NetIQ Identity Manager Setup Guide
Реклама
Реклама
www.netiq.com/documentation
NetIQ Identity Manager
Setup Guide
December 2014
NetIQ Identity Manager
Setup Guide
December 2014
Legal Notice
THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE
SUBJECT TO THE TERMS OF A LICENSE AGREEMENT OR A NON-DISCLOSURE AGREEMENT. EXCEPT AS EXPRESSLY
SET FORTH IN SUCH LICENSE AGREEMENT OR NON-DISCLOSURE AGREEMENT, NETIQ CORPORATION PROVIDES
THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT "AS IS" WITHOUT WARRANTY OF ANY
KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SOME STATES DO NOT ALLOW DISCLAIMERS OF
EXPRESS OR IMPLIED WARRANTIES IN CERTAIN TRANSACTIONS; THEREFORE, THIS STATEMENT MAY NOT APPLY
TO YOU.
For purposes of clarity, any module, adapter or other similar material ("Module") is licensed under the terms and conditions of
the End User License Agreement for the applicable version of the NetIQ product or software to which it relates or
interoperates with, and by accessing, copying or using a Module you agree to be bound by such terms. If you do not agree to
the terms of the End User License Agreement you are not authorized to use, access or copy a Module and you must destroy all
copies of the Module and contact NetIQ for further instructions.
This document and the software described in this document may not be lent, sold, or given away without the prior written
permission of NetIQ Corporation, except as otherwise permitted by law. Except as expressly set forth in such license
agreement or non-disclosure agreement, no part of this document or the software described in this document may be
reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, or otherwise,
without the prior written consent of NetIQ Corporation. Some companies, names, and data in this document are used for
illustration purposes and may not represent real companies, individuals, or data.
This document could include technical inaccuracies or typographical errors. Changes are periodically made to the
information herein. These changes may be incorporated in new editions of this document. NetIQ Corporation may make
improvements in or changes to the software described in this document at any time.
U.S. Government Restricted Rights: If the software and documentation are being acquired by or on behalf of the U.S.
Government or by a U.S. Government prime contractor or subcontractor (at any tier), in accordance with 48 C.F.R. 227.7202-4
(for Department of Defense (DOD) acquisitions) and 48 C.F.R. 2.101 and 12.212 (for non-DOD acquisitions), the government’s
rights in the software and documentation, including its rights to use, modify, reproduce, release, perform, display or disclose
the software or documentation, will be subject in all respects to the commercial license rights and restrictions provided in the
license agreement.
© 2014 NetIQ Corporation. All Rights Reserved.
For information about NetIQ trademarks, see https://www.netiq.com/company/legal/.
THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT ARE FURNISHED UNDER AND ARE
SUBJECT TO THE TERMS OF A LICENSE AGREEMENT OR A NON-DISCLOSURE AGREEMENT. EXCEPT AS EXPRESSLY
SET FORTH IN SUCH LICENSE AGREEMENT OR NON-DISCLOSURE AGREEMENT, NETIQ CORPORATION PROVIDES
THIS DOCUMENT AND THE SOFTWARE DESCRIBED IN THIS DOCUMENT "AS IS" WITHOUT WARRANTY OF ANY
KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. SOME STATES DO NOT ALLOW DISCLAIMERS OF
EXPRESS OR IMPLIED WARRANTIES IN CERTAIN TRANSACTIONS; THEREFORE, THIS STATEMENT MAY NOT APPLY
TO YOU.
For purposes of clarity, any module, adapter or other similar material ("Module") is licensed under the terms and conditions of
the End User License Agreement for the applicable version of the NetIQ product or software to which it relates or
interoperates with, and by accessing, copying or using a Module you agree to be bound by such terms. If you do not agree to
the terms of the End User License Agreement you are not authorized to use, access or copy a Module and you must destroy all
copies of the Module and contact NetIQ for further instructions.
This document and the software described in this document may not be lent, sold, or given away without the prior written
permission of NetIQ Corporation, except as otherwise permitted by law. Except as expressly set forth in such license
agreement or non-disclosure agreement, no part of this document or the software described in this document may be
reproduced, stored in a retrieval system, or transmitted in any form or by any means, electronic, mechanical, or otherwise,
without the prior written consent of NetIQ Corporation. Some companies, names, and data in this document are used for
illustration purposes and may not represent real companies, individuals, or data.
