Novell EDIRECTORY 8.8 - GUIDE 09-2006 User manual

Novell
www.novell.com
novdocx (ENU) 01 February 2006
Novell eDirectory 8.8 What's New Guide
eDirectoryTM
8.8
June 09, 2006
WHAT'S NEW GUIDE

novdocx (ENU) 01 February 2006
Legal Notices
Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities
on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export
laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses.
Please refer to www.novell.com/info/exports/ for more information on exporting Novell software. Novell assumes no
responsibility for your failure to obtain any necessary export approvals.
Copyright © 2005-2006 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.
patents listed at http://www.novell.com/company/legal/patents/ and one or more additional patents or pending patent
applications in the U.S. and in other countries.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the online documentation for this and other Novell products, and to get
updates, see www.novell.com/documentation.

novdocx (ENU) 01 February 2006
Novell Trademarks
Client32 is a trademark of Novell, Inc.
eDirectory is a trademark of Novell, Inc.
NetWare is a registered trademark of Novell, Inc., in the United States and other countries.
NetWare Core Protocol and NCP are trademarks of Novell, Inc.
NMAS is a trademark of Novell, Inc.
Novell is a registered trademark of Novell, Inc., in the United States and other countries.
Novell Client is a trademark of Novell, Inc.
Novell Directory Services and NDS are registered trademarks of Novell, Inc., in the United States and other
countries.
Ximiam is a registerd trademark of Novell, Inc., in the United States and other countries.
ZENworks is a registered trademark of Novell, Inc., in the United States and other countries.
Third-Party Materials
All third-party trademarks are the property of their respective owners.
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://
www.openssl.org).

novdocx (ENU) 01 February 2006

novdocx (ENU) 01 February 2006
5
About This Guide
Welcome to Novell®eDirectoryTM 8.8. This guide introduces you to the new features in this product.
eDirectory 8.8 provides a host of new features and enhancements to further strengthen eDirectory's
leadership in the directory market.
This guide introduces the following:
•Chapter 1, “Install and Upgrade Enhancements,” on page 7
•Chapter 2, “Multiple Instances,” on page 21
•Chapter 3, “Authentication to eDirectory through SASL-GSSAPI,” on page 29
•Chapter 4, “Enforcing Case-Sensitive Universal Passwords,” on page 33
•Chapter 5, “Priority Sync,” on page 41
•Chapter 6, “Data Encryption,” on page 43
•Chapter 7, “Bulkload Performance,” on page 47
•Chapter 8, “iManager ICE Plug-ins,” on page 49
•Chapter 9, “LDAP-Based Backup,” on page 53
•Chapter 10, “Managing Error Logging in eDirectory 8.8,” on page 55
•Chapter 11, “Offline Bulkload Utility: ldif2dib,” on page 65
•Chapter 12, “Miscellaneous,” on page 67
Audience
The guide is intended for network administrators.
Feedback
We want to hear your comments and suggestions about this manual and the other documentation
included with this product. Please use the User Comments feature at the bottom of each page of the
online documentation, or go to www.novell.com/documentation/feedback.html and enter your
comments there.
Documentation Updates
For the most recent version of this guide, see Novell eDirectory 8.8 What's New Guide (http://
www.novell.com/documentation/beta/edir88/edir88new/data/front.html).
Additional Documentation
For more information about eDirectory 8.8, refer to the following:
• Novell eDirectory 8.8 Installation Guide
• Novell eDirectory 8.8 Administration Guide
• Novell eDirectory 8.8 Troubleshooting Guide

6Novell eDirectory 8.8 What's New Guide
novdocx (ENU) 01 February 2006
These guides are available at Novell eDirectory 8.8 documentation Web site (http://
www.novell.com/documentation/edir88/index.html).
For information about the eDirectory management utility, refer to Novell iManager 2.5
Administration Guide (http://www.novell.com/documentation/imanager25/index.html).
Documentation Conventions
In this documentation, a greater-than symbol (>) is used to separate actions within a step and items
within a cross-reference path.
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
trademark.
When a single pathname can be written with a backslash for some platforms or a forward slash for
other platforms, the pathname is presented with a backslash. Users of platforms that require a
forward slash, such as Linux* and UNIX*, should use forward slashes as required by your software.

