Configuring Directory Services

This section describes how to configure a directory service (or the local database) for use with the Enterprise Web Server.

IMPORTANT:  If you switch to or from local database mode, you need to restart all of the Web technologies that you have installed, including NetWare Web Manager. Keep in mind that Web Manager runs on the Apache Web server, which hosts other technology and services, including iFolder^TM. You might want to do this when you know user traffic is low.

Using eDirectory Mode

eDirectory is already configured by default. However, if you for any reason you need to reconfigure eDirectory mode, follow these steps.

1. From the NetWare Web Manager home page, click Enterprise Web Server servername > Users and Groups > Configure Directory Service.

2. Select eDirectory.

   A dialog box appears to confirm that you want to use eDirectory.

3. Click OK.

4. To add a new search context, click Insert Context .

   HINT:  This field is optional. However, by specifying the context of your admin user object, you will not be required to enter your fully distinguished name when prompted to authenticate to Web Manager or other protected resources.

5. Click Remove Context to remove one or more search contexts.

6. Click Float Context to move the selected context to a higher priority context.

7. Click Save Changes.

8. (Conditional) If you change directory service from a local or remote LDAP directory to eDirectory, you need to restart the Web server.

   NetWare Web Manager does not need to be restarted.

HINT:  eDirectory does not allow public access to nonpublic folders or files. All users must be authenticated before receiving any content. Content that is placed in public directories do not require authentication. For more information on setting up public directories, see Setting Additional Document Directories.

Using Local Database Mode

1. From the NetWare Web Manager home page, click Enterprise Web Server servername > Users and Groups > Configure Directory Service.

2. Click Local Database.

   A dialog box appears to warn you that you will lose your directory service configuration information.

3. Click OK.

4. In the Base DN field, enter the distinguished name to be used as a suffix for your local directory and also as the point which directory lookups will occur from by default.

   An example of a suffix that you could enter here is

   o= your_company_name, c=US 

   If you do not enter a value in this field, then your suffix will be a null string and all searches will begin from the top or root point of the directory.

5. Click Save Changes.

Using LDAP Mode

1. From the NetWare Web Manager home page, click Enterprise Web Server servername > Users and Groups > Configure Directory Service.

2. Click LDAP Directory Server.

   A dialog box appears to confirm that you want to use a directory server.

3. Click OK.

4. In the Host Name field, enter the hostname where the directory server is running.

   You must enter a hostname even if the directory server is running on the local machine.

5. In the Port field, enter the default number if your directory server is using a different port number than the default port number 389.

6. In the Base DN field, enter the distinguished name that will be the point which directory lookups will occur from by default and will be the location where all NetWare Web Manager's entries will be placed in your directory tree.

   An example of a base DN that you could enter here is

   o= you_company_name, c=US 

7. In the Bind DN field, enter the bind DN that NetWare Web Manager will use to initially bind (or log in) to the directory server.

   This bind DN requires only Read and Search access to the directory. Because this DN and the associated password (if any) are easily compromised, it is best to simply leave this field blank and then set up your directory server to allow anonymous search access. If you do not want to allow anonymous search access to your directory, then specify a bind DN entry here that has only Read and Search access to your directory.

   IMPORTANT:  Do not specify your directory server's admin username in this field. This bind DN is used only to initially search for the username you entered in NetWare Web Manager authentication dialog box. Once the entry corresponding to this username is located, NetWare Web Manager rebinds to the directory server using the retrieved entry. Therefore, if the username you supplied when you first logged in to NetWare Web Manager does not have access to the directory server, you will not have any access to the directory server, regardless of the bind DN information provided in this field.

8. (Optional) In the Bind Password field, enter the password for the bind DN entry if you have entered a bind DN in the previous field.

9. Click Save Changes.