Presentation on theme: "Kanaka for Mac 2.1 Providing Mac OS X automated single login access to Novell storage resources Doug Ouzts Technical Trainer"— Presentation transcript:
Kanaka for Mac 2.1 Providing Mac OS X automated single login access to Novell storage resources Doug Ouzts Technical Trainer
Agenda Current Novell and Mac Integration Challenges Kanaka for Mac 2.1 Overview Kanaka for Mac 2.1 Technical Architecture Kanaka for Mac 2.1 Requirements Interactive Training
Integration Challenges Between Apple and Novell Developing software for Mac environments has not been a priority with Novell Client software is either nonexistent or out of date. Integration tends to be workarounds rather than solutions
Complex to Configure Manually 1.Configure for simple or universal password in the eDirectory tree 2.Ensure AFP or CIFS is installed and configured 3.Ensure that each Mac can resolve servers host name 4.Edit SSL certificate on each Mac 5.Extend eDirectory schema 6.Verify extended schema
Complex to Configure Manually (cont.) 7.Extend user objects 8.Create mount volumes for each volume you want to access 9.Configure each Mac to authenticate to eDirectory 10. Set additional preferences in eDirectory Provided you put in all of the time to learn to understand and perform each step, this approach might work.
Manual Configuration Requires On-going Configuration As users are added, moved, renamed, or removed, the extended user object needs reconfigured When a new Mac is added, one half of these steps must be repeated If a home directory path is moved, the mount objects need to be updated
What about the Magic Triangle Configuration? Capability of integrating Mac client system and two differing directories to provide the information for both login and management. Tips for doing so are scattered among Mac Tips & Tricks documents, forum discussions, and Apple Open Directory Admin Guide. Significant investment in time to learn and then implement.
Why Make Things More Complex than They Have to Be?
Simplified Integration with Kanaka 1.Configure simple or universal password in the eDirectory tree 2.Ensure AFP or CIFS is installed and configured 3.Install the Kanaka Engine 4.Run the Setup Wizard 5.Install Kanaka on workstations 6.Login and access storage resources
Developed with Apple Directory Services Engineering Group Onsite cooperative engineering effort in 2005 Close developer association with Apple Apple Developer Connection member since 2005 Kanaka is recommended by Apple as a preferred solution for integrating Macs and Novell networks
How Kanaka Works
Single Password Login Options A.Kanaka Plug-in: Simultaneous authentication to eDirectory during Mac login Mounts all user and group storage B.Kanaka Desktop Client: Client login authentication to eDirectory Mounts all user and group storage
Kanaka Plug-in Authentication 1.Single Novell Simple or Universal password login. 2.Home directory and collaborative storage attributes retrieved. 3.Converts attributes into URL format for OS X to mount storage. URL can be AFP or CIFS. 4.Checks to see if eDirectory authentication is required to gain access to the desktop.
Kanaka Desktop Client Authentication 1.Single Novell Simple or Universal password login. 2.Home directory and collaborative storage attributes retrieved. 3.Converts attributes into URL format for OS X to mount storage. URL can be AFP or CIFS.
Why Two Authentication Methods? Kanaka Plug-in Users in a computer lab setting Mac OS X 10.4 users Kanaka Desktop Client Users with assigned workstations and local accounts Users who do not want to go through the Login Window to access network storage resources Users who do not want to lose their workstation settings when accessing network storage resources Mobile users who frequently work at home and connect through VPN
Identity Determines User and Collaborative Storage Resources Home directory and collaborative storage links built dynamically at login Group membership automatically mounts associated group storage No machine dependency for accessing storage No need to remember location of storage No need to traverse from root of a volume down to a users storage No need to visit each machine to manually mount volumes
The Players eDirectory Following context-less, single login, used by Kanaka to determine user and collaborative storage resources. Apple Filing Protocol After Kanaka determines home and collaborative storage attributes, AFP can be used to mount volumes. CIFS/SMB After Kanaka determines home and collaborative storage attributes, CIFS/SMB can be used to mount volumes. Mac OS X Initiates login process. Causes Kanaka Plug-in to authenticate to eDirectory and retrieve necessary user information. Novell Native File Access Receives control structures from OS X. Eliminates need to log in to multiple servers. Apple Open Directory Kanaka integrates with Apple Open Directory to extend management of Mac OS X via Workgroup Manager.
Mounting Home and Group Storage Home directory and group storage mounts on the Dock or in the Mac Finder. Network resources are displayed on the desktop.
Kanaka Mobility Leverages Apples Mobile Account feature Provides Mac network and local login Flexibility to configure mirroring so that network home directory and local home directory always contain same data Capable of reducing network traffic and network home directory quotas
Kanaka Plug-in Console Allows for the user to manage his or her eDirectory password.
Kanaka Plug-in Console (cont.) Displays identity information from Novell eDirectory.
Kanaka Plug-in Console (cont.) Indicates storage capacity and usage.
Enhancements to Kanaka 2.1 No NetWare dependencies Kanaka Engine can be hosted on either a – Novell Open Enterprise Server 2 – Microsoft Windows Server 2008 or Windows 7 Improved management capabilities Improved support for extended characters and object names
Technical Architecture and Requirements Kanaka for Mac 2.1
Architecture Mac Kanaka Client OS X Windows / OES 2 Kanaka Engine Policy eDirectory MCX Open Directory Workgroup Manager Context-less Authentication Auto-mount Storage Resources User Group OES 2 NetWare MCX Directives Password Change Disk Quota Kanaka Plug-In
Kanaka Requirements Engine Linux – Open Enterprise Server 2 (OES 2) SP2 or later Windows – OS Requirement Windows Server 2008 or later Windows 7 or later – Novell Client 2 SP1 IR4 or later Desktop Client / Plug-In Desktop Client – Mac OS X 10.5 or later Plug-In – Mac OS X 10.4 or later Plug-In Console – Mac OS X 10.5 or later
Kanaka 2.1 Prerequisites Kanaka clients leverage eDirectory and Native File Access (NFA) technologies from Novell, therefore, the configuration of these components is prerequisite to the installation and configuration of the Kanaka client software on Mac OS X. Please reference the Kanaka Admin guide for more information on configuring NFA and Password Management