1. Manuals
  2. Brands
  3. Novell Manuals
  4. Software
  5. EDIRECTORY 8.8 SP5
  6. Installation manual

Novell EDIRECTORY 8.8 SP5 Installation Manual

Hide thumbs Also See for EDIRECTORY 8.8 SP5:
Table of Contents

Advertisement

Quick Links

Download this manual See also: Administration Manual, Manual
AUTHORIZED DOCUMENTATION
Installation Guide
Novell
®
eDirectory
TM
8.8 SP5
December 02, 2009
www.novell.com
Novell eDirectory 8.8 Installation Guide

Advertisement

Table of Contents
loading

Related Manuals for Novell EDIRECTORY 8.8 SP5

Summary of Contents for Novell EDIRECTORY 8.8 SP5

  • Page 1 AUTHORIZED DOCUMENTATION Installation Guide Novell ® eDirectory 8.8 SP5 December 02, 2009 www.novell.com Novell eDirectory 8.8 Installation Guide...
  • Page 2 Further, Novell, Inc. reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to notify any person or entity of such changes.
  • Page 3 Novell is a registered trademark of Novell, Inc., in the United States and other countries. Novell Client is a trademark of Novell, Inc. Novell Directory Services and NDS are registered trademarks of Novell, Inc., in the United States and other countries.
  • Page 4 Novell eDirectory 8.8 Installation Guide...

  • Page 5: Table Of Contents

    Disk Space Check on Upgrading to eDirectory SP5 or later ......14 Installing or Upgrading Novell eDirectory on NetWare....... 14 1.6.1...
  • Page 6 Nonroot user SNMP configuration ........74 4 Installing or Upgrading Novell eDirectory on Solaris System Requirements .
  • Page 7 8.1.3 Using the nmasinst Utility to Configure Novell Modular Authentication Service . . . 118 Configuration Parameters ........... 118 Security Considerations .
  • Page 8 Novell Service Location Providers ........

  • Page 9: About This Book

    Chapter 6, “Relocating the DIB,” on page 109 Chapter 7, “Upgrade Requirements of eDirectory 8.8,” on page 111 Chapter 8, “Configuring Novell eDirectory on Linux, Solaris, or AIX Systems,” on page 117 Chapter 11, “Uninstalling Novell eDirectory,” on page 133 Chapter 12, “eDirectory Instrumentation,”...
  • Page 10 ® A trademark symbol ( , etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party trademark. When a single pathname can be written with a backslash for some platforms or a forward slash for other platforms, the pathname is presented with a backslash. Users of platforms that require a forward slash, such as Linux* and UNIX*, should use forward slashes as required by your software.

  • Page 11: Installing Or Upgrading Novell Edirectory On Netware

    Section 1.3, “Hardware Requirements,” on page 1.2 Prerequisites IMPORTANT: Check the currently installed Novell and Third Party applications to determine if eDirectory 8.8 is supported before upgrading your existing eDirectory environment. You can find out the current status for Novell products in the TID - What Novell products are supported with Novell eDirectory 8.8? (http://www.novell.com/support/php/...

  • Page 12: Hardware Requirements

    Static IP address must be configured on the server for the eDirectory to perform efficiently. Configuring eDirectory on the servers with DHCP address can lead to unpredictable results. 1.3 Hardware Requirements Hardware requirements depend on the specific implementation of eDirectory. Novell eDirectory 8.8 Installation Guide...

  • Page 13: Forcing The Backlink Process To Run

    Two factors increase performance: more cache memory and faster processors. For best results, cache as much of the DIB Set as the hardware allows. eDirectory scales well on a single processor. However, Novell eDirectory 8.7 took advantage of multiple processors. Adding processors improves performance in some areas—for example, logins and having multiple threads active on multiple processors.

  • Page 14: Disk Space Check On Upgrading To Edirectory Sp5 Or Later

    1.6 Installing or Upgrading Novell eDirectory on NetWare This section contains the following information: “Installing or Upgrading Novell eDirectory 8.8 on NetWare” on page 14 “Server Health Checks” on page 15 “Installing NMAS Server Software” on page 15 “Installing NMAS Client Software” on page 16 “Installing into a Tree with Dotted Name Containers”...

  • Page 15: Server Health Checks

    NOTE: In eDirectory 8.8 and later, you can have case sensitive passwords for all the utilities. Refer to Novell eDirectory 8.8 What's New Guide (http://www.novell.com/documentation/ edir88/index.html) for more information. 6 In the LDAP Configuration screen, specify which LDAP ports to use, then click Next.

  • Page 16: Installing Nmas Client Software

    For example: O=novell\.com You cannot start a name with a dot. For example, you cannot create a container named “.novell” because it starts with a dot (‘.’). IMPORTANT: If your tree has containers with dotted names, you must escape those names when logging into utilities such as iMonitor, iManager, and DHost iConsole.

  • Page 17: Unattended Upgrade To Edirectory 8.8 Sp5 On Netware

    1 Import the applicable SPK into ConsoleOne. 2 To do this, right click on the Server Software Packages name space and select Insert New Package (see Figure 1-2). Adding the package into ConsoleOne Figure 1-2 Installing or Upgrading Novell eDirectory on NetWare...
  • Page 18 These are the only two fields that need to be edited. Leave the values of rest of the variables as defined. Novell eDirectory 8.8 Installation Guide...
  • Page 19 Remove. Choose “Add File” by right clicking on the File Group as given below: Adding the source to the SPK Figure 1-5 4 Then select the “eDir88” folder that contains the source files that are delivered along with the SPK as given below: Installing or Upgrading Novell eDirectory on NetWare...
  • Page 20 IMPORTANT: This script contains the admin username and password in clear text in a temporary file until the server is automatically restarted and used to start nwconfig again. Soon after the script is called, this temporary file <NDS8.NCF> and the script files are deleted permanently from the system. Novell eDirectory 8.8 Installation Guide...

  • Page 21: Remote Installation Or Upgrade

    XServer Console to choose the NMAS methods to be installed. In this case, you could choose "Yes-Remote", which by default installs all NMAS methods without any further indications in the System Console. NOTE: The Installer will restart the server once the installation is complete. Installing or Upgrading Novell eDirectory on NetWare...
  • Page 22 Novell eDirectory 8.8 Installation Guide...

  • Page 23: Installing Or Upgrading Novell Edirectory On Windows

    IMPORTANT: Novell eDirectory 8.8 lets you install eDirectory for Windows without the Novell Client . If you install eDirectory 8.8 on a machine already containing the Novell Client, eDirectory will use the existing Client. For more information, see “Installing or Updating Novell eDirectory 8.8 on a Windows Server”...

