Novell EBook Reader Mode d’emploi

Novell

www.novell.com

Manual 3/17/03103Novell Confidential 00front.fm last saved 4/14/03

Liberty Identity Provider

for Novell®eDirectoryTM

ADMINISTRATION GUIDE

Manual 3/17/03103Novell Confidential 00front.fm last saved 4/14/03

Legal Notices

Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express

or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to

make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties

of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software,

at any time, without any obligation to notify any person or entity of such changes.

You may not export or re-export this product in violation of any applicable laws or regulations including, without limitation, U.S. export regulations

or the laws of the country in which you reside. This product may require export authorization from the U.S. Department of Commerce prior to

exporting from the U.S. or Canada.

transmitted without the express written consent of the publisher.

Patents Pending.

Novell, Inc.

1800 South Novell Place

Provo, UT 84606

U.S.A.

www.novell.com

Liberty Identity Provider for Novell eDirectory

April 2003

Online Documentation: To access the online documentation for this and other Novell products, and to get updates, see

www.novell.com/documentation.

Manual 3/17/03103Novell Confidential 00front.fm last saved 4/14/03

Novell Trademarks

eDirectory is a trademark of Novell, Inc.

Novell is a registered trademark of Novell, Inc. in the United States and other countries.

Third-Party Trademarks

All third-party trademarks are the property of their respective owners.

Manual 3/17/03103Novell Confidential 00front.fm last saved 4/14/03

Contents 1

Manual 3/17/03103Novell Confidential libertyTOC.fm last saved 4/14/03

Contents

About This Guide 3

Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Documentation Conventions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Documentation Updates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

1Overview 5

Understanding the Liberty Alliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Liberty Alliance Architecture . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Understanding the Value of the Novell Liberty Identity Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Benefits of the Liberty Identity Provider for Novell eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Define a Liberty Alliance Identity Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Easily Create and Maintain User Identities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Define Liberty Identity and Service Provider Relationships . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Securely Authenticate Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6

Give Users Control to Federate and Defederate Their Identity Information. . . . . . . . . . . . . . . . . . . . . . . 7

Service Provider Sample Code . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

2Installing the Liberty Identity Provider 9

Product Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Liberty Identity Provider Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Liberty Server Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Installing Liberty Identity Provider Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Installing Liberty Identity Provider Software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Installing the Liberty Administration Plug-ins When iManager is Already Installed on Your eDirectory Server . . . . 19

Uninstalling the Liberty Identity Provider Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

3Creating a Liberty IDP Site 21

Creating a Liberty IDP Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1. Set Up a Liberty IDP Site . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

2. Define Site Properties . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

3. Define Service Providers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

4. Set Up Your Liberty Identity Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

5. Manage Your Federations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

4Configuring Your Liberty Identity Provider to Run in SSL Mode 29

Converting to Secure Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

Creating Certificates for Apache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Customizing Your Liberty IDP User Interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

AInstalling and Configuring a Sample Service Provider 33

Installing the Sample Service Provider Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

Configuring Your Service Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Adding Additional Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

Customizing Your Liberty SP User Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

2Liberty Identity Provider for Novell eDirectory

Novell Confidential libertyTOC.fm last saved 4/14/03 Manual Version: 3/17/03103

BModifying Apache 39

Modifying the Apache Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

Importing Trusted Roots. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

CTroubleshooting Your Liberty IDP Installation and Configuration 43

Troubleshooting Installation Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Reviewing Log Files Created During Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

Troubleshooting Post-Installation Issues . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

Reviewing Log Files Created After Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

Enabling Advanced Logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46

Basic Troubleshooting Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Troubleshooting Apache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Troubleshooting Tomcat . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

Troubleshooting iManager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

About This Guide 3

Manual (99a) 3/17/03103Novell Confidential 00prface.fm last saved 4/14/03

About This Guide

Introduction

The purpose of this documentation is to help you install, configure, and administer the Liberty

identity provider for Novell®eDirectoryTM infrastructure.

The audience for this documentation is network administrators.

This guide is divided into the following sections.

Chapter 1, “Overview,” on page 5 — An explanation of the benefits of the Liberty identity

provider and an overview of the components that make up the Liberty product.

Chapter 2, “Installing the Liberty Identity Provider,” on page 9 — Instructions for how to

install Liberty, including system requirements and software installation instructions.

Chapter 3, “Creating a Liberty IDP Site,” on page 21 — An explanation of the tasks you need

to complete in order to set up a basic Liberty infrastructure.

