Novell

Logon-Logoff / Power-on-Shutdown Scripts Execution for Windows Clients of DSfW

A new coolsolution has been released allowing the login and logoff tasks on a workstation.  The script can also power down or power on workstations.  Administrators and end users can automate these tasks.  The scripts can be stored in the netlogon or sysvol on the primary domain controller which will sync it out to the other DCs.  The profile tab of user properties, or Logon GPO can be used for integrating these scripts into startups and shutdown cases.

Go to novell.coolsolutions.com to download the script and read more about what you can do with this script.

March 2015 OES 11 SP2 Scheduled Maintenance Update 10332

March 2015 OES 11 SP2 Scheduled Maintenance Update 10332

 

How to apply the patch with zypper.  YaST Online Update can also be used.

1) List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP2-Updates | OES11-SP2-Updates | Yes | Yes

2) List the Updates
zypper pch OES11-SP2-Updates
Should see the following:
OES11-SP2-Updates | oes11sp2-March-2015-Scheduled-Maintenance | 10332 | security | Needed

3) Install the maintenance patch
OES11SP2
zypper up -t patch oes11sp2-March-2015-Scheduled-Maintenance

4) Then list the patches again to verify the patch is listed as Installed
OES11SP2
zypper pch OES11-SP2-Updates

Should see the following:
OES11-SP2-Updates | oes11sp2-March-2015-Scheduled-Maintenance   | 10332 | Installed

5) To apply all OES11 SP2 updates run the following command
zypper up -t patch -r OES11-SP2-Updates

6) To apply all SLES 11 SP3 updates run the following command
zypper up… Continue reading

January 2015 Scheduled Maintenance Update

January 2015 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

1) List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP2-Updates | OES11-SP2-Updates | Yes | Yes

2) List the Updates
zypper pch OES11-SP2-Updates
Should see the following:
OES11-SP2-Updates | oes11sp2-January-2015-Scheduled-Maintenance | 10105 | security | Needed

3) Install the maintenance patch
OES11SP2
zypper up -t patch oes11sp2-January-2015-Scheduled-Maintenance

4) Then list the patches again to verify the patch is listed as Installed
OES11SP2
zypper pch OES11-SP2-Updates

Should see the following:
OES11-SP2-Updates | oes11sp2-January-2015-Scheduled-Maintenance   | 10105

5) To apply all OES11 SP2 updates run the following command
zypper up -t patch -r OES11-SP2-Updates

6) To apply all SLES 11 SP3 updates run the following command
zypper up -t patch -r… Continue reading

December 2014 Scheduled Maintenance Update

December 2014 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP2-Updates | OES11-SP2-Updates | Yes | Yes

zypper pch OES11-SP2-Updates
Should see the following:
OES11-SP2-Updates | oes11sp2-December-2014-Scheduled-Maintenance | 9879 | security | Needed

[clear-line]Install the maintenance patch
OES11SP2
zypper up -t patch oes11sp2-December-2014-Scheduled-Maintenance

Then list the patches again to verify the patch is listed as Installed
OES11SP2
zypper pch OES11-SP2-Updates

Should see the following:
OES11-SP2-Updates | oes11sp2-December-2014-Scheduled-Maintenance   | 9879

To apply all OES11 SP2 updates run the following command
zypper up -t patch -r OES11-SP2-Updates

To apply all SLES 11 SP3 updates run the following command
zypper up -t patch -r SLES11-SP3-Updates

Key DSfW specific bugs fixed with this maintenance… Continue reading

Novell-Cifs CASA Repair Tool @ Coolsolutions

I published my Novell-Cifs CASA Repair Tool to Novell Coolsolutions.

The tool will validate CASA keys are present and the the proxy user can login.  If there is a problem, it will fix it.  Great tool to fix the following errors:

ERROR: ENTRY: DDCLogin() failed Error: -223
ERROR: ENTRY: DDCLogin() failed Error: -222
ERROR: ENTRY: DDCLogin() failed Error: -197

The tool works with OES2.x and OES11.x.  I expect it to work with OES2015 unless there are big changes in that version.

If you are running Novell Cifs this tool is a must.  Download it and have it ready, or run it as a preventative measure.

VI Commands posted @ Coolsolutions

You can learn about vic (vi commands) and download the rpm at Novell Coolsolutions.

Start learning vi or use vic as a quick reference to expand your vi reparto.

