Novell Client 2.0 SP1(IR6) - TID 7008266 - Service/eDir Auth

Shaun et. al.,
I like what I'm seeing in the Novell Client 2.0 SP1 (IR6) release notes.
Tree or Server Not Found on login immediately after powerup is supposedly fixed with this release (a big problem with us).
Can you confirm that TID 7008266 is part of Novell's solution to the issues posed by installing as a Dynamic Administrator / System Account?
(mapping drives, etc).
pitcherj

Well, I think the efforts are completely disconnected.
The Client2 Efforts are nothing to do with ZCM.
I'm aware of the Interactive Services Detection defect and this would
not relate to that in any way. Nor would the Dynamic Administrator
inherit any rights defined by the Client2 Feature.
In regards to the SYSTEM process, it may but I have not tested nor do I
believe anyone in the ZENworks group has done so. However, I think it
would stand a decent chance of working. Of course it would require the
use of a UNC Path, and not drive letters.
On 4/7/2011 12:36 PM, pitcherj wrote:
>
> Craig,
>
> I realize it's not DIRECTLY related to Dynamic Administrator, but I do
> have a SR in with Novell on this (the interactive services detection
> dialog, etc) and they said they were working on an alternate solution
> that would potentially allow users to see the UI of an installer.
>
> (Currently I have to make sure to start the ui0detect service since
> most of the time that service is not active on our user's workstations,
> so they have no way to view the progress of an installer other that the
> ZENwork progress bar)
>
> pitcherj
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

Similar Messages

What Novell Client to use in SLED11?

Hi!
Im very confused now!
I have SLED11 64bits version. I installed the Final Relase of Novell Client 2.0 SP2 64bits version. Novell require the 64bits version on 64bits OS or the GUI-Login will not work.
The problem is that I need to use IDM Designer and it seems to not work with the 64bits version of Novell Client.
So i was checking and i see there is an BETA og Novell Client 2.0 SP1, but isnt the final release og 2.0 SP2 a newer version? How can the BETA be SP1 and the final release SP2?
Now it looks like a have to downgrade SLED11 to 32bits and use the BETA of Novell Client since somone get the Designer to work in this enviroment.
Anyone?

On Thu, 14 May 2009 07:06:01 +0000, ronnys wrote:
> So i was checking and i see there is an BETA og Novell Client 2.0 SP1,
> but isnt the final release og 2.0 SP2 a newer version? How can the BETA
> be SP1 and the final release SP2?
Ignore that. The only version of the client you can use with SLED11 is
NCL 2.0 SP2.
> Now it looks like a have to downgrade SLED11 to 32bits and use the BETA
> of Novell Client
No, you would use the 32-bit version of NCL 2.0 SP2.
Joe Marton
Novell Knowledge Partner
SUSE Linux Enterprise 11 is ready for action.

32 bit Record Locking on 64 bit Novell Client 2 SP1 for Wind

I recently installed several 64 bit Windows 7 Machines running Novell Client 2 SP1 for Windows 7.
Our application uses 32 bit record locking in order to maintain compatibilty with a wide array of workstations.
The problem is as follows:
Machine A is runnning 64 bit Novell Client 2 SP1 for Windows 7
Machine B is running 32 bit Windows XP (Client doesn't really seem to matter).
Using Machine A, I open a table, and lock a record.
Using Machine B, I attempt to open the same table.
Machine B received and Error 33 - The process cannot access the file because another process has locked a portion of the file.
When I change my application to use 64 bit record locking, the problem goes away.
Luis

I see that there is a better place for my post:
OES: Client - Windows - NOVELL FORUMS
I have posted there as well.

10.3 + Novell Client 2 SP1 IR4 + UAC = no refresh

Software/Versions:
Novell Client 2 SP1 IR4
ZCM 10.3.0
Windows 7 Enterprise 32bit
Performing our first win7 tests and ran into a fairly major issue. Besides the very first login, ZCM will not refresh when rebooted, logout/login of windows, F5 in NAL or zac ref bypasscache.
If we manually logout of ZCM then back in, it will refresh properly.
Looking through the debug, didn't see any obvious failures. The client seems to just be using the cache, login is faster then we are used too:).
We have removed cache, unr/reg, reinstalled ZCM, messed with firewall/novell client settings with no effect.
We did find the the Novell client is what causes the issue. Refreshed work fine without the novell client, once it is installed refreshes don't work. Though if I disable UAC + novell client refreshes will start to work again.
Any throughts on what else I could try? UAC is pretty important to us.

