Certificates; Section 4.5, "Certificates - Novell BUSINESS CONTINUITY CLUSTERING 1.1 SP1 - 9-21-2010 ADMINISTRATION GUIDE FOR OPEN ENTERPRISE SERVER 1 SP2 LINUX Administration Manual

To make the Cluster Resource Synchronization driver or User Object Synchronization driver
security equivalent to a user with administrative rights:
1 Start your Internet browser and enter the URL for iManager.
The URL is http://server_ip_address/nps/iManager.html. Replace server_ip_address with the
IP address or DNS name of the server that has iManager and the Identity Manager
preconfigured templates for iManager installed.
2 Specify your username and password, specify the tree where you want to log in, then click
Login.
3 In the left column, click DirXML, then click the DirXML Overview link.
DirXML is called Identity Manager in the latest releases.
4 Choose Search Entire Tree, then click Search.
5 Select the driver you want to check by clicking the red Cluster Sync icon or the blue User Sync
icon.
6 Click the red or blue icon again, then click the DirXML tab if it is not already selected.
7 Click Security Equals, and view or add a security equivalent user as needed.
8 Repeat Step 5 through
You must also ensure that the BCC Administrator user has Read, Write, Create, Erase, Modify, and
File Scan access rights to the
For Linux, ensure that the BCC Administrator user is a LUM-enabled user. To LUM-enable a user,
see "Managing User and Group Objects in eDirectory" (http://www.novell.com/documentation/oes/
lumadgd/data/aeucqum.html)
NOTE: For NetWare, if you are concerned about denial of service attacks with the BCC
Administrator user, you can set a quota of 5 MB for that user. This can prevent the BCC
Administrator user from filling the
directory
sys:/tmp

4.5 Certificates

If SSL certificates are not present or have not been created, Identity Manager drivers might not start
or function properly. Novell recommends using SSL certificates for encryption and security.
NOTE: You should create or use a different certificate than the default (dummy) certificate (BCC
Cluster Sync KMO) that is included with BCC.
See "Creating SSL Certificates" on page 36
BCC.
Step 7 for the other drivers in your BCC.
directory on every node in your NetWare clusters.
sys:/tmp
in the Novell Linux User Management Technology Guide.
volume by copying an excessive number of files to the
sys:
for more information on creating SSL certificates for
Troubleshooting Business Continuity Clustering 1.1 67