March 2014 Scheduled Maintenance Patch
March 2014 Scheduled Maintenance has been released
How to apply the patch with zypper. YaST Online Update can also be used.
List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes
List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-March-2014-Scheduled-Maintenance | 8935| recommended | Needed
Install the maintenance patch
zypper up -t patch oes11sp1-March-2014-Scheduled-Maintenance
Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-March-2014-Scheduled-Maintenance | 8935
To apply all OES11 SPa updates run the following command
zypper up -t patch -r OES11-SP1-Updates
To apply all SLES 11 SP2 updates run the following command
zypper up -t patch -r SLES11-SP2-Updates
Key DSfW specific bugs fixed with this… Continue reading
January 2014 Scheduled Maintenance Ptach
January 2014 Scheduled Maintenance has been released
How to apply the patch with zypper. YaST Online Update can also be used.
List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes
List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-January-2014-Scheduled-Maintenance | 8685| recommended | Needed
Install the maintenance patch
zypper up -t patch oes11sp1-January-2014-Scheduled-Maintenance
Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-January-2014-Scheduled-Maintenance | 8685
To apply all OES11 SPa updates run the following command
zypper up -t patch -r OES11-SP1-Updates
To apply all SLES 11 SP2 updates run the following command
zypper up -t patch -r SLES11-SP2-Updates
Key DSfW specific bugs fixed with this… Continue reading
November 2013 Scheduled Maintenance
November 2013 Scheduled Maintenance has been released
How to apply the patch with zypper. YaST Online Update can also be used.
List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes
List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-November-2013-Scheduled-Maintenance | 8483| recommended | Needed
Install the maintenance patch
zypper up -t patch oes11sp1-November-2013-Scheduled-Maintenance
Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-November-2013-Scheduled-Maintenance | 8483
To apply all OES11 SPa updates run the following command
zypper up -t patch -r OES11-SP1-Updates
To apply all SLES 11 SP2 updates run the following command
zypper up -t patch -r SLES11-SP2-Updates
Key DSfW specific bugs fixed with this… Continue reading
September 2013 Scheduled Maintenance
July2013 Scheduled Maintenance has been released
How to apply the patch with zypper. YaST Online Update can also be used.
List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes
List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-September-2013-Scheduled-Maintenance | 8284| recommended | Needed
Install the maintenance patch
zypper up -t patch oes11sp1-September-2013-Scheduled-Maintenance
Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-September-2013-Scheduled-Maintenance | 8284| recommended | Installed
September 2013 Scheduled Maintenance for OES11SP1 (8284)
Key DSfW specific bugs fixed with this maintenance patch for OES11SP1
- 816488 – DSfW: Migration does not retain sysvol facls
- 828484 – OES11 SP2: eDirectory cored… Continue reading
How To Register OES and SLES Servers Using Command Line and a Script
It is important to keep your servers at the current patch level. Usually there are many bugs fixed and if you come across a new issue it helps Novell Support the the Developers.
I like to use the command line to register my servers. It is easy and relatively fast compared to the GUI. Even easier is to use a script. Just copy the script to the server, modify the e-mail account and registration codes and run the script. If something happens to the update services and repositories just run the script to clean up the old and re-register.
Below is a video demonstrating the register.sh script
TID 3030847 goes over the command line process.
Note: do not include < > for email or regcodes in the examples below
The command to register a OES server is
suse_register -a email=<user@email.com> -a regcode-sles=<your sles code>… Continue reading
July 2013 Scheduled Maintenance
July2013 Scheduled Maintenance has been released
How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes
List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-July-2013-Scheduled-Maintenance | 7889 | recommended | Needed
Install the maintenance patch
zypper up -t patch oes11sp1-July-2013-Scheduled-Maintenance
Then list the patches again to make sure it is installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-July-2013-Scheduled-Maintenance | 7889 | recommended | Installed
July 2013 Scheduled Maintenance for OES11SP1
Key DSfW specific bugs fixed with this maintenance patch for OES11SP1
- 806538 – MS cluster support in DSfW
- 816741 – DSFW: ldapsearch fails when the entryDN specified in search filter contains spaces before or after comma.
