Appendix C. Manually Configuring Integration with Novell
eDirectory
In Section 9.3, we explain how to integrate a ThinLinc Cluster with Novell eDirectory using the ThinLinc
Novell Configurator (TLNC). In this chapter we will explain how to do it manually, without the TLNC.
This information is provided to further explain what is done by the TLNC, and to provide documentation
on what needs to be done if the TLNC can’t be used for some reason.
C.1. Schema extensions
In order for pam_ldap and nss_ldap to work, the NDS must have schema extensions for posixAccount
and posixGroup.
Most eDirectory installations already have the relevant schema installed, but if not, it must be installed.
The extensions will be added to NDS if Novell Native File Access for Unix is installed. During
installation of this the command schinst is run to extend the schemas with posixAccount and
posixGroup. You may have to run schinst manually later, for example after applying a Novell service
pack. If Novell Native File Access for Unix is not available for your Novell platform (it’s available for
Netware 6.0 and above), extending the schema by hand should work although this is an untested
configuration.
C.2. Increasing performance by adding an index on some Attributes.
In a standard eDirectory installation, there is no index on the Object Class attribute, nor on the
uidNumber or gidNumber attributes. Since pam_ldap and nss_ldap use LDAP queries that include the
objectclass, uidNumber and gidNumber attributes, performance can often be increased by adding an
index for these specific attributes. This has to be done on all servers that carry data needed for
authentication.
We will give an example on how to add an index on "Object Class":
1. Find the server object for the server where the index is to be added. That is, find the Netware server
object, not the LDAP server object.
2. Select properties, and choose the index tab.
3. Press the Add button, set Index Name to "objectclass". Choose "Object Class" in the list of
Attributes.
Note: The list of Attributes has a peculiar sorting order. All attributes that have names that start with
a capital are ordered before the ones that don’t.
Set the Rule to "Value".
4. Press OK.
5. Press Apply. That will create the index, a background process that may take a few minutes on a very
large directory.
Repeat the procedures above for all servers that have replicas with the relevant information.
205
Komentarze do niniejszej Instrukcji