Novell Account Management 2.1 User manual

November 15, 2000
Novell Confidential
Account Management 2.1 Quick Start

Account Management Quick Start
160-000276-001
November 15, 2000
Novell Confidential
Manual Rev 99a28 22 June 00
Legal Notices
Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
This product may require export authorization from the U.S. Department of Commerce prior to exporting from the
U.S. or Canada.
Copyright © 2000 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
U.S. Patent Nos. 5,608,903; 5,671,414; 5,677,851; 5,758,344; 5,784,560; 5,794,232; 5,832,275; 5,832,483;
5,832,487; 5,864,865; 5,870,739; 5,873,079; 5,878,415; 5,884,304; 5,910,803; 5,913,025; 5,933,826; 5,946,467;
5,956,718; 5,956,745; 5,964,872; 5,983,234; 6,002,398; 6,016,499; 6,029,247. U.S. and Foreign Patents Pending.
Novell, Inc.
1800 South Novell Place
Provo, UT 84606
U.S.A.
www.novell.com
Account Management Quick Start
November 2000
160-000276-001
Online Documentation: To access the online documentation for this and other Novell products, and to get
updates, see www.novell.com/documentation.

Account Management Quick Start
160-000276-001
November 15, 2000
Novell Confidential
Manual Rev 99a28 22 June 00
Novell Trademarks
ConsoleOne is a trademark of Novell, Inc.
eDirectory is a trademark of Novell, Inc.
Internetwork Packet Exchange and IPX are trademarks of Novell, Inc.
NDS is a registered trademark of Novell, Inc. in the United States and other countries.
NDS Manager is a trademark of Novell, Inc.
NetWare is a registered trademark of Novell, Inc. in the United States and other countries.
Novell is a registered trademark of Novell, Inc. in the United States and other countries.
Novell Client is a trademark of Novell, Inc.
Novell Directory Services is a registered trademark of Novell, Inc in the United States and other countries.
Third-Party Trademarks
All third-party trademarks are the property of their respective owners.

Account Management Quick Start
160-000276-001
November 15, 2000
Novell Confidential
Manual Rev 99a28 22 June 00

Quick Start: right and left
160-000276-001
November 15, 2000
5
TABLE OF CONTENTS
QuickStart Rev 99a27 18 April 00
Account Management Overview. . . . . . . . . . . . . . . . . . . . . 7
NDS eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Supported Platforms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Account Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Supported Platforms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
More Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Installing or Upgrading NDS eDirectory on NetWare . . . . . . 9
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Forcing the Backlink Process to Run . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Installing NDS eDirectory on NetWare . . . . . . . . . . . . . . . . . . . . . . . . . 11
Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Updating the NDS Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Installing the Support Pack . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
Installing NDS eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Lost Trustee Assignments on NFS Gateway Volumes . . . . . . . . . . . . . . . 15
Installing or Upgrading NDS eDirectory on Windows
NT/2000 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Forcing the Backlink Process to Run . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Installing NDS eDirectory on Windows NT/2000 . . . . . . . . . . . . . . . . . . . . 18
Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Updating the NDS Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Installing NDS eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
Installing NDS eDirectory on Solaris . . . . . . . . . . . . . . . . . 23
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Forcing the Backlink Process to Run . . . . . . . . . . . . . . . . . . . . . . . . . . 24
Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Installing Account Management on Solaris . . . . . . . . . . . . . . . . . . . . . . . 26
Installing NDS eDirectory on Linux. . . . . . . . . . . . . . . . . . . 29
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Forcing the Backlink Process to Run . . . . . . . . . . . . . . . . . . . . . . . . . . 30

Quick Start: right and left
160-000276-001
November 15, 2000
6
TABLE OF CONTENTS
QuickStart Rev 99a27 18 April 00
Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30
Installing Account Management on Linux. . . . . . . . . . . . . . . . . . . . . . . . 31
Installing NDS eDirectory on Tru64 UNIX . . . . . . . . . . . . . . 35
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Hardware Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
Forcing the Backlink Process to Run . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
Installing Account Management on Tru64 UNIX . . . . . . . . . . . . . . . . . . . . 37
Installing Account Management on Windows NT . . . . . . . . 41
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Installing Account Management on Windows NT. . . . . . . . . . . . . . . . . . . . 41
Integrating Windows NT Domains with NDS . . . . . . . . . . . . . . . . . . . . 42
Installing ConsoleOne . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Upgrading from a Previous Version . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Installing Account Management on Solaris . . . . . . . . . . . . 45
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
Installing Account Management on Solaris . . . . . . . . . . . . . . . . . . . . . . . 45
Installing Account Management on Linux. . . . . . . . . . . . . . 49
System Requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Installing Account Management on Linux. . . . . . . . . . . . . . . . . . . . . . . . 49

