From jetadmin at gmail.com  Thu May  1 12:48:09 2008
From: jetadmin at gmail.com (Eric Rothweiler)
Date: Thu, 1 May 2008 07:48:09 -0400
Subject: Disk space. Linux NCP volumes
In-Reply-To: <4815DBA6020000850005DCA8@FS-LIN-OES>
References: <4815DBA6020000850005DCA8@FS-LIN-OES>
Message-ID: <1d6cdac70805010448u519ac2e5o2fe7bd494a23379e@mail.gmail.com>

Look at it this way - on NetWare multiple volumes can be placed inside the
same NSS pool.  When you do a properties of either volume you will see the
info on spaced used by that volume but total space free for both (as a
default).  Same thing here, the mount point is analgous to a pool and the
NCP volumes are, well, volumes.  The difference is that Reiser and EXT3 were
not designed with anything special for thee type of uses so there is no way
to do further configuration to prevent this behaviour.
Even if it is annoying it's not wrong, it's showing you the truth of what is
available in free space.

Eric


On 4/28/08, joea at j4computers.com <joea at j4computers.com> wrote:
>
> IMHO, it's "wrong" to see the same space, since they are "supposed to be"
> different volumes.
>
> I typo'd in my orignal post, while they are under the same mount point,
> they are different branches in the directory structure.
>
> joe a.
>
> >>> "Eric Rothweiler" <jetadmin at gmail.com> 04/28/08 2:05 PM >>>
> If the Linux mount point that houses both NCP volumes is one and the same
> then yes, you are seeing what you should.  Try using 'df -h' instead.  i
> also highly reccomend creating a new mount point for any NetWare volumes.
> In practice I will make /usr/novell/VOL1 and /usr/novell/VOL2
> etc.  Lessens
> room for confusion and you still have LVM underneath to adjust space as
> needed (NSS volumes are another story)
>
>
> Eric
>
> On 4/26/08, joea at j4computers.com <joea at j4computers.com> wrote:
> >
> > Was trying to estimate disk space in use on a Linux system, prior to
> > migrating the data to Netware.   Yes, I wrote that correctly.
> >
> > Anyway, I have those volumes published via ncpserver (ncpcon) to see
> them
> > on Windows. They happen to be a GroupWise domain and PO.
> >
> > When NW stats (NW client, via windows) told me the space in use was
> > 7,805,748 KB, I was astonished.  "Wow", I thinked, "That puppy sure has
> > growed".
> >
> > I then decided to look deeper.  du -ah "path" tells me the space used is
> > much less. 733 KB for the domain and 657 MB for the PO.  Much more in
> line
> > with what I expected.
> >
> > The volumes are published via ncpcon with "create volume VOL1
> > /path/to/domain" and "create volume VOL2 /path/to/domain"
> >
> > >From Windows, looking at NW stats, both volume objects show exactly the
> > same space in use.  Interestingly, the total disk space reported by du
> -ah
> > (from root of mount) is 8.5 G, reasonably close to 7.8 GB, if my number
> > juggling powers are astute.
> >
> > So, is this a known issue?  Did I do something wrong?
> >
> > joe a.
> >
> > _______________________________________________
> > Novell mailing list
> > Novell at netlab1.oucs.ox.ac.uk
> > http://netlab1.usu.edu/mailman/listinfo/novell
> >
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>

From joea at j4computers.com  Thu May  1 16:40:17 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Thu, 1 May 2008 11:40:17 -0400
Subject: Disk space. Linux NCP volumes
Message-ID: <9291d512e20d4abeb301bad3a6565a01.joea@j4computers.com>


I do not have access to the system, at this time, but reading my original post, 
wherein I presume I wrote correctly, it is not the space available, but the
space in use that was the issue.

joe a.


------- Original Message -------
>From    : Eric Rothweiler[mailto:jetadmin at gmail.com]
Sent    : 5/1/2008 7:48:09 AM
To      : novell at netlab1.oucs.ox.ac.uk
Cc      : 
Subject : RE: Re: Disk space. Linux NCP volumes

 Look at it this way - on NetWare multiple volumes can be placed inside the
same NSS pool.  When you do a properties of either volume you will see the
info on spaced used by that volume but total space free for both (as a
default).  Same thing here, the mount point is analgous to a pool and the
NCP volumes are, well, volumes.  The difference is that Reiser and EXT3 were
not designed with anything special for thee type of uses so there is no way
to do further configuration to prevent this behaviour.
Even if it is annoying it's not wrong, it's showing you the truth of what is
available in free space.

Eric


On 4/28/08, joea at j4computers.com <joea at j4computers.com> wrote:
>
> IMHO, it's "wrong" to see the same space, since they are "supposed to be"
> different volumes.
>
> I typo'd in my orignal post, while they are under the same mount point,
> they are different branches in the directory structure.
>
> joe a.
>
> >>> "Eric Rothweiler" <jetadmin at gmail.com> 04/28/08 2:05 PM >>>
> If the Linux mount point that houses both NCP volumes is one and the same
> then yes, you are seeing what you should.  Try using 'df -h' instead.  i
> also highly reccomend creating a new mount point for any NetWare volumes.
> In practice I will make /usr/novell/VOL1 and /usr/novell/VOL2
> etc.  Lessens
> room for confusion and you still have LVM underneath to adjust space as
> needed (NSS volumes are another story)
>
>
> Eric
>
> On 4/26/08, joea at j4computers.com <joea at j4computers.com> wrote:
> >
> > Was trying to estimate disk space in use on a Linux system, prior to
> > migrating the data to Netware.   Yes, I wrote that correctly.
> >
> > Anyway, I have those volumes published via ncpserver (ncpcon) to see
> them
> > on Windows. They happen to be a GroupWise domain and PO.
> >
> > When NW stats (NW client, via windows) told me the space in use was
> > 7,805,748 KB, I was astonished.  "Wow", I thinked, "That puppy sure has
> > growed".
> >
> > I then decided to look deeper.  du -ah "path" tells me the space used is
> > much less. 733 KB for the domain and 657 MB for the PO.  Much more in
> line
> > with what I expected.
> >
> > The volumes are published via ncpcon with "create volume VOL1
> > /path/to/domain" and "create volume VOL2 /path/to/domain"
> >
> > >From Windows, looking at NW stats, both volume objects show exactly the
> > same space in use.  Interestingly, the total disk space reported by du
> -ah
> > (from root of mount) is 8.5 G, reasonably close to 7.8 GB, if my number
> > juggling powers are astute.
> >
> > So, is this a known issue?  Did I do something wrong?
> >
> > joe a.
> >
> > _______________________________________________
> > Novell mailing list
> > Novell at netlab1.oucs.ox.ac.uk
> >  http://netlab1.usu.edu/mailman/listinfo/novell 
> >
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell 
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell 
>
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
 http://netlab1.usu.edu/mailman/listinfo/novell 


From petervl at gmail.com  Sat May  3 14:37:55 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Sat, 3 May 2008 08:37:55 -0500
Subject: 2 SANs, 2 LUNS, mirrored! YA!
Message-ID: <68b791330805030637j342a528dgf50961f79ff61954@mail.gmail.com>

So, thanks largely to the assistance and reassurance of folks on these
lists, I have now successfully migrated data from an old SAN to a new
one. The mirror process has worked great -- spectacular, actually
(thus far, 2 partitions left to go).

A big round of applause to you all ....

Next question (you KNEW it was coming!): Is there a better or worse
way to break the mirror?

Would it be better to disconnect the fiber to the "old" SAN and thus
effectively physically break the mirror?

Or, would it be best to brave the possibility of deleting the wrong
segment from the raid device in NSSMU?

If I do go the NSSMU route, I just want to check my logic: I assume
that since I need to keep the "raid device" in tact, I simply go to
the properties of the raid device (hit enter on it) and then highlight
and "del" the segment that is on the old SAN to remove it from the
raid device. Then, for sure, I would want to disconnect fiber, just to
cleanly get rid of it.

So far this process has been seamless to the cluster, that just rocks.
And, it blows me away a little -- very very nice. I'm still a bit
mentally frizzed that simply mirroring the partitions also manages to
establish/create the pools -- but I guess that is the magic juju of
clustering, eh?

Peter





-- 
"What are you doing?"
"Spinning counter-clockwise
Each turn robs the planet of angular momentum
Slowing its spin the tiniest bit
Lengthening the night,
pushing back the dawn
Giving me a little
more time here

with you"

http://xkcd.com/162/

www.the-brights.net

From BChan at Shawcor.com  Sat May  3 14:39:42 2008
From: BChan at Shawcor.com (Brian Chan)
Date: Sat, 3 May 2008 09:39:42 -0400
Subject: Chan, Brian is out of the office.
Message-ID: <OFB2092F5E.B42176C9-ON8525743E.004B0C0F-8525743E.004B0C0F@shaw_ind.com>


I will be out of the office starting Mon 04/28/2008 and will not return
until Mon 05/05/2008.

I will respond to your message when I return.


From joea at j4computers.com  Sun May  4 14:50:16 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Sun, 04 May 2008 09:50:16 -0400
Subject: BE hangs on Server Specific Info, Netware
Message-ID: <481D86D8.917D.0085.0@j4computers.com>

A Backup Exec job, that has run "for a long time" has recently, and consistently, hung on backing up Server Specific Info.  While it seems to almost complete that segment, it never logs the totals for that job. 

When this happens "no on can log in" and "a power off is required" to get things going again.  I have only assured myself that logins to not happen when in that condition, coming in remotely.

This is BE 9.2, NW 6.5 (sp5) Dell 2600, RAID 5. 2GB RAM. LTO tape drive.

I have created other jobs, as a test, that do not include SSI and they run without issue.

Ideas? (possible h/w, I know, but will have to convice Dell, very likely)


From Chris_Gazunis at mcpsmd.org  Sun May  4 15:15:06 2008
From: Chris_Gazunis at mcpsmd.org (Gazunis, Chris)
Date: Sun, 4 May 2008 10:15:06 -0400
Subject: BE hangs on Server Specific Info, Netware
In-Reply-To: <481D86D8.917D.0085.0@j4computers.com>
References: <481D86D8.917D.0085.0@j4computers.com>
Message-ID: <095D64671BACAE48BD84B07CA8B8DA7D03C1C49D@EVMAIL04.mcpsmd.org>

Joe, 
I ran across this thread a while ago when I was having a problem with
server spec info.
http://groups.google.com/group/novell.support.netware.6x.abends-hangs/br
owse_thread/thread/8f0763521e1345d3

Basically it's a short thread w/ the resolution backreving to
TSA5UP18.EXE.

Chris
 

-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of
joea at j4computers.com
Sent: Sunday, May 04, 2008 9:50 AM
To: novell at netlab1.oucs.ox.ac.uk
Subject: BE hangs on Server Specific Info, Netware

A Backup Exec job, that has run "for a long time" has recently, and
consistently, hung on backing up Server Specific Info.  While it seems
to almost complete that segment, it never logs the totals for that job. 

When this happens "no on can log in" and "a power off is required" to
get things going again.  I have only assured myself that logins to not
happen when in that condition, coming in remotely.

This is BE 9.2, NW 6.5 (sp5) Dell 2600, RAID 5. 2GB RAM. LTO tape drive.

I have created other jobs, as a test, that do not include SSI and they
run without issue.

Ideas? (possible h/w, I know, but will have to convice Dell, very
likely)

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell

From awleask at gmail.com  Sun May  4 22:13:32 2008
From: awleask at gmail.com (Alister Leask)
Date: Mon, 5 May 2008 09:13:32 +1200
Subject: 2 SANs, 2 LUNS, mirrored! YA!
In-Reply-To: <68b791330805030637j342a528dgf50961f79ff61954@mail.gmail.com>
References: <68b791330805030637j342a528dgf50961f79ff61954@mail.gmail.com>
Message-ID: <397cc55b0805041413q4239ff2fm79d9fed2d007a11f@mail.gmail.com>

When I've done this in the past I have always removed the storage
before I deleted the old partition from the mirror group - that way I
was always sure that I was deleting the correct partition.

Pete, maybe I missed it previously but I'm not sure that you mentioned
clusters. You need to either mirror the SBD partition (can't be done
from NSSMU, IIRC) or shutdown the cluster and recreate the SBD on the
new storage. I've used the technique when recreating the cluster
partition of only presenting the LUN that will hold the SBD to the
server where you are recreating the SBD, so that there is no confusion
about where the SBD ends up.

On Sun, May 4, 2008 at 1:37 AM, Peter Van Lone <petervl at gmail.com> wrote:
> So, thanks largely to the assistance and reassurance of folks on these
>  lists, I have now successfully migrated data from an old SAN to a new
>  one. The mirror process has worked great -- spectacular, actually
>  (thus far, 2 partitions left to go).
>
>  A big round of applause to you all ....
>
>  Next question (you KNEW it was coming!): Is there a better or worse
>  way to break the mirror?
>
>  Would it be better to disconnect the fiber to the "old" SAN and thus
>  effectively physically break the mirror?
>
>  Or, would it be best to brave the possibility of deleting the wrong
>  segment from the raid device in NSSMU?
>
>  If I do go the NSSMU route, I just want to check my logic: I assume
>  that since I need to keep the "raid device" in tact, I simply go to
>  the properties of the raid device (hit enter on it) and then highlight
>  and "del" the segment that is on the old SAN to remove it from the
>  raid device. Then, for sure, I would want to disconnect fiber, just to
>  cleanly get rid of it.
>
>  So far this process has been seamless to the cluster, that just rocks.
>  And, it blows me away a little -- very very nice. I'm still a bit
>  mentally frizzed that simply mirroring the partitions also manages to
>  establish/create the pools -- but I guess that is the magic juju of
>  clustering, eh?
>
>  Peter
>
>
>
>
>
>  --
>  "What are you doing?"
>  "Spinning counter-clockwise
>  Each turn robs the planet of angular momentum
>  Slowing its spin the tiniest bit
>  Lengthening the night,
>  pushing back the dawn
>  Giving me a little
>  more time here
>
>  with you"
>
>  http://xkcd.com/162/
>
>  www.the-brights.net
>  _______________________________________________
>  Novell mailing list
>  Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
Alister Leask

From petervl at gmail.com  Mon May  5 01:00:06 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Sun, 4 May 2008 19:00:06 -0500
Subject: 2 SANs, 2 LUNS, mirrored! YA!
In-Reply-To: <397cc55b0805041413q4239ff2fm79d9fed2d007a11f@mail.gmail.com>
References: <68b791330805030637j342a528dgf50961f79ff61954@mail.gmail.com>
	<397cc55b0805041413q4239ff2fm79d9fed2d007a11f@mail.gmail.com>
Message-ID: <68b791330805041700t67b0d72dq2a69506134b9ed5@mail.gmail.com>

Allister ...

I went ahead and braved it -- the interface is actually pretty clear
in NSSMU and the only way I could see messing it up (now that I've
done it 8 times) is to slip and move the selection accidentally, or
just not paying attention.

As for the cluster -- yes, it was clustered and my SBD was one
partition amongst 3 on one LUN -- I just mirrored/broke the mirror
like every other partition. The only consequence was that one of the
three cluster servers (the one that is a VM) had a fatal cluster error
--- but it was only because I had neglected to re-create the RDMs
after migrating the data. So, when I tried to migrate something to
this server as a test, it freaked out.

Basically everything  worked flawlessly -- I must say it was the
fastest/cleanest data migration I have seen. Lovely.

Peter



On Sun, May 4, 2008 at 4:13 PM, Alister Leask <awleask at gmail.com> wrote:
> When I've done this in the past I have always removed the storage
>  before I deleted the old partition from the mirror group - that way I
>  was always sure that I was deleting the correct partition.
>
>  Pete, maybe I missed it previously but I'm not sure that you mentioned
>  clusters. You need to either mirror the SBD partition (can't be done
>  from NSSMU, IIRC) or shutdown the cluster and recreate the SBD on the
>  new storage. I've used the technique when recreating the cluster
>  partition of only presenting the LUN that will hold the SBD to the
>  server where you are recreating the SBD, so that there is no confusion
>  about where the SBD ends up.
>
>
>
>  On Sun, May 4, 2008 at 1:37 AM, Peter Van Lone <petervl at gmail.com> wrote:
>  > So, thanks largely to the assistance and reassurance of folks on these
>  >  lists, I have now successfully migrated data from an old SAN to a new
>  >  one. The mirror process has worked great -- spectacular, actually
>  >  (thus far, 2 partitions left to go).
>  >
>  >  A big round of applause to you all ....
>  >
>  >  Next question (you KNEW it was coming!): Is there a better or worse
>  >  way to break the mirror?
>  >
>  >  Would it be better to disconnect the fiber to the "old" SAN and thus
>  >  effectively physically break the mirror?
>  >
>  >  Or, would it be best to brave the possibility of deleting the wrong
>  >  segment from the raid device in NSSMU?
>  >
>  >  If I do go the NSSMU route, I just want to check my logic: I assume
>  >  that since I need to keep the "raid device" in tact, I simply go to
>  >  the properties of the raid device (hit enter on it) and then highlight
>  >  and "del" the segment that is on the old SAN to remove it from the
>  >  raid device. Then, for sure, I would want to disconnect fiber, just to
>  >  cleanly get rid of it.
>  >
>  >  So far this process has been seamless to the cluster, that just rocks.
>  >  And, it blows me away a little -- very very nice. I'm still a bit
>  >  mentally frizzed that simply mirroring the partitions also manages to
>  >  establish/create the pools -- but I guess that is the magic juju of
>  >  clustering, eh?
>  >
>  >  Peter
>  >
>  >
>  >
>  >
>  >
>  >  --
>  >  "What are you doing?"
>  >  "Spinning counter-clockwise
>  >  Each turn robs the planet of angular momentum
>  >  Slowing its spin the tiniest bit
>  >  Lengthening the night,
>  >  pushing back the dawn
>  >  Giving me a little
>  >  more time here
>  >
>  >  with you"
>  >
>  >  http://xkcd.com/162/
>  >
>  >  www.the-brights.net
>  >  _______________________________________________
>  >  Novell mailing list
>  >  Novell at netlab1.oucs.ox.ac.uk
>  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >
>
>
>
>  --
>  Alister Leask
>  _______________________________________________
>  Novell mailing list
>  Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
"Do not be bound to any doctrine, theory or ideology, even Buddhist
ones. All systems of thought are guiding means, not absolute truth."
Thich Nhat Hanh, Vietnamese monk.
		


http://xkcd.com/167/

www.the-brights.net

From awleask at gmail.com  Mon May  5 02:22:12 2008
From: awleask at gmail.com (Alister Leask)
Date: Mon, 5 May 2008 13:22:12 +1200
Subject: 2 SANs, 2 LUNS, mirrored! YA!
In-Reply-To: <68b791330805041700t67b0d72dq2a69506134b9ed5@mail.gmail.com>
References: <68b791330805030637j342a528dgf50961f79ff61954@mail.gmail.com>
	<397cc55b0805041413q4239ff2fm79d9fed2d007a11f@mail.gmail.com>
	<68b791330805041700t67b0d72dq2a69506134b9ed5@mail.gmail.com>
Message-ID: <397cc55b0805041822g71f24d2dw87a750201136d809@mail.gmail.com>

Nice one Peter!

It does work well - but, when you have been expanding volumes for a
few years - trust me - there can be a lot of partitions to mirrors!

On Mon, May 5, 2008 at 12:00 PM, Peter Van Lone <petervl at gmail.com> wrote:
> Allister ...
>
>  I went ahead and braved it -- the interface is actually pretty clear
>  in NSSMU and the only way I could see messing it up (now that I've
>  done it 8 times) is to slip and move the selection accidentally, or
>  just not paying attention.
>
>  As for the cluster -- yes, it was clustered and my SBD was one
>  partition amongst 3 on one LUN -- I just mirrored/broke the mirror
>  like every other partition. The only consequence was that one of the
>  three cluster servers (the one that is a VM) had a fatal cluster error
>  --- but it was only because I had neglected to re-create the RDMs
>  after migrating the data. So, when I tried to migrate something to
>  this server as a test, it freaked out.
>
>  Basically everything  worked flawlessly -- I must say it was the
>  fastest/cleanest data migration I have seen. Lovely.
>
>  Peter
>
>
>
>
>
>  On Sun, May 4, 2008 at 4:13 PM, Alister Leask <awleask at gmail.com> wrote:
>  > When I've done this in the past I have always removed the storage
>  >  before I deleted the old partition from the mirror group - that way I
>  >  was always sure that I was deleting the correct partition.
>  >
>  >  Pete, maybe I missed it previously but I'm not sure that you mentioned
>  >  clusters. You need to either mirror the SBD partition (can't be done
>  >  from NSSMU, IIRC) or shutdown the cluster and recreate the SBD on the
>  >  new storage. I've used the technique when recreating the cluster
>  >  partition of only presenting the LUN that will hold the SBD to the
>  >  server where you are recreating the SBD, so that there is no confusion
>  >  about where the SBD ends up.
>  >
>  >
>  >
>  >  On Sun, May 4, 2008 at 1:37 AM, Peter Van Lone <petervl at gmail.com> wrote:
>  >  > So, thanks largely to the assistance and reassurance of folks on these
>  >  >  lists, I have now successfully migrated data from an old SAN to a new
>  >  >  one. The mirror process has worked great -- spectacular, actually
>  >  >  (thus far, 2 partitions left to go).
>  >  >
>  >  >  A big round of applause to you all ....
>  >  >
>  >  >  Next question (you KNEW it was coming!): Is there a better or worse
>  >  >  way to break the mirror?
>  >  >
>  >  >  Would it be better to disconnect the fiber to the "old" SAN and thus
>  >  >  effectively physically break the mirror?
>  >  >
>  >  >  Or, would it be best to brave the possibility of deleting the wrong
>  >  >  segment from the raid device in NSSMU?
>  >  >
>  >  >  If I do go the NSSMU route, I just want to check my logic: I assume
>  >  >  that since I need to keep the "raid device" in tact, I simply go to
>  >  >  the properties of the raid device (hit enter on it) and then highlight
>  >  >  and "del" the segment that is on the old SAN to remove it from the
>  >  >  raid device. Then, for sure, I would want to disconnect fiber, just to
>  >  >  cleanly get rid of it.
>  >  >
>  >  >  So far this process has been seamless to the cluster, that just rocks.
>  >  >  And, it blows me away a little -- very very nice. I'm still a bit
>  >  >  mentally frizzed that simply mirroring the partitions also manages to
>  >  >  establish/create the pools -- but I guess that is the magic juju of
>  >  >  clustering, eh?
>  >  >
>  >  >  Peter
>  >  >
>  >  >
>  >  >
>  >  >
>  >  >
>  >  >  --
>  >  >  "What are you doing?"
>  >  >  "Spinning counter-clockwise
>  >  >  Each turn robs the planet of angular momentum
>  >  >  Slowing its spin the tiniest bit
>  >  >  Lengthening the night,
>  >  >  pushing back the dawn
>  >  >  Giving me a little
>  >  >  more time here
>  >  >
>  >  >  with you"
>  >  >
>  >  >  http://xkcd.com/162/
>  >  >
>  >  >  www.the-brights.net
>  >  >  _______________________________________________
>  >  >  Novell mailing list
>  >  >  Novell at netlab1.oucs.ox.ac.uk
>  >  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >  >
>  >
>  >
>  >
>  >  --
>  >  Alister Leask
>  >  _______________________________________________
>  >  Novell mailing list
>  >  Novell at netlab1.oucs.ox.ac.uk
>  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >
>
>
>
>  --
>  "Do not be bound to any doctrine, theory or ideology, even Buddhist
>  ones. All systems of thought are guiding means, not absolute truth."
>  Thich Nhat Hanh, Vietnamese monk.
>
>
>
>  http://xkcd.com/167/
>
>
>
>  www.the-brights.net
>  _______________________________________________
>  Novell mailing list
>  Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
Alister Leask

From petervl at gmail.com  Mon May  5 03:03:01 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Sun, 4 May 2008 21:03:01 -0500
Subject: 2 SANs, 2 LUNS, mirrored! YA!
In-Reply-To: <397cc55b0805041822g71f24d2dw87a750201136d809@mail.gmail.com>
References: <68b791330805030637j342a528dgf50961f79ff61954@mail.gmail.com>
	<397cc55b0805041413q4239ff2fm79d9fed2d007a11f@mail.gmail.com>
	<68b791330805041700t67b0d72dq2a69506134b9ed5@mail.gmail.com>
	<397cc55b0805041822g71f24d2dw87a750201136d809@mail.gmail.com>
Message-ID: <68b791330805041903w6530dcd9k91dcb6eef0f1b2e6@mail.gmail.com>

hehe -- you bet. I can imagine it getting ugly quickly. It's too bad
that we cannot mirror pools -- now THAT would make things easier ...

P

On Sun, May 4, 2008 at 8:22 PM, Alister Leask <awleask at gmail.com> wrote:
> Nice one Peter!
>
>  It does work well - but, when you have been expanding volumes for a
>  few years - trust me - there can be a lot of partitions to mirrors!
>
>
>
>  On Mon, May 5, 2008 at 12:00 PM, Peter Van Lone <petervl at gmail.com> wrote:
>  > Allister ...
>  >
>  >  I went ahead and braved it -- the interface is actually pretty clear
>  >  in NSSMU and the only way I could see messing it up (now that I've
>  >  done it 8 times) is to slip and move the selection accidentally, or
>  >  just not paying attention.
>  >
>  >  As for the cluster -- yes, it was clustered and my SBD was one
>  >  partition amongst 3 on one LUN -- I just mirrored/broke the mirror
>  >  like every other partition. The only consequence was that one of the
>  >  three cluster servers (the one that is a VM) had a fatal cluster error
>  >  --- but it was only because I had neglected to re-create the RDMs
>  >  after migrating the data. So, when I tried to migrate something to
>  >  this server as a test, it freaked out.
>  >
>  >  Basically everything  worked flawlessly -- I must say it was the
>  >  fastest/cleanest data migration I have seen. Lovely.
>  >
>  >  Peter
>  >
>  >
>  >
>  >
>  >
>  >  On Sun, May 4, 2008 at 4:13 PM, Alister Leask <awleask at gmail.com> wrote:
>  >  > When I've done this in the past I have always removed the storage
>  >  >  before I deleted the old partition from the mirror group - that way I
>  >  >  was always sure that I was deleting the correct partition.
>  >  >
>  >  >  Pete, maybe I missed it previously but I'm not sure that you mentioned
>  >  >  clusters. You need to either mirror the SBD partition (can't be done
>  >  >  from NSSMU, IIRC) or shutdown the cluster and recreate the SBD on the
>  >  >  new storage. I've used the technique when recreating the cluster
>  >  >  partition of only presenting the LUN that will hold the SBD to the
>  >  >  server where you are recreating the SBD, so that there is no confusion
>  >  >  about where the SBD ends up.
>  >  >
>  >  >
>  >  >
>  >  >  On Sun, May 4, 2008 at 1:37 AM, Peter Van Lone <petervl at gmail.com> wrote:
>  >  >  > So, thanks largely to the assistance and reassurance of folks on these
>  >  >  >  lists, I have now successfully migrated data from an old SAN to a new
>  >  >  >  one. The mirror process has worked great -- spectacular, actually
>  >  >  >  (thus far, 2 partitions left to go).
>  >  >  >
>  >  >  >  A big round of applause to you all ....
>  >  >  >
>  >  >  >  Next question (you KNEW it was coming!): Is there a better or worse
>  >  >  >  way to break the mirror?
>  >  >  >
>  >  >  >  Would it be better to disconnect the fiber to the "old" SAN and thus
>  >  >  >  effectively physically break the mirror?
>  >  >  >
>  >  >  >  Or, would it be best to brave the possibility of deleting the wrong
>  >  >  >  segment from the raid device in NSSMU?
>  >  >  >
>  >  >  >  If I do go the NSSMU route, I just want to check my logic: I assume
>  >  >  >  that since I need to keep the "raid device" in tact, I simply go to
>  >  >  >  the properties of the raid device (hit enter on it) and then highlight
>  >  >  >  and "del" the segment that is on the old SAN to remove it from the
>  >  >  >  raid device. Then, for sure, I would want to disconnect fiber, just to
>  >  >  >  cleanly get rid of it.
>  >  >  >
>  >  >  >  So far this process has been seamless to the cluster, that just rocks.
>  >  >  >  And, it blows me away a little -- very very nice. I'm still a bit
>  >  >  >  mentally frizzed that simply mirroring the partitions also manages to
>  >  >  >  establish/create the pools -- but I guess that is the magic juju of
>  >  >  >  clustering, eh?
>  >  >  >
>  >  >  >  Peter
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >  --
>  >  >  >  "What are you doing?"
>  >  >  >  "Spinning counter-clockwise
>  >  >  >  Each turn robs the planet of angular momentum
>  >  >  >  Slowing its spin the tiniest bit
>  >  >  >  Lengthening the night,
>  >  >  >  pushing back the dawn
>  >  >  >  Giving me a little
>  >  >  >  more time here
>  >  >  >
>  >  >  >  with you"
>  >  >  >
>  >  >  >  http://xkcd.com/162/
>  >  >  >
>  >  >  >  www.the-brights.net
>  >  >  >  _______________________________________________
>  >  >  >  Novell mailing list
>  >  >  >  Novell at netlab1.oucs.ox.ac.uk
>  >  >  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >  >  >
>  >  >
>  >  >
>  >  >
>  >  >  --
>  >  >  Alister Leask
>  >  >  _______________________________________________
>  >  >  Novell mailing list
>  >  >  Novell at netlab1.oucs.ox.ac.uk
>  >  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >  >
>  >
>  >
>  >
>  >  --
>  >  "Do not be bound to any doctrine, theory or ideology, even Buddhist
>  >  ones. All systems of thought are guiding means, not absolute truth."
>  >  Thich Nhat Hanh, Vietnamese monk.
>  >
>  >
>  >
>  >  http://xkcd.com/167/
>  >
>  >
>  >
>  >  www.the-brights.net
>  >  _______________________________________________
>  >  Novell mailing list
>  >  Novell at netlab1.oucs.ox.ac.uk
>  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >
>
>
>
>  --
>  Alister Leask
>  _______________________________________________
>  Novell mailing list
>  Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
"Do not be bound to any doctrine, theory or ideology, even Buddhist
ones. All systems of thought are guiding means, not absolute truth."
Thich Nhat Hanh, Vietnamese monk.
		


http://xkcd.com/167/

www.the-brights.net

From awleask at gmail.com  Mon May  5 04:14:18 2008
From: awleask at gmail.com (Alister Leask)
Date: Mon, 5 May 2008 15:14:18 +1200
Subject: 2 SANs, 2 LUNS, mirrored! YA!
In-Reply-To: <68b791330805041903w6530dcd9k91dcb6eef0f1b2e6@mail.gmail.com>
References: <68b791330805030637j342a528dgf50961f79ff61954@mail.gmail.com>
	<397cc55b0805041413q4239ff2fm79d9fed2d007a11f@mail.gmail.com>
	<68b791330805041700t67b0d72dq2a69506134b9ed5@mail.gmail.com>
	<397cc55b0805041822g71f24d2dw87a750201136d809@mail.gmail.com>
	<68b791330805041903w6530dcd9k91dcb6eef0f1b2e6@mail.gmail.com>
Message-ID: <397cc55b0805042014u110312a6ide9b3687691029ae@mail.gmail.com>

We took another route and bought IBM SVC's... They move stuff around
all over the place without the OS even noticing. Veeeery nice!

On Mon, May 5, 2008 at 2:03 PM, Peter Van Lone <petervl at gmail.com> wrote:
> hehe -- you bet. I can imagine it getting ugly quickly. It's too bad
>  that we cannot mirror pools -- now THAT would make things easier ...
>
>  P
>
>
>
>  On Sun, May 4, 2008 at 8:22 PM, Alister Leask <awleask at gmail.com> wrote:
>  > Nice one Peter!
>  >
>  >  It does work well - but, when you have been expanding volumes for a
>  >  few years - trust me - there can be a lot of partitions to mirrors!
>  >
>  >
>  >
>  >  On Mon, May 5, 2008 at 12:00 PM, Peter Van Lone <petervl at gmail.com> wrote:
>  >  > Allister ...
>  >  >
>  >  >  I went ahead and braved it -- the interface is actually pretty clear
>  >  >  in NSSMU and the only way I could see messing it up (now that I've
>  >  >  done it 8 times) is to slip and move the selection accidentally, or
>  >  >  just not paying attention.
>  >  >
>  >  >  As for the cluster -- yes, it was clustered and my SBD was one
>  >  >  partition amongst 3 on one LUN -- I just mirrored/broke the mirror
>  >  >  like every other partition. The only consequence was that one of the
>  >  >  three cluster servers (the one that is a VM) had a fatal cluster error
>  >  >  --- but it was only because I had neglected to re-create the RDMs
>  >  >  after migrating the data. So, when I tried to migrate something to
>  >  >  this server as a test, it freaked out.
>  >  >
>  >  >  Basically everything  worked flawlessly -- I must say it was the
>  >  >  fastest/cleanest data migration I have seen. Lovely.
>  >  >
>  >  >  Peter
>  >  >
>  >  >
>  >  >
>  >  >
>  >  >
>  >  >  On Sun, May 4, 2008 at 4:13 PM, Alister Leask <awleask at gmail.com> wrote:
>  >  >  > When I've done this in the past I have always removed the storage
>  >  >  >  before I deleted the old partition from the mirror group - that way I
>  >  >  >  was always sure that I was deleting the correct partition.
>  >  >  >
>  >  >  >  Pete, maybe I missed it previously but I'm not sure that you mentioned
>  >  >  >  clusters. You need to either mirror the SBD partition (can't be done
>  >  >  >  from NSSMU, IIRC) or shutdown the cluster and recreate the SBD on the
>  >  >  >  new storage. I've used the technique when recreating the cluster
>  >  >  >  partition of only presenting the LUN that will hold the SBD to the
>  >  >  >  server where you are recreating the SBD, so that there is no confusion
>  >  >  >  about where the SBD ends up.
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >  On Sun, May 4, 2008 at 1:37 AM, Peter Van Lone <petervl at gmail.com> wrote:
>  >  >  >  > So, thanks largely to the assistance and reassurance of folks on these
>  >  >  >  >  lists, I have now successfully migrated data from an old SAN to a new
>  >  >  >  >  one. The mirror process has worked great -- spectacular, actually
>  >  >  >  >  (thus far, 2 partitions left to go).
>  >  >  >  >
>  >  >  >  >  A big round of applause to you all ....
>  >  >  >  >
>  >  >  >  >  Next question (you KNEW it was coming!): Is there a better or worse
>  >  >  >  >  way to break the mirror?
>  >  >  >  >
>  >  >  >  >  Would it be better to disconnect the fiber to the "old" SAN and thus
>  >  >  >  >  effectively physically break the mirror?
>  >  >  >  >
>  >  >  >  >  Or, would it be best to brave the possibility of deleting the wrong
>  >  >  >  >  segment from the raid device in NSSMU?
>  >  >  >  >
>  >  >  >  >  If I do go the NSSMU route, I just want to check my logic: I assume
>  >  >  >  >  that since I need to keep the "raid device" in tact, I simply go to
>  >  >  >  >  the properties of the raid device (hit enter on it) and then highlight
>  >  >  >  >  and "del" the segment that is on the old SAN to remove it from the
>  >  >  >  >  raid device. Then, for sure, I would want to disconnect fiber, just to
>  >  >  >  >  cleanly get rid of it.
>  >  >  >  >
>  >  >  >  >  So far this process has been seamless to the cluster, that just rocks.
>  >  >  >  >  And, it blows me away a little -- very very nice. I'm still a bit
>  >  >  >  >  mentally frizzed that simply mirroring the partitions also manages to
>  >  >  >  >  establish/create the pools -- but I guess that is the magic juju of
>  >  >  >  >  clustering, eh?
>  >  >  >  >
>  >  >  >  >  Peter
>  >  >  >  >
>  >  >  >  >
>  >  >  >  >
>  >  >  >  >
>  >  >  >  >
>  >  >  >  >  --
>  >  >  >  >  "What are you doing?"
>  >  >  >  >  "Spinning counter-clockwise
>  >  >  >  >  Each turn robs the planet of angular momentum
>  >  >  >  >  Slowing its spin the tiniest bit
>  >  >  >  >  Lengthening the night,
>  >  >  >  >  pushing back the dawn
>  >  >  >  >  Giving me a little
>  >  >  >  >  more time here
>  >  >  >  >
>  >  >  >  >  with you"
>  >  >  >  >
>  >  >  >  >  http://xkcd.com/162/
>  >  >  >  >
>  >  >  >  >  www.the-brights.net
>  >  >  >  >  _______________________________________________
>  >  >  >  >  Novell mailing list
>  >  >  >  >  Novell at netlab1.oucs.ox.ac.uk
>  >  >  >  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >  --
>  >  >  >  Alister Leask
>  >  >  >  _______________________________________________
>  >  >  >  Novell mailing list
>  >  >  >  Novell at netlab1.oucs.ox.ac.uk
>  >  >  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >  >  >
>  >  >
>  >  >
>  >  >
>  >  >  --
>  >  >  "Do not be bound to any doctrine, theory or ideology, even Buddhist
>  >  >  ones. All systems of thought are guiding means, not absolute truth."
>  >  >  Thich Nhat Hanh, Vietnamese monk.
>  >  >
>  >  >
>  >  >
>  >  >  http://xkcd.com/167/
>  >  >
>  >  >
>  >  >
>  >  >  www.the-brights.net
>  >  >  _______________________________________________
>  >  >  Novell mailing list
>  >  >  Novell at netlab1.oucs.ox.ac.uk
>  >  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >  >
>  >
>  >
>  >
>  >  --
>  >  Alister Leask
>  >  _______________________________________________
>  >  Novell mailing list
>  >  Novell at netlab1.oucs.ox.ac.uk
>  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >
>
>
>
>  --
>  "Do not be bound to any doctrine, theory or ideology, even Buddhist
>  ones. All systems of thought are guiding means, not absolute truth."
>  Thich Nhat Hanh, Vietnamese monk.
>
>
>
>  http://xkcd.com/167/
>
>  www.the-brights.net
>  _______________________________________________
>  Novell mailing list
>  Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
Alister Leask

From mrsmith at oconee.k12.ga.us  Mon May  5 16:22:52 2008
From: mrsmith at oconee.k12.ga.us (Matt Smith)
Date: Mon, 05 May 2008 11:22:52 -0400
Subject: Migrating to OES Linux v.2
Message-ID: <481EEDF8.E4C1.0068.0@oconee.k12.ga.us>

I'm staring down the barrel of my first migration from Netware to OES Linux.  I've been reading up on the process.  It doesn't look as easy as using the Migration tool was, but it certainly looks doable.  

Right now our policy is to migrate to the new OS as we replace hardware.  Most of our file and print servers are about five years old.  We're replacing about half of them this year, and hopefully the other half next year.  The idea is that the new server will have the same DNS and IP address as the old netware server while also hosting the same services.  It looks like I'm going to have to go through the fun of changing the IP address of my OES server when I'm done with the migration.

Has anyone does this sort of operation yet?  Any gotcha's?  Any advice?  In an ideal world I'd be performing trial runs in my test environment.  Unfortunately, I don't have a feasible test environment, and my boss has basically said I should just try it and see how it goes.  Well, at least he can't say I didn't warn him.

-Matt

-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685


From MGlenn at cco.state.oh.us  Mon May  5 16:39:29 2008
From: MGlenn at cco.state.oh.us (Michael Glenn)
Date: Mon, 05 May 2008 11:39:29 -0400
Subject: Migrating to OES Linux v.2
Message-ID: <s81ef1fc.065@cco.state.oh.us>

FWIW, the OES2 engineers at BrainShare told me that sometime around the next SP for OES2 they should be releasing an updated version of Migration Wizard that can handle Netware-to-Linux migrations. No really solid ETA, though.


>>> mrsmith at oconee.k12.ga.us 05/05/2008 11:22 >>>
I'm staring down the barrel of my first migration from Netware to OES Linux.  I've been reading up on the process.  It doesn't look as easy as using the Migration tool was, but it certainly looks doable.  

Right now our policy is to migrate to the new OS as we replace hardware.  Most of our file and print servers are about five years old.  We're replacing about half of them this year, and hopefully the other half next year.  The idea is that the new server will have the same DNS and IP address as the old netware server while also hosting the same services.  It looks like I'm going to have to go through the fun of changing the IP address of my OES server when I'm done with the migration.

Has anyone does this sort of operation yet?  Any gotcha's?  Any advice?  In an ideal world I'd be performing trial runs in my test environment.  Unfortunately, I don't have a feasible test environment, and my boss has basically said I should just try it and see how it goes.  Well, at least he can't say I didn't warn him.

-Matt

-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell


From mgorn at fxcm.com  Mon May  5 18:00:15 2008
From: mgorn at fxcm.com (Michael Gorn)
Date: Mon, 05 May 2008 13:00:15 -0400
Subject: Netware network throughput monitoring
Message-ID: <481F04DF.A227.00C4.0@fxcm.com>

Hi
Can someone tell me how to easily look at network usage such as throughput(bytes sent and received per second) on a Netware server?
Thanks a lot.
 
-Mike.

From mgorn at fxcm.com  Mon May  5 19:00:04 2008
From: mgorn at fxcm.com (Michael Gorn)
Date: Mon, 05 May 2008 14:00:04 -0400
Subject: Netware network throughput monitoring
In-Reply-To: <481F67FB.F9B1.005C.0@networkingpartner.com>
References: <481F04DF.A227.00C4.0@fxcm.com>
	<481F67FB.F9B1.005C.0@networkingpartner.com>
Message-ID: <481F12E4.A227.00C4.0@fxcm.com>

I tried _tcp and _ip on the console but they show packets instead of bytes per second. Any ideas on how to get bytes per second similar to the stats on the "Networking" tab of "Windows Task Manager" ?
Thanks a lot.

Re:
Hi Michael,

Did you try the following two commands:

_tcp

_ip

Does that show what you want?



>>> "Michael Gorn" <mgorn at fxcm.com> 5/5/2008 7:00 pm >>>
Hi
Can someone tell me how to easily look at network usage such as throughput(bytes sent and received per second) on a Netware server?
Thanks a lot.

-Mike.
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 


From marcus at myrealbox.com  Mon May  5 19:09:17 2008
From: marcus at myrealbox.com (marcus at myrealbox.com)
Date: Mon, 05 May 2008 20:09:17 +0200
Subject: Netware network throughput monitoring
In-Reply-To: <481F04DF.A227.00C4.0@fxcm.com>
References: <481F04DF.A227.00C4.0@fxcm.com>
Message-ID: <t9ju14d89mugirq3rq3kckbm4v28oqc8pp@4ax.com>


On Mon, 05 May 2008 13:00:15 -0400, you wrote:

>Can someone tell me how to easily look at network usage such as throughput(bytes sent and received per second) on a Netware >server?

Type MONITOR at the server console then choose LAN/WAN drivers, highlight the
required LAN driver then press TAB.

Hope that helps.

regards
Marcus



From cmangiarelli at gmail.com  Mon May  5 19:21:02 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Mon, 5 May 2008 14:21:02 -0400
Subject: Netware network throughput monitoring
In-Reply-To: <t9ju14d89mugirq3rq3kckbm4v28oqc8pp@4ax.com>
References: <481F04DF.A227.00C4.0@fxcm.com>
	<t9ju14d89mugirq3rq3kckbm4v28oqc8pp@4ax.com>
Message-ID: <f47566ff0805051121v583b2f8bya6a63de729824d0a@mail.gmail.com>

Novell Remote Manager > Health Monitor > Statistic Trend Graphs > LAN
Throughput (KB/S)

On Mon, May 5, 2008 at 2:09 PM, <marcus at myrealbox.com> wrote:

>
> On Mon, 05 May 2008 13:00:15 -0400, you wrote:
>
> >Can someone tell me how to easily look at network usage such as
> throughput(bytes sent and received per second) on a Netware >server?
>
> Type MONITOR at the server console then choose LAN/WAN drivers, highlight
> the
> required LAN driver then press TAB.
>
> Hope that helps.
>
> regards
> Marcus
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From petervl at gmail.com  Tue May  6 00:59:10 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 5 May 2008 18:59:10 -0500
Subject: Migrating to OES Linux v.2
In-Reply-To: <s81ef1fc.065@cco.state.oh.us>
References: <s81ef1fc.065@cco.state.oh.us>
Message-ID: <68b791330805051659p4427f2aeub4401601162b908d@mail.gmail.com>

god I hope so ... sooner the better ...

P

On Mon, May 5, 2008 at 10:39 AM, Michael Glenn <MGlenn at cco.state.oh.us> wrote:
> FWIW, the OES2 engineers at BrainShare told me that sometime around the next SP for OES2 they should be releasing an updated version of Migration Wizard that can handle Netware-to-Linux migrations. No really solid ETA, though.
>
>
>  >>> mrsmith at oconee.k12.ga.us 05/05/2008 11:22 >>>
>
>
> I'm staring down the barrel of my first migration from Netware to OES Linux.  I've been reading up on the process.  It doesn't look as easy as using the Migration tool was, but it certainly looks doable.
>
>  Right now our policy is to migrate to the new OS as we replace hardware.  Most of our file and print servers are about five years old.  We're replacing about half of them this year, and hopefully the other half next year.  The idea is that the new server will have the same DNS and IP address as the old netware server while also hosting the same services.  It looks like I'm going to have to go through the fun of changing the IP address of my OES server when I'm done with the migration.
>
>  Has anyone does this sort of operation yet?  Any gotcha's?  Any advice?  In an ideal world I'd be performing trial runs in my test environment.  Unfortunately, I don't have a feasible test environment, and my boss has basically said I should just try it and see how it goes.  Well, at least he can't say I didn't warn him.
>
>  -Matt
>
>  --
>
>  Matt Smith                Network Technology Specialist
>  Oconee County School System, Oconee County, Georgia
>  Office of Instruction and Technology       706-769-5685
>
>  _______________________________________________
>  Novell mailing list
>  Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell
>
>  _______________________________________________
>  Novell mailing list
>  Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
"Do not be bound to any doctrine, theory or ideology, even Buddhist
ones. All systems of thought are guiding means, not absolute truth."
Thich Nhat Hanh, Vietnamese monk.
	


http://xkcd.com/167/

www.the-brights.net

From petervl at gmail.com  Tue May  6 01:30:10 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 5 May 2008 19:30:10 -0500
Subject: 2 SANs, 2 LUNS, mirrored! YA!
In-Reply-To: <397cc55b0805042014u110312a6ide9b3687691029ae@mail.gmail.com>
References: <68b791330805030637j342a528dgf50961f79ff61954@mail.gmail.com>
	<397cc55b0805041413q4239ff2fm79d9fed2d007a11f@mail.gmail.com>
	<68b791330805041700t67b0d72dq2a69506134b9ed5@mail.gmail.com>
	<397cc55b0805041822g71f24d2dw87a750201136d809@mail.gmail.com>
	<68b791330805041903w6530dcd9k91dcb6eef0f1b2e6@mail.gmail.com>
	<397cc55b0805042014u110312a6ide9b3687691029ae@mail.gmail.com>
Message-ID: <68b791330805051730x4d032172sb227404aa710a25f@mail.gmail.com>

yeah, the SVC rocks!

I sell/support them ... very nice stuff. Basically it is IBM's answer
to array virtualization -- instead of putting that functionality in
the storage box, you can front any storage with it  (IBM or not ...)

P

On Sun, May 4, 2008 at 10:14 PM, Alister Leask <awleask at gmail.com> wrote:
> We took another route and bought IBM SVC's... They move stuff around
>  all over the place without the OS even noticing. Veeeery nice!
>
>
>
>  On Mon, May 5, 2008 at 2:03 PM, Peter Van Lone <petervl at gmail.com> wrote:
>  > hehe -- you bet. I can imagine it getting ugly quickly. It's too bad
>  >  that we cannot mirror pools -- now THAT would make things easier ...
>  >
>  >  P
>  >
>  >
>  >
>  >  On Sun, May 4, 2008 at 8:22 PM, Alister Leask <awleask at gmail.com> wrote:
>  >  > Nice one Peter!
>  >  >
>  >  >  It does work well - but, when you have been expanding volumes for a
>  >  >  few years - trust me - there can be a lot of partitions to mirrors!
>  >  >
>  >  >
>  >  >
>  >  >  On Mon, May 5, 2008 at 12:00 PM, Peter Van Lone <petervl at gmail.com> wrote:
>  >  >  > Allister ...
>  >  >  >
>  >  >  >  I went ahead and braved it -- the interface is actually pretty clear
>  >  >  >  in NSSMU and the only way I could see messing it up (now that I've
>  >  >  >  done it 8 times) is to slip and move the selection accidentally, or
>  >  >  >  just not paying attention.
>  >  >  >
>  >  >  >  As for the cluster -- yes, it was clustered and my SBD was one
>  >  >  >  partition amongst 3 on one LUN -- I just mirrored/broke the mirror
>  >  >  >  like every other partition. The only consequence was that one of the
>  >  >  >  three cluster servers (the one that is a VM) had a fatal cluster error
>  >  >  >  --- but it was only because I had neglected to re-create the RDMs
>  >  >  >  after migrating the data. So, when I tried to migrate something to
>  >  >  >  this server as a test, it freaked out.
>  >  >  >
>  >  >  >  Basically everything  worked flawlessly -- I must say it was the
>  >  >  >  fastest/cleanest data migration I have seen. Lovely.
>  >  >  >
>  >  >  >  Peter
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >  On Sun, May 4, 2008 at 4:13 PM, Alister Leask <awleask at gmail.com> wrote:
>  >  >  >  > When I've done this in the past I have always removed the storage
>  >  >  >  >  before I deleted the old partition from the mirror group - that way I
>  >  >  >  >  was always sure that I was deleting the correct partition.
>  >  >  >  >
>  >  >  >  >  Pete, maybe I missed it previously but I'm not sure that you mentioned
>  >  >  >  >  clusters. You need to either mirror the SBD partition (can't be done
>  >  >  >  >  from NSSMU, IIRC) or shutdown the cluster and recreate the SBD on the
>  >  >  >  >  new storage. I've used the technique when recreating the cluster
>  >  >  >  >  partition of only presenting the LUN that will hold the SBD to the
>  >  >  >  >  server where you are recreating the SBD, so that there is no confusion
>  >  >  >  >  about where the SBD ends up.
>  >  >  >  >
>  >  >  >  >
>  >  >  >  >
>  >  >  >  >  On Sun, May 4, 2008 at 1:37 AM, Peter Van Lone <petervl at gmail.com> wrote:
>  >  >  >  >  > So, thanks largely to the assistance and reassurance of folks on these
>  >  >  >  >  >  lists, I have now successfully migrated data from an old SAN to a new
>  >  >  >  >  >  one. The mirror process has worked great -- spectacular, actually
>  >  >  >  >  >  (thus far, 2 partitions left to go).
>  >  >  >  >  >
>  >  >  >  >  >  A big round of applause to you all ....
>  >  >  >  >  >
>  >  >  >  >  >  Next question (you KNEW it was coming!): Is there a better or worse
>  >  >  >  >  >  way to break the mirror?
>  >  >  >  >  >
>  >  >  >  >  >  Would it be better to disconnect the fiber to the "old" SAN and thus
>  >  >  >  >  >  effectively physically break the mirror?
>  >  >  >  >  >
>  >  >  >  >  >  Or, would it be best to brave the possibility of deleting the wrong
>  >  >  >  >  >  segment from the raid device in NSSMU?
>  >  >  >  >  >
>  >  >  >  >  >  If I do go the NSSMU route, I just want to check my logic: I assume
>  >  >  >  >  >  that since I need to keep the "raid device" in tact, I simply go to
>  >  >  >  >  >  the properties of the raid device (hit enter on it) and then highlight
>  >  >  >  >  >  and "del" the segment that is on the old SAN to remove it from the
>  >  >  >  >  >  raid device. Then, for sure, I would want to disconnect fiber, just to
>  >  >  >  >  >  cleanly get rid of it.
>  >  >  >  >  >
>  >  >  >  >  >  So far this process has been seamless to the cluster, that just rocks.
>  >  >  >  >  >  And, it blows me away a little -- very very nice. I'm still a bit
>  >  >  >  >  >  mentally frizzed that simply mirroring the partitions also manages to
>  >  >  >  >  >  establish/create the pools -- but I guess that is the magic juju of
>  >  >  >  >  >  clustering, eh?
>  >  >  >  >  >
>  >  >  >  >  >  Peter
>  >  >  >  >  >
>  >  >  >  >  >
>  >  >  >  >  >
>  >  >  >  >  >
>  >  >  >  >  >
>  >  >  >  >  >  --
>  >  >  >  >  >  "What are you doing?"
>  >  >  >  >  >  "Spinning counter-clockwise
>  >  >  >  >  >  Each turn robs the planet of angular momentum
>  >  >  >  >  >  Slowing its spin the tiniest bit
>  >  >  >  >  >  Lengthening the night,
>  >  >  >  >  >  pushing back the dawn
>  >  >  >  >  >  Giving me a little
>  >  >  >  >  >  more time here
>  >  >  >  >  >
>  >  >  >  >  >  with you"
>  >  >  >  >  >
>  >  >  >  >  >  http://xkcd.com/162/
>  >  >  >  >  >
>  >  >  >  >  >  www.the-brights.net
>  >  >  >  >  >  _______________________________________________
>  >  >  >  >  >  Novell mailing list
>  >  >  >  >  >  Novell at netlab1.oucs.ox.ac.uk
>  >  >  >  >  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >  >  >  >  >
>  >  >  >  >
>  >  >  >  >
>  >  >  >  >
>  >  >  >  >  --
>  >  >  >  >  Alister Leask
>  >  >  >  >  _______________________________________________
>  >  >  >  >  Novell mailing list
>  >  >  >  >  Novell at netlab1.oucs.ox.ac.uk
>  >  >  >  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >  --
>  >  >  >  "Do not be bound to any doctrine, theory or ideology, even Buddhist
>  >  >  >  ones. All systems of thought are guiding means, not absolute truth."
>  >  >  >  Thich Nhat Hanh, Vietnamese monk.
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >  http://xkcd.com/167/
>  >  >  >
>  >  >  >
>  >  >  >
>  >  >  >  www.the-brights.net
>  >  >  >  _______________________________________________
>  >  >  >  Novell mailing list
>  >  >  >  Novell at netlab1.oucs.ox.ac.uk
>  >  >  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >  >  >
>  >  >
>  >  >
>  >  >
>  >  >  --
>  >  >  Alister Leask
>  >  >  _______________________________________________
>  >  >  Novell mailing list
>  >  >  Novell at netlab1.oucs.ox.ac.uk
>  >  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >  >
>  >
>  >
>  >
>  >  --
>  >  "Do not be bound to any doctrine, theory or ideology, even Buddhist
>  >  ones. All systems of thought are guiding means, not absolute truth."
>  >  Thich Nhat Hanh, Vietnamese monk.
>  >
>  >
>  >
>  >  http://xkcd.com/167/
>  >
>  >  www.the-brights.net
>  >  _______________________________________________
>  >  Novell mailing list
>  >  Novell at netlab1.oucs.ox.ac.uk
>  >  http://netlab1.usu.edu/mailman/listinfo/novell
>  >
>
>
>
>  --
>  Alister Leask
>  _______________________________________________
>  Novell mailing list
>  Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
"Do not be bound to any doctrine, theory or ideology, even Buddhist
ones. All systems of thought are guiding means, not absolute truth."
Thich Nhat Hanh, Vietnamese monk.
	


http://xkcd.com/167/

www.the-brights.net

From gbeckmeyer at acgih.org  Tue May  6 14:49:30 2008
From: gbeckmeyer at acgih.org (Greg Beckmeyer)
Date: Tue, 06 May 2008 09:49:30 -0400
Subject: Who moved the folder?
Message-ID: <s82029ae.086@acgih2.acgih.org>

Just had a situation where one of our largest shared folders on the
server was moved underneath another folder.  Both folders require full
read/write access.  Since this is the 2nd incident I've had like this in
the last couple weeks, I'd like to track down what's happening.  I
thought if someone moved it that the netware info would show them as the
new owner, but that's not the case...it's owner is still the admin
account that was used when we migrated to a new server.

I'm going to have to move this back to the proper location so I'm
assuming that might destroy any 'evidence', but for the future is there
anything I can do to try to track down the 'culprit' so I can provide
some extra training?  Everyone has RWCEMF rights to these two folders,
anything I can do to prevent this from happening yet still allow full
read/write access?

