Novell IFOLDER 3.7 - SECURITY ADMINISTRATION Mode d’emploi

Novell®

www.novell.com

novdocx (en) 13 May 2009

AUTHORIZED DOCUMENTATION

OES 2 SP1: Novell iFolder 3.7 Administration Guide

iFolder

3.7

December 2008

Administration Guide

novdocx (en) 13 May 2009

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on

the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.

You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. Please

refer to the Novell International Trade Services Web Page (http://www.novell.com/info/exports/) for more

information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary

export approvals.

document under the terms of the GNU Free Documentation License (GFDL), Version 1.2 or any later version,

published by the Free Software Foundation with no Invariant Sections, no Front-Cover Texts, and no Back-Cover

Texts. A copy of the GFDL can be found at the GNU Free Documentation Licence (http://www.fsf.org/licenses/

fdl.html).

THIS DOCUMENT AND MODIFIED VERSIONS OF THIS DOCUMENT ARE PROVIDED UNDER THE

TERMS OF THE GNU FREE DOCUMENTATION LICENSE WITH THE FURTHER UNDERSTANDING THAT:

1. THE DOCUMENT IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTY OF ANY KIND, EITHER

EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, WARRANTIES THAT THE DOCUMENT

OR MODIFIED VERSION OF THE DOCUMENT IS FREE OF DEFECTS, MERCHANTABLE, FIT FOR A

PARTICULAR PURPOSE, OR NON-INFRINGING. THE ENTIRE RISK AS TO THE QUALITY, ACCURACY,

AND PERFORMANCE OF THE DOCUMENT OR MODIFIED VERSION OF THE DOCUMENT IS WITH

YOU. SHOULD ANY DOCUMENT OR MODIFIED VERSION PROVE DEFECTIVE IN ANY RESPECT, YOU

(NOT THE INITIAL WRITER, AUTHOR OR ANY CONTRIBUTOR) ASSUME THE COST OF ANY

NECESSARY SERVICING, REPAIR OR CORRECTION. THIS DISCLAIMER OF WARRANTY CONSTITUTES

AN ESSENTIAL PART OF THIS LICENSE. NO USE OF ANY DOCUMENT OR MODIFIED VERSION OF THE

DOCUMENT IS AUTHORIZED HEREUNDER EXCEPT UNDER THIS DISCLAIMER; AND

2. UNDER NO CIRCUMSTANCES AND UNDER NO LEGAL THEORY, WHETHER IN TORT (INCLUDING

NEGLIGENCE), CONTRACT, OR OTHERWISE, SHALL THE AUTHOR, INITIAL WRITER, ANY

CONTRIBUTOR, OR ANY DISTRIBUTOR OF THE DOCUMENT OR MODIFIED VERSION OF THE

DOCUMENT, OR ANY SUPPLIER OF ANY OF SUCH PARTIES, BE LIABLE TO ANY PERSON FOR ANY

DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY CHARACTER

INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF GOODWILL, WORK STOPPAGE,

COMPUTER FAILURE OR MALFUNCTION, OR ANY AND ALL OTHER DAMAGES OR LOSSES ARISING

OUT OF OR RELATING TO USE OF THE DOCUMENT AND MODIFIED VERSIONS OF THE DOCUMENT,

EVEN IF SUCH PARTY SHALL HAVE BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGES.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this

document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.

patents listed on the Novell Legal Patents Web Page (http://www.novell.com/company/legal/patents/) and one or

more additional patents or pending patent applications in the U.S. and in other countries.

novdocx (en) 13 May 2009

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the online documentation for this and other Novell products, and to get

updates, see The Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 13 May 2009

Novell Trademarks

For a list of Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/

legal/trademarks/tmlist.html)

Third-Party Materials

All third-party trademarks are the property of their respective owners.

