Preventing The Propagation Of Viruses; Provisioning User Accounts; Setting Account Quotas - Novell IFOLDER 3 - ADMINISTRATION Manual

3.5.1 Preventing the Propagation of Viruses

Because iFolder is a cross platform, distributed solution there is a possibility of virus infection on
Windows machines migrating across the iFolder server to other platforms, and vice versa. You
should enforce server-based virus scanning to prevent viruses from entering the corporate network.
You should also enforce client-based virus scanning. For information, see
Scanner Settings for iFolder

3.5.2 Provisioning User Accounts

You can specify any existing containers and groups in the Search DNs field of the iFolder LDAP
settings to govern which users are automatically provisioned with accounts for iFolder services. The
LDAP synchronization tracks a user object's eDirectory
contexts as you add, move, or relocate user objects, or as you add and remove contexts as Search
DNs.
The following guidelines apply:
• If the user is added to an LDAP container, group, or user that is in the Search DN, the user is
added automatically to the iFolder user list.
• If a user is moved to a different container, and the new container is also in the Search DN, the
user remains in the iFolder user list.
If you intend to keep the user as an iFolder user without interruption of service and loss of
memberships and data, the new container must be added as a Search DN before the user is
moved.
If the user is moved to a different container that is not specified as a Search DN before the user
is moved, the user is removed from the iFolder user list. The user's iFolders are orphaned and
the user is removed as a member of iFolders owned by others. If the new container is later
added as a Search DN, the user is treated as a new user, with no association with previous
iFolders and memberships.
• If the user appears in multiple defined Search DNs, if one or more DNs are removed from the
LDAP settings, the user remains in the iFolder user list if at least one DN containing the user
remains.
• If the user is deleted from LDAP or moved from all defined Search DNs, the user is removed as
an iFolder user. The user's iFolders are orphaned and the user is removed as a member of
iFolders owned by others.
• The iFolder Admin user and iFolder Proxy user are tracked by their GUIDs, whether their user
objects are in a context in the Search DN or not.

3.5.3 Setting Account Quotas

You can restrict the amount of space each user account is allowed to store on the server by setting an
account quota. The account quota applies to the total space consumed by the iFolders the user owns.
If the user participates in other iFolders, the space consumed on the server is billed to the owner of
that iFolder. You can set quotas at the system or user level. Within a give account quota, you can also
set a quota for any iFolder.
Traffic" in the iFolder User Guide for Novell iFolder
"Configuring Local Virus
GUID to identify the user in multiple
TM
3.2.
Planning iFolder Services 35