Thanks,
Greg Beckmeyer


From Nathan.Broome at oberlin.edu  Tue May  6 14:59:49 2008
From: Nathan.Broome at oberlin.edu (Nathan C. Broome)
Date: Tue, 06 May 2008 09:59:49 -0400
Subject: Who moved the folder?
In-Reply-To: <s82029ae.086@acgih2.acgih.org>
References: <s82029ae.086@acgih2.acgih.org>
Message-ID: <48206455.20702@oberlin.edu>

I've been there before.  I've enabled "rename inhibit" and "delete 
inhibit" on the top level folder.  It prevents the 'move' action.   
Still allows a copy, though.


Nathan Broome
Oberlin College


Greg Beckmeyer wrote:
> Just had a situation where one of our largest shared folders on the
> server was moved underneath another folder.  Both folders require full
> read/write access.  Since this is the 2nd incident I've had like this in
> the last couple weeks, I'd like to track down what's happening.  I
> thought if someone moved it that the netware info would show them as the
> new owner, but that's not the case...it's owner is still the admin
> account that was used when we migrated to a new server.
>
> I'm going to have to move this back to the proper location so I'm
> assuming that might destroy any 'evidence', but for the future is there
> anything I can do to try to track down the 'culprit' so I can provide
> some extra training?  Everyone has RWCEMF rights to these two folders,
> anything I can do to prevent this from happening yet still allow full
> read/write access?
>
> Thanks,
> Greg Beckmeyer
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>   


From Nathan.Broome at oberlin.edu  Tue May  6 14:59:49 2008
From: Nathan.Broome at oberlin.edu (Nathan C. Broome)
Date: Tue, 06 May 2008 09:59:49 -0400
Subject: Who moved the folder?
In-Reply-To: <s82029ae.086@acgih2.acgih.org>
References: <s82029ae.086@acgih2.acgih.org>
Message-ID: <48206455.20702@oberlin.edu>

I've been there before.  I've enabled "rename inhibit" and "delete 
inhibit" on the top level folder.  It prevents the 'move' action.   
Still allows a copy, though.


Nathan Broome
Oberlin College


Greg Beckmeyer wrote:
> Just had a situation where one of our largest shared folders on the
> server was moved underneath another folder.  Both folders require full
> read/write access.  Since this is the 2nd incident I've had like this in
> the last couple weeks, I'd like to track down what's happening.  I
> thought if someone moved it that the netware info would show them as the
> new owner, but that's not the case...it's owner is still the admin
> account that was used when we migrated to a new server.
>
> I'm going to have to move this back to the proper location so I'm
> assuming that might destroy any 'evidence', but for the future is there
> anything I can do to try to track down the 'culprit' so I can provide
> some extra training?  Everyone has RWCEMF rights to these two folders,
> anything I can do to prevent this from happening yet still allow full
> read/write access?
>
> Thanks,
> Greg Beckmeyer
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>   


From gbeckmeyer at acgih.org  Tue May  6 15:08:44 2008
From: gbeckmeyer at acgih.org (Greg Beckmeyer)
Date: Tue, 06 May 2008 10:08:44 -0400
Subject: Who moved the folder?
Message-ID: <s8202e36.095@acgih2.acgih.org>

Just tried testing that.  On a deletion attempt, Windows will ask to
confirm, then an error pops up with access denied.  A move, however,
goes right through.  This is all on one large volume, by the way.  We're
a small office, so we have the entire volume mapped as a single drive
letter.  So the move process is a true move, not actually deleting
anything.  It would be a lot of work, but I suppose I could map the
required folders to individual drive letters, that way windows would
treat a move as a copy/delete action which could then be prevented.

Greg


>>> "Geoffrey Carman" <geoffreycarman at gmail.com> 5/6/2008 9:55 AM >>>
Try flagging the directorois DI (Delete Inhibit) I think this just
brings up a Windows box to ask if you are sure and then overrides it,
but it may buy them enough time to think about what they just did and
stop...

On Tue, May 6, 2008 at 9:49 AM, Greg Beckmeyer <gbeckmeyer at acgih.org>
wrote:
> Just had a situation where one of our largest shared folders on the
>  server was moved underneath another folder.  Both folders require
full
>  read/write access.  Since this is the 2nd incident I've had like
this in
>  the last couple weeks, I'd like to track down what's happening.  I
>  thought if someone moved it that the netware info would show them as
the
>  new owner, but that's not the case...it's owner is still the admin
>  account that was used when we migrated to a new server.
>
>  I'm going to have to move this back to the proper location so I'm
>  assuming that might destroy any 'evidence', but for the future is
there
>  anything I can do to try to track down the 'culprit' so I can
provide
>  some extra training?  Everyone has RWCEMF rights to these two
folders,
>  anything I can do to prevent this from happening yet still allow
full
>  read/write access?
>
>  Thanks,
>  Greg Beckmeyer
>
>  _______________________________________________
>  Novell mailing list
>  Novell at netlab1.oucs.ox.ac.uk 
>  http://netlab1.usu.edu/mailman/listinfo/novell 
>



-- 
Geoffrey Carman
geoffreycarman at gmail.com

From cmangiarelli at gmail.com  Tue May  6 15:39:58 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 6 May 2008 10:39:58 -0400
Subject: Who moved the folder?
In-Reply-To: <s8202e36.095@acgih2.acgih.org>
References: <s8202e36.095@acgih2.acgih.org>
Message-ID: <f47566ff0805060739x1506e9d6sb1b9644f3be6344c@mail.gmail.com>

Works fine for me and I just tested using what sounds like your situation.
Have a drive letter mapped to a volume... went to a subfolder... created 2
directories - "test" and "dest"... Marked "test" as DI and RI... Tried to
move "test" into "dest" and received an error.  Tried to delete "test" and
received the same error.

Was logged in with my admin account.  Client pc is WinXP (fully patched) and
NWC491 SP4.  Server was NW65SP6.

BTW, Novell Audit could tell you who moved the directory if you had it
available.

On Tue, May 6, 2008 at 10:08 AM, Greg Beckmeyer <gbeckmeyer at acgih.org>
wrote:

> Just tried testing that.  On a deletion attempt, Windows will ask to
> confirm, then an error pops up with access denied.  A move, however,
> goes right through.  This is all on one large volume, by the way.  We're
> a small office, so we have the entire volume mapped as a single drive
> letter.  So the move process is a true move, not actually deleting
> anything.  It would be a lot of work, but I suppose I could map the
> required folders to individual drive letters, that way windows would
> treat a move as a copy/delete action which could then be prevented.
>
> Greg
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From gbeckmeyer at acgih.org  Tue May  6 15:55:27 2008
From: gbeckmeyer at acgih.org (Greg Beckmeyer)
Date: Tue, 06 May 2008 10:55:27 -0400
Subject: Who moved the folder?
Message-ID: <s8203929.016@acgih2.acgih.org>

Thanks, I think this will help out.  Just tested this out myself like
this...created two directories, test1 and test2.  Flagged test1 DI & RI.
 Dragged test1 into test2.  It gives an error dialog 'Cannot remove
folder test1: Access is denied.'  It DOES create a new test1 folder
under test2, and the contents of test1 are moved to that new folder, but
now the 'new' folder shows a new creation date/time and most important
the name of the account that did the move.  The original test1 folder
remained in it's spot, though it is now empty.

So it looks like this won't prevent mistakes from happening, but I will
at least know who did it and when.

Greg

>>> Nathan.Broome at oberlin.edu 5/6/2008 9:59 AM >>>
I've been there before.  I've enabled "rename inhibit" and "delete 
inhibit" on the top level folder.  It prevents the 'move' action.   
Still allows a copy, though.


Nathan Broome
Oberlin College


Greg Beckmeyer wrote:
> Just had a situation where one of our largest shared folders on the
> server was moved underneath another folder.  Both folders require
full
> read/write access.  Since this is the 2nd incident I've had like this
in
> the last couple weeks, I'd like to track down what's happening.  I
> thought if someone moved it that the netware info would show them as
the
> new owner, but that's not the case...it's owner is still the admin
> account that was used when we migrated to a new server.
>
> I'm going to have to move this back to the proper location so I'm
> assuming that might destroy any 'evidence', but for the future is
there
> anything I can do to try to track down the 'culprit' so I can
provide
> some extra training?  Everyone has RWCEMF rights to these two
folders,
> anything I can do to prevent this from happening yet still allow
full
> read/write access?
>
> Thanks,
> Greg Beckmeyer
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell 
>
>   


From gbeckmeyer at acgih.org  Tue May  6 15:55:27 2008
From: gbeckmeyer at acgih.org (Greg Beckmeyer)
Date: Tue, 06 May 2008 10:55:27 -0400
Subject: Who moved the folder?
Message-ID: <s8203929.017@acgih2.acgih.org>

Thanks, I think this will help out.  Just tested this out myself like
this...created two directories, test1 and test2.  Flagged test1 DI & RI.
 Dragged test1 into test2.  It gives an error dialog 'Cannot remove
folder test1: Access is denied.'  It DOES create a new test1 folder
under test2, and the contents of test1 are moved to that new folder, but
now the 'new' folder shows a new creation date/time and most important
the name of the account that did the move.  The original test1 folder
remained in it's spot, though it is now empty.

So it looks like this won't prevent mistakes from happening, but I will
at least know who did it and when.

Greg

>>> Nathan.Broome at oberlin.edu 5/6/2008 9:59 AM >>>
I've been there before.  I've enabled "rename inhibit" and "delete 
inhibit" on the top level folder.  It prevents the 'move' action.   
Still allows a copy, though.


Nathan Broome
Oberlin College


Greg Beckmeyer wrote:
> Just had a situation where one of our largest shared folders on the
> server was moved underneath another folder.  Both folders require
full
> read/write access.  Since this is the 2nd incident I've had like this
in
> the last couple weeks, I'd like to track down what's happening.  I
> thought if someone moved it that the netware info would show them as
the
> new owner, but that's not the case...it's owner is still the admin
> account that was used when we migrated to a new server.
>
> I'm going to have to move this back to the proper location so I'm
> assuming that might destroy any 'evidence', but for the future is
there
> anything I can do to try to track down the 'culprit' so I can
provide
> some extra training?  Everyone has RWCEMF rights to these two
folders,
> anything I can do to prevent this from happening yet still allow
full
> read/write access?
>
> Thanks,
> Greg Beckmeyer
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell 
>
>   


From joea at j4computers.com  Tue May  6 17:23:26 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Tue, 06 May 2008 12:23:26 -0400
Subject: Contextless login, Public rights
Message-ID: <48204DBF020000850005DD57@FS-LIN-OES>

Anyone know if contextless login will cease to function if the "inheritable" feature is removed from the Public object?  Seems it would be almost the same as removing those rights all together.

From cmangiarelli at gmail.com  Tue May  6 18:31:56 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 6 May 2008 13:31:56 -0400
Subject: Who moved the folder?
In-Reply-To: <s8203929.016@acgih2.acgih.org>
References: <s8203929.016@acgih2.acgih.org>
Message-ID: <f47566ff0805061031x7b146b60h2df3ca3ef5769e40@mail.gmail.com>

Yep. Did some further testing and it behaves with files as you have
mentioned.  I only tested with 1 level of directories.  Oh well, it's better
than nothing I suppose.

On Tue, May 6, 2008 at 10:55 AM, Greg Beckmeyer <gbeckmeyer at acgih.org>
wrote:

> Thanks, I think this will help out.  Just tested this out myself like
> this...created two directories, test1 and test2.  Flagged test1 DI & RI.
>  Dragged test1 into test2.  It gives an error dialog 'Cannot remove
> folder test1: Access is denied.'  It DOES create a new test1 folder
> under test2, and the contents of test1 are moved to that new folder, but
> now the 'new' folder shows a new creation date/time and most important
> the name of the account that did the move.  The original test1 folder
> remained in it's spot, though it is now empty.
>
> So it looks like this won't prevent mistakes from happening, but I will
> at least know who did it and when.
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From cmangiarelli at gmail.com  Tue May  6 18:33:18 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 6 May 2008 13:33:18 -0400
Subject: Contextless login, Public rights
In-Reply-To: <48204DBF020000850005DD57@FS-LIN-OES>
References: <48204DBF020000850005DD57@FS-LIN-OES>
Message-ID: <f47566ff0805061033q4b16a39bhc2015b18ec9aa4c2@mail.gmail.com>

I would think it would stop ldap contextless logins from working if you
don't have your ldap server configured to use a proxy account.

On Tue, May 6, 2008 at 12:23 PM, joea at j4computers.com <joea at j4computers.com>
wrote:

> Anyone know if contextless login will cease to function if the
> "inheritable" feature is removed from the Public object?  Seems it would be
> almost the same as removing those rights all together.
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From joea at j4computers.com  Tue May  6 19:21:49 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Tue, 06 May 2008 14:21:49 -0400
Subject: Contextless login, Public rights
Message-ID: <4820697D020000850005DD5B@FS-LIN-OES>

Yes, more research also indicates it should stop working.   Expanding the use of LDAP, and the proxy user (or anoymous) seeing "too much" is the driving force behind my efforts.

But I think we have a handle on why that is happening.

joe a.

>>> "Christopher Mangiarelli" <cmangiarelli at gmail.com> 05/06/08 1:35 PM >>>
I would think it would stop ldap contextless logins from working if you
don't have your ldap server configured to use a proxy account.

On Tue, May 6, 2008 at 12:23 PM, joea at j4computers.com <joea at j4computers.com>
wrote:

> Anyone know if contextless login will cease to function if the
> "inheritable" feature is removed from the Public object?  Seems it would be
> almost the same as removing those rights all together.
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


From cmangiarelli at gmail.com  Tue May  6 19:28:44 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 6 May 2008 14:28:44 -0400
Subject: Contextless login, Public rights
In-Reply-To: <4820697D020000850005DD5B@FS-LIN-OES>
References: <4820697D020000850005DD5B@FS-LIN-OES>
Message-ID: <f47566ff0805061128s6c064af5t6fec45307c582a97@mail.gmail.com>

Security and Convenience are often on opposite ends of the scale.  You can
either hide the directory and hope nobody guesses the right information or
you can expose the directory for convenience purposes and ensure its
security.  Security by obfuscation, while the easiest to implement is often
the most insecure.

On Tue, May 6, 2008 at 2:21 PM, joea at j4computers.com <joea at j4computers.com>
wrote:

> Yes, more research also indicates it should stop working.   Expanding the
> use of LDAP, and the proxy user (or anoymous) seeing "too much" is the
> driving force behind my efforts.
>
> But I think we have a handle on why that is happening.
>
> joe a.
>
> >>> "Christopher Mangiarelli" <cmangiarelli at gmail.com> 05/06/08 1:35 PM
> >>>
> I would think it would stop ldap contextless logins from working if you
> don't have your ldap server configured to use a proxy account.
>
> On Tue, May 6, 2008 at 12:23 PM, joea at j4computers.com <
> joea at j4computers.com>
> wrote:
>
> > Anyone know if contextless login will cease to function if the
> > "inheritable" feature is removed from the Public object?  Seems it would
> be
> > almost the same as removing those rights all together.
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From Setienne at enesco.com  Wed May  7 16:33:20 2008
From: Setienne at enesco.com (Scott Etienne)
Date: Wed, 07 May 2008 10:33:20 -0500
Subject: AFP Performance Problems
In-Reply-To: <f47566ff0805061128s6c064af5t6fec45307c582a97@mail.gmail.com>
References: <4820697D020000850005DD5B@FS-LIN-OES>
	<f47566ff0805061128s6c064af5t6fec45307c582a97@mail.gmail.com>
Message-ID: <4821856F.8A77.004D.0@enesco.com>

NW65sp7
 
We upgraded NetWare on all of our servers a couple of weeks ago, and also upgraded BackupExec from 9.1 to 9.2, and shortly thereafter, we started getting complaints from the Mac users.
 
I tried doing a BESTOP and AFPSTOP and then AFPSTART to no avail.
 
Anyone see this or have any suggestions?
 
 
Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 

 

From RGrein at tpchd.org  Wed May  7 16:38:51 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Wed, 07 May 2008 08:38:51 -0700
Subject: AFP Performance Problems
In-Reply-To: <4821856F.8A77.004D.0@enesco.com>
References: <4820697D020000850005DD5B@FS-LIN-OES>
	<f47566ff0805061128s6c064af5t6fec45307c582a97@mail.gmail.com>
	<4821856F.8A77.004D.0@enesco.com>
Message-ID: <48216A9C.811E.0072.0@tpchd.org>

And here I was thinking that SP7 was a big improvement for AFP, but then I'm the only one connected that way.

Randy Grein
Sr. Network Engineer


>>> "Scott Etienne" <Setienne at enesco.com> 5/7/2008 8:33 AM >>>
NW65sp7
 
We upgraded NetWare on all of our servers a couple of weeks ago, and also upgraded BackupExec from 9.1 to 9.2, and shortly thereafter, we started getting complaints from the Mac users.
 
I tried doing a BESTOP and AFPSTOP and then AFPSTART to no avail.
 
Anyone see this or have any suggestions?
 
 
Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 

 
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From toomas.aas at raad.tartu.ee  Thu May  8 11:35:54 2008
From: toomas.aas at raad.tartu.ee (Toomas Aas)
Date: Thu, 08 May 2008 13:35:54 +0300
Subject: Contextless login to NetStorage
Message-ID: <4822D78A.2030609@raad.tartu.ee>

Hello!

I have a semi-working contextless login to NetStorage on NW65SP7.

The tree looks like

o=org1
|
o=org2
|_server
|_ou=ou1
|_ou=ou2
|
o=org3

The users in ou1 and ou2 can successfully log in to NetStorage without 
context. However, users in org1 and org3 can only log in with distinguished 
names (username.org1)

I have tried to specify additional contexts under Authentication Domains in 
  iManager using various syntaxes such as "o=org1", ".o=org1", "org1" 
".org1", but none seem to help.

LDAP is set up to use specific proxy user, and this user's rights to org1, 
org2 and org3 are identical. In LDAP Group settings i have "Require TLS for 
Simple Binds with Password" unchecked, which seems wrong, but why then does 
contextless login successfully work in org2? Anyway, I tried checking it 
which didn't help.

Where else could I look?

-- 
Toomas Aas

From toomas.aas at raad.tartu.ee  Thu May  8 18:46:27 2008
From: toomas.aas at raad.tartu.ee (Toomas Aas)
Date: Thu, 08 May 2008 20:46:27 +0300
Subject: Contextless login to NetStorage
In-Reply-To: <4822D78A.2030609@raad.tartu.ee>
References: <4822D78A.2030609@raad.tartu.ee>
Message-ID: <48233C73.9050207@raad.tartu.ee>

Toomas Aas wrote:

> I have a semi-working contextless login to NetStorage on NW65SP7.

After chasing several red herrings, I finally understood that just 
restarting Tomcat after changing Authentication Domains is not enough. 
After I restarted both Tomcat and Apache, the changest took effect. To 
understand that, I needed to hose up LDAP so badly that the server needed 
to be rebooted.

--
Toomas Aas

... Work is for people who don't know how to fish.

From geoffreycarman at gmail.com  Thu May  8 18:54:01 2008
From: geoffreycarman at gmail.com (Geoffrey Carman)
Date: Thu, 8 May 2008 13:54:01 -0400
Subject: Contextless login to NetStorage
In-Reply-To: <48233C73.9050207@raad.tartu.ee>
References: <4822D78A.2030609@raad.tartu.ee> <48233C73.9050207@raad.tartu.ee>
Message-ID: <993788ac0805081054y1f0ccef8yb6848ede81a1722d@mail.gmail.com>

Actually you need to reload NCPL.NLM and its dependant NLM's.  This is
not possible.  If you unload the modules by hand, you will throw an
abend in the process.  This reads the values out of the Netware
Registry (ICK!!!!) which needs a reboot to take affect!

It is insane.  They took a feature from Win32, the Registry, and made
it work in Netware with the absolutly worst part broken as in
Windows...  That is Reg changes take a reboot to take affect.

No comment.


On Thu, May 8, 2008 at 1:46 PM, Toomas Aas <toomas.aas at raad.tartu.ee> wrote:
> Toomas Aas wrote:
>
>  > I have a semi-working contextless login to NetStorage on NW65SP7.
>
>  After chasing several red herrings, I finally understood that just
>  restarting Tomcat after changing Authentication Domains is not enough.
>  After I restarted both Tomcat and Apache, the changest took effect. To
>  understand that, I needed to hose up LDAP so badly that the server needed
>  to be rebooted.
>
>  --
>  Toomas Aas
>
>  ... Work is for people who don't know how to fish.
>
>
> _______________________________________________
>  Novell mailing list
>  Novell at netlab1.oucs.ox.ac.uk
>  http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
Geoffrey Carman
geoffreycarman at gmail.com

From Setienne at enesco.com  Thu May  8 20:07:13 2008
From: Setienne at enesco.com (Scott Etienne)
Date: Thu, 08 May 2008 14:07:13 -0500
Subject: AFP Performance Problems
In-Reply-To: <48216A9C.811E.0072.0@tpchd.org>
References: <4820697D020000850005DD5B@FS-LIN-OES>
	<f47566ff0805061128s6c064af5t6fec45307c582a97@mail.gmail.com>
	<4821856F.8A77.004D.0@enesco.com> <48216A9C.811E.0072.0@tpchd.org>
Message-ID: <48230910.8A77.004D.0@enesco.com>

We rebooted the server last night and today the Mac-user performance issues disappeared.
 
Randy--FYI, we have a case open with Symantec over our BE12 perf issues, and told them we are going to go back to 11d. That has them scrambling, making us try different settings to TSAFS, and the config file and so forth to no avail. So, we really are building the 11d server now.
 
Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 

 

>>> "Randy Grein" <RGrein at tpchd.org> 5/7/2008 10:38 AM >>>
And here I was thinking that SP7 was a big improvement for AFP, but then I'm the only one connected that way.

Randy Grein
Sr. Network Engineer


>>> "Scott Etienne" <Setienne at enesco.com> 5/7/2008 8:33 AM >>>
NW65sp7

We upgraded NetWare on all of our servers a couple of weeks ago, and also upgraded BackupExec from 9.1 to 9.2, and shortly thereafter, we started getting complaints from the Mac users.

I tried doing a BESTOP and AFPSTOP and then AFPSTART to no avail.

Anyone see this or have any suggestions?


Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From RGrein at tpchd.org  Thu May  8 21:49:24 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Thu, 08 May 2008 13:49:24 -0700
Subject: AFP Performance Problems
In-Reply-To: <48230910.8A77.004D.0@enesco.com>
References: <4820697D020000850005DD5B@FS-LIN-OES>
	<f47566ff0805061128s6c064af5t6fec45307c582a97@mail.gmail.com>
	<4821856F.8A77.004D.0@enesco.com> <48216A9C.811E.0072.0@tpchd.org>
	<48230910.8A77.004D.0@enesco.com>
Message-ID: <482304EC.811E.0072.0@tpchd.org>

Interesting. I'll let my boss know, but he will just offer the opinion that nobody can support Netware anymore. Personally I think it's a deliberate choice to degrade support and encourage the migration to a single vendor. I love self-serving circular logic.

Randy Grein
Sr. Network Engineer


>>> "Scott Etienne" <Setienne at enesco.com> 5/8/2008 12:07 PM >>>
We rebooted the server last night and today the Mac-user performance issues disappeared.
 
Randy--FYI, we have a case open with Symantec over our BE12 perf issues, and told them we are going to go back to 11d. That has them scrambling, making us try different settings to TSAFS, and the config file and so forth to no avail. So, we really are building the 11d server now.
 
Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 

 

>>> "Randy Grein" <RGrein at tpchd.org> 5/7/2008 10:38 AM >>>
And here I was thinking that SP7 was a big improvement for AFP, but then I'm the only one connected that way.

Randy Grein
Sr. Network Engineer

http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From TJohnson at lancaster.wnyric.org  Thu May  8 22:02:50 2008
From: TJohnson at lancaster.wnyric.org (TJohnson at lancaster.wnyric.org)
Date: Thu, 8 May 2008 17:02:50 -0400
Subject: AFP Performance Problems
In-Reply-To: <482304EC.811E.0072.0@tpchd.org>
Message-ID: <OF4B052CCF.11155BEE-ON85257443.00731731-85257443.00739E34@lancaster.wnyric.org>

I agree about degrading Netware support, especially for BE.  We just 
switched to Syncsort from BE and it works great for Netware and they have 
excellent support but get ready to cough up some bucks.

I hear that Novanet, one of my favorites, also has dwindling Netware 
support but you may want to check Commvault's Galaxy from what I hear it 
is cheaper than Syncsort and good Netware support.

If you are committed to NW and not planning a Linux or, heaven forbid, an 
MS migration you may want to check out a solution committed to support 
Netware which I think we all know Symantec is not!

Just my 0.02.




"Randy Grein" <RGrein at tpchd.org> 
Sent by: novell-bounces at netlab1.oucs.ox.ac.uk
05/08/2008 04:51 PM
Please respond to
Novell LAN Interest Group <novell at netlab1.oucs.ox.ac.uk>


To
"Novell LAN Interest Group" <novell at netlab1.oucs.ox.ac.uk>
cc

Subject
Re: AFP Performance Problems






Interesting. I'll let my boss know, but he will just offer the opinion 
that nobody can support Netware anymore. Personally I think it's a 
deliberate choice to degrade support and encourage the migration to a 
single vendor. I love self-serving circular logic.

Randy Grein
Sr. Network Engineer


>>> "Scott Etienne" <Setienne at enesco.com> 5/8/2008 12:07 PM >>>
We rebooted the server last night and today the Mac-user performance 
issues disappeared.
 
Randy--FYI, we have a case open with Symantec over our BE12 perf issues, 
and told them we are going to go back to 11d. That has them scrambling, 
making us try different settings to TSAFS, and the config file and so 
forth to no avail. So, we really are building the 11d server now.
 
Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 

 

>>> "Randy Grein" <RGrein at tpchd.org> 5/7/2008 10:38 AM >>>
And here I was thinking that SP7 was a big improvement for AFP, but then 
I'm the only one connected that way.

Randy Grein
Sr. Network Engineer

http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged 
information. It has been scanned for viruses. If you are not the intended 
recipient, please notify the sender immediately by return e-mail, delete 
this e-mail and destroy any copies. Any dissemination, use, review, 
disclosure, or distribution of this information by a person other than the 
intended recipient is unauthorized and may be illegal.
**************************************************************************************


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


-- 
BEGIN-ANTISPAM-VOTING-LINKS
------------------------------------------------------

Teach CanIt if this mail (ID 125364586) is spam:
Spam:        
http://milton1.wnyric.org/canit/b.php?i=125364586&m=5791b8fd242d&c=s
Not spam:    
http://milton1.wnyric.org/canit/b.php?i=125364586&m=5791b8fd242d&c=n
Forget vote: 
http://milton1.wnyric.org/canit/b.php?i=125364586&m=5791b8fd242d&c=f
------------------------------------------------------
END-ANTISPAM-VOTING-LINKS



From RGrein at tpchd.org  Thu May  8 22:28:15 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Thu, 08 May 2008 14:28:15 -0700
Subject: AFP Performance Problems
In-Reply-To: <OF4B052CCF.11155BEE-ON85257443.00731731-85257443.00739E34@lancaster.wnyric.org>
References: <482304EC.811E.0072.0@tpchd.org>
	<OF4B052CCF.11155BEE-ON85257443.00731731-85257443.00739E34@lancaster.wnyric.org>
Message-ID: <48230E0B.811E.0072.0@tpchd.org>

Obviously - but I've found I have rather less input here than my position indicates. Ah, management....

Randy Grein
Sr. Network Engineer


>>> <TJohnson at lancaster.wnyric.org> 5/8/2008 2:02 PM >>>
I agree about degrading Netware support, especially for BE.  We just 
switched to Syncsort from BE and it works great for Netware and they have 
excellent support but get ready to cough up some bucks.

I hear that Novanet, one of my favorites, also has dwindling Netware 
support but you may want to check Commvault's Galaxy from what I hear it 
is cheaper than Syncsort and good Netware support.

If you are committed to NW and not planning a Linux or, heaven forbid, an 
MS migration you may want to check out a solution committed to support 
Netware which I think we all know Symantec is not!

Just my 0.02.




"Randy Grein" <RGrein at tpchd.org> 
Sent by: novell-bounces at netlab1.oucs.ox.ac.uk 
05/08/2008 04:51 PM
Please respond to
Novell LAN Interest Group <novell at netlab1.oucs.ox.ac.uk>


To
"Novell LAN Interest Group" <novell at netlab1.oucs.ox.ac.uk>
cc

Subject
Re: AFP Performance Problems






Interesting. I'll let my boss know, but he will just offer the opinion 
that nobody can support Netware anymore. Personally I think it's a 
deliberate choice to degrade support and encourage the migration to a 
single vendor. I love self-serving circular logic.

Randy Grein
Sr. Network Engineer


>>> "Scott Etienne" <Setienne at enesco.com> 5/8/2008 12:07 PM >>>
We rebooted the server last night and today the Mac-user performance 
issues disappeared.
 
Randy--FYI, we have a case open with Symantec over our BE12 perf issues, 
and told them we are going to go back to 11d. That has them scrambling, 
making us try different settings to TSAFS, and the config file and so 
forth to no avail. So, we really are building the 11d server now.
 
Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 

 

>>> "Randy Grein" <RGrein at tpchd.org> 5/7/2008 10:38 AM >>>
And here I was thinking that SP7 was a big improvement for AFP, but then 
I'm the only one connected that way.

Randy Grein
Sr. Network Engineer

http://netlab1.usu.edu/mailman/listinfo/novell 

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged 
information. It has been scanned for viruses. If you are not the intended 
recipient, please notify the sender immediately by return e-mail, delete 
this e-mail and destroy any copies. Any dissemination, use, review, 
disclosure, or distribution of this information by a person other than the 
intended recipient is unauthorized and may be illegal.
**************************************************************************************


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 


-- 
BEGIN-ANTISPAM-VOTING-LINKS
------------------------------------------------------

Teach CanIt if this mail (ID 125364586) is spam:
Spam:        
http://milton1.wnyric.org/canit/b.php?i=125364586&m=5791b8fd242d&c=s 
Not spam:    
http://milton1.wnyric.org/canit/b.php?i=125364586&m=5791b8fd242d&c=n 
Forget vote: 
http://milton1.wnyric.org/canit/b.php?i=125364586&m=5791b8fd242d&c=f 
------------------------------------------------------
END-ANTISPAM-VOTING-LINKS


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From brando.fouts at gmail.com  Fri May  9 03:37:28 2008
From: brando.fouts at gmail.com (Brandon Fouts)
Date: Thu, 8 May 2008 19:37:28 -0700
Subject: BE alternatives - Open Source
Message-ID: <609b18560805081937l39b6b1f1g1c4c6df620cf466@mail.gmail.com>

Seems it might be time to look for Open Source alternatives to Backup.

Perhaps some of you can tell us what you've tried and how it is working.

-- 
=-=-=-=-=-=-=-=-=
www.psnug.org
Puget Sound Network Users Group

Building Technical Skills Through Teamwork And Education.
Helping members realize Open Standards and investigate Open Source.

"Ignorance more frequently begets confidence than does knowledge." Darwin
_____________________
PSNUG dues/food $35 per year -21st anniversary coffee mug
that you can pickup at any meeting - no we don't ship.
pay at monthly meeting or send checks payable to: PSNUG

PSNUG
c/o Brandon Fouts
9549a Olympus Beach Rd NE
Bainbridge Island, WA 98110-3446
==-==-==-==-==-==-==-==-==-==-==

From toomas.aas at raad.tartu.ee  Fri May  9 06:13:59 2008
From: toomas.aas at raad.tartu.ee (Toomas Aas)
Date: Fri, 09 May 2008 08:13:59 +0300
Subject: BE alternatives - Open Source
In-Reply-To: <609b18560805081937l39b6b1f1g1c4c6df620cf466@mail.gmail.com>
References: <609b18560805081937l39b6b1f1g1c4c6df620cf466@mail.gmail.com>
Message-ID: <4823DD97.50206@raad.tartu.ee>

Brandon Fouts wrote:

> Seems it might be time to look for Open Source alternatives to Backup.
> 
> Perhaps some of you can tell us what you've tried and how it is working.

I've forgotten from the beginning of this thread what your platform is, 
but if it's Linux then maybe Amanda (www.amanda.org) is an option. I've 
been using it on Linux and BSD servers since 2001 with great success. 
There's no nice GUI but the software itself is rock solid. However, there 
is no built-in handling for OES specific stuff such as NSS and eDirectory.

--
Toomas Aas


... I went to a general store, but they wouldn't let me buy anything specific.

From mrsmith at oconee.k12.ga.us  Fri May  9 13:17:12 2008
From: mrsmith at oconee.k12.ga.us (Matt Smith)
Date: Fri, 09 May 2008 08:17:12 -0400
Subject: BE alternatives - Open Source
In-Reply-To: <609b18560805081937l39b6b1f1g1c4c6df620cf466@mail.gmail.com>
References: <609b18560805081937l39b6b1f1g1c4c6df620cf466@mail.gmail.com>
Message-ID: <4824088B.E4C1.0068.0@oconee.k12.ga.us>

>>> On 5/8/2008 at 10:37 PM, in message
<609b18560805081937l39b6b1f1g1c4c6df620cf466 at mail.gmail.com>, "Brandon Fouts"
<brando.fouts at gmail.com> wrote:
> Seems it might be time to look for Open Source alternatives to Backup.
> 
> Perhaps some of you can tell us what you've tried and how it is working.


In my last job we used Bacula, http://www.bacula.org , for backing up NSS filesystems.  We had to dump the trustees to file before doing so, though.  That's pretty much going to be the case with any open source solution you choose.  Like Toomas, I've also heard many good things about Amanda as well.  BackupPC, http://backuppc.sourceforge.net/ ,  is also supposed to be another good program, but I don't know much more about it.  

I believe that both Amanda and Bacula are both enterprise capable packages.  I think they both have some sort of SQL agent doohickey.  I think they both have Linux and Windows binaries.  I've heard of BackupPC running in medium-sized environments, but I don't personally know of any large deployments.  

Unfortunately, none of these three have native Netware agents.  They don't understand NSS trustees, and they don't have an eDirectory agent of any sort.  For netware you'd have to mount the NSS volumes on another server that's capable of running the software.  Last I heard, Novell doesn't recommend backing up your eDirectory anyway.  You're expected to have other replica holders to ensure the health and survivability of your tree.  Except for disaster recovery scenarios, I've heard that restoring eDirectory from backups is problematic.

Rsync is also another solution although it's less about a traditional backup than it is about synchronizing files from one file system to another. It does have native Netware binaries though.  I've had mixed success getting it to work reliably on Netware.  I had it running flawlessly on Netware a few years back.  The last time I tried it though, it kept abending my server.  YMMV...

Oh yeah, don't forget that OES Linux has its own backup solution that's supposed to work pretty well.  I haven't tried it yet.  We use CommVault Galaxy at my current job.

-Matt




-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685


From guy at crossflight.co.uk  Mon May 12 14:39:32 2008
From: guy at crossflight.co.uk (Guy Dawson)
Date: Mon, 12 May 2008 14:39:32 +0100
Subject: Can I delete SWP.TMP files in the root of the SYS volume?
Message-ID: <48284894.8060104@crossflight.co.uk>

Hi,

We have a Netware 6.5 SP5 (soon to be SP6) server and about 1GB of
SWP.TMP files in the root of the SYS volume.

I'd like to delete them if that's possbile. The latest datestamp is
from just before the last server reboot.

There is also an active_SWAP_.MEM file which I assume is the active
swap file.

TIA!

Guy
-- --------------------------------------------------------------------
Guy Dawson                 I.T. Systems Manager         Crossflight Ltd
guy at crossflight.co.uk         07973  797819                01753 776104


**********************************************************************
This email contains the views and opinions of a Crossflight Limited
employee and at this stage are in no way a direct representation oF
Crossflight Limited.

Crossflight Limited is an international express courier, mailing and
logistics service provider, and is authorised and regulated by the
Financial Services Authority to conduct General Insurance Business.
This communication and any attachments are confidential and may
be protected from disclosure. We endorse no advice or opinion
contained in this communication that is not the subject of a contract
between the recipient and ourselves.

If you have received it in error please notify us immediately and note
that any storage, use or disclosure is strictly prohibited and may be
unlawful. Those communicating with us by electronic mail will be
deemed to have accepted the risks associated with interception,
amendment, loss and late or incomplete delivery.  They will also be
deemed to have consented to our intercepting and monitoring such
communications.

This footnote also confirms that this email message has been checked
for the presence of computer viruses. We strongly recommend that you
check this email with your own virus software as Crossflight Limited
will not be held responsible for any damage caused by viruses as a
result of opening this email.
**********************************************************************

From Robrinsky at roillc.com  Mon May 12 15:11:14 2008
From: Robrinsky at roillc.com (Robert Obrinsky)
Date: Mon, 12 May 2008 10:11:14 -0400
Subject: Can I delete SWP.TMP files in the root of the SYS volume?
In-Reply-To: <48284894.8060104@crossflight.co.uk>
References: <48284894.8060104@crossflight.co.uk>
Message-ID: <482817C2.9F9C.006D.0@roillc.com>

Guy,
 
You can remove the swap  file by issuing the command 'swap delete sys' at the command prompt. Additonally, you need to add that line to the autoexec.ncf in order to keep it from reappearing on sys every time you boot the server. You might want to move the swap file to another volume by using the appropriate commands in autoexec.ncf. For example:
'swap delete sys'
'swap add vol1' (or whatever your data volume is named).
 
Novell does not recommend disabling virtual memory entirely.
 
Here is one TID regarding virtual memory on Netware servers.
http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=10052744&sliceId=&docTypeID=DT_TID_1_1&dialogID=12755766&stateId=0%200%2012757455 
 
I do not have experience with the SWP.TMP files. HTH.
 
Robert W. Obrinsky
President
Robert Obrinsky Industries, LLC
1824 Newfield Avenue
Stamford CT 06903
203.968.9617 (Office)
203.273.7012 (Mobile)


>>> Guy Dawson <guy at crossflight.co.uk> 5/12/2008 9:39 AM >>>
Hi,

We have a Netware 6.5 SP5 (soon to be SP6) server and about 1GB of
SWP.TMP files in the root of the SYS volume.

I'd like to delete them if that's possbile. The latest datestamp is
from just before the last server reboot.

There is also an active_SWAP_.MEM file which I assume is the active
swap file.

TIA!

Guy
-- --------------------------------------------------------------------
Guy Dawson                 I.T. Systems Manager         Crossflight Ltd
guy at crossflight.co.uk         07973  797819                01753 776104


**********************************************************************
This email contains the views and opinions of a Crossflight Limited
employee and at this stage are in no way a direct representation oF
Crossflight Limited.

Crossflight Limited is an international express courier, mailing and
logistics service provider, and is authorised and regulated by the
Financial Services Authority to conduct General Insurance Business.
This communication and any attachments are confidential and may
be protected from disclosure. We endorse no advice or opinion
contained in this communication that is not the subject of a contract
between the recipient and ourselves.

If you have received it in error please notify us immediately and note
that any storage, use or disclosure is strictly prohibited and may be
unlawful. Those communicating with us by electronic mail will be
deemed to have accepted the risks associated with interception,
amendment, loss and late or incomplete delivery.  They will also be
deemed to have consented to our intercepting and monitoring such
communications.

This footnote also confirms that this email message has been checked
for the presence of computer viruses. We strongly recommend that you
check this email with your own virus software as Crossflight Limited
will not be held responsible for any damage caused by viruses as a
result of opening this email.
**********************************************************************
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From guy at crossflight.co.uk  Mon May 12 20:40:54 2008
From: guy at crossflight.co.uk (Guy Dawson)
Date: Mon, 12 May 2008 20:40:54 +0100
Subject: Can I delete SWP.TMP files in the root of the SYS volume?
In-Reply-To: <482817C2.9F9C.006D.0@roillc.com>
References: <48284894.8060104@crossflight.co.uk>
	<482817C2.9F9C.006D.0@roillc.com>
Message-ID: <48289D46.7040409@crossflight.co.uk>

Robert Obrinsky wrote:
> Guy,
>  
> You can remove the swap  file by issuing the command 'swap delete sys' at
 > the command prompt. Additonally, you need to add that line to the
 > autoexec.ncf in order to keep it from reappearing on sys every time
 > you boot the server. You might want to move the swap file to another
 > volume by using the appropriate commands in autoexec.ncf. For example:
> 'swap delete sys'
> 'swap add vol1' (or whatever your data volume is named).
>  
> Novell does not recommend disabling virtual memory entirely.

Indeed. I'm happy with the swap file on the system volume. It's
currently about 108MB and is not a problem.

> Here is one TID regarding virtual memory on Netware servers.
> http://www.novell.com/support/php/search.do?cmd=displayKC&docType=kc&externalId=10052744&sliceId=&docTypeID=DT_TID_1_1&dialogID=12755766&stateId=0%200%2012757455 
>  
> I do not have experience with the SWP.TMP files. HTH.

It's the 1GB of so of files with names like SWP13976.TMP that I'd
like, if possible to delete. One file alone is 630MB in size. Like
_SWAP_.MEM they're in the root of the system volume but do
not appear to be active. That is, their modification date/time is
not changing while that of _SWAP_.MEM is.


Guy
-- --------------------------------------------------------------------
Guy Dawson                 I.T. Systems Manager         Crossflight Ltd
guy at crossflight.co.uk         07973  797819                01753 776104


**********************************************************************
This email contains the views and opinions of a Crossflight Limited
employee and at this stage are in no way a direct representation oF
Crossflight Limited.

Crossflight Limited is an international express courier, mailing and
logistics service provider, and is authorised and regulated by the
Financial Services Authority to conduct General Insurance Business.
This communication and any attachments are confidential and may
be protected from disclosure. We endorse no advice or opinion
contained in this communication that is not the subject of a contract
between the recipient and ourselves.

If you have received it in error please notify us immediately and note
that any storage, use or disclosure is strictly prohibited and may be
unlawful. Those communicating with us by electronic mail will be
deemed to have accepted the risks associated with interception,
amendment, loss and late or incomplete delivery.  They will also be
deemed to have consented to our intercepting and monitoring such
communications.

This footnote also confirms that this email message has been checked
for the presence of computer viruses. We strongly recommend that you
check this email with your own virus software as Crossflight Limited
will not be held responsible for any damage caused by viruses as a
result of opening this email.
**********************************************************************

From MGlenn at cco.state.oh.us  Mon May 12 22:10:06 2008
From: MGlenn at cco.state.oh.us (Michael Glenn)
Date: Mon, 12 May 2008 17:10:06 -0400
Subject: Looking for BorderManager 3.9 SP1 Overlay ISO
Message-ID: <s8287a1c.057@cco.state.oh.us>

I was led to understand it would be ready by mid-April, but I can't find hide nor hair of it.

Can someone lend me a clue?

Thanks.



From zzz at minneapolis.edu  Mon May 12 19:56:40 2008
From: zzz at minneapolis.edu (zzz)
Date: Mon, 12 May 2008 13:56:40 -0500
Subject: NDPSM abends and high utilization
Message-ID: <s8284cb4.070@halley.mctc.mnscu.edu>

Greetings,

Just looking for some thoughts as I continue troubleshooting repeated
abends today.
Plenty of generic results in my searches, but not finding anything
specific to my config yet.

Of coures, it is finals week here, so the worst possible time.

DEDICATED BOX NW6.0  SP5 and PCOUNTER 5.26.

Server has been pretty stable for some time with no changes made.
I started seeing this a couple of times in the last month, problem
would vanish after a reboot, but today the problem is not going away
after reboot.

Server abended several times today, and each time I reboot it abends
twice.
Each reboot, the NDPS MANAGER hangs on shutdown of printer 81 and 86,
but eventually unloads.
Not sure how to figure out what printers those are, but they may be
part of the problem, or just a symptom.

It does allow most printing, but goes to 100% utilization every few
seconds, then back to normal.

The text from the HP intergrated log viewer shows the following.

______________________________________________________________
Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
NDPSM_TaskThrd_0  Code executing in module UNICODE.NLM v7.0  at offset
+B96h)
_______________________________________________________________

Abend log is attached for anyone that cares to take a look.

I am hoping maybe this is caused by a corrupt job or something, but
still trying to track down.

Thanks for any suggestions.

Dana

-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: NDPSM ABENDS.TXT
Url: http://netlab1.usu.edu/pipermail/novell/attachments/20080512/af0ed12a/attachment-0001.bat 

From randygrein at comcast.net  Tue May 13 14:00:30 2008
From: randygrein at comcast.net (Randy Grein)
Date: Tue, 13 May 2008 06:00:30 -0700
Subject: NDPSM abends and high utilization
In-Reply-To: <s8284cb4.070@halley.mctc.mnscu.edu>
References: <s8284cb4.070@halley.mctc.mnscu.edu>
Message-ID: <54881F87-59B2-404D-872D-139A094A18D9@comcast.net>

If nobody has  a better suggestion I'd track down printers 81 and 86.  
Delete them and restart (to verify they are the problem) and recreate.  
Easy way to get rid of corruption, if it's a corrupt driver.
Randy Grein, Master CNE, CCNA

On May 12, 2008, at 11:56 AM, zzz wrote:

> Greetings,
>
> Just looking for some thoughts as I continue troubleshooting repeated
> abends today.
> Plenty of generic results in my searches, but not finding anything
> specific to my config yet.
>
> Of coures, it is finals week here, so the worst possible time.
>
> DEDICATED BOX NW6.0  SP5 and PCOUNTER 5.26.
>
> Server has been pretty stable for some time with no changes made.
> I started seeing this a couple of times in the last month, problem
> would vanish after a reboot, but today the problem is not going away
> after reboot.
>
> Server abended several times today, and each time I reboot it abends
> twice.
> Each reboot, the NDPS MANAGER hangs on shutdown of printer 81 and 86,
> but eventually unloads.
> Not sure how to figure out what printers those are, but they may be
> part of the problem, or just a symptom.
>
> It does allow most printing, but goes to 100% utilization every few
> seconds, then back to normal.
>
> The text from the HP intergrated log viewer shows the following.
>
> ______________________________________________________________
> Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
> NDPSM_TaskThrd_0  Code executing in module UNICODE.NLM v7.0  at offset
> +B96h)
> _______________________________________________________________
>
> Abend log is attached for anyone that cares to take a look.
>
> I am hoping maybe this is caused by a corrupt job or something, but
> still trying to track down.
>
> Thanks for any suggestions.
>
> Dana
>
> <NDPSM ABENDS.TXT>_______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell


From zzz at minneapolis.edu  Tue May 13 19:01:57 2008
From: zzz at minneapolis.edu (zzz)
Date: Tue, 13 May 2008 13:01:57 -0500
Subject: NDPSM abends and high utilization
Message-ID: <s829915d.082@halley.mctc.mnscu.edu>

Hi Randy,

I searched all the spool folders for any *.1 files from around the time
of the abends, and renamed them.

The problem may have been some bad ADOBE Post Script jobs, as it
rebooted fine after that.

Thanks

Dana



>>> randygrein at comcast.net 5/13/2008 8:00:30 AM >>>
If nobody has  a better suggestion I'd track down printers 81 and 86. 

Delete them and restart (to verify they are the problem) and recreate. 

Easy way to get rid of corruption, if it's a corrupt driver.
Randy Grein, Master CNE, CCNA

On May 12, 2008, at 11:56 AM, zzz wrote:

> Greetings,
>
> Just looking for some thoughts as I continue troubleshooting
repeated
> abends today.
> Plenty of generic results in my searches, but not finding anything
> specific to my config yet.
>
> Of coures, it is finals week here, so the worst possible time.
>
> DEDICATED BOX NW6.0  SP5 and PCOUNTER 5.26.
>
> Server has been pretty stable for some time with no changes made.
> I started seeing this a couple of times in the last month, problem
> would vanish after a reboot, but today the problem is not going away
> after reboot.
>
> Server abended several times today, and each time I reboot it abends
> twice.
> Each reboot, the NDPS MANAGER hangs on shutdown of printer 81 and
86,
> but eventually unloads.
> Not sure how to figure out what printers those are, but they may be
> part of the problem, or just a symptom.
>
> It does allow most printing, but goes to 100% utilization every few
> seconds, then back to normal.
>
> The text from the HP intergrated log viewer shows the following.
>
> ______________________________________________________________
> Fatal Exception (Number 14, Cause Abend: Page Fault Running Process:
> NDPSM_TaskThrd_0  Code executing in module UNICODE.NLM v7.0  at
offset
> +B96h)
> _______________________________________________________________
>
> Abend log is attached for anyone that cares to take a look.
>
> I am hoping maybe this is caused by a corrupt job or something, but
> still trying to track down.
>
> Thanks for any suggestions.
>
> Dana
>
> <NDPSM ABENDS.TXT>_______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell 

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From cmangiarelli at gmail.com  Tue May 13 19:16:29 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 13 May 2008 14:16:29 -0400
Subject: Apache on NetWare - Start Page
Message-ID: <f47566ff0805131116oc758c90m5404e2af64e73e59@mail.gmail.com>

According to a security audit, I need to disable the welcome page that
Apache normally shows and replace it with a legal banner warning.  I
commented out the line "Include
"SYS:/adminsrv/welcome-novell/lib/welcome-apache.conf"" in
sys:\apache2\conf\httpd.conf.  I also replaced the index.html file in
sys:\apache2\htdocs with a customized html file that doesn't do a redirect.
Did a ap2webdn and ap2webup.  When I visit the server address, it still
tries to redirect to http://servername.domain.org/welcome/index/html that
then 404's.  Any idea's how to fix this?

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From cmangiarelli at gmail.com  Tue May 13 23:01:38 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 13 May 2008 18:01:38 -0400
Subject: Missing eDirectory Trustee Rights
Message-ID: <f47566ff0805131501t28ae9b0blfd8e7169c637b47b@mail.gmail.com>

I have a production eDirectory tree that appears to have some trustee
issues.  Basically we are in the process of enabling user home directories.
Easy enough I would think, create the directory, asssign RWCEMF rights to
the user, update their account with the location in the home directory
variable, and add the mapping to the login script.  Did all that, worked
great for pilot.... rolled to the next stage of users and it's been
disastrous.

Basically, the login script errors out when it tries to map their directory
and it turns out that the home directory variable is returning blank/empty
information when it's referenced.  I found an old tid 2918376 from 1997 that
says that the user doesn't have the proper rights to their own object.  So I
take one object in question, add the R rights to [All Attribute Rights] to
the user object and it now allows the home directory attribute to return the
proper information to the home directory login script variable.

My question is what the hell is going on here?  Why are these rights
missing?  I spot checked a dozen users and over half are missing rights to
view their own object data.  I can't go through 2,500+ user objects manually
to fix this.  Does anybody know how to resolve this?  Is granting R to [All
Attribute Rights] to the user object even the proper solution or did I just
find a way to band-aid the problem and not cure the disease?

This tree has gone through many hands and its very old.  Was it not standard
to grant these rights way back?

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From joea at j4computers.com  Tue May 13 23:19:02 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Tue, 13 May 2008 18:19:02 -0400
Subject: Missing eDirectory Trustee Rights
In-Reply-To: <f47566ff0805131501t28ae9b0blfd8e7169c637b47b@mail.gmail.com>
References: <f47566ff0805131501t28ae9b0blfd8e7169c637b47b@mail.gmail.com>
Message-ID: <4829DB96.917D.0085.0@j4computers.com>

What is different about how the pilot users were created and how the roll out users were created?

I tend to think you could create a file and fix them with trustee . . . oh, hell, I forget, but jrb utilities should be able to help.

joe a.

>>> On 5/13/2008 at 6:01 PM, "Christopher Mangiarelli" <cmangiarelli at gmail.com>
wrote:
> I have a production eDirectory tree that appears to have some trustee
> issues.  Basically we are in the process of enabling user home directories.
> Easy enough I would think, create the directory, asssign RWCEMF rights to
> the user, update their account with the location in the home directory
> variable, and add the mapping to the login script.  Did all that, worked
> great for pilot.... rolled to the next stage of users and it's been
> disastrous.
> 
> Basically, the login script errors out when it tries to map their directory
> and it turns out that the home directory variable is returning blank/empty
> information when it's referenced.  I found an old tid 2918376 from 1997 that
> says that the user doesn't have the proper rights to their own object.  So I
> take one object in question, add the R rights to [All Attribute Rights] to
> the user object and it now allows the home directory attribute to return the
> proper information to the home directory login script variable.
> 
> My question is what the hell is going on here?  Why are these rights
> missing?  I spot checked a dozen users and over half are missing rights to
> view their own object data.  I can't go through 2,500+ user objects manually
> to fix this.  Does anybody know how to resolve this?  Is granting R to [All
> Attribute Rights] to the user object even the proper solution or did I just
> find a way to band-aid the problem and not cure the disease?
> 
> This tree has gone through many hands and its very old.  Was it not standard
> to grant these rights way back?


From cmangiarelli at gmail.com  Wed May 14 00:17:51 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 13 May 2008 19:17:51 -0400
Subject: Missing eDirectory Trustee Rights
In-Reply-To: <4829DB96.917D.0085.0@j4computers.com>
References: <f47566ff0805131501t28ae9b0blfd8e7169c637b47b@mail.gmail.com>
	<4829DB96.917D.0085.0@j4computers.com>
Message-ID: <f47566ff0805131617t255b1f49ha58b281aa60f7fcd@mail.gmail.com>

The first set of people were technical folks.  Almost all of the IT people
are new, so the accounts were recently created with either ConsoleOne or
iManager.  Now we are rolling out to the high level exec's, all of whom have
been around for a long time.  Their accounts were created with either
NWADMIN or ConsoleOne.

I figured I could find a way to automate the rights addition, but I'm not
even sure if that's the solution.  If I do an effective rights for some
users, I see they have C and R rights to their home directory attribute, but
not necessary through a specific trustee relationship.  It's tough to track
back where rights are actually coming from; which also doesn't make sense
because all of the users are in one container, so if some users were
inheriting their rights from higher up the tree, then all users in that
container should be able to see the same attributes (and yes, I checked to
make sure the user object itself didn't have an IRF blocking inheritance).

I'll have to look more into inheritance tomorrow.

On Tue, May 13, 2008 at 6:19 PM, joea at j4computers.com <joea at j4computers.com>
wrote:

> What is different about how the pilot users were created and how the roll
> out users were created?
>
> I tend to think you could create a file and fix them with trustee . . .
> oh, hell, I forget, but jrb utilities should be able to help.
>
> joe a.
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From joea at j4computers.com  Wed May 14 00:45:42 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Tue, 13 May 2008 19:45:42 -0400
Subject: Missing eDirectory Trustee Rights
In-Reply-To: <f47566ff0805131617t255b1f49ha58b281aa60f7fcd@mail.gmail.com>
References: <f47566ff0805131501t28ae9b0blfd8e7169c637b47b@mail.gmail.com>
	<4829DB96.917D.0085.0@j4computers.com>
	<f47566ff0805131617t255b1f49ha58b281aa60f7fcd@mail.gmail.com>
Message-ID: <4829EFE2.917D.0085.0@j4computers.com>

Where I was going was, some sort of automated account creation fubar.

There is a novell program called dsrights that can help determine where the rights came from.   Since the rights for home directories should be imparted explictly, inheritance should not be an issue.

While this may have nothing to do with your situation, rights can also be imparted by schema definitions.  It's not something I am intimately familiar with.

joe a.