Chapter 4, “Configuring Your Liberty Identity Provider to Run in SSL Mode,” on page 29 —

Instructions for how to convert your Liberty identity provider to secure mode (SSL).

Appendix A, “Installing and Configuring a Sample Service Provider,” on page 33 — A guide

for how to set up your service provider, including instructions for installing a sample service

provider.

Appendix B, “Modifying Apache,” on page 39 — Information on how to modify your Apache

configuration, including configuration examples and information on how to import trusted

roots.

Appendix C, “Troubleshooting Your Liberty IDP Installation and Configuration,” on page 43

— Tips and tricks for troubleshooting your IDP installation and configuration issues.

Documentation Conventions

In Novell documentation, a greater-than symbol (>) is used to separate actions within a step and

items in a cross-reference path.

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party

trademark.

Documentation Updates

For the latest Liberty identity provider for Novell eDirectory documentation, including updates to

this administration guide, see the online documentation at the Novell documentation Web site

(http://www.novell.com/documentation).

4Liberty Identity Provider for Novell eDirectory

Novell Confidential 00prface.fm last saved 4/14/03 Manual Version: 3/17/03103

Overview 5

Manual (99a) 3/17/03103Novell Confidential 01overvw.fm last saved 4/14/03

1Overview

This section covers the following topics:

Understanding the Liberty Alliance

Liberty Alliance Architecture

Understanding the Value of the Novell Liberty Identity Provider

Benefits of the Liberty Identity Provider for Novell eDirectory

Service Provider Sample Code

Understanding the Liberty Alliance

The Liberty Alliance is a consortium of business leaders with a vision to enable a networked world

in which individuals and businesses can more easily conduct transactions while protecting the

privacy and security of vital identity information.

To accomplish its vision, the Liberty Alliance established an open standard for federated network

identity through open technical specifications.

In essence, this open standard is a structured version of the Security Assertions Markup Language,

commonly referred to as SAML, with the goal of accelerating the deployment of standard-based

single sign-on technology.

Liberty Alliance Architecture

The Liberty Alliance 1.1 specification has two main components: the Liberty identity provider

(Liberty IDP) and the identity consumer, referred to as a Liberty service provider (SP).

A Liberty IDP is the central credential store for a user's identity information, and it is the heart of

the user’s identity federations, or account linkage information. The Liberty IDP also serves as the

authentication authority, which is viewed as a trusted identity store by the Liberty SPs.

Liberty SPs are the Web sites that the user wants to connect to.

A "circle of trust" is formed between Liberty IDPs and SPs to provide the user a secure

infrastructure for controlling his or her identity information, and to facilitate Web single sign-on.

Understanding the Value of the Novell Liberty Identity Provider

When a user authenticates to a Liberty SP, he or she is given the option to federate his or her

identity with his or her preferred Liberty IDP. This process creates a unique link between the

Liberty IDP and SP identities.

6Liberty Identity Provider for Novell eDirectory

Novell Confidential 01overvw.fm last saved 4/14/03 Manual Version: 3/17/03103

The result of this link is realized on the user's next authentication to the Liberty SP. If he or she is

connected to his Liberty IDP, he or she will be authenticated to the Liberty SP with no user

interaction.

It is important to realize that it is the user who controls his or her identity federation. Thus, the user

is responsible for federation (linking) and defederation of his or her identity information.

Benefits of the Liberty Identity Provider for Novell eDirectory

Novell®eDirectoryTM is the most secure, high-performing, scalable Directory Service on the

market today, which are key requirements of a Liberty IDP identity store.

Using Liberty identity provider for Novell eDirectory software, you can accomplish the following:

Define a Liberty Alliance Identity Provider

Easily Create and Maintain User Identities

Define Liberty Identity and Service Provider Relationships

Securely Authenticate Users

Give Users Control to Federate and Defederate Their Identity Information

Define a Liberty Alliance Identity Provider

The Liberty identity provider for Novell eDirectory software delivers the technology to deploy a

Liberty Alliance 1.1 Identity Provider.

The “Liberty Server Requirements” on page 9 details the supported server platforms for the Novell

Liberty IDP. Once you have a supported server, and you have installed Novell eDirectory 8.7, you

are ready to install and configure the Liberty IDP technology.

Easily Create and Maintain User Identities

Novell's Web-based configuration tools allows the administrator to quickly define and maintain

user identities.

eDirectory 8.7 also provides the administrator with the option to import users using standard

LDAP format, or synchronize with an external user database by adding Novell DirXML®

technology.

