Installing Single Sign-on on Servers

You can install NSSO on the following servers:

• NetWare^® 5.x
• Windows* NT*/2000
• Solaris*
• Linux*

Installing SecretStore on a NetWare 5.x Server

The Single Sign-on installation program installs two server components:

• The server version of Novell International Cryptographic Infrastructure (NICI) 1.5.4 or later.
• Novell SecretStore^TM.

Requirements

• NetWare 5.x server.
• NDS^® eDirectory^TM or NDS Corporate Edition.
• The latest NetWare 5.x support pack.
• Supervisor rights to the NDS tree on the NetWare 5.x server.
• The server must have a read/write replica of the partition that contains the User objects for those who will use Single Sign-on.

Installing NICI

1. At the NetWare server, insert the Novell Single Sign-on CD.

2. Mount the Novell Single Sign-on CD as a NetWare volume by entering CDROM.

3. From NWCONFIG.NLM, select Product Options > Install a Product Not Listed.

4. (Conditional) If paths appear, select any path > press Enter.

   If you have a new server or haven't used NWCONFIG to install products not listed, no paths appear.

5. Press F3 > enter the path to the NICI files (for example, NSSO_21:\SERVER\NICI_1.5\NWSERVER\).

6. Follow the on-screen instructions to accept the license agreement and copy files.

   This step adds the following line to the AUTOEXEC.NCF file:

   Load SASDFM.XLM

7. Exit NWCONFIG > shut down and restart the server.

Installing the SecretStore Service

1. Mount the Novell Single Sign-on CD as a NetWare volume by entering CDROM.

2. From NWCONFIG.NLM, select Product Options > Install a Product Not Listed.

3. Select any path > press Enter.

4. Press F3 > enter the path to the Novell SecretStore files (for example, NSSO_21:\SERVER\NETWARE\).

5. Follow the on-screen instructions to accept the license agreement, copy files, and configure the server.

   This step does the following:

   • Installs the SecretStore service (SSS.NLM)
   • Extends the NDS schema to accommodate Single Sign-on objects
   • Adds the following lines to the AUTOEXEC.NCF file:
     • Load NICISDI.XLM
     • Load SASDFM.XLM
     • LOAD SSS

6. Exit NWCONFIG.

7. (Conditional) Shut down and restart the server.

   If you are installing SecretStore on a NetWare 5.1 server, you can skip this step.

Installing SecretStore on a Windows NT/2000 Server

The Single Sign-on installation program installs the server version of NICI 1.5.4 or later and creates or gets the NICI tree key.

Windows NT/2000 Requirements

• Windows NT Server 4.0 with Service Pack 2 or later, or Windows 2000 Server.
• NDS eDirectory or NDS Corporate Edition installed with a functioning NDS tree.

  IMPORTANT:  Make sure that the Windows NT/2000 server running NDS eDirectory or NDS Corporate Edition is being used only as a server and not a Novell client.

• Supervisor rights to the NDS tree on the Windows NT/2000 server.
• The server has a read/write replica of the partition that contains the User objects for those who will use Single Sign-on.

Installing NICI 1.5.4 or Later

1. Log in as Administrator on the Windows NT/2000 server

   IMPORTANT:  You must be logged in as Administrator for the NICI software to be installed correctly.

2. On the Windows NT/2000 server running NDS eDirectory or NDS Corporate Edition, close all applications.

3. Insert the Novell Single Sign-on CD > exit the auto-start client installation program if it starts.

4. Run the program NTNICIU0.EXE from the SERVER\NICI_1.5\NTSERVER directory on the Novell Single Sign-on CD > overwrite all files > restart the server.

5. If it is not already open, launch the NDS Services console window (NDSCONS.EXE) from the NDS eDirectory or NDS Corporate Edition directory (C:\NOVELL\NDS by default) on the Windows NT/2000 server.

   The NICI NCP Handlers service (NICIEXT) should now start automatically.

Creating the NICI Tree Key

1. Run TREEKEY.BAT.

   TREEKEY.BAT is located in the SERVER\NICI_1.5\ TREEKEY4NT directory on the Novell Single Sign-on CD.

   IMPORTANT:  The NICI tree key is limited to one per tree. Follow these procedures only if no key exists and this server is going to be one that creates the key.

   If you think you might already have a tree key installed, follow the instructions in Setting Up the Security Domain Infrastructure (SDI) Key. Do this before running the Single Sign-on installation program.

2. After installing the tree key, shut down and restart the server.

Installing the SecretStore Service

1. Run SETUP.EXE and follow the on-screen instructions.

   This file is in the SERVER\NT directory on the Novell Single Sign-on CD.

   IMPORTANT:  Make sure that the destination directory corresponds to the directory where NDS eDirectory or NDS Corporate Edition resides on your Windows NT/2000 server (C:\NOVELL\NDS by default).

2. If necessary, launch the NDS Services console window (NDSCONS.EXE).

   If the NDS Services console window is already open, you must close and reopen the window to see the SecretStore service.