>>> On 5/13/2008 at 7:17 PM, "Christopher Mangiarelli" <cmangiarelli at gmail.com>
wrote:
> The first set of people were technical folks.  Almost all of the IT people
> are new, so the accounts were recently created with either ConsoleOne or
> iManager.  Now we are rolling out to the high level exec's, all of whom have
> been around for a long time.  Their accounts were created with either
> NWADMIN or ConsoleOne.
> 
> I figured I could find a way to automate the rights addition, but I'm not
> even sure if that's the solution.  If I do an effective rights for some
> users, I see they have C and R rights to their home directory attribute, but
> not necessary through a specific trustee relationship.  It's tough to track
> back where rights are actually coming from; which also doesn't make sense
> because all of the users are in one container, so if some users were
> inheriting their rights from higher up the tree, then all users in that
> container should be able to see the same attributes (and yes, I checked to
> make sure the user object itself didn't have an IRF blocking inheritance).
> 
> I'll have to look more into inheritance tomorrow.
> 
> On Tue, May 13, 2008 at 6:19 PM, joea at j4computers.com <joea at j4computers.com>
> wrote:
> 
>> What is different about how the pilot users were created and how the roll
>> out users were created?
>>
>> I tend to think you could create a file and fix them with trustee . . .
>> oh, hell, I forget, but jrb utilities should be able to help.
>>
>> joe a.
>>


From MGOVENDE at mf.co.za  Wed May 14 07:53:17 2008
From: MGOVENDE at mf.co.za (Morgan Govender)
Date: Wed, 14 May 2008 08:53:17 +0200
Subject: From a previous posting:
Message-ID: <s82aa887.046@mf.co.za>

>From a previous posting:
 
Raid 5 with 3 disks is slower than a single disk on it's own.  5 disks
in a raid set is between 2 & 3 times as fast (to read) as a 3 disk RAID
5
 
 
Any references, tech papers to backup this? Not to convince me but
rather my management?

Please consider the environment before printing this e-mail. 

By receiving, reading or acting upon this email you will automatically be bound by the terms of the  Email Legal Notice which can be viewed at http://www.mf.co.za/Disclaimer/Pages/E-mailDisclaimer.aspx  , or send a blank email to disclaim at mf.co.za to obtain a copy. 
Mutual & Federal Insurance Company Limited is an Authorised Financial Services Provider
-----


From tim at nds8.co.uk  Wed May 14 08:06:32 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Wed, 14 May 2008 08:06:32 +0100
Subject: From a previous posting:
In-Reply-To: <s82aa887.046@mf.co.za>
References: <s82aa887.046@mf.co.za>
Message-ID: <482A9D88020000BB0008CA36@mail2.nds8.com>

www.nds8.co.uk/brainshare and have a look at the RAID5 document.

:-)

T


-- 

>>> On 14 May 2008 at 07:53, "Morgan Govender" <MGOVENDE at mf.co.za> wrote:
>> From a previous posting:
>  
> Raid 5 with 3 disks is slower than a single disk on it's own.  5 disks
> in a raid set is between 2 & 3 times as fast (to read) as a 3 disk RAID
> 5
>  
>  
> Any references, tech papers to backup this? Not to convince me but
> rather my management?
> 
> Please consider the environment before printing this e-mail. 
> 
> By receiving, reading or acting upon this email you will automatically be 
> bound by the terms of the  Email Legal Notice which can be viewed at 
> http://www.mf.co.za/Disclaimer/Pages/E-mailDisclaimer.aspx  , or send a blank 
> email to disclaim at mf.co.za to obtain a copy. 
> Mutual & Federal Insurance Company Limited is an Authorised Financial 
> Services Provider
> -----
> 
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From JRD at cc.usu.edu  Wed May 14 11:03:11 2008
From: JRD at cc.usu.edu (Joe Doupnik)
Date: Wed, 14 May 2008 04:03:11 -0600 (MDT)
Subject: Apache on NetWare - Start Page
Message-ID: <01MURJT79ZCU8Y6P3X@cc.usu.edu>

>According to a security audit, I need to disable the welcome page that
>Apache normally shows and replace it with a legal banner warning.  I
>commented out the line "Include
>"SYS:/adminsrv/welcome-novell/lib/welcome-apache.conf"" in
>sys:\apache2\conf\httpd.conf.  I also replaced the index.html file in
>sys:\apache2\htdocs with a customized html file that doesn't do a redirect.
>Did a ap2webdn and ap2webup.  When I visit the server address, it still
>tries to redirect to http://servername.domain.org/welcome/index/html that
>then 404's.  Any idea's how to fix this?
>
>-- 
>Christopher Mangiarelli
>cmangiarelli at gmail.com
--------
	NW 6.5: put everything back to normal. Then add file index.html in
direcory sys:\adminsrv\webapps\welcome. This will override the language
specific index.html files which you wish to hide. To reveal those welcome files
through your own index.html add a link to http://yourserver/index.html.en
(or other language of choice).
	Joe D.

From mrsmith at oconee.k12.ga.us  Wed May 14 13:12:08 2008
From: mrsmith at oconee.k12.ga.us (Matt Smith)
Date: Wed, 14 May 2008 08:12:08 -0400
Subject: From a previous posting:
In-Reply-To: <482A9D88020000BB0008CA36@mail2.nds8.com>
References: <s82aa887.046@mf.co.za> <482A9D88020000BB0008CA36@mail2.nds8.com>
Message-ID: <482A9E5E.E4C1.0068.0@oconee.k12.ga.us>

>>> On 5/14/2008 at 3:06 AM, in message <482A9D88020000BB0008CA36 at mail2.nds8.com>,
"Tim Heywood" <tim at nds8.co.uk> wrote:
> www.nds8.co.uk/brainshare and have a look at the RAID5 document.
> 
> :-)
> 
> T
> 


I don't see a RAID5 document.

-Matt
-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685


From randygrein at comcast.net  Wed May 14 14:08:42 2008
From: randygrein at comcast.net (Randy Grein)
Date: Wed, 14 May 2008 06:08:42 -0700
Subject: From a previous posting:
In-Reply-To: <s82aa887.046@mf.co.za>
References: <s82aa887.046@mf.co.za>
Message-ID: <BC825FA2-4413-47A0-96AF-64AA9276FB1A@comcast.net>

Matt,
I've posted on this a number of times. I believe my article in  
NetworkVAR magazine (Where RAID Excels, Feb '97) is one of the first  
published instances where the issue is discussed. Since then I have  
formulated the problem in mathematical terms and informally published  
the results a number of times, here and elsewhere. The magazine is  
long out of print but if you're interested I have an electronic copy  
somewhere; contact me offlist. (I can't find the original published on  
the web anymore with google, but I did find several references to it  
in patent documents. Sad.)

FWIW the statement quoted should be that 3 drive RAID 5 WRITES are  
slower than a single drive, RAID 0, 1,  1,0, 5 and 6 have similar  
performance in multi-access server reads which confuses the issue.  
Caching controllers mask the problem somewhat but can create blockage  
problems when disk writes pile up.

Randy Grein, Master CNE, CCNA

On May 13, 2008, at 11:53 PM, Morgan Govender wrote:

>> From a previous posting:
>
> Raid 5 with 3 disks is slower than a single disk on it's own.  5 disks
> in a raid set is between 2 & 3 times as fast (to read) as a 3 disk  
> RAID
> 5
>
>
> Any references, tech papers to backup this? Not to convince me but
> rather my management?
>
> Please consider the environment before printing this e-mail.
>
> By receiving, reading or acting upon this email you will  
> automatically be bound by the terms of the  Email Legal Notice which  
> can be viewed at http://www.mf.co.za/Disclaimer/Pages/E-mailDisclaimer.aspx 
>   , or send a blank email to disclaim at mf.co.za to obtain a copy.
> Mutual & Federal Insurance Company Limited is an Authorised  
> Financial Services Provider
> -----
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell


From automatedprocess at bellsouth.net  Wed May 14 16:45:35 2008
From: automatedprocess at bellsouth.net (Stephen Cummings)
Date: Wed, 14 May 2008 11:45:35 -0400
Subject: iManager 2.7
Message-ID: <00b801c8b5d9$8e1ac970$0301a8c0@apcdesktop>

Hey guys, where is iPrint in iManager 2.7. Is it another product now? Please advise

Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE

From JRD at cc.usu.edu  Wed May 14 15:49:38 2008
From: JRD at cc.usu.edu (Joe Doupnik)
Date: Wed, 14 May 2008 08:49:38 -0600 (MDT)
Subject: iManager 2.7
Message-ID: <01MURTW9W2F68Y6P8Z@cc.usu.edu>

>Hey guys, where is iPrint in iManager 2.7. Is it another product now? Please advise
>
>Stephen Cummings
>A+, Net +, CNA 5x, 6x,
>CNE 5x, 6x, NAI, CNI,
>MCNE
--------------
	Shows fine here. Likely you need to review how you got to the present
point, ensure the iManager plugins are installed, it would not hurt to review
the RBS part of this as well.
	Joe D.

From automatedprocess at bellsouth.net  Wed May 14 17:02:20 2008
From: automatedprocess at bellsouth.net (Stephen Cummings)
Date: Wed, 14 May 2008 12:02:20 -0400
Subject: iManager 2.7
References: <01MURTW9W2F68Y6P8Z@cc.usu.edu>
Message-ID: <00ea01c8b5db$e448ca20$0301a8c0@apcdesktop>

Quick background.......
1. Downloaded from Novell's website
2. Installed from the folder INSTALLS
3. Followed all of the screen prompts
4. Once installed, I just click on the link on the screen and it initiates
iManager.

Where did I go wrong or what is missing or what step did I skip by
defaulting rather than customizing


Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,

----- Original Message ----- 
From: "Joe Doupnik" <JRD at cc.usu.edu>
To: <novell at netlab1.oucs.ox.ac.uk>
Sent: Wednesday, May 14, 2008 10:49 AM
Subject: Re: iManager 2.7


> >Hey guys, where is iPrint in iManager 2.7. Is it another product now?
Please advise
> >
> >Stephen Cummings
> >A+, Net +, CNA 5x, 6x,
> >CNE 5x, 6x, NAI, CNI,
> >MCNE
> --------------
> Shows fine here. Likely you need to review how you got to the present
> point, ensure the iManager plugins are installed, it would not hurt to
review
> the RBS part of this as well.
> Joe D.
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



From borys at yorku.ca  Wed May 14 16:10:01 2008
From: borys at yorku.ca (Borys J Nakonecznyj)
Date: Wed, 14 May 2008 11:10:01 -0400
Subject: SNMP on Netware
Message-ID: <OFCADA2667.0D9061D2-ON85257449.0052C9DD-85257449.005350DD@yorku.ca>

Hello; 

I'm sorry to be asking what is probably a dumb question, however, is it 
possible to enable SNMP v3 in a Netware 6.5 sp7 server? 
It seems that the default snmp is v1 - can we upgrade to v3? 
If so, can someone give me some pointers on how would I go about doing it? 


Thanks 

___________________________________

 Borys Nakonecznyj
 Senior Systems Administrator
 Workgroup Technology Services
 CNS
 York University
 Email - borys at yorku.ca
 Phone - (416) 736-2100 xt 22693

__________________________________

From cmangiarelli at gmail.com  Wed May 14 16:31:52 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Wed, 14 May 2008 11:31:52 -0400
Subject: iManager 2.7
In-Reply-To: <00ea01c8b5db$e448ca20$0301a8c0@apcdesktop>
References: <01MURTW9W2F68Y6P8Z@cc.usu.edu>
	<00ea01c8b5db$e448ca20$0301a8c0@apcdesktop>
Message-ID: <f47566ff0805140831t54b2d83cka16616749197fe5@mail.gmail.com>

Is this for Mobile iManager?  The default install only gives you a few
plugins.  You still need to install additional plugins for your
environment.  If iManager has access to the internet, it can download the
plugins for you, otherwise you need to go to support.novell.com and download
the npm files manually and install them yourself.

On Wed, May 14, 2008 at 12:02 PM, Stephen Cummings <
automatedprocess at bellsouth.net> wrote:

> Quick background.......
> 1. Downloaded from Novell's website
> 2. Installed from the folder INSTALLS
> 3. Followed all of the screen prompts
> 4. Once installed, I just click on the link on the screen and it initiates
> iManager.
>
> Where did I go wrong or what is missing or what step did I skip by
> defaulting rather than customizing
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From cmangiarelli at gmail.com  Wed May 14 16:51:18 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Wed, 14 May 2008 11:51:18 -0400
Subject: NAMED.NLM and DNS Caching
Message-ID: <f47566ff0805140851o33a0cbf8ue046024c6c0ada2c@mail.gmail.com>

How does one clear the cache for DNS/NAMED.NLM running on NW65SP6?

We have a vendor who had some local issues with their dns and ip addresses
getting mixed up.  They have corrected the problem on their end and I've
verified that a nslookup against my providers DNS servers is providing the
correct IP for a specific host.  However, when I nslookup against my Novell
servers, it is providing the old IP address.  I've tried unloading and
reloading NAMED.NLM.  I've issued a NAMED.NLM -PA to purge all cache.  I'm
out of idea's.  Anybody else know how to clear this entry?

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From smf34 at cam.ac.uk  Wed May 14 17:00:44 2008
From: smf34 at cam.ac.uk (Simon Flood)
Date: Wed, 14 May 2008 17:00:44 +0100
Subject: NAMED.NLM and DNS Caching
In-Reply-To: <f47566ff0805140851o33a0cbf8ue046024c6c0ada2c@mail.gmail.com>
References: <f47566ff0805140851o33a0cbf8ue046024c6c0ada2c@mail.gmail.com>
Message-ID: <482B0CAC.1010809@cam.ac.uk>

On 14/05/2008 16:51, Christopher Mangiarelli wrote:

> How does one clear the cache for DNS/NAMED.NLM running on NW65SP6?
> 
> We have a vendor who had some local issues with their dns and ip addresses
> getting mixed up.  They have corrected the problem on their end and I've
> verified that a nslookup against my providers DNS servers is providing the
> correct IP for a specific host.  However, when I nslookup against my Novell
> servers, it is providing the old IP address.  I've tried unloading and
> reloading NAMED.NLM.  I've issued a NAMED.NLM -PA to purge all cache.  I'm
> out of idea's.  Anybody else know how to clear this entry?

Have you tried 'named -pa' (ie. without the .nlm bit)?

Hope this helps,
Simon

From smf34 at cam.ac.uk  Wed May 14 17:02:27 2008
From: smf34 at cam.ac.uk (Simon Flood)
Date: Wed, 14 May 2008 17:02:27 +0100
Subject: SNMP on Netware
In-Reply-To: <OFCADA2667.0D9061D2-ON85257449.0052C9DD-85257449.005350DD@yorku.ca>
References: <OFCADA2667.0D9061D2-ON85257449.0052C9DD-85257449.005350DD@yorku.ca>
Message-ID: <482B0D13.5050000@cam.ac.uk>

On 14/05/2008 16:10, Borys J Nakonecznyj wrote:

> I'm sorry to be asking what is probably a dumb question, however, is it 
> possible to enable SNMP v3 in a Netware 6.5 sp7 server? 
> It seems that the default snmp is v1 - can we upgrade to v3? 
> If so, can someone give me some pointers on how would I go about doing it? 

According to TID 3695383 SNMPv3 is not supported in Novell products and 
NetWare only does SNMPv1.

Hope this helps,
Simon

From Robrinsky at roillc.com  Wed May 14 17:05:31 2008
From: Robrinsky at roillc.com (Robert Obrinsky)
Date: Wed, 14 May 2008 12:05:31 -0400
Subject: NAMED.NLM and DNS Caching
In-Reply-To: <f47566ff0805140851o33a0cbf8ue046024c6c0ada2c@mail.gmail.com>
References: <f47566ff0805140851o33a0cbf8ue046024c6c0ada2c@mail.gmail.com>
Message-ID: <482AD591.9F9C.006D.0@roillc.com>

Check to see if you have defined an 'A' record in your zone. Or, check your hosts file for an entry.
 
Robert W. Obrinsky
President
Robert Obrinsky Industries, LLC
1824 Newfield Avenue
Stamford CT 06903
203.968.9617 (Office)
203.273.7012 (Mobile)


>>> "Christopher Mangiarelli" <cmangiarelli at gmail.com> 5/14/2008 11:51 AM >>>
How does one clear the cache for DNS/NAMED.NLM running on NW65SP6?

We have a vendor who had some local issues with their dns and ip addresses
getting mixed up.  They have corrected the problem on their end and I've
verified that a nslookup against my providers DNS servers is providing the
correct IP for a specific host.  However, when I nslookup against my Novell
servers, it is providing the old IP address.  I've tried unloading and
reloading NAMED.NLM.  I've issued a NAMED.NLM -PA to purge all cache.  I'm
out of idea's.  Anybody else know how to clear this entry?

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com 
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From mrsmith at oconee.k12.ga.us  Wed May 14 17:22:18 2008
From: mrsmith at oconee.k12.ga.us (Matt Smith)
Date: Wed, 14 May 2008 12:22:18 -0400
Subject: Sharing user files via the web
Message-ID: <482AD976.E4C1.0068.0@oconee.k12.ga.us>

Recently our school system was discussing disk quotas, usage etc.  We do have a lot of file duplication, particularly between user home directories and large shared directories that we maintain.  One solution proposed was to allow end users to move files to a folder that would be web accessible by teachers and possibly other students.  

I remember this as being fairly easy with Netware, but I'm not exactly sure how to easily accomplish this on an OES Linux server.  Basically, I'd like to have a subdirectory in everyone's home directory called "www" or "web" or something that users could drag their files into and have them be web accessible.  

I know this can be done, but I was hoping to emphasize the "easy solution" part of my question.  I'm snowed under with projects.  I really can't devote a lot of time to researching this particular issue right now.  

Thanks, 

-Matt
-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685


From TJohnson at lancaster.wnyric.org  Wed May 14 17:47:46 2008
From: TJohnson at lancaster.wnyric.org (TJohnson at lancaster.wnyric.org)
Date: Wed, 14 May 2008 12:47:46 -0400
Subject: Sharing user files via the web
In-Reply-To: <482AD976.E4C1.0068.0@oconee.k12.ga.us>
Message-ID: <OF55031C35.71835C1C-ON85257449.005BAFD9-85257449.005C43EC@lancaster.wnyric.org>

You may want to think about netstorage.  Easy to install and you can set 
it up so that users will see their mapped drives over the Net.  No need to 
create subfolders.  The interface is not drag and drop, you have to 
download files to edit and upload to save but we rolled it out to some 
staff in our school district and they raved about it.

For more flexibility you could use iFolder but that means a client on the 
PC that will be accessing and/or synchronizing files which may be a deal 
breaker.

Hope this helps.

Tim Johnson
Lancaster Central School District
Lancaster, NY




"Matt Smith" <mrsmith at oconee.k12.ga.us> 
Sent by: novell-bounces at netlab1.oucs.ox.ac.uk
05/14/2008 12:23 PM
Please respond to
Novell LAN Interest Group <novell at netlab1.oucs.ox.ac.uk>


To
"Novell LAN Interest Group" <novell at netlab1.oucs.ox.ac.uk>
cc

Subject
Sharing user files via the web






Recently our school system was discussing disk quotas, usage etc.  We do 
have a lot of file duplication, particularly between user home directories 
and large shared directories that we maintain.  One solution proposed was 
to allow end users to move files to a folder that would be web accessible 
by teachers and possibly other students. 

I remember this as being fairly easy with Netware, but I'm not exactly 
sure how to easily accomplish this on an OES Linux server.  Basically, I'd 
like to have a subdirectory in everyone's home directory called "www" or 
"web" or something that users could drag their files into and have them be 
web accessible. 

I know this can be done, but I was hoping to emphasize the "easy solution" 
part of my question.  I'm snowed under with projects.  I really can't 
devote a lot of time to researching this particular issue right now. 

Thanks, 

-Matt
-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


-- 
BEGIN-ANTISPAM-VOTING-LINKS
------------------------------------------------------

Teach CanIt if this mail (ID 126145835) is spam:
Spam:        
http://milton1.wnyric.org/canit/b.php?i=126145835&m=d56a91e2a5d9&c=s
Not spam:    
http://milton1.wnyric.org/canit/b.php?i=126145835&m=d56a91e2a5d9&c=n
Forget vote: 
http://milton1.wnyric.org/canit/b.php?i=126145835&m=d56a91e2a5d9&c=f
------------------------------------------------------
END-ANTISPAM-VOTING-LINKS



From cmangiarelli at gmail.com  Wed May 14 18:22:22 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Wed, 14 May 2008 13:22:22 -0400
Subject: NAMED.NLM and DNS Caching
In-Reply-To: <482AD591.9F9C.006D.0@roillc.com>
References: <f47566ff0805140851o33a0cbf8ue046024c6c0ada2c@mail.gmail.com>
	<482AD591.9F9C.006D.0@roillc.com>
Message-ID: <f47566ff0805141022v24b33905w295c62daea52845c@mail.gmail.com>

Tried named -pa, didn't help.

Nothing in sys:etc\hosts for this server.

No A record that I can see for this name in my own DNS.


On Wed, May 14, 2008 at 12:05 PM, Robert Obrinsky <Robrinsky at roillc.com>
wrote:

> Check to see if you have defined an 'A' record in your zone. Or, check your
> hosts file for an entry.
>
> Robert W. Obrinsky
> President
> Robert Obrinsky Industries, LLC
> 1824 Newfield Avenue
> Stamford CT 06903
> 203.968.9617 (Office)
> 203.273.7012 (Mobile)
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From Robrinsky at roillc.com  Wed May 14 19:03:57 2008
From: Robrinsky at roillc.com (Robert Obrinsky)
Date: Wed, 14 May 2008 14:03:57 -0400
Subject: NAMED.NLM and DNS Caching
In-Reply-To: <f47566ff0805141022v24b33905w295c62daea52845c@mail.gmail.com>
References: <f47566ff0805140851o33a0cbf8ue046024c6c0ada2c@mail.gmail.com>
	<482AD591.9F9C.006D.0@roillc.com>
	<f47566ff0805141022v24b33905w295c62daea52845c@mail.gmail.com>
Message-ID: <482AF152.9F9C.006D.0@roillc.com>

Got Wireshark? I would want to see what's happening on the wire at this point, because based on everything I've seen so far, you are doing everything correctly.

>>> "Christopher Mangiarelli" <cmangiarelli at gmail.com> 5/14/2008 1:22 PM >>>
Tried named -pa, didn't help.

Nothing in sys:etc\hosts for this server.

No A record that I can see for this name in my own DNS.


On Wed, May 14, 2008 at 12:05 PM, Robert Obrinsky <Robrinsky at roillc.com>
wrote:

> Check to see if you have defined an 'A' record in your zone. Or, check your
> hosts file for an entry.
>
> Robert W. Obrinsky
> President
> Robert Obrinsky Industries, LLC
> 1824 Newfield Avenue
> Stamford CT 06903
> 203.968.9617 (Office)
> 203.273.7012 (Mobile)
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com 
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From Setienne at enesco.com  Wed May 14 19:32:23 2008
From: Setienne at enesco.com (Scott Etienne)
Date: Wed, 14 May 2008 13:32:23 -0500
Subject: NAMED.NLM and DNS Caching
In-Reply-To: <482AF152.9F9C.006D.0@roillc.com>
References: <f47566ff0805140851o33a0cbf8ue046024c6c0ada2c@mail.gmail.com>
	<482AD591.9F9C.006D.0@roillc.com>
	<f47566ff0805141022v24b33905w295c62daea52845c@mail.gmail.com>
	<482AF152.9F9C.006D.0@roillc.com>
Message-ID: <482AE9E7.8A77.004D.0@enesco.com>

When we load and reload named, we always use the switches: load named -r ON -ft ON
 
Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 

 


>>> "Robert Obrinsky" <Robrinsky at roillc.com> 5/14/2008 1:03 PM >>>
Got Wireshark? I would want to see what's happening on the wire at this point, because based on everything I've seen so far, you are doing everything correctly.

>>> "Christopher Mangiarelli" <cmangiarelli at gmail.com> 5/14/2008 1:22 PM >>>
Tried named -pa, didn't help.

Nothing in sys:etc\hosts for this server.

No A record that I can see for this name in my own DNS.


On Wed, May 14, 2008 at 12:05 PM, Robert Obrinsky <Robrinsky at roillc.com>
wrote:

> Check to see if you have defined an 'A' record in your zone. Or, check your
> hosts file for an entry.
>
> Robert W. Obrinsky
> President
> Robert Obrinsky Industries, LLC
> 1824 Newfield Avenue
> Stamford CT 06903
> 203.968.9617 (Office)
> 203.273.7012 (Mobile)
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com 
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From joea at j4computers.com  Wed May 14 19:45:18 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Wed, 14 May 2008 14:45:18 -0400
Subject: NAMED.NLM and DNS Caching
Message-ID: <482AFAFE020000850005DE07@FS-LIN-OES>

Maybe resolv.cfg is looking at another name server, which has not updated yet?

joe a.

>>> "Christopher Mangiarelli" <cmangiarelli at gmail.com> 05/14/08 1:23 PM >>>
Tried named -pa, didn't help.

Nothing in sys:etc\hosts for this server.

No A record that I can see for this name in my own DNS.


On Wed, May 14, 2008 at 12:05 PM, Robert Obrinsky <Robrinsky at roillc.com>
wrote:

> Check to see if you have defined an 'A' record in your zone. Or, check your
> hosts file for an entry.
>
> Robert W. Obrinsky
> President
> Robert Obrinsky Industries, LLC
> 1824 Newfield Avenue
> Stamford CT 06903
> 203.968.9617 (Office)
> 203.273.7012 (Mobile)
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


From tim at nds8.co.uk  Wed May 14 19:43:03 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Wed, 14 May 2008 19:43:03 +0100
Subject: From a previous posting:
In-Reply-To: <482A9E5E.E4C1.0068.0@oconee.k12.ga.us>
References: <s82aa887.046@mf.co.za> <482A9D88020000BB0008CA36@mail2.nds8.com>
	<482A9E5E.E4C1.0068.0@oconee.k12.ga.us>
Message-ID: <482B40C7020000BB0008CCB9@mail2.nds8.com>

It is based on Randy's document I have to confess - I'll find out why it is missing.

T


-- 

>>> On 14 May 2008 at 13:12, "Matt Smith" <mrsmith at oconee.k12.ga.us> wrote:
>>>> On 5/14/2008 at 3:06 AM, in message <482A9D88020000BB0008CA36 at mail2.nds8.com>,
> "Tim Heywood" <tim at nds8.co.uk> wrote:
>> www.nds8.co.uk/brainshare and have a look at the RAID5 document.
>> 
>> :-)
>> 
>> T
>> 
> 
> 
> I don't see a RAID5 document.
> 
> -Matt

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From RGrein at tpchd.org  Wed May 14 20:17:04 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Wed, 14 May 2008 12:17:04 -0700
Subject: From a previous posting:
In-Reply-To: <482B40C7020000BB0008CCB9@mail2.nds8.com>
References: <s82aa887.046@mf.co.za> <482A9D88020000BB0008CA36@mail2.nds8.com>
	<482A9E5E.E4C1.0068.0@oconee.k12.ga.us>
	<482B40C7020000BB0008CCB9@mail2.nds8.com>
Message-ID: <482AD860.811E.0072.0@tpchd.org>

Let me know if you need the complete writeup.

Randy Grein
Sr. Network Engineer


>>> "Tim Heywood" <tim at nds8.co.uk> 5/14/2008 11:43 AM >>>
It is based on Randy's document I have to confess - I'll find out why it is missing.

T


-- 

>>> On 14 May 2008 at 13:12, "Matt Smith" <mrsmith at oconee.k12.ga.us> wrote:
>>>> On 5/14/2008 at 3:06 AM, in message <482A9D88020000BB0008CA36 at mail2.nds8.com>,
> "Tim Heywood" <tim at nds8.co.uk> wrote:
>> www.nds8.co.uk/brainshare and have a look at the RAID5 document.
>> 
>> :-)
>> 
>> T
>> 
> 
> 
> I don't see a RAID5 document.
> 
> -Matt

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From mgorn at fxcm.com  Wed May 14 22:53:47 2008
From: mgorn at fxcm.com (Michael Gorn)
Date: Wed, 14 May 2008 17:53:47 -0400
Subject: SLES 10 SP2
Message-ID: <482B272B.A227.00C4.0@fxcm.com>

Does anyone know when SP2 for SLES 10 will come out?
Thanks.
 
Mike.


From cmangiarelli at gmail.com  Wed May 14 23:17:28 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Wed, 14 May 2008 18:17:28 -0400
Subject: NAMED.NLM and DNS Caching
In-Reply-To: <482AFAFE020000850005DE07@FS-LIN-OES>
References: <482AFAFE020000850005DE07@FS-LIN-OES>
Message-ID: <f47566ff0805141517s7209c501g954587a347458a1f@mail.gmail.com>

Due to the firewall, it is hard for me to check the upstream DNS servers as
most of my requests are blocked.  I think one of the upstream DNS hosts
might still have the old address.  I need to speak with our firewall folks.
They wrote in the ticket that they have confirmed that our internet vendor
has updated their DNS servers (lies!!! haha), however nslookup from the
server says otherwise... unless NW itself has an internal DNS cache similar
to Windows workstations that needs to be cleared.

On Wed, May 14, 2008 at 2:45 PM, joea at j4computers.com <joea at j4computers.com>
wrote:

> Maybe resolv.cfg is looking at another name server, which has not updated
> yet?
>
> joe a.
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From joea at j4computers.com  Thu May 15 00:24:19 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Wed, 14 May 2008 19:24:19 -0400
Subject: NAMED.NLM and DNS Caching
In-Reply-To: <f47566ff0805141517s7209c501g954587a347458a1f@mail.gmail.com>
References: <482AFAFE020000850005DE07@FS-LIN-OES>
	<f47566ff0805141517s7209c501g954587a347458a1f@mail.gmail.com>
Message-ID: <482B3C62.917D.0085.0@j4computers.com>

Nslookup can be told what name server to ask for the info.  I think the NW version can do that, anyway.   That way you will know which one has the old info in it.

Otherwise, I think it goes by what resolv.cfg has in it for what name servers to use.

joe a.

>>> On 5/14/2008 at 6:17 PM, "Christopher Mangiarelli" <cmangiarelli at gmail.com>
wrote:
> Due to the firewall, it is hard for me to check the upstream DNS servers as
> most of my requests are blocked.  I think one of the upstream DNS hosts
> might still have the old address.  I need to speak with our firewall folks.
> They wrote in the ticket that they have confirmed that our internet vendor
> has updated their DNS servers (lies!!! haha), however nslookup from the
> server says otherwise... unless NW itself has an internal DNS cache similar
> to Windows workstations that needs to be cleared.
> 
> On Wed, May 14, 2008 at 2:45 PM, joea at j4computers.com <joea at j4computers.com>
> wrote:
> 
>> Maybe resolv.cfg is looking at another name server, which has not updated
>> yet?
>>
>> joe a.
>>


From automatedprocess at bellsouth.net  Thu May 15 13:12:28 2008
From: automatedprocess at bellsouth.net (Stephen Cummings)
Date: Thu, 15 May 2008 08:12:28 -0400
Subject: Clarification
Message-ID: <01a401c8b684$f24b7970$0301a8c0@apcdesktop>

During a practice test with my students, I encountered a question that all of us need clarification on. We put it into use, however, the answer is not available in the practice exam in comparison to our results. Could someone look this over and see if what I am understanding to be the correct results and most important is WHY?

  1.. After creating one container administrator, you decide to use the Security Equal To property when creating other container administrator objects to make them equal to the first container administrator. Which is a valid reason to be cautious about using this property? __________
 

    1.. If you delete the first container administrator, no other container administrators can login
    2.. If you delete any container administrator, all other container administrators lose their rights
    3.. If you delete the first container administrator, all other container administrators are deleted
    4.. If you rename the first container administrator, all other container administrators are renamed
    5.. If you place an IRF that blocks the first container administrator's rights, all other container administrator's rights are lost
 Your help would be most appreciated.


Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE

From Chris.Nevener at networkingpartner.com  Thu May 15 12:16:22 2008
From: Chris.Nevener at networkingpartner.com (Chris Nevener)
Date: Thu, 15 May 2008 13:16:22 +0200
Subject: Clarification
In-Reply-To: <01a401c8b684$f24b7970$0301a8c0@apcdesktop>
References: <01a401c8b684$f24b7970$0301a8c0@apcdesktop>
Message-ID: <482C37A6.F9B1.005C.0@networkingpartner.com>

Hi Stephen,

The answer is:

Number 2. - but there must be a mistake on the test, since the concept doesn't match the answer exactly.

If you make multiple container administrators SE to an existing admin, and then delete the admin to which the others were made SE, then the subsequent admin's lose their rights.

That is the lesson at hand. Unfortunately, there must be an error in the answer set to the question.

Cheers
Chris 
 
>>> "Stephen Cummings" <automatedprocess at bellsouth.net> 05/15/08 2:12 PM >>> 
During a practice test with my students, I encountered a question that all of us need clarification on. We put it into use, however, the answer is not available in the practice exam in comparison to our results. Could someone look this over and see if what I am understanding to be the correct results and most important is WHY?

  1.. After creating one container administrator, you decide to use the Security Equal To property when creating other container administrator objects to make them equal to the first container administrator. Which is a valid reason to be cautious about using this property? __________
 

    1.. If you delete the first container administrator, no other container administrators can login
    2.. If you delete any container administrator, all other container administrators lose their rights
    3.. If you delete the first container administrator, all other container administrators are deleted
    4.. If you rename the first container administrator, all other container administrators are renamed
    5.. If you place an IRF that blocks the first container administrator's rights, all other container administrator's rights are lost
 Your help would be most appreciated.


Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


From Chris.Nevener at networkingpartner.com  Thu May 15 12:16:22 2008
From: Chris.Nevener at networkingpartner.com (Chris Nevener)
Date: Thu, 15 May 2008 13:16:22 +0200
Subject: Clarification
In-Reply-To: <01a401c8b684$f24b7970$0301a8c0@apcdesktop>
References: <01a401c8b684$f24b7970$0301a8c0@apcdesktop>
Message-ID: <482C37A6.F9B1.005C.0@networkingpartner.com>

Hi Stephen,

The answer is:

Number 2. - but there must be a mistake on the test, since the concept doesn't match the answer exactly.

If you make multiple container administrators SE to an existing admin, and then delete the admin to which the others were made SE, then the subsequent admin's lose their rights.

That is the lesson at hand. Unfortunately, there must be an error in the answer set to the question.

Cheers
Chris 
 
>>> "Stephen Cummings" <automatedprocess at bellsouth.net> 05/15/08 2:12 PM >>> 
During a practice test with my students, I encountered a question that all of us need clarification on. We put it into use, however, the answer is not available in the practice exam in comparison to our results. Could someone look this over and see if what I am understanding to be the correct results and most important is WHY?

  1.. After creating one container administrator, you decide to use the Security Equal To property when creating other container administrator objects to make them equal to the first container administrator. Which is a valid reason to be cautious about using this property? __________
 

    1.. If you delete the first container administrator, no other container administrators can login
    2.. If you delete any container administrator, all other container administrators lose their rights
    3.. If you delete the first container administrator, all other container administrators are deleted
    4.. If you rename the first container administrator, all other container administrators are renamed
    5.. If you place an IRF that blocks the first container administrator's rights, all other container administrator's rights are lost
 Your help would be most appreciated.


Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


From automatedprocess at bellsouth.net  Thu May 15 13:33:51 2008
From: automatedprocess at bellsouth.net (Stephen Cummings)
Date: Thu, 15 May 2008 08:33:51 -0400
Subject: Clarification
References: <01a401c8b684$f24b7970$0301a8c0@apcdesktop>
	<482C37A6.F9B1.005C.0@networkingpartner.com>
Message-ID: <01b901c8b687$eeafd4c0$0301a8c0@apcdesktop>

One more clarification.

If the user that has been made SE to ADMIN, and the user already had say for
instance, RF rights, would the user go back to the default rights they had
or lose all rights, based on being SE to the ADMIN.

Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
----- Original Message ----- 
From: "Chris Nevener" <Chris.Nevener at networkingpartner.com>
To: "Novell LAN Interest Group" <novell at netlab1.oucs.ox.ac.uk>; "Novell"
<novell at netlab1.usu.edu>
Sent: Thursday, May 15, 2008 7:16 AM
Subject: Re: Clarification


> Hi Stephen,
>
> The answer is:
>
> Number 2. - but there must be a mistake on the test, since the concept
doesn't match the answer exactly.
>
> If you make multiple container administrators SE to an existing admin, and
then delete the admin to which the others were made SE, then the subsequent
admin's lose their rights.
>
> That is the lesson at hand. Unfortunately, there must be an error in the
answer set to the question.
>
> Cheers
> Chris
>
> >>> "Stephen Cummings" <automatedprocess at bellsouth.net> 05/15/08 2:12 PM
>>>
> During a practice test with my students, I encountered a question that all
of us need clarification on. We put it into use, however, the answer is not
available in the practice exam in comparison to our results. Could someone
look this over and see if what I am understanding to be the correct results
and most important is WHY?
>
>   1.. After creating one container administrator, you decide to use the
Security Equal To property when creating other container administrator
objects to make them equal to the first container administrator. Which is a
valid reason to be cautious about using this property? __________
>
>
>     1.. If you delete the first container administrator, no other
container administrators can login
>     2.. If you delete any container administrator, all other container
administrators lose their rights
>     3.. If you delete the first container administrator, all other
container administrators are deleted
>     4.. If you rename the first container administrator, all other
container administrators are renamed
>     5.. If you place an IRF that blocks the first container
administrator's rights, all other container administrator's rights are lost
>  Your help would be most appreciated.
>
>
> Stephen Cummings
> A+, Net +, CNA 5x, 6x,
> CNE 5x, 6x, NAI, CNI,
> MCNE
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



From PHasenjager at kcumb.edu  Thu May 15 13:04:16 2008
From: PHasenjager at kcumb.edu (Patrick Hasenjager)
Date: Thu, 15 May 2008 07:04:16 -0500
Subject: Clarification
In-Reply-To: <01a401c8b684$f24b7970$0301a8c0@apcdesktop>
References: <01a401c8b684$f24b7970$0301a8c0@apcdesktop>
Message-ID: <482BE06F.6E24.0005.0@kcumb.edu>

The closest answer is #1, but it should read "If you delete the first container administrator, all other container administrators lose their rights."  At least that's my interpretation of how the Security Equal To property works.
 
It you changed #2 to read "If you delete the first container administrator..." that would also be correct.
 
Pat.

>>> On 5/15/2008 at 7:12 AM, "Stephen Cummings" <automatedprocess at bellsouth.net> wrote:
During a practice test with my students, I encountered a question that all of us need clarification on. We put it into use, however, the answer is not available in the practice exam in comparison to our results. Could someone look this over and see if what I am understanding to be the correct results and most important is WHY?

  1.. After creating one container administrator, you decide to use the Security Equal To property when creating other container administrator objects to make them equal to the first container administrator. Which is a valid reason to be cautious about using this property? __________


    1.. If you delete the first container administrator, no other container administrators can login
    2.. If you delete any container administrator, all other container administrators lose their rights
    3.. If you delete the first container administrator, all other container administrators are deleted
    4.. If you rename the first container administrator, all other container administrators are renamed
    5.. If you place an IRF that blocks the first container administrator's rights, all other container administrator's rights are lost
Your help would be most appreciated.


Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From yg at tvsched.com  Thu May 15 13:52:13 2008
From: yg at tvsched.com (Shaun Turner)
Date: Thu, 15 May 2008 22:52:13 +1000
Subject: Clarification
In-Reply-To: <01a401c8b684$f24b7970$0301a8c0@apcdesktop>
References: <01a401c8b684$f24b7970$0301a8c0@apcdesktop>
Message-ID: <003601c8b68a$807b1070$81713150$@com>

Hi

1 is wrong because the ability to login is not determined by having
container admin access. The 2nd admin would revert to their pre-admin rights
2 is wrong because the first container admin would have to be deleted for
all container admins to loose access
3 is wrong because the when you delete one object, other objects are not
deleted. With the exception of if you have an object that has an alias. You
delete the aliased object, the alias is also deleted. 
4 is wrong because only the first container admin would be renamed. Rights
would remain unchanged.
5 is right because IRF works in the Directory, and admin rights can be
blocked by an IRF. The security equal to setup would mean anyone with
security equal to the blocked user would be blocked. If the other admins in
this example had explicit rights further down the tree the irf here would
only block their admin rights, unless it was explicitly defined deeper in
the tree. I would suggest that lost is the wrong words as well. Blocked is
the correct language i'd rather see used. 

Also, note Directory, rather than directory. When I did my CNA the trainer
made a big point that novell refers to Directory as  eDirecory/NDS and
directory as the file system. Admin cannont be blocked in the file system.
>From memory the only way of blocking an admin's access to the file system
was to place an IRF on the container that has the volumes in it, in an all
or nothing setup.

Hope this helps

Shaun Turner


-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of Stephen Cummings
Sent: Thursday, 15 May 2008 10:12 PM
To: Novell
Subject: Clarification

During a practice test with my students, I encountered a question that all
of us need clarification on. We put it into use, however, the answer is not
available in the practice exam in comparison to our results. Could someone
look this over and see if what I am understanding to be the correct results
and most important is WHY?

  1.. After creating one container administrator, you decide to use the
Security Equal To property when creating other container administrator
objects to make them equal to the first container administrator. Which is a
valid reason to be cautious about using this property? __________
 

    1.. If you delete the first container administrator, no other container
administrators can login
    2.. If you delete any container administrator, all other container
administrators lose their rights
    3.. If you delete the first container administrator, all other container
administrators are deleted
    4.. If you rename the first container administrator, all other container
administrators are renamed
    5.. If you place an IRF that blocks the first container administrator's
rights, all other container administrator's rights are lost
 Your help would be most appreciated.


Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


From MGlenn at cco.state.oh.us  Thu May 15 14:14:24 2008
From: MGlenn at cco.state.oh.us (Michael Glenn)
Date: Thu, 15 May 2008 09:14:24 -0400
Subject: Clarification
Message-ID: <s82bff0b.015@cco.state.oh.us>

5.

1: Hooey. Container rights do not equate to login rights.
2: Uh-uh. Trick question. Not ANY admin, but just the FIRST admin, as it's the one that holds the root of this particular inheritance tree.
3: Oh, really now. Other than, say, alias objects, there's nothing in NDS that would trigger this.
4: Nor this.
5: FINALLY we're talking about container rights! If the the "parent" admin's rights are modified/filtered, then the "child" admins inherit those changes.


>>> automatedprocess at bellsouth.net 05/15/2008 08:12:28 >>>
During a practice test with my students, I encountered a question that all of us need clarification on. We put it into use, however, the answer is not available in the practice exam in comparison to our results. Could someone look this over and see if what I am understanding to be the correct results and most important is WHY?

  1.. After creating one container administrator, you decide to use the Security Equal To property when creating other container administrator objects to make them equal to the first container administrator. Which is a valid reason to be cautious about using this property? __________
 

    1.. If you delete the first container administrator, no other container administrators can login
    2.. If you delete any container administrator, all other container administrators lose their rights
    3.. If you delete the first container administrator, all other container administrators are deleted
    4.. If you rename the first container administrator, all other container administrators are renamed
    5.. If you place an IRF that blocks the first container administrator's rights, all other container administrator's rights are lost
 Your help would be most appreciated.


Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell


From cmangiarelli at gmail.com  Thu May 15 15:44:44 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Thu, 15 May 2008 10:44:44 -0400
Subject: NAMED.NLM and DNS Caching
In-Reply-To: <482B3C62.917D.0085.0@j4computers.com>
References: <482AFAFE020000850005DE07@FS-LIN-OES>
	<f47566ff0805141517s7209c501g954587a347458a1f@mail.gmail.com>
	<482B3C62.917D.0085.0@j4computers.com>
Message-ID: <f47566ff0805150744q339d3e95nd5b84615549ba495@mail.gmail.com>

Correct, you can use the "server <ip_address>" command to change the server
IP you want to query.  However, I was not sure of there was a local DNS
cache that it would try to use rather than requesting the IP directly from
the remote server.  In my case, I found two of our provider DNS servers
still handing out the wrong address, but since I didn't know if NetWare had
its own internal DNS caching mechanism, I was unsure if the wrong IP was
being returned from the remote server or potentially from a local cache.
Anyway, the remote DNS servers have been updated and now the proper IP is
coming through to my systems.

I probably should have verified the provider DNS myself instead of trusting
the local network folks who put in the original ticket that our provider
already reset their cache.

On Wed, May 14, 2008 at 7:24 PM, joea at j4computers.com <joea at j4computers.com>
wrote:

> Nslookup can be told what name server to ask for the info.  I think the NW
> version can do that, anyway.   That way you will know which one has the old
> info in it.
>
> Otherwise, I think it goes by what resolv.cfg has in it for what name
> servers to use.
>
> joe a.
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From cmangiarelli at gmail.com  Thu May 15 18:17:19 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Thu, 15 May 2008 13:17:19 -0400
Subject: Apache on NetWare - Start Page
In-Reply-To: <01MURJT79ZCU8Y6P3X@cc.usu.edu>
References: <01MURJT79ZCU8Y6P3X@cc.usu.edu>
Message-ID: <f47566ff0805151017q5176b2fpc9f35803d5cb0c@mail.gmail.com>

Thanks for the response Joe.  I put everything back to normal and tried your
solution below but still have a problem.

The default OES welcome page is still showing at:
http://server.domain.org/welcome/index.html

My new customized page is showing at:
https://server.domain.org:2200/welcome/index.html

Any idea?

On Wed, May 14, 2008 at 6:03 AM, Joe Doupnik <JRD at cc.usu.edu> wrote:

> >According to a security audit, I need to disable the welcome page that
> >Apache normally shows and replace it with a legal banner warning.  I
> >commented out the line "Include
> >"SYS:/adminsrv/welcome-novell/lib/welcome-apache.conf"" in
> >sys:\apache2\conf\httpd.conf.  I also replaced the index.html file in
> >sys:\apache2\htdocs with a customized html file that doesn't do a
> redirect.
> >Did a ap2webdn and ap2webup.  When I visit the server address, it still
> >tries to redirect to http://servername.domain.org/welcome/index/html that
> >then 404's.  Any idea's how to fix this?
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From aharper at psc.ac.uk  Fri May 16 11:24:38 2008
From: aharper at psc.ac.uk (Anthony Harper)
Date: Fri, 16 May 2008 11:24:38 +0100
Subject: GroupWise Restore Question
References: <482D695D020000000008F714@athena.psc.ac.uk>
	<482D6EF6020000000008F718@athena.psc.ac.uk>
Message-ID: <482D6EF3.AC3C.0000.0@psc.ac.uk>

Hi,

I've ran into trouble trying to restore a bunch of email messages for a user that's been renamed since the backup. I've successfully restored the GW domain from tape, set the restore location, and all is well if I try accessing the backup location with a non-renamed user. If I try to access the backup with the renamed user, I get the following error message:

GroupWise Error 8200
GroupWise cannot open the post office files.

I've optimistically tried creating a new user with the old name, with no luck. I've also had a look at the GroupWise Utilities -> Recover Deleted Account wizard to restore the old un-renamed account, however since it's got the same FID as the current renamed user I'm reluctant to proceed.

For the record we're running GroupWise 7.0.3.

Any ideas how I can get around this?

Regards,

Anthony


From joea at j4computers.com  Fri May 16 13:45:15 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Fri, 16 May 2008 08:45:15 -0400
Subject: GroupWise Restore Question
Message-ID: <482D499B020000850005DE46@FS-LIN-OES>

You may get more response from the gw list.  subscribe via www.ngwlist.com

joe a.

>>> "Anthony Harper" <aharper at psc.ac.uk> 05/16/08 6:25 AM >>>
Hi,

I've ran into trouble trying to restore a bunch of email messages for a user that's been renamed since the backup. I've successfully restored the GW domain from tape, set the restore location, and all is well if I try accessing the backup location with a non-renamed user. If I try to access the backup with the renamed user, I get the following error message:

GroupWise Error 8200
GroupWise cannot open the post office files.

I've optimistically tried creating a new user with the old name, with no luck. I've also had a look at the GroupWise Utilities -> Recover Deleted Account wizard to restore the old un-renamed account, however since it's got the same FID as the current renamed user I'm reluctant to proceed.

For the record we're running GroupWise 7.0.3.

Any ideas how I can get around this?

Regards,

Anthony

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


From petervl at gmail.com  Fri May 16 13:55:55 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Fri, 16 May 2008 07:55:55 -0500
Subject: GroupWise Restore Question
In-Reply-To: <482D6EF3.AC3C.0000.0@psc.ac.uk>
References: <482D695D020000000008F714@athena.psc.ac.uk>
	<482D6EF6020000000008F718@athena.psc.ac.uk>
	<482D6EF3.AC3C.0000.0@psc.ac.uk>
Message-ID: <68b791330805160555g41d9b329h544478c727a19d0f@mail.gmail.com>

probably have to connect to the fuly restored PO using a client in
direct mode. you will either need to know -- or need to clear -- the
users password

peter

On 5/16/08, Anthony Harper <aharper at psc.ac.uk> wrote:
> Hi,
>
> I've ran into trouble trying to restore a bunch of email messages for a user
> that's been renamed since the backup. I've successfully restored the GW
> domain from tape, set the restore location, and all is well if I try
> accessing the backup location with a non-renamed user. If I try to access
> the backup with the renamed user, I get the following error message:
>
> GroupWise Error 8200
> GroupWise cannot open the post office files.
>
> I've optimistically tried creating a new user with the old name, with no
> luck. I've also had a look at the GroupWise Utilities -> Recover Deleted
> Account wizard to restore the old un-renamed account, however since it's got
> the same FID as the current renamed user I'm reluctant to proceed.
>
> For the record we're running GroupWise 7.0.3.
>
> Any ideas how I can get around this?
>
> Regards,
>
> Anthony
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>


-- 
"beware the terrible simplifiers."
Jacob Burckhardt, Historian


http://xkcd.com/167/

www.the-brights.net

From Setienne at enesco.com  Fri May 16 16:14:34 2008
From: Setienne at enesco.com (Scott Etienne)
Date: Fri, 16 May 2008 10:14:34 -0500
Subject: BE12 Issues
Message-ID: <482D5E8A.8A77.004D.0@enesco.com>

Symantec was able to finally help us spot the offending setting on the NetWare server in the TSAFS.CFG file. I don't know why this changed when we upgraded--maybe BE changes this??? Maybe this setting didn't matter in the older versions?
 
We are now seeing the performance with BE12 we used to see with 10d.

The key field here is Cache Memory Threshold: 1 (changed from 10).
 
Enable Caching must be yes.
 
TSAFS.CFG:
 
Read Buffer Size:
65536
Read Threads Per Job:
4
Read Thread Allocation:
100
Read Ahead Throttle:
2
Cache Memory Threshold:
1
Disable Cluster:
no
Enable GroupWise:
0
Enable Caching:
yes
Disable Demigration:
no
 
 
Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 

 

From petervl at gmail.com  Fri May 16 16:20:07 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Fri, 16 May 2008 10:20:07 -0500
Subject: BE12 Issues
In-Reply-To: <482D5E8A.8A77.004D.0@enesco.com>
References: <482D5E8A.8A77.004D.0@enesco.com>
Message-ID: <68b791330805160820n76d07f28i9f78dab4fecfc1d7@mail.gmail.com>

this is good to know -- thnx for the post!

On 5/16/08, Scott Etienne <Setienne at enesco.com> wrote:
> Symantec was able to finally help us spot the offending setting on the
> NetWare server in the TSAFS.CFG file. I don't know why this changed when we
> upgraded--maybe BE changes this??? Maybe this setting didn't matter in the
> older versions?
>
> We are now seeing the performance with BE12 we used to see with 10d.
>
> The key field here is Cache Memory Threshold: 1 (changed from 10).
>
> Enable Caching must be yes.
>
> TSAFS.CFG:
>
> Read Buffer Size:
> 65536
> Read Threads Per Job:
> 4
> Read Thread Allocation:
> 100
> Read Ahead Throttle:
> 2
> Cache Memory Threshold:
> 1
> Disable Cluster:
> no
> Enable GroupWise:
> 0
> Enable Caching:
> yes
> Disable Demigration:
> no
>
>
> Thank you,
>
> Scott Etienne
> Network Engineer
> Enesco, LLC
> setienne at enesco.com
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>


-- 
"beware the terrible simplifiers."
Jacob Burckhardt, Historian


http://xkcd.com/167/

www.the-brights.net

From jetadmin at gmail.com  Fri May 16 16:33:28 2008
From: jetadmin at gmail.com (Eric Rothweiler)
Date: Fri, 16 May 2008 11:33:28 -0400
Subject: Clarification
In-Reply-To: <s82bff0b.015@cco.state.oh.us>
References: <s82bff0b.015@cco.state.oh.us>
Message-ID: <1d6cdac70805160833k3b0dfeeei32e1bac358739dc5@mail.gmail.com>

Agreed.  I'm not sure why some folks were looking at 1 & 2 needing to be
reworded when 5 meets the requirements - If you alter an account or object
that users are Security Equivilant to then the users rights will also
change.

On 5/15/08, Michael Glenn <MGlenn at cco.state.oh.us> wrote:
>
> 5.
>
> 1: Hooey. Container rights do not equate to login rights.
> 2: Uh-uh. Trick question. Not ANY admin, but just the FIRST admin, as it's
> the one that holds the root of this particular inheritance tree.
> 3: Oh, really now. Other than, say, alias objects, there's nothing in NDS
> that would trigger this.
> 4: Nor this.
> 5: FINALLY we're talking about container rights! If the the "parent"
> admin's rights are modified/filtered, then the "child" admins inherit those
> changes.
>
>
> >>> automatedprocess at bellsouth.net 05/15/2008 08:12:28 >>>
> During a practice test with my students, I encountered a question that all
> of us need clarification on. We put it into use, however, the answer is not
> available in the practice exam in comparison to our results. Could someone
> look this over and see if what I am understanding to be the correct results
> and most important is WHY?
>
> 1.. After creating one container administrator, you decide to use the
> Security Equal To property when creating other container administrator
> objects to make them equal to the first container administrator. Which is a
> valid reason to be cautious about using this property? __________
>
>
>    1.. If you delete the first container administrator, no other container
> administrators can login
>    2.. If you delete any container administrator, all other container
> administrators lose their rights
>    3.. If you delete the first container administrator, all other container
> administrators are deleted
>    4.. If you rename the first container administrator, all other container
> administrators are renamed
>    5.. If you place an IRF that blocks the first container administrator's
> rights, all other container administrator's rights are lost
> Your help would be most appreciated.
>
>
> Stephen Cummings
> A+, Net +, CNA 5x, 6x,
> CNE 5x, 6x, NAI, CNI,
> MCNE
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>

From RGrein at tpchd.org  Fri May 16 17:05:06 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Fri, 16 May 2008 09:05:06 -0700
Subject: BE12 Issues
In-Reply-To: <482D5E8A.8A77.004D.0@enesco.com>
References: <482D5E8A.8A77.004D.0@enesco.com>
Message-ID: <482D4E5A.811E.0072.0@tpchd.org>

Thanks Scott - I'll implement it today and see how it changes things.

Randy Grein
Sr. Network Engineer


>>> "Scott Etienne" <Setienne at enesco.com> 5/16/2008 8:14 AM >>>
Symantec was able to finally help us spot the offending setting on the NetWare server in the TSAFS.CFG file. I don't know why this changed when we upgraded--maybe BE changes this??? Maybe this setting didn't matter in the older versions?
 
We are now seeing the performance with BE12 we used to see with 10d.

The key field here is Cache Memory Threshold: 1 (changed from 10).
 
Enable Caching must be yes.
 
TSAFS.CFG:
 
Read Buffer Size:
65536
Read Threads Per Job:
4
Read Thread Allocation:
100
Read Ahead Throttle:
2
Cache Memory Threshold:
1
Disable Cluster:
no
Enable GroupWise:
0
Enable Caching:
yes
Disable Demigration:
no
 
 
Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 

 
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From jgroetsema at pacific.edu  Fri May 16 18:32:57 2008
From: jgroetsema at pacific.edu (Jeff Groetsema)
Date: Fri, 16 May 2008 10:32:57 -0700
Subject: Server connection monitoring
Message-ID: <056970BDF175F64FA6F86DF6FC933270F74300@EXVS1.stk.pacific.edu>

I have a Netware 6.5 cluster running GroupWise 7.1 and am having imap
issues.

 

I tried setting up GWIA with imap on port 143 and could not connect
using telnet.  I then tried setting up a post office with imap (after
disabling in GWIA as they share an IP address).  Telnet to this on port
143 also fails.

 

I checked tcpcon and can see that the server is listening to port 143 on
the post office IP address.

 

The POA console shows no activity.

 

A packet capture show 3 packets from my workstation to the POA with no
responses.

 

I set up another post office in the cluster with imap and had no
problems telneting to it on port 143.

 

Two questions:

 

Anyone have any ideas on what is going on?

 

Is there a way I can monitor the connection activity internal to the
server to see if the server is taking the packet and trying to hand it
off to the POA?

