Novell BUSINESS CONTINUITY CLUSTERING 1.1 SP1 - 9-21-2010 ADMINISTRATION GUIDE FOR OPEN ENTERPRISE SERVER 1 SP2 LINUX Administration Manual page 36

IMPORTANT: If you choose to include User object synchronization, exclude the Admin User
object from being synchronized. See
Identity Manager Drivers," on page 81
adding new clusters to the business continuity cluster.
9 Make the IDM Driver object security equivalent to an existing User object:
9a Click Define Security Equivalences, then click Add.
9b Browse to and select the desired User object, then click OK.
9c Click Next, and then click Finish.
10 Repeat
This includes creating a new driver and driver set for each cluster.
IMPORTANT: If you have upgraded to Identity Manager 3 and click either the cluster
resource synchronization driver or the user object synchronization driver, a message is
displayed prompting you to convert the driver to a new architecture. Click OK to convert the
driver.
Creating SSL Certificates
It is recommended that you create an SSL certificate for the Cluster Resource Synchronization
driver. Creating one certificate creates that certificate for a driver pair. For example, creating an SSL
certificate for the Cluster Resource Synchronization driver also creates the certificate for the Cluster
Resource Synchronization drivers on the other clusters.
To create an SSL certificate:
1 Start your Internet browser and enter the URL for iManager.
The URL is http://server_ip_address/nps/iManager.html. Replace server_ip_address with the
IP address or DNS name of the server that has iManager and the Identity Manager
preconfigured templates for iManager installed.
2 Specify your username and password, specify the tree where you want to log in, then click
Login.
3 In the left column, click DirXML Utilities, then click NDS-to-NDS Driver Certificates.
4 Specify the requested driver information for this cluster, then click Next.
You must specify the driver name (including the context) you supplied in
this cluster. Use the following format when specifying the driver name:
DriverName.DriverSet.OrganizationalUnit.OrganizationName
Ensure that there are no spaces (beginning or end) in the specified context, and do not use the
following format:
cn=DriverName.ou=OrganizationalUnitName.o=OrganizationName
5 Specify the requested driver information for the driver in the other cluster.
Use the same format specified in
6 Click Next, then click Finish.
36 Novell Business Continuity Clustering 1.1 Administration Guide for Linux
Step 1 through Step 9 above on the other clusters in your business continuity cluster.
Step 7 in Section A.4, "Synchronizing the BCC-Specific
for information about synchronizing User objects when
Step 4.
Step 8 on page 34 for