Author: nkinder
Update of /cvs/dirsec/admservconsole/help/en/help
In directory cvs-int.fedora.redhat.com:/tmp/cvs-serv21037/help/en/help
Added Files:
access_permissions_help.html add_crl_ckl.html
add_edit_community.html add_edit_host_name.html
add_edit_ip_address.html add_edit_manager.html
add_host_filter.html add_users_and_groups.html
administration_domain_information.html
administration_express.html administration_express_logs.html
administration_express_server_information.html
browse_directory.html
certificate_information_certification_path.html
certificate_information_detail.html
certificate_information_general.html
certificate_install_wizard_certificate_information.html
certificate_install_wizard_certificate_location.html
certificate_install_wizard_certificate_type.html
certificate_install_wizard_intended_purpose.html
certificate_request_install_wizard_token_password.html
certificate_request_wizard_introduction.html
certificate_request_wizard_request_submission.html
certificate_request_wizard_requestor_information.html
certificates_group.html change_directory.html
change_security_device_password.html
cipher_preference_ssl_2.0.html cipher_preference_ssl_3.0.html
cipher_preference_tls.html
configure_administration_server_access.html
configure_administration_server_configuration_ds.html
configure_administration_server_encryption.html
configure_administration_server_network.html
configure_administration_server_user_ds.html
configure_custom_views.html configure_security_modules.html
construct_and_test_ldap_url.html construct_ldap_url.html
create_group_general.html create_group_languages.html
create_group_members_certificates_group.html
create_group_members_dynamic_group.html
create_group_members_static_group.html
create_new_administration_domain.html
create_organizational_unit.html
create_organizational_unit_languages.html
create_organizational_unit_languages_with_pronunciation.html
create_user_administrator.html
create_user_administrator_languages.html
create_user_administrator_licenses.html
create_user_administrator_nt_user.html
create_user_administrator_posix_user.html edit_aci_hosts.html
edit_aci_manual_mode.html edit_aci_rights.html
edit_aci_targets.html edit_aci_times.html
edit_aci_users_groups.html edit_view.html
host_information.html
import_keys_and_certificates_alias_selection.html
import_keys_and_certificates_confirmation.html
import_keys_and_certificates_source_location.html
install_security_module.html license_tracking.html
logging_options.html manage_access_control.html
manage_certificates_ca_certs.html
manage_certificates_revoked_certs.html
manage_certificates_server_certs.html
merge_configuration_directory_server_information.html
migrate_keys_and_certificates.html
migrate_server_configuration.html new_view.html
preferences_fonts.html preferences_settings.html
preferences_ui_permissions.html replication_monitor.html
save_font_profile.html search_users_and_groups.html
search_users_and_groups_advanced.html security_warning.html
select_font.html select_organizational_unit.html
select_server_for_migration.html
select_target_servers_for_cloning.html
server_group_information.html server_information.html
set_permission_dialog.html set_security_device_password.html
set_security_device_password_change_security_device_password.html
ssl_token_password.html users_and_groups.html
Log Message:
Resolves: 251427
Summary: Added online help files to admin server console package.
--- NEW FILE access_permissions_help.html ---
<p class="topic">
Access Permissions Help
</p>
<p class="text">
To set access permissions, you must first select a server or task that you want to allow
or deny access to. Then, you must define how access is restricted. This can be a
combination of user, host, time, and permission restrictions.
</p>
--- NEW FILE add_crl_ckl.html ---
<p class="topic">
Add CRL/CKL
</p>
<p class="text">
Use this dialog box to add a Certificate Revocation List (CRL) or a Compromised Key List
(CKL) to the trust database.
</p>
<p class="text">
<b>Enter full path to CRL/CKL file.</b> Provide the full path to the file
containing the CRL or CKL.
</p>
<p class="text">
<b>File contains a Certificate Revocation List (CRL).</b> Select this option
if the file contains a CRL.
</p>
<p class="text">
<b>File contains a Compromised Key List (CKL).</b> Select this option if the
file contains a CKL.
</p>
--- NEW FILE add_edit_community.html ---
<p class="topic">
Add/Edit Community
</p>
<p class="text">
A community string is a password that the master agent uses for authentication. Use this
dialog box to do the following:
</p>
<ul>
<li>
Add a community string to the list of those sent by the master agent and specify the
operations that the agent wants to perform when it presents this community string.
</li>
<li>
Edit a community string that is currently sent by the master agent and modify the
operations that the agent wants to perform when it presents this community string.
</li>
</ul>
<p class="text">
<b>Community.</b> Add or edit the community string.
</p>
<p class="text">
<b>GET and SET.</b> Choose this option if you want the agent to be able to
request data, reply to messages, and set variable values.
</p>
<p class="text">
<b>GET only.</b> Choose this option if you want the agent to be able to
request data and reply to messages. The agent will not be able to set variable values.
</p>
<p class="text">
<b>SET only.</b> Choose this option if you want the agent to be able to set
variable values. The agent will not be able to request data or reply to messages.
</p>
--- NEW FILE add_edit_host_name.html ---
<p class="topic">
Add/Edit Host Name
</p>
<p class="text">
Use this dialog box to add to the list of hosts allowed to connect to the Administration
Server or to edit information about a host that is already allowed to connect. Enter a
fully qualified host name. Wildcards are acceptable. Example:
<code>*.example.com</code>.
</p>
--- NEW FILE add_edit_ip_address.html ---
<p class="topic">
Add/Edit IP Address
</p>
<p class="text">
Use this dialog box to add to the list of hosts allowed to connect to the Administration
Server or to edit information about a host that is already allowed to connect. Enter an IP
address. Wildcards are acceptable. Example: <code>236.45.*</code>
</p>
--- NEW FILE add_edit_manager.html ---
<p class="topic">
Add/Edit Manager
</p>
<p class="text">
Use this dialog box to specify a network management station (NMS) that the master agent
should communicate with or to edit information about an NMS that the master agent already
communicates with.
</p>
<p class="text">
<b>Manager Station.</b> If you are adding a new NMS, enter a valid system name
or IP address for the NMS. If you are editing information about an existing NMS, make any
necessary changes to the system name or IP address.
</p>
<p class="text">
<b>Trap Port.</b> Enter or edit the port number on which the NMS listens for
status messages (traps). The default is 162.
</p>
<p class="text">
<b>With Community.</b> Enter or edit the community string that you want the
master agent to include when sending traps to this NMS. A community string is a password
that an SNMP agent uses for authentication.
</p>
--- NEW FILE add_host_filter.html ---
<p class="topic">
Add Host Filter
</p>
<p class="text">
Use this dialog box to add a host or IP address filter to this ACI. This filter determines
which host machines have access to the selected resource.
</p>
<p class="text">
<b>DNS host filter.</b> Enter all or part of a DNS host name to grant access
to. You can use the <code>*</code> wildcard. For example, entering
<code>*.example.com</code> would allow all hosts in the
<code>example.com</code> domain to access the selected resource.
</p>
<p class="text">
<b>IP address host filter.</b> Enter all or part of an IP address to grant
access to. You can use the * wildcard. For example, entering
<code>193.234.*.*</code> would allow all hosts that have IP addresses
beginning with <code>193.234</code> to access the selected resource.
</p>
--- NEW FILE add_users_and_groups.html ---
<p class="topic">
Add Users
</p>
<p class="text">
Use this dialog box to add users, groups, and roles that have access to this resource.
</p>
<ul>
<li>
First, search for users, groups, roles, or administrators to grant access to:
</li>
<dl>
<dt>
<b>Search Area.</b> Select a set of entries in which you want to search. You
can choose Administrators, Users, Groups, Roles, or "Special Rights."
<br /> </dt> <dt>
<b>Search For.</b> Enter the name of the user, group, role, or administrator
that you want to add. If you do not know the full name, you can enter any part of it. To
find all entries, search for <code>*</code>.
<br /> </dt> <dt>
<b>Search.</b> Click to perform your search.
<br /> </dt> <dt>
The center frame of the "Add Users" dialog displays the results of your search.
This is called the results list. The bottom frame shows the users that you've granted
access to. This is called the access list.
<br /> </dt> </dl>
<li>
Then, grant access:
</li>
<dl>
<dt>
Click an entry in the results list to select it. You can select multiple entries by
pressing Control and clicking the desired entries.
<br /> </dt> <dt>
<b>Add.</b> Adds all selected entries from the results list to the access
list.
<br /> </dt> <dt>
<b>Remove.</b> Removes all selected entries from the access list.
<br /> </dt> </dl>
</ul>
<p class="text">
If you want to add more entries to the access list, you can perform additional searches.
</p>
--- NEW FILE administration_domain_information.html ---
<p class="topic">
Administration Domain Information
</p>
<p class="text">
Use this panel to view or edit administration domain information.
</p>
<p class="text">
<b>Edit.</b> Click to edit information about the selected administration
domain.
</p>
<p class="text">
You can edit the following information about the selected administration domain:
</p>
<p class="text">
<b>Domain Name.</b> Enter the name of the domain as you want it to appear in
the navigation tree. For example, <code>example.com</code>.
</p>
<p class="text">
<b>Description (Optional).</b> Enter a string that helps you identify this
domain. For example, Example Corporation.
</p>
<p class="text">
<b>User Directory Host and Port.</b> Specify the location of the user
directory using the host computer's fully qualified domain name and port number. You
can enter more than one user directory location separated by spaces. This is useful when
you use multiple directories to allow users to log in if a primary Directory Server is
inaccessible. Example:
</p>
<p class="text">
<code>east.example.com:389 west.example.com:393</code>
</p>
<p class="text">
All host computers specified in the User Directory Host and Port field must have the same
configuration for the following settings:
</p>
<p class="text">
<b>Secure Connection.</b> Check this box if the new user directory port is
already enabled for SSL communication.
</p>
<p class="text">
<b>User Directory Subtree.</b> Enter the base DN of the user information in
the new user directory. Example: <code>o=example.com</code>
</p>
<p class="text">
<b>Bind DN.</b> Enter the distinguished name for a user who has full access
permission to the new user directory. Example: <code>uid=jdoe, ou=people,
o=example.com</code>.
</p>
<p class="text">
<b>Bind Password.</b> Enter the password for the user specified by the Bind
DN.
</p>
<table border="0" cellpadding="0" width="90%">
<tr><td colspan="2">
<hr size="1" />
</td></tr>
<tr>
<td valign="top"><p class="caution">
Caution
</p>
</td>
<td valign="top"><p class="text">
These settings affect all servers in the domain. If you make changes here, you must
restart all servers in the domain.
