Managing Ifolder Users; Provisioning / Reprovisioning Users And Ldap Groups For Ifolder; Automatic Provisioning Through The Ldap Attribute - Novell IFOLDER 3.7 - ADMINISTRATION Administration Manual

Managing iFolder Users

1 1
This section discusses how to manage iFolder users with Novell
Section 11.1, "Provisioning / Reprovisioning Users and LDAP Groups for iFolder," on
page 141
Section 11.2, "Searching for a User Account," on page 143
Section 11.3, "Accessing And Viewing General User Account Information," on page 143
Section 11.4, "Configuring User Account Policies," on page 145
Section 11.5, "Enabling and Disabling iFolder User Accounts," on page 148
11.1 Provisioning / Reprovisioning Users and
LDAP Groups for iFolder
In a multi-server environment, each user or LDAPGroup member is provisioned to a home server
when he or she logs in to the iFolder for the first time. When a user logs in for the first time, iFolder
checks whether the user is already provisioned to a server manually.
If manual provisioning is not done, iFolder checks whether the user is provisioned to a server as
specified in the LDAP attribute. It checks whether the LDAP home server attribute is set for the user
or any of the user's LDAPGroups. If LDAP home server attribute is set, user is provisioned based on
that.
If all of the above cases fail to provision the user, iFolder automatically select a server in the iFolder
system and provision to the user on a round-robin basis.
NOTE: Provisioning a user or an LDAP Group to a slave server does not reflect immediately in the
Web Admin console of the slave server. This is because you have done the provisioning at the
Master server-level. The slave server receives the data only after a minimum of 30 seconds
depending upon the network load and the Master server load for it to reflect in the Web Admin
console of the slave server.
Section 11.1.1, "Automatic Provisioning Through the LDAP Attribute," on page 141
Section 11.1.2, "Manual Provisioning," on page 142
Section 11.1.3, "Manual Reprovisioning," on page 142
Section 11.1.4, "Round-Robin Provisioning," on page 142

11.1.1 Automatic Provisioning Through the LDAP Attribute

To enable LDAP attribute-based provisioning:
1 Install LDAPGroup plug-ins during installation.
2 Extend the LDAP user schema with the
iFolderHomeServer
Objects for iFolder 3.7" on page
3 Specify a home server in the LDAP attribute.
iFolderLdapObject
as one attribute. For more information, see
88.
® ®
iFolder 3.7 enterprise server.
auxiliary object class with
"Extending LDAP User
Managing iFolder Users
11
141