http://forums.novell.com/ en Sat, 21 Nov 2009 07:55:11 GMT vBulletin 60 http://forums.novell.com/images/ca_serenity/misc/rss.jpg http://forums.novell.com/ http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/393489-ldap-contextless-multiple-servers.html Fri, 20 Nov 2009 20:44:03 GMT We use LDAP contextless login in our environment, and for the most part it has been rock steady. We had an issue today though where one our LDAP... We use LDAP contextless login in our environment, and for the most part it has been rock steady. We had an issue today though where one our LDAP servers wasn't working...but just the LDAP piece. Other services on that server weren't affected, and we could communicate with it just fine. Clients trying to query for LDAP searches were given a search timeout error. We list three servers in the 'servers' field on the client settings. If we moved one of the other servers up to be first on the list they could login. If we moved the malfunction server back to the top they got the timeout again.

My question is... whats the point of multiple servers if it doesn't query the other servers if the first one times out? Does it only use the secondary servers if it can't ping the first one?

thanks for any suggestions. ]]> eDir: Netware sledneck_9 http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/393489-ldap-contextless-multiple-servers.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/393237-warning-current-dib-set-name-set-ndt.html Thu, 19 Nov 2009 08:47:56 GMT I am getting an error below with my dsrepair, I have checked the KB, but the information looks old as it says I should rename the dib manually, does... I am getting an error below with my dsrepair, I have checked the KB, but the information looks old as it says I should rename the dib manually, does it still apply to my nw6.5sp8 edir 8.8sp2 ? I am bit scared to upgrade this to sp5 due to the issue I had with ldap.

ERROR: Could not track parent of subordinate count. Error: -150


ERROR: updating object 8046 Error: -150

WARNING: The current dib set name is set to: NDT
NOTICE: Successfully set current dib set to: nds

Repair process aborted ]]> eDir: Netware grpadmin http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/393237-warning-current-dib-set-name-set-ndt.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/393124-edirectory-events-logs-audit-login-logout.html Wed, 18 Nov 2009 12:29:16 GMT Hi,not sure if i should post this here or audit forum. I am required by my managment to setup some form of audit logs that can be generated that... Hi,not sure if i should post this here or audit forum.
I am required by my managment to setup some form of audit logs that can be generated that will capture the following events:

users:

1) Sucessfull login & logout
2) Unsuccessful login & logout

We do not have any budget to work with to buy a solution in just to capture this information.

Is there any way possible to capture this with what we have.

Netware 6.5 sp8

any way to capture this information free or using in-built features would be beneficial to us.

I have already seen the TID about setting uup audit starter pack
(Cool Solutions: Audit Starter Pack: Installation, Configuration and Usage Instructions)

but when this was setup various issues arised with the setup of the MYSQL, and also the events started slowing the server down event when only a limited number of events were selected to log.

Anything else that can be implemented to collect the

Successfull/Unsuccessful - login/logout
would be helpful

regards

Dennis ]]> eDir: Netware dchitolie http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/393124-edirectory-events-logs-audit-login-logout.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/393121-ldap-does-not-work-after-applying-sp5.html Wed, 18 Nov 2009 12:20:21 GMT I just applied e-Dir sp5 to my server, now I cannot have my Ldap working. I have tested it with ldapbrowser, tried with http://xx.xx.xx:389, but I... I just applied e-Dir sp5 to my server, now I cannot have my Ldap working. I have tested it with ldapbrowser, tried with http://xx.xx.xx:389, but I don't understand why it is not working. So now my ifolder has stopped as my tomcat does not work any more. Nw6.5sp8 Help!!! ]]> eDir: Netware grpadmin http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/393121-ldap-does-not-work-after-applying-sp5.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/393028-connection-server-terminated.html Tue, 17 Nov 2009 17:53:57 GMT Hi,

We started seeing this error message "Connection to server was terminated. Try to connect again." today when people logged in some people got in fine and some people got this message it seemed to be random.

On the computers w/ error message I could run slpinfo /d and it looked right and you could browse to the tree and contexts on the login window. The only changes we have made recently was I updated a OES-L Server that we have been testing Zenworks on to from SLES10sp2 OES2sp1 toSLES10sp3 OES2sp2 64bit yesterday and it didn't update real smoothly but eventually got it updated yesterday so I shut it down today and then released and renewed dhcp on the problem computers and they logged in fine after that. So I am not sure what could be the problem or what to check next. I am not sure if the OES-L server had anything to do with it or not? Is there a way to tell which server you are authenticating against at login?