</p>
</td>
</tr>
<tr><td colspan="2">
<hr size="1" />
</td></tr>
</table>
--- NEW FILE administration_express.html ---
<p class="topic">
Administration Express
</p>
<p class="text">
The Administration Express page is an HTML-based version of the Management Console that
provides quick access to servers running an Administration Server. In the Administration
Express page, you can perform four administration tasks:
</p>
<ul>
<li>
Starting servers (except stopped instances of Administration Server, which must be started
from the command line)
</li>
<li>
Stopping servers
</li>
<li>
Viewing basic server information, such as name, description, and installation folder.
</li>
<li>
Viewing logs
</li>
</ul>
<p class="text">
Keep the following in mind when you use the Administration Express page:
</p>
<ul>
<li>
If you turn off the instance of Administration Server that you used to log in to
Administration Express, you will no longer be able to use that Administration Express
page. If this happens, you will need to restart the Administration Server.
</li>
</ul>
--- NEW FILE administration_express_logs.html ---
<p class="topic">
Administration Express - Logs
</p>
<p class="text">
Log files can help you monitor activity on an instance of Administration Server, and can
also help you troubleshoot server problems. Server logs use the Common Logfile Format, a
broadly supported format that provides information about the server.
</p>
<p class="h2">
To View Log Entries
</p>
<ol type="1">
<li value="1">
Indicate your viewing preferences.
</li>
<dl>
<dt>
<b>Log to view.</b> Use the drop-down list to select the type of log you want
to view. The Administration Server generates the drop-down list based on the files that
exist in a server's log directory. The Administration Server uses two logs: an access
log and an error log.
<br /> </dt> </dl>
<ul>
<li>
The access log displays information about requests to the server and the responses from
the server. By default, the file is located at
<code>admin-serv/logs/access</code>.
</li>
<li>
The error log displays errors the server has encountered since the log file was created.
It also contains informational messages about the server, such as when the server was
started and who tried unsuccessfully to log on to the server. By default, the file is
located at <code>admin-serv/logs/error</code>.
</li> </ul>
<dl>
<dt>
<b>Number of entries.</b> Enter the number of log entries you want to view.
<br /> </dt> <dt>
<b>Only show entries with.</b> Enter a character string for filtering log
entries. Only entries containing the character string you specify will be displayed.
<br /> </dt> <dt>
<b>Reset.</b> Click to reset the fields on this screen to their default
values.
<br /> </dt> </dl>
<li value="2">
Click OK.
</li>
</ol>
--- NEW FILE administration_express_server_information.html ---
<p class="topic">
Administration Express - Server Information
</p>
<p class="text">
You can view, but not edit, the following information about the selected server:
</p>
<p class="text">
<b>Server Name.</b> The name of the server as displayed in the navigation
pane. The server name usually indicates the type of server. Examples: Administration
Server, Messaging Server, Directory Server.
</p>
<p class="text">
<b>Installation Date.</b> The date and time when the server was installed.
</p>
<p class="text">
<b>Server Root.</b> The directory where the server binary files are
installed.
</p>
<p class="text">
<b>Port.</b> The port number the server is running on.
</p>
<p class="text">
<b>Product Name.</b> The server's official product name.
</p>
<p class="text">
<b>Vendor.</b> The server software maker or provider.
</p>
<p class="text">
<b>Version.</b> The server product version number.
</p>
<p class="text">
<b>Build Number.</b> Uniquely identifies a particular release of a server
version.
</p>
<p class="text">
<b>Security Level.</b> Indicates whether the server uses domestic (US based,
128-bit ciphers) or export (non-US based, 40-bit ciphers) encryption levels.
</p>
<p class="text">
<b>Additional Information.</b> Lists any special server requirements and links
to other important information.
</p>
--- NEW FILE browse_directory.html ---
<p class="topic">
Browse Directory
</p>
<p class="text">
Use this tree to locate directory entries. Click on + to expand a branch and - to collapse
it. When you select an entry, its Distinguished Name (DN) appears at the bottom of the
dialog box.
</p>
--- NEW FILE certificate_information_certification_path.html ---
<p class="topic">
Certificate Information - Certification Path
</p>
<p class="text">
A certificate chain is a series of certificates representing a CA hierarchy. When a CA
issues a certificate, it can include its certificate chain. This prevents clients and
servers from having to explicitly trust every CA server that may issue a certificate. If a
single CA certificate in the chain is trusted, then every certificate issued by it is also
trusted.
</p>
<p class="text">
If a certificate does not contain a certificate chain, this panel will show the text
<code>BROKEN_CERTIFICATE_CHAIN</code>. In order to communicate securely, you
will need to explicitly trust this certificate.
</p>
--- NEW FILE certificate_information_detail.html ---
<p class="topic">
Certificate Information - Detail
</p>
<p class="text">
This panel lists detailed information about the selected certificate. This includes all
fields from the General panel as well as the following:
</p>
<p class="text">
<b>Organizational Unit.</b> If an organizational unit was specified during the
certificate request process, it is displayed here.
</p>
<p class="text">
<b>Signature algorithm.</b> The mathematical formula used to sign the
certificate.
</p>
<p class="text">
<b>Public Key.</b> The mathematical formula used to create the public key for
the certificate.
</p>
<p class="text">
<b>Key Strength.</b> The encryption strength of the public key.
</p>
<p class="text">
<b>Version.</b> The version number of the public key algorithm.
</p>
<p class="text">
<b>Subject DN.</b> The full DN of the certificate requestor.
</p>
<p class="text">
<b>Issuer DN.</b> The full DN of the Certificate Authority (CA).
</p>
--- NEW FILE certificate_information_general.html ---
<p class="topic">
Certificate Information - General
</p>
<p class="text">
This panel displays the following information about the selected certificate:
</p>
<p class="text">
<b>Issued to.</b> The common name of the certificate requestor.
</p>
<p class="text">
<b>Issued by.</b> The name of the CA that issued the certificate.
</p>
<p class="text">
<b>Serial number.</b> The serial number that the CA assigned to this
certificate.
</p>
<p class="text">
<b>Fingerprint.</b> The unique identifier for this certificate.
</p>
<p class="text">
<b>Valid from.</b> The date on which this certificate's validity period
begins.
</p>
<p class="text">
<b>to.</b> The date on which this certificate's validity period ends.
</p>
<p class="text">
<b>This certificate has been verified for the following uses.</b> If the
certificate is not for general use, this section will list the specific purposes for which
it can be used.
</p>
--- NEW FILE certificate_install_wizard_certificate_information.html ---
<p class="topic">
Certificate Install Wizard - Certificate Information
</p>
<p class="text">
This screen displays the contents of your certificate. Ensure that all information is
correct, then click Next.
</p>
<p class="text">
<b>Details.</b> Click to see the complete information about this certificate.
</p>
--- NEW FILE certificate_install_wizard_certificate_location.html ---
<p class="topic">
Certificate Install Wizard - Certificate Location
</p>
<p class="text">
You can use this Wizard to install the certificate that you received from your CA.
Depending on where your certificate is located, select one of the following options:
</p>
<p class="text">
<b>In this local file.</b> Choose this option if your certificate is stored in
a file on the local file system.
</p>
<p class="text">
<b>In the following encoded text block.</b> Choose this option if you have
copied your certificate to the system clipboard.
</p>
<p class="text">
<b>Browse.</b> Click to browse the local file system for the file containing
your certificate.
</p>
<p class="text">
<b>Paste from Clipboard.</b> Click to paste the contents of the system
clipboard into the text field.
</p>
--- NEW FILE certificate_install_wizard_certificate_type.html ---
<p class="topic">
Certificate Install Wizard - Certificate Type
</p>
<p class="text">
Use this dialog to name the certificate that you are installing.
</p>
<p class="text">
<b>This certificate will be named (in the certificate database). </b>Enter a
name that will help you identify this certificate. Example: <code>Eastern Mail
Server Certificate</code>.
</p>
<p class="text">
<b>Certificate Type.</b> Displays the type of certificate that you are
installing. Possible types are Server Certificate, CA Certificate, and Certificate Chain.
</p>
--- NEW FILE certificate_install_wizard_intended_purpose.html ---
<p class="topic">
Certificate Install Wizard - Intended Purpose
</p>
<p class="text">
Console can authenticate certificates when accepting connections from clients (client
authentication) and when making connections to servers (server authentication). You can
specify which certificates to accept by applying trust settings to a particular CA
certificate. Any client or server certificates issued by the CA inherit these settings.
</p>
<p class="text">
Use this screen to specify which types of authentication you want to accept this CA
certificate for.
</p>
<p class="text">
<b>Accepting connections from clients (Client Authentication).</b> Select this
checkbox to accept client certificates issued by this CA.
</p>
<p class="text">
<b>Making connections to other servers (Server Authentication).</b> Select
this checkbox to accept server certificates issued by this CA.
</p>
--- NEW FILE certificate_request_install_wizard_token_password.html ---
<p class="topic">
Certificate Request/Install Wizard - Token Password
</p>
<p class="text">
Enter the password for the security device that will store this certificate, then click
Next.
</p>
<p class="text">
If you are using an internal (software) security device, this is the password for the key
and certificate database. If you are using an external (hardware) security device, this is
the password for the Smart Card or other token on which you will store this certificate.
</p>
<p class="text">
<b>Active encryption token.</b> Displays the currently selected security
device. This device will store the certificate that you are requesting.
</p>
<p class="text">
<b>Enter the password to access the token.</b> Enter the password for the
security device listed above.
</p>
--- NEW FILE certificate_request_wizard_introduction.html ---
<p class="topic">
Certificate Request Wizard - Introduction
</p>
<p class="text">
You can use Management Console to generate a manual or automatic certificate request. A
manual request requires you to submit information to a CA. An automatic request is
submitted for you by Console. In order to send an automatic request to a CA, you need to
obtain a plug-in. For more information, contact your CA.
</p>
<p class="text">
If a plug-in is not available from your CA, generate and send a manual request.
</p>
<p class="text">
<b>Request certificate manually.</b> If you want to request a certificate
manually, select this option, then click Next.
</p>
<p class="text">
<b>Request certificate from the following Certificate Authority (CA).</b> If
you want to request a certificate automatically, select a CA from the list, then click
Next.
</p>
--- NEW FILE certificate_request_wizard_request_submission.html ---
<p class="topic">
Certificate Request Wizard - Request Submission
</p>
<p class="text">
You can copy your certificate request to the system clipboard or save it to a file. Choose
one or both of the following options, then click Done.
</p>
<p class="text">
<b>Copy to Clipboard.</b> Click to copy your certificate request to the
clipboard. Depending on how your CA accepts requests, you can paste this into an online
form or include it in an e-mail message.
</p>
<p class="text">
<b>Save to File.</b> Click to save your request as a text file. You will be
prompted to choose a name and location for the file. Once you have saved the file, you can
e-mail its contents to your CA.
