Certificates; Clusters Cannot Communicate - Novell BUSINESS CONTINUITY CLUSTERING 1.1 SP2 - ADMINISTRATION Administration Manual

2 Specify your username and password, specify the tree where you want to log in, then click
Login.
3 In the left column, click Identity Manager, then click the Identity Manager Overview link.
4 Choose Search Entire Tree, then click Search.
5 Select the driver you want to check by clicking the red Cluster Sync icon or the blue User Sync
icon.
6 Click the red or blue icon again, then click the Identity Manager tab if it is not already selected.
7 Click Security Equals, and view or add a security equivalent user as needed.
8 Repeat
Step 5 through
You must also ensure that the BCC Administrator user has Read, Write, Create, Erase, Modify, and
File Scan access rights to the
For Linux, ensure that the BCC Administrator user is a LUM-enabled user. To LUM-enable a user,
see "Managing User and Group Objects in eDirectory" (http://www.novell.com/documentation/oes/
lumadgd/data/aeucqum.html)
NOTE: For NetWare, if you are concerned about denial of service attacks with the BCC
Administrator user, you can set a quota of 5 MB for that user. This can prevent the BCC
Administrator user from filling the
directory
sys:/tmp

9.5 Certificates

If SSL certificates are not present or have not been created, Identity Manager drivers might not start
or function properly. Novell recommends using SSL certificates for encryption and security.
NOTE: You should create or use a different certificate than the default (dummy) certificate (BCC
Cluster Sync KMO) that is included with BCC.
See "Creating SSL Certificates" on page 70
BCC.

9.6 Clusters Cannot Communicate

If the clusters in your BCC cannot communicate with each other, it is possible that the User object
you are using to administer your BCC does not have sufficient rights to the Cluster objects for each
cluster. To resolve this problem, ensure that the BCC Administrator user is a trustee of the Cluster
objects and has at least Read and Write rights to the All Attributes Rights property.
1 Start your Internet browser and enter the URL for iManager.
The URL is http://server_ip_address/nps/iManager.html. Replace server_ip_address with the
IP address or DNS name of the server that has iManager and the Identity Manager
preconfigured templates for iManager installed.
2 Specify your username and password, specify the tree where you want to log in, then click
Login.
3 In the left column, click Rights, then click the Modify Trustees link.
4 Specify the Cluster object name, or browse and select it, then click OK.
Step 7 for the other drivers in your BCC.
directory on every node in your NetWare clusters.
sys:/tmp
in the Novell Linux User Management Technology Guide.
volume by copying an excessive number of files to the
sys:
for more information on creating SSL certificates for
Troubleshooting Business Continuity Clustering 1.1 105