Ssl Certificates - Novell BUSINESS CONTINUITY CLUSTERING 1.2.1 - ADMINISTRATION Administration Manual

NOTE: Rather than using the eDirectory Admin user to administer your BCC, you should consider
creating another user with sufficient rights to the appropriate contexts in your eDirectory tree to
manage your BCC.
The IDM Driver object must have sufficient rights to any object it reads or writes in the following
containers:
The Identity Manager driver set container.
The container where the Cluster object resides.
The container where the Server objects reside.
If server objects reside in multiple containers, this must be a container high enough in the tree
to be above all containers that contain server objects. The best practice is to have all server
objects in one container.
The container where the cluster pool and volume objects are placed when they are
synchronized to this cluster. This container is sometimes referred to as the landing zone. The
NCP server objects for the virtual server of a business-continuity-enabled resource are also
TM
placed in the landing zone.
To make the Cluster Resource Synchronization driver or User Object Synchronization driver
security equivalent to a user with administrative rights:
1 Start your Internet browser and enter the URL for iManager.
The URL is http://server_ip_address/nps/iManager.html. Replace server_ip_address with the
IP address or DNS name of the server that has iManager and the Identity Manager
preconfigured templates for iManager installed.
2 Specify your username and password, specify the tree where you want to log in, then click
Login.
3 In Roles and Tasks, click Identity Manager, then click the Identity Manager Overview link.
4 Choose Search Entire Tree, then click Search.
5 Select the driver you want to check by clicking the red Cluster Sync icon or the blue User Sync
icon.
6 Click the red or blue icon again, then click the Identity Manager tab if it is not already selected.
7 Click Security Equals, and view or add a security equivalent user as needed.
8 Repeat
Step 5 through
For Linux, ensure that the BCC Administrator user is a LUM-enabled user. To LUM-enable a user,
see "Managing User and Group Objects in eDirectory" (http://www.novell.com/documentation/oes/
lumadgd/data/aeucqum.html)

13.7 SSL Certificates

If SSL certificates are not present or have not been created, Identity Manager drivers might not start
or function properly. See
SSL certificates for BCC.
Step 7 for the other drivers in your BCC.
in the Novell Linux User Management Technology Guide.
"Creating SSL Certificates" on page 80 for more information on creating
Troubleshooting Business Continuity Clustering 115