 

Thanks,

Jeff


From James.Taylor at eastcobbgroup.com  Fri May 16 18:48:54 2008
From: James.Taylor at eastcobbgroup.com (James Taylor)
Date: Fri, 16 May 2008 13:48:54 -0400
Subject: Server connection monitoring
In-Reply-To: <482D8FF5.9252.0075.1@eastcobbgroup.com>
References: <482D8FF5.9252.0075.1@eastcobbgroup.com>
Message-ID: <482D90C60200007500028E82@inet.eastcobbgroup.com>

Do you have the agents configured to listen solely to the defined agent address?
If you have a port scanner (I use nmap on linux, I don't know what you might use on Windows), you can scan the address to see if it's listening on that port.

By the way, there is an excellent mailing list for GW that you might subscribe to, of you haven't already.  You can go to www.ngwlist.com to do so.

-jt
 
 

James Taylor
The East Cobb Group, Inc.
678-697-9420
james.taylor at eastcobbgroup.com
http://www.eastcobbgroup.com







>>> "Jeff Groetsema" <jgroetsema at pacific.edu> 5/16/2008 01:32 PM >>> 
I have a Netware 6.5 cluster running GroupWise 7.1 and am having imap
issues.

 

I tried setting up GWIA with imap on port 143 and could not connect
using telnet.  I then tried setting up a post office with imap (after
disabling in GWIA as they share an IP address).  Telnet to this on port
143 also fails.

 

I checked tcpcon and can see that the server is listening to port 143 on
the post office IP address.

 

The POA console shows no activity.

 

A packet capture show 3 packets from my workstation to the POA with no
responses.

 

I set up another post office in the cluster with imap and had no
problems telneting to it on port 143.

 

Two questions:

 

Anyone have any ideas on what is going on?

 

Is there a way I can monitor the connection activity internal to the
server to see if the server is taking the packet and trying to hand it
off to the POA?

 

Thanks,

Jeff

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell



From jgroetsema at pacific.edu  Fri May 16 19:22:19 2008
From: jgroetsema at pacific.edu (Jeff Groetsema)
Date: Fri, 16 May 2008 11:22:19 -0700
Subject: Server connection monitoring
In-Reply-To: <482D90C60200007500028E82@inet.eastcobbgroup.com>
Message-ID: <056970BDF175F64FA6F86DF6FC933270F74344@EXVS1.stk.pacific.edu>

JT,

Yes, I have the agents set to bind exclusively to the IP address.  The
one issue may be that the PO and GWIA use the same IP address.  This is
a legacy thing and cannot be changed.  I have used this configuration in
the past with GW5.5 and imap worked just fine.  We did move to GW6.5 for
a while but I do not know if imap worked then.

TCPCon says the server is listening on the PO/GWIA ip address and port
143.  I will try a port scanner to verify.

I'll check out the ngwlist.  Since I'm getting no response to telnet, I
was not sure if this was a server thing or GroupWise.

Thanks,
Jeff

-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of James Taylor
Sent: Friday, May 16, 2008 10:49 AM
To: Novell LAN Interest Group
Subject: Re: Server connection monitoring

Do you have the agents configured to listen solely to the defined agent
address?
If you have a port scanner (I use nmap on linux, I don't know what you
might use on Windows), you can scan the address to see if it's listening
on that port.

By the way, there is an excellent mailing list for GW that you might
subscribe to, of you haven't already.  You can go to www.ngwlist.com to
do so.

-jt
 
 

James Taylor
The East Cobb Group, Inc.
678-697-9420
james.taylor at eastcobbgroup.com
http://www.eastcobbgroup.com







>>> "Jeff Groetsema" <jgroetsema at pacific.edu> 5/16/2008 01:32 PM >>> 
I have a Netware 6.5 cluster running GroupWise 7.1 and am having imap
issues.

 

I tried setting up GWIA with imap on port 143 and could not connect
using telnet.  I then tried setting up a post office with imap (after
disabling in GWIA as they share an IP address).  Telnet to this on port
143 also fails.

 

I checked tcpcon and can see that the server is listening to port 143 on
the post office IP address.

 

The POA console shows no activity.

 

A packet capture show 3 packets from my workstation to the POA with no
responses.

 

I set up another post office in the cluster with imap and had no
problems telneting to it on port 143.

 

Two questions:

 

Anyone have any ideas on what is going on?

 

Is there a way I can monitor the connection activity internal to the
server to see if the server is taking the packet and trying to hand it
off to the POA?

 

Thanks,

Jeff

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell

From petervl at gmail.com  Fri May 16 19:58:46 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Fri, 16 May 2008 13:58:46 -0500
Subject: Server connection monitoring
In-Reply-To: <056970BDF175F64FA6F86DF6FC933270F74344@EXVS1.stk.pacific.edu>
References: <482D90C60200007500028E82@inet.eastcobbgroup.com>
	<056970BDF175F64FA6F86DF6FC933270F74344@EXVS1.stk.pacific.edu>
Message-ID: <68b791330805161158we3b9309k4b83d36866bd9c3a@mail.gmail.com>

are you sure that you do not have TWO IMAP listeners? Make sure either
the POA or the GWIA are listening on 143 -- not both.

P

On Fri, May 16, 2008 at 1:22 PM, Jeff Groetsema <jgroetsema at pacific.edu> wrote:
> JT,
>
> Yes, I have the agents set to bind exclusively to the IP address.  The
> one issue may be that the PO and GWIA use the same IP address.  This is
> a legacy thing and cannot be changed.  I have used this configuration in
> the past with GW5.5 and imap worked just fine.  We did move to GW6.5 for
> a while but I do not know if imap worked then.
>
> TCPCon says the server is listening on the PO/GWIA ip address and port
> 143.  I will try a port scanner to verify.
>
> I'll check out the ngwlist.  Since I'm getting no response to telnet, I
> was not sure if this was a server thing or GroupWise.
>
> Thanks,
> Jeff
>
> -----Original Message-----
> From: novell-bounces at netlab1.oucs.ox.ac.uk
> [mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of James Taylor
> Sent: Friday, May 16, 2008 10:49 AM
> To: Novell LAN Interest Group
> Subject: Re: Server connection monitoring
>
> Do you have the agents configured to listen solely to the defined agent
> address?
> If you have a port scanner (I use nmap on linux, I don't know what you
> might use on Windows), you can scan the address to see if it's listening
> on that port.
>
> By the way, there is an excellent mailing list for GW that you might
> subscribe to, of you haven't already.  You can go to www.ngwlist.com to
> do so.
>
> -jt
>
>
>
> James Taylor
> The East Cobb Group, Inc.
> 678-697-9420
> james.taylor at eastcobbgroup.com
> http://www.eastcobbgroup.com
>
>
>
>
>
>
>
>>>> "Jeff Groetsema" <jgroetsema at pacific.edu> 5/16/2008 01:32 PM >>>
> I have a Netware 6.5 cluster running GroupWise 7.1 and am having imap
> issues.
>
>
>
> I tried setting up GWIA with imap on port 143 and could not connect
> using telnet.  I then tried setting up a post office with imap (after
> disabling in GWIA as they share an IP address).  Telnet to this on port
> 143 also fails.
>
>
>
> I checked tcpcon and can see that the server is listening to port 143 on
> the post office IP address.
>
>
>
> The POA console shows no activity.
>
>
>
> A packet capture show 3 packets from my workstation to the POA with no
> responses.
>
>
>
> I set up another post office in the cluster with imap and had no
> problems telneting to it on port 143.
>
>
>
> Two questions:
>
>
>
> Anyone have any ideas on what is going on?
>
>
>
> Is there a way I can monitor the connection activity internal to the
> server to see if the server is taking the packet and trying to hand it
> off to the POA?
>
>
>
> Thanks,
>
> Jeff
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
"beware the terrible simplifiers."
Jacob Burckhardt, Historian


http://xkcd.com/167/

www.the-brights.net

From jgroetsema at pacific.edu  Fri May 16 21:10:27 2008
From: jgroetsema at pacific.edu (Jeff Groetsema)
Date: Fri, 16 May 2008 13:10:27 -0700
Subject: Server connection monitoring
In-Reply-To: <68b791330805161158we3b9309k4b83d36866bd9c3a@mail.gmail.com>
Message-ID: <056970BDF175F64FA6F86DF6FC933270F74395@EXVS1.stk.pacific.edu>

I made sure that IMAP was off on GWIA and POA then checked TCPCON and
made sure nothing was listening on port 143.  I then enabled IMAP on the
POA.  I checked TCPCON again to find it was listening on port 143.

Still cannot connect with telnet to the POA on port 143.

-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of Peter Van
Lone
Sent: Friday, May 16, 2008 11:59 AM
To: Novell LAN Interest Group
Subject: Re: Server connection monitoring

are you sure that you do not have TWO IMAP listeners? Make sure either
the POA or the GWIA are listening on 143 -- not both.

P

On Fri, May 16, 2008 at 1:22 PM, Jeff Groetsema <jgroetsema at pacific.edu>
wrote:
> JT,
>
> Yes, I have the agents set to bind exclusively to the IP address.  The
> one issue may be that the PO and GWIA use the same IP address.  This
is
> a legacy thing and cannot be changed.  I have used this configuration
in
> the past with GW5.5 and imap worked just fine.  We did move to GW6.5
for
> a while but I do not know if imap worked then.
>
> TCPCon says the server is listening on the PO/GWIA ip address and port
> 143.  I will try a port scanner to verify.
>
> I'll check out the ngwlist.  Since I'm getting no response to telnet,
I
> was not sure if this was a server thing or GroupWise.
>
> Thanks,
> Jeff
>
> -----Original Message-----
> From: novell-bounces at netlab1.oucs.ox.ac.uk
> [mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of James
Taylor
> Sent: Friday, May 16, 2008 10:49 AM
> To: Novell LAN Interest Group
> Subject: Re: Server connection monitoring
>
> Do you have the agents configured to listen solely to the defined
agent
> address?
> If you have a port scanner (I use nmap on linux, I don't know what you
> might use on Windows), you can scan the address to see if it's
listening
> on that port.
>
> By the way, there is an excellent mailing list for GW that you might
> subscribe to, of you haven't already.  You can go to www.ngwlist.com
to
> do so.
>
> -jt
>
>
>
> James Taylor
> The East Cobb Group, Inc.
> 678-697-9420
> james.taylor at eastcobbgroup.com
> http://www.eastcobbgroup.com
>
>
>
>
>
>
>
>>>> "Jeff Groetsema" <jgroetsema at pacific.edu> 5/16/2008 01:32 PM >>>
> I have a Netware 6.5 cluster running GroupWise 7.1 and am having imap
> issues.
>
>
>
> I tried setting up GWIA with imap on port 143 and could not connect
> using telnet.  I then tried setting up a post office with imap (after
> disabling in GWIA as they share an IP address).  Telnet to this on
port
> 143 also fails.
>
>
>
> I checked tcpcon and can see that the server is listening to port 143
on
> the post office IP address.
>
>
>
> The POA console shows no activity.
>
>
>
> A packet capture show 3 packets from my workstation to the POA with no
> responses.
>
>
>
> I set up another post office in the cluster with imap and had no
> problems telneting to it on port 143.
>
>
>
> Two questions:
>
>
>
> Anyone have any ideas on what is going on?
>
>
>
> Is there a way I can monitor the connection activity internal to the
> server to see if the server is taking the packet and trying to hand it
> off to the POA?
>
>
>
> Thanks,
>
> Jeff
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
"beware the terrible simplifiers."
Jacob Burckhardt, Historian


http://xkcd.com/167/

www.the-brights.net
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell

From evansj21 at msu.edu  Fri May 16 21:15:51 2008
From: evansj21 at msu.edu (John Evans)
Date: Fri, 16 May 2008 16:15:51 -0400
Subject: BE12 Issues
In-Reply-To: <482D5E8A.8A77.004D.0@enesco.com>
References: <482D5E8A.8A77.004D.0@enesco.com>
Message-ID: <482DB336.F0A7.0085.0@MAIL.HFS.MSU.EDU>

Scott,
 
Is this TSA.CFG in SYS\ETC\SMS?  We don't seem to have a tsafs.cfg file.
 
...John

>>> "Scott Etienne" <Setienne at enesco.com> 5/16/2008 11:14 AM >>>
Symantec was able to finally help us spot the offending setting on the NetWare server in the TSAFS.CFG file. I don't know why this changed when we upgraded--maybe BE changes this??? Maybe this setting didn't matter in the older versions?

We are now seeing the performance with BE12 we used to see with 10d.

The key field here is Cache Memory Threshold: 1 (changed from 10).

Enable Caching must be yes.

TSAFS.CFG:

Read Buffer Size:
65536
Read Threads Per Job:
4
Read Thread Allocation:
100
Read Ahead Throttle:
2
Cache Memory Threshold:
1
Disable Cluster:
no
Enable GroupWise:
0
Enable Caching:
yes
Disable Demigration:
no


Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 


From joea at j4computers.com  Fri May 16 21:23:32 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Fri, 16 May 2008 16:23:32 -0400
Subject: BE 9.2 updates
Message-ID: <482DB504020000850005DE57@FS-LIN-OES>

I ask here, as BE is quite reluctant to speak, without a bit of oil applied, so to speak.  Neither do their forums provide info.  More like formums.

Have an early version of BE 9.2 for NW.  Experiencing odd lockups of server.  HW Vendor did replace Tape drive but seems unwilling to go the full Monty without some more futility on my part.  So, have the latest download of BE 9.2.xxx for NW, but am unsure of how to apply it as an "update".  It looks like a "full install" and it's been so long since I did an "update" that I don't recall.   OK, so it was not all that long ago, but still, on has to make allowances.

Anyone know how?

joe a.

From RGrein at tpchd.org  Fri May 16 21:27:09 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Fri, 16 May 2008 13:27:09 -0700
Subject: BE 9.2 updates
In-Reply-To: <482DB504020000850005DE57@FS-LIN-OES>
References: <482DB504020000850005DE57@FS-LIN-OES>
Message-ID: <482D8B9F.811E.0072.0@tpchd.org>

Yeah, you do have to do a 'full install'. It picks settings up from the old install though.

The server doesn't happen to have the tape drive on the same SCSI chain as the hard drives, does it?

Randy Grein
Sr. Network Engineer


>>> "joea at j4computers.com" <joea at j4computers.com> 5/16/2008 1:23 PM >>>
I ask here, as BE is quite reluctant to speak, without a bit of oil applied, so to speak.  Neither do their forums provide info.  More like formums.

Have an early version of BE 9.2 for NW.  Experiencing odd lockups of server.  HW Vendor did replace Tape drive but seems unwilling to go the full Monty without some more futility on my part.  So, have the latest download of BE 9.2.xxx for NW, but am unsure of how to apply it as an "update".  It looks like a "full install" and it's been so long since I did an "update" that I don't recall.   OK, so it was not all that long ago, but still, on has to make allowances.

Anyone know how?

joe a.
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From jgroetsema at pacific.edu  Fri May 16 21:59:31 2008
From: jgroetsema at pacific.edu (Jeff Groetsema)
Date: Fri, 16 May 2008 13:59:31 -0700
Subject: Server connection monitoring
In-Reply-To: <20080516173322.2C86348F475@mx40.pacific.edu>
Message-ID: <056970BDF175F64FA6F86DF6FC933270F743BE@EXVS1.stk.pacific.edu>

A little more digging around in NORM has turned up this bit of info:

Thread Name	GWIMAP-Law-Listener
Thread ID	A43414E0
Parent NLM	GWPOA.NLM
Processor Assignment	1
Total Execution Time	seconds: 0, milliseconds: 12
MP Status	Running MP
Stack Bottom	ADBA71A0
Current Stack Pointer	ADBB6D58
Stack Top	ADBB6F88
Stack Size	65,000 Bytes
Suspend Reason	Blocked on a kernel CV

This is the thread running the IMAP listener.  In the thread name "Law"
is the name of the post office and we can see that it is running as part
of the POA and not GWIA.

The part that concerns me is the last line "Suspend Reason	Blocked
on a kernel CV".

Anybody have any ideas on what this means?

Thanks,
Jeff

-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of Jeff
Groetsema
Sent: Friday, May 16, 2008 10:33 AM
To: Novell LAN Interest Group
Subject: Server connection monitoring

I have a Netware 6.5 cluster running GroupWise 7.1 and am having imap
issues.

 

I tried setting up GWIA with imap on port 143 and could not connect
using telnet.  I then tried setting up a post office with imap (after
disabling in GWIA as they share an IP address).  Telnet to this on port
143 also fails.

 

I checked tcpcon and can see that the server is listening to port 143 on
the post office IP address.

 

The POA console shows no activity.

 

A packet capture show 3 packets from my workstation to the POA with no
responses.

 

I set up another post office in the cluster with imap and had no
problems telneting to it on port 143.

 

Two questions:

 

Anyone have any ideas on what is going on?

 

Is there a way I can monitor the connection activity internal to the
server to see if the server is taking the packet and trying to hand it
off to the POA?

 

Thanks,

Jeff

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell

From jgroetsema at pacific.edu  Fri May 16 22:04:27 2008
From: jgroetsema at pacific.edu (Jeff Groetsema)
Date: Fri, 16 May 2008 14:04:27 -0700
Subject: Server connection monitoring
In-Reply-To: <20080516205953.AAFDA375805@mx30.pacific.edu>
Message-ID: <056970BDF175F64FA6F86DF6FC933270F743C5@EXVS1.stk.pacific.edu>

Also found this:

Thread Name	GWIMAP-Law-Handler_1
Thread ID	95C01080
Parent NLM	GWPOA.NLM
Processor Assignment	0
Total Execution Time	seconds: 0, milliseconds: 0
MP Status	Running MP
Stack Bottom	ADBCB1C0
Current Stack Pointer	ADBDAE68
Stack Top	ADBDAFA8
Stack Size	65,000 Bytes
Suspend Reason	Blocked on Semaphore
Semaphore Information	 
      Semaphore Name	Atomic Semaphore
      Semaphore ID	A3C53B80
      Semaphore Value	-1
      Threads Waiting on Semaphore	1
      Current Owner	GWIMAP-Law-Handler_1

Anybody know what " Blocked on Semaphore" means?

Thanks,
Jeff

-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of Jeff
Groetsema
Sent: Friday, May 16, 2008 2:00 PM
To: Novell LAN Interest Group
Subject: RE: Server connection monitoring

A little more digging around in NORM has turned up this bit of info:

Thread Name	GWIMAP-Law-Listener
Thread ID	A43414E0
Parent NLM	GWPOA.NLM
Processor Assignment	1
Total Execution Time	seconds: 0, milliseconds: 12
MP Status	Running MP
Stack Bottom	ADBA71A0
Current Stack Pointer	ADBB6D58
Stack Top	ADBB6F88
Stack Size	65,000 Bytes
Suspend Reason	Blocked on a kernel CV

This is the thread running the IMAP listener.  In the thread name "Law"
is the name of the post office and we can see that it is running as part
of the POA and not GWIA.

The part that concerns me is the last line "Suspend Reason	Blocked
on a kernel CV".

Anybody have any ideas on what this means?

Thanks,
Jeff

-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of Jeff
Groetsema
Sent: Friday, May 16, 2008 10:33 AM
To: Novell LAN Interest Group
Subject: Server connection monitoring

I have a Netware 6.5 cluster running GroupWise 7.1 and am having imap
issues.

 

I tried setting up GWIA with imap on port 143 and could not connect
using telnet.  I then tried setting up a post office with imap (after
disabling in GWIA as they share an IP address).  Telnet to this on port
143 also fails.

 

I checked tcpcon and can see that the server is listening to port 143 on
the post office IP address.

 

The POA console shows no activity.

 

A packet capture show 3 packets from my workstation to the POA with no
responses.

 

I set up another post office in the cluster with imap and had no
problems telneting to it on port 143.

 

Two questions:

 

Anyone have any ideas on what is going on?

 

Is there a way I can monitor the connection activity internal to the
server to see if the server is taking the packet and trying to hand it
off to the POA?

 

Thanks,

Jeff

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell

From joea at j4computers.com  Fri May 16 23:07:59 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Fri, 16 May 2008 18:07:59 -0400
Subject: BE 9.2 updates
In-Reply-To: <482D8B9F.811E.0072.0@tpchd.org>
References: <482DB504020000850005DE57@FS-LIN-OES>
	<482D8B9F.811E.0072.0@tpchd.org>
Message-ID: <482DCD7E.917D.0085.0@j4computers.com>

>>> On 5/16/2008 at 4:27 PM, "Randy Grein" <RGrein at tpchd.org> wrote:
> Yeah, you do have to do a 'full install'. It picks settings up from the old 
> install though.
> 
> The server doesn't happen to have the tape drive on the same SCSI chain as 
> the hard drives, does it?

Nope.

Dell 2800, PERC for RAID, tape is on one of the built in adaptecs.    Was working fine for over a year.  Then just started hanging the server.  Always right after one of the "jobs" was finished, but before moving on to the next one.

joe a.
 
> Randy Grein
> Sr. Network Engineer
> 
> 
>>>> "joea at j4computers.com" <joea at j4computers.com> 5/16/2008 1:23 PM >>>
> I ask here, as BE is quite reluctant to speak, without a bit of oil applied, 
> so to speak.  Neither do their forums provide info.  More like formums.
> 
> Have an early version of BE 9.2 for NW.  Experiencing odd lockups of server. 
>  HW Vendor did replace Tape drive but seems unwilling to go the full Monty 
> without some more futility on my part.  So, have the latest download of BE 
> 9.2.xxx for NW, but am unsure of how to apply it as an "update".  It looks 
> like a "full install" and it's been so long since I did an "update" that I 
> don't recall.   OK, so it was not all that long ago, but still, on has to 
> make allowances.
> 
> Anyone know how?
> 
> joe a.
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell 
> 
> ****************************************************************************
> *********
> This e-mail and any attachments may contain confidential and privileged 
> information. It has been scanned for viruses. If you are not the intended 
> recipient, please notify the sender immediately by return e-mail, delete this 
> e-mail and destroy any copies. Any dissemination, use, review, disclosure, or 
> distribution of this information by a person other than the intended 
> recipient is unauthorized and may be illegal.
> ****************************************************************************
> **********
> 
> 
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell


From twessels at wildblue.net  Sat May 17 02:49:09 2008
From: twessels at wildblue.net (Timothy Wessels)
Date: Fri, 16 May 2008 21:49:09 -0400
Subject: SLES 10 SP2
Message-ID: <8fd39f090805161849g2336eaeg8fe296601320683a@mail.gmail.com>

I believe SLES 10 SP2 has reached "Gold Master Candidate" so its arrival
can't be too far away.

-- 
Tim Wessels
Tim Wessels and Associates
www.timwessels.com

From tradrobinson at yahoo.com  Sat May 17 03:31:00 2008
From: tradrobinson at yahoo.com (TradR)
Date: Fri, 16 May 2008 19:31:00 -0700 (PDT)
Subject: Network Engineer
Message-ID: <17287475.post@talk.nabble.com>


Cherokee County School District, SC
Network Engineer Position

http://tinyurl.com/6fzygg

If you know of anyone that might be interested, let them know.

Thanks!

-- 
View this message in context: http://www.nabble.com/Network-Engineer-tp17287475p17287475.html
Sent from the Novell mailing list archive at Nabble.com.


From tim at nds8.co.uk  Sat May 17 04:51:27 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Sat, 17 May 2008 04:51:27 +0100
Subject: GroupWise Restore Question
In-Reply-To: <482D6EF3.AC3C.0000.0@psc.ac.uk>
References: <482D695D020000000008F714@athena.psc.ac.uk>
	<482D6EF6020000000008F718@athena.psc.ac.uk>
	<482D6EF3.AC3C.0000.0@psc.ac.uk>
Message-ID: <482E644F020000BB0008D612@mail2.nds8.com>

Phase 1. Create a new account with the old Name (preferably on a new postoffice) - this will have a new FID.  Then use the FID editor to change the existing archive to the new FID - Unarchive the lot.  

Phase2
Change the name of the account, so that it matches the user's new name.  Archive everything.  Delete the account and then use the FID editor to change the FID back to what it was....

:-)

T


-- 

>>> On 16 May 2008 at 11:24, "Anthony Harper" <aharper at psc.ac.uk> wrote:
> Hi,
> 
> I've ran into trouble trying to restore a bunch of email messages for a user 
> that's been renamed since the backup. I've successfully restored the GW 
> domain from tape, set the restore location, and all is well if I try 
> accessing the backup location with a non-renamed user. If I try to access the 
> backup with the renamed user, I get the following error message:
> 
> GroupWise Error 8200
> GroupWise cannot open the post office files.
> 
> I've optimistically tried creating a new user with the old name, with no 
> luck. I've also had a look at the GroupWise Utilities -> Recover Deleted 
> Account wizard to restore the old un-renamed account, however since it's got 
> the same FID as the current renamed user I'm reluctant to proceed.
> 
> For the record we're running GroupWise 7.0.3.
> 
> Any ideas how I can get around this?
> 
> Regards,
> 
> Anthony
> 
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From tim at nds8.co.uk  Sat May 17 04:51:27 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Sat, 17 May 2008 04:51:27 +0100
Subject: GroupWise Restore Question
In-Reply-To: <482D6EF3.AC3C.0000.0@psc.ac.uk>
References: <482D695D020000000008F714@athena.psc.ac.uk>
	<482D6EF6020000000008F718@athena.psc.ac.uk>
	<482D6EF3.AC3C.0000.0@psc.ac.uk>
Message-ID: <482E644F020000BB0008D612@mail2.nds8.com>

Phase 1. Create a new account with the old Name (preferably on a new postoffice) - this will have a new FID.  Then use the FID editor to change the existing archive to the new FID - Unarchive the lot.  

Phase2
Change the name of the account, so that it matches the user's new name.  Archive everything.  Delete the account and then use the FID editor to change the FID back to what it was....

:-)

T


-- 

>>> On 16 May 2008 at 11:24, "Anthony Harper" <aharper at psc.ac.uk> wrote:
> Hi,
> 
> I've ran into trouble trying to restore a bunch of email messages for a user 
> that's been renamed since the backup. I've successfully restored the GW 
> domain from tape, set the restore location, and all is well if I try 
> accessing the backup location with a non-renamed user. If I try to access the 
> backup with the renamed user, I get the following error message:
> 
> GroupWise Error 8200
> GroupWise cannot open the post office files.
> 
> I've optimistically tried creating a new user with the old name, with no 
> luck. I've also had a look at the GroupWise Utilities -> Recover Deleted 
> Account wizard to restore the old un-renamed account, however since it's got 
> the same FID as the current renamed user I'm reluctant to proceed.
> 
> For the record we're running GroupWise 7.0.3.
> 
> Any ideas how I can get around this?
> 
> Regards,
> 
> Anthony
> 
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From JRD at cc.usu.edu  Sat May 17 13:23:55 2008
From: JRD at cc.usu.edu (Joe Doupnik)
Date: Sat, 17 May 2008 06:23:55 -0600 (MDT)
Subject: Server connection monitoring
Message-ID: <01MUVVN3SAQS8Y6URL@cc.usu.edu>

>A little more digging around in NORM has turned up this bit of info:
>
>Thread Name	GWIMAP-Law-Listener
>Thread ID	A43414E0
>Parent NLM	GWPOA.NLM
>Processor Assignment	1
>Total Execution Time	seconds: 0, milliseconds: 12
>MP Status	Running MP
>Stack Bottom	ADBA71A0
>Current Stack Pointer	ADBB6D58
>Stack Top	ADBB6F88
>Stack Size	65,000 Bytes
>Suspend Reason	Blocked on a kernel CV
>
>This is the thread running the IMAP listener.  In the thread name "Law"
>is the name of the post office and we can see that it is running as part
>of the POA and not GWIA.
>
>The part that concerns me is the last line "Suspend Reason	Blocked
>on a kernel CV".
>
>Anybody have any ideas on what this means?
------------
	CV is condition variable. Both this and semaphores are normal
mechanisms to coordinate matters between processes or threads. Being
blocked on them would be the normal way of going to sleep awaiting work.
	Joe D.

From aharper at psc.ac.uk  Sat May 17 21:58:53 2008
From: aharper at psc.ac.uk (Anthony Harper)
Date: Sat, 17 May 2008 21:58:53 +0100
Subject: GroupWise Restore Question
Message-ID: <482F551E020000000008F78F@athena.psc.ac.uk>

Thanks Tim, I'll give it bash!

Ant

>>> "Tim Heywood" <tim at nds8.co.uk> 17/05/08 4:52 AM >>>
Phase 1. Create a new account with the old Name (preferably on a new postoffice) - this will have a new FID.  Then use the FID editor to change the existing archive to the new FID - Unarchive the lot.  

Phase2
Change the name of the account, so that it matches the user's new name.  Archive everything.  Delete the account and then use the FID editor to change the FID back to what it was....

:-)

T


-- 

>>> On 16 May 2008 at 11:24, "Anthony Harper" <aharper at psc.ac.uk> wrote:
> Hi,
> 
> I've ran into trouble trying to restore a bunch of email messages for a user 
> that's been renamed since the backup. I've successfully restored the GW 
> domain from tape, set the restore location, and all is well if I try 
> accessing the backup location with a non-renamed user. If I try to access the 
> backup with the renamed user, I get the following error message:
> 
> GroupWise Error 8200
> GroupWise cannot open the post office files.
> 
> I've optimistically tried creating a new user with the old name, with no 
> luck. I've also had a look at the GroupWise Utilities -> Recover Deleted 
> Account wizard to restore the old un-renamed account, however since it's got 
> the same FID as the current renamed user I'm reluctant to proceed.
> 
> For the record we're running GroupWise 7.0.3.
> 
> Any ideas how I can get around this?
> 
> Regards,
> 
> Anthony
> 
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


From mkanfer at cssu.org  Fri May 16 18:07:58 2008
From: mkanfer at cssu.org (Mike Kanfer)
Date: Fri, 16 May 2008 13:07:58 -0400
Subject: NDS Schema on tree is out of date
Message-ID: <482D86FB.6307.0059.0@cssu.org>

We have installed SUSE 10sp1.  When we try to install it into our tree,
we receive and error message that says that the NDS schema is out of
date.  The rest of the tree is NW6.5sp7 and NDS is v 8.8.2. We have
tried building it several times with the same result.  At a different
site, we were able to install it without any problems.

From Setienne at enesco.com  Mon May 19 15:16:11 2008
From: Setienne at enesco.com (Scott Etienne)
Date: Mon, 19 May 2008 09:16:11 -0500
Subject: BE12 Issues
In-Reply-To: <482DB336.F0A7.0085.0@MAIL.HFS.MSU.EDU>
References: <482D5E8A.8A77.004D.0@enesco.com>
	<482DB336.F0A7.0085.0@MAIL.HFS.MSU.EDU>
Message-ID: <4831455B.8A77.004D.0@enesco.com>

That's where I found ours. Is the server NW 6.5? This file doesn't seem to exist on 5.1.

>>> "John Evans" <evansj21 at msu.edu> 5/16/2008 3:15 PM >>>
Scott,

Is this TSA.CFG in SYS\ETC\SMS?  We don't seem to have a tsafs.cfg file.

...John

>>> "Scott Etienne" <Setienne at enesco.com> 5/16/2008 11:14 AM >>>
Symantec was able to finally help us spot the offending setting on the NetWare server in the TSAFS.CFG file. I don't know why this changed when we upgraded--maybe BE changes this??? Maybe this setting didn't matter in the older versions?

We are now seeing the performance with BE12 we used to see with 10d.

The key field here is Cache Memory Threshold: 1 (changed from 10).

Enable Caching must be yes.

TSAFS.CFG:

Read Buffer Size:
65536
Read Threads Per Job:
4
Read Thread Allocation:
100
Read Ahead Throttle:
2
Cache Memory Threshold:
1
Disable Cluster:
no
Enable GroupWise:
0
Enable Caching:
yes
Disable Demigration:
no


Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From RGrein at tpchd.org  Mon May 19 16:40:10 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Mon, 19 May 2008 08:40:10 -0700
Subject: NTP problems
Message-ID: <48313CE7.811E.0072.0@tpchd.org>

9 Netware 6.5 SP7 servers with a couple of OES2 linux servers thrown into the mix, as well as AD nonsense. We are too small for a complex environment or the problems I am seeing. Since moving from timesync to NTP I've had constant problems keeping time on the network; unloading and reloading xntpd to slam the time is the only fix so far. Right now everything is suspect - the switches (extreme, rather old), the switch configuration, drivers, etc. Is anyone else experiencing this? Suggestions?

Randy Grein
Sr. Network Engineer


*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From pjc9001 at nyp.org  Mon May 19 17:01:06 2008
From: pjc9001 at nyp.org (Peter J. Cox)
Date: Mon, 19 May 2008 12:01:06 -0400
Subject: NTP problems
In-Reply-To: <48313CE7.811E.0072.0@tpchd.org>
References: <48313CE7.811E.0072.0@tpchd.org>
Message-ID: <4831A442.7030906@nyp.org>

Randy,
    We haven't had any issues after the initial install. I know it can 
be very frustrating (especially when you're in the middle of the hole) 
but can you give a few more details? Start with the NW boxes and let's 
see about working our way out. Any messages on them regarding lan 
issues? You also mention AD boxes, are they having the same/similar 
issues? Same with the Linux boxes?
    I know these are probably asinine questions but I often find that 
when I'm describing the issue I may run across the answer (Kids, that's 
why it's always important to have at least one idiot on staff. So you 
can explain it to them and go over everything one more time. Now where's 
our idiot.............whadda mean you'll explain it to me?????)

If there are any questions or problems
please contact me.
_______________________
Peter J. Cox
Network Manager, IT
NY Methodist Hospital
718-780-3250 Office
718-780-5993 HelpDesk




Randy Grein wrote:
> 9 Netware 6.5 SP7 servers with a couple of OES2 linux servers thrown into the mix, as well as AD nonsense. We are too small for a complex environment or the problems I am seeing. Since moving from timesync to NTP I've had constant problems keeping time on the network; unloading and reloading xntpd to slam the time is the only fix so far. Right now everything is suspect - the switches (extreme, rather old), the switch configuration, drivers, etc. Is anyone else experiencing this? Suggestions?
>
> Randy Grein
> Sr. Network Engineer
>
>
> *************************************************************************************
> This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
> **************************************************************************************
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>   


--------------------

This electronic message is intended to be for the use only of the named recipient, and may contain information that is confidential or privileged.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this message is strictly prohibited.  If you have received this message in error or are not the named recipient, please notify us immediately by contacting the sender at the electronic mail address noted above, and delete and destroy all copies of this message.  Thank you.



From JRD at cc.usu.edu  Mon May 19 17:24:58 2008
From: JRD at cc.usu.edu (Joe Doupnik)
Date: Mon, 19 May 2008 10:24:58 -0600 (MDT)
Subject: NTP problems
Message-ID: <01MUYW5ZBCPU8Y738N@cc.usu.edu>

> 9 Netware 6.5 SP7 servers with a couple of OES2 linux servers thrown into the
> mix, as well as AD nonsense. We are too small for a complex environment or
> the problems I am seeing. Since moving from timesync to NTP I've had constant
> problems keeping time on the network; unloading and reloading xntpd to slam
> the time is the only fix so far. Right now everything is suspect -
> the switches (extreme, rather old), the switch configuration, drivers, etc.
> Is anyone else experiencing this? Suggestions?
>
>Randy Grein
>Sr. Network Engineer
------------
	Well, Randy, something peculiar seems to be happening on your
gear because NTP is normally very well behaved.
	Let's start with NTP itself. I presume that it, not timesync,
is loaded. Recall the file sys:system/timeserv.ncf, where either timesync
or xntpd is selected as the time keeper. Check it.
	sys:etc/ntp.conf. Ensure no local clock is specified as a time
source. Instead the time sources are of the form
	server us.pool.ntp.org minpoll 4
where I have used source us.pool.ntp.org as a good NTP source.
Check that option stepclock is enabled (not commented out).
	If all that looksd good then we run ntpq from the colon prompt on
NW. Here is an example, from OES2/Linux but the same as on NW:

# ntpq
ntpq> lpeer
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
*box.sedley.net  130.88.200.6     3 u    9   64  377   31.476   -2.082   3.155
ntpq>

Note column t for type, u meaning the source is up. Reach is an 8-bit field
expressed in octal which records a 1-bit for recent contact attempts; 377
means 8 successes over past 8 tries. Column st is stratum, 0 being the real
prime clock, higher is hops from it, with 16 being countable infinity.
	Delay, offset, jitter are all in milliseconds. If your local machine
is way off in time then NTP can't synchronize. Stepclock helps, but if the
machine is too unstable then things fall apart and a new machine is needed.
I check the BIOS time when cold booting a box, as a common sense safety
factor.
	Virtual machines. Big time keeping troubles with these guys, and
that is the topic of another discussion if you are virtualizing the boxes.
	OES2/Linux uses NTP the same way, and naturally the server needs
to be on and the daemon loaded.
	Let us know if all this looks good at your end, and thus give us
some additional hints for discussion.
	Joe D.

From mgorn at fxcm.com  Mon May 19 18:02:19 2008
From: mgorn at fxcm.com (Michael Gorn)
Date: Mon, 19 May 2008 13:02:19 -0400
Subject: SLES 10 SP2
In-Reply-To: <8fd39f090805161849g2336eaeg8fe296601320683a@mail.gmail.com>
References: <8fd39f090805161849g2336eaeg8fe296601320683a@mail.gmail.com>
Message-ID: <48317A5B.A227.00C4.0@fxcm.com>

Hmm, I wonder if it's possible to download this "Gold master candidate" somewhere...

>>> "Timothy Wessels" <twessels at wildblue.net> 5/16/2008 9:49 PM >>>
I believe SLES 10 SP2 has reached "Gold Master Candidate" so its arrival
can't be too far away.

-- 
Tim Wessels
Tim Wessels and Associates
www.timwessels.com 
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From jgroetsema at pacific.edu  Mon May 19 19:04:03 2008
From: jgroetsema at pacific.edu (Jeff Groetsema)
Date: Mon, 19 May 2008 11:04:03 -0700
Subject: Server connection monitoring - solved
In-Reply-To: <20080516201042.8D72313950@mx20.pacific.edu>
Message-ID: <056970BDF175F64FA6F86DF6FC933270F7457D@EXVS1.stk.pacific.edu>

I restarted the POA on another IP address and IMAP started working.

Would sure like to know why it would not work when it shared an IP with
GWIA.

Anyway, it all works now.  Thanks for all the help even though this
should have been on the GroupWise list.

Jeff

-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of Jeff
Groetsema
Sent: Friday, May 16, 2008 1:10 PM
To: Novell LAN Interest Group
Subject: RE: Server connection monitoring

I made sure that IMAP was off on GWIA and POA then checked TCPCON and
made sure nothing was listening on port 143.  I then enabled IMAP on the
POA.  I checked TCPCON again to find it was listening on port 143.

Still cannot connect with telnet to the POA on port 143.

-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of Peter Van
Lone
Sent: Friday, May 16, 2008 11:59 AM
To: Novell LAN Interest Group
Subject: Re: Server connection monitoring

are you sure that you do not have TWO IMAP listeners? Make sure either
the POA or the GWIA are listening on 143 -- not both.

P

On Fri, May 16, 2008 at 1:22 PM, Jeff Groetsema <jgroetsema at pacific.edu>
wrote:
> JT,
>
> Yes, I have the agents set to bind exclusively to the IP address.  The
> one issue may be that the PO and GWIA use the same IP address.  This
is
> a legacy thing and cannot be changed.  I have used this configuration
in
> the past with GW5.5 and imap worked just fine.  We did move to GW6.5
for
> a while but I do not know if imap worked then.
>
> TCPCon says the server is listening on the PO/GWIA ip address and port
> 143.  I will try a port scanner to verify.
>
> I'll check out the ngwlist.  Since I'm getting no response to telnet,
I
> was not sure if this was a server thing or GroupWise.
>
> Thanks,
> Jeff
>
> -----Original Message-----
> From: novell-bounces at netlab1.oucs.ox.ac.uk
> [mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of James
Taylor
> Sent: Friday, May 16, 2008 10:49 AM
> To: Novell LAN Interest Group
> Subject: Re: Server connection monitoring
>
> Do you have the agents configured to listen solely to the defined
agent
> address?
> If you have a port scanner (I use nmap on linux, I don't know what you
> might use on Windows), you can scan the address to see if it's
listening
> on that port.
>
> By the way, there is an excellent mailing list for GW that you might
> subscribe to, of you haven't already.  You can go to www.ngwlist.com
to
> do so.
>
> -jt
>
>
>
> James Taylor
> The East Cobb Group, Inc.
> 678-697-9420
> james.taylor at eastcobbgroup.com
> http://www.eastcobbgroup.com
>
>
>
>
>
>
>
>>>> "Jeff Groetsema" <jgroetsema at pacific.edu> 5/16/2008 01:32 PM >>>
> I have a Netware 6.5 cluster running GroupWise 7.1 and am having imap
> issues.
>
>
>
> I tried setting up GWIA with imap on port 143 and could not connect
> using telnet.  I then tried setting up a post office with imap (after
> disabling in GWIA as they share an IP address).  Telnet to this on
port
> 143 also fails.
>
>
>
> I checked tcpcon and can see that the server is listening to port 143
on
> the post office IP address.
>
>
>
> The POA console shows no activity.
>
>
>
> A packet capture show 3 packets from my workstation to the POA with no
> responses.
>
>
>
> I set up another post office in the cluster with imap and had no
> problems telneting to it on port 143.
>
>
>
> Two questions:
>
>
>
> Anyone have any ideas on what is going on?
>
>
>
> Is there a way I can monitor the connection activity internal to the
> server to see if the server is taking the packet and trying to hand it
> off to the POA?
>
>
>
> Thanks,
>
> Jeff
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
"beware the terrible simplifiers."
Jacob Burckhardt, Historian


http://xkcd.com/167/

www.the-brights.net
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell

From evansj21 at msu.edu  Mon May 19 19:27:45 2008
From: evansj21 at msu.edu (John Evans)
Date: Mon, 19 May 2008 14:27:45 -0400
Subject: BE12 Issues
In-Reply-To: <4831455B.8A77.004D.0@enesco.com>
References: <482D5E8A.8A77.004D.0@enesco.com>
	<482DB336.F0A7.0085.0@MAIL.HFS.MSU.EDU>
	<4831455B.8A77.004D.0@enesco.com>
Message-ID: <48318E60.42FE.0085.0@MAIL.HFS.MSU.EDU>

Scott,
 
We have both a NW6.0SP5 and NW6.5SP7 servers as our GroupWise platforms.  We have only one NetWare 5.1 server in our tree (isn't part of our GW system and it will be out of the tree soon).  Anyway, neither server was an uppgrade from NW5.1 and neither have tsafs.cfg in sys:\etc\sms - just tsa.cfg.  That's why I asked.  I am curious as to if the file was generated by the installation of NetWare or due to the installation of Backup Exec.
 
...John

>>> "Scott Etienne" <Setienne at enesco.com> 5/19/2008 10:16 AM >>>
That's where I found ours. Is the server NW 6.5? This file doesn't seem to exist on 5.1.

>>> "John Evans" <evansj21 at msu.edu> 5/16/2008 3:15 PM >>>
Scott,

Is this TSA.CFG in SYS\ETC\SMS?  We don't seem to have a tsafs.cfg file.

...John

>>> "Scott Etienne" <Setienne at enesco.com> 5/16/2008 11:14 AM >>>
Symantec was able to finally help us spot the offending setting on the NetWare server in the TSAFS.CFG file. I don't know why this changed when we upgraded--maybe BE changes this??? Maybe this setting didn't matter in the older versions?

We are now seeing the performance with BE12 we used to see with 10d.

The key field here is Cache Memory Threshold: 1 (changed from 10).

Enable Caching must be yes.

TSAFS.CFG:

Read Buffer Size:
65536
Read Threads Per Job:
4
Read Thread Allocation:
100
Read Ahead Throttle:
2
Cache Memory Threshold:
1
Disable Cluster:
no
Enable GroupWise:
0
Enable Caching:
yes
Disable Demigration:
no


Thank you,

Scott Etienne
Network Engineer
Enesco, LLC
setienne at enesco.com 


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 


From RGrein at tpchd.org  Mon May 19 20:26:51 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Mon, 19 May 2008 12:26:51 -0700
Subject: NTP problems
In-Reply-To: <01MUYW5ZBCPU8Y738N@cc.usu.edu>
References: <01MUYW5ZBCPU8Y738N@cc.usu.edu>
Message-ID: <4831722D.811E.0072.0@tpchd.org>

Thanks - the ntpq hint really helps.
Most of our servers are HP DL380s. Configuration is basically what you suggested - only differences from a vanilla configuration are that I tried local clock and peering our primary time servers in an attempt to stabilize, which of course didn't help. I have kept the peering but removed the local clock per your recommendation. I'm checking ntpq on my primary time servers now; both show high reach numbers (377 for 1, 376 for the other) but one (health-nds) shows no success connecting to the other. Late last week I checked and updated the network drivers on health-nds; nothing solid suggested driver issues but the overall feel was that NTP was not getting through all the time and drivers are part of the chain. A spot check of the other servers shows they are also having good success synching time with health-nds (updated drivers) and consistent failures with the other server.

I'll report back after getting the cluster server updated...



Randy Grein
Sr. Network Engineer


>>> Joe Doupnik <JRD at cc.usu.edu> 5/19/2008 9:24 AM >>>
> 9 Netware 6.5 SP7 servers with a couple of OES2 linux servers thrown into the
> mix, as well as AD nonsense. We are too small for a complex environment or
> the problems I am seeing. Since moving from timesync to NTP I've had constant
> problems keeping time on the network; unloading and reloading xntpd to slam
> the time is the only fix so far. Right now everything is suspect -
> the switches (extreme, rather old), the switch configuration, drivers, etc.
> Is anyone else experiencing this? Suggestions?
>
>Randy Grein
>Sr. Network Engineer
------------
	Well, Randy, something peculiar seems to be happening on your
gear because NTP is normally very well behaved.
	Let's start with NTP itself. I presume that it, not timesync,
is loaded. Recall the file sys:system/timeserv.ncf, where either timesync
or xntpd is selected as the time keeper. Check it.
	sys:etc/ntp.conf. Ensure no local clock is specified as a time
source. Instead the time sources are of the form
	server us.pool.ntp.org minpoll 4
where I have used source us.pool.ntp.org as a good NTP source.
Check that option stepclock is enabled (not commented out).
	If all that looksd good then we run ntpq from the colon prompt on
NW. Here is an example, from OES2/Linux but the same as on NW:

# ntpq
ntpq> lpeer
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
*box.sedley.net  130.88.200.6     3 u    9   64  377   31.476   -2.082   3.155
ntpq>

Note column t for type, u meaning the source is up. Reach is an 8-bit field
expressed in octal which records a 1-bit for recent contact attempts; 377
means 8 successes over past 8 tries. Column st is stratum, 0 being the real
prime clock, higher is hops from it, with 16 being countable infinity.
	Delay, offset, jitter are all in milliseconds. If your local machine
is way off in time then NTP can't synchronize. Stepclock helps, but if the
machine is too unstable then things fall apart and a new machine is needed.
I check the BIOS time when cold booting a box, as a common sense safety
factor.
	Virtual machines. Big time keeping troubles with these guys, and
that is the topic of another discussion if you are virtualizing the boxes.
	OES2/Linux uses NTP the same way, and naturally the server needs
to be on and the daemon loaded.
	Let us know if all this looks good at your end, and thus give us
some additional hints for discussion.
	Joe D.
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From James.Taylor at eastcobbgroup.com  Mon May 19 21:29:52 2008
From: James.Taylor at eastcobbgroup.com (James Taylor)
Date: Mon, 19 May 2008 16:29:52 -0400
Subject: Server connection monitoring - solved
In-Reply-To: <4831AA95.9252.0075.1@eastcobbgroup.com>
References: <20080516201042.8D72313950@mx20.pacific.edu>
	<4831AA95.9252.0075.1@eastcobbgroup.com>
Message-ID: <4831AB0002000075000291E8@inet.eastcobbgroup.com>

More than likely, if GWIA was showing IMAP disabled in ConsoleOne, ConsoleOne was lying to you.
I have run into situations on several occassions where C1 displayed the desired settingm but the setting was actually different in the running agent.
I had to set it to a different setting, save, then set it back to the one I wanted to get the setting in sync with the agent.
-jt 
 

James Taylor
The East Cobb Group, Inc.
678-697-9420
james.taylor at eastcobbgroup.com
http://www.eastcobbgroup.com







>>> "Jeff Groetsema" <jgroetsema at pacific.edu> 5/19/2008 02:04 PM >>> 
I restarted the POA on another IP address and IMAP started working.

Would sure like to know why it would not work when it shared an IP with
GWIA.

Anyway, it all works now.  Thanks for all the help even though this
should have been on the GroupWise list.

Jeff

-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of Jeff
Groetsema
Sent: Friday, May 16, 2008 1:10 PM
To: Novell LAN Interest Group
Subject: RE: Server connection monitoring

I made sure that IMAP was off on GWIA and POA then checked TCPCON and
made sure nothing was listening on port 143.  I then enabled IMAP on the
POA.  I checked TCPCON again to find it was listening on port 143.

Still cannot connect with telnet to the POA on port 143.

-----Original Message-----
From: novell-bounces at netlab1.oucs.ox.ac.uk
[mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of Peter Van
Lone
Sent: Friday, May 16, 2008 11:59 AM
To: Novell LAN Interest Group
Subject: Re: Server connection monitoring

are you sure that you do not have TWO IMAP listeners? Make sure either
the POA or the GWIA are listening on 143 -- not both.

P

On Fri, May 16, 2008 at 1:22 PM, Jeff Groetsema <jgroetsema at pacific.edu>
wrote:
> JT,
>
> Yes, I have the agents set to bind exclusively to the IP address.  The
> one issue may be that the PO and GWIA use the same IP address.  This
is
> a legacy thing and cannot be changed.  I have used this configuration
in
> the past with GW5.5 and imap worked just fine.  We did move to GW6.5
for
> a while but I do not know if imap worked then.
>
> TCPCon says the server is listening on the PO/GWIA ip address and port
> 143.  I will try a port scanner to verify.
>
> I'll check out the ngwlist.  Since I'm getting no response to telnet,
I
> was not sure if this was a server thing or GroupWise.
>
> Thanks,
> Jeff
>
> -----Original Message-----
> From: novell-bounces at netlab1.oucs.ox.ac.uk
> [mailto:novell-bounces at netlab1.oucs.ox.ac.uk] On Behalf Of James
Taylor
> Sent: Friday, May 16, 2008 10:49 AM
> To: Novell LAN Interest Group
> Subject: Re: Server connection monitoring
>
> Do you have the agents configured to listen solely to the defined
agent
> address?
> If you have a port scanner (I use nmap on linux, I don't know what you
> might use on Windows), you can scan the address to see if it's
listening
> on that port.
>
> By the way, there is an excellent mailing list for GW that you might
> subscribe to, of you haven't already.  You can go to www.ngwlist.com
to
> do so.
>
> -jt
>
>
>
> James Taylor
> The East Cobb Group, Inc.
> 678-697-9420
> james.taylor at eastcobbgroup.com
> http://www.eastcobbgroup.com
>
>
>
>
>
>
>
>>>> "Jeff Groetsema" <jgroetsema at pacific.edu> 5/16/2008 01:32 PM >>>
> I have a Netware 6.5 cluster running GroupWise 7.1 and am having imap
> issues.
>
>
>
> I tried setting up GWIA with imap on port 143 and could not connect
> using telnet.  I then tried setting up a post office with imap (after
> disabling in GWIA as they share an IP address).  Telnet to this on
port
> 143 also fails.
>
>
>
> I checked tcpcon and can see that the server is listening to port 143
on
> the post office IP address.
>
>
>
> The POA console shows no activity.
>
>
>
> A packet capture show 3 packets from my workstation to the POA with no
> responses.
>
>
>
> I set up another post office in the cluster with imap and had no
> problems telneting to it on port 143.
>
>
>
> Two questions:
>
>
>
> Anyone have any ideas on what is going on?
>
>
>
> Is there a way I can monitor the connection activity internal to the
> server to see if the server is taking the packet and trying to hand it
> off to the POA?
>
>
>
> Thanks,
>
> Jeff
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
"beware the terrible simplifiers."
Jacob Burckhardt, Historian


http://xkcd.com/167/

www.the-brights.net
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


From automatedprocess at bellsouth.net  Mon May 19 22:44:00 2008
From: automatedprocess at bellsouth.net (Stephen Cummings)
Date: Mon, 19 May 2008 17:44:00 -0400
Subject: Where is????
Message-ID: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop>

I have installed iManager 2.7 in my classroom environment. Once the students start using NetWare....when we got to the point of using iPrint, NDPS and BROKER it was not available. We would like to continue using iManager 2.7. Where is iPrint? Is it a separate application now. 

Please advise

Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE

From cmangiarelli at gmail.com  Mon May 19 21:52:56 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Mon, 19 May 2008 16:52:56 -0400
Subject: Where is????
In-Reply-To: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop>
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop>
Message-ID: <f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com>

As far as I know, it's just an NPM you download and install into your
iManager instance.  I downloaded mine through iManager but I checked
support.novell.com and I don't see it listed there.  The NPM I have loaded
is "iPrint_NetWare_iMan27.npm"

Name: iPrint NetWare Management Plug-in
Version: 2.7.0.20070824
Description: Allows management of iPrint services on Netware.

I'll send you the NPM off-list, as it's 4MB in size.

On Mon, May 19, 2008 at 5:44 PM, Stephen Cummings <
automatedprocess at bellsouth.net> wrote:

> I have installed iManager 2.7 in my classroom environment. Once the
> students start using NetWare....when we got to the point of using iPrint,
> NDPS and BROKER it was not available. We would like to continue using
> iManager 2.7. Where is iPrint? Is it a separate application now.
>
> Please advise
>
> Stephen Cummings
> A+, Net +, CNA 5x, 6x,
> CNE 5x, 6x, NAI, CNI,
> MCNE
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From cmangiarelli at gmail.com  Mon May 19 21:56:19 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Mon, 19 May 2008 16:56:19 -0400
Subject: Where is????
In-Reply-To: <f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com>
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop>
	<f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com>
Message-ID: <f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com>

Hmmm, GMAIL is showing your email address as automatedprocess at bellsouth.net.
I am assuming that is bogus.  Is that your real email address?  If not,
where should I send the NPM?

On Mon, May 19, 2008 at 4:52 PM, Christopher Mangiarelli <
cmangiarelli at gmail.com> wrote:

> As far as I know, it's just an NPM you download and install into your
> iManager instance.  I downloaded mine through iManager but I checked
> support.novell.com and I don't see it listed there.  The NPM I have loaded
> is "iPrint_NetWare_iMan27.npm"
>
> Name: iPrint NetWare Management Plug-in
> Version: 2.7.0.20070824
> Description: Allows management of iPrint services on Netware.
>
> I'll send you the NPM off-list, as it's 4MB in size.
>
>
> On Mon, May 19, 2008 at 5:44 PM, Stephen Cummings <
> automatedprocess at bellsouth.net> wrote:
>
>> I have installed iManager 2.7 in my classroom environment. Once the
>> students start using NetWare....when we got to the point of using iPrint,
>> NDPS and BROKER it was not available. We would like to continue using
>> iManager 2.7. Where is iPrint? Is it a separate application now.
>>
>> Please advise
>>
>> Stephen Cummings
>> A+, Net +, CNA 5x, 6x,
>> CNE 5x, 6x, NAI, CNI,
>> MCNE
>> _______________________________________________
>> Novell mailing list
>> Novell at netlab1.oucs.ox.ac.uk
>> http://netlab1.usu.edu/mailman/listinfo/novell
>>
>
-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From twessels at wildblue.net  Mon May 19 22:05:09 2008
From: twessels at wildblue.net (Timothy Wessels)
Date: Mon, 19 May 2008 17:05:09 -0400
Subject: SLES 10 SP2 GMC
Message-ID: <8fd39f090805191405g26b6f59fo1a485c8e866b2e73@mail.gmail.com>

 Message: 18
Date: Mon, 19 May 2008 13:02:19 -0400
From: "Michael Gorn" <mgorn at fxcm.com>
Subject: Re: SLES 10 SP2
To: <novell at netlab1.oucs.ox.ac.uk>
Message-ID: <48317A5B.A227.00C4.0 at fxcm.com>
Content-Type: text/plain; charset=US-ASCII

>Hmm, I wonder if it's possible to download this "Gold master candidate"
somewhere...

