Rbs - Novell IMANAGER 2.7.3 - ADMINISTRATION Administration Manual

By default, iManager connects with public access, requiring no specific credentials. You can specify
a user with specific credentials to do the search for the contextless lookup. The iManager public user
is used if you don't specify a user.
IMPORTANT: If you specify a public user, consider carefully the implications of password
expiration settings. If the password is set to expire for the public user, you do not have the
opportunity to change the password during login after it expires.
iManager Server Timeout Settings: If you want the iManager server to time out after a certain
period, specify the number of days, hours, and minutes in the respective fields, in the Authentication
page.
If you never want the server to time out, select the Never Timeout option.
Redirection After Logout: In the Authentication page, you have to enable this option if you want
to be redirected to a desired page after logging out of iManager. You have to specify the desired
URL in the URL: field. If you do not specify any URL, when you click Exit, you are logged out of
iManager. By default, the Login page is displayed.

6.4.7 RBS

Role-Based Services (RBS) assigns the rights within eDirectory to perform tasks. When you assign
a role to a user, by default RBS assigns the rights necessary to perform the tasks included with that
role.
The RBS tab lets you configure the following settings:
Enable Dynamic Groups: When selected, RBS allows dynamic groups to be members of a role.
For more information about dynamic groups, see the
www.novell.com/documentation/edir88/index.html?page=/documentation/edir88/edir88/data/
fbabihje.html#fbacjdfg).
Show Roles in Owned Collections: When selected, collection owners see all roles and tasks
whether they are members of them or not. Deselect this option to force collection owners to see only
their assigned roles.
Role Discovery Domain: Indicates where in the tree iManager is to search for roles that are
assigned to a member.
Parent, iManager searches for Dynamic Groups up to the parent container.
Partition, iManager searches for Dynamic Groups up to the first eDirectory partition.
Root, iManager searches for Dynamic Groups in the entire tree.
Dynamic Group Discovery Domain: Indicates where in the tree iManager is to search for
Dynamic Group membership. Role membership is then checked in the Dynamic Groups found.
Parent, iManager searches for roles in the user's parent container.
Partition, iManager searches for roles up to the first eDirectory partition.
Root, iManager searches for roles in the entire tree.
eDirectory Administration guide (http://
Configuring and Customizing iManager 75