</p>
<p class="text">
Even if you click Copy to Clipboard, you may want to save your request in case you need to
resend it.
</p>
--- NEW FILE certificate_request_wizard_requestor_information.html ---
<p class="topic">
Certificate Request Wizard - Requestor Information
</p>
<p class="text">
Each CA has its own requirements for certificate requestor information. Before requesting
a certificate, make sure to find out what your CA requires. Once you have done this, enter
the necessary information, then click Next.
</p>
<p class="text">
<b>Server Name.</b> (Optional) Enter the fully qualified hostname of the
machine for which you're requesting a certificate.
</p>
<p class="text">
<b>Organization.</b> (Optional) Enter your organization's name.
</p>
<p class="text">
<b>Organizational Unit.</b> (Optional) Enter your division, department, or
other organizational unit.
</p>
<p class="text">
<b>City/locality.</b> (Optional) Enter the city or locality in which your
organizational unit is located.
</p>
<p class="text">
<b>State/province.</b> (Optional) Enter the state or province in which your
organizational unit is located.
</p>
<p class="text">
<b>Country/region.</b> (Optional) Enter the state or province in which your
organizational unit is located.
</p>
<p class="text">
You can toggle between two views of the request form using the following buttons:
</p>
<p class="text">
<b>Show DN.</b> Click to show the requestor information in Distinguished Name
(DN) format. This button is visible only when you are entering information in fields.
</p>
<p class="text">
<b>Show Fields.</b> Click to show the requestor information in fields. This
button is visible only when you are entering information in DN format.
</p>
--- NEW FILE certificates_group.html ---
<p class="topic">
Certificates Group
</p>
<p class="text">
Use this dialog box to specify the values that must appear in group members'
certificates.
</p>
<p class="text">
<b>Common Name.</b> Enter the full name of the group. Example:
<code>Database Administrators</code>.
</p>
<p class="text">
<b>Organization.</b> Enter the name of the organization the group belongs to.
Example: <code>Operations Group</code>
</p>
<p class="text">
<b>Mail.</b> Enter the group's street address.
</p>
<p class="text">
<b>Country.</b> Enter the group's country code.
</p>
<p class="text">
<b>Locality.</b> Enter the group's city.
</p>
<p class="text">
<b>State/Province.</b> Enter the group's state or province name.
</p>
<p class="text">
<b>Unit.</b> Enter the name of the unit within the organization that the group
belongs to. Example: <code>IS Department</code>
</p>
--- NEW FILE change_directory.html ---
<p class="topic">
Change Directory
</p>
<p class="text">
Use this dialog box to specify which user directory to search.
</p>
<p class="text">
<b>User Directory Host.</b> Enter the fully qualified host name where the user
directory is installed.
</p>
<p class="text">
<b>User Directory Port.</b> Enter the port number used to connect to the user
directory.
</p>
<p class="text">
<b>Secure Connection.</b> Mark this checkbox if the User Directory port is
using SSL.
</p>
<p class="text">
<b>User Directory Subtree.</b> Use the form
<code>o=example.com</code> to indicate the user directory's root entry.
</p>
<p class="text">
<b>Bind User ID.</b> Enter the user ID or distinguished name of a person
authorized to change entries in the user directory.
</p>
<p class="text">
<b>Bind Password.</b> Enter the password for the user specified by the Bind
User ID.
</p>
--- NEW FILE change_security_device_password.html ---
<p class="topic">
Change Security Device Password
</p>
<p class="text">
Use this dialog box to change the password for the selected security device.
</p>
<p class="text">
<b>Old Password.</b> Enter the current password for the device.
</p>
<p class="text">
<b>New Password.</b> Enter the new password for the device. Passwords should
be at least eight characters long and should contain one or more non-alphanumeric
symbols.
</p>
<p class="text">
<b>New Password (again).</b> Enter the new password again to confirm it.
</p>
--- NEW FILE cipher_preference_ssl_2.0.html ---
<p class="topic">
Cipher Preference - SSL 2.0
</p>
<p class="text">
A cipher is an algorithm used to encrypt data. This dialog box displays the Secure Sockets
Layer (SSL) version 2.0 ciphers that are available for the selected certificate.
</p>
<p class="text">
<b>Enabled.</b> This column shows which ciphers are enabled. If a box is
checked, the corresponding cipher is enabled.
</p>
<p class="text">
<b>Cipher.</b> Lists the available ciphers.
</p>
<p class="text">
<b>Bits.</b> Shows the length of the private key, in bits. In general, longer
keys are more secure than shorter ones.
</p>
<p class="text">
<b>Message Digest.</b> This is the algorithm used to determine if a digital
signature has been tampered with.
</p>
--- NEW FILE cipher_preference_ssl_3.0.html ---
<p class="topic">
Cipher Preference - SSL 3.0
</p>
<p class="text">
A cipher is an algorithm used to encrypt data. This dialog box displays the Secure Sockets
Layer (SSL) version 3.0 ciphers that are available for the selected certificate.
</p>
<p class="text">
<b>Enabled.</b> This column shows which ciphers are enabled. If a box is
checked, the corresponding cipher is enabled.
</p>
<p class="text">
<b>Cipher.</b> Lists the available ciphers.
</p>
<p class="text">
<b>Bits.</b> Shows the length of the private key, in bits. In general, longer
keys are more secure than shorter ones.
</p>
<p class="text">
<b>Message Digest.</b> This is the algorithm used to determine if a digital
signature has been tampered with.
</p>
--- NEW FILE cipher_preference_tls.html ---
<p class="topic">
Cipher Preference - TLS
</p>
<p class="text">
A cipher is an algorithm used to encrypt data. This dialog box displays the Transport
Layer Security ciphers that are available for the selected certificate.
</p>
<p class="text">
<b>Enabled.</b> This column shows which ciphers are enabled. If a box is
checked, the corresponding cipher is enabled.
</p>
<p class="text">
<b>Cipher.</b> Lists the available ciphers.
</p>
<p class="text">
<b>Bits.</b> Shows the length of the private key, in bits. In general, longer
keys are more secure than shorter ones.
</p>
<p class="text">
<b>Message Digest.</b> This is the algorithm used to determine if a digital
signature has been tampered with.
</p>
--- NEW FILE configure_administration_server_access.html ---
<p class="topic">
Configure Administration Server - Access
</p>
<p class="text">
Use this tab to specify a user name and password for the Administration Server
Administrator and to enable or disable Directory Server Gateway access.
</p>
<p class="text">
The Administration Server Administrator is a special user that has full access to all
features in the Administration Server. This user is created during installation for the
purpose of starting Console if a Directory Server is unavailable. The Administration
Server Administrator user name and password are stored in the file
<code><server_root>/admin-serv/config/admpw</code>.
</p>
<p class="text">
The Directory Server Gateway is a service that provides web-based access to the entire
user directory. The Directory Server Gateway must be installed before you can use this
option.
</p>
<p class="text">
<b>User name.</b> Enter the user ID for the Administration Server
Administrator.
</p>
<p class="text">
<b>Password.</b> Enter the Administration Server Administrator's
password.
</p>
<p class="text">
<b>Confirm Password.</b> Enter the password again to confirm it.
</p>
--- NEW FILE configure_administration_server_configuration_ds.html ---
<p class="topic">
Configure Administration Server - Configuration DS
</p>
<p class="text">
Use this screen to specify the location of the Directory Server that contains your
configuration directory.
</p>
<p class="text">
All servers in an administration domain use the same configuration directory. If you
change settings here, you must change them for every server in the administration domain.
</p>
<p class="text">
<b>LDAP Host.</b> Enter the host name of the configuration directory that this
Administration Server uses.
</p>
<p class="text">
<b>LDAP Port.</b> Enter the port number for the configuration directory that
this Administration Server uses.
</p>
<p class="text">
<b>Secure Connection.</b> Select this option if the configuration directory is
already SSL enabled.
</p>
--- NEW FILE configure_administration_server_encryption.html ---
<p class="topic">
Configure Administration Server - Encryption
</p>
<p class="text">
Use this dialog box to enable Secure Sockets Layer (SSL) encryption.
</p>
<p class="text">
<b>Enable SSL for this server.</b> Select this option if you want to secure
this server with Secure Sockets Layer (SSL) encryption. All other SSL encryption options
listed here become available to you only when you enable SSL by checking this box.
</p>
<p class="text">
<b>Use this cipher family.</b> When you enable SSL encryption, the cipher
families available to you are listed here. The Management Console currently supports two
cipher families: RSA and Fortezza. The internal security device supports only RSA. If
you're using a Fortezza card, you'll also see the Fortezza cipher family listed in
the Encryption tab. Select the cipher families you want to use.
</p>
<p class="text">
<b>Security Device.</b> Choose internal (software) if the key is stored in the
local key database. All other choices on this list are available only if you are using an
external module.
</p>
<p class="text">
<b>Certificate.</b> Choose a server certificate to use with this server.
</p>
<p class="text">
<b>Settings. </b>Click this button to modify cipher settings for the
certificate you selected above.
</p>
<p class="text">
<b>Disable Client Authentication.</b> Select this option if you do not want
this server instance to perform client authentication.
</p>
<p class="text">
<b>Require Client Authentication.</b> Select this option if you want this
server instance to require client authentication during the SSL handshake.
</p>
<p class="text">
If you select this option, each administrator will be prompted for a certificate when
logging in via the Management Console. This ensures system security because all
administrators must present acceptable certificates before they can perform management
tasks. Even if an intruder obtains a user name and password, he or she will need to
present a valid certificate (one issued by a trusted CA) to gain access to your
enterprise.
</p>
--- NEW FILE configure_administration_server_network.html ---
<p class="topic">
Configure Administration Server - Network
</p>
<p class="text">
Use this panel to manage Administration Server network settings and to specify hosts that
are allowed to connect to the Administration Server.
</p>
<p class="text">
<b>Port.</b> Enter the port number you want the Administration Server to use.
The port number can be any number between 1 and 65535, but it is typically a random number
greater than 1024.
</p>
<p class="text">
<b>IP Address.</b> Enter the IP address you want the server to use for
incoming requests and connections.
</p>
<p class="text">
<b>Connection Restrictions.</b> Displays a list of hosts currently allowed to
connect to the Administration Server. Use the drop-down list to indicate whether
you're adding to the list by DNS name or by IP address. The list is evaluated first by
host name and then by IP address.
</p>
<p class="text">
<b>Add.</b> Displays a dialog box for adding a host to the list of computers
allowed to connect to the Administration Server.
</p>
<p class="text">
<b>Edit.</b> Displays a dialog box for editing a Host IP address or DNS name
on the list of computers allowed to connect to the Administration Server.
