Novell OPEN ENTERPRISE SERVER 2 SP2 Installation Manual page 86

Page Parameter
eDirectory Configuration - New/Existing Tree Information
86 OES 2 SP2: Installation Guide
New or Existing Tree
New Tree: Creates a new tree.
Use this option if this is the first server to go into the tree or if this server requires a
separate tree. Keep in mind that this server will have the master replica for the new
tree, and that users must log into this new tree to access its resources.
Existing Tree: Incorporates this server into an existing eDirectory tree.
This server might not have a replica copied to it, depending on the tree configuration.
For details, see the "Guidelines for Replicating Your
Administration Guide.
Default: New Tree
eDirectory Tree Name: Specify a unique name for the eDirectory tree you want to create or
the name of the tree you want to install this server into.
Use eDirectory Certificates for HTTPS Services: Selecting this option causes
eDirectory to automatically back up the currently installed certificate and key files and
replace them with files created by the eDirectory Organizational CA (or Tree CA).
Most OES services that provide HTTPS connectivity are configured by default to use
the self-signed common server certificate created by YaST. Self-signed certificates
provide minimal security and limited trust, so you should consider using eDirectory
certificates instead.
For all server installations, this option is enabled by default and is recommended for
the increased security it provides.
To prevent third-party CA certificates from being accidentally backed up and
overwritten, deselect this option.
For more information on certificate management and this option, see "Security" in the
OES 2 SP2: Planning and Implementation
Require TLS for Simple Binds with Password: Select this option to make
connections encrypted in the Session layer.
Install SecretStore: Select this option to install Novell SecretStore
eDirectory-based security product.
IP Address of an Existing eDirectory Server with a Replica: Type the IP address of a
server with an eDirectory replica.
This option appears only if you are joining an existing tree.
NCP Port on the Existing Server: Type the NCP port used by the eDirectory server you
specified.
This option appears only if you are joining an existing tree.
Default: 524.
LDAP and Secure LDAP Ports on the Existing Server: Type the LDAP ports used by the
eDirectory server you specified.
This option appears only if you are joining an existing tree.
Default: 389 (LDAP), 636 (Secure LDAP)
Tree" in the Novell eDirectory 8.8
Guide.
®
(SS), an