  • Page 24: Prerequisites

    2.2 Prerequisites IMPORTANT: Check the currently installed Novell and Third Party applications to determine if eDirectory 8.8 is supported before upgrading your existing eDirectory environment. You can find out the current status for Novell products in the TID - What Novell products are supported with Novell eDirectory 8.8? (http://www.novell.com/support/php/...

  • Page 25: Hardware Requirements

    Two factors increase performance: more cache memory and faster processors. For best results, cache as much of the DIB Set as the hardware allows. eDirectory scales well on a single processor. However, Novell eDirectory 8.8 takes advantage of multiple processors. Adding processors improves performance in some areas—for example, logins and having multiple threads active on multiple processors.

  • Page 26: Forcing The Backlink Process To Run

    111. 2.6 Installing Novell eDirectory on Windows This section contains the following information: “Installing or Updating Novell eDirectory 8.8 on a Windows Server” on page 27 “Server Health Checks” on page 28 “Communicating with eDirectory through LDAP” on page 29 “Installing NMAS Server Software”...

  • Page 27: Installing Or Updating Novell Edirectory 8.8 On A Windows Server

    2.6.1 Installing or Updating Novell eDirectory 8.8 on a Windows Server You can install eDirectory 8.8 for Windows without the Novell Client. If you install eDirectory 8.8 on a machine already containing the Novell Client, eDirectory will use the existing Client, or update it if it is not the latest version.

  • Page 28: Server Health Checks

    HTTP server, then click Next. IMPORTANT: Make sure that the HTTP stack ports you set during the eDirectory installation are different than the HTTP stack ports you have used or will use for Novell iManager. For more information, see the Novell iManager 2.6 Administration Guide (http://www.novell.com/...

  • Page 29: Communicating With Edirectory Through Ldap

    To disallow clear passwords and other data, select the Require TLS for Simple Bind with Password option during installation. As the following figure illustrates, the page gives defaults of 389, 636, and Require TLS for Simple Bind with Password. Installing or Upgrading Novell eDirectory on Windows...
  • Page 30 No one can view passwords, data packets, or bind requests. Port 636, the Industry-Standard Secure Port The connection through port 636 is encrypted. TLS (formerly SSL) manages the encryption. By default, the eDirectory installation selects this port. The following figure illustrates the selected port. Novell eDirectory 8.8 Installation Guide...
  • Page 31 LDAP server does not service requests on any duplicated port. If you are not certain that port 389 or 636 is assigned to the Novell LDAP server, run the ICE utility.

  • Page 32: Installing Nmas Server Software

    Novell iMonitor can also report that port 389 or 636 is already open. If the LDAP server isn't working, use Novell iMonitor to identify details. See Verifying That The LDAP Server Is Running (http://www.novell.com/documentation/edir88/edir88/data/ai8wt35.html) in the Novell eDirectory 8.8 Administration Guide for more information.
  • Page 33 IMPORTANT: If your tree has containers with dotted names, you must escape those names when logging into utilities such as iMonitor, iManager, and DHost iConsole. For example, if your tree has “novell.com” as the name of the O, enter username.novell\.com in the Username field when logging in to iMonitor (see Figure 2-4).

  • Page 34: Unattended Install And Upgrade To Edirectory 8.8 Sp5 On Windows

    When editing the file, ensure there are no response.ni blank spaces between the key and the values along with the equals sign ("=") in each key-value pair. Novell eDirectory 8.8 Installation Guide...
  • Page 35 For example, if the server being installed is 'EDIR-TEST-SERVER', the value for this parameter will be "EDIR-TEST-SERVER.Novell" if the Server container is ‘Novell’. Tree Name: For a primary server installation, this is the name of the tree that needs to installed;...
  • Page 36 This parameter must be configured with the path to the system folder of the machine where the server is installed. For example: [Novell:SYS32_DST:1.0.0_Location] Path=file:/C:\WINNT\system32 The following screen appears when the server collects the above parameters from the response file. Novell eDirectory 8.8 Installation Guide...
  • Page 37 NOTE: The method names should exactly match those listed in the above table, as options to the Methods key. The Installer matches the exact string (with case) for choosing the NMAS methods to install. Installing or Upgrading Novell eDirectory on Windows...
  • Page 38 Require TLS: Whether eDirectory should mandate TLS when receiving LDAP requests in clear text. Novell eDirectory 8.8 Installation Guide...
  • Page 39 DisplayLangauge key in the [Initialization] tag. DisplayLanguage: This key is in the section. Its parameters configure [Initialization] languages. The following is sample text in the response file for configuring English as the display language: [Initialization] DisplayLanguage=en_US Installing or Upgrading Novell eDirectory on Windows...
  • Page 40 ExistingTreeYes: This key is in the tag. Set it to True/ [Novell:ExistingTree:1.0.0] false. Set this to False for a new tree or primary server installation and set it to True for a secondary server in an existing tree. Novell eDirectory 8.8 Installation Guide...
  • Page 41 File Copy Tag: This tag contains keys for display settings that are handled in the next section, including the file copy profile information: overWriteNewerFile=false overWriteNewerFilePrompt=true copyToRemoteDestination=true These options specify the response from the eDirectory Installer in scenarios such as file write conflicts, file copying decisions, etc. Installing or Upgrading Novell eDirectory on Windows...
  • Page 42 There are corresponding on/off parameters for each of these configurations. For example: The welcomeScreen parameter is controlled by showWelcomeScreen=true/false Novell eDirectory 8.8 Installation Guide...
  • Page 43 Assuming that file is available in , the command is: response.ni C:\eDirectory\nt\I386\NDSonNT\install.exe /silent /template=C:\response.ni This performs an unattended installation of eDirectory on the Windows server. Installing or Upgrading Novell eDirectory on Windows...
  • Page 44 Novell eDirectory 8.8 Installation Guide...

  • Page 45: Installing Or Upgrading Novell Edirectory On Linux 3.1 System Requirements

    Installing or Upgrading Novell eDirectory on Linux ® Use the following information to install or upgrade Novell eDirectory 8.8 on a Linux* server: Section 3.1, “System Requirements,” on page 45 Section 3.2, “Prerequisites,” on page 47 Section 3.3, “Hardware Requirements,” on page 48 Section 3.4, “Forcing the Backlink Process to Run,”...
  • Page 46 For registering and updating SUSE Linux Enterprise 10, refer to Registering SUSE Linux Enterprise 10 with the Novell Customer Center (http://support.novell.com/ techcenter/articles/RegandUpdate_SLE10.html). After installating the latest update, ensure that the minimum patch level of the installed update is 3.0.2_09763-0.8. To determine the version of SUSE Linux you are running, see the /etc/SuSE-release file.