This document could include technical inaccuracies or typographical errors. Changes are periodically made to the
information herein. These changes may be incorporated in new editions of this document. NetIQ Corporation may make
improvements in or changes to the software described in this document at any time.
U.S. Government Restricted Rights: If the software and documentation are being acquired by or on behalf of the U.S.
Government or by a U.S. Government prime contractor or subcontractor (at any tier), in accordance with 48 C.F.R. 227.7202-4
(for Department of Defense (DOD) acquisitions) and 48 C.F.R. 2.101 and 12.212 (for non-DOD acquisitions), the government’s
rights in the software and documentation, including its rights to use, modify, reproduce, release, perform, display or disclose
the software or documentation, will be subject in all respects to the commercial license rights and restrictions provided in the
license agreement.
© 2014 NetIQ Corporation. All Rights Reserved.
For information about NetIQ trademarks, see https://www.netiq.com/company/legal/.
Contents 3
Contents
About this Book and the Library 17
About NetIQ Corporation 19
Part I Introduction 21
1 Overview of the Components of Identity Manager 23
2 Creating and Maintaining Your Identity Manager Environment 25
2.1 Designer for Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
2.2 Analyzer for Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
2.3 Role Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
2.4 iManager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
3 Managing Data in the Identity Manager Environment 27
3.1 Understanding Data Synchronization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
3.2 Understanding Auditing, Reporting, and Compliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
3.3 Understanding the Components for Synchronizing Your Identity Data . . . . . . . . . . . . . . . . . . . . . . . 28
3.3.1 Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
3.3.2 Identity Manager Engine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
3.3.3 Remote Loader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
3.3.4 Identity Reporting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
4 Provisioning Users for Secure Access 31
4.1 Understanding the Attestation Process in Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
4.2 Understanding the Self-Service Process in Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
4.3 Understanding the Components for Managing User Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
4.3.1 User Application and Roles Based Provisioning Module . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
4.3.2 Identity Manager Home and Provisioning Dashboard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
4.4 Using Self-Service Password Management in Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
4.4.1 Understanding the Default Self-Service Process. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
4.4.2 Understanding the Legacy Password Management Provider . . . . . . . . . . . . . . . . . . . . . . . 36
4.5 Using Single Sign-on Access in Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
4.5.1 Understanding Authentication with One SSO Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
4.5.2 Understanding the Keystore for One SSO Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
4.5.3 Understanding Audit Events for One SSO Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Part II Planning to Install Identity Manager 39
5 Planning Overview 41
5.1 Planning Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
5.2 Understanding the Integrated and Standalone Installation Processes . . . . . . . . . . . . . . . . . . . . . . . 43
5.2.1 Understanding the Integrated Installation Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
5.2.2 Understanding the Standalone Installation Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
5.3 Recommended Installation Scenarios and Server Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
Contents
About this Book and the Library 17
About NetIQ Corporation 19
Part I Introduction 21
1 Overview of the Components of Identity Manager 23
2 Creating and Maintaining Your Identity Manager Environment 25
2.1 Designer for Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
2.2 Analyzer for Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
2.3 Role Administration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
2.4 iManager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26
3 Managing Data in the Identity Manager Environment 27
3.1 Understanding Data Synchronization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
3.2 Understanding Auditing, Reporting, and Compliance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
3.3 Understanding the Components for Synchronizing Your Identity Data . . . . . . . . . . . . . . . . . . . . . . . 28
3.3.1 Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
3.3.2 Identity Manager Engine . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
3.3.3 Remote Loader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
3.3.4 Identity Reporting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
4 Provisioning Users for Secure Access 31
4.1 Understanding the Attestation Process in Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31
4.2 Understanding the Self-Service Process in Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
4.3 Understanding the Components for Managing User Provisioning . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
4.3.1 User Application and Roles Based Provisioning Module . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