May 2014 Scheduled Maintenance Patch

May 2014 Scheduled Maintenance Patch

May 2014 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes
nu_novell_com:OES11-SP2-Updates | OES11-SP2-Updates | Yes | Yes

List patches in the Updates repository
OES11SP1
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-May-2014-Scheduled-Maintenance | 9151| recommended | Needed

OES11SP2
zypper pch OES11-SP2-Updates
Should see the following:
OES11-SP2-Updates | oes11sp2-May-2014-Scheduled-Maintenance | 9157| recommended | Needed

Install the maintenance patch
OES11SP1
zypper up -t patch oes11sp1-May-2014-Scheduled-Maintenance
OES11SP2
zypper up -t patch oes11sp2-May-2014-Scheduled-Maintenance

Then list the patches again to verify the patch is listed as Installed
OES11SP1
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-May-2014-Scheduled-Maintenance   | 9151

OES11SP2
zypper… Continue reading

March 2014 Scheduled Maintenance Patch

March 2014 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-March-2014-Scheduled-Maintenance | 8935| recommended | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-March-2014-Scheduled-Maintenance

Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-March-2014-Scheduled-Maintenance   | 8935

To apply all OES11 SPa updates run the following command
zypper up -t patch -r OES11-SP1-Updates

To apply all SLES 11 SP2 updates run the following command
zypper up -t patch -r SLES11-SP2-Updates

Key DSfW specific bugs fixed with this… Continue reading

New Patch for eDir 8.8.7.5

Patch 8.8.7.5 was released and immediately pulled after seeing ndsd cores due to ldap search filters of (guid=).  A new patch is now available.  To view if the new patch has been applied run the command:
zypper list-patches –bugzilla=864542

To apply the patch run the command:

zypper up -t patch oes11sp1-edirectory-887-patch5-8910

The following packages will be upgraded:
novell-NDSbase novell-NDSbase-32bit novell-NDScommon novell-NDSimon
novell-NDSrepair novell-NDSserv novell-NOVLembox novell-NOVLice
novell-NOVLsnmp novell-NOVLsubag novell-dclient novell-dclient-32bit
novell-edirectory-jclnt novell-edirectory-tsands
novell-edirectory-tsands-32bit novell-nmas novell-nmas-libnmasext
novell-nmas-libspmclnt novell-nmas-libspmclnt-32bit novell-nmasclient
novell-nmasclient-32bit novell-npkiapi novell-npkiapi-32bit novell-npkiserver
novell-npkit novell-npkit-32bit novell-sss

To downlowd the stand alone eDirectory patch and to learn more about the patch see eDirectory 8.8 SP7 Patch 5 HotFix 1 (All Platforms)

January 2014 Scheduled Maintenance Ptach

January 2014 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-January-2014-Scheduled-Maintenance | 8685| recommended | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-January-2014-Scheduled-Maintenance

Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-January-2014-Scheduled-Maintenance   | 8685

To apply all OES11 SPa updates run the following command
zypper up -t patch -r OES11-SP1-Updates

To apply all SLES 11 SP2 updates run the following command
zypper up -t patch -r SLES11-SP2-Updates

Key DSfW specific bugs fixed with this… Continue reading

OES11SP2 is Available for Download

OES11sp2 is now available for download.

Sites and Subnets functionality is the biggest addition to DSfW.  It will allow the configuration of users to authenticate to a specific Domain Controller.  For this feature to work all Domain Controllers must be OES11sp2 servers.
Easy Wins configuration, Mac Client Support, Windows 8 Support,  Windows 2012 Support, and SASL NTMSSP Support are also big additions.
The SASL NTLMSSP Support will allow NTLM over LDAP bind request to be fullfilled.  Since more and more applications are supporting SASL NTLMSSP as the primary authentication mechanism for 2008 and 2012 servers this will allow more applications to work directly with DSfW.
The Novell Client has worked with well DSfW since OES2SP3, but that configuration was not supported.  It is now supported.
Download and test OES11sp2.  It is more robust and feature rich than previous… Continue reading

November 2013 Scheduled Maintenance

November 2013 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-November-2013-Scheduled-Maintenance | 8483| recommended | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-November-2013-Scheduled-Maintenance

Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-November-2013-Scheduled-Maintenance   | 8483

To apply all OES11 SPa updates run the following command
zypper up -t patch -r OES11-SP1-Updates

To apply all SLES 11 SP2 updates run the following command
zypper up -t patch -r SLES11-SP2-Updates

Key DSfW specific bugs fixed with this… Continue reading

New DSfW Monitor Script

I previously created two scripts, dsfw_processcheck.sh and dsfw_portchk.sh, one to monitor pids and one to monitor ports.  With the two script they are helpful to ensure the DSfW services are up.  A new script combines the two and adds additional options.  The script not only checks for pids and ports, but it can be used to create a cron job to run the script every 10 minutes by adding the “add” switch.  To remove the cron job use the “rm” switch.