We are mostly:
Netware 6.5sp6
Some Netware NW6.5sp7 or NW6.5sp8
Replicas:
R/W - Edirectory version 8.7.3.9 v10553.73
Master - Edirectory version 8.7.3.10 v10554.34
I think our new OES-L server is edirectory version 8.8sp5 maybe newer since the update yesterday.

Thanks for any advice:) ]]> eDir: Netware vtecin http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/393028-connection-server-terminated.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392662-ldap-contextless-anonymous-binds.html Mon, 16 Nov 2009 01:19:54 GMT We have been using ldap contextless login for several years. We are currently setting up Cisco ACS ldap authentication and realized that we were able... We have been using ldap contextless login for several years. We are currently setting up Cisco ACS ldap authentication and realized that we were able to do anonymous bind queries.

Looking at our current Novell ldap setup, I noticed that on the restrictions tab of the the ldap server there is an option for bind restrictions. When set to disallow anonymous simple binds we get an erroneous error that no ldap server was setup.

Our current ldap setup is public has inheritable browse on the cn attribute.

Should non-authenticated users be able to query ldap? ]]> eDir: Netware wex005 http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392662-ldap-contextless-anonymous-binds.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392624-potential-effects-moving-server-tree.html Sat, 14 Nov 2009 22:19:52 GMT I have two sites that are completely linked, organized completely by the city in which they reside. I have multiple Netware servers, and each site... I have two sites that are completely linked, organized completely by the
city in which they reside. I have multiple Netware servers, and each
site has its own backup server. In general, users don't login-to, see,
or interact with the backup servers at all; also, no drive letters are
mapped to the backup servers.

I am trying to re-balance loads at the sites, and want to move some
functions to the backup servers at each site. I also find myself with
~2TB (really!) of unused diskspace at each site, attached to the backup
servers at the sites, and currently totally unused. Since I have no
clue what was intended with that space, one of my thoughts is to use the
devices for file migration/archiving since my main servers are running
out of space. I also want to move the Zenworks imaging to the backup
servers, since they have virtually no load during the daytime. I have
already moved anti-virus management to those servers, but set them to
not scan the actual server itself since they run backups & don't hold
active data files.

Anyway, that's the context, the question may be easy. At one site, I
have all servers showing under the site's OU. At the other site, all
servers -except- the backup server show under their OU; their backup
server shows one level up.

So, something like:

Tree--
|-CityA ----- AServer1
|--- AServer2
|--- ABackup
|-CityB ----- BServer1
|--- BServer2
|--- BBackup


I hope this crude diagram is understandable.

I want to move "BBackup" to be under "CityB". I can't think of any
reason for it to not be there other than someone maybe made a mistake
(there are other issues in the tree), nor any potential negatives to
moving it where it seems to belong. From both sites, I can see all
servers at all sites; therefore, I expect that Backup Exec would be
able to also keep seeing it in the proper location under CityB. And I
can't see much risk, or any effect on users, if the sites are organized
in the same way.

Questions are:

- Can I just fundamentally move BBackup in the tree, or do I need to do
something before/after or in order to have it work out OK?
- Are there any potential negative effects I should anticipate if I do this?

Thanks.
]]> eDir: Netware DE http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392624-potential-effects-moving-server-tree.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392622-migrating-issue.html Sat, 14 Nov 2009 21:22:35 GMT migrating from netware 6.0 sp5 physical to netware 6.5 sp8 VMware using the migration wizard 8.2 during the file copy stage i get an error ... migrating from netware 6.0 sp5 physical to netware 6.5 sp8 VMware

using the migration wizard 8.2

during the file copy stage i get an error

it copies all the data from sys2 to sys2 but nothing to sys3

I have already updated the hosts file to have both servers in them and rebooted both the destination and the source server once.

after the error shows up on my workstation you can go to the destination server console and still see file transfer activity until it completes sys2 then it stops.

thanks

************************************************** ***************
Start File System Copy
Project: 'C:\Documents and Settings\jbouley\My Documents\firedrake\firedrake.mdb'
Date: '11/14/09' Time: '15:16:26'
Operator: '.jbouley.its.fin.452old.peterboro.nhsouth.crhc'
Source Tree: 'CRHCC'
Source Server: '.FIREDRAKE.peterboro.nhsouth.crhc'
Destination Tree: 'JONTEST'
Destination Server: '.FIREDRAKE2.server'
************************************************** ***************

- An error occurred migrating the files. --- Error caused by a NetWare API error --- The connection to the server was lost. (Error code: 0X8819 Function Name: NWNCPExtensionRequest)
- An error occurred migrating the files. --- Error caused by a NetWare API error --- The connection to the server was lost. (Error code: 0X8819 Function Name: NWNCPExtensionRequest)

************************************************** ***************
Process stopped date: 11/14/09 Time: 15:44:12
Elapsed time: Days: 0 Hours: 00 Minutes: 27 Seconds: 46
************************************************** *************** ]]> eDir: Netware jbouley http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392622-migrating-issue.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392611-simple-question-about-deleting-servers.html Sat, 14 Nov 2009 11:19:03 GMT I have a tree that covers two sites and about 9 current servers, but there are a few servers at each site which no longer exist but still show in... I have a tree that covers two sites and about 9 current servers, but
there are a few servers at each site which no longer exist but still
show in the tree.

