12.1 Provisioning / Reprovisioning Users and LDAP Groups for iFolder

In a multi-server environment, each user or LDAP Group member is provisioned to a home server when he or she logs in to the iFolder for the first time. When a user logs in for the first time, iFolder checks whether the user is already provisioned to a server manually.

If manual provisioning is not done, iFolder checks whether the user is provisioned to a server as specified in the LDAP attribute. It checks whether the LDAP home server attribute is set for the user or any of the user's LDAP Groups. If LDAP home server attribute is set, user is provisioned based on that.

If all of the above cases fail to provision the user, iFolder automatically select a server in the iFolder system and provision to the user on a round-robin basis.

NOTE:Provisioning a user or an LDAP Group to a slave server does not reflect immediately in the Web Admin console of the slave server. This is because you have done the provisioning at the Master server-level. The slave server receives the data only after a minimum of 30 seconds depending upon the network load and the Master server load for it to reflect in the Web Admin console of the slave server.

12.1.1 Manual Provisioning

Use the iFolder Web Admin console to provision users for iFolder servers.

  1. Log in to the iFolder Web Admin console and open Users page.

  2. Do either of the following:

    • Locate and select the user, select the server from the drop-down list, then click Save.

    • Locate and select the users, then click Provision to open a new page. From the drop-down list in the new page, select the server and click Provision/Reprovision.

12.1.2 Manual Reprovisioning

With reprovisioning functionality, you can reassign a new server to an already provisioned user. Thus, you can manually move the users across different servers in any given iFolder domain.

NOTE:The user move must be initiated from the server it is provisioned to. For example, iFolder system has 2 servers OES 2 SP3 and OES 11 SP1. A user is provisioned to OES 2 SP3 server and needs to be moved to OES 11 SP1 server. Ensure to perform the user move task from the OES 2 SP3 server.

  1. Log in to the iFolder Web Admin console and open Users page.

  2. Perform the following:

    • Locate and select the users, then click Provision to open a new page. From the drop-down list in the new page, select the new server and click Provision / Reprovision.

12.1.3 Round-Robin Provisioning

If users and LDAP Groups are not provisioned either through the LDAP attribute or manually, they are automatically provisioned to iFolder servers on a round-robin basis. When a new user or member of an LDAP Group logs in to iFolder for the first time, iFolder checks for the server with the fewest number of users provisioned to it, and provisions the user to that server.

For example, suppose your iFolder system has three servers named server A, server B and server C and each server has users provisioned to it. If server A has 10 users, server B has 5 users, and server C has 12 users and a new iFolder user joins, the user is automatically provisioned to server B, which has the fewest users. Provisioning users to server B continues until it has 10 users, which is equal to the number of users provisioned to server A, so that server B gets the next new user. When all the three servers are provisioned with an equal number of users, the next new user is provisioned to any of these servers.