Chapter 9 Administration Server Configuration

This chapter describes the configuration options you can use with the Administration server.

• Network Settings
• Access Settings
• Encryption Settings
• Directory Settings

1. In Netscape Console, select the Administration Server you want to modify, and then click Open.
2. Click the Configuration tab, and then click Network.

   

3. Enter network settings:

Port. Enter the port number you want the Administration Server to use. The port number can be any number between 1 and 65535, but it is typically a random number greater than 1024.

IP Address. Enter the IP address you want the server to use for incoming requests and connections.

Server UID. Enter the system user account you want to use to run the Administration Server.

Connection Restrictions. Displays a list of hosts currently allowed to connect to the Administration Server. Use the drop-down list to indicate whether you're adding to the list by DNS name or by IP address. The list is evaluated first by host names, and then by IP addresses. Using IP addresses may provide faster authentication.

Add. Displays a dialog box for adding a host to the list of computers allowed to connect to the Administration Server.

Edit. Displays a dialog box for editing a Host IP address or DNS name on the list of computers allowed to connect to the Administration Server.

Remove. Removes a selected entry from the list of allowed hosts.

4. Click OK.

• Server group management - This includes all server management tasks such as starting, stopping, and configuring the servers in a group.
• End-user page - This is the Administration Server html page that end users typically access to either modify their own user data, or to download shared software. See "End-User Access to the User Directory" on page 42 for more information.
• Directory Server Gateway - The Directory Server Gateway is a service that provides web-based access to the entire user dirctory. The Directory Server Gateway must be installed before you can use this option. See the Administrator's Guide to Directory Server 4.0 for more information.

1. In Netscape Console, select the Administration Server you want to modify, and then click Open.
2. Click the Configuration tab, and then click Access.

   

3. Enter access information:

User name. Enter Netscape Console Administrator user ID. This is the user listed in the file <server_root>/admin-serv/config/admpw. This is the user name you entered during installation. This user has full access to all features in the Administration Server.

Password. Enter Netscape Console Administrator's password.

Confirm Password. Enter Netscape Console Administrator's password again to confirm it.

Enable end-user access. Select this option if you want to allow end users to access the end-user page. Users will be able to access the end-user page using the same URL that administrators do. But they will only see a single form with their user information. An end user can change his or her own password or update any other information stored in his or her own entry in the user database.

Enable Directory Server Gateway Access. By default, this option is selected for you. Deselect it to disable access to the Directory Server Gateway.

4. Click OK.

1. In Netscape Console, in the navigation tree, select the Administration Server instance you want to use SSL encryption with.
2. Click Open Server to open the Administration Server Console.
3. In the Administration Server Console, from the Console menu, choose Certificate Setup Wizard.
4. Provide information as prompted. See "Obtaining and Installing a Certificate" on page 63 for detailed information.

1. In Netscape Console, in the navigation tree, select the Administration Server instance you want to use SSL encryption with.
2. Click Open Server to open the Administration Server console, and then click Configure the Administration Server.
3. In the Configuration window, click Encryption.

   

4. Enter information as appropriate:

Enable SSL. Choose this option if you want to secure your enterprise with Secure Sockets Layers (SSL) encryption. The following are enabled only when you turn on SSL Encryption:

Cipher Family. When you enable SSL Encryption, the cipher families available to you are listed here. Select the cipher families you want to use.

Token to Use. Choose Internal (Software-based) if the key is stored in the local key database. All other choices available to you on this list are device-based. This means the key is stored on an external device such as a Smart Card.

Certificate. Certificate information is stored in the certificate database. If you're unsure of the Certificate to use, view the Certificate Management dialog for more information. To view the Certificate Management dialog, from the File menu, choose Certificate Management.

Cipher Preferences. A cipher is the algorithm used in encryption. This list displays the cipher preferences you've selected.

5. Click OK.

To change the configuration Directory Server settings:

1. In Netscape Console, choose an Administration Server and open it.
2. Click Configuration.
3. Click Configuration DS.

   

4. Modify settings as appropriate.

LDAP Host. Enter the host name of the configuration directory this Administration Server uses.

LDAP Port. Enter the port number for the configuration directory this Administration Server uses.

Use SSL. Select this option if the new configuration directory is already SSL enabled.

5. Click Save.

1. In Netscape Console, select a domain, then click Edit.

   

2. Modify the following:

Domain Name..

Enter a fully qualified domain name. Example: airius.com.

Description. Enter a name that helps you identify this domain.

User Directory Host. Enter the fully qualified name of the host system where the new user directory is located.

User Directory Port. Enter the port number for the new user directory.

Secure Connection. Select this option if the new user directory port is already enabled for SSL communication.