</p>
<p class="text">
<b>Remove.</b> Removes a selected entry from the list of allowed hosts.
</p>
--- NEW FILE configure_administration_server_user_ds.html ---
<p class="topic">
Configure Administration Server - User DS
</p>
<p class="text">
Use this screen to specify one or more Directory Servers to use when authenticating
users.
</p>
<p class="text">
<b>Use Default User Directory.</b> Choose this option if you want to use the
user directory associated with the domain. Its LDAP URL is displayed here.
</p>
<p class="text">
<b>Set User Directory.</b> Choose this option if you want to use a user
directory other than the default.
</p>
<p class="text">
The following options are only available if you select Set User Directory above.
</p>
<p class="text">
<b>LDAP Host and Port.</b> Specify the fully qualified domain name and port
number of the host containing the user directory. If you have more than one user
directory, separate the host names with spaces.
</p>
<p class="text">
Example: <code>eastcoast.example.com:389 westcoast.example.com:598</code>
</p>
<table border="0" cellpadding="0" width="90%">
<tr><td colspan="2">
<hr size="1" />
</td></tr>
<tr>
<td valign="top"><p class="note">
Note
</p>
</td>
<td valign="top"><p class="text">
If you specify multiple hosts in the LDAP Host and Port field, make sure they are all
configured to use the same settings for Secure Connection, User Directory Subtree, Bind
DN, and Bind Password.
</p>
</td>
</tr>
<tr><td colspan="2">
<hr size="1" />
</td></tr>
</table>
<br />
<br />
<p class="text">
<b>Secure Connection.</b> Select this option if the new user directory is
already SSL enabled.
</p>
<p class="text">
<b>User Directory Subtree.</b> Enter the location of the new user directory.
Example: <code>o=example.com</code>
</p>
<p class="text">
<b>Bind DN.</b> Enter the distinguished name for a user who has access to the
new user directory. Example: <code>uid=jdoe, ou=people, o=example.com.</code>
</p>
<p class="text">
<b>Bind Password.</b> Enter the password of the user above.
</p>
--- NEW FILE configure_custom_views.html ---
<p class="topic">
Configure Custom Views
</p>
<p class="text">
Use this dialog box to create or edit customized views of the navigation tree.
</p>
<p class="text">
<b>View Name. </b>Shows all currently available custom views.
</p>
<p class="text">
<b>Visibility.</b> Shows visibility settings for all view names. Public views
are available to those users specified by access control instructions (ACIs). Private
views are only available to their creator.
</p>
<p class="text">
<b>New.</b> Click to create a new custom view.
</p>
<p class="text">
<b>Edit.</b> Click to edit the selected custom view.
</p>
<p class="text">
<b>Delete.</b> Deletes the selected customized view.
</p>
<p class="text">
<b>Access.</b> Click to set access permissions for the selected custom view.
</p>
--- NEW FILE configure_security_modules.html ---
<p class="topic">
Configure Security Modules
</p>
<p class="text">
This window displays all available PKCS #11 modules that have been loaded onto your
system. The Network Security Services (NSS) PKCS #11 Module is the default module and will
always be displayed.
</p>
<p class="text">
<b>Install.</b> Click to install a new module.
</p>
<p class="text">
<b>Remove.</b> Click to remove the selected module. You cannot remove the NSS
PKCS #11 Module.
</p>
--- NEW FILE construct_and_test_ldap_url.html ---
<p class="topic">
Construct and Test LDAP URL
</p>
<p class="text">
Specify an LDAP URL to use when searching for users to add to a dynamic group.
</p>
<p class="text">
<b>Type in the LDAP URL or use the constructor to build a new URL.</b>
Displays the LDAP URL specifying your search query. You can edit the URL manually or by
clicking Construct.
</p>
<p class="text">
<b>Test.</b> Click to see which users your LDAP URL locates.
</p>
<p class="text">
<b>Construct.</b> Click to have Console help you construct an LDAP URL.
</p>
<p class="text">
<b>LDAP URL test results.</b> Displays the users located by your LDAP URL. To
refresh this display, click Test.
</p>
--- NEW FILE construct_ldap_url.html ---
<p class="topic">
Construct LDAP URL
</p>
<p class="text">
Use this dialog box to create an LDAP URL. This URL is used to locate users and groups to
add to this dynamic group.
</p>
<p class="text">
<b>LDAP Server Host.</b> Displays the fully qualified host name of the
currently selected user directory. Example: <code>east.example.com</code>.
</p>
<p class="text">
<b>Port.</b> Displays the port number for the Directory Server containing the
user directory.
</p>
<p class="text">
<b>Base DN.</b> Enter the base DN from which to begin the search. Example:
<code>ou=Marketing, o=example Corp, c=US</code>
</p>
<p class="text">
<b>Search.</b> Indicate the scope of your search.
</p>
<p class="text">
<b>for.</b> Indicate whether you want to search users, groups, or both.
</p>
<p class="text">
<b>where.</b> Choose an attribute and operator, then specify a search term.
</p>
<p class="text">
<b>More.</b> Click to add an additional attribute, operator, and search term.
</p>
<p class="text">
<b>Fewer.</b> Click to remove an attribute, operator, and search term.
</p>
--- NEW FILE create_group_general.html ---
<p class="topic">
Create Group - General
</p>
<p class="text">
<b>Group Name.</b> Enter a name for the group.
</p>
<p class="text">
<b>Description.</b> (Optional) You can enter a description to help you
identify this group.
</p>
--- NEW FILE create_group_languages.html ---
<p class="topic">
Create Group - Languages
</p>
<p class="text">
Use this dialog box when a group's name is more accurately represented using
characters of a non-default language.
</p>
<p class="text">
<b>Available Languages.</b> Click a language to select it.
</p>
<p class="text">
<b>Group Name.</b> Enter a name for the group.
</p>
<p class="text">
<b>Description.</b> (Optional) Enter a description of the group.
</p>
<p class="text">
<b>Pronunciation-Group Name.</b> (Optional) When appropriate, enter the
phonetic equivalent of the group name.
</p>
--- NEW FILE create_group_members_certificates_group.html ---
<p class="topic">
Create Group - Members - Certificates Group
</p>
<p class="text">
You can add members to a certificates group by specifying values that must appear in user
certificates.
</p>
<p class="text">
<b>Add.</b> Displays a dialog box for entering Certificates Group information.
</p>
<p class="text">
<b>Edit.</b> Displays a dialog box for modifying Certificate Group
information.
</p>
<p class="text">
<b>Remove.</b> Deletes the selected query from the list.
</p>
--- NEW FILE create_group_members_dynamic_group.html ---
<p class="topic">
Create Group - Members - Dynamic Group
</p>
<p class="text">
You can add members to a dynamic group by searching the directory for users who share a
common attribute value.
</p>
<p class="text">
<b>Add.</b> Displays the Construct and Test LDAP URL form for locating users
who share a common attribute value.
</p>
<p class="text">
<b>Remove.</b> Deletes the selected user from the specified dynamic group.
</p>
<p class="text">
<b>Edit.</b> Displays the Construct and Test LDAP URL form for changing the
query that locates dynamic group members.
</p>
--- NEW FILE create_group_members_static_group.html ---
<p class="topic">
Create Group - Members - Static Group
</p>
<p class="text">
You can organize users into static groups based on common attribute values such as
department or country.
</p>
<p class="text">
<b>Add.</b> Displays the Search form, which you can use to locate users and
groups. Once you have added users, click OK for the change to take effect.
</p>
<p class="text">
<b>Remove.</b> Deletes the selected entry from this group.
</p>
--- NEW FILE create_new_administration_domain.html ---
<p class="topic">
Create New Administration Domain
</p>
<p class="text">
Use this dialog box to organize one or more hosts into a group. For example, you might
want to create a separate administration domain for each division in your company.
</p>
<p class="text">
<b>Domain Name.</b> Enter a name that helps you identify this domain. This can
be a fully qualified domain name such as <code>example.com</code> or a
descriptive title such as East Coast Sales.
</p>
<p class="text">
<b>User Directory Host.</b> Specify the host machine on which the user
directory for this domain is located. Use the fully qualified domain name.
</p>
<p class="text">
<b>User Directory Port.</b> Enter the port number for the user directory you
specified above.
</p>
<p class="text">
<b>Secure Connection.</b> Select this option if the user directory port
you've entered is already enabled for SSL communication.
</p>
<p class="text">
<b>Directory Subtree.</b> Enter the base suffix of the user directory.
Example: <code>o=example.com</code>.
</p>
<p class="text">
<b>Bind DN.</b> Enter the distinguished name for a user who has access
permissions to the user directory. Example: <code>uid=jdoe, ou=people,
o=example.com</code>.
</p>
<p class="text">
<b>Bind Password.</b> Enter the password of the user above.
</p>
<p class="text">
<b>Owner DN</b>. Enter the distinguished name for the user who has
administrative control over this domain. By default, your DN is entered.
</p>
--- NEW FILE create_organizational_unit.html ---
<p class="topic">
Create Organizational Unit
</p>
<p class="text">
Use this dialog box to enter information about a unit within an organization.
</p>
<p class="text">
<b>Name.</b> Enter the name of the organizational unit.
</p>
<p class="text">
<b>Description.</b> (Optional) Enter a description of the organizational
unit.
</p>
<p class="text">
<b>Phone.</b> (Optional) Enter a phone number where one can reach a contact
(such as an administrative assistant) for the organizational unit.
</p>
<p class="text">
<b>Fax.</b> (Optional) Enter a fax number where one can reach a contact for
the organizational unit.
</p>
<p class="text">
<b>Alias.</b> (Optional) Enter a nickname or acronym that you might use in
place of the name you entered above.
</p>
<p class="text">
<b>Address.</b> (Optional) Enter the street address where the organizational
unit is located.
</p>
<p class="text">
New organizational units are created using the organizational unit object class. The
distinguished name for new organizational units is
</p>
<p class="code">
ou=new organizational unit, ou=parent ou, o=base org, c=country
</p>
<p class="text">
For example, if you create a new organization called Accounting within the organizational
unit West Coast, and your Base DN is <code>o=Ace Industry, c=US</code>, then
the new organizational unit's DN is
</p>
<p class="code">
ou=Accounting, ou=West Coast, o=Ace Industry, c=US
</p>
--- NEW FILE create_organizational_unit_languages.html ---
<p class="topic">
Create Organizational Unit - Languages
</p>
<p class="text">
Use this dialog box when an organizational unit's information is more accurately
represented using characters of a non-default language. All of the following fields are
optional.
</p>
<p class="text">
<b>Available Languages.</b> Click a language to select it.
