Administrator Guide

g. Provide the name and password of the Novell administrative account.
h. On the Initial Reverse Synchronization page, select Perform an initial reverse synchronization.
i. Still on the Initial Reverse Synchronization page, specify the password options (such as Set passwords to
the user name).
j. On the Object Mapping Scheme page, click Default (to accept the default mapping for each source and target
directory pair) or Custom (for NDS only), and then click Object Mapping Table (to specify objects for which
you want to establish a one-to-one relationship, regardless of the object location in either directory tree).
MSDSS does not support custom object mapping for Bindery.
k. Still on the Object Mapping Scheme page, click Filters if you want to configure a filter for this synchronization
session.
l. On the Session Name page, accept the default session name or specify a new name.
m. Click Finish.
9. If you selected one-way synchronization, you should now perform all user, group, and NDS organizational unit
container (OU) object management from Active Directory. If you established two-way synchronization, you can now
manage user, group, and OU objects from either Active Directory or NDS.
10. If you plan long-term coexistence between Active Directory and NetWare, you are now finished, unless you want to
migrate a subset of users, systems, and/or files. If you plan to continue by migrating in stages from NetWare to Active
Directory, perform the following tasks in the time-frame that is convenient for you:
Install and configure File and Print Services for NetWare (to allow NetWare clients access to files and printers on
Windows 2000 servers) and Gateway Services for NetWare (to allow Windows clients access files and printers on
NetWare servers).
Replace services or applications that require NDS with commensurate software compatible with Active Directory.
Perform large conversions (such as GroupWise to Exchange) as separate projects.
Migrate the pilot group of users and their files (adapt instructions from the migration steps provided in the
"Small Environment
" section). Get the pilot group's feedback, and then set a schedule to migrate additional
groups of users, according to the priorities you have established.
Migrate the rest of the users as appropriate (for example, if you migrate the set of applications they use, it is
time to migrate them as well).
For more information, see the Novell website at support.novell.com/servlet/Knowledgebase and the Windows 2000
website at www.microsoft.com/windows2000.
Using Secure Sockets Layers
This section explains how secure sockets layers (SSL) are used in the NAS system. It also explains how to use your own
certificate, if you have one, and how to regenerate your certificate.
Introduction to SSL Certificates
Certificates contain information used to establish system identities over a network. This identification process is called
authentication. Although authentication is similar to conventional forms of identification, certificates enable Web servers and
users to authenticate each other before establishing a connection to create more secure communications. Certificates also
contain encryption values, or keys, that are used in establishing an SSL connection between the client and server.
Information, such as a credit card number, sent over this connection is encrypted so that it cannot be intercepted and used
by unauthorized parties.
Two types of certificates are used in SSL. Each type has its own format and purpose. Client certificates contain personal
information about the clients requesting access to your site, which allows you to positively identify them before allowing them
access to the site. Server certificates contain information about the server, which allows the client to positively identify the