4.3 Considerations for Upgrading NICI on Servers with Multiple Instances of eDirectory

If a Linux server is hosting more than one eDirectory, each eDirectory instance typically has its own NICI directory setup. If you upgrade one instance of eDirectory to 9.0 or later, you will need to upgrade all instances because eDirectory 8.x will not work correctly using NICI 3.0.

It is recommended to run each instance of eDirectory on the same host with different user IDs to separate their cryptographic materials using the host system’s security mechanisms. NICI does not require a special user to run, except for installation, when a privileged user who can install setuid programs must install NICI (a one-time operation).