4.3.2 Identity Manager Home and Provisioning Dashboard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 34
4.4 Using Self-Service Password Management in Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
4.4.1 Understanding the Default Self-Service Process. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
4.4.2 Understanding the Legacy Password Management Provider . . . . . . . . . . . . . . . . . . . . . . . 36
4.5 Using Single Sign-on Access in Identity Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
4.5.1 Understanding Authentication with One SSO Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
4.5.2 Understanding the Keystore for One SSO Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
4.5.3 Understanding Audit Events for One SSO Provider . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38
Part II Planning to Install Identity Manager 39
5 Planning Overview 41
5.1 Planning Checklist . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
5.2 Understanding the Integrated and Standalone Installation Processes . . . . . . . . . . . . . . . . . . . . . . . 43
5.2.1 Understanding the Integrated Installation Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
5.2.2 Understanding the Standalone Installation Process . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
5.3 Recommended Installation Scenarios and Server Setup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
4 NetIQ Identity Manager Setup Guide
5.3.1 Send Events to an External Auditing Service without Reporting in Identity Manager . . . . . 44
5.3.2 Send Events to Identity Manager and Generate Reports . . . . . . . . . . . . . . . . . . . . . . . . . . 45
5.3.3 Send Events to an External Service Before Pushing Events to Identity Manager . . . . . . . . 45
5.3.4 Recommended Server Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
5.3.5 Selecting an Operating System Platform for Identity Manager . . . . . . . . . . . . . . . . . . . . . . 46
5.4 Understanding Licensing and Activation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
5.5 Understanding Identity Manager Communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
5.6 Understanding Language Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
5.6.1 Translated Components and Installation Programs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
5.6.2 Special Considerations for Language Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
5.7 Downloading the Installation Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
6 Considerations and Prerequisites for Installation 53
6.1 Installing Identity Manager in a Clustered Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
6.2 Installing Identity Manager on an RHEL 6.x Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
6.2.1 Prerequisites for Installing on RHEL 6.x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
6.2.2 Running a Prerequisite Check on RHEL 6.x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
6.2.3 Ensuring that the RHEL 6.x Server has the Necessary Dependent Libraries . . . . . . . . . . . 54
6.2.4 Creating a Repository for the Installation Media . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Part III Installing the Identity Vault 57
7 Planning to Install the Identity Vault 59
7.1 Checklist for Installing the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
7.2 Prerequisites and Considerations for Installing the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
7.2.1 Prerequisites for Installing the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
7.2.2 Prerequisites for Installing the Identity Vault as a Non-root User . . . . . . . . . . . . . . . . . . . . 62
7.2.3 Prerequisites for Installing Identity Vault on a Windows Server . . . . . . . . . . . . . . . . . . . . . 63
7.2.4 Prerequisites for Installing the Identity Vault in a Clustered Environment . . . . . . . . . . . . . . 63
7.3 Understanding Identity Manager Objects in eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
7.4 Replicating the Objects that Identity Manager Needs on the Server . . . . . . . . . . . . . . . . . . . . . . . . . 64
7.5 Using Scope Filtering to Manage Users on Different Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
7.6 Understanding the Linux Packages in the Identity Vault Installation Kit . . . . . . . . . . . . . . . . . . . . . . 67
7.7 System Requirements for the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
8 Preparing to Install the Identity Vault 71
8.1 Using Escape Characters when a Container Name Includes a Period (“.”) . . . . . . . . . . . . . . . . . . . . 71
8.2 Using OpenSLP or hosts.nds for Resolving Tree Names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
8.2.1 Using a hosts.nds File to Resolve Tree Names. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
8.2.2 Understanding OpenSLP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
8.2.3 Configuring SLP for the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
8.3 Improving Identity Vault Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
8.4 Using IPv6 Addresses on the Identity Vault Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
8.4.1 Using IPv6 Addresses on Linux Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
8.4.2 Using IPv6 Addresses on Windows Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
8.5 Using LDAP to Communicate with the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
8.6 Installing NICI Manually on Workstations that have Management Utilities . . . . . . . . . . . . . . . . . . . . 80
8.6.1 Installing NICI on Linux Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