As far as I know SLES 10 SP2 is not publicly available.  I only know about
because I'm a Novell beta tester for OES2 SP1 and we have access to the SLES
10 SP2 code builds for testing.

Tim Wesels
-- 
Tim Wessels
Tim Wessels and Associates
182 Sunridge Road
Rindge, NH 03461
www.timwessels.com
978.413.0201

From automatedprocess at bellsouth.net  Mon May 19 23:15:17 2008
From: automatedprocess at bellsouth.net (Stephen Cummings)
Date: Mon, 19 May 2008 18:15:17 -0400
Subject: Where is????
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop><f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com>
	<f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com>
Message-ID: <060901c8b9fd$d1c87960$0301a8c0@apcdesktop>

YES. That is my email address....... automatedprocess at bellsouth.net

Thanks for your help

Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
----- Original Message ----- 
From: "Christopher Mangiarelli" <cmangiarelli at gmail.com>
To: "Novell LAN Interest Group" <novell at netlab1.oucs.ox.ac.uk>
Sent: Monday, May 19, 2008 4:56 PM
Subject: Re: Where is????


> Hmmm, GMAIL is showing your email address as
automatedprocess at bellsouth.net.
> I am assuming that is bogus.  Is that your real email address?  If not,
> where should I send the NPM?
>
> On Mon, May 19, 2008 at 4:52 PM, Christopher Mangiarelli <
> cmangiarelli at gmail.com> wrote:
>
> > As far as I know, it's just an NPM you download and install into your
> > iManager instance.  I downloaded mine through iManager but I checked
> > support.novell.com and I don't see it listed there.  The NPM I have
loaded
> > is "iPrint_NetWare_iMan27.npm"
> >
> > Name: iPrint NetWare Management Plug-in
> > Version: 2.7.0.20070824
> > Description: Allows management of iPrint services on Netware.
> >
> > I'll send you the NPM off-list, as it's 4MB in size.
> >
> >
> > On Mon, May 19, 2008 at 5:44 PM, Stephen Cummings <
> > automatedprocess at bellsouth.net> wrote:
> >
> >> I have installed iManager 2.7 in my classroom environment. Once the
> >> students start using NetWare....when we got to the point of using
iPrint,
> >> NDPS and BROKER it was not available. We would like to continue using
> >> iManager 2.7. Where is iPrint? Is it a separate application now.
> >>
> >> Please advise
> >>
> >> Stephen Cummings
> >> A+, Net +, CNA 5x, 6x,
> >> CNE 5x, 6x, NAI, CNI,
> >> MCNE
> >> _______________________________________________
> >> Novell mailing list
> >> Novell at netlab1.oucs.ox.ac.uk
> >> http://netlab1.usu.edu/mailman/listinfo/novell
> >>
> >
> -- 
> Christopher Mangiarelli
> cmangiarelli at gmail.com
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



From petervl at gmail.com  Mon May 19 22:26:26 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 19 May 2008 16:26:26 -0500
Subject: OSS monitoring tools for SAN switches?
Message-ID: <68b791330805191426q56203c5fv12fb518a316233e5@mail.gmail.com>

Anyone ever heard of an open source monitoring tool for SAN switch fabrics?

Do either  MRTG or Nagios have SAN fabric plugins? I have looked, but
not found ... though my search may not be definitive ...

Peter




-- 
"beware the terrible simplifiers."
Jacob Burckhardt, Historian


http://xkcd.com/167/

www.the-brights.net

From awleask at gmail.com  Tue May 20 02:16:39 2008
From: awleask at gmail.com (Alister Leask)
Date: Tue, 20 May 2008 13:16:39 +1200
Subject: OSS monitoring tools for SAN switches?
In-Reply-To: <68b791330805191426q56203c5fv12fb518a316233e5@mail.gmail.com>
References: <68b791330805191426q56203c5fv12fb518a316233e5@mail.gmail.com>
Message-ID: <397cc55b0805191816t48cad0c5v6f1af0a62d586d5f@mail.gmail.com>

The APERI project. The code was donated by IBM and is based on their
Total Storage Performance Centre suit, or so I gather.

www.eclipse.org/aperi

This supposedly does end-to-end storage, so also has methods to gather
info from SAN connected hosts and storage etc.



On Tue, May 20, 2008 at 9:26 AM, Peter Van Lone <petervl at gmail.com> wrote:
> Anyone ever heard of an open source monitoring tool for SAN switch fabrics?
>
> Do either  MRTG or Nagios have SAN fabric plugins? I have looked, but
> not found ... though my search may not be definitive ...
>
> Peter
>
>
>
>
> --
> "beware the terrible simplifiers."
> Jacob Burckhardt, Historian
>
>
> http://xkcd.com/167/
>
> www.the-brights.net
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
Alister Leask

From petervl at gmail.com  Tue May 20 02:35:20 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 19 May 2008 20:35:20 -0500
Subject: OSS monitoring tools for SAN switches?
In-Reply-To: <397cc55b0805191816t48cad0c5v6f1af0a62d586d5f@mail.gmail.com>
References: <68b791330805191426q56203c5fv12fb518a316233e5@mail.gmail.com>
	<397cc55b0805191816t48cad0c5v6f1af0a62d586d5f@mail.gmail.com>
Message-ID: <68b791330805191835g2907abc5u9ba205162275aa19@mail.gmail.com>

excellent, thank you!

On Mon, May 19, 2008 at 8:16 PM, Alister Leask <awleask at gmail.com> wrote:
> The APERI project. The code was donated by IBM and is based on their
> Total Storage Performance Centre suit, or so I gather.
>
> www.eclipse.org/aperi
>
> This supposedly does end-to-end storage, so also has methods to gather
> info from SAN connected hosts and storage etc.
>
>
>
> On Tue, May 20, 2008 at 9:26 AM, Peter Van Lone <petervl at gmail.com> wrote:
>> Anyone ever heard of an open source monitoring tool for SAN switch fabrics?
>>
>> Do either  MRTG or Nagios have SAN fabric plugins? I have looked, but
>> not found ... though my search may not be definitive ...
>>
>> Peter
>>
>>
>>
>>
>> --
>> "beware the terrible simplifiers."
>> Jacob Burckhardt, Historian
>>
>>
>> http://xkcd.com/167/
>>
>> www.the-brights.net
>> _______________________________________________
>> Novell mailing list
>> Novell at netlab1.oucs.ox.ac.uk
>> http://netlab1.usu.edu/mailman/listinfo/novell
>>
>
>
>
> --
> Alister Leask
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
"beware the terrible simplifiers."
Jacob Burckhardt, Historian


http://xkcd.com/167/

www.the-brights.net

From smf34 at cam.ac.uk  Tue May 20 09:16:09 2008
From: smf34 at cam.ac.uk (Simon Flood)
Date: Tue, 20 May 2008 09:16:09 +0100
Subject: SLES 10 SP2 GMC
In-Reply-To: <8fd39f090805191405g26b6f59fo1a485c8e866b2e73@mail.gmail.com>
References: <8fd39f090805191405g26b6f59fo1a485c8e866b2e73@mail.gmail.com>
Message-ID: <483288C9.3020908@cam.ac.uk>

On 19/05/2008 22:05, Timothy Wessels wrote:

> As far as I know SLES 10 SP2 is not publicly available.  I only know about
> because I'm a Novell beta tester for OES2 SP1 and we have access to the SLES
> 10 SP2 code builds for testing.

Not yet.

Be patient people and you will be rewarded ...

Simon

From smf34 at cam.ac.uk  Tue May 20 14:48:06 2008
From: smf34 at cam.ac.uk (Simon Flood)
Date: Tue, 20 May 2008 14:48:06 +0100
Subject: SLES 10 SP2 GMC
In-Reply-To: <483288C9.3020908@cam.ac.uk>
References: <8fd39f090805191405g26b6f59fo1a485c8e866b2e73@mail.gmail.com>
	<483288C9.3020908@cam.ac.uk>
Message-ID: <4832D696.3090408@cam.ac.uk>

On 20/05/2008 09:16, Simon Flood wrote:

> Be patient people and you will be rewarded ...

It's now available - see 
http://download.novell.com/Download?buildid=xWohTS2zkSs~

Hope this helps,
Simon

From RGrein at tpchd.org  Tue May 20 17:44:59 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Tue, 20 May 2008 09:44:59 -0700
Subject: NTP problems
In-Reply-To: <01MUYW5ZBCPU8Y738N@cc.usu.edu>
References: <01MUYW5ZBCPU8Y738N@cc.usu.edu>
Message-ID: <48329D95.811E.0072.0@tpchd.org>

Further information about my NTP problems...
This crept up on me slowly; it was about a month after installing SP7 and a couple weeks after migrating to NTP from timesync that the problems became apparent. My initial thought was that someone was changing configurations, then that perhaps we had an unreliable time source. When I saw time was unsteady on our internal primary as well as downstream servers I started thinking NTP or communication problems. I couldn't prove one or the other until your post; guess I need to bone up on NTP utilities again. Some utilities (remote console and eDIR access) were sluggish and erratic but that could have been several things including communications errors. Correlating the NTP reliability with specific servers allowed me to see a pattern - ntp sync to the server with outdated drivers would frequently fail whereas the success rate to the server with current drivers was almost perfect.  

Last night I was able to upgrade drivers on a couple of servers and reconfigure time to use one of those as our primary internal server. (I'm aware the old timesync classifications don't quite fit with NTP; this would actually be closest to a Single time server.) We're not perfect yet but time is much better. I have updated drivers waiting for the rest of the servers and will load them tonight.

Randy Grein
Sr. Network Engineer


>>> Joe Doupnik <JRD at cc.usu.edu> 5/19/2008 9:24 AM >>>
> 9 Netware 6.5 SP7 servers with a couple of OES2 linux servers thrown into the
> mix, as well as AD nonsense. We are too small for a complex environment or
> the problems I am seeing. Since moving from timesync to NTP I've had constant
> problems keeping time on the network; unloading and reloading xntpd to slam
> the time is the only fix so far. Right now everything is suspect -
> the switches (extreme, rather old), the switch configuration, drivers, etc.
> Is anyone else experiencing this? Suggestions?
>
>Randy Grein
>Sr. Network Engineer
------------
	Well, Randy, something peculiar seems to be happening on your
gear because NTP is normally very well behaved.
	Let's start with NTP itself. I presume that it, not timesync,
is loaded. Recall the file sys:system/timeserv.ncf, where either timesync
or xntpd is selected as the time keeper. Check it.
	sys:etc/ntp.conf. Ensure no local clock is specified as a time
source. Instead the time sources are of the form
	server us.pool.ntp.org minpoll 4
where I have used source us.pool.ntp.org as a good NTP source.
Check that option stepclock is enabled (not commented out).
	If all that looksd good then we run ntpq from the colon prompt on
NW. Here is an example, from OES2/Linux but the same as on NW:

# ntpq
ntpq> lpeer
     remote           refid      st t when poll reach   delay   offset  jitter
==============================================================================
*box.sedley.net  130.88.200.6     3 u    9   64  377   31.476   -2.082   3.155
ntpq>

<snip>

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From wmhblair at comcast.net  Tue May 20 18:01:10 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 12:01:10 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <47FCA219.6E24.0005.0@kcumb.edu>
Message-ID: <HDEMIMHLCNKIEDEHAEMEEELIHOAB.wmhblair@comcast.net>

A planned extended power outage forced me to shutdown
one of the last remaining NetWare 4.1 servers I have.
In the past, an array of UPSs enabled me to keep it up
during unexpected power outages and UPS battery changes. 
But not this time. If it had only lasted just three more 
months, it would have logged 8 full YEARS of continuous 
uptime. It was never upgraded because it simply kept on 
working. But it was down to its last attached printer,
first attached to it sometime in 2001 or 2002, I think.

When it was brought back up, everything worked just fine
(all the NetWare volumes, connectivity to other servers,
etc.), except that the printer (which was not touched in
any way) now fails to pull jobs from the print queue. PCs
can put jobs in the queue, but nothing prints. I know it
is probably something that was done in 2002 that needs to
be redone (like something missing from AUTOEXEC.NCF), but
I have no clue what that is. Most remaining printers are
driven by external print servers w/TCP/IP. Consequently, 
everything I once knew about NW driving IPX printers has 
drained from my brain. This printer communicates via IPX 
and print jobs are queued to the NetWare server, however.

All of the NDS objects associated with the printer are 
still there, and look exactly as they did before, except
that their status is (obviously) not normal.
 
The only clue I might offer those of you who still have
any knowledge of this type of printing is this message:

NPRINTER-NLM-4.15-12: Print Server XXXXXXXX is down.   
 
The printer itself did not go down during the power outage
but that should not have been an issue because the printer
normally gets powered off almost daily, and it always came
back up and started printing work queued on its NW server.

--
WB

From hchin at sfu.ca  Tue May 20 18:19:40 2008
From: hchin at sfu.ca (Fred Chin)
Date: Tue, 20 May 2008 10:19:40 -0700 (PDT)
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEEELIHOAB.wmhblair@comcast.net>
Message-ID: <1411198306.129081211303980442.JavaMail.root@jaguar7.sfu.ca>

Just to double check. Is PSERVER loaded?
 LOAD PSERVER XXXXXXX

Fred

--------------------------

NPRINTER-NLM-4.15-12: Print Server XXXXXXXX is down.   
 

--
WB
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


From RGrein at tpchd.org  Tue May 20 18:19:30 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Tue, 20 May 2008 10:19:30 -0700
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEEELIHOAB.wmhblair@comcast.net>
References: <47FCA219.6E24.0005.0@kcumb.edu>
	<HDEMIMHLCNKIEDEHAEMEEELIHOAB.wmhblair@comcast.net>
Message-ID: <4832A5AB.811E.0072.0@tpchd.org>

Could be a couple of things - the printer doesn't have it's IPX network address if the printer is operating in print server mode, more likely it's waiting for the print server nlm to run on the server itself. Is there a print server object in NDS? If so, type pserver at the console and browse to the print server name in the selection box. Once you have that you can check the autoexec.ncf file to ensure it's in there correctly (probably not); to the pserver command you'll have to append the print server name and possibly context.

Randy Grein
Sr. Network Engineer


>>> "William H. Blair" <wmhblair at comcast.net> 5/20/2008 10:01 AM >>>
A planned extended power outage forced me to shutdown
one of the last remaining NetWare 4.1 servers I have.
In the past, an array of UPSs enabled me to keep it up
during unexpected power outages and UPS battery changes. 
But not this time. If it had only lasted just three more 
months, it would have logged 8 full YEARS of continuous 
uptime. It was never upgraded because it simply kept on 
working. But it was down to its last attached printer,
first attached to it sometime in 2001 or 2002, I think.

When it was brought back up, everything worked just fine
(all the NetWare volumes, connectivity to other servers,
etc.), except that the printer (which was not touched in
any way) now fails to pull jobs from the print queue. PCs
can put jobs in the queue, but nothing prints. I know it
is probably something that was done in 2002 that needs to
be redone (like something missing from AUTOEXEC.NCF), but
I have no clue what that is. Most remaining printers are
driven by external print servers w/TCP/IP. Consequently, 
everything I once knew about NW driving IPX printers has 
drained from my brain. This printer communicates via IPX 
and print jobs are queued to the NetWare server, however.

All of the NDS objects associated with the printer are 
still there, and look exactly as they did before, except
that their status is (obviously) not normal.
 
The only clue I might offer those of you who still have
any knowledge of this type of printing is this message:

NPRINTER-NLM-4.15-12: Print Server XXXXXXXX is down.   
 
The printer itself did not go down during the power outage
but that should not have been an issue because the printer
normally gets powered off almost daily, and it always came
back up and started printing work queued on its NW server.

--
WB
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From James.Taylor at eastcobbgroup.com  Tue May 20 18:23:33 2008
From: James.Taylor at eastcobbgroup.com (James Taylor)
Date: Tue, 20 May 2008 13:23:33 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <4832D0AF.9252.0075.1@eastcobbgroup.com>
References: <47FCA219.6E24.0005.0@kcumb.edu>
	<4832D0AF.9252.0075.1@eastcobbgroup.com>
Message-ID: <4832D0D50200007500029402@inet.eastcobbgroup.com>

You may have already tried this, but on the older jetdirect devices, you had to reset the printer after a server reboot before it would talk to the print server again.
-jt
 
 

James Taylor
The East Cobb Group, Inc.
678-697-9420
james.taylor at eastcobbgroup.com
http://www.eastcobbgroup.com







>>> "William H. Blair" <wmhblair at comcast.net> 5/20/2008 01:01 PM >>> 
A planned extended power outage forced me to shutdown
one of the last remaining NetWare 4.1 servers I have.
In the past, an array of UPSs enabled me to keep it up
during unexpected power outages and UPS battery changes. 
But not this time. If it had only lasted just three more 
months, it would have logged 8 full YEARS of continuous 
uptime. It was never upgraded because it simply kept on 
working. But it was down to its last attached printer,
first attached to it sometime in 2001 or 2002, I think.

When it was brought back up, everything worked just fine
(all the NetWare volumes, connectivity to other servers,
etc.), except that the printer (which was not touched in
any way) now fails to pull jobs from the print queue. PCs
can put jobs in the queue, but nothing prints. I know it
is probably something that was done in 2002 that needs to
be redone (like something missing from AUTOEXEC.NCF), but
I have no clue what that is. Most remaining printers are
driven by external print servers w/TCP/IP. Consequently, 
everything I once knew about NW driving IPX printers has 
drained from my brain. This printer communicates via IPX 
and print jobs are queued to the NetWare server, however.

All of the NDS objects associated with the printer are 
still there, and look exactly as they did before, except
that their status is (obviously) not normal.
 
The only clue I might offer those of you who still have
any knowledge of this type of printing is this message:

NPRINTER-NLM-4.15-12: Print Server XXXXXXXX is down.   
 
The printer itself did not go down during the power outage
but that should not have been an issue because the printer
normally gets powered off almost daily, and it always came
back up and started printing work queued on its NW server.

--
WB
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell



From pjc9001 at nyp.org  Tue May 20 18:52:47 2008
From: pjc9001 at nyp.org (Peter J. Cox)
Date: Tue, 20 May 2008 13:52:47 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEEELIHOAB.wmhblair@comcast.net>
References: <HDEMIMHLCNKIEDEHAEMEEELIHOAB.wmhblair@comcast.net>
Message-ID: <48330FEF.3000903@nyp.org>

Another thing you may want to check out, make sure that the server and 
the print server are both running the same IPX frame types (802.2 and/or 
802.3) we used to have a couple of old Intel netports and Jetdirects 
that would reset to 802.3 when power cycled.

If there are any questions or problems
please contact me.
_______________________
Peter J. Cox
Network Manager, IT
NY Methodist Hospital
718-780-3250 Office
718-780-5993 HelpDesk




William H. Blair wrote:
> A planned extended power outage forced me to shutdown
> one of the last remaining NetWare 4.1 servers I have.
> In the past, an array of UPSs enabled me to keep it up
> >>SNIP<<
> --
> WB
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>   


--------------------

This electronic message is intended to be for the use only of the named recipient, and may contain information that is confidential or privileged.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this message is strictly prohibited.  If you have received this message in error or are not the named recipient, please notify us immediately by contacting the sender at the electronic mail address noted above, and delete and destroy all copies of this message.  Thank you.



From RGrein at tpchd.org  Tue May 20 18:57:14 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Tue, 20 May 2008 10:57:14 -0700
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <48330FEF.3000903@nyp.org>
References: <HDEMIMHLCNKIEDEHAEMEEELIHOAB.wmhblair@comcast.net>
	<48330FEF.3000903@nyp.org>
Message-ID: <4832AE83.811E.0072.0@tpchd.org>

Good point Peter. I've had to fix quite a few systems where auto frame type (the default for windows and other stupid systems) was left turned on. The systems select the first frame type they see coming in - regardless of the protocol bound to it. So these days you'll often get a selection of ethernet_ii on more modern devices.

Randy Grein
Sr. Network Engineer


>>> "Peter J. Cox" <pjc9001 at nyp.org> 5/20/2008 10:52 AM >>>
Another thing you may want to check out, make sure that the server and 
the print server are both running the same IPX frame types (802.2 and/or 
802.3) we used to have a couple of old Intel netports and Jetdirects 
that would reset to 802.3 when power cycled.

If there are any questions or problems
please contact me.
_______________________
Peter J. Cox
Network Manager, IT
NY Methodist Hospital
718-780-3250 Office
718-780-5993 HelpDesk




William H. Blair wrote:
> A planned extended power outage forced me to shutdown
> one of the last remaining NetWare 4.1 servers I have.
> In the past, an array of UPSs enabled me to keep it up
> >>SNIP<<
> --
> WB
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell 
>
>   


--------------------

This electronic message is intended to be for the use only of the named recipient, and may contain information that is confidential or privileged.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this message is strictly prohibited.  If you have received this message in error or are not the named recipient, please notify us immediately by contacting the sender at the electronic mail address noted above, and delete and destroy all copies of this message.  Thank you.



*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From jetadmin at gmail.com  Tue May 20 19:14:47 2008
From: jetadmin at gmail.com (Eric Rothweiler)
Date: Tue, 20 May 2008 14:14:47 -0400
Subject: BE12 Issues
In-Reply-To: <48318E60.42FE.0085.0@MAIL.HFS.MSU.EDU>
References: <482D5E8A.8A77.004D.0@enesco.com>
	<482DB336.F0A7.0085.0@MAIL.HFS.MSU.EDU>
	<4831455B.8A77.004D.0@enesco.com>
	<48318E60.42FE.0085.0@MAIL.HFS.MSU.EDU>
Message-ID: <1d6cdac70805201114o7e1ca616v66fd50b7a0b0a8b1@mail.gmail.com>

There was a somewhat recent change in tsafs to read options from the .cfg
file -v- command line.  It may be that you needed to load tsafs with a
command line option to trigger the crreation of the .cfg file?  Either way,
your 6.5 SP7 server(s) definately have a version of tsafs that wants the
options in sys:etc\sms\tsafs.cfg

Eric


On 5/19/08, John Evans <evansj21 at msu.edu> wrote:
>
> Scott,
>
> We have both a NW6.0SP5 and NW6.5SP7 servers as our GroupWise
> platforms.  We have only one NetWare 5.1 server in our tree (isn't part of
> our GW system and it will be out of the tree soon).  Anyway, neither server
> was an uppgrade from NW5.1 and neither have tsafs.cfg in sys:\etc\sms - just
> tsa.cfg.  That's why I asked.  I am curious as to if the file was generated
> by the installation of NetWare or due to the installation of Backup Exec.
>
> ...John
>
> >>> "Scott Etienne" <Setienne at enesco.com> 5/19/2008 10:16 AM >>>
> That's where I found ours. Is the server NW 6.5? This file doesn't seem to
> exist on 5.1.
>
> >>> "John Evans" <evansj21 at msu.edu> 5/16/2008 3:15 PM >>>
> Scott,
>
> Is this TSA.CFG in SYS\ETC\SMS?  We don't seem to have a tsafs.cfg file.
>
> ...John
>
> >>> "Scott Etienne" <Setienne at enesco.com> 5/16/2008 11:14 AM >>>
> Symantec was able to finally help us spot the offending setting on the
> NetWare server in the TSAFS.CFG file. I don't know why this changed when we
> upgraded--maybe BE changes this??? Maybe this setting didn't matter in the
> older versions?
>
> We are now seeing the performance with BE12 we used to see with 10d.
>
> The key field here is Cache Memory Threshold: 1 (changed from 10).
>
> Enable Caching must be yes.
>
> TSAFS.CFG:
>
> Read Buffer Size:
> 65536
> Read Threads Per Job:
> 4
> Read Thread Allocation:
> 100
> Read Ahead Throttle:
> 2
> Cache Memory Threshold:
> 1
> Disable Cluster:
> no
> Enable GroupWise:
> 0
> Enable Caching:
> yes
> Disable Demigration:
> no
>
>
> Thank you,
>
> Scott Etienne
> Network Engineer
> Enesco, LLC
> setienne at enesco.com
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>

From cmangiarelli at gmail.com  Tue May 20 19:28:54 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 20 May 2008 14:28:54 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <4832AE83.811E.0072.0@tpchd.org>
References: <HDEMIMHLCNKIEDEHAEMEEELIHOAB.wmhblair@comcast.net>
	<48330FEF.3000903@nyp.org> <4832AE83.811E.0072.0@tpchd.org>
Message-ID: <f47566ff0805201128g384147ffp6b37ef01caf13757@mail.gmail.com>

Another thing to try doing is to delete the JetDirect Print Server object
and have the installation utility recreate it.  In Queue-Server mode, the
JetDirect needs to be able to log into the Novell server to service a queue
and sometimes the passwords get out of sync.  Recreating the PS object fixes
that.

On Tue, May 20, 2008 at 1:57 PM, Randy Grein <RGrein at tpchd.org> wrote:

> Good point Peter. I've had to fix quite a few systems where auto frame type
> (the default for windows and other stupid systems) was left turned on. The
> systems select the first frame type they see coming in - regardless of the
> protocol bound to it. So these days you'll often get a selection of
> ethernet_ii on more modern devices.
>
> Randy Grein
> Sr. Network Engineer
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From wmhblair at comcast.net  Tue May 20 20:11:05 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 14:11:05 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <1411198306.129081211303980442.JavaMail.root@jaguar7.sfu.ca>
Message-ID: <HDEMIMHLCNKIEDEHAEMEEEMHHOAB.wmhblair@comcast.net>

The printer works correctly when spoken to directly via TCP/IP.
This is no different than before. Some workstations accessed it 
as a network printer via TCP/IP, and others (on a different LAN 
segment) sent print jobs to the NetWare server for it to pick
up.

> Just to double check. Is PSERVER loaded?
> LOAD PSERVER XXXXXXX

No. It wasn't. But (to my knowledge) PSERVER wasn't loaded
_before_ the server was shutdown. I checked a CONFIG print-
out made some number of weeks before the shutdown; it wasn't 
loaded and the printer was working fine, then. I do not ever
remember using PSERVER, except for a local-attached printer
(e.g., LPT1 ... back when you did such things). PSERVER for
an IPX printer? Huh? Not in my experience. (Or at least not
in my memory any more.) But then, as I said, it's been more 
than 6 years since this printer was installed on THIS server, 
and lots of gray matter has been lost since then. 

> Could be a couple of things - the printer doesn't have
> it's IPX network address if the printer is operating in 
> print server mode 

Nothing was changed on the printer and the printer remained
up during the server shutdown, power outage, and start up.
Since then, the printer has been turned off and back on.
The printer's (web) interface still shows the what some old
printouts (that just happened to have been kept) indicate to 
be the same IPX address: "IPX address: 0.0001E67910EF" and 
frame type: "EN_8022".

> more likely it's waiting for the print server nlm to run 
> on the server itself. 

Could be. But I never, to my knowledge anyway, started one.
And, one was not running before the server was shutdown. I
never saw it in the module list (that I remember, anyway), 
and CONFIG does not show it in a run made a few months back.

> Is there a print server object in NDS? 

Yes. Here is the hierarchy:

             CLJ4550A            [Print Server (Non NDPS)]
              \
               \
                HPColorLJ4500_P  [Printer (Non NDPS)]
                 \
                  \
                   HPColorLJ     [Print Queue]


Some potentially interesting items that may be worth
noting: 

(1) The "Status" of HPColorLJ4500_P is shown as 
    "Not Connected".

(2) There is, to the left of HPColorLJ4500_P, a small icon
    of a printer with a red exclamation mark to its right.

    I assume that this means the same things as the fact
    that the printer is supposedly "Not Connected." 

(3) The printer "Type" is defined as "Manual Load (Remote)
    in polled mode on LPT1". This is exactly how it was 
    defined back when it was working correctly. It is NOT
    attached to LPT1 as a parallel printer, of course. It
    just has a LAN cable connecting it to the JetDirect
    card.

(4) The Network address for the print server object is 
    shown as:  "IPX: DEADDEAD:000000000001:8060

(5) The Network address for the printer object is blank.
 
> If so, type pserver at the console 

??? Unknown command ???

> and browse to the print server name in the selection box. 
> Once you have that you can check the autoexec.ncf file to 
> ensure it's in there correctly (probably not);

Regardless, no PSERVER text exists in AUTOEXEC.NCF. It never 
did have any (looking at old, moldy printouts for disaster 
recovery purposes, just in case). Of course that does not 
mean that someone (but that someone would have been ME) did 
not manually LOAD it from the console. But if I did, I don't 
remember doing it. But, I would not have done it. Instead, 
an OLD release of the HP Install Network Printer Wizard was
used to make the NW server changes originally. That release
is now no longer available for download and current releases
do not support IPX-attached NetWare printers, unfortunately.

If PSERVER was LOADed by the HPINPW utility, then the printer
somehow continued to run long after PSERVER had been unloaded,
since I have CONFIG printouts (where the printer was working
just fine) which show (or seem to show) that there was no 
PSERVER.NLM loaded (or listed in the list of loaded modules).

> to the pserver command you'll have to append the 
> print server name and possibly context.

Just to test this, I entered "LOAD PSERVER CLJ4550A.CCCCC"
and received this message:

| Network printer HPColorLJ4500_P (number 0) loaded
| and attached to print server CLJ4550A.

Nothing changed. Powered cycled the printer. Stroked it via
the JetDirect web interface. Changed some things to the wrong
values, clicked Apply, printed the configuration from the 
printer control panel itself, then changed them back, clicked
Apply again, and checked that the printer got them set back
correctly (as they were before). Power cycled the printer
again. No joy. No change in the status of the printer from
the NetWare administrator's point of view, either.

> You may have already tried this, but on the older jetdirect 
> devices, you had to reset the printer after a server reboot 
> before it would talk to the print server again.

I have turned the printer off and back on, at least four times
since I got your response, but no joy.

> Another thing you may want to check out, make sure that the 
> server and the print server are both running the same IPX 
> frame types (802.2 and/or 802.3) we used to have a couple of 
> old Intel netports and Jetdirects that would reset to 802.3 
> when power cycled.

The frame type is 802.2. This was not a problem in the past
because the printer was turned off and on, sometimes several
times a day. In any event, it's been turned off and back on
a dozen times or more in the past two days, and it still has 
the correct frame type (according to its own config printout).

Here is what the printer itself has to say (courtesy of the
embedded JetDirect web server):

| ------ HP JetDirect Configuration ------
| Model Number:                     J6057A 
| Hardware Address:           0001E67910EF
| Firmware Version:                R.25.57
| LAA:                        0001E67910EF
| 
| --------------- IPX/SPX ----------------
| Status:       UNABLE TO SENSE NET NUMBER  <=== NOTE
| 
| Primary Frame Type:              EN_8022
| 
| Network        Frame Type           Rcvd
| Unknown        EN_802.2            62121
| 
| ------------ Novell/NetWare ------------
| Status:                               29
|   UNABLE TO SENSE NET NUMBER              <=== NOTE
| Node Name:                      CLJ4550A
| NetWare Mode:               Queue Server  <=== NOTE
| NDS Tree Name:                   TTTTTTT
| NDS Context:                       CCCCC

> Another thing to try doing is to delete the JetDirect 
> Print Server object and have the installation utility 
> recreate it. 

As I stated just above, the current version of this HP
utility does not support IPX printers, and the PC on 
which it once existed and was run to define the printer 
properly (it ran for nearly 6 years without problems on 
this NW server) has long ago bit the dust. It just never 
occurred to me to keep the old version, since I did not 
imagine that HP would drop IPX-attached printer support. 

So, I can't do that ... unless someone knows where I
could get a hold of the right version/release (4, I 
think, is the last one that supported IPX printers).

> In Queue-Server mode, the JetDirect needs to be able 
> to log into the Novell server to service a queue and 
> sometimes the passwords get out of sync.  Recreating 
> the PS object fixes that.

The password is blank. Should be no problem there. I can
load PSERVER without having to specify a password.

--
WB

From pjc9001 at nyp.org  Tue May 20 20:25:37 2008
From: pjc9001 at nyp.org (Peter J. Cox)
Date: Tue, 20 May 2008 15:25:37 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEEEMHHOAB.wmhblair@comcast.net>
References: <HDEMIMHLCNKIEDEHAEMEEEMHHOAB.wmhblair@comcast.net>
Message-ID: <483325B1.2060309@nyp.org>

WB,
    Not to beat a dead horse but you've identified the IPX frame type 
running on the print server (the Jetdirect) but (again I know you 
probably have but I don't see it in the emails and it's like an asperger 
thing. I need to see a specific answer, sorry) have you ensured that IPX 
and the correct frame type are running on the server (it's possible it 
got remmed out somewhere along the line or had been a manual load, I 
used to have an operator who liked to do that he felt it ensured him job 
security, you'll notice I said used to....)?

If there are any questions or problems
please contact me.
_______________________
Peter J. Cox
Network Manager, IT
NY Methodist Hospital
718-780-3250 Office
718-780-5993 HelpDesk




William H. Blair wrote:
> The printer works correctly when spoken to directly via TCP/IP.
> This is no different than before. Some workstations accessed it 
> as a network printer via TCP/IP, and others (on a different LAN 
> segment) sent print jobs to the NetWare server for it to pick
> up.
>
>   
>> Just to double check. Is PSERVER loaded?
>> LOAD PSERVER XXXXXXX
>>     
>
> No. It wasn't. But (to my knowledge) PSERVER wasn't loaded
> _before_ the server was shutdown. I checked a CONFIG print-
> out made some number of weeks before the shutdown; it wasn't 
> loaded and the printer was working fine, then. I do not ever
> remember using PSERVER, except for a local-attached printer
> (e.g., LPT1 ... back when you did such things). PSERVER for
> an IPX printer? Huh? Not in my experience. (Or at least not
> in my memory any more.) But then, as I said, it's been more 
> than 6 years since this printer was installed on THIS server, 
> and lots of gray matter has been lost since then. 
>
>   
>> Could be a couple of things - the printer doesn't have
>> it's IPX network address if the printer is operating in 
>> print server mode 
>>     
>
> Nothing was changed on the printer and the printer remained
> up during the server shutdown, power outage, and start up.
> Since then, the printer has been turned off and back on.
> The printer's (web) interface still shows the what some old
> printouts (that just happened to have been kept) indicate to 
> be the same IPX address: "IPX address: 0.0001E67910EF" and 
> frame type: "EN_8022".
>
>   
>> more likely it's waiting for the print server nlm to run 
>> on the server itself. 
>>     
>
> Could be. But I never, to my knowledge anyway, started one.
> And, one was not running before the server was shutdown. I
> never saw it in the module list (that I remember, anyway), 
> and CONFIG does not show it in a run made a few months back.
>
>   
>> Is there a print server object in NDS? 
>>     
>
> Yes. Here is the hierarchy:
>
>              CLJ4550A            [Print Server (Non NDPS)]
>               \
>                \
>                 HPColorLJ4500_P  [Printer (Non NDPS)]
>                  \
>                   \
>                    HPColorLJ     [Print Queue]
>
>
> Some potentially interesting items that may be worth
> noting: 
>
> (1) The "Status" of HPColorLJ4500_P is shown as 
>     "Not Connected".
>
> (2) There is, to the left of HPColorLJ4500_P, a small icon
>     of a printer with a red exclamation mark to its right.
>
>     I assume that this means the same things as the fact
>     that the printer is supposedly "Not Connected." 
>
> (3) The printer "Type" is defined as "Manual Load (Remote)
>     in polled mode on LPT1". This is exactly how it was 
>     defined back when it was working correctly. It is NOT
>     attached to LPT1 as a parallel printer, of course. It
>     just has a LAN cable connecting it to the JetDirect
>     card.
>
> (4) The Network address for the print server object is 
>     shown as:  "IPX: DEADDEAD:000000000001:8060
>
> (5) The Network address for the printer object is blank.
>  
>   
>> If so, type pserver at the console 
>>     
>
> ??? Unknown command ???
>
>   
>> and browse to the print server name in the selection box. 
>> Once you have that you can check the autoexec.ncf file to 
>> ensure it's in there correctly (probably not);
>>     
>
> Regardless, no PSERVER text exists in AUTOEXEC.NCF. It never 
> did have any (looking at old, moldy printouts for disaster 
> recovery purposes, just in case). Of course that does not 
> mean that someone (but that someone would have been ME) did 
> not manually LOAD it from the console. But if I did, I don't 
> remember doing it. But, I would not have done it. Instead, 
> an OLD release of the HP Install Network Printer Wizard was
> used to make the NW server changes originally. That release
> is now no longer available for download and current releases
> do not support IPX-attached NetWare printers, unfortunately.
>
> If PSERVER was LOADed by the HPINPW utility, then the printer
> somehow continued to run long after PSERVER had been unloaded,
> since I have CONFIG printouts (where the printer was working
> just fine) which show (or seem to show) that there was no 
> PSERVER.NLM loaded (or listed in the list of loaded modules).
>
>   
>> to the pserver command you'll have to append the 
>> print server name and possibly context.
>>     
>
> Just to test this, I entered "LOAD PSERVER CLJ4550A.CCCCC"
> and received this message:
>
> | Network printer HPColorLJ4500_P (number 0) loaded
> | and attached to print server CLJ4550A.
>
> Nothing changed. Powered cycled the printer. Stroked it via
> the JetDirect web interface. Changed some things to the wrong
> values, clicked Apply, printed the configuration from the 
> printer control panel itself, then changed them back, clicked
> Apply again, and checked that the printer got them set back
> correctly (as they were before). Power cycled the printer
> again. No joy. No change in the status of the printer from
> the NetWare administrator's point of view, either.
>
>   
>> You may have already tried this, but on the older jetdirect 
>> devices, you had to reset the printer after a server reboot 
>> before it would talk to the print server again.
>>     
>
> I have turned the printer off and back on, at least four times
> since I got your response, but no joy.
>
>   
>> Another thing you may want to check out, make sure that the 
>> server and the print server are both running the same IPX 
>> frame types (802.2 and/or 802.3) we used to have a couple of 
>> old Intel netports and Jetdirects that would reset to 802.3 
>> when power cycled.
>>     
>
> The frame type is 802.2. This was not a problem in the past
> because the printer was turned off and on, sometimes several
> times a day. In any event, it's been turned off and back on
> a dozen times or more in the past two days, and it still has 
> the correct frame type (according to its own config printout).
>
> Here is what the printer itself has to say (courtesy of the
> embedded JetDirect web server):
>
> | ------ HP JetDirect Configuration ------
> | Model Number:                     J6057A 
> | Hardware Address:           0001E67910EF
> | Firmware Version:                R.25.57
> | LAA:                        0001E67910EF
> | 
> | --------------- IPX/SPX ----------------
> | Status:       UNABLE TO SENSE NET NUMBER  <=== NOTE
> | 
> | Primary Frame Type:              EN_8022
> | 
> | Network        Frame Type           Rcvd
> | Unknown        EN_802.2            62121
> | 
> | ------------ Novell/NetWare ------------
> | Status:                               29
> |   UNABLE TO SENSE NET NUMBER              <=== NOTE
> | Node Name:                      CLJ4550A
> | NetWare Mode:               Queue Server  <=== NOTE
> | NDS Tree Name:                   TTTTTTT
> | NDS Context:                       CCCCC
>
>   
>> Another thing to try doing is to delete the JetDirect 
>> Print Server object and have the installation utility 
>> recreate it. 
>>     
>
> As I stated just above, the current version of this HP
> utility does not support IPX printers, and the PC on 
> which it once existed and was run to define the printer 
> properly (it ran for nearly 6 years without problems on 
> this NW server) has long ago bit the dust. It just never 
> occurred to me to keep the old version, since I did not 
> imagine that HP would drop IPX-attached printer support. 
>
> So, I can't do that ... unless someone knows where I
> could get a hold of the right version/release (4, I 
> think, is the last one that supported IPX printers).
>
>   
>> In Queue-Server mode, the JetDirect needs to be able 
>> to log into the Novell server to service a queue and 
>> sometimes the passwords get out of sync.  Recreating 
>> the PS object fixes that.
>>     
>
> The password is blank. Should be no problem there. I can
> load PSERVER without having to specify a password.
>
> --
> WB
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>   


--------------------

This electronic message is intended to be for the use only of the named recipient, and may contain information that is confidential or privileged.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this message is strictly prohibited.  If you have received this message in error or are not the named recipient, please notify us immediately by contacting the sender at the electronic mail address noted above, and delete and destroy all copies of this message.  Thank you.



From cmangiarelli at gmail.com  Tue May 20 20:28:38 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 20 May 2008 15:28:38 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEEEMHHOAB.wmhblair@comcast.net>
References: <1411198306.129081211303980442.JavaMail.root@jaguar7.sfu.ca>
	<HDEMIMHLCNKIEDEHAEMEEEMHHOAB.wmhblair@comcast.net>
Message-ID: <f47566ff0805201228u1eb5203m55efd251429799de@mail.gmail.com>

1.  "UNABLE TO SENSE NET NUMBER" error could mean that even though it's
configured for the 802.2 protocol, you haven't set an IPX network ID.  Some
people try to use auto-detection, others set it, depends on your network and
available routing protocols.

2.  Wow, I didn't know you couldn't configure IPX printing anymore.  There
has to be an old version of HP JetAdmin lying around on the internet
somewhere.  A simple google search showed me "
http://webinstituteforteachers.org/resources/software/HP/JetAdmin/" that has
v3.06 available.  If you do download it, make sure to scan first before
running it... Smokey the Bear says, "Remember kids, always practice safe web
browsing." (well he didn't really say it).

3.  I though the password was set to something non-blank when the print
server created its object.  This was to close a security hole back in the
day when PS objects with blank passwords could be used to crack into the
directory.

4.  PSERVER probably has nothing to do with this if you were operating in
queue-server mode.  In queue server mode, the PS logs into the server as if
it was a client device.  This used to consume a Novell license back in the
day and used to make people really mad when they would buy 50 user licenses
but have 10 printers consume them so that only 40 people could actually log
into the network.  PSERVER was one way to operate a printer such that it did
not consume a license.  In queue-server mode, the IPX printer would poll the
print queue occassionally for jobs.  If PSERVER was used, it was up to the
NLM to push print jobs to the printer.

5.  Why not just create an NDPS print agent for this printer and have the
NDPS PA service the old queue?  This way you don't need to change what your
workstations point to.  Just a thought... I deleted the original email so I
don't recall if you had NDPS as an available option in your tree.

On Tue, May 20, 2008 at 3:11 PM, William H. Blair <wmhblair at comcast.net>
wrote:

> | ------ HP JetDirect Configuration ------
> | Model Number:                     J6057A
> | Hardware Address:           0001E67910EF
> | Firmware Version:                R.25.57
> | LAA:                        0001E67910EF
> |
> | --------------- IPX/SPX ----------------
> | Status:       UNABLE TO SENSE NET NUMBER  <=== NOTE
> |
> | Primary Frame Type:              EN_8022
> |
> | Network        Frame Type           Rcvd
> | Unknown        EN_802.2            62121
> |
> | ------------ Novell/NetWare ------------
> | Status:                               29
> |   UNABLE TO SENSE NET NUMBER              <=== NOTE
> | Node Name:                      CLJ4550A
> | NetWare Mode:               Queue Server  <=== NOTE
> | NDS Tree Name:                   TTTTTTT
> | NDS Context:                       CCCCC
>

> > Another thing to try doing is to delete the JetDirect
> > Print Server object and have the installation utility
> > recreate it.
>
> As I stated just above, the current version of this HP
> utility does not support IPX printers, and the PC on
> which it once existed and was run to define the printer
> properly (it ran for nearly 6 years without problems on
> this NW server) has long ago bit the dust. It just never
> occurred to me to keep the old version, since I did not
> imagine that HP would drop IPX-attached printer support.
>
> So, I can't do that ... unless someone knows where I
> could get a hold of the right version/release (4, I
> think, is the last one that supported IPX printers).
>
> > In Queue-Server mode, the JetDirect needs to be able
> > to log into the Novell server to service a queue and
> > sometimes the passwords get out of sync.  Recreating
> > the PS object fixes that.
>
> The password is blank. Should be no problem there. I can
> load PSERVER without having to specify a password.
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From wmhblair at comcast.net  Tue May 20 20:37:59 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 14:37:59 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <483325B1.2060309@nyp.org>
Message-ID: <HDEMIMHLCNKIEDEHAEMEOEMKHOAB.wmhblair@comcast.net>

>  have you ensured that IPX 

That's the ONLY protocol used by this server anywhere
for anything.  It's basically 1996-era hardware, and
was upgraded to NW 4.1 in 1999 at some point. Hot swap
SCSI drives have enabled it to stay powered up through
many disk hardware changes since 2000.

> and the correct frame type 

Only 802.2 is bound on each of two LAN adapters.

> are running on the server

Yep.  But I'll be glad to check anything specific you 
think would be advisable. But as far as I know, when 
the LAN cards bind only 802.2, then that's it, right? 

Nothing changed on the server. Just DOWNed and rebooted.
Nobody but me has physical access to it, anyway. It is,
quite literally, as a dinosaur, housed in my office.

--
WB


From cjf at calfrye.com  Tue May 20 20:47:52 2008
From: cjf at calfrye.com (Cal Frye)
Date: Tue, 20 May 2008 15:47:52 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <f47566ff0805201228u1eb5203m55efd251429799de@mail.gmail.com>
References: <1411198306.129081211303980442.JavaMail.root@jaguar7.sfu.ca>	<HDEMIMHLCNKIEDEHAEMEEEMHHOAB.wmhblair@comcast.net>
	<f47566ff0805201228u1eb5203m55efd251429799de@mail.gmail.com>
Message-ID: <48332AE8.1000206@calfrye.com>

Christopher Mangiarelli wrote:
> 2.  Wow, I didn't know you couldn't configure IPX printing anymore.  There
> has to be an old version of HP JetAdmin lying around on the internet
> somewhere.  A simple google search showed me "
> http://webinstituteforteachers.org/resources/software/HP/JetAdmin/" that has
> v3.06 available.  If you do download it, make sure to scan first before
> running it... Smokey the Bear says, "Remember kids, always practice safe web
> browsing." (well he didn't really say it).

I seem to recall deleting and recreating these guys, and it can be done 
with JetAdmin ( /not/ the web version ) alone. My copy of this old 
utility came on the discs with a 4050 series printer; perhaps you have 
some old HP driver discs still lying around?

-- 
Regards,
-- Cal Frye, Network Administrator, Oberlin College

    www.calfrye.com,  www.pitalabs.com


"The most important thing in any relationship is not what you get but 
what you give." -- Eleanor Roosevelt.

From wmhblair at comcast.net  Tue May 20 20:52:53 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 14:52:53 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <f47566ff0805201228u1eb5203m55efd251429799de@mail.gmail.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEMEMNHOAB.wmhblair@comcast.net>

> 1.  "UNABLE TO SENSE NET NUMBER" error could mean that 
> even though it's configured for the 802.2 protocol, you 
> haven't set an IPX network ID. 

I'll buy that. But I have no clue how to set it. And, there
is nothing in anything that I can see or have read that tells
me how to do that, and nothing that shows anything so labeled.

Can I buy a clue?

> has to be an old version of HP JetAdmin lying around on 
> the internet somewhere.

I have a current version of it and it works just fine with
the printer ... the few times I have used it. But it does
not define printers and NDS objects. This HP thingy is not
the "Install Network Printer Wizard" which is what was used
originally. I have downloaded old versions of this back to
5, and I found a note somewhere on the web that HP dropped
IPX printer support in that release, and that 4 was the last
one to be able to do it. But, I have not found an HP INPW 4
anywhere to download.

> 3.  I though the password was set to something non-blank 
> when the print server created its object.

If that was the case, it was blank the first time I referenced
it using PSERVER (in what I knew would be a fruitless venture,
but I tried, anyway).

> 4.  PSERVER probably has nothing to do with this if you were 
> operating in queue-server mode. 

That's what I thought. But, it's been 6 years, so who was I to
say?

>  if you had NDPS as an available option in your tree.

It's a NetWare 4.1 box, so I don't think so & would not want to
mess with it anyway, on _this_ box. I just want it to work like
it did a few days ago. I really need all the jobs that have been 
accumulating on the server to be printed, to print. But the main 
reason it needs to work again is to support the set of PCs which
cannot connect to this printer via TCP/IP.
   
--
WB



From wmhblair at comcast.net  Tue May 20 20:58:31 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 14:58:31 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <48332AE8.1000206@calfrye.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEKEMOHOAB.wmhblair@comcast.net>

> perhaps you have some old HP driver discs still lying around?

I wish. I've gone thru the dusty stack, but no joy. This is
the last place I've turned to for help, having exhausted all
my tricks and nooks and other NW friends. The only HP LJ 45xx
CD-ROM I have, apparently the last one that HP made available,
does not have any support for IPX attachment and/or NW 4.1 and
they even say so explicitly. 

> and it can be done with JetAdmin 

Used not to be. I had an old version installed when the printer
was originally attached to this server. It couldn't do it then.
Since then I have installed a more recent version, and it does
not have IPX / NW 4.1 support to do this (that I know of or can
see or is discussed in the Help, etc.).

--
WB



From cmangiarelli at gmail.com  Tue May 20 21:01:50 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 20 May 2008 16:01:50 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEMEMNHOAB.wmhblair@comcast.net>
References: <f47566ff0805201228u1eb5203m55efd251429799de@mail.gmail.com>
	<HDEMIMHLCNKIEDEHAEMEMEMNHOAB.wmhblair@comcast.net>
Message-ID: <f47566ff0805201301u66b6c0ddk508c2066380fc6df@mail.gmail.com>

1. Not sure.  If the printer has an internal JetDirect, you could configure
it through that crappy lcd interface.  If its an external, you have to use a
management utility to set it.

2.  I've never used the software you speak of.  Way back when I was doing
IPX printing, I used nothing but HP JetAdmin (not web) to configure
jetdirects for queue-server mode.  The HP software would create everything I
needed and then I would go into NWADMIN and add user rights to the queues.

3. I don't think the password is blank.  Though it's been so long since I've
used PSERVER.NLM that I can't tell if your test was valid.

4.  Fair enough on NDPS.  If we can get you to the point of creating another
IPX Print Server in NDS that the printer can attach as, you can always move
the queue to be serviced later.. or drag and drop the print outs in the
current queue to a new queue (but that would require you to change your
workstations to a new queue name).

On Tue, May 20, 2008 at 3:52 PM, William H. Blair <wmhblair at comcast.net>
wrote:

> > 1.  "UNABLE TO SENSE NET NUMBER" error could mean that
> > even though it's configured for the 802.2 protocol, you
> > haven't set an IPX network ID.
>
> I'll buy that. But I have no clue how to set it. And, there
> is nothing in anything that I can see or have read that tells
> me how to do that, and nothing that shows anything so labeled.
>
> Can I buy a clue?
>
> > has to be an old version of HP JetAdmin lying around on
> > the internet somewhere.
>
> I have a current version of it and it works just fine with
> the printer ... the few times I have used it. But it does
> not define printers and NDS objects. This HP thingy is not
> the "Install Network Printer Wizard" which is what was used
> originally. I have downloaded old versions of this back to
> 5, and I found a note somewhere on the web that HP dropped
> IPX printer support in that release, and that 4 was the last
> one to be able to do it. But, I have not found an HP INPW 4
> anywhere to download.
>
> > 3.  I though the password was set to something non-blank
> > when the print server created its object.
>
> If that was the case, it was blank the first time I referenced
> it using PSERVER (in what I knew would be a fruitless venture,
> but I tried, anyway).
>
> > 4.  PSERVER probably has nothing to do with this if you were
> > operating in queue-server mode.
>
> That's what I thought. But, it's been 6 years, so who was I to
> say?
>
> >  if you had NDPS as an available option in your tree.
>
> It's a NetWare 4.1 box, so I don't think so & would not want to
> mess with it anyway, on _this_ box. I just want it to work like
> it did a few days ago. I really need all the jobs that have been
> accumulating on the server to be printed, to print. But the main
> reason it needs to work again is to support the set of PCs which
> cannot connect to this printer via TCP/IP.
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From jgramse at utah.gov  Tue May 20 21:10:06 2008
From: jgramse at utah.gov (Jim Gramse)
Date: Tue, 20 May 2008 14:10:06 -0600
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEKEMOHOAB.wmhblair@comcast.net>
References: <48332AE8.1000206@calfrye.com>
	<HDEMIMHLCNKIEDEHAEMEKEMOHOAB.wmhblair@comcast.net>
Message-ID: <4832DBB7.3F60.0076.0@utah.gov>

Even if you find the jetadmin it requires windows 98. Is that a possibility? I had a old dedicated laptop with 98 just for that until we went to NDPS... Do a search for a copy on someone's server out there....

>>> "William H. Blair" <wmhblair at comcast.net> 5/20/2008 1:58 PM >>>
> perhaps you have some old HP driver discs still lying around?

I wish. I've gone thru the dusty stack, but no joy. This is
the last place I've turned to for help, having exhausted all
my tricks and nooks and other NW friends. The only HP LJ 45xx
CD-ROM I have, apparently the last one that HP made available,
does not have any support for IPX attachment and/or NW 4.1 and
they even say so explicitly. 

> and it can be done with JetAdmin 

Used not to be. I had an old version installed when the printer
was originally attached to this server. It couldn't do it then.
Since then I have installed a more recent version, and it does
not have IPX / NW 4.1 support to do this (that I know of or can
see or is discussed in the Help, etc.).

--
WB


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From wmhblair at comcast.net  Tue May 20 21:15:42 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 15:15:42 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <f47566ff0805201301u66b6c0ddk508c2066380fc6df@mail.gmail.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEIENBHOAB.wmhblair@comcast.net>

>  If the printer has an internal JetDirect, you could configure
> it through that crappy lcd interface.

According to everything I see on that interface now, the printer IS
configured properly. What would I change from how it is configured
now? It is configured just like it was before (when the printer was 
working). How do I know? I still have the config panel printouts 
that you can get the printer to make. I don't know what I would or 
should change. Clues, please.

--
WB


From wmhblair at comcast.net  Tue May 20 21:15:41 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 15:15:41 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <4832DBB7.3F60.0076.0@utah.gov>
Message-ID: <HDEMIMHLCNKIEDEHAEMEGENBHOAB.wmhblair@comcast.net>

> Even if you find the jetadmin it requires windows 98. 

Nope. I ran it on Windows 2000. That's all we had. Never did
run 98 here. 

--
WB


From wmhblair at comcast.net  Tue May 20 21:17:42 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 15:17:42 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <f47566ff0805201301u66b6c0ddk508c2066380fc6df@mail.gmail.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEGENCHOAB.wmhblair@comcast.net>

> 2.  I've never used the software you speak of.  Way back when 
> I was doing IPX printing, I used nothing but HP JetAdmin (not 
> web) to configure jetdirects for queue-server mode.  The HP 
> software would create everything I needed and then I would go 
> into NWADMIN and add user rights to the queues.

That may be (I don't ever remember seeing that capability), but
it (the most recent release) does not support IPX or NW 4.1 now.

--
WB


From wmhblair at comcast.net  Tue May 20 21:21:01 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 15:21:01 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEGENBHOAB.wmhblair@comcast.net>
Message-ID: <HDEMIMHLCNKIEDEHAEMEAENDHOAB.wmhblair@comcast.net>

For what it's worth, what I apparently need is 3 (not 4).
According to several pages at hp.com regarding the INPW
utility:

| IPX/SPX support discontinued (Version 4.0 and above) 
|
| Since INPW Version 4.0 IPX/SPX (both IPX/SPX Direct 
| Mode and Novell Netware configurations) have not been 
| supported.

In fact, my MRM notes on the original install of this
printer onto this server includes the number 3 (but I
was not until now aware of the significance of that).

Needless to say, the only version you can find at HP.com
is 6.0.

--
WB

From RGrein at tpchd.org  Tue May 20 21:20:27 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Tue, 20 May 2008 13:20:27 -0700
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEMEMNHOAB.wmhblair@comcast.net>
References: <f47566ff0805201228u1eb5203m55efd251429799de@mail.gmail.com>
	<HDEMIMHLCNKIEDEHAEMEMEMNHOAB.wmhblair@comcast.net>
Message-ID: <4832D016.811E.0072.0@tpchd.org>

I think you've identified the problem well enough - you need the 3.x or 4.x version of the jetadmin tool, which only runs on Windows 95/98. I see three options:

1. Configure frame type in the printer. This MAY be possible, I don't have one handy to check.
2. Try this software from HP: http://h10025.www1.hp.com/ewfrf/wc/genericDocument?lc=en&cc=us&dlc=en&docname=bpj06765
3. Replace the printer setup. I really don't like this idea, but beyond a certain point the surrounding infrastructure makes it impossible to continue using something that still works but is unsupported.