Well I have found something odd in the debug log that I didn't notice before...
The client receives a forbidden: 403 error trying to contact the zenworks-assignmentservice
Code:
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [FindNextContent()] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ badUri: https://10.1.1.162/zenworks-assignmentservice/] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Exception: The request failed with HTTP status 403: Forbidden.] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://ump-zcm1.umphysicians.com/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://10.1.1.162/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://ump-zcm2.umphysicians.com/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://10.1.1.163/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://ump-bu-zcm4.umphysicians.com/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://10.228.251.37/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://ump-mu-zcm2.umphysicians.com/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://10.228.1.163/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [WebException: The request failed with HTTP status 403: Forbidden.] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [Status: ProtocolError] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [FindNextContent: Not trying to retry. Ignoring this retry] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [Marking IP Location https://ump-zcm1.umphysicians.com/zenworks-assignmentservice/: Bad] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [WebException] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [The request failed with HTTP status 403: Forbidden.] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [WebExceptionStatus: ProtocolError] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object() parameters)
at Novell.Zenworks.AssignmentManager.Schema.AssignmentServiceService.getEffectiveAssignments(GetAssignmentsRequest GetAssignmentsRequest)
at Novell.Zenworks.AssignmentManager.AssignmentManager.GetAssignmentsFromWebService(GetAssignmentsRequest request, IService service)] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [Exception details...
Type: System.Net.WebException
Message: The request failed with HTTP status 403: Forbidden.
Status: ProtocolError
Response: System.Net.HttpWebResponse
Stack Trace:
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object() parameters)
at Novell.Zenworks.AssignmentManager.Schema.AssignmentServiceService.getEffectiveAssignments(GetAssignmentsRequest GetAssignmentsRequest)
at Novell.Zenworks.AssignmentManager.AssignmentManager.GetAssignmentsFromWebService(GetAssignmentsRequest request, IService service)
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [Marking location https://10.1.1.162/zenworks-assignmentservice/ Bad at the request of module assignment] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Setting location name https://10.1.1.162/zenworks-assignmentservice/ to status Bad] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Exception causing location name https://10.1.1.162/zenworks-assignmentservice/ to be marked Bad: System.Net.WebException: The request failed with HTTP status 403: Forbidden.
at System.Web.Services.Protocols.SoapHttpClientProtocol.ReadResponse(SoapClientMessage message, WebResponse response, Stream responseStream, Boolean asyncCall)
at System.Web.Services.Protocols.SoapHttpClientProtocol.Invoke(String methodName, Object() parameters)
at Novell.Zenworks.AssignmentManager.Schema.AssignmentServiceService.getEffectiveAssignments(GetAssignmentsRequest GetAssignmentsRequest)
at Novell.Zenworks.AssignmentManager.AssignmentManager.GetAssignmentsFromWebService(GetAssignmentsRequest request, IService service)] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [Exiting MarkLocationBad] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [FindFirstContent()] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://ump-zcm1.umphysicians.com/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://10.1.1.162/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://ump-zcm2.umphysicians.com/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://10.1.1.163/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://ump-bu-zcm4.umphysicians.com/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://10.228.251.37/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://ump-mu-zcm2.umphysicians.com/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [https://10.228.1.163/zenworks-assignmentservice/ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ ] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Found host ump-zcm1.umphysicians.com status: Good] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Found location https://10.1.1.162/zenworks-assignmentservice/ status: Bad] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Skipping IP location: https://10.1.1.162/zenworks-assignmentservice/, status: Bad] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Found host 10.1.1.162 status: Unknown] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Found location https://10.1.1.162/zenworks-assignmentservice/ status: Bad] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Skipping IP location: https://10.1.1.162/zenworks-assignmentservice/, status: Bad] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Found host ump-zcm2.umphysicians.com status: Good] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Found host 10.1.1.163 status: Unknown] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Found host ump-bu-zcm4.umphysicians.com status: Good] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Found host 10.228.251.37 status: Unknown] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Found host ump-mu-zcm2.umphysicians.com status: Good] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [ Found host 10.228.1.163 status: Unknown] [] []
[DEBUG] [12/20/2010 10:34:14.621] [1524] [ZenworksWindowsService] [26] [] [ConnectMan] [] [Trying to locate source location: https://ump-zcm1.umphysicians.com/zenworks-assignmentservice/] [] []

