User Management Guide

CHAPTER 9

Using the Profiles Section of the DAC

This chapter describes how to use the Director Administration Console (DAC) to manage users and user attributes in the user profile directory. It has these sections:

• About the Profiles section of the DAC

• User profiles

• Attributes

    For information about how to access the DAC, see the section on accessing the DAC in Developing exteNd Director Applications.

About the Profiles section of the DAC

The Profiles section of the DAC allows you to view user profiles in a deployed exteNd Director application. In the case of a writable non-LDAP realm, you can also change the information.

The Profiles section has two pages:

• User profiles

• Attributes

User profiles

The User Profiles page allows authorized users to add and remove user profiles by selecting from a list. In a non-LDAP realm, profiles are stored in the application database and thus do not necessarily have a one-to-one correspondence with users. In an LDAP realm, however, each user record is the user profile.

The left side of the page shows a list of profiles:

To modify a profile:

1. Select the writable realm from the Realm Name list.

2. Select a user from the list to view profile data.

3. Click General:

   

4. Change the User ID, First Name, Last Name, and Email data as needed; these fields are the same in both non-LDAP and LDAP realms.

   TIP:   The other attributes vary according to realm type and are discussed in Attributes next.

5. Click Defaults to view user profile defaults:

   

6. Change the defaults as needed.

7. Click Save.

To add a profile:

1. Click +Add:

   

2. Select a user from the Select User dropdown list, or enter the user name in the User ID field.

3. Fill in the information.

4. Click Save.

Attributes

The DAC allows authorized users to view and modify attribute data.

NOTE:   In an LDAP realm, users cannot modify their own attributes because of security restrictions in eDirectory. By default, users have rights only to read their own attributes; they do not have modify rights. The eDirectory administrator can grant rights to modify attributes to any user.

The User Profiles page allows you to manage the attribute values associated with a user profile:

The Attributes page also allows you to view the attributes that exist within a realm. The non-built-in attributes vary according to realm type, as follows.

• In a non-LDAP realm, authorized users can add, remove, and edit attributes:

  

• In an LDAP realm, you cannot manage attributes using the DAC. You must use the LDAP directory server's administration console, such as ConsoleOne in Novell eDirectory, to add or remove attributes.

To modify an attribute:

1. Click edit:

   

2. Specify the Name (required) you will use to identify the attribute in your application code.

   TIP:   Changing the name of an attribute invalidates any code you have written that uses the previous name.

3. Check the Show box to make the attribute visible to users; uncheck the Show box for tracking, usage statistics, and so on.

4. Specify the Description. This field is searchable using methods on the EbiUserInfo class (see EbiUserQuery in the API Reference).

5. Click Save.

To add an attribute:

1. Click add:

   

2. Specify the Name (required) you will use to identify the attribute in your application code.

3. Check the Show box to make the attribute visible to users; uncheck the Show box for tracking, usage statistics, and so on.

4. Specify the attribute value type as Non-blob or Blob (see Attribute properties).

5. Specifiy the Description. This field is searchable using methods on the EbiUserInfo class (see EbiUserQuery in the API Reference).

6. Click Save to add the attribute to the profile directory.

To remove an attribute:

• Click remove next to the attribute.

Copyright © 2004 Novell, Inc. All rights reserved. Copyright © 1997, 1998, 1999, 2000, 2001, 2002, 2003 SilverStream Software, LLC. All rights reserved.  more ...