If a DSfW server running DNS (or not) has a DSfW specific process stop or crash a quick stop gap measure is to monitor the DSfW processes and restart them if one or more of the DSfW processes stop.

If the DSfW server is an Additional Domain Controller (ADC) DNS might not be configured on the server.  If DNS is not running on the… Continue reading

September 2013 Scheduled Maintenance

July2013 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-September-2013-Scheduled-Maintenance | 8284| recommended | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-September-2013-Scheduled-Maintenance

Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-September-2013-Scheduled-Maintenance   | 8284| recommended | Installed

September 2013 Scheduled Maintenance for OES11SP1 (8284)

Key DSfW specific bugs fixed with this maintenance patch for OES11SP1

How To Register OES and SLES Servers Using Command Line and a Script

It is important to keep your servers at the current patch level.  Usually there are many bugs fixed and if you come across a new issue it helps Novell Support the the Developers.

I like to use the command line to register my servers.  It is easy and relatively fast compared to the GUI.  Even easier is to use a script.  Just copy the script to the server, modify the e-mail account and registration codes and run the script.  If something happens to the update services and repositories just run the script to clean up the old and re-register.

Below is a video demonstrating the register.sh script

TID 3030847 goes over the command line process.

Note: do not include < > for email or regcodes in the examples below

The command to register a OES server is
suse_register -a email=<user@email.com> -a regcode-sles=<your sles code>… Continue reading

July 2013 Scheduled Maintenance

July2013 Scheduled Maintenance has been released

How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-July-2013-Scheduled-Maintenance | 7889 | recommended | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-July-2013-Scheduled-Maintenance

Then list the patches again to make sure it is installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-July-2013-Scheduled-Maintenance       | 7889 | recommended | Installed

July 2013 Scheduled Maintenance for OES11SP1

Key DSfW specific bugs fixed with this maintenance patch for OES11SP1

  • 806538 – MS cluster support in DSfW
  • 816741 – DSFW: ldapsearch fails when the entryDN specified in search filter contains spaces before or after comma.
  • 818366 – xadsd crashes in rpc__naf_addr_free ()
  • 819547 – DSFW: No results for ldapsearch with… Continue reading

DSfW: Provisioning using python script

Need to do the DSfW install via a putty session/ no gui.  Look at this coolsolution article DSfW: Provisioning using python script.  It provides a python script to do the provisioning portion of the  install with out the need of X Server.  It is also reported to be faster.  Great for scripted installs.

Adding displayName to DSfW user accounts

BES10 requires AD authentication so DSfW is being deployed to accomplish this in eDirectory environments.
The displayName attribute is one attribute that must be populated.

The following attributes must be populated for BES10
displayName
mail
samAccountName
distinguishedName
objectGUID

All but two are automatically populated on DSfW users.
displayName and mail are not.  Hopefully mail is already populated since this is for an e-mail application.  displayName most likely is not.

This video will go over a script that can be used populate displayName with the value used in samAccountName.  It will also show you how to modify the script if the value from another attribute is desired to be used for displayName.

The script does the following search to find users and generate a ldif file

ldapsearch -Y EXTERNAL -LLL -Q -b “$DEFAULTNAMINGCONTEXT” -s sub ‘(&(objectclass=user)(samAccountName=*)(!(|(objectClass=Computer)(displayName=*)(cn:dn:=users)(ou:dn:=oessystemobjects))))’ dn: samAccountName |sed s[samAccountName[‘changetype:modify\nadd: displayName\ndisplayname'[g | grep -v ^# >/tmp/add_displayname.ldif

As… Continue reading

May 2013 Scheduled Maintenance

May 2013 Scheduled Maintenance has been released

How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-May-2013-Scheduled-Maintenance       | 7715    | security    | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-May-2013-Scheduled-Maintenance

Then list the patches again to make sure it is installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-May-2013-Scheduled-Maintenance       | 7715    | security    | Installed

May 2013 Scheduled Maintenance for OES11SP1 7715

Key DSfW specific bugs fixed with this maintenance patch for OES11SP1

  • – 769530: OES11SP1LH: DSfW provisioning task “Assign Rights” – rerun fails with error -614 (entry already exists)
  • – 783005: DSFW: AD Ping doesn’t… Continue reading

April 2013 Scheduled Maintenance

April2013 Scheduled Maintenance has been released

How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-April-2013-Scheduled-Maintenance | 7421 | security | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-April-2013-Scheduled-Maintenance