Randy Grein
Sr. Network Engineer


>>> "William H. Blair" <wmhblair at comcast.net> 5/20/2008 12:52 PM >>>
> 1.  "UNABLE TO SENSE NET NUMBER" error could mean that 
> even though it's configured for the 802.2 protocol, you 
> haven't set an IPX network ID. 

I'll buy that. But I have no clue how to set it. And, there
is nothing in anything that I can see or have read that tells
me how to do that, and nothing that shows anything so labeled.

Can I buy a clue?

> has to be an old version of HP JetAdmin lying around on 
> the internet somewhere.

I have a current version of it and it works just fine with
the printer ... the few times I have used it. But it does
not define printers and NDS objects. This HP thingy is not
the "Install Network Printer Wizard" which is what was used
originally. I have downloaded old versions of this back to
5, and I found a note somewhere on the web that HP dropped
IPX printer support in that release, and that 4 was the last
one to be able to do it. But, I have not found an HP INPW 4
anywhere to download.

> 3.  I though the password was set to something non-blank 
> when the print server created its object.

If that was the case, it was blank the first time I referenced
it using PSERVER (in what I knew would be a fruitless venture,
but I tried, anyway).

> 4.  PSERVER probably has nothing to do with this if you were 
> operating in queue-server mode. 

That's what I thought. But, it's been 6 years, so who was I to
say?

>  if you had NDPS as an available option in your tree.

It's a NetWare 4.1 box, so I don't think so & would not want to
mess with it anyway, on _this_ box. I just want it to work like
it did a few days ago. I really need all the jobs that have been 
accumulating on the server to be printed, to print. But the main 
reason it needs to work again is to support the set of PCs which
cannot connect to this printer via TCP/IP.
   
--
WB


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From cmangiarelli at gmail.com  Tue May 20 21:24:45 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 20 May 2008 16:24:45 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEGENCHOAB.wmhblair@comcast.net>
References: <f47566ff0805201301u66b6c0ddk508c2066380fc6df@mail.gmail.com>
	<HDEMIMHLCNKIEDEHAEMEGENCHOAB.wmhblair@comcast.net>
Message-ID: <f47566ff0805201324x60788713j99c772d5178fa395@mail.gmail.com>

My point is to download an old release and do it through that.  I sent the
link to an old v3 version of the JetAdmin software in a prior email.  If
other people have other idea's, then they are welcome to chime in.  It's
been over 5 years since I configured an IPX printer and I can only tell you
what I did at the time.

On Tue, May 20, 2008 at 4:17 PM, William H. Blair <wmhblair at comcast.net>
wrote:

> > 2.  I've never used the software you speak of.  Way back when
> > I was doing IPX printing, I used nothing but HP JetAdmin (not
> > web) to configure jetdirects for queue-server mode.  The HP
> > software would create everything I needed and then I would go
> > into NWADMIN and add user rights to the queues.
>
> That may be (I don't ever remember seeing that capability), but
> it (the most recent release) does not support IPX or NW 4.1 now.
>
> --
> WB
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From bchick at sgi.sk.ca  Tue May 20 21:34:43 2008
From: bchick at sgi.sk.ca (Brent Chick)
Date: Tue, 20 May 2008 14:34:43 -0600
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEEELIHOAB.wmhblair@comcast.net>
References: <47FCA219.6E24.0005.0@kcumb.edu>
	<HDEMIMHLCNKIEDEHAEMEEELIHOAB.wmhblair@comcast.net>
Message-ID: <4832E17D.E354.0017.0@sgi.sk.ca>

Reaching way back here, but do you see the print server log in as an active connection in the console monitor on the server?  I assume no.
It's all a bit hazy but I seem to remember fixing a similar problem where print servers wouldn't log in.  The fix was to add a RW of the replica that held the print server objects to the server it was trying to log in to.   I never really figured out why they stopped logging in, just that an RW was the fix.  

As for what changed, did any network equipment get rebooted?  Equipment that had been running for a long time on those UPS's?   Maybe something that was routing IPX but stopped after the reboot?

Could do a network trace, just to make sure that IPX traffic is flowing from print server to NW server.



>>> "William H. Blair" <wmhblair at comcast.net> 20/05/2008 11:01 AM >>>
A planned extended power outage forced me to shutdown
one of the last remaining NetWare 4.1 servers I have.
In the past, an array of UPSs enabled me to keep it up
during unexpected power outages and UPS battery changes. 
But not this time. If it had only lasted just three more 
months, it would have logged 8 full YEARS of continuous 
uptime. It was never upgraded because it simply kept on 
working. But it was down to its last attached printer,
first attached to it sometime in 2001 or 2002, I think.

When it was brought back up, everything worked just fine
(all the NetWare volumes, connectivity to other servers,
etc.), except that the printer (which was not touched in
any way) now fails to pull jobs from the print queue. PCs
can put jobs in the queue, but nothing prints. I know it
is probably something that was done in 2002 that needs to
be redone (like something missing from AUTOEXEC.NCF), but
I have no clue what that is. Most remaining printers are
driven by external print servers w/TCP/IP. Consequently, 
everything I once knew about NW driving IPX printers has 
drained from my brain. This printer communicates via IPX 
and print jobs are queued to the NetWare server, however.

All of the NDS objects associated with the printer are 
still there, and look exactly as they did before, except
that their status is (obviously) not normal.
 
The only clue I might offer those of you who still have
any knowledge of this type of printing is this message:

NPRINTER-NLM-4.15-12: Print Server XXXXXXXX is down.   
 
The printer itself did not go down during the power outage
but that should not have been an issue because the printer
normally gets powered off almost daily, and it always came
back up and started printing work queued on its NW server.

--
WB
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

This e-mail and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed.  If you are not the named addressee, please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. If you are not the intended recipient you are notified that using, disclosing, copying or distributing the contents of this information is strictly prohibited.

From wmhblair at comcast.net  Tue May 20 21:36:54 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 15:36:54 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <4832D016.811E.0072.0@tpchd.org>
Message-ID: <HDEMIMHLCNKIEDEHAEMEEENFHOAB.wmhblair@comcast.net>

> 1. Configure frame type in the printer. This MAY be possible,
> I don't have one handy to check.

Of course this is possible. How else would the printer talk to
the server? Anyway ... Done. Redone. Checked. Changed to wrong
type. Changed back. Checked again. Nothing works (changes any-
thing).

> 2. Try this software from HP:
>
http://h10025.www1.hp.com/ewfrf/wc/genericDocument?lc=en&cc=us&dlc=en&docnam
e=bpj06765

Downloading that now. Will install. It if works, I'll requeue
the pending, queued jobs to the new thing(s) it creates. That
will be good enough for me.

> 3. Replace the printer setup. I really don't like this idea, but
> beyond a certain point the surrounding infrastructure makes it
> impossible to continue using something that still works but is
> unsupported.

I'd do that if I knew how. That's what the INPW was for. But, still,
if I knew how, I'd just re-do what definitions and thingys I already
have in NetWare and NDS. Clearly, something is missing from the NW
server side of things (since the printer didn't change one bit). But
I have no clue, and all the printouts I still happened to have match
up with what and how things appear to be configured now. So I remain
clueless what I or INPW did 6 years ago.

--
WB


From cjf at calfrye.com  Tue May 20 21:39:28 2008
From: cjf at calfrye.com (Cal Frye)
Date: Tue, 20 May 2008 16:39:28 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEAENDHOAB.wmhblair@comcast.net>
References: <HDEMIMHLCNKIEDEHAEMEAENDHOAB.wmhblair@comcast.net>
Message-ID: <48333700.7020306@calfrye.com>

William H. Blair wrote:
> For what it's worth, what I apparently need is 3 (not 4).
> According to several pages at hp.com regarding the INPW
> utility:
> 
> | IPX/SPX support discontinued (Version 4.0 and above) 
> |
> | Since INPW Version 4.0 IPX/SPX (both IPX/SPX Direct 
> | Mode and Novell Netware configurations) have not been 
> | supported.

OK, I think this is the installer for the version I'm using, which is 
3.42:  http://www.calfrye.com/lj253en.exe

Don't be put off by the driver versions in the readme, which are all 
4.something. Good luck

-- 
Regards,
-- Cal Frye, Network Administrator, Oberlin College

    www.calfrye.com,  www.pitalabs.com


"Let us listen to our own prayers. It is we who will make them real." 
--Deng Ming Dao.

From robrinsky at roillc.com  Tue May 20 21:43:09 2008
From: robrinsky at roillc.com (Robert Obrinsky)
Date: Tue, 20 May 2008 16:43:09 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <f47566ff0805201324x60788713j99c772d5178fa395@mail.gmail.com>
References: <f47566ff0805201301u66b6c0ddk508c2066380fc6df@mail.gmail.com>
	<HDEMIMHLCNKIEDEHAEMEGENCHOAB.wmhblair@comcast.net>
	<f47566ff0805201324x60788713j99c772d5178fa395@mail.gmail.com>
Message-ID: <4832FFF5.9FDC.006D.0@roillc.com>

It has been forever since I have done this, but I seem to remember that we needed to define the following in nwadmin32 if we did not have JetAdmin: 

1. Define the print server 
2. Define the print queue 
3. Define the printer 

There was a procedure to link them all together, but I am a bid rusty on the details at this point. 

As far as IPX frame types are concerned, Netware used to default to the 802.3 RAW frame and if you wanted the 802.2 frame type you had to specify it during the load of the LAN driver. Typing 'Config' at the console should tell you on which frame type IPX is bound. That should match the HP frame type. 


Robert W. Obrinsky
President
Robert Obrinsky Industries, LLC
1824 Newfield Avenue
Stamford CT 06903
Office 203-968-9617
Mobile 203-273-7012




>>> "Christopher Mangiarelli" <cmangiarelli at gmail.com> 05/20/08 4:24 PM >>>
My point is to download an old release and do it through that.  I sent the
link to an old v3 version of the JetAdmin software in a prior email.  If
other people have other idea's, then they are welcome to chime in.  It's
been over 5 years since I configured an IPX printer and I can only tell you
what I did at the time.

On Tue, May 20, 2008 at 4:17 PM, William H. Blair <wmhblair at comcast.net>
wrote:

> > 2.  I've never used the software you speak of.  Way back when
> > I was doing IPX printing, I used nothing but HP JetAdmin (not
> > web) to configure jetdirects for queue-server mode.  The HP
> > software would create everything I needed and then I would go
> > into NWADMIN and add user rights to the queues.
>
> That may be (I don't ever remember seeing that capability), but
> it (the most recent release) does not support IPX or NW 4.1 now.
>
> --
> WB
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



--
Christopher Mangiarelli
cmangiarelli at gmail.com
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell


From automatedprocess at bellsouth.net  Tue May 20 22:02:45 2008
From: automatedprocess at bellsouth.net (Stephen Cummings)
Date: Tue, 20 May 2008 17:02:45 -0400
Subject: Where is????
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop><f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com>
	<f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com>
Message-ID: <06fe01c8babc$daafa020$0301a8c0@apcdesktop>

Thanks for the NPM. I attempted to following instruction to install.
However, the NEW was not present on the screen. For what version of iManager
is this NPM for? 2.6 or 2.7 of iManager.

Please advise

Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
----- Original Message ----- 
From: "Christopher Mangiarelli" <cmangiarelli at gmail.com>
To: "Novell LAN Interest Group" <novell at netlab1.oucs.ox.ac.uk>
Sent: Monday, May 19, 2008 4:56 PM
Subject: Re: Where is????


> Hmmm, GMAIL is showing your email address as
automatedprocess at bellsouth.net.
> I am assuming that is bogus.  Is that your real email address?  If not,
> where should I send the NPM?
>
> On Mon, May 19, 2008 at 4:52 PM, Christopher Mangiarelli <
> cmangiarelli at gmail.com> wrote:
>
> > As far as I know, it's just an NPM you download and install into your
> > iManager instance.  I downloaded mine through iManager but I checked
> > support.novell.com and I don't see it listed there.  The NPM I have
loaded
> > is "iPrint_NetWare_iMan27.npm"
> >
> > Name: iPrint NetWare Management Plug-in
> > Version: 2.7.0.20070824
> > Description: Allows management of iPrint services on Netware.
> >
> > I'll send you the NPM off-list, as it's 4MB in size.
> >
> >
> > On Mon, May 19, 2008 at 5:44 PM, Stephen Cummings <
> > automatedprocess at bellsouth.net> wrote:
> >
> >> I have installed iManager 2.7 in my classroom environment. Once the
> >> students start using NetWare....when we got to the point of using
iPrint,
> >> NDPS and BROKER it was not available. We would like to continue using
> >> iManager 2.7. Where is iPrint? Is it a separate application now.
> >>
> >> Please advise
> >>
> >> Stephen Cummings
> >> A+, Net +, CNA 5x, 6x,
> >> CNE 5x, 6x, NAI, CNI,
> >> MCNE
> >> _______________________________________________
> >> Novell mailing list
> >> Novell at netlab1.oucs.ox.ac.uk
> >> http://netlab1.usu.edu/mailman/listinfo/novell
> >>
> >
> -- 
> Christopher Mangiarelli
> cmangiarelli at gmail.com
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



From wmhblair at comcast.net  Tue May 20 22:01:33 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 16:01:33 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <48333700.7020306@calfrye.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEAENHHOAB.wmhblair@comcast.net>

The printer is now working, but I have no clue why.
This is a continuing mystery. It's working, just as
it used to do normally, and the backlog of print 
jobs is disappearing. 

So what did I do? Have you ever heard a programmer say
"I didn't change a thing! Honest!"? Well, I didn't DO
anything. Well ... all I did was START the old version
of the HP INPW. I didn't type any responses to any of
its questions. I just clicked on the option to get it
to start looking for printers on the network that could
be seen from this PC, which supposedly would cause it to
do nothing, but just LOOK). It found the printer that I 
was having trouble with, and I then selected the option 
to manually configure that printer (since it would have 
tried to configure it for TCP/IP if I had let it have 
its way). But then I did nothing else. As soon as I said 
I want to configure it manually, the printer started
warming up (I can hear it from where I sit).

INPW did not start to actually DO the configuration or 
to define any NDS objects or anything. I have the prompt
screen in front of me right now where it is asking me
for information such as "Communications mode", "Print
Server", "Context", and "Printer". I have not entered a
single thing, so none of the NEW names it automatically
generated for this device it found (that it thought it
could talk to via either TCP/IP or IPX) have been 
defined yet. 

Go figure. I am still investigating. But I ran a CONFIG, 
and found no differences in modules LOADed. The "Print 
Server" NDS object still has the red exclamation point 
beside it, and its "Status" is shown as "Down". Nothing
has changed on the Printer's configuration page, or as
shown by the JetDirect web interface. It's exactly as it
was before. And, nothing has changed in any of the items
shown by NetWare Administrator. Everything is exactly 
the same. 

The printer just started working, almost magically.  

Go figure.

--
WB


From wmhblair at comcast.net  Tue May 20 22:06:25 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 16:06:25 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <f47566ff0805201324x60788713j99c772d5178fa395@mail.gmail.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEOENHHOAB.wmhblair@comcast.net>

Christopher Mangiarelli wrote:

> My point is to download an old release and do it through that.  
> I sent the link to an old v3 version of the JetAdmin software
> in a prior email. 

That was actually the HP "Install Network Printer Wizard", not
the JetAdmin software (as it was so labeled). That kept me from
taking a close look at it, at first. But, when I did, I saw it
was not, and had nothing to do with, the (old) JetAdmin package,
which I already have (and just downloaded the newest version,
10.0). 

In any event, I uninstalled INPW 6.0, and installed (this) 3.06
version, and it was it sniffing and snooping around the network
that apparently did something to get the logjam cleared up, but
without me changing anything whatsoever. Go figure.

--
WB

From cjf at calfrye.com  Tue May 20 22:06:43 2008
From: cjf at calfrye.com (Cal Frye)
Date: Tue, 20 May 2008 17:06:43 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEMEMNHOAB.wmhblair@comcast.net>
References: <HDEMIMHLCNKIEDEHAEMEMEMNHOAB.wmhblair@comcast.net>
Message-ID: <48333D63.5020806@calfrye.com>

William H. Blair wrote:

>> 4.  PSERVER probably has nothing to do with this if you were 
>> operating in queue-server mode. 
> 
> That's what I thought. But, it's been 6 years, so who was I to
> say?

Actually, according to my old reference, "Novell Intranetware: the 
Comprehensive Guide" by Heath Ramsay and Mark Bell, pserver.nlm is 
indeed the print server for 4.11, queue-based printing.

It's invoked "LOAD PSERVER <PRINT_SERVER_NAME>" where the server name 
might be YOURSERVER_PS. You might have to specify context. If the 
JetDirect is in print server mode itself, then pserver.nlm isn't 
necessary. But in that case the JetDirect logs into the network and 
pulls from the print queue as it emulates pserver. I forget which is the 
case in IPX JetDirects, frankly.

-- 
Regards,
-- Cal Frye, Network Administrator, Oberlin College

    www.calfrye.com,  www.pitalabs.com


"A time comes when silence is betrayal." -- Rev. Martin Luther King, Jr.

From RGrein at tpchd.org  Tue May 20 22:09:20 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Tue, 20 May 2008 14:09:20 -0700
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEOENHHOAB.wmhblair@comcast.net>
References: <f47566ff0805201324x60788713j99c772d5178fa395@mail.gmail.com>
	<HDEMIMHLCNKIEDEHAEMEOENHHOAB.wmhblair@comcast.net>
Message-ID: <4832DB8B.811E.0072.0@tpchd.org>

That's IPX - everything just sorta works. Except when it doesn't. (grin)


Randy Grein
Sr. Network Engineer


>>> "William H. Blair" <wmhblair at comcast.net> 5/20/2008 2:06 PM >>>
Christopher Mangiarelli wrote:

> My point is to download an old release and do it through that.  
> I sent the link to an old v3 version of the JetAdmin software
> in a prior email. 

That was actually the HP "Install Network Printer Wizard", not
the JetAdmin software (as it was so labeled). That kept me from
taking a close look at it, at first. But, when I did, I saw it
was not, and had nothing to do with, the (old) JetAdmin package,
which I already have (and just downloaded the newest version,
10.0). 

In any event, I uninstalled INPW 6.0, and installed (this) 3.06
version, and it was it sniffing and snooping around the network
that apparently did something to get the logjam cleared up, but
without me changing anything whatsoever. Go figure.

--
WB
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From RGrein at tpchd.org  Tue May 20 22:10:35 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Tue, 20 May 2008 14:10:35 -0700
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <48333D63.5020806@calfrye.com>
References: <HDEMIMHLCNKIEDEHAEMEMEMNHOAB.wmhblair@comcast.net>
	<48333D63.5020806@calfrye.com>
Message-ID: <4832DBD7.811E.0072.0@tpchd.org>

Either way - depends on how YOU configure it. Understandable being fuzzy about the details after 6 years though... (grin)

Randy Grein
Sr. Network Engineer


>>> Cal Frye <cjf at calfrye.com> 5/20/2008 2:06 PM >>>
William H. Blair wrote:

>> 4.  PSERVER probably has nothing to do with this if you were 
>> operating in queue-server mode. 
> 
> That's what I thought. But, it's been 6 years, so who was I to
> say?

Actually, according to my old reference, "Novell Intranetware: the 
Comprehensive Guide" by Heath Ramsay and Mark Bell, pserver.nlm is 
indeed the print server for 4.11, queue-based printing.

It's invoked "LOAD PSERVER <PRINT_SERVER_NAME>" where the server name 
might be YOURSERVER_PS. You might have to specify context. If the 
JetDirect is in print server mode itself, then pserver.nlm isn't 
necessary. But in that case the JetDirect logs into the network and 
pulls from the print queue as it emulates pserver. I forget which is the 
case in IPX JetDirects, frankly.

-- 
Regards,
-- Cal Frye, Network Administrator, Oberlin College

    www.calfrye.com,  www.pitalabs.com 


"A time comes when silence is betrayal." -- Rev. Martin Luther King, Jr.
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From wmhblair at comcast.net  Tue May 20 22:13:39 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 16:13:39 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <48333D63.5020806@calfrye.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEGENJHOAB.wmhblair@comcast.net>

> It's invoked "LOAD PSERVER <PRINT_SERVER_NAME>" where 
> the server name might be YOURSERVER_PS. You might have 
> to specify context. If the JetDirect is in print server 
> mode itself, then pserver.nlm isn't necessary. But in 
> that case the JetDirect logs into the network and pulls 
> from the print queue as it emulates pserver. I forget 
> which is the case in IPX JetDirects, frankly.

In my case, it was LOAD PSERVER CLJ4550A.CCCCC (where
CCCCC is my context). But, there is no PSERVER running
now (nor was there when the printer stared working).
It is not necessary for a JetDirect server in "Queue
Server" mode. I sorta "knew" that. But it had been 6
years since I REALLY knew it. You are correct, the 
JetDirect server itself logs into the server and makes
like PSERVER. It does (and apparently did) so without
any password being specified. At least I never defined
one, and the NDS "Print Server" object (CLJ4550A) can
be accessed using PSERVER.NLM without having to provide
a password.

--
WB

From wmhblair at comcast.net  Tue May 20 22:20:06 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Tue, 20 May 2008 16:20:06 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <4832DBD7.811E.0072.0@tpchd.org>
Message-ID: <HDEMIMHLCNKIEDEHAEMEEENKHOAB.wmhblair@comcast.net>

My sincere thanks to all who responded and tried to help.
If I knew who actually suggested something I did that was
the actual trigger to get it to work, I'd thank him first.
But, I have no clue. It just started to work. So, thanks
to Randy, Cal, Robert, Brent, Jim, Christopher, Fred, and
James. Christopher sent me the link to INPW 3.06 and that
could have been what triggered something in IPX land. But
I really don't know. Thanks again to all. This list has,
once again, albeit unclearly exactly how this time, saved
my bacon. 

--
WB



From cmangiarelli at gmail.com  Tue May 20 22:21:05 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Tue, 20 May 2008 17:21:05 -0400
Subject: Where is????
In-Reply-To: <06fe01c8babc$daafa020$0301a8c0@apcdesktop>
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop>
	<f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com>
	<f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com>
	<06fe01c8babc$daafa020$0301a8c0@apcdesktop>
Message-ID: <f47566ff0805201421s52c2c311jb55914aa06bd7b4d@mail.gmail.com>

I copied that from iManager Mobile 2.7.  I don't have a full version of
iManager 2.7 running as it still is missing plugins for some of their
supported products.  You could consider downloading iManager Mobile 2.7 and
seeing if it works there... maybe there is a difference?

On Tue, May 20, 2008 at 5:02 PM, Stephen Cummings <
automatedprocess at bellsouth.net> wrote:

> Thanks for the NPM. I attempted to following instruction to install.
> However, the NEW was not present on the screen. For what version of
> iManager
> is this NPM for? 2.6 or 2.7 of iManager.
>
> Please advise
>
> Stephen Cummings
> A+, Net +, CNA 5x, 6x,
> CNE 5x, 6x, NAI, CNI,
> MCNE
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From colin.connolly at phon.ox.ac.uk  Tue May 20 23:44:27 2008
From: colin.connolly at phon.ox.ac.uk (Colin Connolly)
Date: Tue, 20 May 2008 23:44:27 +0100
Subject: Broken ZfD User Policy/C32 setting
Message-ID: <4833625B.5388.29A76316@colin.connolly.phon.ox.ac.uk>

Folks

An issue has (re) surfaced with Zen 7 SP1 User Policies during final preps 
to rollout a brace of NW6.5SP7 boxes into production which I wonder if 
anyone has come across.

The UPs have settings for DLU, iPrint and some include roaming profiles - 
I'm not keen on the latter but need them for student machines.

They worked during initial testing then broke, but were fixed - from previous 
experience I had used the NT-2k-XP tab, but then learned that I needed to 
configure the XP tab explicitly.  The UPs are associated with the groups or 
containers for the users to whom they should apply.

This morning, without my having changed anything, they broke but came 
back again after rebooting the servers and my workstation - my test clients 
run inside Vmware.  This evening, they've broken again - all my test users 
get prompted for a Win logon. I'm presenting to my team in the morning and 
it'd be kinda nice if everything worked as it has been...

Is there some sort of corruption (object or DS?) which a reboot cured 
temporarily? Or am I way off the mark here?  Can't see anything relevant in 
the new patches archives but I may have missed something...

Any ideas on where to go next - recreate objects maybe? - gratefully 
received.

While I'm here, can any one remind me which setting in C32 for Win 
(4.91SP4) I need to alter to get it NOT to remember the userid of the last 
user? I should know...

TIA.

Colin


Colin Connolly
IT Manager
Phonetics, Linguistics & Modern Languages
University of Oxford
Oxford OX1 2JF (UK)

Tel: +44 1865 270448
Fax: +44 1865 270445
Email: colin.connolly at phon.ox.ac.uk


From rpcarroll at wallgames.com  Wed May 21 16:06:45 2008
From: rpcarroll at wallgames.com (Robert Carroll)
Date: Wed, 21 May 2008 11:06:45 -0400
Subject: Need help to get NW 4 IPX printer going again
References: <HDEMIMHLCNKIEDEHAEMEMEMNHOAB.wmhblair@comcast.net>
	<48333D63.5020806@calfrye.com>
Message-ID: <008c01c8bb54$4a56ab20$2f01a8c0@myhome.westell.com>

My web host was down for three days, then all emails relating to this topic
arrived this morning with the same date and time.

Has this problem already been fixed, or is input still desired?

Best wishes,
Bob Carroll


From evansj21 at msu.edu  Wed May 21 16:50:04 2008
From: evansj21 at msu.edu (John Evans)
Date: Wed, 21 May 2008 11:50:04 -0400
Subject: BE12 Issues
In-Reply-To: <1d6cdac70805201114o7e1ca616v66fd50b7a0b0a8b1@mail.gmail.com>
References: <482D5E8A.8A77.004D.0@enesco.com>
	<482DB336.F0A7.0085.0@MAIL.HFS.MSU.EDU>
	<4831455B.8A77.004D.0@enesco.com>
	<48318E60.42FE.0085.0@MAIL.HFS.MSU.EDU>
	<1d6cdac70805201114o7e1ca616v66fd50b7a0b0a8b1@mail.gmail.com>
Message-ID: <48340C6B.42FE.0085.0@MAIL.HFS.MSU.EDU>

Eric,
 
Thanks, I'll build an tsafs.cfg file from the tsa.cfg for our NetWare 6.5 SP7 GW server and try it.
 
...John

>>> "Eric Rothweiler" <jetadmin at gmail.com> 5/20/2008 2:14 PM >>>
There was a somewhat recent change in tsafs to read options from the .cfg
file -v- command line.  It may be that you needed to load tsafs with a
command line option to trigger the crreation of the .cfg file?  Either way,
your 6.5 SP7 server(s) definately have a version of tsafs that wants the
options in sys:etc\sms\tsafs.cfg

Eric


On 5/19/08, John Evans <evansj21 at msu.edu> wrote:
>
> Scott,
>
> We have both a NW6.0SP5 and NW6.5SP7 servers as our GroupWise
> platforms.  We have only one NetWare 5.1 server in our tree (isn't part of
> our GW system and it will be out of the tree soon).  Anyway, neither server
> was an uppgrade from NW5.1 and neither have tsafs.cfg in sys:\etc\sms - just
> tsa.cfg.  That's why I asked.  I am curious as to if the file was generated
> by the installation of NetWare or due to the installation of Backup Exec.
>
> ...John
>
> >>> "Scott Etienne" <Setienne at enesco.com> 5/19/2008 10:16 AM >>>
> That's where I found ours. Is the server NW 6.5? This file doesn't seem to
> exist on 5.1.
>
> >>> "John Evans" <evansj21 at msu.edu> 5/16/2008 3:15 PM >>>
> Scott,
>
> Is this TSA.CFG in SYS\ETC\SMS?  We don't seem to have a tsafs.cfg file.
>
> ...John
>
> >>> "Scott Etienne" <Setienne at enesco.com> 5/16/2008 11:14 AM >>>
> Symantec was able to finally help us spot the offending setting on the
> NetWare server in the TSAFS.CFG file. I don't know why this changed when we
> upgraded--maybe BE changes this??? Maybe this setting didn't matter in the
> older versions?
>
> We are now seeing the performance with BE12 we used to see with 10d.
>
> The key field here is Cache Memory Threshold: 1 (changed from 10).
>
> Enable Caching must be yes.
>
> TSAFS.CFG:
>
> Read Buffer Size:
> 65536
> Read Threads Per Job:
> 4
> Read Thread Allocation:
> 100
> Read Ahead Throttle:
> 2
> Cache Memory Threshold:
> 1
> Disable Cluster:
> no
> Enable GroupWise:
> 0
> Enable Caching:
> yes
> Disable Demigration:
> no
>
>
> Thank you,
>
> Scott Etienne
> Network Engineer
> Enesco, LLC
> setienne at enesco.com 
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell 
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell 
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell 
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell 
>
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 


From automatedprocess at bellsouth.net  Wed May 21 17:48:10 2008
From: automatedprocess at bellsouth.net (Stephen Cummings)
Date: Wed, 21 May 2008 12:48:10 -0400
Subject: Where is????
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop><f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com><f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com><06fe01c8babc$daafa020$0301a8c0@apcdesktop>
	<f47566ff0805201421s52c2c311jb55914aa06bd7b4d@mail.gmail.com>
Message-ID: <075401c8bb62$757a0820$0301a8c0@apcdesktop>

I know this is not your problem, but you have been the most helpful in this
situation. I am having one #311 of a time getting this to work. What is your
opinion on going backwards to version 2.5 or 2.6 of iManager. Do they have
iPrint plug-ins in it?

Please advise

Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
----- Original Message ----- 
From: "Christopher Mangiarelli" <cmangiarelli at gmail.com>
To: "Novell LAN Interest Group" <novell at netlab1.oucs.ox.ac.uk>
Sent: Tuesday, May 20, 2008 5:21 PM
Subject: Re: Where is????


> I copied that from iManager Mobile 2.7.  I don't have a full version of
> iManager 2.7 running as it still is missing plugins for some of their
> supported products.  You could consider downloading iManager Mobile 2.7
and
> seeing if it works there... maybe there is a difference?
>
> On Tue, May 20, 2008 at 5:02 PM, Stephen Cummings <
> automatedprocess at bellsouth.net> wrote:
>
> > Thanks for the NPM. I attempted to following instruction to install.
> > However, the NEW was not present on the screen. For what version of
> > iManager
> > is this NPM for? 2.6 or 2.7 of iManager.
> >
> > Please advise
> >
> > Stephen Cummings
> > A+, Net +, CNA 5x, 6x,
> > CNE 5x, 6x, NAI, CNI,
> > MCNE
> >
>
> -- 
> Christopher Mangiarelli
> cmangiarelli at gmail.com
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



From cmangiarelli at gmail.com  Wed May 21 18:31:33 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Wed, 21 May 2008 13:31:33 -0400
Subject: Where is????
In-Reply-To: <075401c8bb62$757a0820$0301a8c0@apcdesktop>
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop>
	<f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com>
	<f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com>
	<06fe01c8babc$daafa020$0301a8c0@apcdesktop>
	<f47566ff0805201421s52c2c311jb55914aa06bd7b4d@mail.gmail.com>
	<075401c8bb62$757a0820$0301a8c0@apcdesktop>
Message-ID: <f47566ff0805211031t18b49d55ie8881762c6e2e965@mail.gmail.com>

I'm sticking with iManager 2.6 until I can get everything running that I
need in iManager 2.7.  Since you are on a deadline with your classes, you
might consider using 2.6 until you can find a properly working 2.7.  I
wouldn't go back to 2.5 at this point, at least I've seen no reason in my
environment to do so.

I had 2.7 running in my test cluster until I found out that Novell Audit
plugins were not available which is one of the main reasons I went back to
2.6.  Now I see Novell Audit plugins are available so I might start looking
into 2.7 again.

On Wed, May 21, 2008 at 12:48 PM, Stephen Cummings <
automatedprocess at bellsouth.net> wrote:

> I know this is not your problem, but you have been the most helpful in this
> situation. I am having one #311 of a time getting this to work. What is
> your
> opinion on going backwards to version 2.5 or 2.6 of iManager. Do they have
> iPrint plug-ins in it?
>
> Please advise
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From automatedprocess at bellsouth.net  Wed May 21 19:29:38 2008
From: automatedprocess at bellsouth.net (Stephen Cummings)
Date: Wed, 21 May 2008 14:29:38 -0400
Subject: Where is????
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop><f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com><f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com><06fe01c8babc$daafa020$0301a8c0@apcdesktop><f47566ff0805201421s52c2c311jb55914aa06bd7b4d@mail.gmail.com><075401c8bb62$757a0820$0301a8c0@apcdesktop>
	<f47566ff0805211031t18b49d55ie8881762c6e2e965@mail.gmail.com>
Message-ID: <076f01c8bb70$a1c9d730$0301a8c0@apcdesktop>

Okay. I will give that a shot. Let me find version 2.6. Does this version
include the iPrint functions?

Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
----- Original Message ----- 
From: "Christopher Mangiarelli" <cmangiarelli at gmail.com>
To: "Novell LAN Interest Group" <novell at netlab1.oucs.ox.ac.uk>
Sent: Wednesday, May 21, 2008 1:31 PM
Subject: Re: Where is????


> I'm sticking with iManager 2.6 until I can get everything running that I
> need in iManager 2.7.  Since you are on a deadline with your classes, you
> might consider using 2.6 until you can find a properly working 2.7.  I
> wouldn't go back to 2.5 at this point, at least I've seen no reason in my
> environment to do so.
>
> I had 2.7 running in my test cluster until I found out that Novell Audit
> plugins were not available which is one of the main reasons I went back to
> 2.6.  Now I see Novell Audit plugins are available so I might start
looking
> into 2.7 again.
>
> On Wed, May 21, 2008 at 12:48 PM, Stephen Cummings <
> automatedprocess at bellsouth.net> wrote:
>
> > I know this is not your problem, but you have been the most helpful in
this
> > situation. I am having one #311 of a time getting this to work. What is
> > your
> > opinion on going backwards to version 2.5 or 2.6 of iManager. Do they
have
> > iPrint plug-ins in it?
> >
> > Please advise
> >
>
> -- 
> Christopher Mangiarelli
> cmangiarelli at gmail.com
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



From mrsmith at oconee.k12.ga.us  Wed May 21 19:35:43 2008
From: mrsmith at oconee.k12.ga.us (Matt Smith)
Date: Wed, 21 May 2008 14:35:43 -0400
Subject: iPrint issues on OES 2
Message-ID: <48343322.E4C1.0068.0@oconee.k12.ga.us>

I just migrated one of our production servers from Netware to OES Linux. 

Basic iPrint seems to work fine.  However when I require SSL on the printer agents, I can no longer print or install printers.  After a whole lot of research and trial and error, I think I've narrowed down the problem.  I still don't have a fix though.

The file /etc/opt/novell/iprint/httpd/conf/iprint_ssl.conf has this line in it:

AuthLDAPDNURL "ldaps://<serverdns_name>/o=org???(objectClass=user)"

The only way I can get secure ldap printing to work is to set the servername in this line to a remote server that also happens to be the master of the replica ring.  The server also holds copies of all the other replicas in my tree.  When I point it to the local server either by DNS name, IP address, or by using localhost, secure printing fails, usually with an "error 500."  Now for an added wrinkle, I can point to the local server and not specify a base DN, but the only people who can print then are Admin-equivalents.  General users still can't print.

The local server has a copy of the replica.  It will respond to a secure LDAP query from my desktop using a variety of utilities.  I have set UniqueID's on all my users in the tree.  I have followed  a coolsolutions article for re-creating server certificates on an OES 2 Linux server successfully.  

I've actually opened up an incident with NTS, but my users have gotten tired of me monkeying with their server during business hours.  I'm also trying to solve this before Friday because I'm going on vacation next week---no matter what!  

Anybody have any ideas?  I would greatly appreciate any help.  

-Matt
-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685


From mgorn at fxcm.com  Wed May 21 19:42:25 2008
From: mgorn at fxcm.com (Michael Gorn)
Date: Wed, 21 May 2008 14:42:25 -0400
Subject: SLES 10 SP2 GMC
In-Reply-To: <4832D696.3090408@cam.ac.uk>
References: <8fd39f090805191405g26b6f59fo1a485c8e866b2e73@mail.gmail.com>
	<483288C9.3020908@cam.ac.uk> <4832D696.3090408@cam.ac.uk>
Message-ID: <483434D1.A227.00C4.0@fxcm.com>

Are there any problems with installing OES2 on top of SLES 10 SP2?
Thanks.
 
Mike.

>>> Simon Flood <smf34 at cam.ac.uk> 5/20/2008 9:48 AM >>>
On 20/05/2008 09:16, Simon Flood wrote:

> Be patient people and you will be rewarded ...

It's now available - see 
http://download.novell.com/Download?buildid=xWohTS2zkSs~ 

Hope this helps,
Simon
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From cmangiarelli at gmail.com  Wed May 21 19:46:57 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Wed, 21 May 2008 14:46:57 -0400
Subject: Where is????
In-Reply-To: <076f01c8bb70$a1c9d730$0301a8c0@apcdesktop>
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop>
	<f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com>
	<f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com>
	<06fe01c8babc$daafa020$0301a8c0@apcdesktop>
	<f47566ff0805201421s52c2c311jb55914aa06bd7b4d@mail.gmail.com>
	<075401c8bb62$757a0820$0301a8c0@apcdesktop>
	<f47566ff0805211031t18b49d55ie8881762c6e2e965@mail.gmail.com>
	<076f01c8bb70$a1c9d730$0301a8c0@apcdesktop>
Message-ID: <f47566ff0805211146w645d45c1x66d0867bb76b890f@mail.gmail.com>

I don't know.  The few times i've installed iManager from scratch, all I got
was three plugins related to core services.  I would then either download
the NPM's manually from Novell (support.novell.com) or I would configure
tomcat for internet access and then use the automated install method through
the iManager server configuration page.  Both worked equally well for me.

I have iPrint plugins working in my production imanager 2.6, my test
imanager 2.6, mobile imanager 2.6 and mobile imanager 2.7.  I am just
beginning to look into imanager 2.7 in my test environment.

On Wed, May 21, 2008 at 2:29 PM, Stephen Cummings <
automatedprocess at bellsouth.net> wrote:

> Okay. I will give that a shot. Let me find version 2.6. Does this version
> include the iPrint functions?
>
> Stephen Cummings
> A+, Net +, CNA 5x, 6x,
> CNE 5x, 6x, NAI, CNI,
> MCNE
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From wmhblair at comcast.net  Wed May 21 20:07:40 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Wed, 21 May 2008 14:07:40 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <008c01c8bb54$4a56ab20$2f01a8c0@myhome.westell.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMECEBJHPAB.wmhblair@comcast.net>

> Has this problem already been fixed, or is input 
> still desired?

Yes, but yes. 

Yes, the immediate problem was fixed, but I was not
sure what happened, exactly, to fix it, although I
do know what I did (but cannot explain why that had
any affect). 

Last night, after things settled down and I could
have the server to myself, I downed the server 
intentionally, without powering anything down,
including the server hardware, the printer, and
everything in between. Then I brought the server
up again, and from a PC created a print job on
the printer's queue. It just sat there, just
like it did this weekend, in the same state as
before. Then, I started the HP INPW 3.06 utility
and went thru the first set of screens where I
simply respond OK to have it go out and examine
the network for available printers to "install."
As soon as I selected the option that indicates
"No, I don't want you to automatically install
the printer as a TCP/IP printer on this Windows
system, but I want to manually configure it all
by myself" the printer immediately started to
make noise (i.e., print the job I had queued
earlier). I Canceled the HP INPW application,
without doing anything to NDS or Windows.

The NetWare administrator status of the NDS objects 
did NOT change from before I ran the INPW to after 
(same red "!"). The status of the printer itself did 
change from "UNABLE TO SENSE NET NUMBER" to "      " 
(i.e., blanks in that space in the printout/display)
as soon as I checked after the printer started up.

I compared before and after CONFIG output, and there
was absolutely no difference (other than things like
buffer counts, which one would expect). So, nothing
was loaded or started on the server itself by INPW.

So, the problem is reproducible. Something that the
INPW does is necessary to get the printer to work.
It's obviously nothing that has to be done to or on
the printer itself. It's probably something that 
needs to be done on or to the NW server, which the
HP INPW does automatically internally, even before
it claims to be actually doing something. 

At this point, the problem is academic, since the
server has a habit of staying up for 8 years, and
I will keep a Windows 2000 system around to run the
HP INPW 3.06 utility, just in case this printer is
still around the next time the server actually does
have to be restarted in real life.

Oh, and just to make sure this was not imaginary on
my part, I reproduced the problem 6 more times, with,
and without, powering down the server, the printer,
the switches, etc., in various combinations. Every
time the NW server is downed and then restarted,
regardless of what has happened to anything else
in the chain, the printer does not start to select
work from the queue until I run the HP INPW 3.06
utility and "do nothing."  

Finally, just for grins, I ran the HP INPW on a 
second NetWare 4.11 server, pointing it to another,
similar printer with the same model JetDirect card,
which normally only uses TCP/IP. Then I downed that
server and restarted it. Guess what? Same problem.

So it has absolutely nothing to do with the printer
or any of the hardware. It only has to do with 4.1[1]
OR perhaps the fact that the HP INPW does something 
internally on the LAN that needs to be reflected in
AUTOEXEC.NCF somehow.

But I would sure love to know what the INPW does to
make the printer suddenly start to work. You know,
just to satisfy my inquiring mind. But, as I said,
it's just (mostly) academic at this point.

--
WB

From pjc9001 at nyp.org  Wed May 21 20:39:49 2008
From: pjc9001 at nyp.org (Peter J. Cox)
Date: Wed, 21 May 2008 15:39:49 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMECEBJHPAB.wmhblair@comcast.net>
References: <HDEMIMHLCNKIEDEHAEMECEBJHPAB.wmhblair@comcast.net>
Message-ID: <48347A85.10108@nyp.org>

WB,
    I still feel that there might be something going on with what 
traffic is flowing (or not) on your network. The HP INPW may work 
because of the unusual way it works.

"The AppSocket protocol (sometimes also called the JetDirect protocol, 
owing to its origins with the HP JetDirect network interfaces) is the 
simplest, fastest, and generally the most reliable network protocol used 
for printers. AppSocket printing normally happens over port 9100 and 
uses the socket URI scheme:

socket:///ip-address-or-hostname/
socket:///ip-address-or-hostname/?waiteof=false
socket:///ip-address-or-hostname/:/port-number/
socket:///ip-address-or-hostname/:/port-number/?waiteof=false

The "waiteof" option controls whether the socket backend waits for the 
printer to complete the printing of the job. The default is to wait."
(from CUPS.ORG)

This would lead me to believe that INPW uses this proprietary protocol 
to find the unit and that that establishes some sort of negotiation of 
the IPX frame type (and that reestablishes the printers connection to 
the server). Then again this is all a guess. Any HP folk out there that 
might be able to shed more light??

If there are any questions or problems
please contact me.
_______________________
Peter J. Cox
Network Manager, IT
NY Methodist Hospital
718-780-3250 Office
718-780-5993 HelpDesk




William H. Blair wrote:
>> Has this problem already been fixed, or is input 
>> still desired?
>>     
>
> Yes, but yes. 
>
> Yes, the immediate problem was fixed, but I was not
> sure what happened, exactly, to fix it, although I
> do know what I did (but cannot explain why that had
> any affect). 
> >>SNIP<<
>
> --
> WB
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>   


--------------------

This electronic message is intended to be for the use only of the named recipient, and may contain information that is confidential or privileged.  If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or use of the contents of this message is strictly prohibited.  If you have received this message in error or are not the named recipient, please notify us immediately by contacting the sender at the electronic mail address noted above, and delete and destroy all copies of this message.  Thank you.



From PHasenjager at kcumb.edu  Wed May 21 21:25:46 2008
From: PHasenjager at kcumb.edu (Patrick Hasenjager)
Date: Wed, 21 May 2008 15:25:46 -0500
Subject: iPrint issues on OES 2
In-Reply-To: <48343322.E4C1.0068.0@oconee.k12.ga.us>
References: <48343322.E4C1.0068.0@oconee.k12.ga.us>
Message-ID: <48343EF9.6E24.0005.0@kcumb.edu>

I also have the issue of not being able to install or print once I enabled security on the printer.  I have gotten it to work by restarting the novell-ipsmd service on the Linux server.

Pat.

>>> On 5/21/2008 at 1:35 PM, "Matt Smith" <mrsmith at oconee.k12.ga.us> wrote:
I just migrated one of our production servers from Netware to OES Linux. 

Basic iPrint seems to work fine.  However when I require SSL on the printer agents, I can no longer print or install printers.  After a whole lot of research and trial and error, I think I've narrowed down the problem.  I still don't have a fix though.

The file /etc/opt/novell/iprint/httpd/conf/iprint_ssl.conf has this line in it:

AuthLDAPDNURL "ldaps://<serverdns_name>/o=org???(objectClass=user)"

The only way I can get secure ldap printing to work is to set the servername in this line to a remote server that also happens to be the master of the replica ring.  The server also holds copies of all the other replicas in my tree.  When I point it to the local server either by DNS name, IP address, or by using localhost, secure printing fails, usually with an "error 500."  Now for an added wrinkle, I can point to the local server and not specify a base DN, but the only people who can print then are Admin-equivalents.  General users still can't print.

The local server has a copy of the replica.  It will respond to a secure LDAP query from my desktop using a variety of utilities.  I have set UniqueID's on all my users in the tree.  I have followed  a coolsolutions article for re-creating server certificates on an OES 2 Linux server successfully.  

I've actually opened up an incident with NTS, but my users have gotten tired of me monkeying with their server during business hours.  I'm also trying to solve this before Friday because I'm going on vacation next week---no matter what!  

Anybody have any ideas?  I would greatly appreciate any help.  

-Matt
-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From Setienne at enesco.com  Wed May 21 21:35:00 2008
From: Setienne at enesco.com (Scott Etienne)
Date: Wed, 21 May 2008 15:35:00 -0500
Subject: iManager service not available 503
In-Reply-To: <06fe01c8babc$daafa020$0301a8c0@apcdesktop>
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop><f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com>
	<f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com>
	<06fe01c8babc$daafa020$0301a8c0@apcdesktop>
Message-ID: <48344124.8A77.004D.0@enesco.com>

After upgrading to SP7, iManager worked again after not working for quite some time. But, after opening a case with support over an authentication issue, they had me rename SPMNWCC.NLM and that fixed the authentication issue, but it looks like iManager doesn't work any more on either one of our two main servers. Probably these incidents are unrelated--I only mention it because it is the only thing that changed.
 
Rebooting both servers has not helped anything. You can http to the machine, but as soon as you click on the iManager link, Service Unavailable, 503.
 
iMonitor shows:
 
TCP 10.1.50.6 ( https://10.1.50.6:8009/nds/agent/info?server=/TCP%27=10.1.50.6 ) 
UDP 10.1.50.6 ( https://10.1.50.6:8009/nds/agent/info?server=/UDP%27=10.1.50.6 ) 
URL ldap://10.1.50.6:389 
URL ldaps://10.1.50.6:636 
URL https://10.1.50.6:8009/portal 
URL http://10.1.50.6:81/portal 
URL http://10.1.50.6:8008/portal 
URL https://10.1.50.6:8009/nds 
URL http://10.1.50.6:81/nds 
URL http://10.1.50.6:8008/nds 
URL https://10.1.50.6:8009/soap 
URL http://10.1.50.6:81/soap 
URL http://10.1.50.6:8008/soap 
 
Aside from blowing away iManager and reinstalling it, does anyone have any suggestions? Why don't I have these kinds of problems in Windows??? I would be happy if Novell abandoned iManager--because I only use it if I have to, kicking and screaming. So, here I go again.
 
Help?
 
Thank you,
 
Scott Etienne
Network Engineer
Enesco, LLC
voice: 630.875.5611
mobile: 847-269-3143
fax: 630-875-5335
setienne at enesco.com

From cparker at utah.gov  Wed May 21 21:53:44 2008
From: cparker at utah.gov (Curtis Parker)
Date: Wed, 21 May 2008 14:53:44 -0600
Subject: forcing unrestricted access in iManager
In-Reply-To: <483484B2.3C0E.008B.1@utah.gov>
References: <483484B2.3C0E.008B.1@utah.gov>
Message-ID: <483437780200008B000089CF@gwia2.state.ut.us>


I recommend following TID# 10095953.  This will force unrestricted access to all roles and tasks for anyone using that iManager.  When you have less than unrestricted access, you will often not be able to see certain roles & tasks like iPrint.  Unrestricted access does not grant any more access to NDS objects than they have otherwise. 

Also, mobile imanager 2.7 is good stuff.   

Curtis Parker 
State of Utah 

----------------------------------------------------------------------

Message: 1
Date: Mon, 19 May 2008 17:44:00 -0400
From: "Stephen Cummings" <automatedprocess at bellsouth.net>
Subject: Where is????
To: "Novell" <novell at netlab1.usu.edu>
Message-ID: <05d401c8b9f9$73b16520$0301a8c0 at apcdesktop>
Content-Type: text/plain;charset="iso-8859-1"

I have installed iManager 2.7 in my classroom environment. Once the students start using NetWare....when we got to the point of using iPrint, NDPS and BROKER it was not available. We would like to continue using iManager 2.7. Where is iPrint? Is it a separate application now.

Please advise

Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

From mrsmith at oconee.k12.ga.us  Wed May 21 21:51:19 2008
From: mrsmith at oconee.k12.ga.us (Matt Smith)
Date: Wed, 21 May 2008 16:51:19 -0400
Subject: iPrint issues on OES 2
In-Reply-To: <48343EF9.6E24.0005.0@kcumb.edu>
References: <48343322.E4C1.0068.0@oconee.k12.ga.us>
	<48343EF9.6E24.0005.0@kcumb.edu>
Message-ID: <48345304.E4C1.0068.0@oconee.k12.ga.us>

>>> On 5/21/2008 at 4:25 PM, in message <48343EF9.6E24.0005.0 at kcumb.edu>, "Patrick
Hasenjager" <PHasenjager at kcumb.edu> wrote:
> I also have the issue of not being able to install or print once I enabled 
> security on the printer.  I have gotten it to work by restarting the 
> novell-ipsmd service on the Linux server.
> 
> Pat.

Yeah.  Been there and done that many times.

-Matt
-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685


From j-geer at umn.edu  Wed May 21 22:52:04 2008
From: j-geer at umn.edu (John Geertz-Larson)
Date: Wed, 21 May 2008 16:52:04 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMECEBJHPAB.wmhblair@comcast.net>
References: <008c01c8bb54$4a56ab20$2f01a8c0@myhome.westell.com>
	<HDEMIMHLCNKIEDEHAEMECEBJHPAB.wmhblair@comcast.net>
Message-ID: <smtpd.6ee.48349985.bd427.1@mta-a2.tc.umn.edu>

Your printer complained it couldn't detect the IPX network number.

The IPX network number and the server's internal IPX number are 
usually specified in autoexec.ncf.  If they're not, at least for the 
internal IPX number, the server generates a random one when it starts 
up (or restarts).  The new one, being random, doesn't match what the 
printer thinks it should be.

Instead, or in addition, perhaps the printer couldn't detect any IPX 
network number at all, if no other devices on that subnet were 
generating IPX traffic.  If you're on a small network, perhaps your 
router doesn't know the IPX network number, so it couldn't tell the 
printer either.  As soon as you fired up IPNW, it sent out IPX 
packets from which the printer could discover the (new) IPX network number.

Or something like that.

Here are the relevant autoexec.ncf commands:

ServerID=<internalIPXnetwork#>      or    IPX INTERNAL NET=<internalIPnetwork#>

BIND IPX <adapter> SLOT=x FRAME=xxxxx NET=<IPXnetwork#>

My IPX days are long behind me and my NetWare days are almost behind 
me (alas), but it's an educated guess.  Hope it's a little useful.

--
John




At 02:07 PM 5/21/2008, William H. Blair wrote:
> > Has this problem already been fixed, or is input
> > still desired?
>
>Yes, but yes.
>
>Yes, the immediate problem was fixed, but I was not
>sure what happened, exactly, to fix it, although I
>do know what I did (but cannot explain why that had
>any affect).
>
>Last night, after things settled down and I could
>have the server to myself, I downed the server
>intentionally, without powering anything down,
>including the server hardware, the printer, and
>everything in between. Then I brought the server
>up again, and from a PC created a print job on
>the printer's queue. It just sat there, just
>like it did this weekend, in the same state as
>before. Then, I started the HP INPW 3.06 utility
>and went thru the first set of screens where I
>simply respond OK to have it go out and examine
>the network for available printers to "install."
>As soon as I selected the option that indicates
>"No, I don't want you to automatically install
>the printer as a TCP/IP printer on this Windows
>system, but I want to manually configure it all
>by myself" the printer immediately started to
>make noise (i.e., print the job I had queued
>earlier). I Canceled the HP INPW application,
>without doing anything to NDS or Windows.
>
>The NetWare administrator status of the NDS objects
>did NOT change from before I ran the INPW to after
>(same red "!"). The status of the printer itself did
>change from "UNABLE TO SENSE NET NUMBER" to "      "
>(i.e., blanks in that space in the printout/display)
>as soon as I checked after the printer started up.
>
>I compared before and after CONFIG output, and there
>was absolutely no difference (other than things like
>buffer counts, which one would expect). So, nothing
>was loaded or started on the server itself by INPW.
>
>So, the problem is reproducible. Something that the
>INPW does is necessary to get the printer to work.
>It's obviously nothing that has to be done to or on
>the printer itself. It's probably something that
>needs to be done on or to the NW server, which the
>HP INPW does automatically internally, even before
>it claims to be actually doing something.
>
>At this point, the problem is academic, since the
>server has a habit of staying up for 8 years, and
>I will keep a Windows 2000 system around to run the
>HP INPW 3.06 utility, just in case this printer is
>still around the next time the server actually does
>have to be restarted in real life.
>
>Oh, and just to make sure this was not imaginary on
>my part, I reproduced the problem 6 more times, with,
>and without, powering down the server, the printer,
>the switches, etc., in various combinations. Every
>time the NW server is downed and then restarted,
>regardless of what has happened to anything else
>in the chain, the printer does not start to select
>work from the queue until I run the HP INPW 3.06
>utility and "do nothing."
>
>Finally, just for grins, I ran the HP INPW on a
>second NetWare 4.11 server, pointing it to another,
>similar printer with the same model JetDirect card,
>which normally only uses TCP/IP. Then I downed that
>server and restarted it. Guess what? Same problem.
>
>So it has absolutely nothing to do with the printer
>or any of the hardware. It only has to do with 4.1[1]
>OR perhaps the fact that the HP INPW does something
>internally on the LAN that needs to be reflected in
>AUTOEXEC.NCF somehow.
>
>But I would sure love to know what the INPW does to
>make the printer suddenly start to work. You know,
>just to satisfy my inquiring mind. But, as I said,
>it's just (mostly) academic at this point.
>
>--
>WB
>_______________________________________________
>Novell mailing list
>Novell at netlab1.oucs.ox.ac.uk
>http://netlab1.usu.edu/mailman/listinfo/novell


From rpcarroll at wallgames.com  Wed May 21 23:02:13 2008
From: rpcarroll at wallgames.com (Robert Carroll)
Date: Wed, 21 May 2008 18:02:13 -0400
Subject: Need help to get NW 4 IPX printer going again
References: <HDEMIMHLCNKIEDEHAEMECEBJHPAB.wmhblair@comcast.net>
	<48347A85.10108@nyp.org>
Message-ID: <013001c8bb8e$5447c940$2f01a8c0@myhome.westell.com>

I've been through this with many printers on many different IPX networks,
including several 4.1 and 4.11/4.2 networks.  My take is that there is
likely a problem with the JetDirect settings.  It may have been caused by a
change in Netware server, queue or settings, or even a power surge
corruption of nvram.

