Novell Forums

List of Users in Landing Page Workspace?

rsoberano — Sat, 18 May 2013 05:10:57 GMT

Hi, I'm building out a customized landing page in Novell Vibe, and I was wondering if there was a way to include a list of all Vibe users as a module/entry on the landing page, exactly like how clicking on "Personal Workspaces" brings up a list of users? I see that Novell Vibe already has a definition element specifically for displaying a list of users, but I'm not sure how I'd add that/display that on a landing page. Any help is very much appreciated!

Where to make changes for using 3rd party cert with OES11.

gathagan — Sat, 18 May 2013 03:51:45 GMT

Just because it takes a while to track all these down individually, here's a list of what to change in order to use a 3rd party security cert to prevent your browsers from complaining with iManager, iMonitor NRM and the server's basic website.

This assumes you already know how to get a 3rd party cert for your server using iManager and exporting that same cert as a PFX file to the server in question.

Once that's done, open a terminal session in the directory where the PFX file is located and run two OpenSSL commands:

openssl pkcs12 -in keyStore.pfx -out cert.pem -nodes -nokeys
openssl pkcs12 -in keyStore.pfx -out key.pem -nodes -nocerts

In both commands, you will be asked for the password you used in exporting the PFX file.

Copy both files to the /etc/ssl/servercerts/ folder
For the server itself (https://whatever_your_server_is), edit two lines in "/etc/apache2/vhosts.d/vhost-ssl-conf":

SSLCertificateFile /etc/ssl/servercerts/.pem
SSLCertificateKeyFile /etc/ssl/servercerts/.pem

iManager:
With thanks to Peter Hine's response in the 02-Jul-2012 Novell forum thread, "OES11: Custom certificate for Apache"
https://forums.novell.com/novell-pro...te-apache.html

Edit the edir file in /etc/sysconfig/novell/
The file name varies from version to version. In OES11SP1 it's "edir_oes11_sp1"
In pre-SP1, it appears to be "edir2_oes11"

Change value of the line 'CONFIG_EDIR_OVERWRITE_CERT_FILES="yes" to "no"

Novell Remote Manager:
Edit "/etc/opt/novell/httpstkd.conf".
Look for the line addr 0.0.0.0:8009 keyfile=/etc/opt/novell/httpstkd/server.key certfile=/etc/opt/novell/httpstkd/server.pem
Edit the line to reflect the new cert file locations:
addr 0.0.0.0:8009 keyfile=/etc/ssl/servercerts/.pem certfile=/etc/ssl/servercerts/.pem

iMonitor:
Use Console1 or iManager to locate the object in the server's context labeled "Http Server - and examine the properties of that item.
If using C1, select the "Other" tab, find the attribute in the left column labeled "httpKeyMaterialObject", expand the attribute to show its target and navigate to the certificate you imported.
In iManager, you'll see the same attribute in the left-side column. Double-click on the attribute and navigate to your imported cert.

Restart apache2 (apache2ctl restart) and tomcat6 (service novell-tomcat6 restart) to activate the changes for the main web page and iManager.
You'll need to restart eDirectory (rcndsd restart) to activate the changes for iMonitor, so understand the disruption that could cause if you've only got one server running eDirectory.

Restarting the server will, of course, take care of all 3.

Netfolder Proxy user not working as documented?

vodobaas — Fri, 17 May 2013 20:42:50 GMT

Hello,

We are using EDIR For LDAP. Part of our EDIR tree is synced to AD for File shares. I defined netfolder on an AD file server. I created a service account to use as the "Net Folder Proxy User." I gave Full Control file rights on the AD server folder structure to the proxy user service account.

I defined a net folder to a share from the AD server to which the Proxy service account had full control.

The proxy user test when defining the netfolder server reports success.

I gave access rights to 3 users:
an edir user who is synced to AD and is an AD Domain admin - "ADadmin"
an edir user who has no AD presence or security - "EdironlyUser"
a local filr user - "LocalFilrUser"

There is a word doc in the net folder

All the users can see the netfolder & word doc inside
all the users can view the details of the word doc
all the users can view the HTML view of the word doc
the filradmin & ADadmin can download the word doc
When the EDIRonlyUser & LocalFilrUser download a doc and open it, this as the content of the word doc :

File error: Cannot execute [getContentLength] on the resource [70000\The quick brown fox jumps over the lazy dog.doc] - Access is denied

There is also a sample PDF file in the net folder.
The ADAdmin & Filr admin can download the file properly.
The Edironly & localfilr users get broken PDFs.