- 818366 – xadsd crashes in rpc__naf_addr_free ()
- 819547 – DSFW: No results for ldapsearch with… Continue reading
May 2013 Scheduled Maintenance
May 2013 Scheduled Maintenance has been released
How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes
List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-May-2013-Scheduled-Maintenance | 7715 | security | Needed
Install the maintenance patch
zypper up -t patch oes11sp1-May-2013-Scheduled-Maintenance
Then list the patches again to make sure it is installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-May-2013-Scheduled-Maintenance | 7715 | security | Installed
May 2013 Scheduled Maintenance for OES11SP1 7715
Key DSfW specific bugs fixed with this maintenance patch for OES11SP1
- – 769530: OES11SP1LH: DSfW provisioning task “Assign Rights” – rerun fails with error -614 (entry already exists)
- – 783005: DSFW: AD Ping doesn’t… Continue reading
April 2013 Scheduled Maintenance
April2013 Scheduled Maintenance has been released
How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes
List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-April-2013-Scheduled-Maintenance | 7421 | security | Needed
Install the maintenance patch
zypper up -t patch oes11sp1-April-2013-Scheduled-Maintenance
Then list the patches again to make sure it is installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-April-2013-Scheduled-Maintenance | 7421 | security | Installed
April 2013 Scheduled Maintenance for OES11SP1 (7421)
Key DSfW specific bugs fixed with this maintenance patch for OES11SP1
- – 770208: OES11SP1LH: DSfW provisioning of DNS generates duplicate forward and reverse lookup zones if they already exists
- – 785697: Provsioning pre healthCheck fails in ADC.
- – 791640: DSFW FTU1:During ADC Provosioning PreCheck, the… Continue reading
January 2013 Scheduled Maintenance for OES2SP3
January 2013 Maintenance patch for OES2P3 has been released
Key DSfW specific bugs fixed with this maintenance patch
- 787330: Can’t install ADC to DSfW domain that is updated to Sept 2012 patch level
- 790828: DSfW Assign rights fails in XAD\_RETAIN\_POLICIES=no case and if there are containers with nspm… attr set
- 792131: DSFW – behavior for isdeleted attribute doesn’t match with Active Directory
- 792146: DSFW FTU1: “Enable Kerberos” task fails while provisioning for CDC in case of FRD is updated with FTU1 build
- 792192: DSFW – “unavailableCriticalExtension” being returned when LDAP\_SERVER\_NOTIFICATION\_OID is being used during ldapsearch
- 793390: Fresh install & configuration of OES11SP1 DSFW Server along with November 2012 patch is failing.
January 2013 Scheduled Maintenance for OES2SP3
- 567151: provide an icon for group in the history window
- 624515: Adding an Auxiliary Class fails if a mandatory attribute of the Aux Class is an optional for another class
- 638542: iManager upgrades… Continue reading
November 2012 Scheduled Maintenance for OES2SP3
November 2012 Maintenance patch for OES2P3 has been released
Key DSfW specific bugs fixed with this maintenance patch
- 736416: DSfW – Apple OSX Compatibility: Login to DSfW without ID mapping doesn’t work
- 739450: DSfW: W32Time auth provider for ntp does not work in a cross partition setup
- 768113: DSFW: xadsd crashes in dcerpc libprot\_ncacn.so library
- 769945: Assignment of users of authorise RDP Access to Windows Workstation
- 771993: gposync runs in a loop
- 774802: xadsd crashes in rpc\_\_list\_element\_alloc ()
- 778235: gposync tool reports success even if nsimAssignments is not updated
- 783939: DSFW: No results for LDAP Query when OID is used instead of attribute name in the search filter.
- 784366: xadsd crashes in rpc\_\_cn\_binding\_inq\_addr () due to failed NTLMSSP authentication requests
- 790470: KDC service and Domain services daemon does not come up post Nov 2012 patch build installed
Key CIFS, DNS, and AFT specific bugs fixed with this maintenance… Continue reading
Diagnostic tool for DNS Records
The DSfW team has a great tool called check-dns.pl to help diagnose DNS issue with DSfW.
The tool validates essential records for forward and reverse lookups. This tool can be found at Novell Coolsolutions.
The tool might incorrectly report PDC and DC records if there is more than one Domain Controller. The Coolsolutions article will be updated with a new check-dns.pl to address this issue.
Until the Coolsolutions article is updated you can download it from dsfwdude.com.
Download
September 2012 Maintenance for OES2SP3 is released
September 2012 Maintenance patch for OES2P3 has been released
Key DSfW specific bugs fixed with this maintenance patch
- – 667829: On Win2K8 R2 client joined to DSfW domain fails to create xen Desktop image from xendesktop studio
- – 723878: Normal Domain Users have all filesystem rights to new GPOs with Oes2Sp3
- -736413: DSfW – Apple OSX Compatibility: memberOf query returns incorrect groupmembership results
- – 736414: DSfW – Apple OSX Compatibility: ObjectSid queries return incorrect results
- – 737877: CIFS- Support for CIFS invalid user name/password presented multiple times
- – 738031: DSFW: Configuration of Windows 2008R2 Remote Desktop Licensing fails
- – 765721: DSfW – Apple OSX Compatibility: OSX 10.6.x mobile account login issues when attribute loginintruderaddress is populated for users
September 2012 Scheduled Maintenance for OES2SP3
- 583261: httpstkd randomly stops
- 667829: On Win2K8 R2 client joined to DSfW domain fails to create xen Desktop image from xendesktop studio
- 675596: oes-ldap not getting… Continue reading
Updated dsfw_processchk script 2.1.5
I updated the dsfw_processchk script to not only check all essential DSfW processes, but to handle multiple pids for the xadsd process. The script is great to use if you are worried that a DSfW process will stop and you don’t want to receive several phone calls alerting you to the problem or the DSfW server has been unstable you you need to time track down the invalid requests hitting the DSfW server.