Contents 5

Contents

novdocx (en) 13 May 2009

About This Guide 13

1 Overview of Novell iFolder 3.7 15

1.1 Benefits of iFolder for the Enterprise . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

1.1.1 Seamless Data Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

1.1.2 Data Safeguards and Data Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

1.1.3 Reliable Data Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

1.1.4 Encryption Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.1.5 Productive Mobile Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.1.6 Cross-Platform Client Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.1.7 Scalable Deployment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.1.8 Multi-Server Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.1.9 Multi-Volume Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.1.10 Enhanced Web Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.1.11 No Training Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.1.12 LDAPGroup Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.2 Benefits of iFolder for Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.3 Enterprise Server Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

1.4 Key Features of iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

1.4.1 iFolder Enterprise Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

1.4.2 Novell iFolder 3.7 Web Admin Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.3 iFolder Web Access Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.4 The iFolder Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.5 Multi Server Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.6 Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.7 Shared iFolders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.8 iFolder Access Rights . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

1.4.9 Account Setup for Enterprise Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

1.4.10 Access Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

1.4.11 File Synchronization and Data Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

1.4.12 Synchronization Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

1.4.13 iFolder Client APIs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

1.5 What’s Next . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

2 Planning iFolder Services 25

2.1 Security Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

2.2 Server Workload Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

2.3 Naming Conventions for Usernames and Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

2.3.1 LDAP Naming Requirement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

2.3.2 Length and Format Considerations for an LDAP Object . . . . . . . . . . . . . . . . . . . . . . 27

2.3.3 Multilingual Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

2.4 Admin User Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

2.4.1 iFolder Admin User and Equivalent Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

2.4.2 iFolder Proxy User . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

2.5 iFolder User Account Considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

2.5.1 Preventing the Propagation of Viruses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

2.5.2 Synchronizing User Accounts with LDAP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

2.5.3 Synchronizing LDAPGroup Accounts with LDAP . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

2.5.4 Setting Account Quotas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

6OES 2 SP1: Novell iFolder 3.7 Administration Guide

novdocx (en) 13 May 2009

2.6 iFolders Data and Synchronization Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

2.6.1 Naming Conventions for an iFolder and Its Folders and Files . . . . . . . . . . . . . . . . . . 31

2.6.2 Guidelines for File Types and Sizes to Be Synchronized . . . . . . . . . . . . . . . . . . . . . 32

2.7 Management Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

2.7.1 iFolder Configuration Plug-Ins for YaST . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