</p>
<p class="text">
<b>Name.</b> Enter a name for the organizational unit.
</p>
<p class="text">
<b>Description.</b> Enter a description for the organizational unit.
</p>
<p class="text">
<b>Phone.</b> Enter a phone number for the organizational unit.
</p>
<p class="text">
<b>Fax.</b> Enter a fax number for the organizational unit.
</p>
<p class="text">
<b>Alias.</b> Enter a nickname or acronym that you might use in place of the
name you entered above.
</p>
<p class="text">
<b>Address.</b> Enter the street address where the organizational unit is
located.
</p>
--- NEW FILE create_organizational_unit_languages_with_pronunciation.html ---
<p class="topic">
Create Organizational Unit - Languages With Pronunciation
</p>
<p class="text">
Use this dialog box when an organizational unit's information is more accurately
represented using characters of a non-default language. All of the following fields are
optional.
</p>
<p class="text">
<b>Available Languages.</b> Click a language to select it.
</p>
<p class="text">
<b>Name.</b> Enter a name for the organizational unit.
</p>
<p class="text">
<b>Description.</b> Enter a description for the organizational unit.
</p>
<p class="text">
<b>Phone.</b> Enter a phone number for the organizational unit.
</p>
<p class="text">
<b>Fax.</b> Enter a fax number for the organizational unit.
</p>
<p class="text">
<b>Alias.</b> Enter a nickname or acronym that you might use in place of the
name you entered above.
</p>
<p class="text">
<b>Address.</b> Enter the street address where the organizational unit is
located.
</p>
<p class="text">
<b>Pronunciation-Group Name.</b> Enter the phonetic equivalent of the group
name.
</p>
<p class="text">
<b>Pronunciation-Address.</b> Enter the phonetic equivalent of the group
address.
</p>
--- NEW FILE create_user_administrator.html ---
<p class="topic">
Create User/Administrator
</p>
<p class="text">
Use this dialog box to enter or edit a user or administrator's information. The data
you enter here will be added to or modified in the designated user directory. (If you are
creating or editing an administrator, the data will be stored in the configuration
directory.)
</p>
<p class="text">
<b>First Name.</b> Enter the user or administrator's full given name.
</p>
<p class="text">
<b>Last Name.</b> Enter the user or administrator's full surname.
</p>
<p class="text">
<b>Common Name(s).</b> Console automatically generates the user or
administrator's full name (common name) by joining the First Name and Last Name
entered above. You can edit this value as necessary.
</p>
<p class="text">
<b>User ID.</b> When you enter a first and last name, a user ID is
automatically generated. You can replace this user ID with one of your choosing. The user
ID must be unique from all other user ID's in the directory.
</p>
<p class="text">
<b>Password.</b> (Optional for user) Enter the user or administrator's
password.
</p>
<p class="text">
<b>Confirm Password.</b> (Optional for user) Enter the user or
administrator's password again to confirm it.
</p>
<p class="text">
<b>E-Mail.</b> (Optional) Enter the user or administrator's email address.
</p>
<p class="text">
<b>Phone.</b> (Optional) Enter the user or administrator's telephone
number.
</p>
<p class="text">
<b>Fax.</b> (Optional) Enter the user or administrator's fax number.
</p>
<p class="text">
<b>Access Permissions Help.</b> Provides information on setting access
controls that apply to users and groups.
</p>
--- NEW FILE create_user_administrator_languages.html ---
<p class="topic">
Create User/Administrator - Languages
</p>
<p class="text">
Use this dialog box when a user or administrator's name can be more accurately
represented in characters of a language other than the default. For example, Noriko's
name is Japanese, and she has indicated on her hiring forms that she prefers when Japanese
characters represent her name. You can select Japanese as her preferred language so that
her name will display in Japanese characters, even when the default language is English.
</p>
<p class="text">
<b>Preference Languages.</b> Use the drop-down list to select a user or
administrator's preferred language.
</p>
<p class="text">
<b>Available Languages.</b> Select a language from the list box when you want
to enter a user or administrator's data using that language.
</p>
<p class="text">
<b>First Name.</b> Enter the user or administrator's given name.
</p>
<p class="text">
<b>Last Name.</b> Enter the user or administrator's surname.
</p>
<p class="text">
<b>Common Name(s).</b> Enter the user or administrator's name as it should
appear on official documents.
</p>
<p class="text">
<b>Phone.</b> Enter the user or administrator's telephone number.
</p>
<p class="text">
<b>Pronunciation.</b> Additional fields appear when the user or
administrator's name can be represented phonetically in the selected language. Enter
the phonetic representations for the user or administrator's first, last, and full
names.
</p>
--- NEW FILE create_user_administrator_licenses.html ---
<p class="topic">
Create User/Administrator - Licenses
</p>
<p class="text">
You can track which server products your users are licensed to use. Select the servers
that this user is licensed for, then click OK.
</p>
<p class="text">
To view a comprehensive list of all servers installed in your enterprise and the number of
users licensed for each server, choose License Tracking from the Console menu.
</p>
--- NEW FILE create_user_administrator_nt_user.html ---
<p class="topic">
Create User/Administrator - NT User
</p>
<p class="text">
Use this panel to store Windows NT-specific user or administrator information in the
directory.
</p>
<p class="text">
<b>Enable Windows NT user attributes.</b> Check this box to enable the fields
in this panel.
</p>
<p class="text">
<b>NT User ID.</b> Enter the user or administrator's NT login name.
</p>
<p class="text">
<b>Comment.</b> (Optional) Enter a descriptive comment about this user or
administrator.
</p>
<p class="text">
<b>User Profile Path.</b> (Optional) Enter the path to this user or
administrator's profile. Use the NT network path format. For example:
<code>\\aphrodite\profiles\john</code>.
</p>
<p class="text">
<b>Logon Script.</b> (Optional) Enter the path to the user or
administrator's logon script. This path is relative to the system's logon script
path. For example, if the system path is <code>\\aphrodite\logon</code>, you
might enter <code>writers.bat</code> or
<code>writers\john.cmd</code> depending on where you store your user scripts.
</p>
<p class="text">
<b>Home Drive.</b> (Optional) Use the drop-down list to choose the drive on
which this user or administrator's home directory is located.
</p>
<p class="text">
<b>Home Directory.</b> (Optional) Enter the path to this user or
administrator's home directory. Use the NT network path format or an absolute path.
For example, you can enter <code>\\aphrodite\users\john</code> or
<code>C:\user profiles\john</code>.
</p>
<p class="text">
<b>Logon Server.</b> (Optional) Enter the path to the server on which this
user or administrator's logon script is stored. Use the NT network path format.
</p>
<p class="text">
<b>Logon Hours.</b> (Optional) Click to set the hours during which this user
or administrator can log on.
</p>
<p class="text">
<b>User Workstations List.</b> (Optional) Enter the computers from which this
user or administrator can log on.
</p>
<p class="text">
<b>Change.</b> (Optional) Click to change the date and time at which the user
or administrator's account expires.
</p>
--- NEW FILE create_user_administrator_posix_user.html ---
<p class="topic">
Create User/Administrator - Posix User
</p>
<p class="text">
Use this panel to store Posix/UNIX-specific user or administrator information in the
directory. If you are using Directory Server Synchronization Services, the options and
attributes that you specify here will be synchronized with your operating system.
</p>
<p class="text">
<b>Enable Posix user attributes.</b> Check this box to enable the fields in
this panel.
</p>
<p class="text">
<b>UID Number. </b>(Optional) Enter the user or administrator's UNIX ID
number.
</p>
<p class="text">
<b>GID Number.</b> (Optional) Enter the user or administrator's UNIX group
ID number.
</p>
<p class="text">
<b>Home Directory.</b> (Optional) Enter the path to the user or
administrator's home directory. For example, <code>/u/jdoe</code>.
</p>
<p class="text">
<b>Login Shell.</b> (Optional) Enter the path to the user or
administrator's login shell. For example,
<code>/usr/local/bin/tcsh</code>.
</p>
<p class="text">
<b>Gecos.</b> (Optional) The value of this user or administrator's
<code>pw_gecos</code> entry in <code>/etc/passwd</code>.
</p>
--- NEW FILE edit_aci_hosts.html ---
<p class="topic">
Edit ACI - Hosts
</p>
<p class="text">
Use this panel to list the hosts that have access to this resource.
</p>
<p class="text">
<b>Add.</b> Click to add a host to the list.
</p>
<p class="text">
<b>Remove.</b> Click to remove a selected host from the list.
</p>
--- NEW FILE edit_aci_manual_mode.html ---
<p class="topic">
Edit ACI - Manual Mode
</p>
<p class="text">
Use this panel to edit an ACI manually. For more information on ACIs and access control,
see the <em>Administrator's Guide</em> for your Directory Server.
</p>
<p class="text">
<b>Edit Visually.</b> Click to edit your ACI using the visual ACI Editor. You
may not be able to edit all ACI properties visually.
</p>
<p class="text">
<b>Check Syntax.</b> Click to check the syntax of your ACI.
</p>
--- NEW FILE edit_aci_rights.html ---
<p class="topic">
Edit ACI - Rights
</p>
<p class="text">
Use this dialog box to specify what users and groups can do if they have access to this
resource. You can specify seven rights:
</p>
<p class="text">
<b>Read.</b> Select this right if you want authorized users and groups to be
able to see the values of targeted attributes.
</p>
<p class="text">
<b>Compare.</b> Select this right if you want authorized users and groups to
be able to compare targeted attribute values.
</p>
<p class="text">
<b>Search.</b> Select this right if you want authorized users and groups to be
able to determine if targeted attributes exist.
</p>
<p class="text">
<b>Selfwrite.</b> Select this right if you want authorized users and groups to
be able to write to their own entries.
</p>
<p class="text">
<b>Write.</b> Select this right if you want authorized users and groups to be
able to modify targeted attributes.
</p>
<p class="text">
<b>Delete.</b> Select this right if you want authorized users and groups to be
able to delete targeted entries.
</p>
<p class="text">
<b>Add.</b> Select this right if you want authorized users and groups to be
able to add targeted entries.
</p>
<p class="text">
<b>Proxy.</b> Select this right if you want to authenticate as another user.
</p>
<p class="text">
You can also use the following buttons to specify rights:
</p>
<p class="text">
<b>Check All.</b> Click to select all rights except Proxy. The Proxy right
must be manually selected.
</p>
<p class="text">
<b>Check None.</b> Click to deselect all rights.
</p>
--- NEW FILE edit_aci_targets.html ---
<p class="topic">
Edit ACI - Targets
</p>
<p class="text">
Use this dialog to specify which directory entries and attributes you want this ACI to
apply to.