  • Page 47: Prerequisites

    3.2 Prerequisites IMPORTANT: Check the currently installed Novell and Third Party applications to determine if eDirectory 8.8 is supported before upgrading your existing eDirectory environment. You can find out the current status for Novell products in the TID - What Novell products are supported with Novell eDirectory 8.8? (http://www.novell.com/support/php/...

  • Page 48: Hardware Requirements

    For best results, cache as much of the DIB Set as the hardware allows. eDirectory scales well on a single processor. However, Novell eDirectory 8.8 takes advantage of multiple processors. Adding processors improves performance in some areas — for example, logins —...

  • Page 49: Forcing The Backlink Process To Run

    Processes such as encryption and indexing can be processor intensive. 3.4 Forcing the Backlink Process to Run Because the internal eDirectory identifiers change when upgrading to Novell eDirectory, the backlink process must update backlinked objects for them to be consistent.

  • Page 50: Server Health Checks

    NOTE: "ndsconfig upgrade" has to be run after nds-install, if upgrade of the DIB fails and nds- install asks to do so. NOTE: Health check fails due to time sync. To resolve this issue, perform a time sync between the instances. You can ignore this warning message during upgrade. Novell eDirectory 8.8 Installation Guide...

  • Page 51: Upgrading Edirectory On Existing Oes

    $NDSHOME/eDirectory/etc/opt/novell/eDirectory/conf/ice.conf $NDSHOME/eDirectory/etc/opt/novell/eDirectory/conf/ndsimonhealth.conf $NDSHOME/eDirectory/etc/opt/novell/eDirectory/conf/ndssnmp/ndssnmp.cfg $NDSHOME is the location where eDirectory is installed. 3 For upgrade of eDirectory versions lower than 8.8 SP1, do the following: Perform disk space check using ndscheck -D --config-file conf_file_path Installing or Upgrading Novell eDirectory on Linux...

  • Page 52: Upgrading Multiple Instances

    R/W and others. 3.5.6 Upgrading Multiple Instances This section contains the following information: “Root User has Multiple Instances” on page 53 Novell eDirectory 8.8 Installation Guide...

  • Page 53: Disk Space Check On Upgrading To Edirectory Sp5

    If you run nds-install after doing the package upgrade, it will prompt you asking “The DIB of all the Novell eDirectory Server instances need to be upgraded. This may take long time to complete. If you wish to perform the DIB upgrade parallely, you could do it manually (Refer the readme). Do you wish to continue with the DIB upgrade for all the active instances one by one?”...

  • Page 54: Using Slp With Edirectory

    # This is an example of a hosts.nds file: # Tree name Internet address/DNS Resolvable Name CORPORATE. myserver.mycompany.com novell.CORPORATE. 1.2.3.4:524 # Server name Internet address CORPSERVER myserver.mycompany.com See the man page for more details. hosts.nds Novell eDirectory 8.8 Installation Guide...

  • Page 55: Using The Nds-Install Utility To Install Edirectory Components

    [-u] If you do not provide the required parameters in the command line, the nds-install utility will prompt you for the parameters. The following table provides a description of the nds-install utility parameters: Installing or Upgrading Novell eDirectory on Linux...
  • Page 56 To install the server, enter -c server To install the administration utilities, enter -c admutils For example, to install Novell eDirectory Server packages, you would enter the following command: ./nds-install -c server -h or --help Displays help for nds-install.
  • Page 57 4 After the installation is complete, you need to update the following environment variables and export them. You can either do it manually or use a script. Manually export the environment variables For 32-bit export LD_LIBRARY_PATH=/opt/novell/eDirectory/lib:/opt/novell/ eDirectory/lib/nds-modules:/opt/novell/lib:$LD_LIBRARY_PATH For 64-bit export LD_LIBRARY_PATH=/opt/novell/eDirectory/lib64:/opt/novell/ eDirectory/lib64/nds-modules:/opt/novell/lib64:$LD_LIBRARY_PATH Installing or Upgrading Novell eDirectory on Linux...

  • Page 58: Nonroot User Installing Edirectory 8.8

    You can use the ndsconfig utility to configure eDirectory Server after installation. Novell Modular Authentication Service (NMAS ) is installed as part of the server component. By default, ndsconfig configures NMAS. You can also use the nmasinst utility to configure NMAS server after installation.
  • Page 59 2 Edit the configuration file using the visudo command. /etc/sudoers NOTE: There is no space between vi and sudo in the command. Make an entry with the following information: Username hostname=(root) NOPASSWD: /bin/rpm Installing or Upgrading Novell eDirectory on Linux...
  • Page 60 3 Export the paths as follows: Manually export the environment variables For 32-bit export LD_LIBRARY_PATH=custom_location/eDirectory/opt/novell/ eDirectory/lib:custom_location/eDirectory/opt/novell/eDirectory/ lib/nds-modules:custom_location/eDirectory/opt/novell/ lib:$LD_LIBRARY_PATH export PATH=custom_location/eDirectory/opt/novell/eDirectory/ bin:custom_location/eDirectory/opt/novell/eDirectory/sbin:/opt/ novell/eDirectory/bin:$PATH export MANPATH=custom_location/eDirectory/opt/novell/ man:custom_location/eDirectory/opt/novell/eDirectory/man:$MANPATH export TEXTDOMAINDIR=custom_location/eDirectory/opt/novell/ eDirectory/share/locale:$TEXTDOMAINDIR For 64-bit export LD_LIBRARY_PATH=custom_location/eDirectory/opt/novell/ eDirectory/lib64:custom_location/eDirectory/opt/novell/eDirectory/ lib64/nds-modules:custom_location/eDirectory/opt/novell/ lib64:$LD_LIBRARY_PATH Novell eDirectory 8.8 Installation Guide...
  • Page 61 <interface1@port1>, <interface2@port2>,..] [-D <custom_location>] [-- config-file <configuration_file>] For example: ndsconfig new -t mary-tree -n novell -a admin.novell -S linux1 -d / home/mary/inst1/data -b 1025 -L 1026 -l 1027 -o 1028 -O 1029 -D /home/ mary/inst1/var --config-file /home/mary/inst1/nds.conf The port numbers you enter need to be in the range 1024 to 65535. Port numbers lesser than 1024 are normally reserved for the super-user and standard applications.