2.7.2 Novell iFolder Web Admin for Novell iManager 2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . 34

2.7.3 Web Access Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

2.7.4 Installing iFolder Clients Through Novell ZEN Works . . . . . . . . . . . . . . . . . . . . . . . . 34

3 What’s New 35

3.1 What’s New in Novell iFolder 3.7 (OES 2.0 SP1 Linux) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

3.2 What’s New in Novell iFolder 3.6 (OES 2.0 Linux). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

3.3 What’s New in Novell iFolder 3.2 (OES SP2 Linux). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

3.4 What’s New in Novell iFolder 3.1 (OES SP1 Linux). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

3.5 What’s New in Novell iFolder 3.0 (OES Linux). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

4 Comparing Novell iFolder 2.x and 3.7 39

4.1 Comparison of 2.xand 3.7 Server Features and Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . 39

4.2 Comparison of 2.xand 3.7 Client Features and Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . 42

4.3 Comparison of 2.xand 3.7 Web Access Features and Capabilities . . . . . . . . . . . . . . . . . . . . 45

5 Prerequisites and Guidelines 47

5.1 File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

5.2 Enterprise Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

5.2.1 Prerequisites for the Operating System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

5.2.2 Installation Guidelines for Using an NSS Volume to Store iFolder Data . . . . . . . . . . 48

5.2.3 Install Guidelines When Using a Linux POSIX Volume to Store iFolder Data . . . . . . 49

5.2.4 Install Guidelines for Other Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

5.2.5 Installing the OES 2.0 Linux SP1 Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

5.3 Novell eDirectory 8.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

5.4 Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

5.5 Novell iManager 2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

5.6 Mono 1.2.x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

5.7 Client Computers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

5.8 Web Browser . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

6 Installing and Configuring iFolder Services 53

6.1 Installing iFolder on an Existing OES 2 Linux SP1 Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

6.2 Deploying iFolder Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

6.2.1 Configuring the iFolder Enterprise Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

6.2.2 Configuring the iFolder Slave Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

6.2.3 Managing Server IP Change . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

6.3 Configuring the iFolder Web Access Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

6.3.1 Configuring Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

6.3.2 Configuring iFolder Web Access for iChain or AccessGateway . . . . . . . . . . . . . . . . 73

6.4 Configuring the iFolder Web Admin Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

6.4.1 Configuring Web Admin Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

6.4.2 Configuring iFolder Web Admin for iChain or AccessGateway . . . . . . . . . . . . . . . . . 75

6.5 Installing the Novell iFolder 3 Plug-In for iManager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

6.5.1 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

6.5.2 Installing a Plug-In When RBS Is Not Configured . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Contents 7

novdocx (en) 13 May 2009

6.5.3 Installing a Plug-In When RBS Is Configured . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

6.6 Recovery Agent Certificates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

6.6.1 Understanding Digital Certification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

6.6.2 Creating a YaST-based CA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

6.6.3 Creating Self-Signed Certificates Using YaST . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

6.6.4 Exporting Self-Signed Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

6.6.5 Exporting Self-Signed Private Key Certificates For Key Recovery . . . . . . . . . . . . . . 84

6.6.6 Using KeyRecovery to Recover the Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

6.6.7 Managing Certificate Change . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

6.7 Accessing iManager and the Novell iFolder Web Admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

6.8 Provisioning Users, Groups and iFolder Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

6.8.1 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

6.9 Distributing the iFolder Client to Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

6.9.1 Accessing the OES 2 Linux Welcome Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

6.9.2 Downloading the iFolder Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

6.9.3 Installing the iFolder Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

6.10 Using a Response File to Automatically Create iFolder Accounts . . . . . . . . . . . . . . . . . . . . . . 91

6.10.1 Response Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

6.10.2 Using a Response File to Deploying the iFolder Client . . . . . . . . . . . . . . . . . . . . . . . 94

6.11 Updating Novell iFolder 3.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

6.12 Updating Mono for the Server and Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

6.13 Uninstalling the iFolder 3.7 Enterprise Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

6.14 What’s Next . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

7 Migrating iFolder Services 99

8 Running Novell iFolder in a Virtualized Environment 101

8.1 What’s Next . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

9 Managing an iFolder Enterprise Server 103

9.1 Starting iFolder Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

9.2 Stopping iFolder Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

9.3 Restarting iFolder Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

9.4 Managing the Simias Log and Simias Access Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

9.5 Backing Up the iFolder Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

9.6 Recovering from a Catastrophic Loss of the iFolder Server. . . . . . . . . . . . . . . . . . . . . . . . . . 106

9.7 Using TSAIF to Back Up and Restore the iFolder Store . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

9.7.1 Understanding TSAIF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

9.7.2 Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

9.7.3 iFolder Path Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

9.7.4 iFolder Path Examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

9.7.5 SMSConfig Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

9.7.6 TSAIF and SMSConfig Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

9.7.7 NBackup Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

9.7.8 TSAIF and NBackup Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112

9.7.9 Additional Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

9.8 Recovering iFolder Data from File System Backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

