1.8 Configuration Issues

1.8.1 LDAP Synchronizes Workstation Objects to Filr When Domain Services for Windows Is Configured

When performing an LDAP synchronization with the default LDAP filter, and when Domain Services for Windows (DSfW) is also being used, Filr synchronizes DSfW workstation objects in addition to the intended user and group objects.

To fix this problem so that DSfW workstation objects are not synchronized, modify the Filr LDAP filter as follows:

(&(|(objectClass=Person)(objectClass=orgPerson)(objectClass=inetOrgPerson))(!(objectClass=mSDS:Computer)))

For more information about LDAP configuration in Filr, see Synchronizing Users and Groups from an LDAP Directory in the Novell Filr 1.0.1 Administration Guide.

1.8.2 Must Have Single Spaces between Memcached Instances

When specifying memcached instances for clustering, you must include only a single space between each instance in the Server Address field. Having more than one space between memcached instances results in Filr not starting correctly. For more information about configuring clustering, see Changing Clustering Configuration Settings in the Novell Filr 1.0.1 Installation and Configuration Guide.

1.8.3 Must Use DNS Name When Configuring Lucene

When configuring a large installation, you must use the DNS name when configuring the Lucene search index server in the Filr configuration wizard. Using an IP address during this configuration results in no connectivity unless there is a corresponding DNS entry.

If you want to use an IP address and there is no corresponding DNS entry, you must modify the etc\hosts file on the Filr server.

1.8.4 Username Character Restrictions for LDAP Synchronization and Login

LDAP user names must contain only numerical values 0 - 9 and upper-case and lower-case letters (A-Z). User names that contain special characters (for example, / \ * ? " < > : | ) cannot be used as Novell Filr user names. If your LDAP directory includes user names with these characters, they synchronize to the Filr site, but the associated users cannot log in.

These characters cannot be used in a Filr user name because a Filr user name becomes the user’s workspace title, and the workspace title becomes an element of the hierarchical path that leads to the workspace. These characters are not legal characters in Linux and Windows pathnames.

1.8.5 User Names That Are Synchronized from LDAP Are Case-Insensitive for Filr Login

User names that are synchronized from an LDAP directory are case-insensitive when users log in to the Filr system.

Local user accounts (user accounts that are created in Filr and not synchronized from an LDAP directory) are case-sensitive. Login credentials for local user accounts are stored in the MySQL database.

1.8.6 Restrictions on Applet Support

Applets are not supported on 64-bit Firefox on a system with a Java Runtime Environment (JRE) earlier than 1.6.0_12.

On a 64-bit operating system, updating to JRE 1.6.0.12 or later enables the applets to work.

For example, multi-file drag-and-drop from the desktop, file paste from the desktop, Edit-in-Place, and the graphical display in the workflow editor do not work where applets are not supported.

1.8.7 NFS Support

NFS file system mounts are supported for placing the Filr file repository on a remote server from where Filr is running. However, NFS file system mounts are not supported for placing the Lucene index on a remote server from where the Lucene Index Server is running. This includes NFS mounts under the hypervisor.

1.8.8 Access Manager Issues

1.8.8.1 Compatibility with Access Manager

To successfully use Novell Filr with NetIQ Access Manager, Access Manager 3.1 SP1 IR1 or later is required. The latest version is available on the Novell Downloads Web site.

1.8.8.2 Access Manager Basic Authentication Login Page Contains a Reference to Vibe

When NetIQ Access Manager is configured to front Filr, if users access Filr directly by using the Filr IP address, Access Manager displays a basic authentication login dialog box. This login dialog box contains a reference to Vibe. Instead, this should say Filr.

1.8.8.3 Cannot Use Multiple Identity Injection Policies Simultaneously

When NetIQ Access Manager is configured to front Filr, you cannot use multiple identity injection policies simultaneously.