Get a Free 30 Day Evaluation of Kanaka for Mac!

Schema Notes

IUAdmin extends the functionality of NDS with both the Password Self-Reset facility and the Resources Portal facility. IUAdmin gives you a choice of storing object information associated with these facilities in files in the file system or in NDS via extensions to the schema. IUAdmin will automatically detect if the schema has been extended and if so, will use NDS to store these items, otherwise it uses the file system.

File System Option

The file system option was devised as a way of letting customers test IUAdmin in a production tree without requiring any schema extensions. The data is securely stored in individual files in the \SELFRSET and \RESOURCE subdirectories under the \IUADMIN directory. There is one file per object that is storing either Self-Reset or Resource data. The filename is based on a one-way hash of the fully distinguished name of the object.

There are drawbacks to using the file system storage option in a production environment. As mentioned, the filename used to store information for an object is based on the fully distinguished name of the object. If the object is renamed or moved, there is no mechanism in place to change the file name accordingly so that it corresponds to the new fully distinguished name of the object. If the object is deleted, there is no mechanism to delete the associated file.

NDS eDirectory Option

If you are going to use IUAdmin in a production environment, we suggest that you put the schema extensions in place to ease administration.

The two extensions are:

1. The attribute cccPasswordSelfReset is created and added to the Person class. This allows storage of the IUAdmin Self-Service Password Reset credentials.
2. The attribute cccResource is created added to the Top class. This allows the storage of resources associated with the IUAdmin Resource Portal.

These attributes are added with associated ASN1 IDs that contain OIDs assigned to Condrey Consulting Corporation by Novell.

To add the schema extensions, you will need to run the IUASETUP.NLM from the \IUADMIN\SCHEMA\ directory once. It will ask you to authenticate as a user that has the authority to extend the schema. Then, after waiting an appropriate amount of time for the schema changes to be propagated on the network, reload IUADMIN.NLM.

Determining if the Schema Extensions are in Place

You can determine the storage option in use by IUAdmin by clicking "IUAdmin Administration" on the "Advanced" page. This page will show various aspects of the IUAdmin configuration, including the storage methods. An example appears below.