Novell Ifolder 3.7 - security administration Instruction Manual

Novell®

www.novell.com

novdocx (en) 13 May 2009

AUTHORIZED DOCUMENTATION

OES 2 SP1: Novell iFolder 3.7 Administration Guide

iFolder

3.7

December 2008

Administration Guide

novdocx (en) 13 May 2009

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on

the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.

You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. Please

refer to the Novell International Trade Services Web Page (http://www.novell.com/info/exports/) for more

information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary

export approvals.

document under the terms of the GNU Free Documentation License (GFDL), Version 1.2 or any later version,

published by the Free Software Foundation with no Invariant Sections, no Front-Cover Texts, and no Back-Cover

Texts. A copy of the GFDL can be found at the GNU Free Documentation Licence (http://www.fsf.org/licenses/

fdl.html).

THIS DOCUMENT AND MODIFIED VERSIONS OF THIS DOCUMENT ARE PROVIDED UNDER THE

TERMS OF THE GNU FREE DOCUMENTATION LICENSE WITH THE FURTHER UNDERSTANDING THAT:

1. THE DOCUMENT IS PROVIDED ON AN "AS IS" BASIS, WITHOUT WARRANTY OF ANY KIND, EITHER

EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, WARRANTIES THAT THE DOCUMENT

OR MODIFIED VERSION OF THE DOCUMENT IS FREE OF DEFECTS, MERCHANTABLE, FIT FOR A

PARTICULAR PURPOSE, OR NON-INFRINGING. THE ENTIRE RISK AS TO THE QUALITY, ACCURACY,

AND PERFORMANCE OF THE DOCUMENT OR MODIFIED VERSION OF THE DOCUMENT IS WITH

YOU. SHOULD ANY DOCUMENT OR MODIFIED VERSION PROVE DEFECTIVE IN ANY RESPECT, YOU

(NOT THE INITIAL WRITER, AUTHOR OR ANY CONTRIBUTOR) ASSUME THE COST OF ANY

NECESSARY SERVICING, REPAIR OR CORRECTION. THIS DISCLAIMER OF WARRANTY CONSTITUTES

AN ESSENTIAL PART OF THIS LICENSE. NO USE OF ANY DOCUMENT OR MODIFIED VERSION OF THE

DOCUMENT IS AUTHORIZED HEREUNDER EXCEPT UNDER THIS DISCLAIMER; AND

2. UNDER NO CIRCUMSTANCES AND UNDER NO LEGAL THEORY, WHETHER IN TORT (INCLUDING

NEGLIGENCE), CONTRACT, OR OTHERWISE, SHALL THE AUTHOR, INITIAL WRITER, ANY

CONTRIBUTOR, OR ANY DISTRIBUTOR OF THE DOCUMENT OR MODIFIED VERSION OF THE

DOCUMENT, OR ANY SUPPLIER OF ANY OF SUCH PARTIES, BE LIABLE TO ANY PERSON FOR ANY

DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES OF ANY CHARACTER

INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF GOODWILL, WORK STOPPAGE,

COMPUTER FAILURE OR MALFUNCTION, OR ANY AND ALL OTHER DAMAGES OR LOSSES ARISING

OUT OF OR RELATING TO USE OF THE DOCUMENT AND MODIFIED VERSIONS OF THE DOCUMENT,

EVEN IF SUCH PARTY SHALL HAVE BEEN INFORMED OF THE POSSIBILITY OF SUCH DAMAGES.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this

document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.

patents listed on the Novell Legal Patents Web Page (http://www.novell.com/company/legal/patents/) and one or

more additional patents or pending patent applications in the U.S. and in other countries.

novdocx (en) 13 May 2009

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the online documentation for this and other Novell products, and to get

updates, see The Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 13 May 2009

Novell Trademarks

For a list of Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/

legal/trademarks/tmlist.html)

Third-Party Materials

All third-party trademarks are the property of their respective owners.

