Novell CLIENT FOR LINUX 1.2 - ADMINISTRATION Manual

Hide thumbs Also See for CLIENT FOR LINUX 1.2 - ADMINISTRATION:
Table of Contents

Advertisement

Quick Links

Novell Client for Linux 1.2 Administration Guide
Novell
Client
for Linux
TM
w w w . n o v e l l . c o m
1 . 2
A D M I N I S T R A T I O N G U I D E
J u l y 2 6 , 2 0 0 6

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the CLIENT FOR LINUX 1.2 - ADMINISTRATION and is the answer not in the manual?

Questions and answers

Summary of Contents for Novell CLIENT FOR LINUX 1.2 - ADMINISTRATION

  • Page 1 Novell Client for Linux 1.2 Administration Guide Novell Client for Linux w w w . n o v e l l . c o m 1 . 2 A D M I N I S T R A T I O N G U I D E...
  • Page 2 Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.
  • Page 3 Novell Trademarks For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/ trademarks/tmlist.html). Third-Party Materials All third-party trademarks are the property of their respective owners.
  • Page 5: Table Of Contents

    Using the Novell Client Configuration Wizard ........
  • Page 6 Installing the Required Packages ..........43 Compiling the Novell Client Virtual File System Kernel Module ......44 A.2.1...
  • Page 7: About This Guide

    Chapter 5, “Managing File Security,” on page 31 • Chapter 6, “Security Considerations,” on page 37 • Appendix A, “Compiling the Novell Client Virtual File System Kernel Module,” on page 43 • Appendix B, “The Novell Client for Linux Commands,” on page 47 •...
  • Page 8 Novell Client for Linux 1.2 Administration Guide...
  • Page 9: What's New

    This functionality makes use of CASA (Common Authentication Services Adapter) for persistent storage of credentials for a given realm. The overall concept is that if the Novell Client for Linux 1.2 or later and CASA 1.6 or later are installed on the workstation, users can have their eDirectory connections, login scripts, and startup drive mappings run when they initially log in to the workstation.
  • Page 10 Novell Client for Linux 1.2 Administration Guide...
  • Page 11: Understanding The Novell Client For Linux

    Linux Differs from the Novell Client for Windows 2000/XP Using the Novell Client for Linux differs in a few ways from using the Novell Client for Windows*. For users and network administrators who are familiar with the Novell Client for Windows, knowing these differences can help the transition to Linux run more smoothly.
  • Page 12: Understanding The Novell Client For Linux Virtual File System

    For more information, see Section 4.4, “Using OpenSLP to Simplify Login,” on page • The Novell Client for Linux does not use the Dynamic Local User or Location Profiles that are available in Windows. User Interface Both a graphical user interface and command line utilities are available to complete client actions such as mapping drives, setting trustee rights, and copying files.
  • Page 13 For example, if you download and install a patched version of novfs.ko, and then later install an SLED 10 update to your kernel, the Novell Client Virtual File System Kernel Module patch might be overwritten. You should then reinstall the novfs.ko patch and recompile the kernel in order to ensure that the kernel module and the kernel are compiled.
  • Page 14 Novell Client for Linux 1.2 Administration Guide...
  • Page 15: Configuring The Novell Client For Linux

    Using Configuration Files to Preconfigure the Novell Client (page 22) 3.1 Using the Novell Client Configuration Wizard The Novell Client for Linux includes a Novell Client Configuration Wizard to simplify the process of configuring your Novell Client. 1 Launch the Novell Client Configuration Wizard using either of the following methods: •...
  • Page 16: Configuring Login Settings

    Settings page, reboot the machine for those changes to take effect. Any changes you make to the Novell Client settings are written to a set of configuration (.conf) files in the /etc/opt/novell/ncl directory. These files are then used by the Novell Client.
  • Page 17: Configuring Map Settings

    Novell Client for Linux User Guide. 3.1.2 Configuring Map Settings Use the Map Settings page in the Novell Client Configuration Wizard to specify the directory on the local workstation where symbolic links to network resources are created and to select the first letter to use when creating these links.
  • Page 18: Configuring Protocol Settings

