User manual NOVELL EDIRECTORY 8.8 SP2 ADMINISTRATION

[. . . ] Novell eDirectory 8. 8 Administration Guide novdocx (en) 6 April 2007 Novell eDirectory 8. 8 SP2 October 12, 2007 TM www. novell. com ADMINISTRATION GUIDE novdocx (en) 6 April 2007 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. [. . . ] Login is not allowed during the current time block. Account has been deleted. ExpirationInterval (Output Only, Type INTEGER) The expiration interval that should be assigned to this connection. Value Description <0, 0 >0 Use the default expiration interval (default). Expiration interval to be assigned to this connection. CheckEachNewOpenConnection (Output Only, Type INTEGER) Value Description 0 1 2 Return Success without calling WAN Traffic Manager, allowing the connection to proceed normally (default). Call WAN Traffic Manager and let the policies decide whether to allow the connection. Return ERR_CONNECTION_DENIED without calling WAN Traffic Manager, causing the connection to fail. CheckEachAlreadyOpenConnection (Output Only, Type INTEGER) 296 Novell eDirectory 8. 8 Administration Guide novdocx (en) 6 April 2007 Value Description 0 1 2 Return Success without calling WAN Traffic Manager, allowing the connection to proceed normally (default). Call WAN Traffic Manager and let the policies decide whether to allow the connection. Return ERR_CONNECTION_DENIED without calling WAN Traffic Manager, causing the connection to fail. Sample NDS_CHECK_LOGIN_RESTRICTION_OPEN NDS_CHECK_LOGIN_RESTRICTION_OPEN is only used if either CheckEachNewOpenConnection or CheckEachAlreadyOpenConnection was set to 1 during the corresponding NDS_CHECK_LOGIN_RESTRICTIONS query. This query is generated whenever CheckEachNewOpenConnection is 1 and eDirectory needs to Open a new connection before running Limber. Open a new connection before checking the login restriction. The following variables are provided: Version (Input Only, Type INTEGER) The version of eDirectory. ExpirationInterval (Input and Output, Type INTEGER) Value Description <0, 0 >0 Use the default expiration interval (default). Expiration interval to be assigned to this connection. ConnectionIsAlreadyOpen (Input Only, Type BOOLEAN) Value Description TRUE FALSE eDirectory determines that it already has a connection to this address and can reuse that connection. eDirectory does not have a connection to this address and must create one. ConnectionLastUsed (Input Only, Type TIME) If ConnectionIsAlreadyOpen is TRUE, then ConnectionLastUsed is the last time that a packet was sent from eDirectory using this connection. Otherwise, it will be 0. WAN Traffic Manager 297 novdocx (en) 6 April 2007 Value Description TRUE FALSE ConnectionLastUsed is the time that eDirectory last sent a packet on this connection. ConnectionLastUsed will be 0. Sample NDS_JANITOR Before eDirectory runs the janitor, it queries WAN Traffic Manager to see if this is an acceptable time for this activity. The NDS_JANITOR does not have a destination address; it requires a NO_ADDRESSES policy. If WAN Traffic Manager returns DONT_SEND, janitor work is put off and rescheduled. The following variables are provided: Last (Input Only, Type TIME) The time of the last round of janitor work since eDirectory started. When eDirectory starts, Last is initialized to 0. If NDS_JANITOR returns SEND, Last is set to the current time after eDirectory finishes the janitor. Version (Input Only, Type INTEGER) The version of eDirectory. ExpirationInterval (Output Only, Type INTEGER) The expiration interval for all connections created while running the Janitor. Value Description <0, 0 >0 Use the default expiration interval (default). [. . . ] The principal name must be in the format principalname@REALMNAME. To delete the foreign principal name, select the name and then click Delete 5 Click OK. E. 4 Creating a Login Sequence For information on creating a login sequence, refer to the Managing Login Sequences section in the NMAS 3. 0 Administration Guide (http://www. novell. com/documentation/beta/nmas30/ index. html?page=/documentation/beta/nmas30/admin/data/a49tuwk. html#a4). E. 5 How Does LDAP Use SASL-GSSAPI? Once you have configured SASL-GSSAPI, it is added along with the other SASL methods to the supportedSASLMechanisms attribute in rootDSE. The LDAP server queries SASL for the installed mechanisms when it gets its configuration, and automatically supports whatever is installed. The LDAP server also reports the current supported SASL mechanisms in its rootDSE by using the supportedSASLMechanisms attribute. [. . . ]