  • Page 62: Using The Ndsconfig Utility To Add Or Remove The Edirectory Replica Server

    FDN: 256 characters server FDN: 256 characters If the parameters are not specified in the command line, ndsconfig prompts you to enter values for each of the missing parameters. Or, you can also use the following syntax: Novell eDirectory 8.8 Installation Guide...
  • Page 63 NOTE: The HTML files created using iMonitor will not be removed. You must manually remove these files from before removing eDirectory. /var/opt/novell/eDirectory/data/dsreports For example, to remove the eDirectory Server object and directory services from a tree, you could enter the following command: ndsconfig rm -a cn=admin.o=company Installing or Upgrading Novell eDirectory on Linux...
  • Page 64 For example, to install a new eDirectory tree on a UNIX server using “novell.com” as the name of the O, use the following command: ndsconfig new -a "admin.novell\\.com"...
  • Page 65 LDAP, SAS, SNMP, HTTP services, and Novell SecretStore (ss) using the add command. If the module name is not specified, all the modules are installed. NOTE: If you do not want to configure Novell SecretStore, you can pass the ‘no_ss’...
  • Page 66 When configuration parameters are changed, ndsd needs to be restarted for the new value to take effect. get paramlist Use to view the current value of the specified eDirectory configurable parameters. If the parameter list is not specified, ndsconfig lists all the eDirectory configurable parameters. Novell eDirectory 8.8 Installation Guide...

  • Page 67: Using Ndsconfig To Configure Multiple Instances Of Edirectory 8.8

    “Creating an Instance through ndsmanage” on page 68 “Performing Operations for a Specific Instance” on page 69 The ndsmanage Utility The ndsmanage utility enables you to do the following: List the instances configured Installing or Upgrading Novell eDirectory on Linux...
  • Page 68 Figure 3-1 on page 69 for more information. Creating an Instance through ndsmanage To create a new instance through ndsmanage: 1 Enter the following command: ndsmanage If you have two instances configured, the following screen is displayed: Novell eDirectory 8.8 Installation Guide...
  • Page 69 To start an instance configured by you, do the following: 1 Enter the following: ndsmanage 2 Select the instance you want to start. The menu expands to include the options you can perform on a specific instance. Installing or Upgrading Novell eDirectory on Linux...
  • Page 70 2 Select the instance you want to deconfigure. The menu expands to include the options you can perform on a specific instance. For more information, refer to ndsmanage Utility Output Screen with Instance Options (page 70). 3 Enter to deconfigure the instance. Novell eDirectory 8.8 Installation Guide...
  • Page 71 To configure the instances based on the above mentioned instance identifiers, Mary must enter the following commands. Instance 1: ndsconfig new -t mytree -n o=novell -a cn=admin.o=company -b 1524 -D /home/mary/inst1/var --config-file /home/mary/inst1/nds.conf Instance 2: ndsconfig new -t corptree -n o=novell -a cn=admin.o=company -b 2524 -D /home/mary/inst2/var --config-file /home/mary/inst2/nds.conf...

  • Page 72: Using Ndsconfig To Install A Linux Server Into A Tree With Dotted Name Containers

    For example, to install a new eDirectory tree on a Linux server using “O=novell.com” as the name of the O, use the following command: ndsconfig new -a 'admin.novell.com' -t novell_tree -n 'OU=servers.O=novell.com'...

  • Page 73: Using The Nmasinst Utility To Configure Nmas

    -addmethod admin.novell MY_TREE ./nmas-methods/novell/Simple Password/config.txt If the login method already exists, nmasinst will update it. For more information, see “Managing Login and Post-Login Methods and Sequences” (http:// www.novell.com/documentation/beta/nmas30/admin/data/a53vj9a.html) in the Novell Modular Authentication Service Administration Guide. Installing or Upgrading Novell eDirectory on Linux...

  • Page 74: Nonroot User Snmp Configuration

    -ivh --nodeps NOVLsubag_rpm_file_name_with_path For example: rpm -ivh --nodeps novell-NOVLsubag-8.8.1-5.i386.rpm 3 Export the paths as follows: Manually export the environment variables. For 32-bit export LD_LIBRARY_PATH=custom_location/opt/novell/ eDirectory/lib:custom_location/opt/novell/lib:/opt/novell/lib:/ opt/novell/eDirectory/lib:$LD_LIBRARY_PATH For 64-bit export LD_LIBRARY_PATH=custom_location/opt/novell/eDirectory/lib64:/ opt/novell/eDirectory/lib64/nds-modules:/opt/novell/ lib64:$LD_LIBRARY_PATH export PATH=/opt/novell/eDirectory/bin:$PATH export MANPATH=/opt/novell/man:$MANPATH Novell eDirectory 8.8 Installation Guide...

  • Page 75: Installing Or Upgrading Novell Edirectory On Solaris

    Installing or Upgrading Novell eDirectory on Solaris ® Use the following information to install or upgrade Novell eDirectory 8.8 on a Solaris* server: Section 4.1, “System Requirements,” on page 75 Section 4.2, “Prerequisites,” on page 76 Section 4.3, “Hardware Requirements,” on page 77 Section 4.4, “Forcing the Backlink Process to Run,”...

  • Page 76: Prerequisites

    4.2 Prerequisites IMPORTANT: Check the currently installed Novell and Third Party applications to determine if eDirectory 8.8 is supported before upgrading your existing eDirectory environment. You can find out the current status for Novell products in the TID - What Novell products are supported with Novell eDirectory 8.8? (http://www.novell.com/support/php/...

  • Page 77: Hardware Requirements

    For best results, cache as much of the DIB Set as the hardware allows. eDirectory scales well on a single processor. However, Novell eDirectory 8.8 takes advantage of multiple processors. Adding processors improves performance in some areas—for example, logins and having multiple threads active on multiple processors.

  • Page 78: Forcing The Backlink Process To Run

    Processes such as encryption and indexing can be processor intensive. 4.4 Forcing the Backlink Process to Run Because the internal eDirectory identifiers change when upgrading to Novell eDirectory, the backlink process must update backlinked objects for them to be consistent.

  • Page 79: Upgrading Multiple Instances

    “Upgrading the Tarball Deployment of eDirectory 8.8,” on page 51 in the Linux chapter. 4.6 Installing eDirectory The following sections provide information about installing Novell eDirectory on Solaris: Section 4.6.1, “Server Health Checks,” on page 79 Section 4.6.2, “Using SLP with eDirectory,” on page 80 Section 4.6.3, “Using the Nds-install Utility to Install eDirectory Components,”...

  • Page 80: Using Slp With Edirectory

    If you decide to use SLP to resolve the tree name to determine if the eDirectory tree is advertised, after eDirectory and SLP are installed, enter the following: /usr/bin/slpinfo -s "ndap.novell///(svcname-ws==[treename or *])" For example, to search for the services whose svcname-ws attribute match with the value SAMPLE_TREE, enter the following command: /usr/bin/slpinfo -s "ndap.novell///(svcname-ws==SAMPLE_TREE)/"...