User Directory Subtree. enter the location of the new user directory. Example: o=mcom.com

Bind DN. Enter the distinguished name for a user who has access permisions to the new user directory. Example: uid=ginac, ou=people, o=Airius.com.

Bind Password. Enter the password of the user above.

3. Click OK.

1. In Netscape Console, choose an Administration Server and open it.
2. Click Configuration.
3. Click User DS.

   

4. Modify settings as appropriate.

Use Default User Directory. Choose this option if you want to use the default user directory associated with the domain.

Set User/Groups Directory. Choose this option if you want to use a user directory other than the default associated with the domain.

LDAP Host. Enter the fully qualified name of the host computer where the new user directory is located.

LDAP Port. Enter the port number for the new user directory.

Use SSL. Select this option if the new user directory port is already enabled for SSL communication.

Base DN. Enter the user directory subtree location. Example: o=airius.com

Bind DN. Enter the distinguished name for a user who has access permisions to the user directory. Example: uid=ginac, ou=people, o=airius.com

Bind Password. Enter the password of the user above.

Confirm Password.. Enter the Bind Password again to confirm it.

5. Click OK.

Port. Enter the port number you want the Administration Server to use. The port number can be any number between 1 and 65535, but it is typically a random number greater than 1024.

IP Address. Enter the IP address you want the server to use for incoming requests and connections.

Server UID. Enter the system user account you want to use to run the Administration Server.

Connection Restrictions. Displays a list of hosts currently allowed to connect to the Administration Server. Use the drop-down list to indicate whether you're adding to the list by DNS name or by IP address. The list is evaluated first by host name, and then by IP addresses. Using IP addresses may provide faster authentication.

Add. Displays a dialog box for adding a host to the list of computers allowed to connect to the Administration Server.

Edit. Displays a dialog box for editing a Host IP address or DNS name on the list of computers allowed to connect to the Administration Server.

Remove. Removes a selected entry from the list of allowed hosts.

User name. Enter the user ID for the Administration Server Administrator. This is the user listed in the file server_root>/admin-serv/config/admpw. This is the user name you entered during installation. The Administration Server Administrator has full access to all features in the Administration Server.

Password. Enter the superuser's password.

Confirm Password. Enter the superuser's password again to confirm it.

Enable end-user access. Select this option if you want to allow end users to access the user databse. Users will be able to access the Administration Page using the same URL that administrators do. But they will only see a single form with their user information. An end user can change his or her own password or update any other information stored in his or her own entry in the user database.

Enable Directory Server Gateway Access. The Directory Server Gateway is a service that provides web-based access to the entire user dirctory. By default, this access is enabled. Deselect it to disable access to the Directory Server Gateway. The Directory Server Gateway must be installed before you can use this option. See the Administrator's Guide to Directory Server 4.0 for more information.

"Network Resources and Administrative Privileges"

Enable SSL. Choose this option if you want to secure your enterprise with Secure Sockets Layers (SSL) encryption. The following are enabled only when you turn on SSL Encryption:

Cipher Family. When you enable SSL encryption, the cipher families available to you are listed here. Select the cipher families you want to use.

Token to Use. Choose Internal (Software-based) if the key is stored in the local key database. All other choices available to you on this list are device-based. This means that the key is stored on an external device such as a smart card.

Certificate. Certificate information is stored in the certificate database. If you're of which certificate to use, view the Certificate Management dialog box for more information. To view the Certificate Management dialog, from the File menu, choose Certificate Management.

Cipher Preferences. A cipher is the algorithm used in encryption. This list displays the cipher preferences you've selected.

"Activating SSL"
"The SSL Protocol"

LDAP Host. Enter the host name of the configuration directory that this Administration Server uses.

LDAP Port. Enter the port number for the configuration directory that this Administration Server users.

Use SSL. Select this option if the configuration directory is already SSL enabled.

"Changing the Configuration Directory Server"

Use Default User Directory. Choose this option if you want to use the user directory associated with the domain. Its LDAP URL is displayed here.

Set User Directory. Choose this option if you want to use a user directory other than the default associated with the domain.

LDAP Host. Enter the fully qualified name of the host computer where your user directory is located.

LDAP Port. Enter the port number for the user directory.

Use SSL. Select this option if the user directory port is already enabled for SSL communication.

Base DN. Enter the user directory subtree location. Example: o=airius.com

Bind DN. Enter the distinguished name for a user who has access permisions to the user directory. Example: uid=ginac, ou=people, o=Airius.com

Bind Password. Enter the password of the user above.

Confirm Password.. Enter the Bind Password again to confirm it.

"User Directory Settings"