The script will report which processes are running or have stopped. It works by validating that a PID exists for each process. If a process is not running the script has the option to restart the services, send an e-mail that a process has stopped, and update the syslog.
Key configuration
# Set RESTART_DSFW to 1 to reload DSfW services if one or service is not running,
# Set RESTART_DSFW to 0 to leave the services… Continue reading
VMWare and best practices for Timekeeping
Lately I’ve been getting a lot of requests for timekeeping best practices for VMWare
VMWare has a great support article on this. Below are the SLES recommendations. The article can be found here
| SLES 11 (All updates) | No additional kernel parameters required. | |
| SLES 10 SP4 on ESX 5.0 and later | clock=pmtmr hpet=disable |
|
| SLES 10 SP4 on ESX 4.x | Use a VMI enabled kernel. | |
| SLES 10 SP3 on ESXi 5.0 | clock=pmtmr hpet=disable |
|
| SLES 10 SP3 on ESX 3.5 and 4.x | Use a VMI enabled kernel. | |
| SLES 10 SP3 on ESX 3.0.x and earlier | clock=pmtmr hpet=disable |
|
| SLES 10 SP2 on ESXi 5.0 | clock=pmtmr hpet=disable |
|
| SLES 10 SP2 on ESX 3.5 and 4.x | Use a VMI enabled kernel. | |
| SLES 10 SP2 on ESX 3.0.x and earlier | clock=pmtmr hpet=disable |
|
| SLES 10 SP1 | clock=pmtmr hpet=disable |
|
| SLES 10 | clock=pmtmr hpet=disable |
|
| SLES 9 (All updates) | clock=pmtmr hpet=disable |
|
| SLES 8 | No additional kernel parameters required.… Continue reading |
Script to check if ports are listening
If you are concerned about a DSfW service going down and or the port is not accessible, this script will help keep the services up or notify you of a service going down. The script will check if each DSfW service is listening, then telnet to each port. If it can not telnet, the script will log which port is not accessable in the /var/opt/novell/xad/log/dsfw_portchk.log.
The dsfw_portchk.sh script can be ran on PDC or ADC, running Novell DNS or not running Novell DNS.
The script can also e-mail and restart the services if desired.
It will detect if the server has IPv6 enabled so to properly detect the correct port Samba and NetBios is listening on.
The script detects if Novell DNS is configured to start. Some times on ADC servers DNS is not configured or is not set to run. The original script… Continue reading
Script to check DSfW Processes
I have a updated script to check all essential DSfW processes. The name of the script is dsfw_processchk. The script is great to use if you are worried that a DSfW process will stop and you don’t want to receive several phone calls alerting you to the problem or the DSfW server has been unstable you you need to time track down the invalid requests hitting the DSfW server.
The script will report which processes are running or have stopped. It works by validating that a PID exists for each process. If a process is not running the script has the option to restart the services, send an e-mail that a process has stopped, and update the syslog.
Key configuration
# Set RESTART_DSFW to 1 to reload DSfW services if one or service is not running,
# Set RESTART_DSFW to 0 to leave the services… Continue reading
July 2012 Maintenance for OES2SP3 has been released
The July 2012 Maintenance Patch for oes2 sp3 has been release
The 64 bit version can be found here
The 32 bit version can be found here
List of bug fixes in the July 2012 Maintenance for OES2SP3
- 142091: Inconsistency with naming in the GUI
- 142183: Secrets added to Gnome Keyring through CASAManager have a default key/value pair of GKPassword/novell
- 146015: A CASAKeyring is created to add secrets to the Gnome Keyring through CASAManager
- 147031: CASAManager should have a menu item.
- 155529: Firefox Tab is available in CASAManager Preferences even if Firefox is not installed
- 172719: Starting CASAManager with store locked throws exception
- 200912: After a lun is resized gpt does not work correctly
- 508945: When micasad is stopped its status is displayed as “dead”
- 509471: miCASASetCredential handles input argument incorrectly
- 523398: CASA Manager prints GTK warning messages on terminal
- 523402: CASA Manager prints messages on terminal when… Continue reading
July 2012 Maintenance for OES2SP3 eDirectory 8.8 SP6 patch 6 released
The July 2012 Maintenance Patch for eDirectory 8.8 SP6 has been release
The 64 bit version can be found here
The 32 bit version can be found here
List of bug fixes in the July 2012 Maintenance for OES2SP3 for eDirectory patch 6
- – 679767: NMAS Client aborts NCP connection and returns error -625 immediately upon having sent NMAS Start Session request on an idle NCP connection where server sent Watchdog packets.