Contents 5

Contents

novdocx (en) 13 May 2009

About This Guide 13

1 Overview of Novell iFolder 3.7 15

1.1 Benefits of iFolder for the Enterprise . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

1.1.1 Seamless Data Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15

1.1.2 Data Safeguards and Data Recovery . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

1.1.3 Reliable Data Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

1.1.4 Encryption Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.1.5 Productive Mobile Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.1.6 Cross-Platform Client Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.1.7 Scalable Deployment. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.1.8 Multi-Server Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

1.1.9 Multi-Volume Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.1.10 Enhanced Web Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.1.11 No Training Requirements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.1.12 LDAPGroup Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.2 Benefits of iFolder for Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

1.3 Enterprise Server Sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

1.4 Key Features of iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

1.4.1 iFolder Enterprise Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20

1.4.2 Novell iFolder 3.7 Web Admin Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.3 iFolder Web Access Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.4 The iFolder Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.5 Multi Server Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.6 Encryption . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.7 Shared iFolders . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

1.4.8 iFolder Access Rights . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

1.4.9 Account Setup for Enterprise Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

1.4.10 Access Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

1.4.11 File Synchronization and Data Management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

1.4.12 Synchronization Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

1.4.13 iFolder Client APIs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

1.5 What’s Next . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

2 Planning iFolder Services 25

2.1 Security Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

2.2 Server Workload Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25

2.3 Naming Conventions for Usernames and Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

2.3.1 LDAP Naming Requirement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

2.3.2 Length and Format Considerations for an LDAP Object . . . . . . . . . . . . . . . . . . . . . . 27

2.3.3 Multilingual Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

2.4 Admin User Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

2.4.1 iFolder Admin User and Equivalent Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

2.4.2 iFolder Proxy User . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28

2.5 iFolder User Account Considerations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

2.5.1 Preventing the Propagation of Viruses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

2.5.2 Synchronizing User Accounts with LDAP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

2.5.3 Synchronizing LDAPGroup Accounts with LDAP . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

2.5.4 Setting Account Quotas . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

6OES 2 SP1: Novell iFolder 3.7 Administration Guide

novdocx (en) 13 May 2009

2.6 iFolders Data and Synchronization Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

2.6.1 Naming Conventions for an iFolder and Its Folders and Files . . . . . . . . . . . . . . . . . . 31

2.6.2 Guidelines for File Types and Sizes to Be Synchronized . . . . . . . . . . . . . . . . . . . . . 32

2.7 Management Tools . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

2.7.1 iFolder Configuration Plug-Ins for YaST . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