  • Page 81: Using The Nds-Install Utility To Install Edirectory Components

    There are two components you can install, the eDirectory server and the eDirectory administration utilities. To install the server, enter -c nds. To install the administration utilities, enter -c adminutils. For example, to install Novell eDirectory Server packages, you would enter the following command: ./nds-install -c server -n /var Displays help for nds-install.
  • Page 82 “Using the Nmasinst Utility to Configure NMAS” on page 4 After the installation is complete, you need to update the following environment variables and export them as follows: Manually export the environment variables 32-bit: export LD_LIBRARY_PATH=/opt/novell/eDirectory/lib:/opt/novell/eDirectory/ lib/nds-modules:/opt/novell/lib:$LD_LIBRARY_PATH Novell eDirectory 8.8 Installation Guide...

  • Page 83: Nonroot User Installing Edirectory 8.8

    NICI, though the procedure to do so is different. Root User Installing NICI To install NICI, complete the following procedure: 1 Enter the following command: 32-bit: pkgadd -d NICI_package_absolute_path_and_filename NOVLniu0 For example: pkgadd -d /home/build/Solaris/Solaris/setup/NOVLniu0.pkg NOVLniu0 Installing or Upgrading Novell eDirectory on Solaris...
  • Page 84 2 Execute the following script: sudo /var/opt/novell/nici/set_server_mode NICI gets installed in the server mode. Installing eDirectory 1 Go to the directory where you want to install eDirectory . 2 Untar the tar file as follows: tar xvf /tar_file_name Novell eDirectory 8.8 Installation Guide...
  • Page 85 [-D custom_location] [--config- file configuration_file] For example: ndsconfig new -t mary-tree -n novell -a admin.novell -S linux1 -d / home/mary/inst1/data -b 1025 -L 1026 -l 1027 -o 1028 -O 1029 -D /home/ mary/inst1/var --config-file /home/mary/inst1/nds.conf Installing or Upgrading Novell eDirectory on Solaris...

  • Page 86: Installing Edirectory 8.8 On Solaris 10 Zones

    A small zone is the default zone that consumes the least disk space. It is high performing and highly secure. NOTE: Before installing eDirectory on a small zone, NICI should be installaed on the global zone. For information on installing NICI, refer to “Installing NICI” on page 59 Novell eDirectory 8.8 Installation Guide...

  • Page 87: Using The Ndsconfig Utility To Add Or Remove The Edirectory Replica Server

    [-d path for dib] [-m module] [e] [-L ldap port] [-l SSL port] [-o http port] -O https port] [-b port to bind] [-B interface1@port1, interface2@port2,..] [-D custom_location] [--config-file configuration_file] A new tree is installed with the specified tree name and context. Installing or Upgrading Novell eDirectory on Solaris...
  • Page 88 You can enable encrypted replication in the server you want to add using the -E option. For more information on encrypted replication, refer to Novell eDirectory 8.8 Administration Guide (http:// www.novell.com/documentation/edir88/index.html). Removing a Server Object and Directory Services from a Tree...

  • Page 89: Using Ndsconfig To Configure Multiple Instances Of Edirectory 8.8

    For example, to install a new eDirectory tree on a Solaris server using “O=novell.com” as the name of the O, use the following command: ndsconfig new -a “admin.novell\.com”...

  • Page 90: Nonroot User Snmp Configuration

    A config.txt config.txt file is provided with each login method. Here is an example of the -addmethod command: nmasinst -addmethod admin.novell MY_TREE ./nmas-methods/novell/Simple Password/config.txt If the login method already exists, nmasinst will update it. For more information, see “Managing Login and Post-Login Methods and Sequences”...
  • Page 91 3 Export the paths as follows: Manually export the environment variables. 32-bit: export LD_LIBRARY_PATH= custom_location/opt/novell/eDirectory/ lib:custom_location/opt/novell/lib:/opt/novell/lib:/ opt/novell/eDirectory/lib:$LD_LIBRARY_PATH 64-bit: export LD_LIBRARY_PATH= custom_location/opt/novell/ eDirectory/lib/ sparcv9:custom_location/opt/novell/lib/sparcv9:/opt/novell/lib/sparcv9:/ opt/novell/eDirectory/lib/sparcv9:$LD_LIBRARY_PATH export PATH=/opt/novell/eDirectory/bin:$PATH export MANPATH=/opt/novell/man:$MANPATH Installing or Upgrading Novell eDirectory on Solaris...
  • Page 92 Novell eDirectory 8.8 Installation Guide...

  • Page 93: Installing Or Upgrading Novell Edirectory On Aix

    150 MB of disk space for every 50,000 users 5.2 Prerequisites IMPORTANT: Check the currently installed Novell and Third Party applications to determine if eDirectory 8.8 is supported before upgrading your existing eDirectory environment. You can find out the current status for Novell products in the TID - What Novell products are supported with Novell eDirectory 8.8? (http://www.novell.com/support/php/...
  • Page 94 In case, if you have enabled user-defined ports, you must mention these ports while configuring eDirectory. Configuring Static IP Address Refer to “Configuring Static IP Address” on page 12 for more information on configuring static IP addresses. Novell eDirectory 8.8 Installation Guide...

  • Page 95: Hardware Requirements

    Hardware requirements depend on the specific implementation of eDirectory. For example, a base installation of Novell eDirectory with the standard schema requires about 74 MB of disk space for every 50,000 users. However, if you add a new set of attributes or completely fill in every existing attribute, the object size grows.

  • Page 96: Upgrading Multiple Instances

    “Upgrading the Tarball Deployment of eDirectory 8.8,” on page 51 in the Linux chapter. 5.6 Installing eDirectory The following sections provide information about installing Novell eDirectory on AIX: Section 5.6.1, “Server Health Checks,” on page 97 Section 5.6.2, “Using SLP with eDirectory,” on page 97 Section 5.6.3, “Using the Nds-install Utility to Install eDirectory Components,”...

  • Page 97: Server Health Checks

    “Using SLP with eDirectory” on page 54 and the hosts.nds manpage. If you decide to use SLP to resolve the tree name to determine if the eDirectory tree is advertised, after eDirectory and SLP are installed, enter the following: Installing or Upgrading Novell eDirectory on AIX...

  • Page 98: Using The Nds-Install Utility To Install Edirectory Components

    There are two components you can install, the eDirectory server and the eDirectory administration utilities. To install the server, enter -c nds. To install the administration utilities, enter -c adminutils. For example, to install Novell eDirectory Server packages, you would enter the following command: ./nds-install -c server -n /var Displays help for nds-install.
  • Page 99 ) is installed as part of the server component. By default ndsconfig configures NMAS. You can also use the nmasinst utility to configure NMAS server after installation. This must be done after configuring eDirectory with ndsconfig. Installing or Upgrading Novell eDirectory on AIX...