Login intermittently slow with ZCM agent AND Novell client

We continue to struggle with intermittently slow logins in our environment. In testing, we noticed that logins are very fast (10-20 seconds) when only the Novell Client is installed, and very fast (~10 seconds) when only the ZCM agent is installed. However, when they are both installed, logins slow down, sometimes to 1.5 minutes or longer.
We have checked DNS and rDNS, and they are both configured properly. SLP is working properly as demonstrated by the fast logins when only the client is installed. We use LDAP for user lookup, and it also works very fast to resolve user names (~ 1 second).
We are using ZCM 10.3.1, and the client is fully patched as well (both Novell Client 2 and 4.91)
Are there any specific settings (for the ZCM agent or the client itself) that might address this issue?

My apologies, I told you to remove the wrong thing.
I should have said NMAS instead of CASA.
I am just so used to saying CASA when talking about ZCM.
In regards to NMAS, you could simply rename "NWSSO.DLL" as a test.
If NMAS is installed which is tested by the existence of this DLL, then
a certain NMAS call is always made, which in some cases can take a long
time.
On 11/9/2010 12:06 PM, dshofkom33 wrote:
>
> craig_wilson;2042688 Wrote:
>> Try removing CASA from the device and see if that makes a difference.
>> A TID will be out on the issue soon.
>>
>> On 10/5/2010 4:36 PM, kjhurni wrote:
>>>
>>> Hmm, I will have to try that. I've only observed that with ZCM
>>> installed (with Novell Client 4.91 SP5 on XP) that the login time
>> goes
>>> from about 12-15 seconds to about 50-70 seconds.
>>>
>>> But I've not tried "just" the ZCM agent.
>>>
>>>
>>
>>
>> --
>> Craig Wilson - MCNE, MCSE, CCNA
>> Novell Knowledge Partner
>>
>> Novell does not officially monitor these forums.
>>
>> Suggestions/Opinions/Statements made by me are solely my own.
>> These thoughts may not be shared by either Novell or any rational
>> human.
>
> I removed CASA and now I cannot sign into ZCM. I get the "unable to
> login to network because the login credentials are incorrect" Windows
> Security Message. Any ideas?
>
>
Craig Wilson - MCNE, MCSE, CCNA
Novell Knowledge Partner
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.

GW 2014 and Novell Client

Hi,
since we upgraded to GroupWise 2014 SP1 HP1 some (but not all) of our users
(still GW 2012 Clients) complain that they have to authenticate twice,
Novell Client and GroupWise.. is there a change because of the decoupling of
GW and eDirectory? Something to be aware of? I did not find anything in the
docu...
Thanks,
Mirko

Massimo Rosen wrote:
> Mirko,
>
> Am 09.04.2015 um 13:44 schrieb Mirko Guldner:
>>
>> I verified this...
>>
>> We have "Use eDirectory Authentication instead of password" set and
>> locked on the domain level.
>
> Well, that explains then why the option isn't there in the client.
Ah, ok, I see that now. Then possibly it was the other options that my
collegues sometimes saw - I think I didn't ask precisely...
> Which basically leaves the idea that somehow the association between GW
> and eDir user got lost/broken.
What is the best way to check this? If "Sychronize" in Admin Console updates
"Contact information" correctly the association should be all right,
shouldn't it? Additionaly I check LDAP DN in "Diagnostics". I did not see
any problems there.
I seems that only users with clients before 12.0.3 HP1 are affected; as soon
as users upgrade to 12.0.3 HP1 or 14.0.1 HP1 login works as before.
Thanks,
Mirko