2.7.2 Novell iFolder Web Admin for Novell iManager 2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . 34

2.7.3 Web Access Configuration File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

2.7.4 Installing iFolder Clients Through Novell ZEN Works . . . . . . . . . . . . . . . . . . . . . . . . 34

3 What’s New 35

3.1 What’s New in Novell iFolder 3.7 (OES 2.0 SP1 Linux) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

3.2 What’s New in Novell iFolder 3.6 (OES 2.0 Linux). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35

3.3 What’s New in Novell iFolder 3.2 (OES SP2 Linux). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

3.4 What’s New in Novell iFolder 3.1 (OES SP1 Linux). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

3.5 What’s New in Novell iFolder 3.0 (OES Linux). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

4 Comparing Novell iFolder 2.x and 3.7 39

4.1 Comparison of 2.xand 3.7 Server Features and Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . 39

4.2 Comparison of 2.xand 3.7 Client Features and Capabilities . . . . . . . . . . . . . . . . . . . . . . . . . . 42

4.3 Comparison of 2.xand 3.7 Web Access Features and Capabilities . . . . . . . . . . . . . . . . . . . . 45

5 Prerequisites and Guidelines 47

5.1 File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

5.2 Enterprise Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

5.2.1 Prerequisites for the Operating System. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

5.2.2 Installation Guidelines for Using an NSS Volume to Store iFolder Data . . . . . . . . . . 48

5.2.3 Install Guidelines When Using a Linux POSIX Volume to Store iFolder Data . . . . . . 49

5.2.4 Install Guidelines for Other Components . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49

5.2.5 Installing the OES 2.0 Linux SP1 Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

5.3 Novell eDirectory 8.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

5.4 Active Directory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50

5.5 Novell iManager 2.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

5.6 Mono 1.2.x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

5.7 Client Computers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

5.8 Web Browser . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52

6 Installing and Configuring iFolder Services 53

6.1 Installing iFolder on an Existing OES 2 Linux SP1 Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

6.2 Deploying iFolder Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

6.2.1 Configuring the iFolder Enterprise Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

6.2.2 Configuring the iFolder Slave Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65

6.2.3 Managing Server IP Change . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

6.3 Configuring the iFolder Web Access Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

6.3.1 Configuring Web Access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

6.3.2 Configuring iFolder Web Access for iChain or AccessGateway . . . . . . . . . . . . . . . . 73

6.4 Configuring the iFolder Web Admin Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

6.4.1 Configuring Web Admin Console. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

6.4.2 Configuring iFolder Web Admin for iChain or AccessGateway . . . . . . . . . . . . . . . . . 75

6.5 Installing the Novell iFolder 3 Plug-In for iManager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

6.5.1 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

6.5.2 Installing a Plug-In When RBS Is Not Configured . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Contents 7

novdocx (en) 13 May 2009

6.5.3 Installing a Plug-In When RBS Is Configured . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

6.6 Recovery Agent Certificates. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

6.6.1 Understanding Digital Certification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

6.6.2 Creating a YaST-based CA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

6.6.3 Creating Self-Signed Certificates Using YaST . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

6.6.4 Exporting Self-Signed Certificates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

6.6.5 Exporting Self-Signed Private Key Certificates For Key Recovery . . . . . . . . . . . . . . 84

6.6.6 Using KeyRecovery to Recover the Data . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

6.6.7 Managing Certificate Change . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

6.7 Accessing iManager and the Novell iFolder Web Admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 86

6.8 Provisioning Users, Groups and iFolder Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

6.8.1 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 88

6.9 Distributing the iFolder Client to Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

6.9.1 Accessing the OES 2 Linux Welcome Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

6.9.2 Downloading the iFolder Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89

6.9.3 Installing the iFolder Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91

6.10 Using a Response File to Automatically Create iFolder Accounts . . . . . . . . . . . . . . . . . . . . . . 91

6.10.1 Response Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 92

6.10.2 Using a Response File to Deploying the iFolder Client . . . . . . . . . . . . . . . . . . . . . . . 94

6.11 Updating Novell iFolder 3.7 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95

6.12 Updating Mono for the Server and Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

6.13 Uninstalling the iFolder 3.7 Enterprise Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

6.14 What’s Next . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96

7 Migrating iFolder Services 99

8 Running Novell iFolder in a Virtualized Environment 101

8.1 What’s Next . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

9 Managing an iFolder Enterprise Server 103

9.1 Starting iFolder Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

9.2 Stopping iFolder Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

9.3 Restarting iFolder Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 103

9.4 Managing the Simias Log and Simias Access Log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 104

9.5 Backing Up the iFolder Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 105

9.6 Recovering from a Catastrophic Loss of the iFolder Server. . . . . . . . . . . . . . . . . . . . . . . . . . 106

9.7 Using TSAIF to Back Up and Restore the iFolder Store . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

9.7.1 Understanding TSAIF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 107

9.7.2 Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

9.7.3 iFolder Path Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 108

9.7.4 iFolder Path Examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

9.7.5 SMSConfig Options . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 110

9.7.6 TSAIF and SMSConfig Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

9.7.7 NBackup Options. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 111

9.7.8 TSAIF and NBackup Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 112

9.7.9 Additional Information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 113

