Summary of Contents for Novell CLIENT FOR LINUX 1.2 - ADMINISTRATION
Page 1
Novell Client for Linux 1.2 Administration Guide Novell Client for Linux w w w . n o v e l l . c o m 1 . 2 A D M I N I S T R A T I O N G U I D E...
Page 2
Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.
Page 3
Novell Trademarks For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/ trademarks/tmlist.html). Third-Party Materials All third-party trademarks are the property of their respective owners.
Chapter 5, “Managing File Security,” on page 31 • Chapter 6, “Security Considerations,” on page 37 • Appendix A, “Compiling the Novell Client Virtual File System Kernel Module,” on page 43 • Appendix B, “The Novell Client for Linux Commands,” on page 47 •...
Page 8
Novell Client for Linux 1.2 Administration Guide...
This functionality makes use of CASA (Common Authentication Services Adapter) for persistent storage of credentials for a given realm. The overall concept is that if the Novell Client for Linux 1.2 or later and CASA 1.6 or later are installed on the workstation, users can have their eDirectory connections, login scripts, and startup drive mappings run when they initially log in to the workstation.
Page 10
Novell Client for Linux 1.2 Administration Guide...
Linux Differs from the Novell Client for Windows 2000/XP Using the Novell Client for Linux differs in a few ways from using the Novell Client for Windows*. For users and network administrators who are familiar with the Novell Client for Windows, knowing these differences can help the transition to Linux run more smoothly.
For more information, see Section 4.4, “Using OpenSLP to Simplify Login,” on page • The Novell Client for Linux does not use the Dynamic Local User or Location Profiles that are available in Windows. User Interface Both a graphical user interface and command line utilities are available to complete client actions such as mapping drives, setting trustee rights, and copying files.
Page 13
For example, if you download and install a patched version of novfs.ko, and then later install an SLED 10 update to your kernel, the Novell Client Virtual File System Kernel Module patch might be overwritten. You should then reinstall the novfs.ko patch and recompile the kernel in order to ensure that the kernel module and the kernel are compiled.
Page 14
Novell Client for Linux 1.2 Administration Guide...
Using Configuration Files to Preconfigure the Novell Client (page 22) 3.1 Using the Novell Client Configuration Wizard The Novell Client for Linux includes a Novell Client Configuration Wizard to simplify the process of configuring your Novell Client. 1 Launch the Novell Client Configuration Wizard using either of the following methods: •...
Settings page, reboot the machine for those changes to take effect. Any changes you make to the Novell Client settings are written to a set of configuration (.conf) files in the /etc/opt/novell/ncl directory. These files are then used by the Novell Client.
Novell Client for Linux User Guide. 3.1.2 Configuring Map Settings Use the Map Settings page in the Novell Client Configuration Wizard to specify the directory on the local workstation where symbolic links to network resources are created and to select the first letter to use when creating these links.
3.1.3 Configuring Protocol Settings Use the Protocol Settings page in the Novell Client Configuration Wizard to determine the level of enhanced security support, select the providers to perform name resolution, and enable the Client to obtain configuration information from your DHCP server.
3.1.4 Configuring Tray Application Settings Use the Tray Application Settings page in the Novell Client Configuration Wizard to automatically launch the Novell Client Tray Application when the desktop starts and to determine which options are available to users on the Tray Application menu.
Page 20
Novell File, Folder, and Volume Properties pages. File Browser Settings Page Figure 3-5 This page contains the following options: • Navigation Panel Icon (KDE only): Enables or disables the File Browser Navigation Panel icon.
Wizard to specify where and how the Client requests network services. In an IP-only network, the Novell Client needs a way to resolve the eDirectory tree, context and server names to an actual IP address of an eDirectory server that can provide authentication. On a simple LAN, the client can send an IP broadcast to discover this information, but on a multisite WAN, the SLP scope and Directory Agents must be listed.
3.2 Using Configuration Files to Preconfigure the Novell Client The Novell Client for Linux allows you to apply preconfigured client settings contained in one or more configuration (.conf) files. This option works similar to the unattend file that can be used to...
Page 23
/add-on/novell-client-conf directory and adds it to the list of RPMs it installs as part of the Client. • Install with the Novell Client using YaST: Add the location of the newly created novell-client-conf-version_number.platform.rpm to the list of...
Page 24
Novell Client for Linux 1.2 Administration Guide...
For integrated login to work, the Novell Common Authentication Services Adapter (CASA) must be installed and enabled. CASA is a common authentication and security package that provides a set of libraries for application and service developers to enable single sign-on to an enterprise network.
3 Click Configure CASA, then click OK. 4 Click Finish to close the CASA Configuration Wizard. 4.1.2 Configuring Integrated Login 1 Use one of the following methods to open the Novell Login dialog box: • Click > Novell Login. • SLED 10 GNOME: Click Computer > More Applications > Novell Login.
4 Click the Startup tab, then select Run Novell Client Login at Session Startup. 5 Select Save Profile after the successful login to save the Novell Login dialog settings to be used for all subsequent session logins. You must have the User Name and Password fields and the Tree and Context fields on the eDirectory tab filled out for this to be saved.