</p>
<p class="text">
<b>Target Directory Entry.</b> Enter the DN of the entry that you want this
ACI to apply to.
</p>
<p class="text">
<b>This Entry.</b> Click to insert the DN for the currently selected entry as
the target.
</p>
<p class="text">
<b>Browse.</b> Click to browse the directory tree for a target entry.
</p>
<p class="text">
<b>Filter for sub-entries.</b> If you want this ACI to apply to multiple
entries, specify a filter. This filter is used on all entries below the target directory
entry. For example, specifying the filter <code>ou=Sales</code> applies this
ACI to the target entry and all entries below it that contain
<code>ou=Sales</code> in their DNs.
</p>
<p class="text">
<b>These attributes are affected for all entries.</b> Select the attributes
that you want this ACI to apply to.
</p>
<p class="text">
<b>Check All.</b> Selects all attributes.
</p>
<p class="text">
<b>Check None.</b> Deselects all attributes.
</p>
--- NEW FILE edit_aci_times.html ---
<p class="topic">
Edit ACI - Times
</p>
<p class="text">
Use this panel to specify when users, groups, and hosts have access to this resource. You
can select a day and time in the following ways:
</p>
<ul>
<li>
Click a row head to select an entire day. For example, click Sunday to select the entire
Sunday row.
</li>
<li>
Click a column head to select one hour on all days. For example, click 10 to select the
hour from 10:00 to 11:00 on all days of the week.
</li>
<li>
Click cells to select specific hours and days.
</li>
<li>
Drag to select a range of days and times.
</li>
</ul>
--- NEW FILE edit_aci_users_groups.html ---
<p class="topic">
Edit ACI - Users
</p>
<p class="text">
Use this panel to list the users, groups, and roles that have access to this resource.
</p>
<p class="text">
<b>Add.</b> Click to add one or more users, groups, or roles to the list.
</p>
<p class="text">
<b>Remove.</b> Click to remove all selected entries from the list.
</p>
--- NEW FILE edit_view.html ---
<p class="topic">
Edit View
</p>
<p class="text">
Use this dialog box to build a customized view of the navigation tree.
</p>
<ul>
<li>
Enter a name for this custom view in the text area over the right column.
</li>
<li>
In the Default View column, select an object you want to display in your customized view,
then click Copy. The object displays in the custom view column.
</li>
<li>
To remove an item from the custom view column, select it and then click Remove.
</li>
</ul>
--- NEW FILE host_information.html ---
<p class="topic">
Host Information
</p>
<p class="text">
Use this panel to view or edit host information.
</p>
<p class="text">
<b>Edit.</b> Click to edit information about the selected host.
</p>
<p class="text">
You can edit the following information about the selected host:
</p>
<p class="text">
<b>Host name.</b> Specifies the name of the host machine as displayed in the
navigation tree. The host name is usually the fully qualified machine name, but any label
is acceptable. For example, a host name could be
<code>eastcoast.example.com</code> or <code>East Coast Sun
ES10000</code>.
</p>
<p class="text">
<b>Description.</b> (Optional) Contains a brief description of this host. For
example, Sun ES10000 for the East Coast division of Example Corporation.
</p>
<p class="text">
<b>Location.</b> (Optional) Specifies the physical location of this host. For
example, Cube 17043 or Building 15 - Third Floor - Lab No. 1.
</p>
<p class="text">
You can view, but not edit, the following information about the selected host:
</p>
<p class="text">
<b>Platform.</b> Indicates the host machine's architecture. For example,
Intel.
</p>
<p class="text">
<b>Operating system.</b> Indicates the operating system that this host is
running. For example, Windows NT 4.0 (Build 1381).
</p>
--- NEW FILE import_keys_and_certificates_alias_selection.html ---
<p class="topic">
Import Keys and Certificates - Alias Selection
</p>
<p class="text">
Each server instance, or alias, can have its own keys and certificates. Select the alias
that you want to import from, then click Next.
</p>
<p class="text">
<b>Select the alias to import from.</b> Choose one alias from the list.
</p>
<p class="text">
<b>Enter the password for the certificate database for the selected alias.</b>
Enter the password used to access the key and certificate database for the alias you
selected above.
</p>
--- NEW FILE import_keys_and_certificates_confirmation.html ---
<p class="topic">
Import Keys and Certificates - Confirmation
</p>
<p class="text">
This screen displays the key and certificate information you have provided. If you want to
import the keys and certificates for the listed alias, click Finish. To change any
information, click Back. To abort the wizard, click Cancel.
</p>
<p class="text">
<b>You are about to copy keys and certificates from this server.</b> This
field shows the server alias from which you are going to import keys and certificates.
</p>
--- NEW FILE import_keys_and_certificates_source_location.html ---
<p class="topic">
Import Keys and Certificates - Source Location
</p>
<p class="text">
Use this wizard to import keys and certificates from an existing server. In this screen,
specify the directory containing the existing server, then click Next.
</p>
<p class="text">
<b>Enter the server installation path to import from.</b> Enter the full path
to the directory where the existing server is installed.
</p>
--- NEW FILE install_security_module.html ---
<p class="topic">
Install Security Module
</p>
<p class="text">
Use this dialog box to install a new PKCS #11 module on your system.
</p>
<p class="text">
<b>Enter the PKCS #11 module driver filename.</b> Enter the full path to the
driver file that came with your device. This file will have the extension
<code>DLL</code>, <code>JAR</code>, <code>so</code>,
or <code>sl</code>.
</p>
<p class="text">
<b>Enter an identifying name for this module.</b> Enter a descriptive name
that will help you identify this device.
</p>
<p class="text">
For detailed information about PKCS #11 module driver files, see the documentation that
came with your external encryption device.
</p>
--- NEW FILE license_tracking.html ---
<p class="topic">
License Tracking
</p>
<p class="text">
Use this dialog box to count the number of users who are licensed to use the servers in
your enterprise. When you click the Refresh button, the display is updated with the most
recent license information.
</p>
--- NEW FILE logging_options.html ---
<p class="topic">
Logging Options
</p>
<p class="text">
The Administration Server uses an access log and an error log. The access log monitors
activity while the error log keeps track of server events and problems. Use this panel to
indicate where to store each of these log files.
</p>
<p class="text">
<b>Access Log - Log File.</b> Enter a path and filename for the access log.
This path can be absolute or relative to the server root. Example:
<code>/export/server_logs/access</code>.
</p>
<p class="text">
<b>Error Log - Log File.</b> Enter a path and filename for the error log. This
path can be absolute or relative to the server root. Example:
<code>/export/server_logs/error</code>.
</p>
--- NEW FILE manage_access_control.html ---
<p class="topic">
Manage Access Control
</p>
<p class="text">
Management Console uses Access Control Instructions (ACIs) to specify how servers, tasks,
custom views, and user interface elements can be accessed. An ACI contains rules that
define access permissions for a selected resource. These permissions can take a number of
forms, including lists of authorized users, time and date restrictions, and acceptable
actions.
</p>
<p class="text">
You can use this dialog box to create, edit, and remove ACIs for a selected server, task,
custom view, or user interface element. If an ACI is listed, it is already in use by this
resource. If you want to edit or remove an existing ACI, select it and click the
appropriate button.
</p>
<p class="text">
<b>New.</b> Click to create a new ACI.
</p>
<p class="text">
<b>Edit.</b> Click to edit a selected ACI.
</p>
<p class="text">
<b>Remove.</b> Click to remove a selected ACI.
</p>
<p class="text">
<b>Show Inherited ACIs.</b> Check this box to show any ACIs that this server,
task, custom view, or user interface element inherited from other directory entries.
</p>
--- NEW FILE manage_certificates_ca_certs.html ---
<p class="topic">
Manage Certificates - CA Certs
</p>
<p class="text">
Use this dialog to view, request, and manage Certificate Authority (CA) certificates.
</p>
<p class="text">
<b>Security Device.</b> Choose the security device that you want to manage.
Unless you have installed an external device, only internal (software) will be available.
</p>
<p class="text">
<b>Change Password.</b> Click to change the password for the selected security
device.
</p>
<p class="text">
<b>Certificate Name.</b> Lists the CA certificates installed on this device.
</p>
<p class="text">
<b>Expiration Date.</b> Lists the expiration date of each CA certificate.
</p>
<p class="text">
<b>Detail.</b> Click to displays more information about a selected
certificate.
</p>
<p class="text">
<b>Install.</b> Click to open the Certificate Install Wizard
</p>
<p class="text">
<b>Edit Trust.</b> Click to change trust settings for a selected CA
certificate.
</p>
<p class="text">
<b>Delete.</b> Click to delete the selected certificate.
</p>
--- NEW FILE manage_certificates_revoked_certs.html ---
<p class="topic">
Manage Certificates - Revoked Certs
</p>
<p class="text">
Use this dialog to view, request, and manage Certificate Revocation Lists (CRLs) and
Compromised Key Lists (CKLs).
</p>
<p class="text">
<b>Security Device.</b> Choose the security device that you want to manage.
Unless you have installed an external device, only internal (software) will be available.
</p>
<p class="text">
<b>Change Password.</b> Click to change the password for the selected security
device.
</p>
<p class="text">
<b>Issued By.</b> Lists the CA who issued each CRL or CKL.
</p>
<p class="text">
<b>Effective Date.</b> Lists the date on which the CRL or CKL was issued.
</p>
<p class="text">
<b>Next Update.</b> Shows when an updated CRL or CKL will be available.
</p>
<p class="text">
<b>Detail.</b> Click to displays more information about a selected CRL or
CKL.
</p>
<p class="text">
<b>Add.</b> Click to add a CRL or CKL.
</p>
<p class="text">
<b>Delete.</b> Click to delete the selected CRL or CKL.
</p>
--- NEW FILE manage_certificates_server_certs.html ---
<p class="topic">
Manage Certificates - Server Certs
</p>
<p class="text">
Use this dialog to view, request, and manage server certificates.
</p>
<p class="text">
<b>Security Device.</b> Choose the security device that you want to manage.
Unless you have installed an external device, only internal (software) will be available.
</p>
<p class="text">
<b>Change Password.</b> Click to change the password for the selected security
device.
</p>
<p class="text">
<b>Certificate Name.</b> Lists the server certificates installed on this
device.
</p>
<p class="text">
<b>Issued To.</b> Lists the common name of each certificate requestor.
</p>
<p class="text">
<b>Issued By.</b> Lists the CA that issued each certificate.
</p>
<p class="text">
<b>Expiration Date.</b> Lists the expiration date of each certificate.
</p>
<p class="text">
<b>Detail.</b> Click to displays more information about a selected
certificate.
</p>
<p class="text">
<b>Request.</b> Click to open the Certificate Request Wizard, which you can
use to request a new certificate.
