Sun Java System Portal Server Secure Remote Access 7.2 Administration Guide

Chapter 14 Configuring NetFile

This chapter describes configuring NetFile from the Sun Java System Portal Server administration console.

This chapter contains the following section:

Configuration Tasks for NetFile

This section has the following tasks:

ProcedureTo Configure the Basic Options

  1. Log onto the Portal Server administration console as administrator.

  2. Select the Secure Remote Access tab and select the Netfile tab.

  3. Select a DN for a user or an organization from Select DN list or add a DN.

  4. Modify the following attributes:

    Attribute Name 

    Description 

    COS Priority 

    Specify value that is used to determine the inheritance of the attribute values. For more information on this attribute, see the Sun Java System Directory Server Administration Guide.

    Domain/Host Preferences 

    Enter the default domain that NetFile requires to contact allowed hosts. 

    This default domain value is applicable only if the user does not specify a fully qualified host name while adding a host using NetFile. 


    Note –

    Ensure that the Default Domain field is not blank, and that it contains a valid domain name.


    Default WINS/DNS Server 

    Enter the WINS/DNS server host address that NetFile uses to access Microsoft Windows hosts. 


    Note –

    A user can override this value by specifying a different value while adding a machine.


    Host Detection Order 

    Use the Move Up and Move Down button to specify the host detention order. 

    Common Hosts 

    Enter either the host name or the fully qualified name and click Add. 

    If the host name that you have provided matches the host name configured by the user, the two sets of information are merged and the user-specified values override the values that you specified. 

    Configure a list of hosts to be available through NetFile to all remote NetFile users. 


    Note –

    For example, suppose you have configured 4 common hosts - sesta, siroe, florizon, and abc. A user configures 3 hosts out of which 2 are sesta and siroe. User-specified values override administrator-specified values in such conflict situations. florizon and abc are also listed in the user’s NetFile, and the user can carry out various operations on those hosts. In case you have listed florizon in the Denied Hosts List, florizon is listed in the user’s NetFile, but no operation can be carried out on florizon.

    Host Type—If the user has already added a host that is listed in the Common Hosts list, the user setting takes precedence. If a conflict in the type exists, the shares added by the administrator are not added for that user. If the user and the administrator add the same share, the share is added, but the password set by the user takes precedence.


  5. Click Save to complete.

ProcedureTo Configure the Access Privileges

  1. Log onto the Portal Server administration console as administrator.

  2. Select the Secure Remote Access tab and select the Netfile tab.

  3. Select a DN for a user or an organization from Select DN list or add a DN.

  4. Click Access Privilege and modify the following attributes:

    Attribute Name 

    Description 

    Access to Windows Hosts 

    Select the Allow checkbox to ensure that users have access to Windows Hosts. 

    By default, the Allow checkbox is selected. 

    Access to FTP Hosts 

    Select the Allow checkbox to ensure that users have access to FTP Hosts. 

    Access to NFS Hosts 

    Select the Allow checkbox to ensure that users have access to NFS Hosts. 

    Access to Netware Hosts 

    Select the Allow checkbox to ensure that users have access to Netware Hosts. 

  5. Click Save to complete.

ProcedureTo Configure the Host Preferences

  1. Log onto the Portal Server administration console as administrator.

  2. Select the Secure Remote Access tab and select the Netfile tab.

  3. Select a DN for a user or an organization from Select DN list or add a DN.

  4. By default, users are allowed to access all the hosts through NetFile because of the * entry in the Allow/Deny hosts list. If you want to change that, remove the * entry and specify only those hosts to which users need to have access through NetFile, in this list. Alternatively, you can keep the * entry here, and specify the hosts to which you want to deny access in the Denied Hosts list. In that case, all the hosts except the ones specified in the Denied Hosts list are allowed access.


    Note –

    If you deny access to a host, and a user has already added this host in the NetFile window, the denied host continues to be displayed in the NetFile window of the user. But the user is not be able to carry out any operations on the host. In NetFile Java2, denied hosts, if displayed in the application, are marked with a red cross to indicate that they are inaccessible. If both the Allowed Hosts and Denied Hosts lists are blank, access is not allowed to any host.