Is getting rid of those references as simple as deleting the server
objects, or is there something more I should be doing, or do it via some
other means?

Thanks.
]]> eDir: Netware DE http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392611-simple-question-about-deleting-servers.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392479-admin-properties-not-seen-c1-imang.html Thu, 12 Nov 2009 21:01:04 GMT Running C1 or iMang from any account off of any server we are not able to see the properties...The PC just hangs. But we have no issues with... Running C1 or iMang from any account off of any server we are not able to see the properties...The PC just hangs. But we have no issues with NWADMIN.

We did repairs to eDir...

Any ideas? Is there corruption in this ID? If so, is there a fix for the ID?

Thanks/
Pete ]]> eDir: Netware Roadisred http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392479-admin-properties-not-seen-c1-imang.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392459-duplicate-guid-weirdness.html Thu, 12 Nov 2009 19:31:54 GMT Greetings all. A K-12 customer with a tree going back to the 4.X days now has 160 duplicate GUIDs in their environment. The tree is currently all NW... Greetings all. A K-12 customer with a tree going back to the 4.X days now has 160 duplicate GUIDs in their environment. The tree is currently all NW 6.5 SP7.
We first noticed simple mappings to a server's SYS volume coming back with a user's name or ACLs applied to one user showing up as applied to a different user.
I've no idea what caused this or how long its been present but now need to clean it up. Some of the cases where two users conflict are straightforward - delete the one and receate them.
However, in other cases, two OUs are duplicates or a server volume and an OU conflcit. Any guidance for these situations?
I really don't want to be blowing away OUs or volume objects if I can help it and I didn't see any way to manually change a GUID and try to replicate it out everywhere.

Any advice would be appreciated.

Thanks. ]]> eDir: Netware gchamby http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/392459-duplicate-guid-weirdness.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/391834-edir-885-a.html Fri, 06 Nov 2009 22:33:16 GMT Every time I try upgrading edir on a nw65sp8 server running edir
8.7.3.10 to 8.8.5, my pki & ssl stuff gets borked?

The upgrade *seems* to finish normally, but after the reboot, I have no
pki modules running and I am unable to get into NoRM or iManager.

Suggestions?

--
Stevo
]]> eDir: Netware Stevo http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/391834-edir-885-a.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/391819-network-address-attribute.html Fri, 06 Nov 2009 19:45:03 GMT Hi all,

I am not seeing the Network Address attribute for some users?
NW6.5sp8

I can't see all the logged in users in Holger Dopp's "Zen workstation browser", and the Network Address attribute in CON1 is empty for those "missing" users.
I can't seem to find a common thread between the users. It's across the tree, users in different contexts, different servers etc...

I have tried updating the "login update enabled" selection in iMonitor on all servers.
(toggled setting from on to off then back to on)
I have run several DS repairs, and everything looks OK (besides the usual Zen clean up stuff....).

If the users Network Address has a value in it, it is almost always correct, I have seen some of them that have their home servers IP in the attribute??

Any silver bullet to make these propagate correctly??
This all started after I ran some dsrepair and health checks prior to installing BM3.9.







]]> eDir: Netware Scott Owen http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/391819-network-address-attribute.html http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/391780-high-edir-cpu-utilization.html Fri, 06 Nov 2009 15:38:09 GMT I'm having trouble with a school network that is recently having trouble with high cpu utilization on servers. EDirectory has only the root partition that is replicated across three servers. One master and two read/writes.
- The servers that hold a replica have cpu utilizations around 70-100%
- All servers are running ds.nlm version 8.7.3.10 - upgraded today
- I have run dsrepair on all of the servers.
- DStrace screens come back with all processed = yes.
- All servers see each other without issue.
- Time is in sync

- remote manager of the users most critical server says that ds.nlm is taking 79% of execution time.
Once dsrepair is run then utilization is down for about 5 minutes then it starts to creep back up.
Any help would be appreciated. ]]> eDir: Netware smo989 http://forums.novell.com/novell-product-support-forums/edirectory/edir-netware/391780-high-edir-cpu-utilization.html