</p>
<p class="text">
<b>Renew.</b> Click to open the Certificate Request Wizard, which you can use
to renew a selected certificate.
</p>
<p class="text">
<b>Install.</b> Click to open the Certificate Install Wizard
</p>
<p class="text">
<b>Delete.</b> Click to delete the selected certificate.
</p>
--- NEW FILE merge_configuration_directory_server_information.html ---
<p class="topic">
Merge Configuration Directory Server Information
</p>
<p class="text">
Use this dialog box to merge configuration data from an existing Directory Server with
configuration data from a pilot or staged Directory Server.
</p>
<p class="text">
Make sure to back up the destination configuration directory before merging any new
information into it.
</p>
<p class="text">
<b>Destination Domain.</b> Enter the domain name for the configuration
directory that you want to merge into. Example: <code>example.com</code>
</p>
<p class="text">
<b>Destination LDAP Host.</b> Enter the hostname for the configuration
directory you specified above. Example: <code>eastcoast.example.com</code>
</p>
<p class="text">
<b>Destination LDAP Port.</b> Enter the port number for the existing
configuration directory. Example: <code>389</code>
</p>
<p class="text">
<b>Secure Connection.</b> Check this box if the configuration directory uses
the Secure Sockets Layer (SSL) protocol on the port specified above. Make sure that SSL is
enabled on the destination configuration directory before selecting this option.
</p>
<p class="text">
<b>Destination LDAP Bind DN.</b> Enter the distinguished name for a user who
has access to the destination configuration directory. Example: cn=Barbara Jones,
ou=Administration, o=Example Corporation, c=US.
</p>
<p class="text">
<b>Destination LDAP Bind Password.</b> Enter the password for the user
specified by the Destination LDAP Bind DN.
</p>
<p class="text">
After you merge the configuration directories, the affected server instances will use the
destination directory you specified. If you want the instances to switch back to the
original configuration directory, you must manually modify the local configuration files.
</p>
--- NEW FILE migrate_keys_and_certificates.html ---
<p class="topic">
Migrate Keys and Certificates
</p>
<p class="text">
Use this dialog box to migrate keys and certificates from an older server to a new one.
</p>
<p class="text">
<b>Server root.</b> Displays the root directory in which the older server is
installed.
</p>
<p class="text">
<b>Alias.</b> Choose the server instance containing the keys and certificates
that you want to migrate.
</p>
<p class="text">
<b>Password.</b> Enter the password for the key and certificate database you
selected above.
</p>
<p class="text">
<b>Server Version.</b> Displays the version number of the older server.
</p>
--- NEW FILE migrate_server_configuration.html ---
<p class="topic">
Migrate Server Configuration
</p>
<p class="text">
Enter the absolute path for the server root containing a pre-4.0 server.
</p>
--- NEW FILE new_view.html ---
<p class="topic">
New View
</p>
<p class="text">
A custom view can be private or public. A private view is only visible to you. A public
view is, by default, visible to all users of Console. If you only want certain users to
have access to a custom view, create a public view and then apply Access Control
Instructions (ACIs) to it by clicking Access in the Configure Custom Views dialog box.
</p>
<p class="text">
<b>Make this a private view (visible only to you).</b> Select to create a
private view.
</p>
<p class="text">
<b>Make this a public view (visible to all users).</b> Select to create a
public view.
</p>
--- NEW FILE preferences_fonts.html ---
<p class="topic">
Preferences - Fonts
</p>
<p class="text">
Use this dialog box to set your preferences for fonts displayed in the Management Console.
You can save multiple font preferences or <em>profiles</em> on the same
computer system.
</p>
<p class="text">
<b>Font Profile.</b> Enter a name for this set of preferences. If you
don't enter a name, a default name is provided for you.
</p>
<p class="text">
<b>Save As.</b> Saves the profile under the name you specify.
</p>
<p class="text">
<b>Remove.</b> Deletes a selected profile from the list.
</p>
<p class="text">
<b>Change Font.</b> Displays a dialog box for setting your font preferences.
To activate this button, select a screen element.
</p>
--- NEW FILE preferences_settings.html ---
<p class="topic">
Preferences - Settings
</p>
<p class="text">
By default, when you exit the Management Console, it saves any display changes you've
made, such as:
</p>
<ul>
<li>
Window size or position
</li>
<li>
Showing or hiding the banner bar, status bar, or navigation tree
</li>
<li>
Fonts for menus, tables, and other objects.
</li>
</ul>
<p class="text">
You can store display settings on the network or on your local disk to suit your needs. If
you do not want to use Management Console's default method of storing your display
preferences, you can change it.
</p>
<p class="text">
Use this dialog box to specify where you want to save your display settings.
</p>
<p class="text">
<b>In your configuration directory.</b> Select this option if you want to be
able to use your settings no matter where you are when you log in to the Management
Console. This option is useful if you frequently "roam" between a number of
similar workstations at your business site. No matter what workstation you're using,
when you log in to the Management Console you can use your preset display preferences.
</p>
<p class="text">
<b>On your computer's hard disk.</b> Select this option if you want to be
able to use different display settings depending upon the individual workstation
you're using. This option is useful when you use one workstation at work and a
dissimilar system, such as a laptop computer, at home. The settings for the workstation
are stored and used on the workstation. The settings for the laptop are stored and used on
the laptop.
</p>
<p class="text">
<b>Restore Defaults.</b> Click to revert to the default display settings.
</p>
--- NEW FILE preferences_ui_permissions.html ---
<p class="topic">
Preferences - UI Permissions
</p>
<p class="text">
Use this dialog box to apply access control to elements of Console's user interface
(UI).
</p>
<p class="text">
<b>Screen Element.</b> Choose the UI element that you want to control access
to.
</p>
<p class="text">
<b>Permission Description.</b> Contains descriptions of screen elements.
</p>
<p class="text">
<b>Permissions.</b> Click to apply access control instructions (ACIs) to the
selected screen element.
</p>
--- NEW FILE replication_monitor.html ---
<p class="topic">
Administration Express - Replication Monitor
</p>
<p class="h2">
To Monitor Replication Status from Administration Express
</p>
<ol type="1">
<li>
Create a configuration file.
<p class="text">
The configuration file contains a mandatory section for ldap connection
parameters, and two optional sections for ldap server aliases and time
lag colors. Connection parameters for all the servers in a replication
topology should be specified within a configuration file. A
configuration file, however, may contain information for multiple
replication topology.
<pre>
SYNOPSIS
[connection]
host:port:binddn:bindpwd:bindcert
host:port:binddn:bindpwd:bindcert
...
[alias]
alias = host:port
alias = host:port
...
[color]
lowmark = color
lowmark = color
...
DESCRIPTION
The connection section specifies how the tool may
connect to each ldap server in the replication
topology to get the replication agreement. This
section is mandatory. The default binddn is
'cn=Directory Manager'. Simple bind will be used
unless bindcert is specified as the pathname of
a cert db.
A server may have a dedicated or a share entry
in the connection section. The script will find
out the most matched entry for a given server.
For example, if all the ldap servers except host1
share the same binddn and password, the connection
section then needs just two entries:
[connection]
*:*:binddn:password:
host1:*:binddn1:password1:
The optional alias section gives nicknames to ldap
servers' url. Thus instead of displaying url
"http(s)://hostname-domainname:port", the status
report may display "Master 1", "Hub" and alike.
CSN time lags between masters and consumers might
be displayed in different colors based on their ranges.
The default color set is green for [0-5) minutes lag,
yellow [5-60), and pink 60 and more.
EXAMPLE
[connection]
*:*:*:mypassword
[alias]
M1 = host1.example.com:10011
C1 = host4.example.com:10021
C2 = host2.example.com:10022
[color]
0 = #ccffcc
5 = #FFFFCC
60 = #FFCCCC
</pre>
<li>
In the row containing a master instance, click Replication Status.
</li>
</ol>
--- NEW FILE save_font_profile.html ---
<p class="topic">
Save Font Profile
</p>
<p class="text">
Enter a name that helps you identify this font profile, then click OK.
</p>
--- NEW FILE search_users_and_groups.html ---
<p class="topic">
Search Users and Groups
</p>
<p class="text">
Use this dialog to locate users and groups in the directory.
</p>
<p class="text">
<b>Start searching from.</b> Displays the directory entry from which Console
will begin searching.
</p>
<p class="text">
<b>Search.</b> Specify the scope of your search. Possible choices are Users
and Groups, Users, Groups, or Administrators.
</p>
<p class="text">
<b>for.</b> Enter the name of the user or group you are searching for. If you
don't know the full name, enter as much of it as you know. To list the entire
directory, leave this field blank or enter <code>*</code>. Note that listing
the entire directory may take a long time.
</p>
<p class="text">
<b>Search (button).</b> Click to begin searching.
</p>
<p class="text">
<b>Advanced.</b> Click to view additional fields for focusing your search.
</p>
--- NEW FILE search_users_and_groups_advanced.html ---
<p class="topic">
Search Users and Groups - Advanced
</p>
<p class="text">
This dialog box provides additional fields for focusing your search. Use the pull-down
menus to choose an attribute and operator, then enter a search term.
</p>
<p class="text">
<b>Start searching from.</b> Displays the directory entry from which Console
will begin searching.
</p>
<p class="text">
<b>Search.</b> Specify the scope of your search. Possible choices are Users
and Groups, Users, Groups, or Administrators.
</p>
<p class="text">
<b>where.</b> Choose an attribute and operator. The following attributes are
available:
</p>
<ul> <ul>
<li>
<code>cn</code>. The user or group's full name (common name).
</li>
<li>
<code>sn</code>. The user or group's last name (surname).
</li>
<li>
<code>givenname</code>. The user or group's first name (given name).
</li>
<li>
<code>objectclass</code>. An object class in the user or group entry.
</li>
<li>
<code>o</code>. An organization in the user or group's Distinguished Name
(DN).
</li>
<li>
<code>ou</code>. An organizational unit in the user or group's DN.
</li>
<li>
<code>l</code>. A locality in the user or group entry.
</li>
<li>
<code>uid</code>. A user ID in the user entry.
</li>
<li>
<code>mail</code>. An e-mail address.
</li>
<li>
<code>telephonenumber</code>. A telephone number.
</li> </ul>
</ul>
<p class="text">
The following operators are available:
</p>
<ul> <ul>
<li>
<code>contains</code>. The value of the selected attribute contains the search
term.
</li>
<li>
<code>equals</code>. The value of the selected attribute exactly matches the
search term
</li>
<li>
<code>does not equal</code>. The value of the selected attribute does not
match the search term.
</li> </ul>
</ul>
<p class="text">
<b>More.</b> Click to add an additional attribute, operator, and search term.