9.8.1 Recovering a Regular iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

9.8.2 Recovering Files and Directories from an Encrypted iFolder. . . . . . . . . . . . . . . . . . 115

9.9 Moving iFolder Data from One iFolder Server to Another . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

9.10 Changing The IP Address For iFolder Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

9.11 Securing Enterprise Server Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

9.11.1 Using SSL for Secure Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118

8OES 2 SP1: Novell iFolder 3.7 Administration Guide

novdocx (en) 13 May 2009

9.11.2 Configuring the SSL Cipher Suites for the Apache Server . . . . . . . . . . . . . . . . . . . 118

9.11.3 Configuring the Enterprise Server for SSL Communications with the LDAP Server 119

9.11.4 Configuring the Enterprise Server for SSL Communications with the iFolder Client 119

9.11.5 Configuring the Enterprise Server for SSL Communications with the Web Access

Server and Web Admin Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

9.11.6 Configuring an SSL Certificate for the Enterprise Server . . . . . . . . . . . . . . . . . . . . 120

10 Managing iFolder Services via Web Admin 121

10.1 Accessing the Novell iFolder Web Admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

10.2 Connecting to the iFolder Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122

10.3 Accessing iFolder Web Admin Via OES 2 SP1 Welcome Page . . . . . . . . . . . . . . . . . . . . . . 123

10.4 Managing Web Admin Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

10.5 Managing the iFolder System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

10.5.1 Viewing and Modifying iFolder System Information . . . . . . . . . . . . . . . . . . . . . . . . . 125

10.5.2 Viewing Reprovisioning Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126

10.5.3 Configuring iFolder Administrators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127

10.5.4 Configuring System Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128

10.6 Managing iFolder Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

10.6.1 Searching For Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

10.7 Securing Web Admin Server Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

10.7.1 Using SSL for Secure Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

10.7.2 Configuring the SSL Cipher Suites for the Apache Server . . . . . . . . . . . . . . . . . . . 138

10.7.3 Configuring the Web Admin Server for SSL Communications with the Enterprise

Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

10.7.4 Configuring the Web Admin Server for SSL Communications with Web Browsers. 139

10.7.5 Configuring an SSL Certificate for the Web Admin Server . . . . . . . . . . . . . . . . . . . 140

11 Managing iFolder Users 141

11.1 Provisioning / Reprovisioning Users and LDAP Groups for iFolder . . . . . . . . . . . . . . . . . . . . 141

11.1.1 Automatic Provisioning Through the LDAP Attribute . . . . . . . . . . . . . . . . . . . . . . . . 141

11.1.2 Manual Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

11.1.3 Manual Reprovisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

11.1.4 Round-Robin Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

11.2 Searching for a User Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143

11.3 Accessing And Viewing General User Account Information. . . . . . . . . . . . . . . . . . . . . . . . . . 143

11.3.1 Enabling or Disabling an iFolder For an User Account . . . . . . . . . . . . . . . . . . . . . . 144

11.3.2 Deleting An iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144

11.4 Configuring User Account Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

11.4.1 Viewing the Current User Account Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

11.4.2 Modifying User Account Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146

11.5 Enabling and Disabling iFolder User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

12 Managing iFolders 149

12.1 Viewing Details And Configuring Policies for an iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

12.1.1 Accessing the iFolders Details Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

12.1.2 Viewing The iFolder Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

12.1.3 Searching for an iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150

12.1.4 Managing iFolder Members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151

12.1.5 Managing an iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151

12.1.6 Managing iFolder Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

12.1.7 Enabling and Disabling an iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155

Contents 9

novdocx (en) 13 May 2009

13 Managing an iFolder Web Access Server 157

13.1 Starting iFolder Web Access Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

13.2 Stopping iFolder Web Access Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

13.3 Distributing the Web Access Server URL to Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

13.4 Configuring the HTTP Runtime Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

13.5 Securing Web Access Server Communications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

13.5.1 Using SSL for Secure Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

13.5.2 Configuring the SSL Cipher Suites for the Apache Server . . . . . . . . . . . . . . . . . . . 159

13.5.3 Configuring the Web Access Server for SSL Communications with the Enterprise

Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160

13.5.4 Configuring the Web Access Server for SSL Communications with Web Browsers 161

13.5.5 Configuring an SSL Certificate for the Web Access Server. . . . . . . . . . . . . . . . . . . 161

A Troubleshooting Tips For Novell iFolder 3.7 163

A.1 Web Admin Console Fails to Start Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163

A.2 Login to the Web Consoles Fails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

A.3 Mono Crashes in OES2 SP1 64-bit Server Running on XEN . . . . . . . . . . . . . . . . . . . . . . . . 164

A.4 Full Restore of Backed-Up Files Fails in iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

A.5 Enabling a Large Number of Users at the Same Time Times Out . . . . . . . . . . . . . . . . . . . . . 164

A.6 Changes Are Not Reflected After Identity Sync Interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

A.7 Synchronizing a Large Number of Files Randomly Requires Multiple Sync Cycles . . . . . . . 165

A.8 iFolder Data Does Not Sync and Cannot be Removed from the Server . . . . . . . . . . . . . . . . 165

A.9 Samba Connection to the Remote Windows Host Times out . . . . . . . . . . . . . . . . . . . . . . . . 165

A.10 Exception Error while Configuring iFolder on a Samba Volume . . . . . . . . . . . . . . . . . . . . . . 165

A.11 Giving Slash (/) at the End of the Default iFolder Path Creates Corrupted iFolder . . . . . . . . 165

A.12 LDAP Users Are Not Reflected in iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165

A.13 Directory Access Exception on Creating or Synchronizing iFolders . . . . . . . . . . . . . . . . . . . 166

