Novell Directory Services

This feature is scheduled to be removed from Workspace Control. See also Feature deprecation.

The following instructions apply specifically to Novell Directory Services:

Order of Directory Services

When a user logs on to a computer using the Novell Client, the Novell Client silently also logs that user on to a Microsoft Windows domain, or creates a new local user for this purpose. The way in which this is set up in your environment influences the identification of the user for the purposes of Workspace Control:

• If the Novell Client also logs the user on to a Windows domain, and you have also listed a Workspace Control Directory Service that includes that same domain, then you must place the Novell Directory Service higher in the list than the domain Directory Service. (Otherwise Workspace Control will find the user in the other Directory Service and will not check the Novell Directory Service anymore.)
• If the Novell Client also logs the user on as a local user, and you have also listed a Local Computer Directory Service in Workspace Control that will apply to the computer on which the user is logging on, then you must place the Novell Directory Service higher in the list than the local computer Directory Service. (Otherwise Workspace Control will find the user in the other Directory Service and will not check the Novell Directory Service anymore.)

Group Names

In Novell Directory Services, group names do not need to be unique. By default, Workspace Control Directory Services based on Novell will use the full paths of these groups to distinguish between them. This can be disabled, so that Workspace Control will treat all groups with the same name as one.

For example, you have the Organizational Units "New York" and "Amsterdam", which both contain a group "Helpdesk". Users from both those groups need access to the application "Knowledge Base". The way in which Access Control is set for this application, depends on the option Use full group names in the Workspace Control Directory Service for this Novell environment:

• If the option Use full group names is selected for the Directory Service for this Novell environment, Access Control on the application "Knowledge Base" must be set on the group Amsterdam/Helpdesk AND on the group New York/Helpdesk.
• If the option Use full group names is not selected, Access Control on the Knowledge Base can be set to the group "Helpdesk", and this will automatically include all groups with that name in that Novell Directory Service.