</p>
<p class="text">
<b>Fewer.</b> Click to remove an attribute, operator, and search term.
</p>
<p class="text">
<b>Search (button).</b> Click to begin searching.
</p>
<p class="text">
<b>Basic.</b> Click to view fewer fields.
</p>
--- NEW FILE security_warning.html ---
<p class="topic">
Security Warning
</p>
<p class="text">
The server you've tried to connect to has presented a certificate that the Management
Console either does not recognize or does not trust. In order to connect to this server,
you must accept the certificate.
</p>
<p class="text">
The Management Console may show you this warning because the certificate has expired or
has been terminated. There is also a risk that the server's security has been
compromised, and that the certificate is being presented fraudulently by a server posing
as the authentic one.
</p>
<p class="text">
You can view the certificate to help you determine whether you want to accept or reject
it.
</p>
<ul>
<li>
To accept the certificate this one time only and connect to the server, mark the checkbox,
then click Accept. If you restart the Management Console and try to connect to this server
again, the warning message will be displayed.
</li>
<li>
To accept the certificate and connect to the server now and each time you log in to the
Management Console, click Accept. The warning message will no longer display when you
connect to this server again.
</li>
<li>
To reject the certificate and cancel the server connection, click Reject.
</li>
<li>
To view the certificate's validity period, fingerprint, and other information, click
View Certificate. Certificate information is presented for viewing purposes only. You
cannot alter the certificate.
</li>
</ul>
--- NEW FILE select_font.html ---
<p class="topic">
Select Font
</p>
<p class="text">
Use this dialog box to change the font for the selected screen element.
</p>
<p class="text">
<b>Font.</b> Choose the font face you want to use for this element.
</p>
<p class="text">
<b>Size. </b>Choose a size for the selected font face.
</p>
<p class="text">
<b>Bold.</b> Select this option to display the font in bold.
</p>
<p class="text">
<b>Italic.</b> Select this option to display the font in italics.
</p>
<p class="text">
<b>Sample.</b> Displays sample type using the current settings.
</p>
<p class="text">
Make your selections, then click OK.
</p>
--- NEW FILE select_organizational_unit.html ---
<p class="topic">
Select Organizational Unit
</p>
<p class="text">
Select the organizational unit in which to create the new user or group, then click OK.
</p>
<p class="text">
An organizational unit is a type of branch point in an LDAP directory. Typically, it is
used to represent a major entity in your enterprise. This can be a real-life division such
as Engineering or a logical grouping of directory entries such as People or Groups. In
Distinguished Name (DN) syntax, an organizational unit is represented by
<code>ou</code>. The Engineering division of a company might exist under
<code>ou=Engineering, o=example.com</code>. Employees may be stored under
<code>ou=People, o=example.com</code>.
</p>
--- NEW FILE select_server_for_migration.html ---
<p class="topic">
Select Server for Migration
</p>
<p class="text">
This list displays the pre-4.0 servers you can migrate to 5.x. Select the servers you want
to migrate, then click Migrate.
</p>
<table border="0" cellpadding="0" width="90%">
<tr><td colspan="2">
<hr size="1" />
</td></tr>
<tr>
<td valign="top"><p class="note">
Note
</p>
</td>
<td valign="top"><p class="text">
Before you begin migration, you must install a 4.x server on the same system as the
pre-4.x server.
</p>
</td>
</tr>
<tr><td colspan="2">
<hr size="1" />
</td></tr>
</table>
--- NEW FILE select_target_servers_for_cloning.html ---
<p class="topic">
Select Target Servers for Cloning
</p>
<p class="text">
This list displays all server instances in the network tree that match the type of server
you've selected. From the list, select the instance on which you want to clone the
selected server's settings, then click Clone To.
</p>
--- NEW FILE server_group_information.html ---
<p class="topic">
Server Group Information
</p>
<p class="text">
Use this panel to view or edit server group information.
</p>
<p class="text">
<b>Edit.</b> Click to edit information about the selected server group.
</p>
<p class="text">
You can edit the following information about the selected server group:
</p>
<p class="text">
<b>Group name.</b> Specifies the name of the server group as displayed in the
network tree. The group name usually indicates the type of group that is selected. For
example, Western Sales Servers, Finance Department's Directory Server, or Example
Corporation's Messaging Servers.
</p>
<p class="text">
<b>Description.</b> (Optional) Contains a brief description of this server
group. For example, Servers for the Western region sales force.
</p>
<p class="text">
You can view, but not edit, the following information about the selected server group:
</p>
<p class="text">
<b>Installation path.</b> Indicates the path to this server group. This path
is also called the "server root."
</p>
--- NEW FILE server_information.html ---
<p class="topic">
Server Information
</p>
<p class="text">
Use this panel to open a server or edit server information.
</p>
<p class="text">
<b>Open.</b> Click to open the selected server's management window. You
can also open a server management window by double-clicking a server icon in the network
tree.
</p>
<p class="text">
<b>Edit.</b> Click to edit information about the selected server.
</p>
<p class="text">
You can edit the following information about the selected server:
</p>
<p class="text">
<b>Server Name.</b> Specifies the name of the server as displayed in the
network tree. The server name usually indicates the type of server that is selected. For
example, Administration Server, Messaging Server, or Directory Server.
</p>
<p class="text">
<b>Description.</b> (Optional) Contains a brief description of this server.
For example, Directory Server for the Eastern region sales force.
</p>
<p class="text">
You can view, but not edit, the following information about the selected server:
</p>
<p class="text">
<b>Installation Date.</b> Indicates date and time the server was installed.
</p>
<p class="text">
<b>Server Root.</b> Indicates directory where the server binaries are
installed.
</p>
<p class="text">
<b>Product Name.</b> Indicates the server's official product name.
</p>
<p class="text">
<b>Vendor.</b> Indicates the server software maker or provider.
</p>
<p class="text">
<b>Version.</b> Indicates the server product version number.
</p>
<p class="text">
<b>Build Number.</b> Uniquely identifies a particular release of a server
version.
</p>
<p class="text">
<b>Revision.</b> Indicates whether this server has been upgraded or patched.
If no value is present, this is an unpatched installation.
</p>
<p class="text">
<b>Security Level.</b> Indicates whether the server uses domestic (US based,
128-bit ciphers) or export (non-US based, 40-bit ciphers) encryption levels.
</p>
<p class="text">
<b>Server Status.</b> Indicates whether the server is on or off.
</p>
<p class="text">
<b>Port.</b> Indicates the port number the server is running on. This value is
not listed for all servers.
</p>
--- NEW FILE set_permission_dialog.html ---
<p class="topic">
Set Permission Dialog
</p>
<p class="text">
Use this dialog box to specify who can administer a server that is listed in the
navigation tree.
</p>
<p class="text">
<b>Users/Groups with administration rights.</b> Lists the users and groups
that can administer the selected server.
</p>
<p class="text">
<b>Add User.</b> Click to search for a user to add to the list of people who
can administer the selected server.
</p>
<table border="0" cellpadding="0" width="90%">
<tr><td colspan="2">
<hr size="1" />
</td></tr>
<tr>
<td valign="top"><p class="note">
Note
</p>
</td>
<td valign="top"><p class="text">
Granting a user the right to administer a server does not automatically allow that user to
give others the same right.
</p>
<p class="text">
If you want to allow a user to grant administrative rights to other users, you must add
him or her to the Configuration Administrators group.
</p>
</td>
</tr>
<tr><td colspan="2">
<hr size="1" />
</td></tr>
</table>
--- NEW FILE set_security_device_password.html ---
<p class="topic">
Set Security Device Password
</p>
<p class="text">
Use this dialog box to set the password for the internal security device.
</p>
<p class="text">
<b>New Password.</b> Enter a password for the device. Passwords should be at
least eight characters long and should contain one or more non-alphanumeric symbols.
</p>
<p class="text">
<b>New Password (again).</b> Enter the password again to confirm it.
</p>
--- NEW FILE set_security_device_password_change_security_device_password.html ---
<p class="topic">
Set Security Device Password/Change Security Device Password
</p>
<p class="text">
Use this dialog box to set or change the password for a security device.
</p>
<p class="text">
The first time you use Administration Server's security features, you are prompted to
specify a password for the internal (software) security device.
</p>
<ul>
<li>
If you are setting the password for the internal security device for the first time, enter
information for the following fields:
</li>
<dl>
<dt>
<b>New Password.</b> Enter a password for the device. Passwords should be at
least eight characters long and should contain one or more non-alphanumeric symbols.
<br /> </dt> <dt>
<b>New Password (again).</b> Enter the password again to confirm it.
<br /> </dt> </dl>
<li>
If you are changing the password for a selected security device, enter information for the
following fields:
</li>
<dl>
<dt>
<b>Old Password. </b>Enter the current password for the device.
<br /> </dt> <dt>
<b>New Password.</b> Enter the new password for the device. Passwords should
be at least eight characters long and should contain one or more non-alphanumeric
symbols.
<br /> </dt> <dt>
<b>New Password (again).</b> Enter the new password again to confirm it.
<br /> </dt> </dl>
</ul>
--- NEW FILE ssl_token_password.html ---
<p class="topic">
SSL Token Password
</p>
<p class="text">
The server you are attempting to start uses the Secure Sockets Layer (SSL) protocol. Enter
the password for the security device you used when you enabled SSL for this server.
</p>
<p class="text">
An SSL security device provides cryptographic services and stores certificates and keys.
Tokens may be stored in a local key database (internal tokens), or they may stored in a
SmartCard or other external device.
</p>
--- NEW FILE users_and_groups.html ---
<p class="topic">
Users and Groups
</p>
<p class="text">
This is a multipurpose dialog box you can use to do the following:
</p>
<ul>
<li>
Locate existing users or groups
</li>
<li>
Edit existing user or group data
</li>
<li>
Create a new user, group, organizational unit, or administrator
</li>
</ul>
<p class="text">
<b>Enter name of User, Group, or Organizational Unit to search for.</b> To
locate a user, group, or organizational unit in the directory, enter a unique string that
can be found in its directory entry. You can enter an asterisk (*) to see all the entries
currently stored in your directory.
</p>
<p class="text">
<b>Search.</b> Starts searching the selected user directory for the unique
string you've entered.
</p>
<p class="text">
<b>Advanced.</b> Displays input fields for focusing your search criteria.
</p>
<p class="text">
<b>Edit.</b> Displays forms for modifying existing user or group entries.
</p>
<p class="text">
<b>Delete.</b> Deletes the selected user or group entry.
</p>
<p class="text">
<b>Create.</b> Click and choose the type of directory entry you want to
create. You can create users, groups, organizational units, and administrators.
</p>