- – 733188: eDirectory returns error 48 ‘Anonymous Simple Bind Disabled’ for authenticated TLS bind
- – 749516: Dclient DDCGetSEVList function does not return cifs users GUID causing CIFS users authorization failure and Memory/CPU spike up.
- – 765688: Right granted to dynamic group is assigned to whole tree, not just its members
| novell-dclient-32bit-8.8.6.6-0.7.x86_64.rpm | 372.8 KB (381796) |
| novell-dclient-8.8.6.6-0.7.x86_64.rpm | 385.3 KB (394647) |
| novell-edirectory-jclnt-8.8.6.6-0.7.x86_64.rpm | 273.7 KB (280353) |
| novell-edirectory-ldap-extensions-32bit-8.8.6.3-0.11.x86_64.rpm | 28.2 KB (28933) |
| novell-edirectory-ldap-extensions-8.8.6.3-0.11.x86_64.rpm | 29.7 KB (30492) |
| novell-edirectory-tsands-32bit-8.8.6.6-0.7.x86_64.rpm | 257.4 KB… Continue reading |
How to find all DNS Locator objects
When installing DSfW into an environment were Novell DNS is already in use, be sure to use the existing DNS Locator object. It will simplify management for the all the zones and DNS servers. The locator object is used by the DNS/DHCP Console to return all zones and DNS servers the locator object knows about. If there are multiple locator objects then the first locator object discovered by the DNS/DHCP Console will be used. What will happen is only zones and DNS servers the DNS Loctor object knows about will be displayed and managed in the DNS/DHCP Console. This makes managing DNS difficult. Before installing doe a quick search for existing locator objects.
Do the following search to discover existing locator objects
ldapsearch -x -b “” -s sub objectClass=dNIPlocator
June 2012 OES2SP3 Hot Patch for NCP and FTP 8170
TID 5144804 (32 bit) and 5144805 (64 bit)
Files Included
ovell-libncputil-1.0.1-0.9.x86_64.rpm 12.4 KB (12788)
novell-libncputil-32bit-1.0.1-0.9.x86_64.rpm 12.5 KB (12825)
novell-ncpenc-5.1.5-0.65.x86_64.rpm 581.9 KB (595918)
novell-ncpns-5.3-0.20.x86_64.rpm 51.3 KB (52589)
novell-ncpserv-2.0.3-0.38.x86_64.rpm 847.5 KB (867866)
novell-ncpserv-nrm-2.0.3-0.25.i586.rpm 341.1 KB (349309)
novell-ncpserv-tools-2.0.3-0.38.x86_64.rpm 182.6 KB (187033)
novell-pure-ftpd-config-1.1.0-0.12.x86_64.rpm 7.4 KB (7647)
June 2012 OES2SP3 Hot Patch for NCP and FTP
- – 612700: pure-ftpd seg fault if init script contains PRELOAD line for libldapsdk.so
- – 612452: Restore of NSS metadata fails via xattr when there are no local replica on the server
- – 745847: AFP core for MapGUIDToID function call
- – 747903: NSS: NSSMU throws error 23388 during volume creation
- – 748802: viewing user quotas from iManager give CIMOM error after deleting the user having quota
- – 749428: SMS Backup Performance degradation after OES2 SP2 to SP3 upgrade
- – 755875: zERR\_USER\_ABORTED when trying to update eDirectory for pool object
- – 756027: OES2SP3 – segfault in adminusd
OES2 SP3 March 2012 Maintenance Patch released
March 2012 Scheduled Maintenance for OES2 SP3
TID 5137450
Here are a list of bug fixes in the patch
- – 520981: Disable Login does not work if the source server is OES Linux
- – 612452: Restore of NSS metadata fails via xattr when there are no local replica on the server
- – 637743: NCPCON NSS VERIFY shows trustee differences after moving a volume from NetWare to Linux
- – 647600: OES2SP2 ncpcon log level ALL
- – 666858: Dynamic DNS update for a Windows 7 or Windows 2008R2 WS fails
- – 668859: Directory quotas incorrectly displayed.
- – 681363: Samify Objects fails on NetWare License Object
- – 681567: VLOG does not have any option to specify a different location for stream files
- – 685243: ndsd core stack in GetVolInfo()
- – 687449: Copying files across mounted volumes fails with a -50 error on Mac Clients
- – 692761: CIFS quits working and service needs… Continue reading
Prepare to install an ADC DSfW server
This video will go through the preparation of installing an ADC DSfW server. It will guide you through TID 7009927.
Prepare and Install Novell’s Domain Services for Windows
TID 7002172 provides steps to follow to ensure a successful install.