    3.1.3 Configuring Protocol Settings Use the Protocol Settings page in the Novell Client Configuration Wizard to determine the level of enhanced security support, select the providers to perform name resolution, and enable the Client to obtain configuration information from your DHCP server.
  • Page 19: Configuring Tray Application Settings

    3.1.4 Configuring Tray Application Settings Use the Tray Application Settings page in the Novell Client Configuration Wizard to automatically launch the Novell Client Tray Application when the desktop starts and to determine which options are available to users on the Tray Application menu.
  • Page 20 Novell File, Folder, and Volume Properties pages. File Browser Settings Page Figure 3-5 This page contains the following options: • Navigation Panel Icon (KDE only): Enables or disables the File Browser Navigation Panel icon.
  • Page 21: Configuring Openslp Settings

    Wizard to specify where and how the Client requests network services. In an IP-only network, the Novell Client needs a way to resolve the eDirectory tree, context and server names to an actual IP address of an eDirectory server that can provide authentication. On a simple LAN, the client can send an IP broadcast to discover this information, but on a multisite WAN, the SLP scope and Directory Agents must be listed.
  • Page 22: Using Configuration Files To Preconfigure The Novell Client

    3.2 Using Configuration Files to Preconfigure the Novell Client The Novell Client for Linux allows you to apply preconfigured client settings contained in one or more configuration (.conf) files. This option works similar to the unattend file that can be used to...
  • Page 23 /add-on/novell-client-conf directory and adds it to the list of RPMs it installs as part of the Client. • Install with the Novell Client using YaST: Add the location of the newly created novell-client-conf-version_number.platform.rpm to the list of...
  • Page 24 Novell Client for Linux 1.2 Administration Guide...
  • Page 25: Managing Login

    For integrated login to work, the Novell Common Authentication Services Adapter (CASA) must be installed and enabled. CASA is a common authentication and security package that provides a set of libraries for application and service developers to enable single sign-on to an enterprise network.
  • Page 26: Configuring Integrated Login

    3 Click Configure CASA, then click OK. 4 Click Finish to close the CASA Configuration Wizard. 4.1.2 Configuring Integrated Login 1 Use one of the following methods to open the Novell Login dialog box: • Click > Novell Login. • SLED 10 GNOME: Click Computer > More Applications > Novell Login.
  • Page 27: Managing System Wide Integrated Login Settings

    4 Click the Startup tab, then select Run Novell Client Login at Session Startup. 5 Select Save Profile after the successful login to save the Novell Login dialog settings to be used for all subsequent session logins. You must have the User Name and Password fields and the Tree and Context fields on the eDirectory tab filled out for this to be saved.
  • Page 28: Setting Up Login Scripts

    Login scripts are similar to batch files and are executed by Novell Login. You can use login scripts to map drives to Novell file system volumes and directories, display messages, set environment variables, and execute programs or menus.
  • Page 29: Using Openslp To Simplify Login

    For example, instead of remembering an IP address or DNS name for a server, users can select the server’s name from a list of available servers. SLP must be activated and set up on your Novell servers in order for the Novell Client to take advantage of it. For more information, see “SLP Services in the Network”...
  • Page 30: Troubleshooting Slp Configuration

    5 Restart the workstation. 4.4.2 Troubleshooting SLP Configuration If users cannot see a list of available trees, contexts, and servers when they use the Novell Client for Linux Login screen, use slptool, located in /usr/bin, to troubleshoot your SLP configuration.
  • Page 31: Managing File Security

    Administrator account can delete or rename a file that other users can only open and edit. The Novell file system keeps track of the rights that users have to files and directories on the network. When users try to access any file on the network, Novell File Services (NFS) either grants access or prohibits certain things that users can do with the file.
  • Page 32 Rights Concepts (http://www.novell.com/documentation/edir873/edir873/data/ fbachifb.html) in the Novell eDirectory 8.7.3 Administration Guide for more information). Rights can also be limited by Inherited Rights Filters and changed or revoked by lower trustee assignments. The net result of all these actions—the rights a user can employ—are called effective rights.
  • Page 33: Changing Trustee Rights

    Rights and filters. 5.3 Adding a Trustee When you add a trustee to a Novell file system directory or file, you grant a user (the trustee) rights to that directory or file.You must have the Access Control right to add a trustee.
  • Page 34: Removing A Trustee