Install and Upgrade Enhancements
1
novdocx (ENU) 01 February 2006
7
1
Install and Upgrade
Enhancements
This chapter discusses the new features and enhancements with the Novell®eDirectoryTM 8.8
installation and upgrade.
The following table lists the new features and specifies the platforms they are supported on.
The following features are discussed in this chapter:
•Multiple Package Formats for Installing eDirectory 8.8 (page 8)
•Automatic Deployments (page 8)
•Installing and Configuring eDirectory Through YaST (page 10)
•Installing eDirectory 8.8 in a Custom Location (page 10)
•Nonroot Install (page 12)
•Standards Compliance (page 13)
•Server Health Checks (page 14)
•SecretStore Integration with eDirectory (page 19)
•Unattended Upgrade to eDirectory 8.8 SP1 on Netware (page 19)
Feature NetWare Linux UNIX Windows
Multiple package formats for installing eDirectory 8.8
Automatic deployment through Ximian®ZENworks®Linux
Management 2.2
Install and configure eDirectory through YaST
Custom location install for application files
Custom location install for data files
Custom location install for configuration files
Nonroot install
FHS compliance
LSB compliance
Server health checks
SecretStore integration

8Novell eDirectory 8.8 What's New Guide
novdocx (ENU) 01 February 2006
1.1 Multiple Package Formats for Installing
eDirectory 8.8
On Linux* and UNIX, you have an option to choose from various file formats while installing
eDirectory 8.8 on your host. The file formats are listed in the table below.
For more information on installing using tarballs, refer to the Novell eDirectory 8.8 Installation
Guide (http://www.novell.com/documentation/edir88/edirin88/data/a79kg0w.html#bs6a3gs).
1.2 Automatic Deployments
eDirectory 8.8 on Linux leverages ZENworks®Linux Management to provide easy upgrade
distribution and deployment. For more information, refer to ZENworks Linux Management (http://
www.novell.com/products/zenworks/linuxmanagement/index.html).
Type of User and
Installation Location Linux Solaris AIX HP-UX
Root user:
Default location RPM Package File-set Depot
Custom location Tarball Package and
tarball
Tarball Depot and tarball
Nonroot user:
Custom location Tarball Tarball Tarball Tarball

Install and Upgrade Enhancements 9
novdocx (ENU) 01 February 2006
1.2.1 Upgrade Distributions
With eDirectory 8.8, you can subscribe to a specific feature that eDirectory offers and whenever
there is an update (upgrade or patch) to this feature on the Novell site, you will automatically get this
update.
Figure 1-1 Upgrade Distributions
To facilitate this, you need to install the ZENworks Linux Management client on the host where
eDirectory 8.8 is present and subscribe to the ZENworks Linux Management server that would
inform you when there is an update.

10 Novell eDirectory 8.8 What's New Guide
novdocx (ENU) 01 February 2006
1.2.2 Easy Deployments
With eDirectory 8.8, you can install eDirectory on a host that has the ZENworks Linux Management
server installed and then roll it out to the other servers that have installed ZENworks Linux
Management clients.
Figure 1-2 eDirectory Distribution through RedCarpet
1.3 Installing and Configuring eDirectory
Through YaST
On SLES 9.1 or otherwise known as Open Enterprise Server (OES), you can install and configure
eDirectory 8.8 through YaST.
For more information on installing and configuring eDirectory through YaST, refer to the Novell
eDirectory 8.8 Installation Guide (http://www.novell.com/documentation/edir88/edirin88/data/
a79kg0w.html#bv1lxl8).
1.4 Installing eDirectory 8.8 in a Custom
Location
eDirectory 8.8 gives you the flexibility to install the application, data, and configuration files in a
location of your choice.
One of the scenarios for installing eDirectory 8.8 in a custom location is when you already have an
earlier version of eDirectory installed on your host and you want to test eDirectory 8.8 before
upgrading to it. This way, you can have your existing eDirectory setup undisturbed and also test this
new version. You can then decide whether you want to retain your existing version or want to
upgrade to eDirectory 8.8.