User manual NOVELL IMANAGER 2.7.3 ADMINISTRATION

[. . . ] novdocx (en) 22 June 2009 AUTHORIZED DOCUMENTATION Administration Guide Novell® 2. 7. 3 iManager September 30, 2009 www. novell. com Novell iManager 2. 7. 3 Administration Guide novdocx (en) 22 June 2009 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. [. . . ] Assign Rights: Instructs eDirectory to automatically grant the member rights necessary to perform the assigned role. When not selected, the member is assigned the role but might not have rights to perform all tasks associated with the role. The member's rights assignments are handled separately. Inheritable: Select subtree to indicate that the member's scope includes all sub-containers in the specified context. Select base object to indicate that the member can perform the role only in the specified container. Configuring and Customizing iManager 59 novdocx (en) 22 June 2009 NOTE: If a user is a collection owner, and has a member association set, then he/she can manage all the RBS objects within the defined scope. For a list of RBS objects in eDirectory and their description, see Section 6. 1. 1, "RBS Objects in eDirectory, " on page 54. Assign a Category To add a category assignment to an existing role: 1 In the Role tab, select the role, then select Actions > Category Assignment. 2 Select a category, then click the right-arrow to assign it to the role. Add a Description to a Role To add a description to an existing role: 1 In the Role tab, select the role and click Actions > Description. 2 Specify the description in the text box, then click OK. 6. 2. 2 The Task Tab A task is a plug-in that performs a distinct management function, such as creating a user or setting a password. iManager lists the tasks by group in the navigation area on the left side of the window. The RBS Collection Task tab lets you do the following operations: "Creating a New Task" on page 60 "Deleting a Task" on page 60 "Editing the Role Assignment of a Task" on page 61 "Adding a Description to a Task" on page 61 Creating a New Task To create a new task: 1 In the Task tab, select New > iManager Task. 2 Complete the steps in the Create iManager Task Wizard. The wizard steps you through providing the necessary detail about the new task you are creating. For information on creating tasks in the Plug-in Studio, see "Creating a New Task from Plug-In Studio" on page 65. Deleting a Task To delete an existing task: 1 In the Task tab, select the task, then select Delete. 60 Novell iManager 2. 7. 3 Administration Guide novdocx (en) 22 June 2009 A message appears: This operation will delete all of the selected tasks. Editing the Role Assignment of a Task To edit the list of roles to which a task is assigned: 1 In the Task tab, select the task, then select Actions > Role Assignment. 2 On the Edit Role Assignment page, add or remove roles from the Assigned Roles field, then click OK. Adding a Description to a Task To add a description to an existing task: 1 In the Task tab, select the task, then select Actions > Description. 2 Specify the description in the text box, then click OK. 6. 2. 3 The Property Book Tab A property book displays the attributes of a specific object type that you can modify. These properties are of an object or set of objects of the same type. Property books can be assigned to roles and appear in the list of tasks for a role. [. . . ] This sets Authenticate. Form. HideLoginFailReason=true in iManager's config. xml file. Additionally, iManager 2. 7 does not support the asterisk (*) character as a wildcard in the Username field. This prevents unauthorized users from discovering valid usernames. It also prevents possible denial-of-service attacks that attempt to overload the eDirectory server by continually attempting a login using only the wildcard (*), which forces eDirectory to search for and return all matching usernames. A. 5 Tomcat Settings Because iManager makes use of Tomcat Servlet Container, iManager administrators should be aware of the encryption-related configuration options of those resources as part of their overall security strategy. [. . . ]