8.6.2 Installing NICI on Windows Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
8.7 Installing NMAS Client Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
8.7.1 Installing and Configuring NMAS Client Software on Linux Servers . . . . . . . . . . . . . . . . . . 81
8.7.2 Installing NMAS Client Software on Windows Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
5.3.1 Send Events to an External Auditing Service without Reporting in Identity Manager . . . . . 44
5.3.2 Send Events to Identity Manager and Generate Reports . . . . . . . . . . . . . . . . . . . . . . . . . . 45
5.3.3 Send Events to an External Service Before Pushing Events to Identity Manager . . . . . . . . 45
5.3.4 Recommended Server Setup . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45
5.3.5 Selecting an Operating System Platform for Identity Manager . . . . . . . . . . . . . . . . . . . . . . 46
5.4 Understanding Licensing and Activation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
5.5 Understanding Identity Manager Communication . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
5.6 Understanding Language Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
5.6.1 Translated Components and Installation Programs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
5.6.2 Special Considerations for Language Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
5.7 Downloading the Installation Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
6 Considerations and Prerequisites for Installation 53
6.1 Installing Identity Manager in a Clustered Environment . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
6.2 Installing Identity Manager on an RHEL 6.x Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
6.2.1 Prerequisites for Installing on RHEL 6.x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
6.2.2 Running a Prerequisite Check on RHEL 6.x . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54
6.2.3 Ensuring that the RHEL 6.x Server has the Necessary Dependent Libraries . . . . . . . . . . . 54
6.2.4 Creating a Repository for the Installation Media . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
Part III Installing the Identity Vault 57
7 Planning to Install the Identity Vault 59
7.1 Checklist for Installing the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59
7.2 Prerequisites and Considerations for Installing the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
7.2.1 Prerequisites for Installing the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
7.2.2 Prerequisites for Installing the Identity Vault as a Non-root User . . . . . . . . . . . . . . . . . . . . 62
7.2.3 Prerequisites for Installing Identity Vault on a Windows Server . . . . . . . . . . . . . . . . . . . . . 63
7.2.4 Prerequisites for Installing the Identity Vault in a Clustered Environment . . . . . . . . . . . . . . 63
7.3 Understanding Identity Manager Objects in eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
7.4 Replicating the Objects that Identity Manager Needs on the Server . . . . . . . . . . . . . . . . . . . . . . . . . 64
7.5 Using Scope Filtering to Manage Users on Different Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
7.6 Understanding the Linux Packages in the Identity Vault Installation Kit . . . . . . . . . . . . . . . . . . . . . . 67
7.7 System Requirements for the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 70
8 Preparing to Install the Identity Vault 71
8.1 Using Escape Characters when a Container Name Includes a Period (“.”) . . . . . . . . . . . . . . . . . . . . 71
8.2 Using OpenSLP or hosts.nds for Resolving Tree Names . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
8.2.1 Using a hosts.nds File to Resolve Tree Names. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
8.2.2 Understanding OpenSLP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
8.2.3 Configuring SLP for the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
8.3 Improving Identity Vault Performance . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
8.4 Using IPv6 Addresses on the Identity Vault Server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
8.4.1 Using IPv6 Addresses on Linux Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77
8.4.2 Using IPv6 Addresses on Windows Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
8.5 Using LDAP to Communicate with the Identity Vault . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78
8.6 Installing NICI Manually on Workstations that have Management Utilities . . . . . . . . . . . . . . . . . . . . 80
8.6.1 Installing NICI on Linux Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 80
8.6.2 Installing NICI on Windows Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
8.7 Installing NMAS Client Software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
8.7.1 Installing and Configuring NMAS Client Software on Linux Servers . . . . . . . . . . . . . . . . . . 81
8.7.2 Installing NMAS Client Software on Windows Servers . . . . . . . . . . . . . . . . . . . . . . . . . . . . 82
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
Реклама
Пов''язані
NetIQ Identity Manager Setup Guide
NetIQ Identity Manager Setup Guide
NetIQ Identity Manager Setup Guide
NetIQ Identity Manager Setup Guide
NetIQ Identity Manager Setup Guide
NetIQ Identity Manager 4.5 Standard Edition Quick Start Guide
NetIQ Identity Manager Quick Start
NetIQ Identity Manager 4.6 Standard Edition Quick Start Guide
Identity Manager Driver for Access Review Installation Guide
NetIQ iManager Installation Guide - January 2016
NetIQ Designer for Identity Manager 4.5 Guide | AI Chat & PDF Download
