Creating Ssl Certificates - Novell BUSINESS CONTINUITY CLUSTERING 1.1 SP1 - 9-21-2010 ADMINISTRATION GUIDE FOR OPEN ENTERPRISE SERVER 1 SP2 LINUX Administration Manual

4 Choose to either place the new driver in a new driver set, or add the driver to the driver set you
created for cluster resource synchronization, then click Next.
Both the User Object Synchronization driver and the Cluster Resource Synchronization driver
can be added to the same driver set.
5 Specify the driver set name, context, and the server that the driver set will be associated with.
The server is the same server where you installed the Identity Manager engine and eDirectory
driver.
6 Choose to not create a new partition for the driver set, then click Next.
7 Choose to import a preconfigured driver from the server, select the Identity Manager
preconfigured template for User object synchronization, then click Next.
The template name is
8 Fill in the values on the wizard page as prompted, then click Next.
Each field contains an example of the type of information that should go into the field.
Descriptions of the information required are also included with each field.
Additional information for the wizard page fields can be found in
Driver Configuration" (http://www.novell.com/documentation/dirxmldrivers/edirectory/data/
bozojif.html)
9 In the left column of the iManager page, click DirXML, then click DirXML Overview.
10 Search the eDirectory tree for the Identity Manager driver sets by clicking Search.
11 Click the User Sync driver icon, then click Migrate from eDirectory.
12 Click Add, browse to and select the context that contains the User objects, then click OK.
13 (Optional) Exclude the Admin User object from being synchronized:
13a Click the Exclude Administrative Roles button, then click Add.
13b Browse to and select the Admin User object, then click OK.
14 Perform
A.3 Creating SSL Certificates
In a multiple-tree BCC, you must create an SSL certificate for the Cluster Resource Synchronization
driver, and an SSL certificate for the User Object Synchronization driver. Creating one certificate
creates that certificate for a driver pair. For example, creating an SSL certificate for the Cluster
Resource Synchronization driver creates the certificate for the Cluster Resource Synchronization
drivers on both clusters.
To create an SSL certificate:
1 Start your Internet browser and enter the URL for iManager.
The URL is http://server_ip_address/nps/iManager.html. Replace server_ip_address with the
IP address or DNS name of the server that has iManager and the Identity Manager
preconfigured templates for iManager installed.
2 Specify your username and password, specify the tree where you want to log in, then click
Login.
3 In the left column, click DirXML Utilities, then click NDS-to-NDS Driver Certificates.
4 Specify the requested driver information for both eDirectory trees.
80 Novell Business Continuity Clustering 1.1 Administration Guide for Linux
BCCUserObjectSynchronization.XML
in the DirXML Driver for eDirectory Implementation Guide.
Step 1 through Step 13 for each cluster that is in a separate tree.
.
"Importing the Sample