Ldap Configuration; Deployment Scenarios - Novell IFOLDER 3.8 - DEPLOYMENT Deployment Manual

A virtualized environment helps in reducing the number of physical resources and helps
improve management. When the iFolder servers are deployed in a virtual environment, you can
handle multiple Web Administration consoles with ease and with lower maintenance overhead.
Users transparently get the performance and scalability expected from the physical servers.
Novell iFolder deployment in a virtual environment ensures that multiple services run on a
single physical resource with a dedicated virtual guest server for each service. Given this, an
iFolder multi-server setup can run on a single physical server with multiple virtual hosts. The
entire multi-server setup can run on a single physical resource. This reduces cost and time to
deploy.
If each virtual guest is treated as a single server, see
on page
(Master-Slave) Deployment," on page 19
Deployment," on page
Server Cluster Deployment," on page

10.2 LDAP Configuration

The LDAP configuration information for using Xen to deploy iFolder as a virtual service is as
follows:
eDirectory
While configuring the iFolder server, use the LDAP Search Context option in YaST
that the master LDAP search group you specify is the superset of all the slaves. You can specify
all the slave search contexts, separated by commas. For example, o=org is the master LDAP
search group, and ou=KAR and ou=DL are the slave LDAP search groups. In this case, the
slave LDAP search groups should be the subset of the master LDAP search group. You can
either specify o=org as the LDAP search context or specify ou=KAR, ou=DL. In the latter case,
slaves have a specific search context or group containing users who can exclusively access the
slave server and store the data.
Ensure that each iFolder server has its own eDirectory replicas so that the authentication
happens locally instead of walking the eDirectory tree.
iFolder supports both secure and non-secure communication with the directory server. You can
choose any communication channel that you need. Ensure that the directory server is listening
on standard LDAP ports for secure and non-secure channels.

10.3 Deployment Scenarios

Consider the example of an organizational unit that has several smaller subgroups, with each
subgroup having different data storage and collaboration requirements. For example, one subgroup
has 100 users, and they all collaborate with each other every day. The storage requirement of this
subgroup is low because they collaborate regularly with each other.
In contrast, consider another subgroup with 200 users who are involved in financial transactions that
require their data to be maintained in a secure manner. The storage requirement of this subgroup
might be high, but the users in the group might not need to collaborate with each other.
48 Novell iFolder 3.8 Deployment Guide
15. If a multi-server setup is used for the virtual guests, see
23. If a cluster is set up on the virtual guest, see
, OpenLDAP, and Active Directory directory servers are supported.
TM
Chapter 2, "Single-Server Deployment,"
and Chapter 4, "Multi-Server (Master-Master)
31.
Chapter 3, "Multi-Server
Chapter 6, "Single-
to ensure
TM