I even went so far as to grant Everyone full control file access to the ADserver file structure hoping that would make this work.

Thanks for any insights,

Frank

Managing users from multiple LDAP sources

mstatman — Fri, 17 May 2013 17:13:06 GMT

In our environment, we have both eDir and AD with IDM synchronizing the users. All users exist in both trees. Some users have a homeDirectory on OES, while other have their homeDirectory on a Windows server. How can we import "both" sets of users such that users who have their homeDirectory on OES can have access to directories stored on Windows, as well as giving users who have their homeDirectory on Windows access to that and also to directories stored on OES to which they have rights?

TIA,
Mike

NSM 3.1 error 303

blue01kat4me — Fri, 17 May 2013 16:41:44 GMT

303 : Extended path information is missing for the specified network path.

Can anyone point me to a cause for this error. The target storage location is a share on a windows VM. The FSFProxyRights group has full control over the share and to the filesystem location.

Lenovo ThinkPad X1 Carbon Ultrabook - HDD not visible

trevorings — Fri, 17 May 2013 16:38:07 GMT

Hi all, just updated to 11.2.3a across the board, added the new april imaging update and can boot into the imaging menu but unable to see the HDD. The network boot issue is solved however.

I am using ENGL, and have tried with and without the hooked initrd.

also tried changing the SATA mode to compatability, see the IDE drivers load but still same issue. Also, may be irrelevant but the splash screen and then the menus are all out of whack. different colours, characters on the right side etc.

Anyone imaging these models succesfully?

Trev.

Atheros AR8131 and Asus X202E

farmeunitWPSD — Fri, 17 May 2013 16:30:09 GMT

I've found several threads about config files and updating drivers, but it's not working working so far.

I've added newid="0x1969 0x1026,atl1e" to my z_maint.cfg and z_auto.cfg, but it only picks up the WLAN and not the NIC. I've never had to go through this process before, so I'm not sure what to do next.

Any help is appreciated.

ZCM 11.2.3a on Server 2008R2
Asus Vivobook X202E with Atheros AR8131 GE NIC
Imaging Update April 2013

NullPointerException on Patch Management tab

stober — Fri, 17 May 2013 14:56:01 GMT

I upgraded yesterday to 11.2.3a. When I go to a device and look at the Patches tab, patches are listed with the devices status and I can deploy patches. However, if I go to the main Patch Management home or the Subscription Download on the Configuration home, I get a java.lang.NullPointException. Any ideas would be much appreciated.