  • Page 100: Nonroot User Installing Edirectory 8.8

    Write rights to the directory where you want to install eDirectory. If you are a nonadministrator user, ensure that you have the appropriate rights as mentioned in Section 5.2, “Prerequisites,” on page 93 section. 100 Novell eDirectory 8.8 Installation Guide...
  • Page 101 1 Log in as john and execute the following command: sudo installp -acgXd absolute_path_of_the_NICI_fileset NOVLniu0 For example: sudo installp -acgXd /home/build/AIX/AIX/setup/NOVLniu0.2.7.0.0 NOVLniu0 2 Execute the following script: sudo /var/opt/novell/nici/set_server_mode NICI gets installed in the server mode. Installing or Upgrading Novell eDirectory on AIX 101...
  • Page 102 4 Configure eDirectory in the usual manner. You can configure eDirectory in any of the following ways: Use the ndsconfig utility as follows: 102 Novell eDirectory 8.8 Installation Guide...

  • Page 103: Using The Ndsconfig Utility To Add Or Remove The Edirectory Replica Server

    [-D custom_location] [--config- file configuration_file] For example: ndsconfig new -t mary-tree -n novell -a admin.novell -S linux1 -d / home/mary/inst1/data -b 1025 -L 1026 -l 1027 -o 1028 -O 1029 -D /home/ mary/inst1/var --config-file /home/mary/inst1/nds.conf The port numbers you enter need to be in the range 1024 to 65535. Port numbers lesser than 1024 are normally reserved for the super-user and standard applications.
  • Page 104 You can enable encrypted replication in the server you want to add using the -E option. For more information on encrypted replication, refer to Novell eDirectory 8.8 Administration Guide (http:// www.novell.com/documentation/edir88/index.html). Removing a Server Object and Directory Services from a Tree...

  • Page 105: Using Ndsconfig To Configure Multiple Instances Of Edirectory 8.8

    For example, to install a new eDirectory tree on an AIX server using “O=novell.com” as the name of the O, use the following command: ndsconfig new -a “admin.novell\.com”...

  • Page 106: Nonroot User Snmp Configuration

    NICI and NOVLsubag should be installed as root user. 1 Root User Installing NICI. Refer to “Root User Installing NICI” on page 101. 2 Install NOVLsubag as root. 3 Export the paths as follows: 106 Novell eDirectory 8.8 Installation Guide...
  • Page 107 Manually export the environment variables. export LD_LIBRARY_PATH=custom_location/opt/novell/ eDirectory/lib:custom_location/opt/novell/lib:/opt/novell/lib:/ opt/novell/eDirectory/lib:$LD_LIBRARY_PATH export PATH=/opt/novell/eDirectory/bin:$PATH export MANPATH=/opt/novell/:$MANPATH Installing or Upgrading Novell eDirectory on AIX 107...
  • Page 108 108 Novell eDirectory 8.8 Installation Guide...

  • Page 109: Relocating The Dib

    Relocating the DIB ® After installing and configuring Novell eDirectory , if there is a need to relocate the DIB, you can do it. You might want to relocate your DIB for multiple reasons, such as, if the number of objects in the tree is expected to grow but the current file system where the DIB exists does not have sufficient space.

  • Page 110: Netware And Windows

    6.2 NetWare and Windows DIB relocation is currently not supported. However, on Windows you can locate the DIB in a custom location during the eDirectory installation. 110 Novell eDirectory 8.8 Installation Guide...

  • Page 111: Upgrade Requirements Of Edirectory

    Upgrade Requirements of eDirectory 8.8 One of the unique features of eDirectory is its ability to maintain the tight referential integrity. Any object Classes derived from Top will have a reference attribute in its class definition. This is a hidden attribute added to all the referenced objects that are internally maintained by eDirectory. Background processes keep running to check the links between the referenced object and the referencing objects.

  • Page 112: Reference Changes In 8.8 Sp1 Or Later Versions

    NOTE: Incase the administrator wants to run the utility and find out the status of the upgrade, this database upgrade tool can be used with a copy of the database or with option Unix/Linux NetWare Windows ndsdibupg dsdibupg.nlm ndsdibupg.exe 112 Novell eDirectory 8.8 Installation Guide...
  • Page 113 ndsdibupg Help Screen Figure 7-2 The following table discusses the ndsdibupg options. ndsdibupg Options Table 7-1 Option Description Quiet mode. There will not be any messages in quiet mode. Messages will be logged to log file ( if provided ) even in -q mode. It is recommended that you always provide a log file name for troubleshooting purpose.

  • Page 114: Performing A Dry Run Before Upgrading Edirectory

    Upgrade will require twice the size of the database since a copy needs to be taken. 114 Novell eDirectory 8.8 Installation Guide...

  • Page 115: Common Problems Encountered During The Upgrade Process

    Upgrade Process Figure 7-3 7.3.1 Common Problems Encountered during the Upgrade Process The following FAQ section discusses the common problems faced while upgrading from the previous versions of eDirectory to eDirectory 8.8. Question: I am upgrading from eDirectory 8.7.x to eDirectory 8.8. The upgrade process failed with an error.
  • Page 116 Answer: eDirectory maintains the reference attributes in a separate container in the database. The delay in the initial display is due to the time it takes FLAIM to delete the database container that holds the “Reference” attribute records. 116 Novell eDirectory 8.8 Installation Guide...

  • Page 117: Configuring Novell Edirectory On Linux, Solaris, Or Aix Systems

    “Using the ldapconfig Utility to Configure the LDAP Server and LDAP Group Objects” on page 117 “Using the nmasinst Utility to Configure Novell Modular Authentication Service” on page 118 8.1.1 The ndsconfig Utility You can use the ndsconfig utility to configure eDirectory. This utility can also be used to add the eDirectory Replica Server into an existing tree or to create a new tree.

  • Page 118: Using The Nmasinst Utility To Configure Novell Modular Authentication Service

    8.1.3 Using the nmasinst Utility to Configure Novell Modular Authentication Service For eDirectory 8.8, by default, ndsconfig configures NMAS. You can also use nmasinst on Linux, Solaris, and AIX systems to configure NMAS. ndsconfig only configures NMAS and does not install the login methods. To install these login methods, you can use nmasinst.
  • Page 119 Range=2 to 1440 n4u.nds.synchronization-restrictions The Off value allows synchronization with any version of the eDirectory. The On value restricts synchronization to version numbers you specify as parameters (for example, ON,420,421). Default=Off Configuring Novell eDirectory on Linux, Solaris, or AIX Systems 119...
  • Page 120 The eDirectory configuration files are placed here. Default= /etc n4u.server.vardir The eDirectory and utilities log files are placed here. Default= /var/opt/novell/eDirectory/log n4u.server.libdir The eDirectory specific libraries are placed here in the nds-modules directory. Default= /opt/novell/eDirectory/lib 120 Novell eDirectory 8.8 Installation Guide...
  • Page 121 LogFatal, LogWarn, LogErr, LogInfo, or LogDbg. n4u.server.log-file This parameter specifies the log file location where the messages would be logged. By default, the messages are logged into the ndsd.log file. Configuring Novell eDirectory on Linux, Solaris, or AIX Systems 121...
  • Page 122 Parameter Description n4u.ldap.lburp.transize Number of records that are sent from the Novell Import/ Export client to the LDAP server in a single LBURP packet. You can increase the transaction size to ensure that multiple add operations can be performed in a single request.

