User manual NOVELL IMANAGER 2.7.4 ADMINISTRATION GUIDE

[. . . ] novdocx (en) 16 April 2010 AUTHORIZED DOCUMENTATION Administration Guide Novell® 2. 7. 4 October 15, 2010 iManager www. novell. com Novell iManager 2. 7. 4 Administration Guide novdocx (en) 16 April 2010 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. [. . . ] Name: Specify, or use the Object Selector to find, the desired object to be a role member. Scope: Specify, or use the Object Selector to find, the container that defines the scope within which this member can perform the role. 3 In the members list, specify how you want rights related to this role assigned to the member, then click OK. Assign Rights: Instructs eDirectory to automatically grant the member rights necessary to perform the assigned role. When not selected, the member is assigned the role but might not have rights to perform all tasks associated with the role. Inheritable: Select subtree to indicate that the member's scope includes all sub-containers in the specified context. Select base object to indicate that the member can perform the role only in the specified container. Configuring and Customizing iManager 57 novdocx (en) 16 April 2010 NOTE: If a user is a collection owner, and has a member association set, then he/she can manage all the RBS objects within the defined scope. For a list of RBS objects in eDirectory and their description, see Section 6. 1. 1, "RBS Objects in eDirectory, " on page 52. Assign a Category To add a category assignment to an existing role: 1 In the Role tab, select the role, then select Actions > Category Assignment. 2 Select a category, then click the right-arrow to assign it to the role. Add a Description to a Role To add a description to an existing role: 1 In the Role tab, select the role and click Actions > Description. 2 Specify the description in the text box, then click OK. 6. 2. 2 The Task Tab A task is a plug-in that performs a distinct management function, such as creating a user or setting a password. iManager lists the tasks by group in the navigation area on the left side of the window. The RBS Collection Task tab lets you do the following operations: "Creating a New Task" on page 58 "Deleting a Task" on page 58 "Editing the Role Assignment of a Task" on page 59 "Adding a Description to a Task" on page 59 Creating a New Task To create a new task: 1 In the Task tab, select New > iManager Task. The wizard steps you through providing the necessary detail about the new task you are creating. For information on creating tasks in the Plug-in Studio, see "Creating a New Task from Plug-In Studio" on page 63. Deleting a Task To delete an existing task: 1 In the Task tab, select the task, then select Delete. 58 Novell iManager 2. 7. 4 Administration Guide novdocx (en) 16 April 2010 A message appears: This operation will delete all of the selected tasks. Editing the Role Assignment of a Task To edit the list of roles to which a task is assigned: 1 In the Task tab, select the task, then select Actions > Role Assignment. 2 On the Edit Role Assignment page, add or remove roles from the Assigned Roles field, then click OK. Adding a Description to a Task To add a description to an existing task: 1 In the Task tab, select the task, then select Actions > Description. 2 Specify the description in the text box, then click OK. 6. 2. 3 The Property Book Tab A property book displays the attributes of a specific object type that you can modify. Property books can be assigned to roles and appear in the list of tasks for a role. [. . . ] These messages can inadvertently provide too much information to potential crackers. To avoid this, iManager 2. 7 includes a configuration option to hide the specific reason for login failure. When enabled, the following error messages are replaced with a generic error message that reads: Login Failure. Invalid Username (-601) Incorrect password (-669) Expired password or disabled account (-220) To enable this setting, open the Configure view and select iManager Server > Configure iManager. [. . . ]