  5. Click Save to complete.

ProcedureTo Configure the Operation Preferences

  1. Log onto the Portal Server administration console as administrator.

  2. Select the Secure Remote Access tab and select the Netfile tab.

  3. Select a DN for a user or an organization from Select DN list or add a DN.

  4. Modify the following attributes:

    Attribute Name 

    Description 

    Default Compression Type 

    Select ZIP or GZ from the drop down box as the default file compression format. 

    Default Compression Level 

    Select the default compression level from the drop down box. The default is 6. 

    Temporary Directory Location 

    Enter the location for the temporary files. The specified temporary directory is created if it does not exist on the server. 

    A temporary directory is required some file operations such as mailing files. The default temporary directory is /tmp. The temporary files are deleted after the required operation has completed.


    Note –

    Ensure that the ID with which the web server is running (such as nobody or noaccess) has rwx permissions for the specified directory. Also ensure that the ID has rx permissions for the entire path to the required temporary directory.



    Tip –

    You may want to create a separate temporary directory for NetFile. If you specify a temporary directory that is common to all modules of the Portal Server, the disk may quickly run out of space. A few operations in NetFile, such as mailing files, do not work if the temporary directory has no space.


    File Upload Limit (MB) 

    Enter the maximum size of the files that can be uploaded in this field. The default value is 5MB. 

    When the size of the file being uploaded exceeds the limit specified here, an error message is displayed and the file is not uploaded. If you enter an invalid value, NetFile resets the value to the default value. You can specify different file upload size limits for different users. 

    Search Directories Limit 

    Enter the maximum number of directories that can be searched in a single search operation. This limit helps reduce network clogging and increases the speed of access if a number of users are logged in simultaneously. The default value is 100. 

    Suppose a user has a directory called A. Assume that A has 100 subdirectories. If you specify the maximum directories to be searched as 100, the search operation goes through directory A and stops. The search does not proceed through the other directories in the users machine since the limit of 100 was reached with directory A. The search results accumulated until the search limit is reached are displayed to the user along with an error message stating that the search exceeded its limit. To continue the search, the user must manually restart the search at the next directory. The search operation is carried out in a depth-first manner. This means that the search operation is carried out in all the subdirectories of the directory that the user selected, before moving on to the next directory.

  5. Click Save to complete.

ProcedureTo Configure the Operation Privileges

You can allow or deny permission for users to perform the following tasks from remote hosts.

  1. Log onto the Portal Server administration console as administrator.

  2. Select the Secure Remote Access tab and select the Netfile tab.

  3. Select a DN for a user or an organization from Select DN list or add a DN.

  4. Modify the following attributes:

    Attribute Name 

    Description 

    File Rename 

    Select the Allow checkbox to enable users to rename files. This option is selected by default. 

    File/Folder Deletion 

    Select the Allow checkbox to enable users to delete files and directories. This option is selected by default. 

    File Upload 

    Select the Allow checkbox to enable users to upload files. This option is selected by default. 

    File/Folder Download 

    Select the Allow checkbox to enable users to download files or directories. This option is selected by default. 

    File Search 

    Select the Allow checkbox to enable users to perform file search operations. This option is selected by default. 

    File Mail 

    Select the Allow checkbox to enable users to access to mail. This option is selected by default. 

    File Compression 

    Select the Allow checkbox to enable users to choose the compression type. This option is selected by default. 

    Changing User Id 

    Select the Allow checkbox to enable users to change their user ID. Users can use different IDs to connect to hosts using NetFile. 

    In a large organization, users may have multiple user IDs. You may want to restrict users to use a single user ID. In that case, you can disable the Allow Changing User ID option. This prevents all the users in the specific organization from changing their user ID, and limits them to using a single ID (the desktop login ID) to connect to hosts using NetFile. In another situation, a user may have different login IDs on different machines, in which case, you may want to allow the user to change the ID as required. 

    Changing Microsoft Windows Domains 

    Select the Allow checkbox to enable users to change the default Microsoft Windows domain host. This option is selected by default. 

    When the user specifies a domain name, the username and password for that domain also needs to be specified. If the username and password for the host needs to be used, the user needs to remove the domain from the User Domain name field. 


    Note –

    When the any of the above options are not selected, the changes takes effect only after the user logs onto Portal Server desktop again.


  5. Click Save to complete.