  • Page 123: Security Considerations

    By default, the cipher is set to Export. Make LDAP more secure by setting the cipher to HIGH. To do this, change the bind restrictions attribute of LDAP Server object to “Use Higher Cipher (greater than 128 bit )”. Configuring Novell eDirectory on Linux, Solaris, or AIX Systems 123...
  • Page 124 124 Novell eDirectory 8.8 Installation Guide...

  • Page 125: Migrating To Edirectory 8.8 Sp5

    Migrating to eDirectory 8.8 SP5 ® This document guides you to migrate your Novell eDirectory 8.7.3.x server to eDirectory 8.8 SP5 when you have to upgrade your operating system also. With the change in the operating systems supported in eDirectory 8.8 SP5, there are certain versions that eDirectory 8.8 SP5 does not support that were earlier supported with eDirectory 8.7.3.x.

  • Page 126: Migrating To Edirectory 8.8 Sp5 Without Upgrading The Operating System

    Complete the following steps to migrate to eDirectory 8.8 SP5: 1 Stop the eDirectory server 2 Take a backup of the following eDirectory 8.7.3.x files: directory directory (by default, this directory is present under the directory) nds.rfl file nds.conf 126 Novell eDirectory 8.8 Installation Guide...
  • Page 127 3 Install the operating system 4 Remove the nici folder from and restore the folder to /var/novell nici /var/opt/novell 5 Ensure that is pointing to /var/novell/nici /var/opt/novell/nici 6 Install eDirectory 8.8 SP5 on the server (a new install)
  • Page 128 128 Novell eDirectory 8.8 Installation Guide...

  • Page 129: Migrating Edirectory From Netware To Oes 2 Linux

    The following sections give you more details on the migration procedure for eDirectory. For more information, see the OES Migration Guide (http://www.novell.com/products/openenterpriseserver/ migrate.html). Section 10.1, “Planning Your Migration,” on page 129 Section 10.2, “Migration Tools,” on page 130 Section 10.3, “Migration Procedure,”...

  • Page 130: Supported Platforms

    The utility takes the following command line options: Option Description -s IP address Specifies the IP address of the source server containing the eDirectory instance to be migrated. IMPORTANT: -s is a mandatory parameter. 130 Novell eDirectory 8.8 Installation Guide...
  • Page 131 Option Description -A directory name Enables auditing. directory name specifies the directory in which log files should be created. Tests the validity of the input parameters. NOTE: This option verifies the IP address; however, it does not perform the actual migration. Enables the verbose mode.

  • Page 132: After The Migration

    2 Restore and unlock the database in the source server. Refer to Backup and Restore Command Line Options (http://www.novell.com/documentation/ edir88/edir88/data/agatd4y.html) for more information on how to unlock and restore the database.

  • Page 133: Uninstalling Novell Edirectory

    2 From the NetWare console, run NWCONFIG. 3 Select Product Options > Install a Product Not Listed. 4 Specify the location containing the Novell eDirectory 8.8 installation package. “Installing or Upgrading Novell eDirectory 8.8 on NetWare” on page 14 for more information.

  • Page 134: Uninstalling Edirectory On Windows

    If you want to be able to use the logs for restoring eDirectory on this server in the future, before removing eDirectory you must first copy the roll-forward logs to another location. For information about roll-forward logs, see “Using Roll-Forward Logs” in the Novell eDirectory 8.8 Administration Guide.
  • Page 135 This password will be configured to the Administrator object during primary server installations. For secondary server installations, this needs to be the password of the Administrator object in the primary server that has rights to the context to which the new server is added. Uninstalling Novell eDirectory 135...

  • Page 136: Uninstalling Nici

    <Windows Install Drive>\Program Files\Common Files\novell\ni\bin>install.exe - remove ..\data\ip.db ..\data\remove.rsp Novell:NDSforNT:1.0.0 0 NDSonNT This performs an unattended uninstallation of eDirectory on the Windows server.

  • Page 137: Uninstalling Microsoft Visual C++ 2005 Runtime Libraries

    If you want to be able to use the logs for restoring eDirectory on this server in the future, before removing eDirectory you must first copy the roll-forward logs to another location. For information about roll-forward logs, see “Using Roll-Forward Logs” in the Novell eDirectory 8.8 Administration Guide.
  • Page 138 NOTE: The DIBs without the eDirectory binaries cannot be used and are insignificant. For example, to uninstall Novell eDirectory Server packages, enter the following command: nds-uninstall -c server nds-uninstall does not uninstall the following packages:...

  • Page 139: Edirectory Instrumentation

    Instrumentation Earlier eDirectory instrumentation was a part of Novell Audit. However, from eDirectory 8.8 SP3 version onwards, eDirectory Instrumentation must be installed separately. Use the following information to install or configure or uninstall Novell® eDirectory Instrumentation on Linux, Solaris, Windows, and NetWare servers: Section 12.1, “Supported Platforms,”...

  • Page 140: Prerequisites

    NetWare 6.5 SP7 (OES2) NetWare 6.5 SP8 12.2 Prerequisites eDirectory 8.8 SP5 Instrumentation supports only the Audit Platform Agent. Installing and using the Novell Audit iManager Plug-in requires iManager 2.7.3. Refer to the Novell iManager Documentation Page (http://www.novell.com/documentation/imanager27/ index.html) for more information.
  • Page 141 IMPORTANT: For OES2 SP1 32-bit, you must download eDirectory standalone build for Linux 32-bit from the download.novell.com for 32-bit eDirectory. Extract the build and use the novell-AUDTedirinst-8.8.5-12.i586.rpm. For OES2 SP1 64-bit, you must download eDirectory standalone build for Linux 64-bit from the download.novell.com for 64-bit eDirectory.

  • Page 142: Configuring Edirectory Instrumentation

    1a Run the file for 32-bit Audit Platform Agent. pa_win32.exe 2 Unzip the file for 32-bit Instrumentation eDirectoryInstrumentation-win-8.8.5.zip from the . Unzipping this file creates a Novell directory. <installerFolder>/nt/auditds/ 3 Copy the to the directory (or to any other Novell\NDS\nauditds.dlm C:\Novell\NDS directory where eDirectory is installed).

