Novell Nsure® Identity Manager in a Linux World

Richard Moore

Engineer

Novell, Inc.

Jim Sorenson

Engineer

Novell, Inc.

Session Overview

Demo of a solution that has been deployed entirely on Novell SUSE8

Peek under the covers at some of the customization contained in the demo

Question & answer session

Demo CD provided to session attendees

Products Installed

SUSE 8

eDirectory™ 8.7.3

Novell Nsure® Audit 1.0.1

Novell Identity Manager 2.0.1

Novell iManager 2.0.2

Novell GroupWise® 6.5

Novell ConsoleOne® 1.3.6

Sun iPlanet Directory Server 5.2

MYSQL

Configured Drivers

SAP HR Driver (Publisher Channel Only)

LDAP Driver (Mirror Configuration)

Delimited Text File Driver (Bi-Directional)

GroupWise Driver

NIS Driver

JDBC Driver (Indirect)

Manaul Task Driver (Welcome Email)

eDirectory Driver

Dummy Driver (Demo Policies)

Demo

1. Login to the SUSE server

2. Open a eDirectory trace window

Great tool for troubleshooting

Can redirect to a file

Can also view via iMonitor

Demo has tracings for Drivers, Engine, and LDAP enabled

Demo

3. Start Drivers

Start by using iManager

Can be set to auto start if desired

4. Enable Forgotten Password

Can email hint to user

Part of a password policy

Can apply policy to user, container, login policy object

Demo

5. Provision a user in the demo using the SAP Driver

SAP GUI Simulator simulates the SAP HR System

Simulator is for publisher use only

Check to see user is now in eDirectory

Check trace screen for “Success”

6. GroupWise Driver

Check that user was provisioned into GroupWise

Demo

7. Check email sent by the manual task driver

Welcome email is shipping example

Highly customizable driver

Demo

8. Test forgotten password

Login to portal as the user we created in the last step

Define and answer challenge questions

Logout of the portal

Return to portal login screen

Select the forgotten password link

Enter the user id from step 5

Login to GroupWise and read hint email

Demo

9. NIS Driver

Login as root and open a shell

Change a user's password using passwd

Logout of SUSE and login as user whose password was just changed

Launch GroupWise client and login

GroupWise authenticates via LDAP to eDirectory (This proves the password was indeed changed in eDirectory)

Demo

10. LDAP Driver

Using an LDAP browser, login to iPlanet and change a user's Fax number

Check the user's account in eDirectory for the updated Fax number

11. Delimited Text Driver

Login to SUSE as root

Examine example input file

Rename file so that the driver consumes the data

Check eDirectory for a newly created user

Demo

12. MYSQL Driver

Login to MYSQL

Examine sample database

Verify rows generated for synced users

MYSQL

Demo

13. NSure Audit

Comprehensive event and auditing

Centralized and cross-platform

Can generate custom events

View using iManager or W32 application

Demo

Extra Policies

Contained in the dummy driver

Good place for extra policies

View using iManager

Can copy to a new location

Novell Drivers

Other Novell Drivers

Active Directory

NT Domain

Exchange 5.5

Peoplesoft

Lotus Notes

GroupWise

SAP User

SIF

Third Party Drivers

Other Third Party Drivers

Omnibond Fan Out Drivers

Scales to hundreds of unix systems with a single driver (recommend 400-600 max depending on event activity and number of users as well as mode of operation)

Uses shell scripts running on the target system to complete the provisioning logic

Leverages authentication PAM redirection enforcing Universal Password Rules, password expirations, etc... on password changes and logins.

Does not require the password to be stored in the passwd files (for at risk servers), but optionally can be set up to sync them for fail over situations.

Provides subscriber only account data with bi-directional password sync.

Third Party Drivers

Other Third Party Drivers

Remedy's Remedy Driver

Identrix MQ Series and JMS Driver

2003-12-08T12:43:39