    6 Click OK. 5.4 Removing a Trustee When you remove a trustee of a Novell file system directory or file, you delete a user’s rights to that directory or file. You must have the Access Control right to remove a trustee.
  • Page 35 • Michael has Read, Write, and File Scan rights to both FILEA and FILEB. To combine multiple trustees: 1 In a file manager, select all the Novell files or directories that you want to combine rights for. 2 Right-click the files or directories, then select one of the following: •...
  • Page 36 Novell Client for Linux 1.2 Administration Guide...
  • Page 37: Security Considerations

    Section 6.4, “New and Modified Files,” on page 39 • Section 6.5, “Other Security Considerations,” on page 42 6.1 Security Features ® The following table contains a summary of the Novell Client for Linux security features: Novell Client for Linux Security Features Table 6-1...
  • Page 38: Known Security Threats

    FIPS-compliant. 6.2 Known Security Threats The following section provides a list of known security threats for the Novell Client for Linux, an indication of how difficult it would be to exploit the threat, and what the consequences would be for a customer.
  • Page 39: Identification And Authentication

    No security auditing is performed by this product. 6.4 New and Modified Files The following sections describe the files that are added or modified during the installation of the Novell Client for Linux. • Section 6.4.1, “Configuration Files,” on page 40 •...
  • Page 40: Configuration Files

    This file is modified only by the root user, login.conf normally with YaST using the Novell Client Configuration Wizard for the login page (click the Novell Tray icon, select System Settings, and start the Login Wizard). 6.4.2 PAM Login Files New and Modified PAM Login Files...
  • Page 41: User Profile Startup Files

    /opt/novell/ncl/bin/ saving settings. This file adds a new tab (called gnwlogin Startup) to the Novell Login dialog box which allows users to save their current login settings for use during the next system startup to automatically log in the user.
  • Page 42: Installation Files

    • If root is compromised, all network access could also be compromised. For example, if a malicious entity gets root access, it might be able to steal user credentials and authenticate to the network with those credentials. Novell Client for Linux 1.2 Administration Guide...
  • Page 43: A Compiling The Novell Client Virtual File System Kernel Module

    See the “Novell Client for Linux 1.2 Installation Quick Start.” NOTE: If you installed the Novell Client for Linux and the installation failed, you do not need to repeat this step. 3. Compile the Novell Client Virtual File System Kernel Module.
  • Page 44: Compiling The Novell Client Virtual File System Kernel Module

    A.2.1 Compiling the Novell Client Virtual File System Kernel Module After a Kernel Update If you have updated the kernel on the workstation, you must compile the Novell Client Virtual File System Kernel Module so that it works with the updated kernel.
  • Page 45: Compiling The Novell Client Virtual File System Kernel Module On Workstations Running A Custom Kernel

    A.2.2 Compiling the Novell Client Virtual File System Kernel Module on Workstations Running a Custom Kernel If you have a custom kernel on the workstation, you must compile the Novell Client Virtual File System kernel module so that it works with the custom kernel.
  • Page 46 Novell Client for Linux 1.2 Administration Guide...
  • Page 47: B The Novell Client For Linux Commands

    Novell file systems, log a user in to or out of a Novell file server or eDirectory tree, map a local file system to a remote file system on a Novell file server, and display or modify a user’s trustee assignments or inherited rights filter for volumes, directories, or files.
  • Page 48: Gui Utilities

    You should use the ncl_man command (instead of the traditional man command) to view NCL-related man pages. To do this, enter the following in a terminal the first time you want to view a Novell Client for Linux man page: /opt/novell/ncl/bin/ncl_man This modifies the manpath to allow the Novell Client man pages to be displayed.You can then...
  • Page 49 To exit a man page, press q. You can learn more about the man command by entering man man in a terminal window. You can also enter utility_name --help in a terminal window to access a help page for the utility. The Novell Client for Linux Commands...
  • Page 50 Novell Client for Linux 1.2 Administration Guide...
  • Page 51: C Documentation Updates

    • Added SUSE Linux Enterprise Desktop 10 and SUSE Linux 10.1 as supported platforms. • Added Section 4.1, “Setting Up Integrated Login,” on page C.2 December 23, 2005 • Page design reformatted to comply with revised Novell documentation standards. Documentation Updates...

Table of Contents