!!! Overview
Materials in the [{$pagename}] don't depend on the contents of eDirectory files. On the contrary, [encrypted data in eDirectory|NICITreeKeyProvider] depend on keys stored in [{$pagename}].
[{$pagename}] contain the user private keys, certificates, secret store data, and NMAS store data, will not be available if [{$pagename}] are not properly maintained. Be certain the [NICI Backup Procedures] are in-place.!! [NICI] Configuration Files
[NICI] configuration files are located in the platform specific [NICI File Locations]. The [{$pagename}] listed below are present on all platforms. Platform-specific files and other configuration details are explained the [NICI Administration Guide|http://www.novell.com/documentation/nici27x/index.html].
* nici.cfg - holds the configuration settings for [NICI].
* nicisdi.key - The actual [SDI Key] [Private Key].
* NICIFK - NICI license material for [NICI server-mode operation].
* Xmgrcfg.nif - NICI per-box unique keying material generated locally. [NICI client-mode operation] and Not used if NICIFK is present. (Created on first use of [NICI] by a privileged user)
* Xarchive.000 - [NICI] master archive. Created on first use of [NICI] by a privileged user
%%warning
[{$pagename}] are [Digitally Signed] and are partially [Encrypted]. An invalid license file (NICIFK) or a client license file (xmgrcfg.wks) renders [NICI] nonfunctional.
%%
The file xmgrcfg.wks was used in the previous versions of NICI in the client mode. It is no longer used or created with NICI v2.7.0 or later.
[NICI] operates in a [NICI server-mode operation] by default in [NICI] v2.7.0 or later. The xmgrcfg.wks is present if you are upgrading from a previous version of [NICI]. It doesn't effect the operation of [NICI] v2.7.0 or later.
!! Multiple Instances
We strongly recommend running each instance of eDirectory on the same host with different [UserIds] to separate their [cryptographic] materials using the host system's security mechanisms.
Otherwise, the server based [Security Domain Infrastructure] private key will be the same for all instances.
!! [Example] Files
The nici.cfg file holds the configuration settings for [NICI].
Running "cat /<nici config file location>nici.cfg" will provide the locations for the files. Typical output is shown below:
{{{
# cat /etc/opt/novell/nici.cfg
ConfigDirectory:s:20:/var/opt/novell/nici
SharedLibrary:s:9:/opt/novell/lib/libccs2.so
DAC:b:20:a4:6f:1d:c2:29:c5:fc:a8:50:7f:fd:0c:d6:19:a6:9e:91:0f:62:0e
MkUserDir:s:28:/var/opt/novell/nici/nicimud
DAC2:b:20:f8:01:a8:26:f7:f4:12:53:92:0f:a8:42:24:7d:ce:3a:da:ed:40:83
NiciVersion:s:5:2.7.2
BuildDate:s:6:070214
NiciStrength:s:2:u0
}}}!! Typical files
The Files located at the appropriate [NICI File Locations] would be similar to:
{{{
drwx------ 2 root root 4096 Jun 15 2011 0
drwx------ 2 john2 enduser 4096 Jun 22 2011 113100
drwx------ 2 willej enduser 4096 May 15 13:42 118952
-rw-r--r-- 1 root root 13440 Jun 15 2011 nicifk
-rw-r--r-- 1 root root 13440 Mar 30 2009 nicifk.new
-rwsr-xr-x 1 root root 17128 Mar 30 2009 nicimud
-rwsr-xr-x 1 root root 13033 Mar 30 2009 nicimud64
-rwx------ 1 root root 115366 Mar 30 2009 primenici
-rwx------ 1 root root 124755 Mar 30 2009 primenici64
-r-x------ 1 root root 2969 Mar 30 2009 set_server_mode
-r-x------ 1 root root 2969 Mar 30 2009 set_server_mode64
-rw-r--r-- 1 root root 1222 Jun 15 2011 xarchive.000
-rw-r--r-- 1 root root 12024 Jun 15 2011 xmgrcfg.nif
-rw-r--r-- 1 root root 3853 Mar 30 2009 xmgrcfg.wks
./0:
total 28
-rw-r--r-- 1 root root 2448 May 23 23:37 nicisdi.key
-rw-r--r-- 1 root root 362 Jun 15 2011 xarchive.001
-rw-r--r-- 1 root root 12289 Jun 15 2011 xmgrcfg.ks2
-rw-r--r-- 1 root root 269 Jun 10 15:33 xmgrcfg.ks3
}}}
There may also be other files which should also be backed up. The other files and sub directories would be specific to a user.
There are two other [{$pagename}] that might be present, which are used to switch [NICI server-mode operation] when programs such as [eDirectory] are installed. The files are:
* nicifk.new
** set_server_mode (Linux/UNIX) or
** set_server_mode.bat (Windows)
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]