A Implementing A Multiple-Tree Bcc; Copying User Objects Using Idm; Configuring User Object Synchronization - Novell BUSINESS CONTINUITY CLUSTERING FOR NETWARE 1.1 - ADMINISTRATION Manual

Implementing a Multiple-Tree BCC
A
While the information contained in the other sections of this document describe a single
eDirectory tree BCC implementation, most of it is also useful for configuring and managing BCC
TM
in a multiple eDirectory tree environment. This section contains additional instructions and
information for multiple eDirectory tree BCC implementations.
Section A.1, "Copying User Objects Using IDM," on page 81
Section A.2, "Configuring User Object Synchronization," on page 81
Section A.3, "Creating SSL Certificates," on page 82
Section A.4, "Synchronizing IDM Drivers," on page 83
Section A.5, "Preventing IDM Synchronization Loops," on page 83
Section A.6, "Migrating Resources to Another Cluster," on page 85
A.1 Copying User Objects Using IDM
The procedures explained in this section would normally be performed after completing
"Installing Identity Manager," on page
The IDM eDirectory driver has a synchronization feature that will copy objects that exist in one tree
to another tree where they don't exist. For business continuity clusters, this feature can be used to
copy User objects from one cluster to another cluster in a separate eDirectory tree. For example, if
you have one tree that has 10,000 users and a second new tree that does not yet have users defined,
you can use DirXML to quickly copy the 10,000 users to the new tree.
For more information on copying User objects using IDM, see
(http://www.novell.com/documentation/idmdrivers/index.html?page=/documentation/idmdrivers/
edirectory/data/brj81j4.html)
A.2 Configuring User Object Synchronization
If the clusters in your business continuity cluster are in separate eDirectory trees and you require
user-based access control, then User object synchronization is required.
To configure the IDM driver for User object synchronization
1 Start your Internet browser and enter the URL for iManager.
The URL is http://server_ip_address/nps/iManager.html. Replace server_ip_address with the
IP address or DNS name of the NetWare server that has iManager and the DirXML
preconfigured templates for iManager installed.
2 Enter your username and password.
3 In the left column, click DirXML Utilities, then click the New Driver link.
4 Choose to either place the new driver in a new driver set, or add the driver to the driver set you
created for cluster resource synchronization, then click Next.
Both the User Object Synchronization Driver and the Cluster Resource Synchronization Driver
can be added to the same driver set.
21.
in the Identity Manager Driver for eDirectory Implementation Guide.
Section 2.2,
Migrating or Copying User objects
Implementing a Multiple-Tree BCC
A
81