9.8 Recovering iFolder Data from File System Backup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

9.8.1 Recovering a Regular iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 114

9.8.2 Recovering Files and Directories from an Encrypted iFolder. . . . . . . . . . . . . . . . . . 115

9.9 Moving iFolder Data from One iFolder Server to Another . . . . . . . . . . . . . . . . . . . . . . . . . . . 116

9.10 Changing The IP Address For iFolder Services. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

9.11 Securing Enterprise Server Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 117

9.11.1 Using SSL for Secure Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 118

8OES 2 SP1: Novell iFolder 3.7 Administration Guide

novdocx (en) 13 May 2009

9.11.2 Configuring the SSL Cipher Suites for the Apache Server . . . . . . . . . . . . . . . . . . . 118

9.11.3 Configuring the Enterprise Server for SSL Communications with the LDAP Server 119

9.11.4 Configuring the Enterprise Server for SSL Communications with the iFolder Client 119

9.11.5 Configuring the Enterprise Server for SSL Communications with the Web Access

Server and Web Admin Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 120

9.11.6 Configuring an SSL Certificate for the Enterprise Server . . . . . . . . . . . . . . . . . . . . 120

10 Managing iFolder Services via Web Admin 121

10.1 Accessing the Novell iFolder Web Admin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 121

10.2 Connecting to the iFolder Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 122

10.3 Accessing iFolder Web Admin Via OES 2 SP1 Welcome Page . . . . . . . . . . . . . . . . . . . . . . 123

10.4 Managing Web Admin Console . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 124

10.5 Managing the iFolder System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 125

10.5.1 Viewing and Modifying iFolder System Information . . . . . . . . . . . . . . . . . . . . . . . . . 125

10.5.2 Viewing Reprovisioning Status . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 126

10.5.3 Configuring iFolder Administrators . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 127

10.5.4 Configuring System Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 128

10.6 Managing iFolder Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

10.6.1 Searching For Servers. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 131

10.7 Securing Web Admin Server Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

10.7.1 Using SSL for Secure Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 137

10.7.2 Configuring the SSL Cipher Suites for the Apache Server . . . . . . . . . . . . . . . . . . . 138

10.7.3 Configuring the Web Admin Server for SSL Communications with the Enterprise

Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 138

10.7.4 Configuring the Web Admin Server for SSL Communications with Web Browsers. 139

10.7.5 Configuring an SSL Certificate for the Web Admin Server . . . . . . . . . . . . . . . . . . . 140

11 Managing iFolder Users 141

11.1 Provisioning / Reprovisioning Users and LDAP Groups for iFolder . . . . . . . . . . . . . . . . . . . . 141

11.1.1 Automatic Provisioning Through the LDAP Attribute . . . . . . . . . . . . . . . . . . . . . . . . 141

11.1.2 Manual Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

11.1.3 Manual Reprovisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

11.1.4 Round-Robin Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 142

11.2 Searching for a User Account . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 143

11.3 Accessing And Viewing General User Account Information. . . . . . . . . . . . . . . . . . . . . . . . . . 143

11.3.1 Enabling or Disabling an iFolder For an User Account . . . . . . . . . . . . . . . . . . . . . . 144

11.3.2 Deleting An iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 144

11.4 Configuring User Account Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

11.4.1 Viewing the Current User Account Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 145

11.4.2 Modifying User Account Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 146

11.5 Enabling and Disabling iFolder User Accounts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 148

12 Managing iFolders 149

12.1 Viewing Details And Configuring Policies for an iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

12.1.1 Accessing the iFolders Details Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

12.1.2 Viewing The iFolder Details . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 149

12.1.3 Searching for an iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 150

12.1.4 Managing iFolder Members . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151

12.1.5 Managing an iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 151

12.1.6 Managing iFolder Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 153

12.1.7 Enabling and Disabling an iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 155

Contents 9

novdocx (en) 13 May 2009

13 Managing an iFolder Web Access Server 157

13.1 Starting iFolder Web Access Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

13.2 Stopping iFolder Web Access Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

13.3 Distributing the Web Access Server URL to Users . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

13.4 Configuring the HTTP Runtime Parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 157

13.5 Securing Web Access Server Communications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

13.5.1 Using SSL for Secure Communications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 159

13.5.2 Configuring the SSL Cipher Suites for the Apache Server . . . . . . . . . . . . . . . . . . . 159

13.5.3 Configuring the Web Access Server for SSL Communications with the Enterprise

Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 160

13.5.4 Configuring the Web Access Server for SSL Communications with Web Browsers 161

13.5.5 Configuring an SSL Certificate for the Web Access Server. . . . . . . . . . . . . . . . . . . 161

A Troubleshooting Tips For Novell iFolder 3.7 163

A.1 Web Admin Console Fails to Start Up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 163

A.2 Login to the Web Consoles Fails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

A.3 Mono Crashes in OES2 SP1 64-bit Server Running on XEN . . . . . . . . . . . . . . . . . . . . . . . . 164

A.4 Full Restore of Backed-Up Files Fails in iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

A.5 Enabling a Large Number of Users at the Same Time Times Out . . . . . . . . . . . . . . . . . . . . . 164

A.6 Changes Are Not Reflected After Identity Sync Interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . 164

A.7 Synchronizing a Large Number of Files Randomly Requires Multiple Sync Cycles . . . . . . . 165

A.8 iFolder Data Does Not Sync and Cannot be Removed from the Server . . . . . . . . . . . . . . . . 165

A.9 Samba Connection to the Remote Windows Host Times out . . . . . . . . . . . . . . . . . . . . . . . . 165

A.10 Exception Error while Configuring iFolder on a Samba Volume . . . . . . . . . . . . . . . . . . . . . . 165

A.11 Giving Slash (/) at the End of the Default iFolder Path Creates Corrupted iFolder . . . . . . . . 165

A.12 LDAP Users Are Not Reflected in iFolder . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 165