Then list the patches again to make sure it is installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-April-2013-Scheduled-Maintenance     | 7421    | security    | Installed

April 2013 Scheduled Maintenance for OES11SP1 (7421)

Key DSfW specific bugs fixed with this maintenance patch for OES11SP1

  • 770208: OES11SP1LH: DSfW provisioning of DNS generates duplicate forward and reverse lookup zones if they already exists
  • 785697: Provsioning pre healthCheck fails in ADC.
  • 791640: DSFW FTU1:During ADC Provosioning PreCheck, the… Continue reading

NDSD Health Check Script

I’ve received a great deal of feed back on the DSfW Health Check Script and applied some changes. One of the suggestions was to do only a ndsd (eDirectory) script. The DSfW Health Check Script works for both DSfW and eDirectory servers, but if all you want to do is check eDirectory health on a DSfW server or want a script only for ndsd that is smaller and simple this is an option.

I am always looking for suggestions. I’ve created a video for the ndsd_heaclthchk script. Watch to to learn about configuring it for your specific needs.

For for NDSD Health Check in the download section.

The configuration options are as follows

# Set emailsetting to 1 to send e-mail log when finished. Set to 0 or remove the 1 to disable
emailsetting=0

# Set emailonerror to 1 to send e-mail log if an error is returned. Set to… Continue reading

Latest DSfW Health Check Script

I’ve received a great deal of feed back on the DSfW Health Check Script and applied some changes.
I am always looking for suggestions. I’ve created an updated video with the latest script. Watch to to learn about configuring it for your specific needs.

 

OES 11 SP1 eDirectory Install

Looking to install  eDirectory on OES 11 SP1?  Here is a video going through the install and giving some tips on doing a successful install.

 

January 2013 Scheduled Maintenance for eDirectory 8.8 SP7 Patch 2

January 2013 OES11SP1 Scheduled Maintenance for eDirectory 8.8 SP7 Patch 2 has been released

Description

January 2013 OES11SP1 Scheduled Maintenance for eDirectory 8.8 SP7 Patch 2 Hot Patch1

  • – 795674: ndsd crashes in libnldap.so with latest November 2012 eDirectory Patch 8.8.7 Patch 2
  • – 799053: ldap and ldaps interfaces are lost on DSFW server after installing eDir887patch2 + OES11SP1 Nov Patches

Solution

This update is provided as a set of RPM packages that can easily be installed onto a running system by using the YaST online update module. Please install the update.

file contents

Files Included Size Date
novell-NDSbase-32bit-8.8.7.2-0.7.1.x86_64.rpm 420.2 KB (430316) 2013-01-31 11:52:45
novell-NDSserv-8.8.7.2-0.7.1.x86_64.rpm 5.7 MB (6069650) 2013-01-31 11:52:51
novell-NDSbase-8.8.7.2-0.7.1.x86_64.rpm 579.0 KB (592953) 2013-01-31 11:52:44
novell-edirectory-jclnt-8.8.7.2-0.7.1.x86_64.rpm 280.7 KB (287529) 2013-01-31 11:52:56
novell-edirectory-tsands-8.8.7.2-0.7.1.x86_64.rpm 283.4 KB (290253) 2013-01-31 11:52:57
novell-NOVLice-8.8.7.2-0.7.1.x86_64.rpm 462.3 KB (473462) 2013-01-31 11:52:55
novell-edirectory-tsands-32bit-8.8.7.2-0.7.1.x86_64.rpm 276.4 KB (283131) 2013-01-31 11:52:58
novell-NOVLice-32bit-8.8.7.2-0.7.1.x86_64.rpm 281.5 KB (288314) 2013-01-31 11:52:55
novell-NDScommon-8.8.7.2-0.7.1.x86_64.rpm 243.7 KB (249642)… Continue reading

January 2013 Scheduled Maintenance for OES11SP1

January 2013 Scheduled Maintenance for OES11SP1 has been released

How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates                        | OES11-SP1-Updates                       | Yes     | Yes

List patches in the Updates repository
zypper pch OES11-Updates
Should see the following:
OES11-SP1-Updates | oes11-sp1-January-2013-Scheduled-Maintenance   | 7195    | recommended | Need

Install the maintenance patch
zypper up -t patch oes11-sp1-January-2013-Scheduled-Maintenance

Then list the patches again to make sure it is installed
zypper pch OES11-Updates
Should see the following:
OES11-SP1Updates | oes11-sp1-January-2013-Scheduled-Maintenance   | 7195    | recommended | Installed