  • Page 143: Windows

    2c Select NCP Server object that corresponds to the eDirectory Server you want to audit. Click OK. 2d Click Novell Audit tab, then click eDirectory sub tab to display the eDirectory Instrumentation Settings page. 2e Select or deselect the events that you want to audit. Click Apply, then click OK.

  • Page 144: Netware

    Novell Audit 2.0 Administration Guide. 4 To load the eDirectory Instrumentation, click Start > Control Panel > Novell eDirectory Services. Select Load the eDirectory Instrumentation from the Services tab, then click Start. 5 To unload the eDirectory Instrumentation, click Start > Control Panel > Novell eDirectory Services.

  • Page 145: Uninstalling Edirectory Instrumentation

    2 Uninstall the rpm. novell-AUDTedirinst-8.8.5-12 NOTE: The rpm name is same for both 32 and 64-bit instrumentation. #rpm -e --nodeps novell-AUDTedirinst-8.8.5-12 3 Disable automatic loading of eDirectory instrumentation everytime eDirectory is started by editing the file and removing the /etc/opt/novell/eDirectory/conf/ndsmodules.conf line corresponding to auditds (if it exists).

  • Page 146: Uninstalling Edirectory Instrumentation On Solaris

    The procedures to uninstall 32-bit Instrumentation and 64-bit Instrumentation are the same on a Windows platform. To uninstall eDirectory instrumentation, 1 Unload eDirectory instrumentation as follows: Navigate to Start > Control Panel > Novell eDirectory Services. Select Services. Click , then click Stop.

  • Page 147: Unistalling Edirectory Instrumentation On Netware

    12.5.4 Unistalling eDirectory instrumentation on NetWare To uninstall eDirectory instrumentation, 1 Unload the eDirectory instrumentation using the commands, unload auditds.nlm unload logevent.nlm 2 Delete from directory. auditds.nlm sys:\system 3 Delete the file from directory. ediraudit.sch sys:\system\schema Disable automatic loading of eDirectory instrumentation everytime eDirectory is started by commenting or removing the command in the load auditds.nlm...
  • Page 148 148 Novell eDirectory 8.8 Installation Guide...

  • Page 149: A Linux, Solaris, And Aix Packages For Novell Edirectory

    Linux, Solaris, or AIX tools installed with the OS. The following table provides information about the Linux, Solaris, and AIX packages that are included with Novell eDirectory. NOTE: On Linux, all the packages are prefixed with novell-. For example, NDSserv is novell- NDSserv. Package...
  • Page 150 The runtime libraries and utilities for SNMP. This package is dependent on the NICI package. NDSdexvnt Contains the library that manages events generated in Novell eDirectory to other databases. NOVLpkia Provides PKI services. This package is dependent on the NICI, NDSbase, and NLDAPsdk packages.
  • Page 151 NOVLntls on Solaris, and AIX ntls on Linux NOVLldif2dib Contains the Novell Offline Bulkload utility and is dependent on the NDSbase, NDSserv, NOVLntls, NOVLlmgnt and NICI packages. NOVLncp Contains the Novell Encrypted NCP Services for Unix. This package is dependent on the NDScommon package.
  • Page 152 152 Novell eDirectory 8.8 Installation Guide...

  • Page 153: B Edirectory Health Checks

    Health Checks ® Novell eDirectory 8.8 provides a diagnostic tool to help you determine whether your eDirectory health is safe. The primary use of this tool is to check if the health of the server is safe before upgrading.

  • Page 154: Types Of Health Checks

    This is the first stage of the health check, where the health check utility checks for the following: 1. The eDirectory service is up. The DIB is open and able to read some basic tree information such as tree name. 2. The server is listening on the respective port numbers. 154 Novell eDirectory 8.8 Installation Guide...

  • Page 155: Partitions And Replica Health

    For LDAP, it gets the TCP and the SSL port numbers and checks if the server is listening on these ports. Similarly, it gets the HTTP and HTTP secure port numbers and checks if the server is listening on these ports. B.3.2 Partitions and Replica Health After checking the basic server health, it then checks the partitions and replica health as follows: 1.

  • Page 156: Critical

    Unable to read or open the DIB (might be locked or corrupt). Unable to contact all the servers in the replica ring. Locally held partitions are busy. Replica is not in the ON state. 156 Novell eDirectory 8.8 Installation Guide...

  • Page 157: Log Files

    Figure B-2 on page 157. The health check log file contains the following: Status of the health checks (normal, warning, or critical). URLs where possible solutions can be found. Support forums (http://support.novell.com/forums/2ed.html) Troubleshooting Documentation (http://www.novell.com/documentation/edir88/ edir88tshoot/data/front.html) eDirectory Health Checks 157...
  • Page 158 2. When health check is performed manually using dscheck.nlm , the default log messages would be saved at sys:\system\dscheck.log Windows The log file will be saved at nsdcheck.log install_directory\novell NOTE: install_directory is user specified. 158 Novell eDirectory 8.8 Installation Guide...

  • Page 159: C Configuring Openslp For Edirectory

    This appendix provides information for network administrators on the proper configuration of ® OpenSLP for Novell eDirectory installations without the Novell Client Section C.1, “Service Location Protocol,” on page 159 Section C.2, “SLP Fundamentals,” on page 159 Section C.3, “Configuration Parameters,” on page 161 C.1 Service Location Protocol...

  • Page 160: Novell Service Location Providers

    In summary, everything hinges on the directory agent that a user agent finds for a given scope. C.2.1 Novell Service Location Providers The Novell version of SLP takes certain liberties with the SLP standard in order to provide a more robust service advertising environment, but it does so at the expense of some scalability.

  • Page 161: Service Agents

    4. Querying DHCP for network-configured DA addresses that match the specified scope (and adding new addresses to the cache). 5. Multicasting a DA discovery request on a well-known port (and adding new addresses to the cache). The specified scope is “default” if not specified. That is, if no scope is statically defined in the SLP configuration file, and no scope is specified in the query, then the scope used is the word “default”.
  • Page 162 “false.” Any other value is a number of seconds between discovery broadcasts. These options, when used properly, can ensure an appropriate use of network bandwidth for service advertising. In fact, the default settings are designed to optimize scalability on an average network. 162 Novell eDirectory 8.8 Installation Guide...

  • Page 163: D Documentation Updates

    Documentation Updates This section contains information about documentation content changes that were made in the eDirectory 8.8 SP5 Installation Guide after the initial release of eDirectory 8.8 release. The changes are listed according to the date they were published. The documentation for this product is provided on the Web in two formats: HTML and PDF. The HTML and PDF documentation are both kept up-to-date with the changes listed in this section.
  • Page 164 164 Novell eDirectory 8.8 Installation Guide...

Table of Contents