Here is the full error details:
16 May 2013 11:55:47 ============== Exception (begin) ===========================
16 May 2013 11:55:47 Exception occured
java.lang.NullPointerException
at java.lang.String.compareTo(String.java:1167)
at java.lang.String.compareTo(String.java:92)
at java.util.Arrays.mergeSort(Arrays.java:1144)
at java.util.Arrays.mergeSort(Arrays.java:1155)
at java.util.Arrays.mergeSort(Arrays.java:1155)
at java.util.Arrays.sort(Arrays.java:1079)
at java.util.Collections.sort(Collections.java:117)
at com.patchlink.sapphire.web.pages.vulnerability.Vie wVulnerabilitiesSnapshot.listOfVendors(ViewVulnera bilitiesSnapshot.java:1652)
at com.patchlink.sapphire.web.pages.vulnerability.Vie wVulnerabilitiesSnapshot.setFilterInfoFromSession( ViewVulnerabilitiesSnapshot.java:1389)
at com.patchlink.sapphire.web.pages.vulnerability.Vie wVulnerabilitiesSnapshot.onInit(ViewVulnerabilitie sSnapshot.java:166)
at com.novell.web.controls.WebControl.initRecursive(W ebControl.java:2085)
at com.novell.web.controls.WebControl.addControl(WebC ontrol.java:1495)
at com.novell.web.controls.WebControl.addControl(WebC ontrol.java:1415)
at com.novell.zenworks.fw.web.internal.layout.PluginT emplate.loadContent(PluginTemplate.java:288)
at com.novell.zenworks.fw.web.internal.layout.Snapsho tTemplate.loadContent(SnapshotTemplate.java:84)
at com.novell.zenworks.fw.web.internal.layout.PluginT emplate.onLoad(PluginTemplate.java:130)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2423)
at com.novell.zenworks.fw.web.internal.layout.Snapsho tTemplate.loadRecursive(SnapshotTemplate.java:446)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2429)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2429)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2429)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2429)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2429)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2429)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2429)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2429)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2429)
at com.novell.web.controls.WebControl.loadRecursive(W ebControl.java:2429)
at com.novell.web.controls.Page.internalProcessReques t(Page.java:712)
at com.novell.web.controls.Page.processRequest(Page.j ava:667)
at com.novell.zenworks.fw.web.internal.layout.Index.p rocessRequest(Index.java:631)
at com.novell.web.internal.controls.PageTag.doEndTag( PageTag.java:86)
at org.apache.jsp.jsp.index_jsp._jspService(index_jsp .java:187)
at org.apache.jasper.runtime.HttpJspBase.service(Http JspBase.java:70)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:717)
at org.apache.jasper.servlet.JspServletWrapper.servic e(JspServletWrapper.java:377)
at org.apache.jasper.servlet.JspServlet.serviceJspFil e(JspServlet.java:313)
at org.apache.jasper.servlet.JspServlet.service(JspSe rvlet.java:260)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:717)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:290)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.ApplicationDispatcher.inv oke(ApplicationDispatcher.java:646)
at org.apache.catalina.core.ApplicationDispatcher.pro cessRequest(ApplicationDispatcher.java:436)
at org.apache.catalina.core.ApplicationDispatcher.doF orward(ApplicationDispatcher.java:342)
at org.apache.catalina.core.ApplicationDispatcher.for ward(ApplicationDispatcher.java:302)
at com.novell.web.NJWCServlet.serviceImpl(NJWCServlet .java:97)
at com.novell.zenworks.fw.web.internal.ZENworksServle t.service(ZENworksServlet.java:84)
at javax.servlet.http.HttpServlet.service(HttpServlet .java:717)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:290)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:206)
at com.patchlink.sapphire.web.pages.vulnerability.ses sion.HibernateSessionFilter.doFilter(HibernateSess ionFilter.java:75)
at org.apache.catalina.core.ApplicationFilterChain.in ternalDoFilter(ApplicationFilterChain.java:235)
at org.apache.catalina.core.ApplicationFilterChain.do Filter(ApplicationFilterChain.java:206)
at org.apache.catalina.core.StandardWrapperValve.invo ke(StandardWrapperValve.java:233)
at org.apache.catalina.core.StandardContextValve.invo ke(StandardContextValve.java:191)
at org.apache.catalina.authenticator.AuthenticatorBas e.invoke(AuthenticatorBase.java:563)
at org.apache.catalina.core.StandardHostValve.invoke( StandardHostValve.java:127)
at org.apache.catalina.valves.ErrorReportValve.invoke (ErrorReportValve.java:102)
at org.apache.catalina.core.StandardEngineValve.invok e(StandardEngineValve.java:109)
at com.novell.zenworks.tomcat.ZENRequestValve.invoke( ZENRequestValve.java:1293)
at org.apache.catalina.connector.CoyoteAdapter.servic e(CoyoteAdapter.java:298)
at org.apache.coyote.http11.Http11Processor.process(H ttp11Processor.java:857)
at org.apache.coyote.http11.Http11Protocol$Http11Conn ectionHandler.process(Http11Protocol.java:588)
at org.apache.tomcat.util.net.JIoEndpoint$Worker.run( JIoEndpoint.java:489)
at java.lang.Thread.run(Thread.java:662)
16 May 2013 11:55:47

Exception Info:
16 May 2013 11:55:47 Class....... java.lang.NullPointerException
16 May 2013 11:55:47 Message..... null
16 May 2013 11:55:47 Logged at... Index...............637
16 May 2013 11:55:47 ============== Exception (end) =============================

Users sent items in pending status

nix34 — Fri, 17 May 2013 14:28:44 GMT

All users on a certain post office periodically have their sent items get stuck in pending status. I researched this and found the following:

I noticed the Domain where the post office resides which is on our 8.0.3 MTA keeps closing

The post office resides on a SLES 11 box.