Define Liberty Identity and Service Provider Relationships

Novell has designed the Liberty IDP and SP configuration screens to allow the administrator to

quickly define the necessary information to define Liberty identity and service providers.

Liberty SPs are also able to provide configuration information that can be imported directly into

the Liberty IDP service.

Securely Authenticate Users

Having a secure identity store is worthless if you allow users to authenticate in an insecure manner.

The Liberty Identity Provider for Novell eDirectory software provides administrators with the

ability to encrypt the user's credentials during the authentication process.

Table des matières

Autres manuels Novell Logiciel

Novell

Novell BUSINESS CONTINUITY CLUSTERING 1.1 SP2 -... Mode d’emploi

Novell

Novell ZENWORKS 10 ASSET MANAGEMENT SP3 - MIGRATION GUIDE 10.3... Manuel utilisateur

Novell

Novell GROUPWISE 8 - LINUX-MAC CLIENT Manuel utilisateur

Novell

Novell APPARMOR - AND Manuel utilisateur

Novell

Novell PLATESPIN ORCHESTRATE 2.0.2 - ADMINISTRATOR REFERENCE... Manuel utilisateur

Novell

Novell OPEN ENTERPRISE SERVER 2 SP2 -... Manuel utilisateur

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... Guide rapide

Novell

Novell IFOLDER 3.7 - SECURITY ADMINISTRATION Manuel utilisateur

Novell

Novell IDENTITY MANAGER 3.6. - INTEGRATION Guide de configuration rapide

Novell

Novell ZENWORKS HANDELD MANAGEMENT 7 SP1 IR4 Mode d’emploi

Novell

Novell EVOLUTION 2.6 Manuel utilisateur

Novell

Novell IDENTITY MANAGER ENTITLEMENTS SERVICE DRIVER 3.6.1 -... Manuel utilisateur

Novell

Novell ZENWORKS LINUX MANAGEMENT 7.2 IR2 - ADMINISTRATION GUIDE... Mode d’emploi

Novell

Novell LINUX ENTERPRISE SERVER 10 SP1 - ARCHITECTURE-SPECIFIC INFORMATION... Manuel

Novell

Novell SUPPORT ADVISOR 2.0.1 Mode d’emploi

Novell

Novell OPEN WORKGROUP SUITE SMALL BUSINESS EDITION 9.3 - ADMINISTRATION... Manuel utilisateur

Novell

Novell LINUX ENTERPRISE SERVER 11 - DEPLOYMENT Guide de référence rapide

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP2 Manuel utilisateur

Novell

Novell CLIENT FOR LINUX 2.0 Manuel utilisateur

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - COMMAND LINE UTILITIES REFERENCE 10.3... Manuel utilisateur

Novell

Novell GROUPWISE 8 - INTERNET AGENT Manuel utilisateur

Novell

Novell OPEN ENTERPRISE SERVER 2 SP2 - STORAGE SERVICES AUDITING CLIENT LOGGER UTILITY REFERENCE... Manuel de service

Novell

Novell GROUPWISE 7 - DATABASES Manuel utilisateur

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - PREBOOT SERVICES AND IMAGING REFERENCE 10.3... Manuel utilisateur

Manuels Logiciel populaires d'autres marques

COMPRO

COMPRO COMPROFM Manuel utilisateur

Muratec

Muratec OFFICEBRIDGE ONLINE Manuel utilisateur

Oracle

Oracle Contact Center Anywhere 8.1 Manuel utilisateur

Adobe

Adobe 65007312 - Photoshop Lightroom Manuel

Avaya

Avaya NULL One-X for RIM Blackberry Manuel utilisateur

HP ProLiant BL420c Manuel utilisateur

PS Audio

PS Audio PowerPlay Manuel du propriétaire

Brady

Brady LOCKOUT PRO 3.0 Manuel de service

Avaya

Avaya Interaction Center Manuel utilisateur

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuel

Oracle

Oracle Application 9i Manuel utilisateur

Acer

Acer RDM Manuel utilisateur

Canon

Canon Vixia HF21 Manuel utilisateur

Canon

Canon ZR950 Manuel utilisateur

Samsung

Samsung Auto Backup Manuel utilisateur

Polycom

Polycom Vortex EF2201 Instructions d'installation et d'utilisation

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuel utilisateur

Lexmark

Lexmark Apps Manuel de service

Novell eBook Reader Mode d’emploi

Manuels Logiciel populaires d'autres marques