OES 2 SP3: Domain Services for Windows Administration Guide 8 Activities After Dsfw Installation Or Provisioning 145 8.1 Verifying the Installation
Total Page:16
File Type:pdf, Size:1020Kb
www.novell.com/documentation Domain Services for Windows Administration Guide Open Enterprise Server 2.0 SP3 May 06, 2013 Legal Notices Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes. Any products or technical information provided under this Agreement may be subject to U.S. export controls and the trade laws of other countries. You agree to comply with all export control regulations and to obtain any required licenses or classification to export, re‐export or import deliverables. You agree not to export or re‐export to entities on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. Please refer to www.novell.com/info/ exports/ for more information on exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export approvals. Copyright © 2008‐2010 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express written consent of the publisher. Novell, Inc. 1800 South Novell Place Provo, UT 84606 U.S.A. www.novell.com Online Documentation: To access the online documentation for this and other Novell products, and to get updates, see www.novell.com/documentation. Contents About This Guide 9 1 Overview of DSfW 11 1.1 Features and Benefits . 11 1.2 Architectural Overview . 12 1.3 Basic Directory Services Concepts . 14 1.3.1 Domains, Trees, and Forests . 14 1.3.2 Naming . 14 1.3.3 Security Model . 15 1.3.4 Groups . 15 1.4 Key Differences Between the DSfW LDAP Server and the eDirectory Server. 15 2What’s New 17 2.1 What’s New (OES 2 SP3 April 2013 Patches) . 17 2.2 What’s New (OES 2 SP3 November 2012 Patches) . 17 2.3 What’s New (OES 2 SP3 August 2011Patch) . 17 2.4 What’s New (OES 2 SP3) . 18 2.5 What’s New (OES 2 SP2) . 18 3 Use-Cases 19 3.1 Authenticating to Applications That Require Active Directory-Style Authentication . 19 3.1.1 Users Located in the DSfW Forest and Accessing Applications Hosted in the Active Directory Forest . 19 3.1.2 Users and Applications Hosted in the DSfW Forest . 20 3.2 Working With Windows Systems Without Novell Client . 20 3.3 Leveraging an Existing eDirectory Setup . 21 3.4 Interoperability Between Active Directory and eDirectory . 21 4 Deployment Scenarios 23 4.1 Deploying DSfW in a Non-Name-Mapped Setup . 23 4.1.1 Deploying as a Single Domain. 23 4.1.2 Deploying as Multiple Domains in a Forest . 23 4.2 Deploying DSfW in a Name-Mapped Setup . 25 4.2.1 Deploying DSfW by Skipping Containers . 27 4.2.2 Custom Domain Name . 29 5 Planning for DSfW 31 5.1 Server Requirements for Installing DSfW . 31 5.2 Scalability Guidelines . 32 5.3 Deciding between Name-Mapped and Non-Name-Mapped Installation . 32 5.3.1 Impact of a Name Mapped / Non-Name-Mapped setup on a Tree . 34 5.4 Extending a Domain Boundary in a Name-Mapped Installation. 35 5.4.1 Prerequisite . 35 5.4.2 Use Case Scenario . 35 5.4.3 Caveat . 37 Contents 3 5.5 Meeting the Installation Requirements. 37 5.5.1 Installation Prerequisites For a Non-Name-Mapped Setup . 37 5.5.2 Installation Prerequisites for a Name-Mapped Setup . 40 5.6 Supported Installation Scenarios . 44 5.7 Unsupported Service Combinations. 44 5.7.1 Installing Other Products in the DSfW Partition . 44 5.8 Windows Version Support . 45 5.9 Administrative Tools. 45 5.9.1 Windows Administration Tools. 45 5.9.2 Linux Administration Tools. 45 5.10 Utilities Not Supported in DSfW . 46 5.11 Limitations . 46 5.11.1 NETBIOS Names. 46 5.11.2 Installation Issue . 46 5.12 Restrictions with Domain Names . 46 5.13 Enabling Universal Password Policy for DSfW . .46 6 Installing Domain Services for Windows 49 6.1 Prerequisites for Installation. 49 6.2 Installation Scenarios . 49 6.2.1 Installing DSfW in a Non-Name-Mapped Setup . 49 6.2.2 Installing DSfW in a Name-Mapped Setup . 85 6.3 Using a Container Admin to Install and Configure DSfW. 120 7 Provisioning Domain Services for Windows 123 7.1 What Is Provisioning? . 123 7.2 Features and Capabilities of the Provisioning Wizard . 123 7.3 Provisioning Wizard Interface . 124 7.4 Using the Wizard to Provision the DSfW Server . 126 7.5 Provisioning Tasks . 127 7.5.1 Provisioning Precheck . .128 7.5.2 Configure DNS. ..