User manual NOVELL EDIRECTORY 8.8 SP3 ADMINISTRATION

[. . . ] novdocx (en) 11 July 2008 AUTHORIZED DOCUMENTATION Administration Guide Novell® 8. 8 SP3 July 31, 2008 eDirectoryTM www. novell. com Novell eDirectory 8. 8 Administration Guide novdocx (en) 11 July 2008 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. [. . . ] Return ERR_CONNECTION_DENIED without calling WAN Traffic Manager, causing the connection to fail. CheckEachAlreadyOpenConnection (Output Only, Type INTEGER) Value Description 0 1 2 Return Success without calling WAN Traffic Manager, allowing the connection to proceed normally (default). Call WAN Traffic Manager and let the policies decide whether to allow the connection. Return ERR_CONNECTION_DENIED without calling WAN Traffic Manager, causing the connection to fail. Sample NDS_CHECK_LOGIN_RESTRICTION_OPEN NDS_CHECK_LOGIN_RESTRICTION_OPEN is only used if either CheckEachNewOpenConnection or CheckEachAlreadyOpenConnection was set to 1 during the corresponding NDS_CHECK_LOGIN_RESTRICTIONS query. This query is generated whenever CheckEachNewOpenConnection is 1 and eDirectory needs to Open a new connection before running Limber. Open a new connection before checking the login restriction. The following variables are provided: Version (Input Only, Type INTEGER) The version of eDirectory. ExpirationInterval (Input and Output, Type INTEGER) Value Description <0, 0 >0 Use the default expiration interval (default). Expiration interval to be assigned to this connection. ConnectionIsAlreadyOpen (Input Only, Type BOOLEAN) WAN Traffic Manager 303 novdocx (en) 11 July 2008 Value Description TRUE FALSE eDirectory determines that it already has a connection to this address and can reuse that connection. eDirectory does not have a connection to this address and must create one. ConnectionLastUsed (Input Only, Type TIME) If ConnectionIsAlreadyOpen is TRUE, then ConnectionLastUsed is the last time that a packet was sent from eDirectory using this connection. Otherwise, it will be 0. Value Description TRUE FALSE ConnectionLastUsed is the time that eDirectory last sent a packet on this connection. ConnectionLastUsed will be 0. Sample NDS_JANITOR Before eDirectory runs the janitor, it queries WAN Traffic Manager to see if this is an acceptable time for this activity. The NDS_JANITOR does not have a destination address; it requires a NO_ADDRESSES policy. If WAN Traffic Manager returns DONT_SEND, janitor work is put off and rescheduled. The following variables are provided: Last (Input Only, Type TIME) The time of the last round of janitor work since eDirectory started. When eDirectory starts, Last is initialized to 0. If NDS_JANITOR returns SEND, Last is set to the current time after eDirectory finishes the janitor. Version (Input Only, Type INTEGER) The version of eDirectory. ExpirationInterval (Output Only, Type INTEGER) The expiration interval for all connections created while running the Janitor. Value Description <0, 0 >0 Use the default expiration interval (default). Expiration interval to be assigned to this connection. Next (Output Only, Type TIME) Tells eDirectory when to schedule the next round of Janitor work. Value Description In the past, 0 Use the default scheduling. 304 Novell eDirectory 8. 8 Administration Guide novdocx (en) 11 July 2008 Value Description In the future Time when the janitor should be scheduled. CheckEachNewOpenConnection (Output Only, Type INTEGER) Tells eDirectory what to do if it needs to create a new connection while running the janitor. CheckEachNewOpenConnection is initialized to 0. Value Description 0 1 2 Return Success without calling WAN Traffic Manager, allowing the connection to proceed normally (default). Call WAN Traffic Manager and let the policies decide whether to allow the connection. Return ERR_CONNECTION_DENIED without calling WAN Traffic Manager, causing the connection to fail. CheckEachAlreadyOpenConnection (Output Only, Type INTEGER) Tells eDirectory what to do if it needs to reuse a connection it determines is already open while running the Janitor. [. . . ] 5 Click OK. E. 4 Creating a Login Sequence For information on creating a login sequence, refer to the Managing Login Sequences section in the NMAS 3. 0 Administration Guide (http://www. novell. com/documentation/beta/nmas30/ index. html?page=/documentation/beta/nmas30/admin/data/a49tuwk. html#a4). E. 5 How Does LDAP Use SASL-GSSAPI? Once you have configured SASL-GSSAPI, it is added along with the other SASL methods to the supportedSASLMechanisms attribute in rootDSE. The LDAP server queries SASL for the installed mechanisms when it gets its configuration, and automatically supports whatever is installed. The LDAP server also reports the current supported SASL mechanisms in its rootDSE by using the supportedSASLMechanisms attribute. Therefore, once you configure GSSAPI, it becomes the default mechanism. [. . . ]