7. To set which IP addresses and CIDR ranges are available for unauthenticated browsing:
a) In the eDirectory Options section, select Do not associate eDirectory usernames with
the following IP addresses.
b) Click Add.
The Exempt Authentication dialog box is displayed.
c) Enter an IP address or CIDR IP address range into the text box and select which address
type it is (IP Address or IP Range) from the adjacent drop-down list, and then click Add.
Important: The Web Appliance will interpret any dotted quad followed by a slash and a
number less than 33 as a CIDR range.This creates the possibility that a URL entered as
an IP address, followed by a numbered directory from 0 to 32, would be improperly treated
as a CIDR range.To avoid this possibility, always enter URLs to numbered directories
using fully qualified domain names rather than IP addresses.
The IP address or range of IP addresses is added to the list below.
Note: If you exempt users by their IP address, any reports or searches that normally display
a User name field will show their IP address instead. Other system functions will continue
to operate as expected.
d) [Optional] To delete a listed IP address or IP range, select the check box beside the entry
that you want to remove, and click Delete.
The IP address or range of IP addresses is removed from the list.
e) Click Save.
4.4.6.1.1 Boosting eDirectory Performance via Custom Indexes
The performance of the eDirectory server can improve significantly if two attributes, objectClass
and networkAddress, are indexed. Results will vary, depending on the size and structure of
your network, but it is recommended that all users make this change.
Although eDirectory has a number of default indexes, you can add custom indexes using either
Novell iManager or Novell ConsoleOne.
Note: You must make the changes on all eDirectory servers.
When creating a custom index, you are prompted to select the index rule ("Value," "Presence,"
and "Substring"). For best results, it is recommended that you select "Presence." For more
information, see the Novell documentation on index management.
Related information
Index Management
4.4.6.1.2 Configuring Connections to eDirectory Replicas
You can reduce network traffic and improve the accuracy of identifying users in eDirectory by
properly configuring the correct replica for a specific group. Properly configured replicas will:
■
reduce load on your root eDirectory server.
■
reduce network traffic between your eDirectory servers.
130 | Configuration | Sophos Web Appliance
To Next Page
Loading...
Need help?
General
