Novell OPEN ENTERPRISE SERVER 2.0 SP2 - DOMAIN SERVICE FOR... Bedienungsanleitung

Novell®

www.novell.com

novdocx (en) 13 May 2009

AUTHORIZED DOCUMENTATION

Novell Client 2.0 SP2 for Linux Administration Guide

Client

for Linux

2.0 SP2

September 2009

Administration Guide

novdocx (en) 13 May 2009

Legal Notices

Novell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and

specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.

Further, Novell, Inc., reserves the right to revise this publication and to make changes to its content, at any time,

without obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc., makes no representations or warranties with respect to any software, and specifically disclaims

any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.,

reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to

notify any person or entity of such changes.

Any products or technical information provided under this Agreement may be subject to U.S. export controls and the

trade laws of other countries. You agree to comply with all export control regulations and to obtain any required

licenses or classification to export, re-export or import deliverables. You agree not to export or re-export to entities on

the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export laws.

You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses. See the

Novell International Trade Services Web page (http://www.novell.com/info/exports/) for more information on

exporting Novell software. Novell assumes no responsibility for your failure to obtain any necessary export

approvals.

stored on a retrieval system, or transmitted without the express written consent of the publisher.

Novell, Inc., has intellectual property rights relating to technology embodied in the product that is described in this

document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.

patents listed on the Novell Legal Patents Web page (http://www.novell.com/company/legal/patents/) and one or

more additional patents or pending patent applications in the U.S. and in other countries.

Novell, Inc.

404 Wyman Street, Suite 500

Waltham, MA 02451

U.S.A.

www.novell.com

Online Documentation: To access the latest online documentation for this and other Novell products, see

the Novell Documentation Web page (http://www.novell.com/documentation).

novdocx (en) 13 May 2009

Novell Trademarks

For Novell trademarks, see the Novell Trademark and Service Mark list (http://www.novell.com/company/legal/

trademarks/tmlist.html).

Third-Party Materials

All third-party trademarks are the property of their respective owners.

4Novell Client 2.0 SP2 for Linux Administration Guide

novdocx (en) 13 May 2009

Contents 5

Contents

novdocx (en) 13 May 2009

About This Guide 7

1 Understanding the Novell Client for Linux 9

1.1 Understanding How the Novell Client for Linux Differs from the Novell Client for Windows 2000/

XP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.1.1 Installation and Upgrades . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.1.2 Logging In . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

1.1.3 User Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

1.1.4 Login Scripts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

1.2 Understanding the Novell Client for Linux Virtual File System. . . . . . . . . . . . . . . . . . . . . . . . . 10

2 Configuring the Novell Client for Linux 11

2.1 Using the Novell Client Configuration Wizard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11

2.1.1 Configuring Login Settings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12

2.1.2 Configuring Map Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13

2.1.3 Configuring Protocol Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14

2.1.4 Configuring Tray Application Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

2.1.5 Configuring File Browser Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

2.1.6 Configuring OpenSLP Settings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18

2.2 Using Configuration Files to Preconfigure the Novell Client. . . . . . . . . . . . . . . . . . . . . . . . . . . 19

2.3 Server Side Configuration for Sending Messages from Client to Users and Groups. . . . . . . . 20

3 Managing Login 21

3.1 Setting Up Integrated Login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21

3.1.1 Installing and Enabling CASA . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

3.1.2 Configuring Integrated Login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22

3.1.3 Managing System-Wide Integrated Login Settings . . . . . . . . . . . . . . . . . . . . . . . . . . 23

3.2 Setting Up Login Scripts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

3.3 Setting Up Login Restrictions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

3.4 Using OpenSLP to Simplify Login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

3.4.1 Setting Up SLP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26

3.4.2 Troubleshooting SLP Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

3.4.3 Configuring SLP and the SUSE Firewall to Work with the Novell Client for Linux. . . 27

3.5 Single Sign-On for LUM Users. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29

4 Managing File Security 31

4.1 Checking File or Folder Rights. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

4.2 Changing Trustee Rights . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

4.3 Adding a Trustee . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

4.4 Removing a Trustee. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

4.5 Combining Multiple Trustees . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34

5 Security Considerations 37

5.1 Security Features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

5.2 Known Security Threats . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

6Novell Client 2.0 SP2 for Linux Administration Guide

novdocx (en) 13 May 2009

5.3 Security Characteristics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

5.3.1 Identification and Authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

5.3.2 Authorization and Access Control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

5.3.3 Roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

5.3.4 Security Auditing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

5.4 New and Modified Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

5.4.1 Configuration Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

5.4.2 PAM Login Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

5.4.3 User Profile Startup Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

5.4.4 KDE and GNOME Desktop Startup Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41

5.4.5 Installation Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

5.5 Other Security Considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42

A The Novell Client for Linux Command Line Utilities 43

A.1 Shell Commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43

A.2 GUI Utilities . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

A.3 Using the Novell Client for Linux Man Pages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44

B Novell Client for Linux Man Pages 47

gnwlogin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48

login.conf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51

mapdrives.conf. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53

ncl_control . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55

ncl_install . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

ncl_man . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58

ncl_tray. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

nwconnections . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

nwcopy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61

nwflag. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

nwlogin . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66

nwlogout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 69

nwmap . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71

nwpurge . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73

nwrights . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75

nwsalvage . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

nwsend. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79

StartupLogin.conf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80

StartupMaps.conf . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83

C Documentation Updates 85

C.1 August 19, 2008 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

C.2 March 24, 2009 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

About This Guide 7

novdocx (en) 13 May 2009

About This Guide

This guide describes how to configure the Novell®ClientTM for Linux software.