Key… Continue reading

January 2013 Scheduled Maintenance for OES11

January 2013 Scheduled Maintenance for OES11 has been released

How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-Updates                        | OES11-Updates                       | Yes     | Yes

List patches in the Updates repository
zypper pch OES11-Updates
Should see the following:
OES11-Updates | oes11-January-2013-Scheduled-Maintenance   | 7170    | recommended | Need

Install the maintenance patch
zypper up -t patch oes11-January-2013-Scheduled-Maintenance

Then list the patches again to make sure it is installed
zypper pch OES11-Updates
Should see the following:
OES11-Updates | oes11-January-2013-Scheduled-Maintenance   | 7170    | recommended | Installed

Key DSfW specific… Continue reading

January 2013 Scheduled Maintenance for OES2SP3

January 2013 Maintenance patch for OES2P3 has been released

Key DSfW specific bugs fixed with this maintenance patch

  • 787330: Can’t install ADC to DSfW domain that is updated to Sept 2012 patch level
  • 790828: DSfW Assign rights fails in XAD\_RETAIN\_POLICIES=no case and if there are containers with nspm… attr set
  • 792131: DSFW – behavior for isdeleted attribute doesn’t match with Active Directory
  • 792146: DSFW FTU1: “Enable Kerberos” task fails while provisioning for CDC in case of FRD is updated with FTU1 build
  • 792192: DSFW – “unavailableCriticalExtension” being returned when LDAP\_SERVER\_NOTIFICATION\_OID is being used during ldapsearch
  • 793390: Fresh install & configuration of OES11SP1 DSFW Server along with November 2012 patch is failing.

January 2013 Scheduled Maintenance for OES2SP3

  • 567151: provide an icon for group in the history window
  • 624515: Adding an Auxiliary Class fails if a mandatory attribute of the Aux Class is an optional for another class
  • 638542: iManager upgrades… Continue reading

DSfW and eDirectory Health Check

It is a good idea to periodically check the health of DSfW and eDirectory servers.

This video concentrates on a script I wrote that can be ran on both eDirectory and DSfW servers.

The script demonstrated in this video is called dsfw_edir_healthchk.sh.  To get the latest version of the script click on the DSfW Health Check link in the download section on DSfWDude.com.

A great TID to start off with for a eDirectory health check is TID 3564075.
On a DSfW server start off with an eDirectory health check as well as TID 7001884 which has DSfW specific commands to check the health and overall operation of a DSfW server.

The script does most of the suggestions in both TIDs mentioned above plus a few more checks.

For eDirectory there are 8 checks the script does and… Continue reading

DSfW Slow Performance/Group Types

DSfW, like AD, has multiple group types.  This is found in the grouptype attribute.  TID 7004405 goes over the three group types.

Domain Local group: -2147483644
Global group: -2147483646
Universal group: -2147483640

The default group type is Universal group.   This group type can generate a lot of extra traffic causing the performance of the domain controller to suffer.

Global and Universal groups calculate a virtual attribute called tokenGroupsDomainLocal. This attribute is calculated for the group by the slapi layer. When a user is a member of several groups login times can increase. An increase in ndsd utilization can also result from the calculation of the tokenGroupsDomainLocal when a large number of groups reside within the domain.

If ndsd utilization is high or login times need to be reduced, change groups to Domain Local groups to avoid the calculation of the tokenGroupsDomainLocal virtual attribute.

Here is a… Continue reading

November 2012 Maintenance for OES11SP1 is released

November 2012 Maintenance patch for OES11SP1 has been released

Key DSfW specific bugs fixed with this maintenance patch

  • – 736416: DSfW – Apple OSX Compatibility: Login to DSfW without ID mapping doesn’t work
  • – 739450: DSfW: W32Time auth provider for ntp does not work in a cross partition setup
  • – 768113: DSFW: xadsd crashes in dcerpc libprot_ncacn.so library
  • – 769945: Assignment of users o authorise RDP Access to Windows Workstation
  • – 770416: OES11SP1LH: DNS/DHCP management console can not configure update policy option as DSfW requires
  • – 771993: OES11SP1LH: gposync runs in a loop
  • – 774802: xadsd crashes in rpc__list_element_alloc ()
  • – 778235: gposync tool reports success even if nsimAssignments is not updated
  • – 783939: DSFW: No results for LDAP Query when OID is used instead of attribute name in the search filter.
  • – 784366: xadsd crashes in rpc__cn_binding_inq_addr () due to failed NTLMSSP authentication requests

Key CIFS, DNS,… Continue reading

Categories