User manual NOVELL CONSOLE ONE 1.3.X

[. . . ] ConsoleOne 1. 3. x User Guide novdocx (en) 6 April 2007 Novell ® ConsoleOne 1. 3. x USER GUIDE September 27, 2007 www. novell. com novdocx (en) 6 April 2007 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. [. . . ] You can also explicitly grant a user security equivalence to any eDirectory object. NOTE: The tasks in this section allow you to delegate administrative authority through eDirectory rights. If you have administration applications that use RBS roles, you can also delegate administrative authority by assigning users membership in those roles as explained in Section 5. 3, "Assigning RBS Role Membership and Scope, " on page 60. In This Section "Granting Security Equivalence by Membership" on page 52 "Granting Security Equivalence Explicitly" on page 52 "Setting Up an Administrator Over an Object's Specific eDirectory Properties" on page 53 4. 2. 1 Granting Security Equivalence by Membership 1 If you haven't already done so, create the group or role object that you want the users to be security equivalent to. See Section 2. 2, "Creating and Manipulating Objects, " on page 32 for details. 2 Grant the group or role the eDirectory and NetWare rights that you want the users to have. See Section 4. 1, "Assigning Rights Explicitly, " on page 49 for details. 3 Edit the membership of the group or role to include those users who need the rights of the group or role. For a group object, use the Members property page. For an organizational role object, use the Occupant field on the Identification property page. For an RBS role object, use the Members of Role property page. See Section 5. 3, "Assigning RBS Role Membership and Scope, " on page 60 for details. 4 Click OK. 4. 2. 2 Granting Security Equivalence Explicitly 1 Right-click either the user or the object that you want the user to be security equivalent to > click Properties. 2 Grant the security equivalence as follows: If you chose the user, on the Memberships tab select the Security Equal To page > click Add > select the object that you want the user to be security equivalent to > click OK. 52 ConsoleOne 1. 3. x User Guide novdocx (en) 6 April 2007 If you chose the object that you want the user to be security equivalent to, on the Security Equal to Me page click Add > select the user > click OK. The contents of these two property pages are synchronized by the system. 3 Click OK. 4. 2. 3 Setting Up an Administrator Over an Object's Specific eDirectory Properties 1 If you haven't already done so, create the user, group, role, or container object that you want to make a trustee of the object's specific properties. If you create a container as a trustee, all objects inside and below the container will have the rights you grant. You must make the property inheritable or the container and its members will not have rights below its level. 2 Right-click the highest-level container that you want the administrator to manage > click Trustees of This Object. 3 On the property page, click Add Trustee > select the object that represents the administrator > click OK. 4 In the Rights Assigned To dialog box, click Add Property. 5 Deselect the Show All Properties check box. [. . . ] The workaround to this problem is to configure Windows, in the Display Control Panel, to not hide keyboard navigation indicators. 10. 14 Creating Objects Using ALT+255 Displays a Question Mark (?) Character in ConsoleOne 1. 3. 6 When you create an application object using a ASCII ALT+255 character, it gets displayed as a "?" instead of a " ". Therefore, this is wrongly displayed when the application objects are sorted in the reverse-alphabetical order in the NAL Application Explorer Folder on the Desktop. To work around this issue, use an ALT+226 character instead of ALT+255. 10. 15 Login Fails from Windows Workstation When you create a user object and then create a password that contains extended characters, the loging fails from a Windows workstation. To resolve this issue, do not use extended characters in the password. 10. 16 Role Based Services Saves the Page Even if You Cancel the Property Book If you add a role and define the scope for it and then do other operations, you need to delete the role before you exit from the properties page. [. . . ]