Login scripts are similar to batch files and are executed by Novell Login. You can use login scripts to map drives to Novell file system volumes and directories, display messages, set environment variables, and execute programs or menus.
For example, instead of remembering an IP address or DNS name for a server, users can select the server’s name from a list of available servers. SLP must be activated and set up on your Novell servers in order for the Novell Client to take advantage of it. For more information, see “SLP Services in the Network”...
5 Restart the workstation. 4.4.2 Troubleshooting SLP Configuration If users cannot see a list of available trees, contexts, and servers when they use the Novell Client for Linux Login screen, use slptool, located in /usr/bin, to troubleshoot your SLP configuration.
Administrator account can delete or rename a file that other users can only open and edit. The Novell file system keeps track of the rights that users have to files and directories on the network. When users try to access any file on the network, Novell File Services (NFS) either grants access or prohibits certain things that users can do with the file.
Page 32
Rights Concepts (http://www.novell.com/documentation/edir873/edir873/data/ fbachifb.html) in the Novell eDirectory 8.7.3 Administration Guide for more information). Rights can also be limited by Inherited Rights Filters and changed or revoked by lower trustee assignments. The net result of all these actions—the rights a user can employ—are called effective rights.
Rights and filters. 5.3 Adding a Trustee When you add a trustee to a Novell file system directory or file, you grant a user (the trustee) rights to that directory or file.You must have the Access Control right to add a trustee.
6 Click OK. 5.4 Removing a Trustee When you remove a trustee of a Novell file system directory or file, you delete a user’s rights to that directory or file. You must have the Access Control right to remove a trustee.
Page 35
• Michael has Read, Write, and File Scan rights to both FILEA and FILEB. To combine multiple trustees: 1 In a file manager, select all the Novell files or directories that you want to combine rights for. 2 Right-click the files or directories, then select one of the following: •...
Page 36
Novell Client for Linux 1.2 Administration Guide...
Section 6.4, “New and Modified Files,” on page 39 • Section 6.5, “Other Security Considerations,” on page 42 6.1 Security Features ® The following table contains a summary of the Novell Client for Linux security features: Novell Client for Linux Security Features Table 6-1...
FIPS-compliant. 6.2 Known Security Threats The following section provides a list of known security threats for the Novell Client for Linux, an indication of how difficult it would be to exploit the threat, and what the consequences would be for a customer.
No security auditing is performed by this product. 6.4 New and Modified Files The following sections describe the files that are added or modified during the installation of the Novell Client for Linux. • Section 6.4.1, “Configuration Files,” on page 40 •...
This file is modified only by the root user, login.conf normally with YaST using the Novell Client Configuration Wizard for the login page (click the Novell Tray icon, select System Settings, and start the Login Wizard). 6.4.2 PAM Login Files New and Modified PAM Login Files...
/opt/novell/ncl/bin/ saving settings. This file adds a new tab (called gnwlogin Startup) to the Novell Login dialog box which allows users to save their current login settings for use during the next system startup to automatically log in the user.
• If root is compromised, all network access could also be compromised. For example, if a malicious entity gets root access, it might be able to steal user credentials and authenticate to the network with those credentials. Novell Client for Linux 1.2 Administration Guide...
See the “Novell Client for Linux 1.2 Installation Quick Start.” NOTE: If you installed the Novell Client for Linux and the installation failed, you do not need to repeat this step. 3. Compile the Novell Client Virtual File System Kernel Module.
A.2.1 Compiling the Novell Client Virtual File System Kernel Module After a Kernel Update If you have updated the kernel on the workstation, you must compile the Novell Client Virtual File System Kernel Module so that it works with the updated kernel.
A.2.2 Compiling the Novell Client Virtual File System Kernel Module on Workstations Running a Custom Kernel If you have a custom kernel on the workstation, you must compile the Novell Client Virtual File System kernel module so that it works with the custom kernel.
Page 46
Novell Client for Linux 1.2 Administration Guide...
Novell file systems, log a user in to or out of a Novell file server or eDirectory tree, map a local file system to a remote file system on a Novell file server, and display or modify a user’s trustee assignments or inherited rights filter for volumes, directories, or files.
You should use the ncl_man command (instead of the traditional man command) to view NCL-related man pages. To do this, enter the following in a terminal the first time you want to view a Novell Client for Linux man page: /opt/novell/ncl/bin/ncl_man This modifies the manpath to allow the Novell Client man pages to be displayed.You can then...
Page 49
To exit a man page, press q. You can learn more about the man command by entering man man in a terminal window. You can also enter utility_name --help in a terminal window to access a help page for the utility. The Novell Client for Linux Commands...
Page 50
Novell Client for Linux 1.2 Administration Guide...
• Added SUSE Linux Enterprise Desktop 10 and SUSE Linux 10.1 as supported platforms. • Added Section 4.1, “Setting Up Integrated Login,” on page C.2 December 23, 2005 • Page design reformatted to comply with revised Novell documentation standards. Documentation Updates...
Need help?
Do you have a question about the CLIENT FOR LINUX 1.2 - ADMINISTRATION and is the answer not in the manual?
Questions and answers