The Directory Service

Directory services are a type of software that allow you to maintain information, such as contact information or identification information for the people in your organization. This information is also used when controlling access to a server and its resources by requiring a user to provide the necessary username and password when trying to access protected (or nonpublic) folders.

You can use three directory service modes with the Enterprise Web Server:

• eDirectory^TM mode
• Local database mode
• LDAP mode

NOTE:  If you choose local database or LDAP modes, users will be required to enter fully distinguished names (.username.context.domain) whenever accessing protected folders.

eDirectory Mode

Novell^® eDirectory is installed during the NetWare 6 installation. The Enterprise Web Server provides a native eDirectory integration mode. While in this mode, users attempting to access any folder that is not designated as a public folder are required to enter a username and password. This is accomplished through eDirectory's use of native NetWare file system trustee assignments.

This means that anywhere that users have Internet access, they can log in from an HTTP client using their eDirectory usernames and passwords. There is no need for them to set up a dialup account into your company network. As long as they can get to the Internet, they can get to their data.

eDirectory is the default directory mode and is ready to go after installation of NetWare 6. After eDirectory mode is selected,

• Use ConsoleOne^TM to maintain user and group information.

  HINT:  You can also use the Users and Groups feature from within the Enterprise Server manager pages to perform basic eDirectory functions, such as adding, configuring, or removing User and Group objects. To access users and groups from the NetWare Web Manager home page, click your Enterprise servername > then Users and Groups.

• Users are required to log in from the Web browser to gain access to resources contained in nonpublic directories.
• Make sure SSL is enabled if you do not want eDirectory passwords visible to hackers.
• NetWare file system trustees assignments are available exclusively to control access to Web resources.
• NetWare Enterprise Web Server access control lists (ACLs) are disabled.

Local Database Mode

The local database is intended for sites running a public access Web site, or a site in which protected resources are limited and where you don't have a need to secure any or most of your information. Usernames and passwords are stored in a simple text file.

Local database mode has the following limitations when compared to eDirectory:

• Rights set up in local database mode don't carry over to your existing directory service; therefore, you have to maintain and synchronize two access control lists.
• The local database supports no more than 1,000 entries.
• The local database cannot be replicated.

LDAP Mode

If your company is built around LDAP, this mode might make sense for you. However, we recommend eDirectory as your directory service. eDirectory is the leading directory service available today and is included with NetWare 6.

For information about implementing LDAP with eDirectory, see LDAP Services for Novell eDirectory. Before using eDirectory as your LDAP server, you must first enable unencrypted passwords by opening the properties of your LDAP Server object using ConsoleOne.