically.

Click Apply.

All of the users in the testusers container are added.

Click Close.

Remove filrproxy from the list.

Setting Up My Files Folders

For details, see My Files (Personal Storage) in the Filr 1.0.1 Hands-on Guide for Windows.

Under Management > User Accounts, select A Black, A Green, A Orange, and A Pink.

Click More > Enable Personal Storage.

Setting Up Net Folders

Net Folders provide access to the files and folders that you prepared earlier.

Specifying Net Folder Servers

Net Folder Servers are connections to Windows Shares on your file servers.

Configuring the Home_Folders Net Folder Server

Under Management, click Net Folder Servers.

A caution icon indicates that a Net Folder has a problem, specifically in this case, that no proxy user is assigned.

Click the Home_Folders$ share name next to the icon.

Type the DN and password of the filrproxyuser. Then click Test Connection > OK > OK > OK.

The warning icon should disappear.

Configuring the Other Net Folder Servers

A Net Folder Server provides access to a Windows Share through Filr.

Under Manage Net Folder Servers, click Add, then supply the information for the four exercise shares, starting with Dev.

Share

Text

Dev

Name: Development

Server path: \\windows-server-IP-address\Dev

Proxy name: filrproxyuser DN

For example: cn=filrproxyuser,ou=testusers,dc=filr-lab,dc=local

Proxy password: For example: N0v3llfi!r

IS

Name: IS

Server path: \\windows-server-IP-address\IS

Proxy name: filrproxyuser DN

For example: cn=filrproxyuser,ou=testusers,dc=filr-lab,dc=local

Proxy password: For example: N0v3llfi!r

Mrktg

Name: Marketing

Server Path: \\windows-server-IP-address\Mrktg

Proxy name: filrproxyuser DN

For example: cn=filrproxyuser,ou=testusers,dc=filr-lab,dc=local

Proxy password: For example: N0v3llfi!r

Sales

Name: Sales

Server path: \\windows-server-IP-address\Sales

Proxy name: filrproxyuser DN

For example: cn=filrproxyuser,ou=testusers,dc=filr-lab,dc=local

Proxy password: For example: N0v3llfi!r

Click Test Connection to verify that the information is typed correctly.

Click OK, set the synchronization schedule, then click OK.

Repeat from Step 1 for each of the exercise shares.

Click Sync to populate the database with metadata for the Net Folder Servers.

Creating Net Folders and Setting Net Folder Access and Sharing Rights

Net Folders are connections to specific directories on Net Folder Servers that are similar to traditional mapped drives.

In the Administration Console, under Management, click Net Folders.

Click Add, then enter the information for a Net Folder (starting with reviews). Be sure to test each Net Folder connection for accuracy.

Net Folder Name

Server

Relative Path

reviews

Development

personnel\reviews

comp planning

Development

personnel\salaries

projects

Development

projects

training

IS

training\quick_starts

cool stuff

Mrktg

advertising\brochures

projections

Sales

revenue\projections

2013 tracking

Sales

revenue\quotas

Enable the Net Folder for indexing and just-in-time synchronization. Indexing causes significant processing overhead, but the exercises files and folders are small.

In the Rights tab, assign the following sharing rights for the user indicated.

Name

User

Sharing Rights

reviews

ared

Allow Access

Internal

comp planning

ared

Allow Access

projects

ared

Allow Access

Internal

External

training

ablue

Allow Access

Internal

Re-share

cool stuff

ayellow

Allow Access

Internal

External

Public

Re-share

projections

ablack

Allow Access

Internal

2013 tracking

ablack

Allow Access

Internal

Click OK, then repeat from Step 2 until all seven Net Folders are created.

Enabling Sharing

Allowing users to share files and folders requires that you enable sharing for the Filr site.

Under System, click Share Settings.

In the User or Group field, start to type all, then select All Internal Users.

Click Re-share Items and Share with the Public, then click OK.

Click OK.

Setting Guest Access

Under System, click User Access.

Select Allow Guest access and Guest access is read-only, then click OK.

Allowing the Desktop Application to Be Deployed

Under System, click Desktop Application.

Select Be deployed.

In the Auto-update URL field, type the following:

https://Filr-appliance-IP-Address:8443/desktopapp/

Click OK.

(Optional) Setting Up Email Communication with the Filr VM

The basic email service functionality that Filr provides is outlined in Filr Email Notifications in the How Filr Works–Overview Guide.

If you want to do the exercises that involve email, see the setup procedures in (Optional) Setting Up Email Communication with the Filr VM in the Filr 1.0.1 Hands-on Guide for Windows.

Using Filr

Accessing Filr to Do the End User Exercises

Connecting to Filr through a Browser and Installing the Filr Desktop Application

On the management workstation, start a browser and access the following URL:

https://Filr-appliance-IP-Address:8443

Log in as User ID: apink.

In the upper-right corner, click apink, then download and install the appropriate Filr app.

The app should launch automatically.

Starting the Filr Desktop Application

On the Novell Filr welcome screen, click Start.

In the Server URL field, type https://Filr-appliance-IP-address:8443, then log in and follow the prompts until the application is configured.

A Filr folder is now available on the workstation.

Installing and Starting a Filr Mobile App

Filr mobile apps are available as free downloads in the Apple App Store, the Google Play App Store, and the Amazon Appstore for Android.

Download and install the Filr mobile app on the mobile device as you would any other device app.

To access the Filr Mobile App:

Start the app in the same way that you start other apps on your mobile device.

Log in as Username: ablack.

Understanding Test Users and Their Roles

The rights that the test users have to files and folders through Filr are directly dependent on the rights that you assigned them on the file system. You cannot modify file system rights through Filr.

To understand how file system rights and the existence of home directories affect the Filr experience for users, see the following in the How Filr Works–Overview Guide:

Rights to Files and Folders

User Roles in Filr

Sharing through Filr

Exploring Filr Functionality for End Users

After you have completed the setup and administrations instructions in this QuickStart, your system is ready to perform the end user tasks. Because the tasks do not lend themselves well to a Quick Start approach, they are only presented in the Filr 1.0.1 Hands-on Guide for Windows.

Legal Notices:

Copyright © 2013 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher. For Novell trademarks, see the Novell Trademark and Service Mark list. All third-party trademarks are the property of their respective owners.

A.0 Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc., reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the Novell International Trade Services Web page for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals.

Copyright © 2013 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc.

1800 South Novell Place

Provo, UT 84606

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see the Novell Documentation Web page.

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list.

Third-Party Materials

All third-party trademarks are the property of their respective owners.