A.14 Changing Permission to the Full Path Fails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

A.15 iManager Single Sign-on Fails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

A.16 List of Items Fails to Synchronize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

A.17 Access Permission Error While Logging in Through Web Access . . . . . . . . . . . . . . . . . . . . . 166

A.18 iFolder Upgrade From OES 1 SP2 to OES 2 Fails. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

A.19 Web Admin and Web Access Show a Blank Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

B Caveats for Implementing iFolder 3.7 Services 169

B.1 Loading Certificates to the Recovery Agent Path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169

B.2 Using Novell iFolder Server to Serve Large Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169

B.3 Deployment in an Active Directory Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

B.4 Using a Single Proxy User for a Multi-Server Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

B.5 Slave Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

B.6 LDAP SSL Certificate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

B.7 Novell iFolder Admin User . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

B.8 Novell iFolder with iChain and the Access Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171

C Clustering iFolder 3.7 Servers with Novell Cluster Services for Linux 173

C.1 Prerequisites for Clustering iFolder 3.7 Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173

C.2 Installing Novell Cluster Services for Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173

C.3 Configuring iFolder 3.7 Servers on a NCS for Linux Cluster . . . . . . . . . . . . . . . . . . . . . . . . . 174

C.4 Creating the iFolder 3.7 Cluster Resource. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175

10 OES 2 SP1: Novell iFolder 3.7 Administration Guide

novdocx (en) 13 May 2009

C.5 Managing the iFolder 3.7 Cluster Resource. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

C.6 Sample Load Scripts for iFolder 3.7 Clusters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

C.6.1 Linux POSIX File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

C.6.2 NSS File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177

C.7 Sample Unload Scripts for iFolder 3.7 Clusters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177

C.7.1 Linux POSIX File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178

C.7.2 NSS File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178

C.7.3 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179

C.8 Sample Monitor Scripts for iFolder 3.7 Clusters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180

C.8.1 Linux POSIX File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180

C.8.2 NSS File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181

D Decommissioning a Slave Server 183

E Configuration Files 185

E.1 Simias.config File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185

E.2 Web.config File for the Enterprise Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186

E.3 Web.config File for the Web Admin Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188

E.4 Web.config File for the Web Access Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192

F Managing SSL Certificates for Apache 197

F.1 Generating an SSL Certificate for the Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197

F.2 Generating a Self-Signed SSL Certificate for Testing Purposes . . . . . . . . . . . . . . . . . . . . . . 198

F.3 Configuring Apache to Point to an SSL Certificate on an iFolder Server . . . . . . . . . . . . . . . . 198

F.4 Configuring Apache to Point to an SSL Certificate on a Shared Volume for an iFolder

Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199

F.5 Configuring Apache to Point to an SSL Certificate on a NSS Volume for an iFolder Cluster 200

G Frequently Asked Questions 203

G.1 iFolder 3.7 Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

G.1.1 Is iFolder 3.7 supported on a 64-bit OS?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

G.1.2 Is iFolder going to support non-eDirectory related platforms as an identity source? 203

G.1.3 Because iFolder is developed on Mono, can it be deployed in a Microsoft

environment? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

G.2 iFolder 3.7 Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

G.2.1 Is iFolder 3.7 supported on Windows Vista? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204

G.2.2 Is iFolder 3.7 supported on the Macintosh platform?. . . . . . . . . . . . . . . . . . . . . . . . 204

G.2.3 Can I use the iFolder 2.xclient to connect to an iFolder 3.7 server?. . . . . . . . . . . . 204

G.2.4 Can I use the iFolder 3.xclient to connect to the iFolder 3.7 server? . . . . . . . . . . . 204

G.2.5 Can I can use iFolder 3.7 on different operating systems on different workstations to

access and share the files? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204

G.2.6 There was a 10 MB file limitation using Web Access? Is it still applicable for iFolder

3.7? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

G.2.7 I deleted a file accidentally. Can I recover it? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

G.2.8 What are the migration scenarios recommended and supported by iFolder 3.7? . . 205

G.3 iFolder 3.7 Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

G.3.1 What is the management console for iFolder 3.7? . . . . . . . . . . . . . . . . . . . . . . . . . 205