Use the older JetAdmin program, locate the printer through its MAC address,
and completely initialize to factory settings.  Recreate the IPX and TCP/IP
settings to match your environment.  Remember that even though the printer
may work well in TCP/IP mode, the card may still have an IPX setting
corrupted or otherwise in need of repair.

For Netware, the JetDirect may be set to either Remote Printer Mode (which
requires a running PSERVER.NLM) or Print Server Mode (which requires a queue
on the server, but not a print server).  I suggest Print Server Mode, which
is faster, allowing the JetDirect to service the print queue directly.  Use
JetAdmin to select and/or create the queue in NDS, select users, frame
types, etc.  NDPS was not workable for Netware 4.1, so this is not even an
option.

Many, but not all, JetDirects may have their firmware upgraded to a later
version, which may clean up other problems you have experienced.

If you need a copy of JetAdmin, please let me know.

Best wishes,
Bob Carroll



From wmhblair at comcast.net  Wed May 21 23:21:57 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Wed, 21 May 2008 17:21:57 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <smtpd.6ee.48349985.bd427.1@mta-a2.tc.umn.edu>
Message-ID: <HDEMIMHLCNKIEDEHAEMEKECMHPAB.wmhblair@comcast.net>

John Geertz-Larson wrote:

> ... perhaps the printer couldn't detect any IPX network 
> number at all, if no other devices on that subnet were 
> generating IPX traffic.  If you're on a small network, 
> perhaps your router doesn't know the IPX network number, 
> so it couldn't tell the printer either.  As soon as you 
> fired up IPNW, it sent out IPX packets from which the 
> printer could discover the (new) IPX network number.

John, you have just solved the problem! The IPX network
number is not a parameter that one can tell the printer 
via its configuration panel or JetDirect web interface.
It has to, as you say, "discover" it.  If there is no
IPX traffic (which would be the case on these segments
on which the only IPX device was one of these printers, 
both in production and in my tests with another, spare 
server), it has no way to know, apparently. 

I just proved this by firing up a Windows PC on the same 
LAN segment with the printer on which the Novell Client 
has been installed. As soon as the Windows PC got to the
NetWare LOGIN screen (by which point it has looked out
onto the LAN for available servers to connect to), the
printer comes out of its torpor, fires up and starts to
print anything queued to it. 

Since IPX is such a chatty protocol, all I have to do
in the future to solve this problem is just keep a PC 
with an IPX client active on the same LAN segment, it
appears.

But I'm going to look for some NLM that I could add to
AUTOEXEC.NCF that would generate IPX traffic on every
adapter, so that no manual intervention is required in
the future.

--
WB




From toomas.aas at raad.tartu.ee  Thu May 22 08:37:48 2008
From: toomas.aas at raad.tartu.ee (Toomas Aas)
Date: Thu, 22 May 2008 10:37:48 +0300
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEKECMHPAB.wmhblair@comcast.net>
References: <HDEMIMHLCNKIEDEHAEMEKECMHPAB.wmhblair@comcast.net>
Message-ID: <483522CC.3080704@raad.tartu.ee>

William H. Blair wrote:

> Since IPX is such a chatty protocol, all I have to do
> in the future to solve this problem is just keep a PC 
> with an IPX client active on the same LAN segment, it
> appears.

Wouldn't it be better to hard-wire the IPX network number in autoexec.ncf, 
as described by John in the previous posting? Seems to me that this way the 
comms would be restored automagically after server restart.

-- 
Toomas Aas

From smf34 at cam.ac.uk  Thu May 22 09:26:49 2008
From: smf34 at cam.ac.uk (Simon Flood)
Date: Thu, 22 May 2008 09:26:49 +0100
Subject: SLES 10 SP2 GMC
In-Reply-To: <483434D1.A227.00C4.0@fxcm.com>
References: <8fd39f090805191405g26b6f59fo1a485c8e866b2e73@mail.gmail.com>	<483288C9.3020908@cam.ac.uk>
	<4832D696.3090408@cam.ac.uk> <483434D1.A227.00C4.0@fxcm.com>
Message-ID: <48352E49.9040105@cam.ac.uk>

On 21/05/2008 19:42, Michael Gorn wrote:

> Are there any problems with installing OES2 on top of SLES 10 SP2?
> Thanks.

Yes - it's not currently supported!

OES2SP1 uses SLES10SP2, OES2 (currently*) uses SLES10SP1.

*The currently supported way of installing OES2 is to install it as an 
add-on to SLES10SP1.  You can then patch it with any 
available/applicable updates.

In fact just checking my OES2 (i386) server today I see one update 
available - move-to-sles10-sp2.  Now applying!

Now whether this "supported status" will change when OES2SP1 is actually 
released I don't know but I suspect the supported route will be if you 
want SLES10SP2 then you need OES2SP1.

Hope this helps,
Simon

From wmhblair at comcast.net  Thu May 22 11:22:43 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Thu, 22 May 2008 05:22:43 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <483522CC.3080704@raad.tartu.ee>
Message-ID: <HDEMIMHLCNKIEDEHAEMEKEEIHPAB.wmhblair@comcast.net>

> Wouldn't it be better to hard-wire the IPX network number in
> autoexec.ncf, as described by John in the previous posting? 
> Seems to me that this way the comms would be restored 
> automagically after server restart.

Oh, that was just a "make sure you have done this, just in 
case you are an idiot" comment -- for the technical record,
not a serious suggestion, I'm sure.  I'm not an idiot, so I 
just ignored it completely. 

I should have explicitly stated that the IPX network number 
has been specified in this server's configuration from the
very beginning (which would have been when it first came to 
life using NetWare 4.0 sometime around 1996). 

But it's not the IPX network number that the printer needs
to discover. It's the subnet IPX network number (i.e., the
NET=xxxxxxxx specification on the BIND IPX statement in 
AUTOEXEC.NCF). Of course, IPX node addresses are determined 
by the device's Ethernet MAC level address, so the printer
already knows that.

As should have been clear from the last set of messages I
posted, the problem apparently is that the printer needs 
to discover its subnet IPX network number, which is not 
a parameter that the printer configuration interface for 
IPX allows one to specify, either via the printer's front 
panel, or via the JetDirect built-in web interface. That
much, at least, is a fact. Now, whether the lack of this 
printer's ability to learn its IPX subnet network number 
is in fact my technical problem is just speculation on my 
part. The printer behaves as if that is the problem, at 
least according to the message(s) in the printer's status
and configuration page. 

I have found several references online for this "fact." 
One states: "They learn their network number by listening 
for IPX RIP packets from 'real' IPX routers or servers."
So what I need is something I can put into AUTOEXEC.NCF
that would cause some RIP packets to flow on all network
segments / subnets. 

I have discovered that a Windows workstation that is NOT
on the same network subnet simply going thru LOGIN to a 
server will trigger the printer to come out of its sleep.
That workstation does not need to do anything related to
this printer. It simply needs to boot up and LOGIN to the
tree/context. Doing so apparently makes some RIP packets
flow out from the server on all subnets for some reason.

I wonder what other activity (other than accessing a NW
disk volume or queuing a print job to the server, which 
I know does not have any affect) on any network subnet 
would enable the printer to discover what it needs to 
know. 

I will continue to run experiments.

--
WB 


From RGrein at tpchd.org  Thu May 22 14:37:53 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Thu, 22 May 2008 06:37:53 -0700
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <483522CC.3080704@raad.tartu.ee>
References: <HDEMIMHLCNKIEDEHAEMEKECMHPAB.wmhblair@comcast.net>
	<483522CC.3080704@raad.tartu.ee>
Message-ID: <483514C1.811E.0072.0@tpchd.org>

The problem appears to be at a lower layer - perhaps a switch configuration issue.

Routers should broadcast IPX traffic, specifically RIP and SAP. This will give nodes the IPX network address. If a layer 3 switch is used it could be configured to not provide this information. We have this situation at my office - with the VLANs in place IPX is carried as 'any other protocol' giving inconsistent results for workstations - in this case the IPX network address is NOT configured on the workstations and they cannot use it unless a Netware server is configured on that VLAN with IPX. Damned stupid design with implicit core routing, but I'm stuck with it for now. For the case in question however determining the real solution requires details about the layer 2/3 environment.

Randy Grein
Sr. Network Engineer


>>> Toomas Aas <toomas.aas at raad.tartu.ee> 5/22/2008 12:37 AM >>>
William H. Blair wrote:

> Since IPX is such a chatty protocol, all I have to do
> in the future to solve this problem is just keep a PC 
> with an IPX client active on the same LAN segment, it
> appears.

Wouldn't it be better to hard-wire the IPX network number in autoexec.ncf, 
as described by John in the previous posting? Seems to me that this way the 
comms would be restored automagically after server restart.

-- 
Toomas Aas
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From rob.anderson at americansouthwest.com  Thu May 22 14:54:21 2008
From: rob.anderson at americansouthwest.com (Rob Anderson)
Date: Thu, 22 May 2008 08:54:21 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <483514C1.811E.0072.0@tpchd.org>
References: <HDEMIMHLCNKIEDEHAEMEKECMHPAB.wmhblair@comcast.net>
	<483522CC.3080704@raad.tartu.ee> <483514C1.811E.0072.0@tpchd.org>
Message-ID: <47c3fd570805220654u3f63c84dm713b94cda9b81c94@mail.gmail.com>

Isn't RIP/SAP turned off in NW4.x by default?  If that's the case, there
would be nothing going over the switches...Going to find my NW4 books and
see.  He definitely needs to set net=xx so the net#'s are consistent from
reboot to reboot.  Didn't know IPX would autoassign a net# if you didnt.
 Try THAT with TCP/IP!
Rob

On Thu, May 22, 2008 at 8:37 AM, Randy Grein <RGrein at tpchd.org> wrote:

> The problem appears to be at a lower layer - perhaps a switch configuration
> issue.
>
> Routers should broadcast IPX traffic, specifically RIP and SAP. This will
> give nodes the IPX network address. If a layer 3 switch is used it could be
> configured to not provide this information. We have this situation at my
> office - with the VLANs in place IPX is carried as 'any other protocol'
> giving inconsistent results for workstations - in this case the IPX network
> address is NOT configured on the workstations and they cannot use it unless
> a Netware server is configured on that VLAN with IPX. Damned stupid design
> with implicit core routing, but I'm stuck with it for now. For the case in
> question however determining the real solution requires details about the
> layer 2/3 environment.
>
> Randy Grein
> Sr. Network Engineer
>
>
> >>> Toomas Aas <toomas.aas at raad.tartu.ee> 5/22/2008 12:37 AM >>>
> William H. Blair wrote:
>
> > Since IPX is such a chatty protocol, all I have to do
> > in the future to solve this problem is just keep a PC
> > with an IPX client active on the same LAN segment, it
> > appears.
>
> Wouldn't it be better to hard-wire the IPX network number in autoexec.ncf,
> as described by John in the previous posting? Seems to me that this way the
> comms would be restored automagically after server restart.
>
> --
> Toomas Aas
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>
>
> *************************************************************************************
> This e-mail and any attachments may contain confidential and privileged
> information. It has been scanned for viruses. If you are not the intended
> recipient, please notify the sender immediately by return e-mail, delete
> this e-mail and destroy any copies. Any dissemination, use, review,
> disclosure, or distribution of this information by a person other than the
> intended recipient is unauthorized and may be illegal.
>
> **************************************************************************************
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
Rob Anderson
American Southwest Insurance Managers/Oakwood Software
Sr. Systems Analyst/Telecom Manager
V: 972-238-4209
F: 972-238-4299
M: 214-850-9593

From wmhblair at comcast.net  Thu May 22 15:27:57 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Thu, 22 May 2008 09:27:57 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <47c3fd570805220654u3f63c84dm713b94cda9b81c94@mail.gmail.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEGEFHHPAB.wmhblair@comcast.net>

> He definitely needs to set net=xx so the net#'s are consistent
> from reboot to reboot.

That has been that way since 1996, folks. I'm not an idiot.

--
WB


From wmhblair at comcast.net  Thu May 22 15:31:31 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Thu, 22 May 2008 09:31:31 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <483514C1.811E.0072.0@tpchd.org>
Message-ID: <HDEMIMHLCNKIEDEHAEMEEEFIHPAB.wmhblair@comcast.net>

> The problem appears to be at a lower layer - 
> perhaps a switch configuration issue.

Nope. Cannot possibly be. Remember I said I had already eliminated
everything inbetween? That meant that when I reproduced the problem
on my test/playtoy NetWare server, there was nothing between the
server and the printer. I plugged it directly into the LAN card in
the server using a crossover cable. No hub, no switch, no router.
Period.

I've been shooting network problems too long not to have done that
the very first thing (well, almost the very first thing).

It's got to be a problem on the server.

--
WB



From RGrein at tpchd.org  Thu May 22 15:56:21 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Thu, 22 May 2008 07:56:21 -0700
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <47c3fd570805220654u3f63c84dm713b94cda9b81c94@mail.gmail.com>
References: <HDEMIMHLCNKIEDEHAEMEKECMHPAB.wmhblair@comcast.net>
	<483522CC.3080704@raad.tartu.ee> <483514C1.811E.0072.0@tpchd.org>
	<47c3fd570805220654u3f63c84dm713b94cda9b81c94@mail.gmail.com>
Message-ID: <48352724.811E.0072.0@tpchd.org>

Not at all. RIP may be replaced by NLSP (based on OSPF) and SAP can be managed (generally through aggregation at the routers) but they are pretty basic. Many old-time netware problems with connections were from the failure of infrastructure guys to understand that Netware is a router by default and they need to match protocols. 

However, if VLAN membership in the switch is set up by protocol (as one example) IPX traffic won't flow to the printer - it can't find an IPX network. If that happens at the core switch before it gets to a distribution switch there would be no IPX traffic - until a workstation connected to the distribution switch asking for an IPX network. He's said several times that the IPX network number is set in autoexec on the server - if memory serves 4.10 was the first implementation of the inetcfg utility, but it wasn't used as a matter of course until NetWare 5.

Randy Grein
Sr. Network Engineer


>>> "Rob Anderson" <rob.anderson at americansouthwest.com> 5/22/2008 6:54 AM >>>
Isn't RIP/SAP turned off in NW4.x by default?  If that's the case, there
would be nothing going over the switches...Going to find my NW4 books and
see.  He definitely needs to set net=xx so the net#'s are consistent from
reboot to reboot.  Didn't know IPX would autoassign a net# if you didnt.
 Try THAT with TCP/IP!
Rob

On Thu, May 22, 2008 at 8:37 AM, Randy Grein <RGrein at tpchd.org> wrote:

> The problem appears to be at a lower layer - perhaps a switch configuration
> issue.
>
> Routers should broadcast IPX traffic, specifically RIP and SAP. This will
> give nodes the IPX network address. If a layer 3 switch is used it could be
> configured to not provide this information. We have this situation at my
> office - with the VLANs in place IPX is carried as 'any other protocol'
> giving inconsistent results for workstations - in this case the IPX network
> address is NOT configured on the workstations and they cannot use it unless
> a Netware server is configured on that VLAN with IPX. Damned stupid design
> with implicit core routing, but I'm stuck with it for now. For the case in
> question however determining the real solution requires details about the
> layer 2/3 environment.
>
> Randy Grein
> Sr. Network Engineer
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From RGrein at tpchd.org  Thu May 22 16:00:08 2008
From: RGrein at tpchd.org (Randy Grein)
Date: Thu, 22 May 2008 08:00:08 -0700
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEEEFIHPAB.wmhblair@comcast.net>
References: <483514C1.811E.0072.0@tpchd.org>
	<HDEMIMHLCNKIEDEHAEMEEEFIHPAB.wmhblair@comcast.net>
Message-ID: <48352807.811E.0072.0@tpchd.org>

Hmm - crossover cable from server to the printer and it STILL wasn't picking up IPX? That's weird, and one for the books. Wasn't trying to doubt you, it's just the odd problems are generally something missed - and switch configurations are often missed.

Randy Grein
Sr. Network Engineer


>>> "William H. Blair" <wmhblair at comcast.net> 5/22/2008 7:31 AM >>>
> The problem appears to be at a lower layer - 
> perhaps a switch configuration issue.

Nope. Cannot possibly be. Remember I said I had already eliminated
everything inbetween? That meant that when I reproduced the problem
on my test/playtoy NetWare server, there was nothing between the
server and the printer. I plugged it directly into the LAN card in
the server using a crossover cable. No hub, no switch, no router.
Period.

I've been shooting network problems too long not to have done that
the very first thing (well, almost the very first thing).

It's got to be a problem on the server.

--
WB


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

*************************************************************************************
This e-mail and any attachments may contain confidential and privileged information. It has been scanned for viruses. If you are not the intended recipient, please notify the sender immediately by return e-mail, delete this e-mail and destroy any copies. Any dissemination, use, review, disclosure, or distribution of this information by a person other than the intended recipient is unauthorized and may be illegal.
**************************************************************************************



From rob.anderson at americansouthwest.com  Thu May 22 16:03:11 2008
From: rob.anderson at americansouthwest.com (Rob Anderson)
Date: Thu, 22 May 2008 10:03:11 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <47c3fd570805220802n51597883l5420010c1f442602@mail.gmail.com>
References: <47c3fd570805220654u3f63c84dm713b94cda9b81c94@mail.gmail.com>
	<HDEMIMHLCNKIEDEHAEMEGEFHHPAB.wmhblair@comcast.net>
	<47c3fd570805220802n51597883l5420010c1f442602@mail.gmail.com>
Message-ID: <47c3fd570805220803y68949b67ya72640cf4c8c85c3@mail.gmail.com>

>
> Never said you were, sir.  It was murky as to what your net number was.
>  Just trying to help.
> I thought I was one of the last people to run a 4.11 server on this list.
>  Retired last NW4.11/4.2 server in Nov 2006.
>
> Checking out on this one...
>
> Rob
>
>
> On Thu, May 22, 2008 at 9:27 AM, William H. Blair <wmhblair at comcast.net>
> wrote:
>
>> > He definitely needs to set net=xx so the net#'s are consistent
>> > from reboot to reboot.
>>
>> That has been that way since 1996, folks. I'm not an idiot.
>>
>> --
>> WB
>>
>> _______________________________________________
>> Novell mailing list
>> Novell at netlab1.oucs.ox.ac.uk
>> http://netlab1.usu.edu/mailman/listinfo/novell
>>
>
>
>
> --
> Rob Anderson
> American Southwest Insurance Managers/Oakwood Software
> Sr. Systems Analyst/Telecom Manager
> V: 972-238-4209
> F: 972-238-4299
> M: 214-850-9593
>



-- 
Rob Anderson
American Southwest Insurance Managers/Oakwood Software
Sr. Systems Analyst/Telecom Manager
V: 972-238-4209
F: 972-238-4299
M: 214-850-9593

From rpcarroll at wallgames.com  Thu May 22 17:18:17 2008
From: rpcarroll at wallgames.com (Robert Carroll)
Date: Thu, 22 May 2008 12:18:17 -0400
Subject: Need help to get NW 4 IPX printer going again
References: <HDEMIMHLCNKIEDEHAEMEEEFIHPAB.wmhblair@comcast.net>
Message-ID: <00d001c8bc27$73fd84c0$2f01a8c0@myhome.westell.com>

William,

In the interests of resolving your problem, let me suggest that you review
the known problems associated with your J6057A (615n) EIO card.  It is rare
that HP dedicates a page such as this:
http://www.hp.com/pond/jetdirect/j6057a.html

Moreover, the HP forums are filled with stories of problems with this card
and various firmware revisions.

In spite of this, my feeling is that the Install Network Printer Wizard
(INPW) is the wrong utility to address the problem.  If the problem is not
the JetDirect hardware itself, then JetAdmin can more likely resolve it.
However, I am now of the opinion that the JetDirect itself is suspect.

The good news is that HP has made the unusual move of extending your
warranty until October 31, 2008.

Best wishes,
Bob Carroll


----- Original Message ----- 
From: "William H. Blair" <wmhblair at comcast.net>
To: "Novell LAN Interest Group" <novell at netlab1.oucs.ox.ac.uk>
Sent: Thursday, May 22, 2008 10:31 AM
Subject: RE: Need help to get NW 4 IPX printer going again


> > The problem appears to be at a lower layer -
> > perhaps a switch configuration issue.
>
> Nope. Cannot possibly be. Remember I said I had already eliminated
> everything inbetween? That meant that when I reproduced the problem
> on my test/playtoy NetWare server, there was nothing between the
> server and the printer. I plugged it directly into the LAN card in
> the server using a crossover cable. No hub, no switch, no router.
> Period.
>
> I've been shooting network problems too long not to have done that
> the very first thing (well, almost the very first thing).
>
> It's got to be a problem on the server.
>
> --
> WB
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell


From cjf at calfrye.com  Thu May 22 17:59:01 2008
From: cjf at calfrye.com (Cal Frye)
Date: Thu, 22 May 2008 12:59:01 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEKECMHPAB.wmhblair@comcast.net>
References: <HDEMIMHLCNKIEDEHAEMEKECMHPAB.wmhblair@comcast.net>
Message-ID: <4835A655.1010906@calfrye.com>

William H. Blair wrote:
> The IPX network
> number is not a parameter that one can tell the printer 
> via its configuration panel or JetDirect web interface.
> It has to, as you say, "discover" it.  If there is no
> IPX traffic (which would be the case on these segments
> on which the only IPX device was one of these printers, 
> both in production and in my tests with another, spare 
> server), it has no way to know, apparently. 

TRACK ON is the command that will show what RIP/SAP traffic is on your 
IPX network, perhaps that might help some.

What puzzles me is that SAP by default broadcasts every 30 sec, and RIP 
every 60 seconds. Why isn't this sufficient for the printer to discover 
the network? Do you have SAP filtering on, or RIP disabled (not uncommon 
to limit the "chatter" on noisy networks)?

-- 
Regards,
-- Cal Frye, Network Administrator, Oberlin College

    www.calfrye.com,  www.pitalabs.com


"The truth will set you free, but first it will piss you off." -- Gloria 
Steinem.

From wmhblair at comcast.net  Thu May 22 19:30:59 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Thu, 22 May 2008 13:30:59 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <4835A655.1010906@calfrye.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEMEHDHPAB.wmhblair@comcast.net>

> Do you have SAP filtering on, or RIP disabled (not 
> uncommon to limit the "chatter" on noisy networks)?

No, not that I am aware of. But I checked just to be sure.

I now have an isolated test environment for this problem,
so that I can reproduce it at will (just DOWN the server,
and restart it, either with or without exiting back to
DOS, and either with or without turning power off on the
server, or anything else in the link -- but there is now
nothing else in the link, except a switch on one subnet). 

Other than the fact that there are some NetWare volumes
(which do not have to be mounted to reveal the problem)
on this test server, this is about as plain, vanilla a
4.11 NW server that you can have, with 2 NICs (subnets).

I can move the printer from one subnet to another, but
the way I have it configured now the printer is on the
same subnet as a single PC, connected by a switch. This
morning, the printer was on the other subnet (not the
one with the single PC) with no switch (crossover cable).
So, I have tried it both ways (of course).

The problem occurs after the server is rebooted, regardless
of any change in the status of any other device or object -- 
except the printer, of course (it has to be powered off in
order to get it to "forget" the IPX network number of the 
subnet to which it is attached). 

If I down the server (and turn the printer off, of course), 
after the server restarts the printer will not pull jobs 
from the queue on the server until the HP INPW _starts_ to
run (I never let it finish and actually do anything to the
tree or the server configuration files).

But if all I do is just turn off the printer, even if I 
move it from one subnet to another, and then turn it on
without downing the server, the printer starts right up
and pulls jobs from its queue. So, the printer is able
to discover its (potentially changed) subnet IPX network
number when it powers back on AS LONG AS THE NETWARE
SERVER HAS NOT BEEN DOWNED IN THE INTERIM. So I conclude 
that something has obviously changed state on the server,
because when the printer is powered up again, even on a
different subnet, it immediately discovers the IPX net
number of whatever subnet it is on and starts working.

Thus, downing the server and restarting it (along with
powering off the printer so the JetDirect card forgets
its subnet IPX network number) is the ONLY thing that
instigates this problem.

Hence, my conclusion that there is something that needs
to be done ON or TO the _server_ in order to enable the 
printer's JetDirect server to discover its subnet IPX 
network number. A simple logical process of elimination
of links in the chain has proven this to my satisfaction
at this point.

--
WB


From wmhblair at comcast.net  Thu May 22 19:45:14 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Thu, 22 May 2008 13:45:14 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <00d001c8bc27$73fd84c0$2f01a8c0@myhome.westell.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEOEHEHPAB.wmhblair@comcast.net>

> I am now of the opinion that the JetDirect itself is suspect.

I doubt it. In my isolated test environment I have created, I have
now tried three different JetDirect cards. The printer behaves in
exactly the same manner with all three (including the original one
that has been in the printer for 6 years). All three of these are,
of course, the same model card (I pulled them from other printers
as they were replaced). 

Of course, I understand that there could be some sort of problem
in all three which somehow manifests itself in this very peculiar
manner. To determine if this is the case, I'm going to see if I 
can get a hold of an entirely different model JetDirect card that 
would fit into this particular printer (HP Color LaserJet 4500DN).
I may already have one somewhere around here that I can borrow for
a half hour, but to discover that I have to walk around and look,
since there is no data base that records specific types of embedded 
print servers, only base printer models. 

My isolated test environment now consists of a playpen server, the
original JetDirect card and two like it, two printers, and one PC,
with other PCs available to be attached (via a switch). It takes
five minutes to reproduce the problem and get back out of it. Oh,
by the way, when I hook up both printers, the problem happens on
both printers.

Again, the only degree of freedom appears to be (or behaves like
it is) the server being DOWNed and restarted.

--
WB


From mrsmith at oconee.k12.ga.us  Thu May 22 20:08:37 2008
From: mrsmith at oconee.k12.ga.us (Matt Smith)
Date: Thu, 22 May 2008 15:08:37 -0400
Subject: SLES 10 SP2 with OES2?
Message-ID: <48358C01.E4C1.0068.0@oconee.k12.ga.us>

Anybody put SLES10 SP2 on their OES 2 server?  It just showed up as an available patch on one of my OES 2 servers.  I'm leery about being an early adopter.

-Matt
-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685


From tim at nds8.co.uk  Thu May 22 20:38:28 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Thu, 22 May 2008 20:38:28 +0100
Subject: SLES 10 SP2 with OES2?
In-Reply-To: <48358C01.E4C1.0068.0@oconee.k12.ga.us>
References: <48358C01.E4C1.0068.0@oconee.k12.ga.us>
Message-ID: <4835D9C4020000BB0008ED13@mail2.nds8.com>

It should have now been pulled ...  

NOTE to All:   Do not instal SLES10 SP2 onto an OES2 server...  Only when OES2 SP1 is released (Q4 2008) will SLES10 SP2 and OES2  work together (and be supported)

Tim


-- 

>>> On 22 May 2008 at 20:08, "Matt Smith" <mrsmith at oconee.k12.ga.us> wrote:
> Anybody put SLES10 SP2 on their OES 2 server?  It just showed up as an 
> available patch on one of my OES 2 servers.  I'm leery about being an early 
> adopter.
> 
> -Matt

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From mrsmith at oconee.k12.ga.us  Thu May 22 20:43:20 2008
From: mrsmith at oconee.k12.ga.us (Matt Smith)
Date: Thu, 22 May 2008 15:43:20 -0400
Subject: SLES 10 SP2 with OES2?
In-Reply-To: <4835D9C4020000BB0008ED13@mail2.nds8.com>
References: <48358C01.E4C1.0068.0@oconee.k12.ga.us>
	<4835D9C4020000BB0008ED13@mail2.nds8.com>
Message-ID: <48359413.E4C1.0068.0@oconee.k12.ga.us>

>>> On 5/22/2008 at 3:38 PM, in message <4835D9C4020000BB0008ED13 at mail2.nds8.com>,
"Tim Heywood" <tim at nds8.co.uk> wrote:
> It should have now been pulled ...  
> 
> NOTE to All:   Do not instal SLES10 SP2 onto an OES2 server...  Only when 
> OES2 SP1 is released (Q4 2008) will SLES10 SP2 and OES2  work together (and 
> be supported)
> 
> Tim
> 


Thanks!  That was my original understanding, but Novell's been known to change its mind mid-stream.

-Matt
-- 

Matt Smith                Network Technology Specialist
Oconee County School System, Oconee County, Georgia
Office of Instruction and Technology       706-769-5685


From ahidalgo at salud.unm.edu  Thu May 22 20:56:45 2008
From: ahidalgo at salud.unm.edu (Al Hidalgo)
Date: Thu, 22 May 2008 13:56:45 -0600
Subject: SLES 10 SP2 with OES2?
In-Reply-To: <4835D9C4020000BB0008ED13@mail2.nds8.com>
References: <48358C01.E4C1.0068.0@oconee.k12.ga.us>
	<4835D9C4020000BB0008ED13@mail2.nds8.com>
Message-ID: <48357B93.4770.0087.0@salud.unm.edu>

I installed it this morning on the OES 2 test server that I am using for the GW Bonsai beta program and it did not appear to break anything.
 
Al
 
 
 
Al Hidalgo
Enterprise Systems Support Analyst
Information Technology 
University Hospitals/UNM Health Sciences Center
ahidalgo at salud.unm.edu 


>>> On 5/22/2008 at 1:38 PM, "Tim Heywood" <tim at nds8.co.uk> wrote:
It should have now been pulled ...  

NOTE to All:   Do not instal SLES10 SP2 onto an OES2 server...  Only when OES2 SP1 is released (Q4 2008) will SLES10 SP2 and OES2  work together (and be supported)

Tim


-- 

>>> On 22 May 2008 at 20:08, "Matt Smith" <mrsmith at oconee.k12.ga.us> wrote:
> Anybody put SLES10 SP2 on their OES 2 server?  It just showed up as an 
> available patch on one of my OES 2 servers.  I'm leery about being an early 
> adopter.
> 
> -Matt

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From automatedprocess at bellsouth.net  Thu May 22 21:17:37 2008
From: automatedprocess at bellsouth.net (Stephen Cummings)
Date: Thu, 22 May 2008 16:17:37 -0400
Subject: Where is????
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop><f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com><f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com><06fe01c8babc$daafa020$0301a8c0@apcdesktop><f47566ff0805201421s52c2c311jb55914aa06bd7b4d@mail.gmail.com><075401c8bb62$757a0820$0301a8c0@apcdesktop><f47566ff0805211031t18b49d55ie8881762c6e2e965@mail.gmail.com><076f01c8bb70$a1c9d730$0301a8c0@apcdesktop>
	<f47566ff0805211146w645d45c1x66d0867bb76b890f@mail.gmail.com>
Message-ID: <00b901c8bc48$e1b4f860$0301a8c0@apcdesktop>

Chris, for as long as I have been doing Novell, (version 286 SFT), I have
never had this much problems with a simple task......

I now have version 2.6 iManager installed, along with three plug-ins. One
included is iPrint. Once the plug-in was installed successfully, I restarted
my
file server in hopes that the iPrint from the selection menu would be there.
Well I hate to report that it did not show up. No sign or implication that
it is there, however, it does show as an installed NPM.

Now I ask....... WHAT NOW?
                         WHERE DID I GO WRONG?
                         DOES ANYONE ELSE HAVE THIS PROBLEM?

Please advise

Stephen Cummings
A+, Net +, CNA 5x, 6x,
CNE 5x, 6x, NAI, CNI,
MCNE
----- Original Message ----- 
From: "Christopher Mangiarelli" <cmangiarelli at gmail.com>
To: "Novell LAN Interest Group" <novell at netlab1.oucs.ox.ac.uk>
Sent: Wednesday, May 21, 2008 2:46 PM
Subject: Re: Where is????


> I don't know.  The few times i've installed iManager from scratch, all I
got
> was three plugins related to core services.  I would then either download
> the NPM's manually from Novell (support.novell.com) or I would configure
> tomcat for internet access and then use the automated install method
through
> the iManager server configuration page.  Both worked equally well for me.
>
> I have iPrint plugins working in my production imanager 2.6, my test
> imanager 2.6, mobile imanager 2.6 and mobile imanager 2.7.  I am just
> beginning to look into imanager 2.7 in my test environment.
>
> On Wed, May 21, 2008 at 2:29 PM, Stephen Cummings <
> automatedprocess at bellsouth.net> wrote:
>
> > Okay. I will give that a shot. Let me find version 2.6. Does this
version
> > include the iPrint functions?
> >
> > Stephen Cummings
> > A+, Net +, CNA 5x, 6x,
> > CNE 5x, 6x, NAI, CNI,
> > MCNE
> >
>
> -- 
> Christopher Mangiarelli
> cmangiarelli at gmail.com
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



From tim at nds8.co.uk  Thu May 22 21:17:53 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Thu, 22 May 2008 21:17:53 +0100
Subject: SLES 10 SP2 with OES2?
In-Reply-To: <48357B93.4770.0087.0@salud.unm.edu>
References: <48358C01.E4C1.0068.0@oconee.k12.ga.us>
	<4835D9C4020000BB0008ED13@mail2.nds8.com>
	<48357B93.4770.0087.0@salud.unm.edu>
Message-ID: <4835E301020000BB0008ED2F@mail2.nds8.com>

But 100% NOT Supported!!!

There is no backout either. 

The Patch has been pulled and is to be modified so as to stop the SP2 patch being installed if OES2 is present - that sounds like "Don't try this at home" to me :-)

T


-- 

>>> On 22 May 2008 at 20:56, "Al Hidalgo" <ahidalgo at salud.unm.edu> wrote:
> I installed it this morning on the OES 2 test server that I am using for the 
> GW Bonsai beta program and it did not appear to break anything.
>  
> Al
>  
>  
>  
> Al Hidalgo
> Enterprise Systems Support Analyst
> Information Technology 
> University Hospitals/UNM Health Sciences Center
> ahidalgo at salud.unm.edu 
> 
> 
>>>> On 5/22/2008 at 1:38 PM, "Tim Heywood" <tim at nds8.co.uk> wrote:
> It should have now been pulled ...  
> 
> NOTE to All:   Do not instal SLES10 SP2 onto an OES2 server...  Only when 
> OES2 SP1 is released (Q4 2008) will SLES10 SP2 and OES2  work together (and 
> be supported)
> 
> Tim

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From ahidalgo at salud.unm.edu  Thu May 22 21:34:29 2008
From: ahidalgo at salud.unm.edu (Al Hidalgo)
Date: Thu, 22 May 2008 14:34:29 -0600
Subject: SLES 10 SP2 with OES2?
In-Reply-To: <4835E301020000BB0008ED2F@mail2.nds8.com>
References: <48358C01.E4C1.0068.0@oconee.k12.ga.us>
	<4835D9C4020000BB0008ED13@mail2.nds8.com>
	<48357B93.4770.0087.0@salud.unm.edu>
	<4835E301020000BB0008ED2F@mail2.nds8.com>
Message-ID: <4835846B.4770.0087.0@salud.unm.edu>

Good thing it's a test system.............
 
Al

>>> On 5/22/2008 at 2:17 PM, "Tim Heywood" <tim at nds8.co.uk> wrote:
But 100% NOT Supported!!!

There is no backout either. 

The Patch has been pulled and is to be modified so as to stop the SP2 patch being installed if OES2 is present - that sounds like "Don't try this at home" to me :-)

T


-- 

>>> On 22 May 2008 at 20:56, "Al Hidalgo" <ahidalgo at salud.unm.edu> wrote:
> I installed it this morning on the OES 2 test server that I am using for the 
> GW Bonsai beta program and it did not appear to break anything.
>  
> Al
>  
>  
>  
> Al Hidalgo
> Enterprise Systems Support Analyst
> Information Technology 
> University Hospitals/UNM Health Sciences Center
> ahidalgo at salud.unm.edu 
> 
> 
>>>> On 5/22/2008 at 1:38 PM, "Tim Heywood" <tim at nds8.co.uk> wrote:
> It should have now been pulled ...  
> 
> NOTE to All:   Do not instal SLES10 SP2 onto an OES2 server...  Only when 
> OES2 SP1 is released (Q4 2008) will SLES10 SP2 and OES2  work together (and 
> be supported)
> 
> Tim

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From KPARRIS at ed.sc.gov  Thu May 22 21:58:31 2008
From: KPARRIS at ed.sc.gov (Kevin Parris)
Date: Thu, 22 May 2008 16:58:31 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEMEHDHPAB.wmhblair@comcast.net>
References: <4835A655.1010906@calfrye.com>
	<HDEMIMHLCNKIEDEHAEMEMEHDHPAB.wmhblair@comcast.net>
Message-ID: <4835A63702000018004E3004@sdecl2.sde.state.sc.us>

There did once exist an IPX Ping utility, as I recall it was an NLM for the server.... if you can find that, it may be of some use to you.  For example, reboot the server and then IPXping the printer.  I realize this is not a "solution" but might be a workaround - you can (I believe) launch the ping with parameters by command line in the autoexec.ncf file so it happens whether or not you are there (supposing that sending the ping(s) wakes up the printing process).

>>> "William H. Blair" <wmhblair at comcast.net> 05/22/08 2:30 PM >>>

Thus, downing the server and restarting it (along with powering off the printer so the JetDirect card forgetsits subnet IPX network number) is the ONLY thing that instigates this problem.



From cmangiarelli at gmail.com  Thu May 22 22:04:45 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Thu, 22 May 2008 17:04:45 -0400
Subject: Where is????
In-Reply-To: <00b901c8bc48$e1b4f860$0301a8c0@apcdesktop>
References: <05d401c8b9f9$73b16520$0301a8c0@apcdesktop>
	<f47566ff0805191352u1ac845f3nd6aad2da0c52e72f@mail.gmail.com>
	<f47566ff0805191356oc66d190ha1551e56c3fde128@mail.gmail.com>
	<06fe01c8babc$daafa020$0301a8c0@apcdesktop>
	<f47566ff0805201421s52c2c311jb55914aa06bd7b4d@mail.gmail.com>
	<075401c8bb62$757a0820$0301a8c0@apcdesktop>
	<f47566ff0805211031t18b49d55ie8881762c6e2e965@mail.gmail.com>
	<076f01c8bb70$a1c9d730$0301a8c0@apcdesktop>
	<f47566ff0805211146w645d45c1x66d0867bb76b890f@mail.gmail.com>
	<00b901c8bc48$e1b4f860$0301a8c0@apcdesktop>
Message-ID: <f47566ff0805221404j12104f68i75340f8ccbaf35ae@mail.gmail.com>

Thing's are indeed getting complex in the Novell world.  Even their software
which I used to think was fairly straight forward and made common sense is
now getting very confusing to administer and operate.

After you install the NPM into tomcat, you need to restart tomcat for the
changes to take effect (which would occur after a server reboot, but all you
need to do is a tc4stop.ncf, wait for it to stop, then a tomcat4.ncf to
start it back up).

Once the plugin is installed, assuming you have RBS setup, you need to
publish the plugin to the container.  Configure > Role Based Services > RBS
Configuration > Not installed > Select item and then hit Install.  This
makes the plugin available to all Collection owners.  If your user is not a
collection owner, you then need to manage their membership association to
allow them to see the plugin by giving them rights to use the plugin and
setting a scope of their control over certain OU's.

To verify if the plugin is working to ensure its not a rights issue, you can
log in as an eDirectory admin with collection owner access to the RBS
container.

As was also mentioned in another thread, you can disable RBS which shows all
users all plugins regardless of RBS configuration, but if they don't have
rights in eDirectory to perform those actions, the plugins error out.  See
TID 3739679 on how to force unrestricted mode in iManager.  This could be
used to help troubleshoot, but can cause confusion amongst normal helpdesk
people who then have access to see much more then they have control over
(typically).

If you still don't have them listed, something is amiss.  The logger screen
on the Novell server might pinpoint to some problems when it loads the
plugins, but often the front page of iManager pops a link up when it can't
load certain plugins and usually gives a (cryptic) meaning why.  You might
see something like:

*"Notice:  Some of the roles and tasks are not available.  To see the list
of Roles and Tasks not displayed and troubleshooting information go to the View
Details page."*

On Thu, May 22, 2008 at 4:17 PM, Stephen Cummings <
automatedprocess at bellsouth.net> wrote:

> Chris, for as long as I have been doing Novell, (version 286 SFT), I have
> never had this much problems with a simple task......
>
> I now have version 2.6 iManager installed, along with three plug-ins. One
> included is iPrint. Once the plug-in was installed successfully, I
> restarted
> my
> file server in hopes that the iPrint from the selection menu would be
> there.
> Well I hate to report that it did not show up. No sign or implication that
> it is there, however, it does show as an installed NPM.
>
> Now I ask....... WHAT NOW?
>                         WHERE DID I GO WRONG?
>                         DOES ANYONE ELSE HAVE THIS PROBLEM?
>
> Please advise
>
> Stephen Cummings
> A+, Net +, CNA 5x, 6x,
> CNE 5x, 6x, NAI, CNI,
> MCNE
>

-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From rob.anderson at americansouthwest.com  Thu May 22 22:05:41 2008
From: rob.anderson at americansouthwest.com (Rob Anderson)
Date: Thu, 22 May 2008 16:05:41 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <4835A63702000018004E3004@sdecl2.sde.state.sc.us>
References: <4835A655.1010906@calfrye.com>
	<HDEMIMHLCNKIEDEHAEMEMEHDHPAB.wmhblair@comcast.net>
	<4835A63702000018004E3004@sdecl2.sde.state.sc.us>
Message-ID: <47c3fd570805221405m52a5fbc0p934c0604e0ced1cf@mail.gmail.com>

Still have the utility...as an EXE not much good on a NW server though.
Rob

On Thu, May 22, 2008 at 3:58 PM, Kevin Parris <KPARRIS at ed.sc.gov> wrote:

> There did once exist an IPX Ping utility, as I recall it was an NLM for the
> server.... if you can find that, it may be of some use to you.  For example,
> reboot the server and then IPXping the printer.  I realize this is not a
> "solution" but might be a workaround - you can (I believe) launch the ping
> with parameters by command line in the autoexec.ncf file so it happens
> whether or not you are there (supposing that sending the ping(s) wakes up
> the printing process).
>
> >>> "William H. Blair" <wmhblair at comcast.net> 05/22/08 2:30 PM >>>
>
> Thus, downing the server and restarting it (along with powering off the
> printer so the JetDirect card forgetsits subnet IPX network number) is the
> ONLY thing that instigates this problem.
>
>
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell
>



-- 
Rob Anderson
American Southwest Insurance Managers/Oakwood Software
Sr. Systems Analyst/Telecom Manager
V: 972-238-4209
F: 972-238-4299
M: 214-850-9593

From Robrinsky at roillc.com  Thu May 22 22:21:16 2008
From: Robrinsky at roillc.com (Robert Obrinsky)
Date: Thu, 22 May 2008 17:21:16 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEMEHDHPAB.wmhblair@comcast.net>
References: <4835A655.1010906@calfrye.com>
	<HDEMIMHLCNKIEDEHAEMEMEHDHPAB.wmhblair@comcast.net>
Message-ID: <4835AB90.9F9C.006D.0@roillc.com>

Can you put a workstation with wireshark on it and see what happens when the server boots? Don't load any protocols on the card in the workstation - at least, not IPX and take a trace of all the communications as the server boots. In fact, turn the printers off while you do this so that you can see only what the server is doing without any other chatter. It helps to have a network hub in this situation, not a switch, although broadcast traffic will be visible on the switch.
 
If I missed this in an earlier post, I apologize, but is "Reply to Get Nearest Server" set to 'ON'? 
 
Robert W. Obrinsky
President
Robert Obrinsky Industries, LLC
1824 Newfield Avenue
Stamford CT 06903
203.968.9617 (Office)
203.273.7012 (Mobile)


>>> "William H. Blair" <wmhblair at comcast.net> 5/22/2008 2:30 PM >>>
> Do you have SAP filtering on, or RIP disabled (not 
> uncommon to limit the "chatter" on noisy networks)?

No, not that I am aware of. But I checked just to be sure.

I now have an isolated test environment for this problem,
so that I can reproduce it at will (just DOWN the server,
and restart it, either with or without exiting back to
DOS, and either with or without turning power off on the
server, or anything else in the link -- but there is now
nothing else in the link, except a switch on one subnet). 

Other than the fact that there are some NetWare volumes
(which do not have to be mounted to reveal the problem)
on this test server, this is about as plain, vanilla a
4.11 NW server that you can have, with 2 NICs (subnets).

I can move the printer from one subnet to another, but
the way I have it configured now the printer is on the
same subnet as a single PC, connected by a switch. This
morning, the printer was on the other subnet (not the
one with the single PC) with no switch (crossover cable).
So, I have tried it both ways (of course).

The problem occurs after the server is rebooted, regardless
of any change in the status of any other device or object -- 
except the printer, of course (it has to be powered off in
order to get it to "forget" the IPX network number of the 
subnet to which it is attached). 

If I down the server (and turn the printer off, of course), 
after the server restarts the printer will not pull jobs 
from the queue on the server until the HP INPW _starts_ to
run (I never let it finish and actually do anything to the
tree or the server configuration files).

But if all I do is just turn off the printer, even if I 
move it from one subnet to another, and then turn it on
without downing the server, the printer starts right up
and pulls jobs from its queue. So, the printer is able
to discover its (potentially changed) subnet IPX network
number when it powers back on AS LONG AS THE NETWARE
SERVER HAS NOT BEEN DOWNED IN THE INTERIM. So I conclude 
that something has obviously changed state on the server,
because when the printer is powered up again, even on a
different subnet, it immediately discovers the IPX net
number of whatever subnet it is on and starts working.

Thus, downing the server and restarting it (along with
powering off the printer so the JetDirect card forgets
its subnet IPX network number) is the ONLY thing that
instigates this problem.

Hence, my conclusion that there is something that needs
to be done ON or TO the _server_ in order to enable the 
printer's JetDirect server to discover its subnet IPX 
network number. A simple logical process of elimination
of links in the chain has proven this to my satisfaction
at this point.

--
WB

_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From mgorn at fxcm.com  Thu May 22 23:20:04 2008
From: mgorn at fxcm.com (Michael Gorn)
Date: Thu, 22 May 2008 18:20:04 -0400
Subject: SLES 10 SP2 with OES2?
In-Reply-To: <4835846B.4770.0087.0@salud.unm.edu>
References: <48358C01.E4C1.0068.0@oconee.k12.ga.us>
	<4835D9C4020000BB0008ED13@mail2.nds8.com>
	<48357B93.4770.0087.0@salud.unm.edu>
	<4835E301020000BB0008ED2F@mail2.nds8.com>
	<4835846B.4770.0087.0@salud.unm.edu>
Message-ID: <4835B954.A227.00C4.0@fxcm.com>

Do you know why it was pulled? What exactly is supposed to break horribly?

>>> "Al Hidalgo" <ahidalgo at salud.unm.edu> 5/22/2008 4:34 PM >>>
Good thing it's a test system.............

Al

>>> On 5/22/2008 at 2:17 PM, "Tim Heywood" <tim at nds8.co.uk> wrote:
But 100% NOT Supported!!!

There is no backout either. 

The Patch has been pulled and is to be modified so as to stop the SP2 patch being installed if OES2 is present - that sounds like "Don't try this at home" to me :-)

T


-- 

>>> On 22 May 2008 at 20:56, "Al Hidalgo" <ahidalgo at salud.unm.edu> wrote:
> I installed it this morning on the OES 2 test server that I am using for the 
> GW Bonsai beta program and it did not appear to break anything.
>  
> Al
>  
>  
>  
> Al Hidalgo
> Enterprise Systems Support Analyst
> Information Technology 
> University Hospitals/UNM Health Sciences Center
> ahidalgo at salud.unm.edu 
> 
> 
>>>> On 5/22/2008 at 1:38 PM, "Tim Heywood" <tim at nds8.co.uk> wrote:
> It should have now been pulled ...  
> 
> NOTE to All:   Do not instal SLES10 SP2 onto an OES2 server...  Only when 
> OES2 SP1 is released (Q4 2008) will SLES10 SP2 and OES2  work together (and 
> be supported)
> 
> Tim

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell 
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From smf34 at cam.ac.uk  Fri May 23 09:40:30 2008
From: smf34 at cam.ac.uk (Simon Flood)
Date: Fri, 23 May 2008 09:40:30 +0100
Subject: SLES 10 SP2 with OES2?
In-Reply-To: <4835B954.A227.00C4.0@fxcm.com>
References: <48358C01.E4C1.0068.0@oconee.k12.ga.us>	<4835D9C4020000BB0008ED13@mail2.nds8.com>	<48357B93.4770.0087.0@salud.unm.edu>	<4835E301020000BB0008ED2F@mail2.nds8.com>	<4835846B.4770.0087.0@salud.unm.edu>
	<4835B954.A227.00C4.0@fxcm.com>
Message-ID: <483682FE.5020303@cam.ac.uk>

On 22/05/2008 23:20, Michael Gorn wrote:

> Do you know why it was pulled? What exactly is supposed to break horribly?

Short answer = OES2!

Simon

From cmangiarelli at gmail.com  Fri May 23 14:48:38 2008
From: cmangiarelli at gmail.com (Christopher Mangiarelli)
Date: Fri, 23 May 2008 09:48:38 -0400
Subject: Apache on NetWare - Start Page
In-Reply-To: <f47566ff0805151017q5176b2fpc9f35803d5cb0c@mail.gmail.com>
References: <01MURJT79ZCU8Y6P3X@cc.usu.edu>
	<f47566ff0805151017q5176b2fpc9f35803d5cb0c@mail.gmail.com>
Message-ID: <f47566ff0805230648w8029b77yaffb3042bf62a65d@mail.gmail.com>

Just to update everybody on how to do this.  I recently had an open incident
with NTS for other web issues and asked about this.  The solution was as
follows:

1. Move or Delete all index*.* files in SYS:\APACHE2\htdocs
2. Place customized index.html in SYS:\APACHE2\htdocs
3. Place customized index.html in SYS:\adminsrv\webapps\welcome

I don't know why we had to touch the htdocs folder as the index.html file
that was there just redirected to /welcome with a meta refresh tag, but it
didn't work otherwise when you connected over port 80.

On Thu, May 15, 2008 at 1:17 PM, Christopher Mangiarelli <
cmangiarelli at gmail.com> wrote:

> Thanks for the response Joe.  I put everything back to normal and tried
> your solution below but still have a problem.
>
> The default OES welcome page is still showing at:
> http://server.domain.org/welcome/index.html
>
> My new customized page is showing at:
> https://server.domain.org:2200/welcome/index.html
>
> Any idea?


-- 
Christopher Mangiarelli
cmangiarelli at gmail.com

From PHasenjager at kcumb.edu  Fri May 23 18:57:43 2008
From: PHasenjager at kcumb.edu (Patrick Hasenjager)
Date: Fri, 23 May 2008 12:57:43 -0500
Subject: iPrint and User Authentication
Message-ID: <4836BF46.6E24.0005.0@kcumb.edu>

We have recently started implementing iPrint.  I am running it on an OES2/Linux server with secured printers.
 
Most of the users have no problems with authenticating to iPrint and it does this via passthrough authentication when connecting to the network.  I have a couple users, however, who routinely get "Printer Authentication Failed" messages.  Other users can connect successfully to iPrint from these computers, so I know it is not the computer.
 
I have checked that the UniqueID attribute is set on the accounts.  Any suggestions?
 
Thanks in advance,
Pat.
 
 
Patrick A. Hasenjager
Network/Windows/ZENworks System Administrator
Kansas City University of Medicine and Biosciences
 
phone 816.283.2478
fax 816.283.0692
email phasenjager at kcumb.edu

From jbarnes at ccsuvt.org  Fri May 23 19:24:10 2008
From: jbarnes at ccsuvt.org (Jack Barnes)
Date: Fri, 23 May 2008 14:24:10 -0400
Subject: Suse 10SP1 install
Message-ID: <4836D373.FA88.0022.0@ccsuvt.org>

I am trying to install SUSE 10SP1 on an H/P DL180G5 and having problems with the GRUB boot configuration.  It is a raid 5 SCSI configuration and the disk drive part seems to work fine but Grub gets different errors.  Anyone have a working version of this that could share the GRUB tiles with me or that knows how to solve the boot problems.

Thanks,



Jack W. Barnes, CNE
Network Administrator
CCSU
jbarnes at ccsuvt.org
Office 802-857-7000
Ext. 1039
Cell 802-318-0976
Fax 802-879-8197




CONFIDENTIAL COMMUNICATION. THIS MESSAGE MAY NOT BE FORWARDED.

The information contained in this communication, including any 
attachments, is confidential,constitutes privileged 
communication, and is intended only for the use of the 
addressee. This message may not be forwarded without prior
consent from the sender. The information in this e-mail is
also protected by the rights afforded under Family Educational
Rights and Privacy Act (FERPA) and school district policies.
Any unauthorized use, forwarding, distribution,disclosure,
printing or copying is strictly prohibited and may be unlawful.
If you have received this communication in error, please notify
us immediately at 802-879-8192 or return e-mail,and delete any
copies of this message immediately.  Any inadvertent disclosure 
of this communication shall not compromise the confidential
nature of the communication.



From James.Taylor at eastcobbgroup.com  Fri May 23 19:42:19 2008
From: James.Taylor at eastcobbgroup.com (James Taylor)
Date: Fri, 23 May 2008 14:42:19 -0400
Subject: Suse 10SP1 install
In-Reply-To: <4836D674.9252.0075.1@eastcobbgroup.com>
References: <4836D674.9252.0075.1@eastcobbgroup.com>
Message-ID: <4836D7CB0200007500029CA6@inet.eastcobbgroup.com>

What kind of errors?

There was an issue on SLES10 prior to sp1 where it would write the wrong boot config for HP raid devices, and the system failed to find the boot device on restart.

You could work around it by booting with the install disk and selecting the boot from hard drive option.  One you applied the updates, you could recover.

I haven't seen this with SP1, though.

You don't, by any chance, have a USB device connected to the server, do you?
This will be interpreted by the BIOS to be the first drive, and your system will not be able to find the correct boot device.

I have spent way too much time troubleshooting GRUB when all I had to do was unplug the USB drive I had left on the server.

-jt
  
 

James Taylor
The East Cobb Group, Inc.
678-697-9420
james.taylor at eastcobbgroup.com
http://www.eastcobbgroup.com







>>> "Jack Barnes" <jbarnes at ccsuvt.org> 5/23/2008 02:24 PM >>> 
I am trying to install SUSE 10SP1 on an H/P DL180G5 and having problems with the GRUB boot configuration.  It is a raid 5 SCSI configuration and the disk drive part seems to work fine but Grub gets different errors.  Anyone have a working version of this that could share the GRUB tiles with me or that knows how to solve the boot problems.

Thanks,



Jack W. Barnes, CNE
Network Administrator
CCSU
jbarnes at ccsuvt.org
Office 802-857-7000
Ext. 1039
Cell 802-318-0976
Fax 802-879-8197




CONFIDENTIAL COMMUNICATION. THIS MESSAGE MAY NOT BE FORWARDED.

The information contained in this communication, including any 
attachments, is confidential,constitutes privileged 
communication, and is intended only for the use of the 
addressee. This message may not be forwarded without prior
consent from the sender. The information in this e-mail is
also protected by the rights afforded under Family Educational
Rights and Privacy Act (FERPA) and school district policies.
Any unauthorized use, forwarding, distribution,disclosure,
printing or copying is strictly prohibited and may be unlawful.
If you have received this communication in error, please notify
us immediately at 802-879-8192 or return e-mail,and delete any
copies of this message immediately.  Any inadvertent disclosure 
of this communication shall not compromise the confidential
nature of the communication.


_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk
http://netlab1.usu.edu/mailman/listinfo/novell



From wmhblair at comcast.net  Fri May 23 22:49:30 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Fri, 23 May 2008 16:49:30 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <4835AB90.9F9C.006D.0@roillc.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMEAENHHPAB.wmhblair@comcast.net>

Robert W. Obrinsky wrote:

>  is "Reply to Get Nearest Server" set to 'ON'?

Yes.

I have reproduced this problem with two entirely different
printers and two entirely different hardware print servers.
For example, an HP LJ 5N with an HP JetDirect J2550B. Each
indicates it is (for example) "UNABLE TO SENSE NET NUMBER".
As soon as I start the HP INPW or LOGIN to a client PC (even
one not on the same subnet), all of these now-attached test
printers suddenly fire up and start pulling jobs from their
queues, simultaneously. I feel like an orchestra conductor.