A.13 Directory Access Exception on Creating or Synchronizing iFolders . . . . . . . . . . . . . . . . . . . 166

A.14 Changing Permission to the Full Path Fails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

A.15 iManager Single Sign-on Fails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

A.16 List of Items Fails to Synchronize . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 166

A.17 Access Permission Error While Logging in Through Web Access . . . . . . . . . . . . . . . . . . . . . 166

A.18 iFolder Upgrade From OES 1 SP2 to OES 2 Fails. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

A.19 Web Admin and Web Access Show a Blank Page . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 167

B Caveats for Implementing iFolder 3.7 Services 169

B.1 Loading Certificates to the Recovery Agent Path . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169

B.2 Using Novell iFolder Server to Serve Large Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 169

B.3 Deployment in an Active Directory Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

B.4 Using a Single Proxy User for a Multi-Server Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

B.5 Slave Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

B.6 LDAP SSL Certificate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

B.7 Novell iFolder Admin User . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 170

B.8 Novell iFolder with iChain and the Access Gateway . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171

C Clustering iFolder 3.7 Servers with Novell Cluster Services for Linux 173

C.1 Prerequisites for Clustering iFolder 3.7 Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173

C.2 Installing Novell Cluster Services for Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 173

C.3 Configuring iFolder 3.7 Servers on a NCS for Linux Cluster . . . . . . . . . . . . . . . . . . . . . . . . . 174

C.4 Creating the iFolder 3.7 Cluster Resource. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 175

10 OES 2 SP1: Novell iFolder 3.7 Administration Guide

novdocx (en) 13 May 2009

C.5 Managing the iFolder 3.7 Cluster Resource. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

C.6 Sample Load Scripts for iFolder 3.7 Clusters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

C.6.1 Linux POSIX File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 176

C.6.2 NSS File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177

C.7 Sample Unload Scripts for iFolder 3.7 Clusters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 177

C.7.1 Linux POSIX File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178

C.7.2 NSS File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 178

C.7.3 Troubleshooting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 179

C.8 Sample Monitor Scripts for iFolder 3.7 Clusters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180

C.8.1 Linux POSIX File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 180

C.8.2 NSS File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 181

D Decommissioning a Slave Server 183

E Configuration Files 185

E.1 Simias.config File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 185

E.2 Web.config File for the Enterprise Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 186

E.3 Web.config File for the Web Admin Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 188

E.4 Web.config File for the Web Access Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 192

F Managing SSL Certificates for Apache 197

F.1 Generating an SSL Certificate for the Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 197

F.2 Generating a Self-Signed SSL Certificate for Testing Purposes . . . . . . . . . . . . . . . . . . . . . . 198

F.3 Configuring Apache to Point to an SSL Certificate on an iFolder Server . . . . . . . . . . . . . . . . 198

F.4 Configuring Apache to Point to an SSL Certificate on a Shared Volume for an iFolder

Cluster . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 199

F.5 Configuring Apache to Point to an SSL Certificate on a NSS Volume for an iFolder Cluster 200

G Frequently Asked Questions 203

G.1 iFolder 3.7 Server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

G.1.1 Is iFolder 3.7 supported on a 64-bit OS?. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

G.1.2 Is iFolder going to support non-eDirectory related platforms as an identity source? 203

G.1.3 Because iFolder is developed on Mono, can it be deployed in a Microsoft

environment? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

G.2 iFolder 3.7 Client . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 203

G.2.1 Is iFolder 3.7 supported on Windows Vista? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204

G.2.2 Is iFolder 3.7 supported on the Macintosh platform?. . . . . . . . . . . . . . . . . . . . . . . . 204

G.2.3 Can I use the iFolder 2.xclient to connect to an iFolder 3.7 server?. . . . . . . . . . . . 204

G.2.4 Can I use the iFolder 3.xclient to connect to the iFolder 3.7 server? . . . . . . . . . . . 204

G.2.5 Can I can use iFolder 3.7 on different operating systems on different workstations to

access and share the files? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 204

G.2.6 There was a 10 MB file limitation using Web Access? Is it still applicable for iFolder

3.7? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

G.2.7 I deleted a file accidentally. Can I recover it? . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

G.2.8 What are the migration scenarios recommended and supported by iFolder 3.7? . . 205

G.3 iFolder 3.7 Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 205

G.3.1 What is the management console for iFolder 3.7? . . . . . . . . . . . . . . . . . . . . . . . . . 205

