Key Benefits; Ldap Configuration - Novell IFOLDER 3.8 - DEPLOYMENT Deployment Manual

Section 3.3, "Scalability Parameters," on page 21
Section 3.4, "Deployment Scenarios," on page 21

3.1 Key Benefits

The key benefits of a multi-server (master-slave) setup are as follows:
Supports a secure communication channel (SSL) to secure the data exchanged on the wire and
secures iFolder data stored on the server with the Novell
mechanism.
Ensures scalability with no theoretical limit on the number of servers participating. In addition,
each server can have multiple data volumes configured with any limit.
Guarantees response time because the number of users that are provisioned per server is limited
to 1000, so that each user can have a predictable response from the server if the server has a
dedicated network interface card (NIC) with a minimum of 1 Gbps capacity and each client has
at least a 100 Mbps NIC. With this configuration, the user can upload or download a 1 GB file
in less than 5 minutes, which is almost 4 MB per second.
Enables users across different geographical locations to share data in a secure manner.
Enables Novell iFolder servers across different geographical locations to be integrated with
Business Continuity Clusters (BCC) for data replication and high availability.

3.2 LDAP Configuration

The LDAP configuration information for a multi-server (master-slave) setup is as follows:
eDirectory, OpenLDAP, and Active Directory directory servers are supported.
The LDAP Search Context option must be set to an appropriate value for both master and slave
in order to optimize LDAP sync time on both servers. The Master LDAP search context
specified must either be a superset of all the slave search contexts or a combined list of all slave
search contexts as shown in the examples given below:
Master context
Master context
context
Ensure that each iFolder server has its own eDirectory replicas so that the authentication
happens locally instead of walking the eDirectory tree.
iFolder supports both secure and non-secure communication with the directory server. You can
choose any communication channel that you need. Ensure that the directory server is listening
on standard LDAP ports for secure and non-secure channels.
20 Novell iFolder 3.8 Deployment Guide
, Slave1 context
o=org
ou=ku,o=org##ou=dl,o=org
ou=dl,o=org
®
patented encryption and recovery
Slave2 context
ou=ku,o=org,
, Slave1 context
ou=ku,o=org
ou=dl,o=org
, Slave2