160-000276-001
November 15, 2000
Novell Confidential
QuickStart Rev 99a29 22 June 00
VERSION 2.1
ACCOUNT MANAGEMENT
Account Management Overview
Account Management OverviewAccount Management Overview
Account Management Overview
Account Management is a full-service, platform-independent directory that serves as the
foundation for many directory-enabled services. Account Management is composed of
the following products:
!NDS®eDirectoryTM
!Account Management
NDS eDirectory
NDS eDirectory is a highly scalable, high-performing, secure directory service. It can
store and manage millions of directory objects. NDS eDirectory natively supports the
directory standard LDAP 3 over Secure Socket Layer (SSL).
SUPPORTED PLATFORMS
"NetWare®
"Windows* NT*
"Windows 2000
"Solaris*
"Linux*
"Tru64 UNIX*
Account Management
Account Management is a directory-enabled application that simplifies and unifies the
management of user profiles on Windows NT, Solaris, and Linux networks. It leverages all
the scalability, utility, and extensibility of NDS eDirectory and adds crucial integration
capability. With Account Management, you can eliminate many of the complexities of
administering a mixed-platform network while smoothing over compatibility issues.

8
160-000276-001
November 15, 2000
ACCOUNT MANAGEMENT
QuickStart Rev 99a29 22 June 00
SUPPORTED PLATFORMS
"Windows NT
"Solaris
"Linux
More Information
For more information on Account Management, refer to the following sources:
!Product information (http://www.novell.com/products/nds)
!Product support (http://support.novell.com)
!Online forums (news://forums.novell.com)
!Product catalog (http://www.novell.com/catalog)
!Product documentation (http://www.novell.com/documentation)

160-000276-001
November 15, 2000
Novell Confidential
QuickStart Rev 99a29 22 June 00
VERSION 2.1
ACCOUNT MANAGEMENT
Installing or Upgrading NDS
Installing or Upgrading NDSInstalling or Upgrading NDS
Installing or Upgrading NDS
eDirectory on NetWare
eDirectory on NetWareeDirectory on NetWare
eDirectory on NetWare
Use the following instructions to install or upgrade NDS®eDirectoryTM on a NetWare®
server.
NDS eDirectory for NetWare can co-exist with the following NDS versions:
!NetWare 4.11 or 4.2 with NDS 6.09 or later
!NetWare 5 Support Pack 5 or later with Pre-NDS 8 7.46 or later
!NetWare 5 Support Pack 5 or later with NDS 8.35 or later
!NetWare 5.1 Support Pack 1
!Windows* NT* 4.0 Support Pack 4 or Windows 2000 with eDirectory 8.38 or later
!NDS eDirectory 8.5 on NetWare, Solaris, Linux, and Tru64 UNIX*
System Requirements
"If you are using RCONSOLE, a ConsoleOneTM administrator workstation with the
following:
!A 200 MHz or faster processor
!A minimum of 64 MB RAM (128 MB recommended)
"The Novell®ClientTM that shipped with NetWare 5 or later.
"The Novell Cryptography Support Modules (Novell International Cryptographic
Infrastructure [NICI] 1.5.1 or later), available from the product CD or from the Novell
Cryptography Web site (http://www.novell.com/products/cryptography).
"Administrative rights to the NDS tree so that you can modify the schema.

10
160-000276-001
November 15, 2000
ACCOUNT MANAGEMENT
QuickStart Rev 99a29 22 June 00
Hardware Requirements
Hardware requirements depend on the specific implementation of NDS.
For example, a base installation of NDS eDirectory with the standard schema requires
about 74 MB of disk space for every 50,000 users. However, if you add a new set of
attributes or completely fill in every existing attribute, the object size grows. These
additions affect the disk space, processor, and memory needed.
Two factors increase performance: more cache memory and faster processors.
For best results, cache as much of the DIB Set as the hardware allows.
NDS scales well on a single processor. However, NDS eDirectory 8.5 takes advantage of
multiple processors. Adding processors improves performance in some areas, for
example, logins and having multiple threads active on multiple processors. NDS itself is
not processor-intensive, but it is I/O-intensive.
The following table illustrates typical system requirements for NDS eDirectory for
NetWare:
Requirements for processors might be greater than the table indicates, depending upon
additional services available on the computer as well as the number of authentications,
reads, and writes that the computer is handling. Processes such as encryption and
indexing can be processor-intensive.
Of course, faster processors improve performance. Additional memory also improves
performance because NDS can then cache more of the directory into memory.
Forcing the Backlink Process to Run
Because the internal NDS identifiers change when upgrading to NDS eDirectory, the
backlink process has to update backlinked objects for them to be consistent.
Objects Processor Memory Hard Disk
100,000 Pentium* III 450-700 MHz
(single)
384 MB 144 MB
1 million Pentium III 450-700 MHz
(dual)
2 GB 1.5 GB
10 million Pentium III 450-700 MHz (2 to
4)
2 GB + 15 GB