I tested each one individually attached to the server via 
a loopback cable, so no switch or hub was involved. Same
problem. With four printers hooked up plus my test server
it gets kinda hot here in the office and weird to hear all
four start up simultaneously.

Clearly, this has nothing to do with what software or human
configured the server and tree for all the required objects
to make these thing work. I manually configured one printer
and it just started working. It still worked after being 
power cycled. But of course it was in the same torpor as 
the others when all of them were powered off and then the
server downed and restarted. 

It makes no difference if the printers are turned back on
before or after the server is restarted (and, again, there
is no difference whether the [necessary] switch is turned
off and back on or not after the server is downed and the
printers turned off.

The ONLY thing that will cause this to happen is simply 
restarting the server (with the printers powered off so
that they have forgotten their subnet IPX network number).

> Can you put a workstation with wireshark on it and see 
> what happens when the server boots? 

I can and I will (but probably next week). 

What should I be looking for?  To make sure I understand 
correctly, below is a diagram of how I will configure the 
server and printer(s).

For my tests, "Printer 2"  is normally in the same place as
"Windows Client PC 1" is in the diagram. But I have also put
a switch in-between the two to connect "Printer 2" to the NW 
Server.

In production that same second switch connects to LAN card 1 
with PCs attached to it, which are on a completely different 
network entirely, including a completely different router and 
link to the outside world/internet. No traffic is routed thru
the NW server. It's just attached via separate LAN adapters 
to two completely different private internal behind-firewall 
networks. For my test configuration, I have eliminated this
second network and all TCP/IP traffic that would flow on it, 
which has not affected the results.

I would configure Wireshark to look at the traffic on LAN
card B (hence LAN card 1 in the server).

  +-----------+                                +-----------+
  |           |                                |           |
  |  NetWare  |                                | Windows   |
  |  4.11 SP9 |                                |  client   |
  |  Server   |                                |   PC 1    |
  |           |                                |           |
  |    +------+                                +-------+   |
  |    | LAN  |      Crossover CAT5 cable      | LAN   |   |
  |    | card *---------------X----------------* card  |   |
  |    | 1    |                                | B     |   |
  |    +------+                                +-------+   |
  |           |                                |           |
  |    +------+                                | Wireshark |
  |    | LAN  |                                |           |
  |    | card *------------\                   +-------+   |
  |    | 2    |            |                   | LAN   |   |
  |    +------+            |            /------* card  |   |
  |           |            |            |      | A     |   |
  |           |            |            |      +-------+   |
  |           |            |            |      |           |
  |           |            |            |      +-----------+
  |           |            |            |
  |           |            |            |
  |           |            |            |
  +-----------+            |            |
                           |            |
                           |            |
                           |            |
                 +---------*------------*--------+
                 |                               |
                 |          Switch 1             |
                 |                               |
                 +--*-----------*------------*---+
                    |           |            |
                    |           |            |
  +-------------+   |           |            |
  |             |   |           |            |
  |   Printer 1 |   |           |            |
  |             |   |     +-----*----+    +--*-------+
  |   +---------+   |     |          |    +  Router  *---\
  |   |JetDirect|   |     | Windows  |    +----------+   |
  |   |Card     *---/     |  Client  |                   |
  |   +---------+         |   PC 2   |                   |
  |             |         | (to run  |                   |
  +-------------+         | HP INPW) |            =======*====
                          +----------+            = Internet =
                                                  ============

Is that what you were suggesting?

--
WB

From toomas.aas at raad.tartu.ee  Mon May 26 14:35:23 2008
From: toomas.aas at raad.tartu.ee (Toomas Aas)
Date: Mon, 26 May 2008 16:35:23 +0300
Subject: Authentication to eDirectory and ActiveDirectory
Message-ID: <483ABC9B.2090109@raad.tartu.ee>

Hello!

We are a traditional Novell/eDir shop, using NW65SP7 on servers and Novell 
Client 4.91 on workstations. But now an application is looming on the 
horizon that requires that users be authenticated via ActiveDirectory. This 
application will be used by ca 50 of our 350 users.

The application servers, together with the AD infrastructure, will be 
across WAN, at service provider's server room.

Is it possible to organize things in such a way that our users still 
authenticate primarily to our own eDirectory and then somehow 
"transparently" get authenticated to the ActiveDirectory?

-- 
Toomas Aas

From ksebolt at franciscan.edu  Mon May 26 14:36:27 2008
From: ksebolt at franciscan.edu (Kevin Sebolt)
Date: Mon, 26 May 2008 09:36:27 -0400
Subject: Authentication to eDirectory and ActiveDirectory (Out of
	the office)
Message-ID: <s83a84ac.098@gw2004.franciscan.edu>


I will be out of the office the week of May 25.  I will respond to your
e-mail Monday, June 2.  Thank you.

From Robrinsky at roillc.com  Mon May 26 15:29:50 2008
From: Robrinsky at roillc.com (Robert Obrinsky)
Date: Mon, 26 May 2008 10:29:50 -0400
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <HDEMIMHLCNKIEDEHAEMEAENHHPAB.wmhblair@comcast.net>
References: <4835AB90.9F9C.006D.0@roillc.com>
	<HDEMIMHLCNKIEDEHAEMEAENHHPAB.wmhblair@comcast.net>
Message-ID: <483A912C.9F9C.006D.0@roillc.com>

William,
 
Based on the diagram, I would be interested in three things at the start. First, are the IPX broadcast packets making it past the switch? If for some reason the switch is blocking them, then that could be the source of the problem. The other thing I would look for is what type of IPX packets are being broadcast? Third, what type of IPX packets are coming from the PC2 (INPW) system?
 
So you will need to run wireshark at two different points on your test network. Netware, for whatever reason, allows you to bind IPX to 802.2, 802.3, ethernet_II, and ethernet_snap frames. Wireshark will quickly identify the frame type for you. Just be aware that in the decodes, they call the 802.3 frame "IEEE Ethernet RAW", and the 802.2 packet is called "IEEE 802.3 Ethernet" so it will be very easy to differentiate them without having to know the packet structure.
 
Robert W. Obrinsky
President
Robert Obrinsky Industries, LLC
1824 Newfield Avenue
Stamford CT 06903
203.968.9617 (Office)
203.273.7012 (Mobile)


>>> "William H. Blair" <wmhblair at comcast.net> 5/23/2008 5:49 PM >>>
Robert W. Obrinsky wrote:

>  is "Reply to Get Nearest Server" set to 'ON'?

Yes.

I have reproduced this problem with two entirely different
printers and two entirely different hardware print servers.
For example, an HP LJ 5N with an HP JetDirect J2550B. Each
indicates it is (for example) "UNABLE TO SENSE NET NUMBER".
As soon as I start the HP INPW or LOGIN to a client PC (even
one not on the same subnet), all of these now-attached test
printers suddenly fire up and start pulling jobs from their
queues, simultaneously. I feel like an orchestra conductor.

I tested each one individually attached to the server via 
a loopback cable, so no switch or hub was involved. Same
problem. With four printers hooked up plus my test server
it gets kinda hot here in the office and weird to hear all
four start up simultaneously.

Clearly, this has nothing to do with what software or human
configured the server and tree for all the required objects
to make these thing work. I manually configured one printer
and it just started working. It still worked after being 
power cycled. But of course it was in the same torpor as 
the others when all of them were powered off and then the
server downed and restarted. 

It makes no difference if the printers are turned back on
before or after the server is restarted (and, again, there
is no difference whether the [necessary] switch is turned
off and back on or not after the server is downed and the
printers turned off.

The ONLY thing that will cause this to happen is simply 
restarting the server (with the printers powered off so
that they have forgotten their subnet IPX network number).

> Can you put a workstation with wireshark on it and see 
> what happens when the server boots? 

I can and I will (but probably next week). 

What should I be looking for?  To make sure I understand 
correctly, below is a diagram of how I will configure the 
server and printer(s).

For my tests, "Printer 2"  is normally in the same place as
"Windows Client PC 1" is in the diagram. But I have also put
a switch in-between the two to connect "Printer 2" to the NW 
Server.

In production that same second switch connects to LAN card 1 
with PCs attached to it, which are on a completely different 
network entirely, including a completely different router and 
link to the outside world/internet. No traffic is routed thru
the NW server. It's just attached via separate LAN adapters 
to two completely different private internal behind-firewall 
networks. For my test configuration, I have eliminated this
second network and all TCP/IP traffic that would flow on it, 
which has not affected the results.

I would configure Wireshark to look at the traffic on LAN
card B (hence LAN card 1 in the server).

  +-----------+                                +-----------+
  |           |                                |           |
  |  NetWare  |                                | Windows   |
  |  4.11 SP9 |                                |  client   |
  |  Server   |                                |   PC 1    |
  |           |                                |           |
  |    +------+                                +-------+   |
  |    | LAN  |      Crossover CAT5 cable      | LAN   |   |
  |    | card *---------------X----------------* card  |   |
  |    | 1    |                                | B     |   |
  |    +------+                                +-------+   |
  |           |                                |           |
  |    +------+                                | Wireshark |
  |    | LAN  |                                |           |
  |    | card *------------\                   +-------+   |
  |    | 2    |            |                   | LAN   |   |
  |    +------+            |            /------* card  |   |
  |           |            |            |      | A     |   |
  |           |            |            |      +-------+   |
  |           |            |            |      |           |
  |           |            |            |      +-----------+
  |           |            |            |
  |           |            |            |
  |           |            |            |
  +-----------+            |            |
                           |            |
                           |            |
                           |            |
                 +---------*------------*--------+
                 |                               |
                 |          Switch 1             |
                 |                               |
                 +--*-----------*------------*---+
                    |           |            |
                    |           |            |
  +-------------+   |           |            |
  |             |   |           |            |
  |   Printer 1 |   |           |            |
  |             |   |     +-----*----+    +--*-------+
  |   +---------+   |     |          |    +  Router  *---\
  |   |JetDirect|   |     | Windows  |    +----------+   |
  |   |Card     *---/     |  Client  |                   |
  |   +---------+         |   PC 2   |                   |
  |             |         | (to run  |                   |
  +-------------+         | HP INPW) |            =======*====
                          +----------+            = Internet =
                                                  ============

Is that what you were suggesting?

--
WB
_______________________________________________
Novell mailing list
Novell at netlab1.oucs.ox.ac.uk 
http://netlab1.usu.edu/mailman/listinfo/novell

From joea at j4computers.com  Mon May 26 15:56:21 2008
From: joea at j4computers.com (joea at j4computers.com)
Date: Mon, 26 May 2008 10:56:21 -0400
Subject: NW 6.5 BackupExec 9.2 hangs server
Message-ID: <483A9752.917D.0085.0@j4computers.com>

Have a NW 6.5 sp5 server that had been running backps flawlessly.  One day, the server hung.  I mean, it would not respond to pings. The server console seemed "up", but any attempt to load a module, or do anything at all, simply hung the console.  Could get into debugger to quit.

The Tape backup seems to be at fault.  Have changed the drive, scsi controller and cables.  Have updated to latest BE 9.2.

The tape log is incomplete,  last entry being "backup set ended at" blah.  Yet, I happened to be watching the job, remotely, and know it progressed to the next job and was ripping right along.  Sometime later, it must have hung, before that job completed.

The server is a Dell 2800, RAID 5 and RAID 0, a LTO2 tape.

Two drives were added recently, for the RAID 0.  The tape problem was not evident before this, but there was no syncronicity with the install, as far as we recall.

Suggestions, before we have to call symantec?


From toomas.aas at raad.tartu.ee  Mon May 26 19:04:10 2008
From: toomas.aas at raad.tartu.ee (Toomas Aas)
Date: Mon, 26 May 2008 21:04:10 +0300
Subject: FC SAN failover with HP/QLogic adapters
Message-ID: <483AFB9A.5080308@raad.tartu.ee>

Hello

I have a NW65SP7 server which is attached to MSA1500 storage system in 
multi-path configuration. The server has one FCA2214DC HBA, each port is 
attached to separate SAN switch, and each SAN switch is connected to one of 
the FC ports on the MSA1500.

The DOS partition and SYS volume live on internal disks attached to IBM 
ServeRAID 8k, the data volumes are on SAN.

I performed a simple failover test by pulling the FC cable which was on the 
active path between the HBA port and the SAN switch. The failover did not 
occur, instead the pools were just deactivated due to I/O error.

I have not configured MPIO, but am hoping to use the driver failover of the 
QL2X00 driver. This is the contents of startup.ncf:

SET MULTI-PATH SUPPORT=ON
LOAD MPS14.PSM
LOAD IDECD.CDM
LOAD SCSIHD.CDM
LOAD CPQSHD.CDM
LOAD IDEATA.HAM SLOT=10023
LOAD AACRAID.HAM SLOT=10026
LOAD QL2X00.HAM SLOT=201 /LUNS
LOAD QL2X00.HAM SLOT=202 /LUNS

I have verified that SSP is configured correctly, both adapter ports have 
access to the Netware LUN.

What am I missing?

BTW, I have two SLES10 servers attached to the same MSA1500, using 
identical FCA2214DC adapters, and configured with QLogic driver failover. 
They survive the above described failover test with no problems.

-- 
Toomas Aas

From tim at nds8.co.uk  Mon May 26 19:25:54 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Mon, 26 May 2008 19:25:54 +0100
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <483ABC9B.2090109@raad.tartu.ee>
References: <483ABC9B.2090109@raad.tartu.ee>
Message-ID: <483B0EC2020000BB0008F257@mail2.nds8.com>

If you were not in a hurry, then OES2 SP1 has a new feature (DSFW - Domain Services for Windows) - in short it makes a view of eDirectory that looks like Active Directory - no sync, just reuse the same object, universal password and Kerberos authentication (well a little more than that but...)


There is an interesting TID and some docs in the developer forums, but details (that I can give without breaking my NDA) are slim - suffice to say that I think it is the best addition to eDir ever...

T


>>> On 26 May 2008 at 14:35, Toomas Aas <toomas.aas at raad.tartu.ee> wrote:
> Hello!
> 
> We are a traditional Novell/eDir shop, using NW65SP7 on servers and Novell 
> Client 4.91 on workstations. But now an application is looming on the 
> horizon that requires that users be authenticated via ActiveDirectory. This 
> application will be used by ca 50 of our 350 users.
> 
> The application servers, together with the AD infrastructure, will be 
> across WAN, at service provider's server room.
> 
> Is it possible to organize things in such a way that our users still 
> authenticate primarily to our own eDirectory and then somehow 
> "transparently" get authenticated to the ActiveDirectory?

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From petervl at gmail.com  Mon May 26 20:17:37 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 26 May 2008 14:17:37 -0500
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <483ABC9B.2090109@raad.tartu.ee>
References: <483ABC9B.2090109@raad.tartu.ee>
Message-ID: <68b791330805261217q7422e60fp6c841ff6fc71ac6c@mail.gmail.com>

On Mon, May 26, 2008 at 8:35 AM, Toomas Aas <toomas.aas at raad.tartu.ee> wrote:
>
> Is it possible to organize things in such a way that our users still
> authenticate primarily to our own eDirectory and then somehow
> "transparently" get authenticated to the ActiveDirectory?

per usual the answer is "it depends". What are the application
requirements, exactly? Do you user workstations have to be AD Domain
members? If so, then I would be concerned about this being a hosted
and remote solution -- issues of bandwidth and security. Essentially
you are asking the hosting company to hold all the keys to your
kingdom.

If your workstations do not need to be domain members (and they should
not -- even with Oultook and Exchange, you can auth to exchange from
outlook on a machine that is NOT a member of the domain) then it is
simply a matter of logging into the application. As far as having the
login be "transparent" then that is often what happens, depending on a
couple factors.

If the NW client is the primary client, and if your username and
password in windows match your netware username/password, then the
password MAY just pass-through. For things like accessing windows
shares, this usually works pretty well. Whether it will work in the
case of your application, I can't say.

The biggest challenge in a situation like this is keeping the
username/passwords in sync. If it is really only a sub-set of users,
then I would think of this/treat this as though it is just another
application that requires a username/password.

If it becomes more and more of your users, then you may want to look
into a directory sync product --- IDM 3.6 is really the best in the
industry, and if it is just an AD to Edir connection it can be really
pretty simple to setup. But it would require that you have admin
access to the AD domain -- if this is a hosted solution, that may or
may not be an issue. It would also require full network-like access to
the AD domain (so if it is across a WAN link, you would probably need
an always-on VPN connection).

Hope this helps!

Peter


-- 
"There is a grandeur in this view of life, a life in which endless
forms most beautiful and most wonderful have been, and are being,
evolved."

Charles Darwin
The Origin of Species


http://xkcd.com/167/

www.the-brights.net

From petervl at gmail.com  Mon May 26 20:23:48 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 26 May 2008 14:23:48 -0500
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <483B0EC2020000BB0008F257@mail2.nds8.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
Message-ID: <68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>

On Mon, May 26, 2008 at 1:25 PM, Tim Heywood <tim at nds8.co.uk> wrote:
> If you were not in a hurry, then OES2 SP1 has a new feature (DSFW - Domain Services for Windows) - in short it makes a view of eDirectory that looks like Active Directory - no sync, just reuse the same object, universal password and Kerberos authentication (well a little more than that but...)
>
>
> There is an interesting TID and some docs in the developer forums, but details (that I can give without breaking my NDA) are slim - suffice to say that I think it is the best addition to eDir ever...


I still can't believe that this is not in production. Amazes me -- I
had the beta code before even OES 2 (I forget -- in the OES1 SP2 cycle
if I remember) was released, and it was a problem to say the least.
Seems as though it would be a higher priority than it is.

At any rate, I wonder if Novell is going to produce any material to
help us understand when we would use DSFW instead of an edir/ad
connector using IDM? In some ways DSW seems like it will eat away at
the market for IDM, but I guess that most IDM users that connect to
only a single AD probably are using the "starter pack" anyway, so it
may not represent much lost income.

P



-- 
"There is a grandeur in this view of life, a life in which endless
forms most beautiful and most wonderful have been, and are being,
evolved."

Charles Darwin
The Origin of Species


http://xkcd.com/167/

www.the-brights.net

From wmhblair at comcast.net  Mon May 26 20:39:31 2008
From: wmhblair at comcast.net (William H. Blair)
Date: Mon, 26 May 2008 14:39:31 -0500
Subject: Need help to get NW 4 IPX printer going again
In-Reply-To: <483A912C.9F9C.006D.0@roillc.com>
Message-ID: <HDEMIMHLCNKIEDEHAEMECEFHIAAB.wmhblair@comcast.net>

> Based on the diagram, I would be interested in three
> things at the start.
> First, are the IPX broadcast packets making it past
> the switch?

Understood. I'll catch them directly out of the Server's
LAN adapter (connected via a Hub, not a Switch), as well
as on the other side of a Switch. See the new diagram,
below.

> If for some reason the switch is blocking them, then
> that could be the source of the problem.

Yes, but remember that "normally" (during testing) a
printer was in place of "PC 1" (meaning that it was
directly connected to "LAN card 1" on the NW server
via a crossover cable, SO THERE WAS NO SWITCH TO BLOCK
ANYTHING. The problem still occurred in that (testing)
configuration (regardless of which server LAN card
the printer is attached to and regardless of which
printer or hardware print server is being used). The
point of connecting the PC running Wireshark directly
to the NW server, without an intervening switch, was to
prove that the proper IPX RIP packets are being sent
by the NW server and then sent out by the LAN adapter
onto the wire.

But the new configuration, below, using hubs, should
show all of that, regardless.

> The other thing I would look for is what type of IPX
> packets are being broadcast?

Understood. Will see that on both Server LAN adapters,
both directly (thru a Hub) and through a port on the
Switch (thru a Hub).

> Third, what type of IPX packets are coming from the
> PC2 (INPW) system?

Understood. Will se that directly (thru a Hub).

> So you will need to run wireshark at two different
> points on your test network.

To get all the different types of packets I think you
want I suggest that I instead use this configuration:

================================================================

  There are two PCs running Wireshark. One "directly"
  connected to a LAN adapter on the Server (via a Hub)
  to which is connected an IPX printer, and another one
  connected through a Switch via a second Hub to which
  is connected another IPX printer and the PC which is
  running HP INPW.

  The two Wireshark-running PC LAN adapters (which speak
  IPX) should see everything IPX-related on both subnets,
  one subnet directly connected to a Server LAN adapter
  via only a Hub, and the other subnet connected to one
  of the ports on a Switch which connects to the other
  Server LAN adapter.

  NOTE: Most of the equipment here has been renamed or
  renumbered from the previous diagram that I provided.

  +-------------+
  |             |
  |   Printer 2 |                           /=======*=======\
  |             |                           | The  Internet |
  |   +---------+                           \=======*=======/
  |   |JetDirect|                                   |
  |   |Card 2   *------------\                  ISP | # 2
  |   |(IPX)    |            |                      |
  |   +---------+            |               +------*-----+
  |             |            |               + Router (FW)+
  +-------------+            |               +------*-----+
                             |                      |
                             |                      |
                    +--------*--+   +---------------*------+
                    |           |   |                      |
                    |   Hub 2   |   |  Switch 2            |
                    |           |   |                      |
                    +--*-----*--+   +---*------------------+
                       |     |          |
                       |     |          |
  +-----------+        |     |          |      +-----------+
  |           |        |     |          |      |           |
  |  NetWare  |        |     |          |      | Windows   |
  |  4.11 SP9 |        |     |          |      |  client   |
  |  Server   |        |     |          |      |   PC 2    |
  |           |        |     |          |      |           |
  |    +------+        |     |          |      +-------+   |
  |    | LAN  |        |     |          |      | LAN   |   |
  |    | card *--------/     |          \------* card  |   |
  |    | 2    |              |                 | A     |   |
  |    +------+              |                 | (TCP) |   |
  |           |              |                 +-------+   |
  |           |              |                 |           |
  |    +------+              |                 | Wireshark |
  |    | LAN  |              |                 |           |
  |    | card *--------\     |                 +-------+   |
  |    | 1    |        |     |                 | LAN   |   |
  |    +------+        |     \-----------------* card  |   |
  |           |        |                       | B     |   |
  |           |        |                       | (IPX) |   |
  +-----------+        |                       +-------+   |
                       |                       |           |
                       |                       +-----------+
                       |
                 +-----*------------------+
                 |                        |
 /---------------*                        *---------\
 |               |       Switch 1         |         |
 | /-------------*                        |     +---*--------+
 | |             |                        |     + Router (FW)+
 | |             +--*---------------------+     +------*-----+
 | |                |                                  |
 | |                |                              ISP | # 1
 | |                |                                  |
 | |  +-------------*--+                       /=======*=======\
 | |  |                |                       | The  Internet |
 | |  |    Hub 1       *-------------------\   \===============/
 | |  |                *-----\              \
 | |  |                |     |               \
 | |  +-*--------------+     |                \
 | |    |                    |  +-----------+  |  +-----------+
 | |    |                    |  |           |  |  |           |
 | |    |  +-------------+   |  |  Windows  |  |  |  Windows  |
 | |    |  |             |   |  |   Client  |  |  |   Client  |
 | |    |  |   Printer 1 |   |  |    PC 1   |  |  |    PC 3   |
 | |    |  |             |   |  |           |  |  |           |
 | |    |  +-----------+ |   |  +-------+   |  |  +--------+  |
 | |    |  | JetDirect | |   |  | LAN   |   |  |  | LAN    |  |
 | |    \--* Card 1    | |   \--* card  |   |  |  | card   |  |
 | |       | (IPX)     | |      | Y     |   |  \--* U      |  |
 | |       +-----------+ |      | (IPX) |   |     | (IPX)  |  |
 | |       |             |      +-------+   |     +--------+  |
 | |       +-------------+      |           |     |           |
 | |                            | Wireshark |     |           |
 | |                            |           |     |           |
 | |                            +--------+  |     | HP INPW   |
 | |                            | LAN    |  |     | Utility   |
 | |                            | card   |  |     |           |
 | \----------------------------* X      |  |     |           |
 |                              |(TCP)   |  |     |           |
 |                              +--------+  |     |           |
 |                              |           |     +--------+  |
 |                              +-----------+     | LAN    |  |
 |                                                | card   |  |
 \------------------------------------------------* T      |  |
                                                  | (TCP)  |  |
                                                  +--------+  |
                                                  |           |
                                                  +-----------+

================================================================

--
WB


From petervl at gmail.com  Mon May 26 20:41:52 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 26 May 2008 14:41:52 -0500
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
Message-ID: <68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>

On Mon, May 26, 2008 at 2:23 PM, Peter Van Lone <petervl at gmail.com> wrote:
> At any rate, I wonder if Novell is going to produce any material to
> help us understand when we would use DSFW instead of an edir/ad
> connector using IDM? In some ways DSW seems like it will eat away at
> the market for IDM, but I guess that most IDM users that connect to
> only a single AD probably are using the "starter pack" anyway, so it
> may not represent much lost income.

In fact, it seems to me that DSFW encourges having eDir be a secondary
directory to AD ... it enables eDir to "look like" AD to workstations,
and allows users to access files on SLES via CIFS with no NW client
and not using NCP.

So, at that point -- why bother with eDir at all? It is just an
inconvenience -- an extra directory that may (or may not) be required
by applications running on SLES, but at any rate it is not the primary
directory service in the network ...


Peter

-- 
"There is a grandeur in this view of life, a life in which endless
forms most beautiful and most wonderful have been, and are being,
evolved."

Charles Darwin
The Origin of Species


http://xkcd.com/167/

www.the-brights.net

From tim at nds8.co.uk  Mon May 26 21:03:48 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Mon, 26 May 2008 21:03:48 +0100
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
Message-ID: <483B25B4020000BB0008F26C@mail2.nds8.com>

The product that was in Beta in June last year, and I have recently got my hands upon are only vaguely related to each other in that they do a very similar task - but the execution is far more developed and robust.

I agree that DSFW will eat away at the simple IDM, but it also forms the basis of a more mature IDM solution - more details will come out very soon - well I should say that info will be out before the SP1 that launches it....

T

>>> On 26 May 2008 at 20:23, "Peter Van Lone" <petervl at gmail.com> wrote:
> 
> I still can't believe that this is not in production. Amazes me -- I
> had the beta code before even OES 2 (I forget -- in the OES1 SP2 cycle
> if I remember) was released, and it was a problem to say the least.
> Seems as though it would be a higher priority than it is.
> 
> At any rate, I wonder if Novell is going to produce any material to
> help us understand when we would use DSFW instead of an edir/ad
> connector using IDM? In some ways DSW seems like it will eat away at
> the market for IDM, but I guess that most IDM users that connect to
> only a single AD probably are using the "starter pack" anyway, so it
> may not represent much lost income.
> 
> P
> 

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From alandpearson at yahoo.com  Mon May 26 21:04:07 2008
From: alandpearson at yahoo.com (Alan Pearson)
Date: Mon, 26 May 2008 21:04:07 +0100
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
Message-ID: <98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>

Whoa there boys, DSFW is EXACTLY what we want.

It means we can run an AD style domain, running from edir.
Finally single source of auth for everything
Currently we run OS/X server to do our Win domain, (this was pre  
discovering edirectory) and now I want a single sign in system for  
Windows, Linux, Groupwise et all.
Edirectory rocks.

Now I can have a AD domain without AD. Just what the doctor ordered.  
This is a GOOD thing.


---
AlanP


On 26 May 2008, at 20:41, Peter Van Lone wrote:

> On Mon, May 26, 2008 at 2:23 PM, Peter Van Lone <petervl at gmail.com>  
> wrote:
>> At any rate, I wonder if Novell is going to produce any material to
>> help us understand when we would use DSFW instead of an edir/ad
>> connector using IDM? In some ways DSW seems like it will eat away at
>> the market for IDM, but I guess that most IDM users that connect to
>> only a single AD probably are using the "starter pack" anyway, so it
>> may not represent much lost income.
>
> In fact, it seems to me that DSFW encourges having eDir be a secondary
> directory to AD ... it enables eDir to "look like" AD to workstations,
> and allows users to access files on SLES via CIFS with no NW client
> and not using NCP.
>
> So, at that point -- why bother with eDir at all? It is just an
> inconvenience -- an extra directory that may (or may not) be required
> by applications running on SLES, but at any rate it is not the primary
> directory service in the network ...
>
>
> Peter
>
> -- 
> "There is a grandeur in this view of life, a life in which endless
> forms most beautiful and most wonderful have been, and are being,
> evolved."
>
> Charles Darwin
> The Origin of Species
>
>
> http://xkcd.com/167/
>
> www.the-brights.net
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell



From tim at nds8.co.uk  Mon May 26 21:10:21 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Mon, 26 May 2008 21:10:21 +0100
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
Message-ID: <483B273D020000BB0008F279@mail2.nds8.com>

Other way arround, why bother with AD.

Actually one changes the system altogether - use good AD design and have an AD for the services, federated with an AD for the Users - in this case the users are in Active eDirectory :-)

No Syncing of objects - there is just one.  
If you keep NCP you ave have AD authentication for apps and services in a painless manner
The NCP keeps the granularity without having the SAMBA (Scaling issues - not when compared with W2k3 but ...) you don't "Have" to use CIFS
The ability to add new AD's or merge eDirs into the one system
Flexibility in what and any app to deploy
LDAP in both Hierarchical and flat presentations
C1, iManager and MMC management

The list goes on - I am bowled over by the opportunities

T

>>> On 26 May 2008 at 20:41, "Peter Van Lone" <petervl at gmail.com> wrote:
> In fact, it seems to me that DSFW encourges having eDir be a secondary
> directory to AD ... it enables eDir to "look like" AD to workstations,
> and allows users to access files on SLES via CIFS with no NW client
> and not using NCP.
> 
> So, at that point -- why bother with eDir at all? It is just an
> inconvenience -- an extra directory that may (or may not) be required
> by applications running on SLES, but at any rate it is not the primary
> directory service in the network ...

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From tim at nds8.co.uk  Mon May 26 21:10:48 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Mon, 26 May 2008 21:10:48 +0100
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
	<98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
Message-ID: <483B2758020000BB0008F27C@mail2.nds8.com>

Yep :-)

T

>>> On 26 May 2008 at 21:04, Alan Pearson <alandpearson at yahoo.com> wrote:
> Whoa there boys, DSFW is EXACTLY what we want.
> 
> It means we can run an AD style domain, running from edir.
> Finally single source of auth for everything
> Currently we run OS/X server to do our Win domain, (this was pre  
> discovering edirectory) and now I want a single sign in system for  
> Windows, Linux, Groupwise et all.
> Edirectory rocks.
> 
> Now I can have a AD domain without AD. Just what the doctor ordered.  
> This is a GOOD thing.
> 
> 
> ---
> AlanP
> 
> 
> On 26 May 2008, at 20:41, Peter Van Lone wrote:
> 
>> On Mon, May 26, 2008 at 2:23 PM, Peter Van Lone <petervl at gmail.com>  
>> wrote:
>>> At any rate, I wonder if Novell is going to produce any material to
>>> help us understand when we would use DSFW instead of an edir/ad
>>> connector using IDM? In some ways DSW seems like it will eat away at
>>> the market for IDM, but I guess that most IDM users that connect to
>>> only a single AD probably are using the "starter pack" anyway, so it
>>> may not represent much lost income.
>>
>> In fact, it seems to me that DSFW encourges having eDir be a secondary
>> directory to AD ... it enables eDir to "look like" AD to workstations,
>> and allows users to access files on SLES via CIFS with no NW client
>> and not using NCP.
>>
>> So, at that point -- why bother with eDir at all? It is just an
>> inconvenience -- an extra directory that may (or may not) be required
>> by applications running on SLES, but at any rate it is not the primary
>> directory service in the network ...
>>
>>
>> Peter
>>
>> -- 
>> "There is a grandeur in this view of life, a life in which endless
>> forms most beautiful and most wonderful have been, and are being,
>> evolved."
>>
>> Charles Darwin
>> The Origin of Species
>>
>>
>> http://xkcd.com/167/ 
>>
>> www.the-brights.net 
>> _______________________________________________
>> Novell mailing list
>> Novell at netlab1.oucs.ox.ac.uk 
>> http://netlab1.usu.edu/mailman/listinfo/novell 
> 
> 
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From petervl at gmail.com  Mon May 26 21:12:09 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 26 May 2008 15:12:09 -0500
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
	<98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
Message-ID: <68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com>

On Mon, May 26, 2008 at 3:04 PM, Alan Pearson <alandpearson at yahoo.com> wrote:
> Whoa there boys, DSFW is EXACTLY what we want.
>
> It means we can run an AD style domain, running from edir.
> Finally single source of auth for everything
> Currently we run OS/X server to do our Win domain, (this was pre
> discovering edirectory) and now I want a single sign in system for
> Windows, Linux, Groupwise et all.
> Edirectory rocks.
>
> Now I can have a AD domain without AD. Just what the doctor ordered.
> This is a GOOD thing.

be careful ... your enthusiasm may outstrip the actual abilities of
the solution. First of all, "single sign on" means specific things ...
secondly, DSFW will REQUIRE an AD domain. It simply allows an eDir
server to join a domain and provide access to native SLES resources to
a native MS client --- there are some advantages, but I am not sure it
is exactly what you are imagining

P

From petervl at gmail.com  Mon May 26 21:17:27 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 26 May 2008 15:17:27 -0500
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <483B273D020000BB0008F279@mail2.nds8.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
	<483B273D020000BB0008F279@mail2.nds8.com>
Message-ID: <68b791330805261317h79bf7271s9cf20ee6994e6c6f@mail.gmail.com>

On Mon, May 26, 2008 at 3:10 PM, Tim Heywood <tim at nds8.co.uk> wrote:
> Other way arround, why bother with AD.
>
> Actually one changes the system altogether - use good AD design and have an AD for the services, federated with an AD for the Users - in this case the users are in Active eDirectory :-)
>
> No Syncing of objects - there is just one.
> If you keep NCP you ave have AD authentication for apps and services in a painless manner
> The NCP keeps the granularity without having the SAMBA (Scaling issues - not when compared with W2k3 but ...) you don't "Have" to use CIFS
> The ability to add new AD's or merge eDirs into the one system
> Flexibility in what and any app to deploy
> LDAP in both Hierarchical and flat presentations
> C1, iManager and MMC management
>
> The list goes on - I am bowled over by the opportunities

color me skeptical

I can only hope that there are opportunities as you suggest -- but it
seems to me that the "easiest" answer for most of this is: just use AD
-- the only customers that will be excited about this are customers
that currently have a big investment in eDir, and those numbers are
pretty small.

I hope I'm wrong and there are compelling reasons why a non-netware
shop would look at this. Or, even -- compelling reasons why going this
route is better than "simplifying" to AD only ...

P

From alandpearson at yahoo.com  Mon May 26 21:36:38 2008
From: alandpearson at yahoo.com (Alan Pearson)
Date: Mon, 26 May 2008 21:36:38 +0100
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
	<98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
	<68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com>
Message-ID: <9B19D1A2-4DD2-4C8F-9A71-8240A303603C@yahoo.com>

>
> be careful ... your enthusiasm may outstrip the actual abilities of
> the solution. First of all, "single sign on" means specific things ...

Yes,  I know. We run Kerberos here, shortly scheduled to change to  
novell KRB running of edir (testing at the moment in OES2)
Then we move to NFS4 with KRB auth, all from edirectory.

>
> secondly, DSFW will REQUIRE an AD domain.

When I joined the OES2 webcast some months ago, they confirmed it did  
NOT need a AD domain.
It could BE the AD domain itself.


> It simply allows an eDir
> server to join a domain and provide access to native SLES resources to
> a native MS client --- there are some advantages, but I am not sure it
> is exactly what you are imagining
>
> P
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell



From tim at nds8.co.uk  Mon May 26 21:39:53 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Mon, 26 May 2008 21:39:53 +0100
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
	<98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
	<68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com>
Message-ID: <483B2E29020000BB0008F293@mail2.nds8.com>

No it doesn't - I have an exchange system running within DSFW ...  No Windows based AD anywhere ...   Single login to domain and eDir through the NW client and OL opens up and connects without problems.  Yes, SSO without SSO (to a point I'll concede)

Hate to say it Peter, but you are off track  :-)

Te He....

T

>>> On 26 May 2008 at 21:12, "Peter Van Lone" <petervl at gmail.com> wrote:

> 
> be careful ... your enthusiasm may outstrip the actual abilities of
> the solution. First of all, "single sign on" means specific things ...
> secondly, DSFW will REQUIRE an AD domain. It simply allows an eDir
> server to join a domain and provide access to native SLES resources to
> a native MS client --- there are some advantages, but I am not sure it
> is exactly what you are imagining
> 
> P
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From petervl at gmail.com  Mon May 26 22:04:44 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 26 May 2008 16:04:44 -0500
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <483B2E29020000BB0008F293@mail2.nds8.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
	<98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
	<68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com>
	<483B2E29020000BB0008F293@mail2.nds8.com>
Message-ID: <68b791330805261404y2407f639td1d3d1834afa93a2@mail.gmail.com>

On Mon, May 26, 2008 at 3:39 PM, Tim Heywood <tim at nds8.co.uk> wrote:
> No it doesn't - I have an exchange system running within DSFW ...  No Windows based AD anywhere ...   Single login to domain and eDir through the NW client and OL opens up and connects without problems.  Yes, SSO without SSO (to a point I'll concede)
>
> Hate to say it Peter, but you are off track  :-)
>
> Te He....

well if I am wrong, then I'm wrong.

When is this miracle of programming due out?

Will this be a fully Win2008 compatible AD, so that even a w2k8 server
will be able to join this "domain"?

And -- did you say that you get a single login to eDir and AD using
the NW client? -- I assume that still means doing a pass-through for
the AD authentication? Or, is there some sort of AD shim that is going
to be added to the NW client?

P

From petervl at gmail.com  Mon May 26 22:07:59 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 26 May 2008 16:07:59 -0500
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <68b791330805261404y2407f639td1d3d1834afa93a2@mail.gmail.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
	<98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
	<68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com>
	<483B2E29020000BB0008F293@mail2.nds8.com>
	<68b791330805261404y2407f639td1d3d1834afa93a2@mail.gmail.com>
Message-ID: <68b791330805261407y70515a97rdd607651db56a233@mail.gmail.com>

On Mon, May 26, 2008 at 4:04 PM, Peter Van Lone <petervl at gmail.com> wrote:
>
> Will this be a fully Win2008 compatible AD, so that even a w2k8 server
> will be able to join this "domain"?
>
> And -- did you say that you get a single login to eDir and AD using
> the NW client? -- I assume that still means doing a pass-through for
> the AD authentication? Or, is there some sort of AD shim that is going
> to be added to the NW client?


and, if this is all true --- then perhaps I now (finally) have a
reason to dust off my Novell lab stuff, to try to figure this out? I
have resisted OES linux just because it has seemed like a kludge,
offering little to no benefit other than simply being on the "linux
kernel". I was forstalling what I figured was going to be the eventual
recommendation that my clients just bag it and give in to windows.

Well ... maybe there is yet some actual reason to look into it?

Peter

From tim at nds8.co.uk  Mon May 26 22:09:58 2008
From: tim at nds8.co.uk (Tim Heywood)
Date: Mon, 26 May 2008 22:09:58 +0100
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <68b791330805261404y2407f639td1d3d1834afa93a2@mail.gmail.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
	<98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
	<68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com>
	<483B2E29020000BB0008F293@mail2.nds8.com>
	<68b791330805261404y2407f639td1d3d1834afa93a2@mail.gmail.com>
Message-ID: <483B3536020000BB0008F2A8@mail2.nds8.com>

The workstation is a member of the AeD Domain, so the user (on the workstation) authenticates to the domain - just in AD.  And the NW client does the eDir  side.

The exchange server is 2007 running on 2008

It is part of OES2 SP1 and therefore due when SP1 is due.

HTH

T

>>> On 26 May 2008 at 22:04, "Peter Van Lone" <petervl at gmail.com> wrote:
> On Mon, May 26, 2008 at 3:39 PM, Tim Heywood <tim at nds8.co.uk> wrote:
>> No it doesn't - I have an exchange system running within DSFW ...  No Windows 
> based AD anywhere ...   Single login to domain and eDir through the NW client 
> and OL opens up and connects without problems.  Yes, SSO without SSO (to a 
> point I'll concede)
>>
>> Hate to say it Peter, but you are off track  :-)
>>
>> Te He....
> 
> well if I am wrong, then I'm wrong.
> 
> When is this miracle of programming due out?
> 
> Will this be a fully Win2008 compatible AD, so that even a w2k8 server
> will be able to join this "domain"?
> 
> And -- did you say that you get a single login to eDir and AD using
> the NW client? -- I assume that still means doing a pass-through for
> the AD authentication? Or, is there some sort of AD shim that is going
> to be added to the NW client?
> 
> P
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell

The information contained in this email is intended for the person to 
whom it is addressed and may contain confidential and/or privileged 
information. You should not copy, retain, forward or disclose its 
contents to anyone else, or take any action based upon it, if it is 
not addressed to you personally. If the message is received by anyone other 
than the addressee, please notify the sender and delete the message. 

NDS8 does not accept responsibility for changes made to this 
message after it was sent. Whilst all reasonable care has been taken to 
avoid the transmission of viruses, it is the responsibility of the 
recipient to ensure that the onward transmission, opening or use of 
this message and any attachments will not adversely affect its systems or data.

From alandpearson at yahoo.com  Mon May 26 22:21:46 2008
From: alandpearson at yahoo.com (Alan Pearson)
Date: Mon, 26 May 2008 22:21:46 +0100
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <68b791330805261407y70515a97rdd607651db56a233@mail.gmail.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
	<98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
	<68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com>
	<483B2E29020000BB0008F293@mail2.nds8.com>
	<68b791330805261404y2407f639td1d3d1834afa93a2@mail.gmail.com>
	<68b791330805261407y70515a97rdd607651db56a233@mail.gmail.com>
Message-ID: <3410AAAB-0FD5-4EC4-8CE0-DE26D2A36C18@yahoo.com>

Interestingly and off topic, I see this is the reason that Novell are  
struggling a bit
All the Netware 'grey beards' aren't familiar with Linux and resist  
the change.... and recommend Windows as it's the nearest to what they  
know.
What I've seen of Netware isn't pretty, some dinosaur that 'abends'  
with a totally proprietary way of doing things...
Now I'm going to duck, posting this on a Novell list..

But, other people, like me, who have come from Linux, and have used it  
for years, finally find a non-MS system that does everything, plays  
well with others, and runs on Linux
Linux ain't just a kernel (well it is, but let's not go there), it's a  
OS more powerful than Netware could dream of.

I plumped for Novell last year for a 60 person startup, all Linux  
servers, Win/Linux/Mac desktops (s/w house) and Novell was the only  
game in town that could do EVERYTHING :

1) Groupwise for Mail, cross platform (not as smart as exchange in  
some respects, but damn close, and bloody reliable)
2) Zenworks for everything PeeCee related (remote control, s/w  
distribution, asset mgmt, policy enforcement)
3) iPrint (could be better - read quotas ! - but pretty damn good and  
reliable...... cross platform too !)
4) NSS for Filestorage - more flexible than Linux equivs.. sure not as  
fast, but flexibility rocks on it
5) Novell Trustee model - still the best model I've ever seen.. beats  
the living daylights out of ACLs etc
6) Edirectory - LDAP / Kerberos / everything in the directory

All this is a lovely little deal called Open Workgroup Suite for <  
?100 per head.


Oh yeah and it all runs on Linux, with millions of Open Source (read  
free) tools to add to the value

We've got a complete enterprise Linux system, all supported by one  
vendor, that works really well cross platform.
I've become a real Novell head in < 1 year, and I just wish more  
people knew about them.

Please, for the love of Linus, never ever recommend a Windows  
infrastructure to anyone .... Not when there is OES

</rant>



---
AlanP


On 26 May 2008, at 22:07, Peter Van Lone wrote:

> and, if this is all true --- then perhaps I now (finally) have a
> reason to dust off my Novell lab stuff, to try to figure this out? I
> have resisted OES linux just because it has seemed like a kludge,
> offering little to no benefit other than simply being on the "linux
> kernel". I was forstalling what I figured was going to be the eventual
> recommendation that my clients just bag it and give in to windows.
>
> Well ... maybe there is yet some actual reason to look into it?



From MCKEACBR at uvsc.edu  Mon May 26 22:59:45 2008
From: MCKEACBR at uvsc.edu (Brett McKeachnie)
Date: Mon, 26 May 2008 15:59:45 -0600
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <3410AAAB-0FD5-4EC4-8CE0-DE26D2A36C18@yahoo.com>
References: <483ABC9B.2090109@raad.tartu.ee><483B0EC2020000BB0008F257@mail2.nds8.com><68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com><68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com><98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com><68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com><483B2E29020000BB0008F293@mail2.nds8.com><68b791330805261404y2407f639td1d3d1834afa93a2@mail.gmail.com><68b791330805261407y70515a97rdd607651db56a233@mail.gmail.com>
	<3410AAAB-0FD5-4EC4-8CE0-DE26D2A36C18@yahoo.com>
Message-ID: <483ADE6F.1D91.0074.0@uvsc.edu>

Alan, respectfully,

What you are forgetting is that we NetWare 'grey beards' are used to
functionality that cannot as yet be duplicated on Linux - some of us
have tried it (OES, OES2), and have had to move back to NetWare because
while Novell has somewhat drunk their own punch, many of their
'partners' still haven't gotten their act together to make their
products run on Linux.  For that matter, there are some elements of a
full Novell infrastructure that aren't on Linux yet - and many that
aren't at full capacity/reliability.  Will they all get there? Yes, but
WHEN?  Oh, and all those things you listed that can be done on Linux
(minus the OSS) . . . They can be done on NetWare, have been running on
NetWare for years, and when you install an SP that Novell pushes at you
(read SLES10SP2), it all doesn't blow up in your face and require hours
and days of rebuilding the "unbreakable Linux OS" (sore subject, long
'holiday' weekend).  When Novell and their partners all get on the same
page with Linux and OES2(3,4,?), many of us 'grey beards' will be right
there with you on Linux.  Until then, don't blame us for not wanting to
implement inadequate functionality on the extremely powerful Linux
kernel.  More than that, understand when people move to recommending
Windows, it can be out of frustration that Novell doesn't want to keep
supporting their platform that provides the functionality they need,
while M$ does, albeit for an inferior product.

Thanks for listening,

Brett


>>> On 5/26/2008 at 3:21 PM, in message
<3410AAAB-0FD5-4EC4-8CE0-DE26D2A36C18 at yahoo.com>, "Alan Pearson"
<alandpearson at yahoo.com> wrote:
> Interestingly and off topic, I see this is the reason that Novell are
 
> struggling a bit
> All the Netware 'grey beards' aren't familiar with Linux and resist 

> the change.... and recommend Windows as it's the nearest to what they
 
> know.
> What I've seen of Netware isn't pretty, some dinosaur that 'abends' 

> with a totally proprietary way of doing things...
> Now I'm going to duck, posting this on a Novell list..
> 
> But, other people, like me, who have come from Linux, and have used
it  
> for years, finally find a non-MS system that does everything, plays 

> well with others, and runs on Linux
> Linux ain't just a kernel (well it is, but let's not go there), it's
a  
> OS more powerful than Netware could dream of.
> 
> I plumped for Novell last year for a 60 person startup, all Linux  
> servers, Win/Linux/Mac desktops (s/w house) and Novell was the only 

> game in town that could do EVERYTHING :
> 
> 1) Groupwise for Mail, cross platform (not as smart as exchange in  
> some respects, but damn close, and bloody reliable)
> 2) Zenworks for everything PeeCee related (remote control, s/w  
> distribution, asset mgmt, policy enforcement)
> 3) iPrint (could be better - read quotas ! - but pretty damn good and
 
> reliable...... cross platform too !)
> 4) NSS for Filestorage - more flexible than Linux equivs.. sure not
as  
> fast, but flexibility rocks on it
> 5) Novell Trustee model - still the best model I've ever seen.. beats
 
> the living daylights out of ACLs etc
> 6) Edirectory - LDAP / Kerberos / everything in the directory
> 
> All this is a lovely little deal called Open Workgroup Suite for <  
> ?100 per head.
> 
> 
> Oh yeah and it all runs on Linux, with millions of Open Source (read 

> free) tools to add to the value
> 
> We've got a complete enterprise Linux system, all supported by one  
> vendor, that works really well cross platform.
> I've become a real Novell head in < 1 year, and I just wish more  
> people knew about them.
> 
> Please, for the love of Linus, never ever recommend a Windows  
> infrastructure to anyone .... Not when there is OES
> 
> </rant>
> 
> 
> 
> ---
> AlanP
> 
> 
> On 26 May 2008, at 22:07, Peter Van Lone wrote:
> 
>> and, if this is all true --- then perhaps I now (finally) have a
>> reason to dust off
 my Novell lab stuff, to try to figure this out?
I
>> have resisted OES linux just because it has seemed like a kludge,
>> offering little to no benefit other than simply being on the "linux
>> kernel". I was forstalling what I figured was going to be the
eventual
>> recommendation that my clients just bag it and give in to windows.
>>
>> Well ... maybe there is yet some actual reason to look into it?
> 
> 
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk 
> http://netlab1.usu.edu/mailman/listinfo/novell

From alandpearson at yahoo.com  Mon May 26 23:16:40 2008
From: alandpearson at yahoo.com (Alan Pearson)
Date: Mon, 26 May 2008 23:16:40 +0100
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <483ADE6F.1D91.0074.0@uvsc.edu>
References: <483ABC9B.2090109@raad.tartu.ee><483B0EC2020000BB0008F257@mail2.nds8.com><68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com><68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com><98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com><68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com><483B2E29020000BB0008F293@mail2.nds8.com><68b791330805261404y2407f639td1d3d1834afa93a2@mail.gmail.com><68b791330805261407y70515a97rdd607651db56a233@mail.gmail.com>
	<3410AAAB-0FD5-4EC4-8CE0-DE26D2A36C18@yahoo.com>
	<483ADE6F.1D91.0074.0@uvsc.edu>
Message-ID: <8E07C488-BA8F-4E79-97E0-F1E070098120@yahoo.com>

Hey Bret

Thanks for the reply. I'm a bit 'Netware Ignorant' having only  
fleeting experience, but watching many lists and postings.
It seems too much of a pain. I guess it's what you're used to.  
Although that said Linux can be a real pain too, no doubt.

Now I'm curious though, what is missing in OES2 that is in Netware  
(except AFP which is a sore point for me at the minute, but I  
understand it to be resolved in SP1)

Cheers
Alan

---
AlanP


On 26 May 2008, at 22:59, Brett McKeachnie wrote:

> Alan, respectfully,
>
> What you are forgetting is that we NetWare 'grey beards' are used to
> functionality that cannot as yet be duplicated on Linux - some of us
> have tried it (OES, OES2), and have had to move back to NetWare  
> because
> while Novell has somewhat drunk their own punch, many of their
> 'partners' still haven't gotten their act together to make their
> products run on Linux.  For that matter, there are some elements of a
> full Novell infrastructure that aren't on Linux yet - and many that
> aren't at full capacity/reliability.  Will they all get there? Yes,  
> but
> WHEN?  Oh, and all those things you listed that can be done on Linux
> (minus the OSS) . . . They can be done on NetWare, have been running  
> on
> NetWare for years, and when you install an SP that Novell pushes at  
> you
> (read SLES10SP2), it all doesn't blow up in your face and require  
> hours
> and days of rebuilding the "unbreakable Linux OS" (sore subject, long
> 'holiday' weekend).  When Novell and their partners all get on the  
> same
> page with Linux and OES2(3,4,?), many of us 'grey beards' will be  
> right
> there with you on Linux.  Until then, don't blame us for not wanting  
> to
> implement inadequate functionality on the extremely powerful Linux
> kernel.  More than that, understand when people move to recommending
> Windows, it can be out of frustration that Novell doesn't want to keep
> supporting their platform that provides the functionality they need,
> while M$ does, albeit for an inferior product.
>
> Thanks for listening,
>
> Brett
>
>
>>>> On 5/26/2008 at 3:21 PM, in message
> <3410AAAB-0FD5-4EC4-8CE0-DE26D2A36C18 at yahoo.com>, "Alan Pearson"
> <alandpearson at yahoo.com> wrote:
>> Interestingly and off topic, I see this is the reason that Novell are
>
>> struggling a bit
>> All the Netware 'grey beards' aren't familiar with Linux and resist
>
>> the change.... and recommend Windows as it's the nearest to what they
>
>> know.
>> What I've seen of Netware isn't pretty, some dinosaur that 'abends'
>
>> with a totally proprietary way of doing things...
>> Now I'm going to duck, posting this on a Novell list..
>>
>> But, other people, like me, who have come from Linux, and have used
> it
>> for years, finally find a non-MS system that does everything, plays
>
>> well with others, and runs on Linux
>> Linux ain't just a kernel (well it is, but let's not go there), it's
> a
>> OS more powerful than Netware could dream of.
>>
>> I plumped for Novell last year for a 60 person startup, all Linux
>> servers, Win/Linux/Mac desktops (s/w house) and Novell was the only
>
>> game in town that could do EVERYTHING :
>>
>> 1) Groupwise for Mail, cross platform (not as smart as exchange in
>> some respects, but damn close, and bloody reliable)
>> 2) Zenworks for everything PeeCee related (remote control, s/w
>> distribution, asset mgmt, policy enforcement)
>> 3) iPrint (could be better - read quotas ! - but pretty damn good and
>
>> reliable...... cross platform too !)
>> 4) NSS for Filestorage - more flexible than Linux equivs.. sure not
> as
>> fast, but flexibility rocks on it
>> 5) Novell Trustee model - still the best model I've ever seen.. beats
>
>> the living daylights out of ACLs etc
>> 6) Edirectory - LDAP / Kerberos / everything in the directory
>>
>> All this is a lovely little deal called Open Workgroup Suite for <
>> ?100 per head.
>>
>>
>> Oh yeah and it all runs on Linux, with millions of Open Source (read
>
>> free) tools to add to the value
>>
>> We've got a complete enterprise Linux system, all supported by one
>> vendor, that works really well cross platform.
>> I've become a real Novell head in < 1 year, and I just wish more
>> people knew about them.
>>
>> Please, for the love of Linus, never ever recommend a Windows
>> infrastructure to anyone .... Not when there is OES
>>
>> </rant>
>>
>>
>>
>> ---
>> AlanP
>>
>>
>> On 26 May 2008, at 22:07, Peter Van Lone wrote:
>>
>>> and, if this is all true --- then perhaps I now (finally) have a
>>> reason to dust off
> my Novell lab stuff, to try to figure this out?
> I
>>> have resisted OES linux just because it has seemed like a kludge,
>>> offering little to no benefit other than simply being on the "linux
>>> kernel". I was forstalling what I figured was going to be the
> eventual
>>> recommendation that my clients just bag it and give in to windows.
>>>
>>> Well ... maybe there is yet some actual reason to look into it?
>>
>>
>> _______________________________________________
>> Novell mailing list
>> Novell at netlab1.oucs.ox.ac.uk
>> http://netlab1.usu.edu/mailman/listinfo/novell
> _______________________________________________
> Novell mailing list
> Novell at netlab1.oucs.ox.ac.uk
> http://netlab1.usu.edu/mailman/listinfo/novell



From petervl at gmail.com  Tue May 27 02:43:08 2008
From: petervl at gmail.com (Peter Van Lone)
Date: Mon, 26 May 2008 20:43:08 -0500
Subject: Authentication to eDirectory and ActiveDirectory
In-Reply-To: <3410AAAB-0FD5-4EC4-8CE0-DE26D2A36C18@yahoo.com>
References: <483ABC9B.2090109@raad.tartu.ee>
	<483B0EC2020000BB0008F257@mail2.nds8.com>
	<68b791330805261223u4eb0e53ev585a3e65e2d7a4a6@mail.gmail.com>
	<68b791330805261241p790a2153v25c2f06639905df3@mail.gmail.com>
	<98423F7B-8E6C-4699-8AA3-A430F8191F65@yahoo.com>
	<68b791330805261312o7efa207bg5482231837b23314@mail.gmail.com>
	<483B2E29020000BB0008F293@mail2.nds8.com>
	<68b791330805261404y2407f639td1d3d1834afa93a2@mail.gmail.com>
	<68b791330805261407y70515a97rdd607651db56a233@mail.gmail.com>
	<3410AAAB-0FD5-4EC4-8CE0-DE26D2A36C18@yahoo.com>
Message-ID: <68b791330805261843r65bea83cqe825b7d7019e8bd7@mail.gmail.com>

Alan