G.3.2 What are the new features in the Web Admin console? . . . . . . . . . . . . . . . . . . . . . 205

G.3.3 Can the administrator control the ability to encrypt iFolder files? . . . . . . . . . . . . . . 206

G.3.4 Are there any enhancements for how bulk users are enabled for iFolder? . . . . . . . 206

G.3.5 Can the administrator control the ability to share files? . . . . . . . . . . . . . . . . . . . . . . 206

Other manuals for IFOLDER 3.7 - SECURITY ADMINISTRATION

Table of contents

Other Novell Software manuals

Novell

Novell INTELLISYNC MOBILE SUITE 7.0 - SECURE GATEWAY ADMINISTRATOR GUIDE... Service manual

Novell

Novell EDIRECTORY 8.8 - GUIDE User manual

Novell

Novell LINUX ENTERPRISE DESKTOP 11 Instruction Manual

Novell

Novell CONSOLE ONE 1.3.X User manual

Novell

Novell IDENTITY MANAGER 3.6.1 - ENTITLEMENTS User manual

Novell

Novell GROUPWISE 8 - MONITOR User manual

Novell

Novell OPEN WORKGROUP SUITE SMALL BUSINESS EDITION 9.3 -... Instruction Manual

Novell

Novell DST - READ ME 03-2007 User manual

Novell

Novell LINUX ENTERPRISE SERVER 11 - VIRTUALIZATION User manual

Novell

Novell CLIENT FOR LINUX 1.2 User manual

Novell

Novell OPEN ENTERPRISE SERVER 2 SP 2 - CLUSTER SERVICES 1.8.7 FOR... User manual

Novell

Novell SUSE LINUX ENTERPRISE SERVER 10 STORAGE User manual

Novell

Novell APPARMOR 1.2 Instruction Manual

Novell

Novell LINUX ENTERPRISE 11 - SUBSCRIPTION MANAGEMENT TOOL GUIDE... User manual

Novell

Novell DATA SYNCHRONIZER - 07-2010 User manual

Novell

Novell IFOLDER 3.7 - CROSS-PLATFORM User manual

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... Programming manual

Novell

Novell ZENWORKS APPLICATION VIRTUALIZATION 8.0 - INTEGRATION AND STREAMING GUIDE... User manual

Novell

Novell LINUX ENTERPRISE SERVER 10 SP1 - ARCHITECTURE-SPECIFIC INFORMATION... Manual

Novell

Novell DATA SYNCHRONIZER MOBILITY PACK - UPDATE 2 User manual

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... Quick guide

Novell

Novell BUSINESS CONTINUITY CLUSTERING 1.0 -... User manual

Novell

Novell EDIRECTORY 8.8 SP5 - TUNING GUIDE FOR UNIX... Quick start guide

Novell

Novell LINUX ENTERPRISE SERVER 10 - INSTALLATION AND ADMINISTRATION... User manual

Popular Software manuals by other brands

Red Hat

Red Hat ENTERPRISE LINUX 4 - FOR X86-ITANIUM AND... installation guide

Avaya

Avaya OAISYS NetSuite 4.2 Application notes

Asante

Asante SmartBridge V1.0 user manual

Xerox

Xerox Wide Format 6204 installation guide

SAS

SAS Scalable Performance Data Server 4.5 Administrator's guide

Lucid

Lucid FM2A85X Extreme6 installation guide

Juniper

Juniper JUNOS PUS MOBILE SECURITY SUITE datasheet

GRASS VALLEY

GRASS VALLEY NETCONFIG V2.0.12 instruction manual

Epson

Epson Stylus Pro 9880 ColorBurst Edition - Stylus Pro 9880... Getting started

COMPRO

COMPRO COMPROFM manual

Muratec

Muratec OFFICEBRIDGE ONLINE user guide

Oracle

Oracle Contact Center Anywhere 8.1 installation guide

Avaya

Avaya NULL One-X for RIM Blackberry user guide

HP ProLiant BL420c user guide

PS Audio

PS Audio PowerPlay Programming manual

Brady

Brady LOCKOUT PRO 3.0 Administrator's guide

Avaya

Avaya Interaction Center user guide

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Guide book

Novell IFOLDER 3.7 - SECURITY ADMINISTRATION Instruction Manual

Popular Software manuals by other brands