Creating And Configuring The User Account For The Identity Server - Novell ACCESS MANAGER 3.1 SP2 - IDENTITY SERVER GUIDE 2010 Manual

5.2.2 Creating and Configuring the User Account for the
Identity Server
1 In Manage Your Server on your Windows server, select the Manage users and computers in
Active Directory option.
2 Select to create a new user.
3 Fill in the following fields:
First name: Specify the hostname of the Identity Server. This is the username. For the example
configuration, this is
User logon name: Specify
configuration, your Identity Server has a base URL of
would specify the following for the User Logon Name:
HTTP/amser.provo.novell.com
The realm is displayed next to the User logon name.
User logon name (pre Windows 2000): Specify the hostname of the Identity Server. The
default value must be modified. For the example configuration, this is
4 Click Next, and configure the password and its options:
Password: Specify a password for this user
Confirm password: Enter the same password.
User must change password at next logon: Deselect this option.
Password never expires: Select this option.
5 Click Next, then click Finish.
This creates the Identity Server user. You need to remember the values you assigned to this user
for First name and User logon name.
6 To set the servicePrincipalName (spn) attribute on this user, open a command window and
enter the following command:
setspn -A HTTP/<userLogonName> <userName>
For this configuration example, you would enter the following command:
setspn -A HTTP/amser.provo.novell.com@REALM.NOVELL.COM amser
This adds the servicePrincipalName attribute to the user specified with the value specified in
the
-A
7 (Optional) Verify that the user has the required servicePrincipalName attribute with a valid
value. Enter the following command:
setspn -L <userName>
For this configuration example, you would enter the following command:
setspn -L amser
162 Novell Access Manager 3.1 SP2 Identity Server Guide
.
amser
HTTP/<Identity_Server_Base_URL>
parameter.
. For this example
amser.provo.novell.com
.
amser
, and you