Chapter 1, “Understanding the Novell Client for Linux,” on page 9

Chapter 2, “Configuring the Novell Client for Linux,” on page 11

Chapter 3, “Managing Login,” on page 21

Chapter 4, “Managing File Security,” on page 31

Chapter 5, “Security Considerations,” on page 37

Appendix A, “The Novell Client for Linux Command Line Utilities,” on page 43

Appendix B, “Novell Client for Linux Man Pages,” on page 47

Audience

This guide is intended for network administrators.

Feedback

We want to hear your comments and suggestions about this manual and the other documentation

included with this product. Please use the User Comments feature at the bottom of each page of the

online documentation, or go to www.novell.com/documentation/feedback.html and enter your

comments there.

Documentation Updates

For the latest version of this documentation, see the Novell Client online documentation (http://

www.novell.com/documentation/linux_client/index.html) Web site.

Additional Documentation

For information on installing the Novell Client for Linux, see the Novell Client 2.0 SP2 for Linux

Installation Quick Start

For information on the Novell Client tray application, see the Novell Client 2.0 SP2 for Linux User

Guide.

For information on login scripts, see the Novell Login Scripts Guide.

Documentation Conventions

In this documentation, a greater-than symbol (>) is used to separate actions within a step and items

within a cross-reference path.

A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party

trademark.

8Novell Client 2.0 SP2 for Linux Administration Guide

novdocx (en) 13 May 2009

Understanding the Novell Client for Linux

novdocx (en) 13 May 2009

Understanding the Novell Client

for Linux

The Novell®ClientTM for Linux software allows users of Linux* workstations to access and use all

of the services available on servers running Novell eDirectoryTM. The Novell Client brings the full

power, ease of use, manageability, and security of eDirectory to Linux workstations. The Novell

Client for Linux fully supports NetWare®, OES, and eDirectory services and utilities on a Linux

workstation, including security, file, and print services through Novell iPrint.

This section contains the following information:

Section 1.1, “Understanding How the Novell Client for Linux Differs from the Novell Client

for Windows 2000/XP,” on page 9

Section 1.2, “Understanding the Novell Client for Linux Virtual File System,” on page 10

1.1 Understanding How the Novell Client for

Linux Differs from the Novell Client for Windows

2000/XP

Using the Novell Client for Linux differs in a few ways from using the Novell Client for Windows*.

For users and network administrators who are familiar with the Novell Client for Windows,

knowing these differences can help the transition to Linux run more smoothly.

Section 1.1.1, “Installation and Upgrades,” on page 9

Section 1.1.2, “Logging In,” on page 9

Section 1.1.3, “User Interface,” on page 10

Section 1.1.4, “Login Scripts,” on page 10

1.1.1 Installation and Upgrades

The Novell Client for Linux can be installed and upgraded by using either YaST or an

installation script. For more information, see the Novell Client 2.0 SP2 for Linux Installation

Quick Start

There is no Automatic Client Upgrade available on Linux.

The Client Configuration Wizard lets you set up a configuration file that can be used to

preconfigure workstations during installation. For more information, see Section 2.2, “Using

Configuration Files to Preconfigure the Novell Client,” on page 19.

1.1.2 Logging In

When a user logs in to a local workstation and then opens a remote SSH session and logs in as

the same user, the network resources that user has rights to are available to the user.

10 Novell Client 2.0 SP2 for Linux Administration Guide

novdocx (en) 13 May 2009

The Novell Client for Linux can use the NMASTM login method to authenticate. However, the

NMAS login is not integrated in to the Novell Client for Linux login screen, so the default

The Novell Client for Linux uses OpenSLP, whereas the Novell Client for Windows uses

Novell’s implementation of SLP. The network administrator must set up OpenSLP before users

can look up trees, contexts, and servers using the Browse buttons in the Novell Client Login

window. If OpenSLP is not set up, the user must enter a username, tree, and context to connect

to the network. See Chapter 3, “Managing Login,” on page 21 for more information.

Because Linux uses OpenSLP, the implementation is different and the user’s experience is

different. For more information, see Section 3.4, “Using OpenSLP to Simplify Login,” on

page 26.

The Novell Client for Linux does not use the Dynamic Local User or Location Profiles that are

available in Windows.

1.1.3 User Interface

Both a graphical user interface and command line utilities are available to complete client actions

such as mapping drives, setting trustee rights, and copying files.

For information on using the graphical user interface, see the Novell Client 2.0 SP2 for Linux User

Guide. For information on using the command line utilities, see Appendix A, “The Novell Client for

Linux Command Line Utilities,” on page 43 and Appendix B, “Novell Client for Linux Man Pages,”

on page 47.

