A Implementing A Multiple-Tree Bcc; Using Identity Manager To Copy User Objects To Another Edirectory Tree; Configuring User Object Synchronization - Novell BUSINESS CONTINUITY CLUSTERING 1.1 SP1 - 9-21-2010 ADMINISTRATION GUIDE FOR OPEN ENTERPRISE SERVER 1 SP2 LINUX Administration Manual

Implementing a Multiple-Tree BCC
A
Although the information contained in the other sections of this document describes an eDirectory
single-tree BCC implementation, most of it is also useful for configuring and managing BCC in a
multiple-tree environment. This section contains additional instructions and information for
multiple-tree BCC implementations.

Section A.1, "Using Identity Manager to Copy User Objects to Another eDirectory Tree," on
page 79

Section A.2, "Configuring User Object Synchronization," on page 79

Section A.3, "Creating SSL Certificates," on page 80

Section A.4, "Synchronizing the BCC-Specific Identity Manager Drivers," on page 81

Section A.5, "Preventing Identity Manager Synchronization Loops," on page 81

Section A.6, "Migrating Resources to Another Cluster," on page 83
A.1 Using Identity Manager to Copy User Objects
to Another eDirectory Tree
The procedures explained in this section are normally performed after completing
Configuring Identity Manager" on page
The Identity Manager eDirectory driver has a synchronization feature that copies objects that exist
in one tree to another tree where they don't exist. For business continuity clusters, this feature can be
used to copy User objects from one cluster to another cluster in a separate eDirectory tree. For
example, if you have one tree that has 10,000 users and a second new tree that does not yet have
users defined, you can use Identity Manager to quickly copy the 10,000 users to the new tree.
For more information on copying User objects by using Identity Manager, see
Copying User Objects" (http://www.novell.com/documentation/idmdrivers/index.html?page=/
documentation/idmdrivers/edirectory/data/brj81j4.html)
eDirectory Implementation Guide.
A.2 Configuring User Object Synchronization
If the clusters in your business continuity cluster are in separate eDirectory trees and you require
user-based access control, then User object synchronization is required.
To configure the Identity Manager driver for User object synchronization:
1 Start your Internet browser and enter the URL for iManager.
The URL is http://server_ip_address/nps/iManager.html. Replace server_ip_address with the
IP address or DNS name of the server that has iManager and the Identity Manager
preconfigured templates for iManager installed.
2 Specify your username and password, specify the tree where you want to log in, then click
Login.
3 In the left column, click DirXML Utilities, then click the New Driver link.
20.
in the Identity Manager Driver for
"Installing and
"Migrating or
Implementing a Multiple-Tree BCC
A
TM
79