I have to go in and stop the post office rcgrpwise stop and restart the post office rcgrpwise start

I have done and rebuild on the post office and MTA, issue is still happening

Any idea on why this keeps happening and how to fix? Thank you

This is the only Post Office on that domain that is having this issue.

Deleting Email - Device Only - Blackberry 10

emmanuelclave — Fri, 17 May 2013 13:37:45 GMT

Is there any way to set up the delete from Device Only ?
On BES5, users could select to delete email from handset only.

There does not seem to be a setting for this in Data Synchcroniser.
There is a setting for directional synchronisation by type (email, tasks, calendar etc.. ) but not function (ie delete).

This has been requested frequently.

Thanks

Emmanuel

Clarrification on setup of sharing for dynamic groups

nlandas — Fri, 17 May 2013 13:22:10 GMT

I could use some expert help on understanding the steps to configure sharing rights for different dynamic groups.

I'm using eDir and I have three dynamic groups - Teacher, Staff and Students

Right now I want
Teachers to have all sharing rights but external/public
Staff to have all sharing rights but public
Students to have no sharing rights at all

Can someone tell me how to go through the Share Settings, User Accounts, ?groups? in the Administration console to easily assign these rights to my 2000+ users? The documentation is confusing and seems to have me end up with all sharing rights turned on for all users and then tell me to turn it off under User Accounts, which requires touching each user or subset of 25 users at a time to configure rights.

I am hoping that the steps are not.
1.) Turn on sharing for the built in 'all internal users' group.
2.) Manually select all users in subsets a maximum of 25 at a time and CLEAR the rights that you don't want them to have.

I'd be in for a late night. Is there a better way? I'm loving Filr version 1.0 but I need easy sharing rights too.

Thanks.

Building cldap from source

ashwinkumark10 — Fri, 17 May 2013 08:54:14 GMT

I downloaded cldap the source from ftp://sdk.provo.novell.com/ndk/cldap...2007.03.tar.gz and not finding documentation to build the library for Windows and Linux.

I am writing a client in C++ to authenticate user via LDAP.
I am using windows 7 with visual studio 2010 and CentOS 6.2.

How do I build the library on Windows and on Linux?

Win7 'waiting for user to accept request' despite policy

Conz — Fri, 17 May 2013 07:50:50 GMT

We have a mix of XP and 7 64bit machines that use the same remote control policy, the XP machines can be remote controlled without user intervention but the Win7 machines require the user to press accept despite having the remote control policy.

We're currently using 11.2.2 mu2, anyone know what might be causing this ?

Can't set the initial MySQL password when configuring Filr

atrofimov — Fri, 17 May 2013 07:18:10 GMT

I am trying to set up my first Filr appliance, doing the most basic all-in-one setup just following the documentation. I am up to 3.1, the step where you choose Small Deployment then enter and confirm the password for MySQL administrator and the default locale.

No matter what I type in as the password I keep getting "Unable to set up admin password" message. It comes up when I click "Finish" trying to apply the default locale ( I keep it as English(United States) ), I can see "Please wait .." and "Creating Database.." flashing very briefly before the error comes up.

Quote:

The Filr Server Configuration Wizard is displayed.

Select Small Deployment, then click Next.

On the Database page, specify and confirm the password for the MySQL administrator.

If you need to change this password at a later time, you must use the native MySQL tools to do so.

Click Next.

In the Default Locale field, select the default locale for your Filr site. This is the language and locale that Filr uses when users first log in to the Filr site.

Click Finish.

I have recreated the VM including the HDD and re-imported the OVF template but stil get the same error. Obviously I am doing something wrong .. but what is it ?

Question re Single Instance Storage of emails

ddabinett — Fri, 17 May 2013 04:55:09 GMT

I understand that GroupWise stores a message sent to multiple users only once within the PO and does its magic with pointers, etc but does it do the same if a user in one post office sends an email to multiple users in another post office. If so, will this work across post offices that sit within separate GroupWise domains but in the same system? And finally if this is still the case, will it do the same for an email sent from the internet to a number of users within the same post office?

Cheers,
Dave