1.1.4 Login Scripts

Novell has ported the vast majority of login script functionality to the Linux platform. This means

that the login scripts you create in your network can be used for both Windows users and Linux

users with very little difference in functionality.

Some differences do exist, however. For example, mapped drives are implemented by creating

symbolic links and search drives are not available on Linux. Other small differences are created by

the inherent difference between Windows and Linux. All the differences and issues are listed in the

Novell Login Scripts Guide.

1.2 Understanding the Novell Client for Linux

Virtual File System

The Novell Client for Linux differs from previous Novell Clients to enable it to work on the Linux

platform. In Windows, the Novell Client loads a single binary that works on multiple operating

system platforms without modifications. The Novell Client for Linux has a Virtual File System that

consists of a kernel module (

novfs.ko

) that runs as part of the Linux kernel and a daemon (

novfsd

)

that runs in the user space. Both components must be running on the workstation for the client to

connect to the network.

Andere Handbücher für OPEN ENTERPRISE SERVER 2.0 SP2 - DOMAIN SERVICE FOR...

Inhaltsverzeichnis

Andere Novell Software Handbücher

Novell

Novell EDIRECTORY 8.8 SP5 Kurzanleitung

Novell

Novell GROUPWISE 7 - POST OFFICES Bedienungsanleitung

Novell

Novell EDIRECTORY 8.8 - GUIDE Bedienungsanleitung

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Bedienungsanleitung

Novell

Novell OPEN ENTERPRISE SERVER 2 SP2 - PLANING AND IMPLEMENTATION GUIDE... Bedienungsanleitung

Novell

Novell GROUPWISE 7 - DOMAINS Bedienungsanleitung

Novell

Novell IDENTITY MANAGER 3.6. - INTEGRATION Kurzanleitung zur Einrichtung

Novell

Novell LINUX ENTERPRISE DESKTOP 10 - GNOME... Bedienungsanleitung

Novell

Novell IDENTITY MANAGER 3.6.1 Bedienungsanleitung

Novell

Novell IFOLDER 3.8 - CROSS-PLATFORM Bedienungsanleitung

Novell

Novell SERVER CONSOLIDATION MIGRATION TOOLKIT 1.1 - ADMINISTRATION GUIDE... Bedienungsanleitung

Novell

Novell CLIENT FOR LINUX 1.1 Bedienungsanleitung

Novell

Novell SENTINEL RAPID DEPLOYMENT 6.1 - INSTALLATION GUIDE... Bedienungsanleitung

Novell

Novell GROUPWISE 8 - POST OFFICES Bedienungsanleitung

Novell

Novell IDENTITY MANAGER 3.6.1 - E-MAIL Bedienungsanleitung

Novell

Novell BUSINESS CONTINUITY CLUSTERING 1.2 -... Bedienungsanleitung

Novell

Novell LINUX ENTERPRISE SERVER 10 SP1 - ARCHITECTURE-SPECIFIC INFORMATION... Handbuch

Novell

Novell ACCESS MANAGER 3.1 SP2 - README 2010 Bedienungsanleitung

Novell

Novell GROUPWISE 7 - SECURITY POLICIES Bedienungsanleitung

Novell

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE... Kurzanleitung

Novell

Novell ZENWORKS APPLICATION VIRTUALIZATION - V8.0.3 INTEGRATION AND STREAMING... Bedienungsanleitung

Novell

Novell GROUPWISE 7 - TROUBLESHOOTING 3 Bedienungsanleitung

Novell

Novell ZENWORKS LINUX MANAGEMENT 7.2 IR2 - ... Bedienungsanleitung

Novell

Novell IDENTITY MANAGER 3.6.1 - PASSWORD MANAGEMENT Bedienungsanleitung

Beliebte Software Handbücher anderer Marken

COMPRO

COMPRO COMPROFM Bedienungsanleitung

Muratec

Muratec OFFICEBRIDGE ONLINE Bedienungsanleitung

Oracle

Oracle Contact Center Anywhere 8.1 Bedienungsanleitung

Adobe

Adobe 65007312 - Photoshop Lightroom Handbuch

Avaya

Avaya NULL One-X for RIM Blackberry Bedienungsanleitung

HP ProLiant BL420c Bedienungsanleitung

PS Audio

PS Audio PowerPlay Betriebsanleitung

Brady

Brady LOCKOUT PRO 3.0 Service-Handbuch

Avaya

Avaya Interaction Center Bedienungsanleitung

Texas Instruments

Texas Instruments TI-83 Plus Silver Edition Handbuch

Oracle

Oracle Application 9i Bedienungsanleitung

Acer

Acer RDM Bedienungsanleitung

Canon

Canon Vixia HF21 Bedienungsanleitung

Canon

Canon ZR950 Bedienungsanleitung

Samsung

Samsung Auto Backup Bedienungsanleitung

Polycom

Polycom Vortex EF2201 Montage- und Bedienungsanleitung

Brocade Communications Systems

Brocade Communications Systems Brocade 8/12c Bedienungsanleitung

Lexmark

Lexmark Apps Service-Handbuch