G.3.2 What are the new features in the Web Admin console? . . . . . . . . . . . . . . . . . . . . . 205

G.3.3 Can the administrator control the ability to encrypt iFolder files? . . . . . . . . . . . . . . 206

G.3.4 Are there any enhancements for how bulk users are enabled for iFolder? . . . . . . . 206

G.3.5 Can the administrator control the ability to share files? . . . . . . . . . . . . . . . . . . . . . . 206

Autres manuels pour IFOLDER 3.7 - SECURITY ADMINISTRATION

Table des matières

Autres manuels Novell Logiciel

Novell

Novell LINUX ENTERPRISE SERVER 10 - ARCHITECTURE-SPECIFIC INFORMATION... Manuel

Novell

Novell DATA SYNCHRONIZER MOBILITY PACK - UPDATE 2 Manuel utilisateur

Novell

Novell LINUX ENTERPRISE DESKTOP 10 SP2 Manuel utilisateur

Novell

Novell GROUPWISE 8 - INTEROPERABILITY Manuel utilisateur

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... Guide rapide

Novell

Novell PLATESPIN ORCHESTRATE 2.0.2 - ADMINISTRATOR REFERENCE... Manuel de service

Novell

Novell CLIENT FOR LINUX 2.0 SP2 - 03-2009 Manuel utilisateur

Novell

Novell IMANAGER 2.7.3 - README 8-26-2010 Manuel utilisateur

Novell

Novell ACCESS MANAGER 3.1 SP2 - README 2010 Manuel utilisateur

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - COMMAND LINE UTILITIES REFERENCE 10.3... Manuel utilisateur

Novell

Novell IFOLDER 3.8 - CROSS-PLATFORM Manuel utilisateur

Novell

Novell EDIRECTORY 8.8 SP5 Manuel utilisateur

Novell

Novell ACCESS MANAGER 3.1 SP1 - ADMINISTRATION Manuel utilisateur

Novell

Novell XEN - ADMINISTRATION Manuel utilisateur

Novell

Novell CLIENT 1.0 FOR LINUX - README Manuel utilisateur

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... Guide rapide

Novell

Novell DATA SYNCHRONIZER - 07-2010 Manuel utilisateur

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - COMMAND LINE UTILITIES REFERENCE 10.3... Manuel utilisateur

Novell

Novell IDENTITY MANAGER ENTITLEMENTS SERVICE DRIVER 3.6.1 -... Manuel utilisateur

Novell

Novell IDENTITY MANAGER 3.6.1 Guide d'installation

Novell

Novell LINUX ENTERPRISE DESKTOP 11 Mode d’emploi

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - COMMAND LINE UTILITIES REFERENCE 10.3... Manuel technique

Novell

Novell PRODUCT NAME 10.3 - DEPLOYING ZENWORKS ON CITRIX SERVER BEST PRACTICES GUIDE... Manuel utilisateur

Novell

Novell PLATESPIN ORCHESTRATE 2.0.2 - ADMINISTRATOR REFERENCE... Manuel de service

Manuels Logiciel populaires d'autres marques

COMPRO

COMPRO COMPROFM Manuel utilisateur

Muratec

Muratec OFFICEBRIDGE ONLINE Manuel utilisateur

Oracle

Oracle Contact Center Anywhere 8.1 Manuel utilisateur

Adobe

Adobe 65007312 - Photoshop Lightroom Manuel

Avaya

Avaya NULL One-X for RIM Blackberry Manuel utilisateur

HP ProLiant BL420c Manuel utilisateur

PS Audio

PS Audio PowerPlay Manuel du propriétaire

Brady

Brady LOCKOUT PRO 3.0 Manuel de service

Avaya

Avaya Interaction Center Manuel utilisateur

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Manuel

Oracle

Oracle Application 9i Manuel utilisateur

Acer

Acer RDM Manuel utilisateur

Canon

Canon Vixia HF21 Manuel utilisateur

Canon

Canon ZR950 Manuel utilisateur

Samsung

Samsung Auto Backup Manuel utilisateur

Polycom

Polycom Vortex EF2201 Instructions d'installation et d'utilisation

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Manuel utilisateur

Lexmark

Lexmark Apps Manuel de service