Novell client for linux - scripted install and configure

the novell client is included in SLED11 SP1
the configuration files are in /etc/opt/novell/ncl (esp login.conf)
I want to script the configuration of the novell-client. Some of the things the interface yast - Novell client does, is:
modify /etc/pam.d/gdm
create /lib/security/pam_ncl_autologin.so
... and maybe more....?
according to Novell Documentation there should be a make_novell-client-conf_rpm Bash script but i cant find it in any of the recent clients (download) nor on the SLED installation.
I think just copying pam.d files and the .so file will work, but might cause troubles in the long run.
What should i do to create these by script?

Originally Posted by lowalcohol
assuming this will do the same as installing it from yast - software, the client is not configured (tree, context, slp) and lacks key files such as /lib/security/pam_ncl_autologin.so needed for integrated login.
/lib/security/pam_ncl_autologin.so is updated by the post processing inside the rpm's. We don't need to do anything. however there is much to do. i'll show what i do. You need to change the variables and entries to suit your env.
create a repo on a build server using the following in fstab
Code:
/srv/www/htdocs/iso/novell-client-2.0-sp2-p2-sle11-i586.iso /srv/www/htdocs/novcli2.sp2/i586 iso9660 user,auto,loop,uid=30,gid=8 0 0
/srv/www/htdocs/iso/novell-client-2.0-sp2-p2-sle11-x86_64.iso /srv/www/htdocs/novcli2.sp2/x86_64 iso9660 user,auto,loop,uid=30,gid=8 0 0
add a repo to the install
zypper -n ar --refresh http://build/novcli2.sp2/$PROC "Novell client 2"
add in bits for ldap
Code:
cd /tmp
wget $WEBPATH/ldap.tbz2
if [ -s ldap.tbz2 ]; then
cd /
tar xjvf /tmp/ldap.tbz2
cd /tmp
fi # if [ -s ldap.tbz2 ];
echo '+::::::' >>/etc/passwd
echo '+' >>/etc/shadow
echo '+:::' >>/etc/group
ldap.tbz2 contains the following after they been changed by 'yast ldap'.
\etc
\etc\ldap.conf
\etc\nsswitch.conf
\etc\openldap
\etc\pam.d
\etc\openldap\ldap.conf
\etc\pam.d\common-account-pc
\etc\pam.d\common-auth-pc
\etc\pam.d\common-password-pc
\etc\pam.d\common-session-pc
add in the client
Code:
zypper --no-refresh --no-gpg-checks -n in -l -t pattern novell-ncl
#lock the files to protect them from future 'zypper dup'
zypper al nici64 novell-client novell-client-script novell-konqueror-plugin novell-nautilus-plugin novell-nmasclient novell-novfsd novell-qtgui novell-ui-base novell-xplatlib novell-xtier-base novell-xtier-core novell-xtier-xplat yast2-novell-client
chkconfig micasad on
configure the client
[CODE]
sed -i s/";net.slp.useScopes.*"/"net.slp.useScopes = FRED, LARRY"/ /etc/slp.conf
sed -i s/";net.slp.DAAddresses.*"/"net.slp.DAAddresses = 10.251.1.99, 10.249.1.99"/ /etc/slp.conf
mkdir -p /etc/opt/novell/ncl
echo Allow_Integrated_Login=true >/etc/opt/novell/ncl/login.conf
echo Default_Tree=XXXXX >>/etc/opt/novell/ncl/login.conf
echo Default_Context=XXX.XXX.XXX >>/etc/opt/novell/ncl/login.conf
echo Default_Server=servername >>/etc/opt/novell/ncl/login.conf
echo DHCP_Tree=true >/etc/opt/novell/ncl/protocol.conf
echo DHCP_Server=true >>/etc/opt/novell/ncl/protocol.conf
[CODE]
(reboot)
These are files installed during build stage, but are used when the client logs in.
in /etc/skel/.novell/ncl, i have a copy of StartupLogin.conf as StartupLogin.conf.new
this file has information in it, but it will be wiped.
in /etc/skel/.kde4/Autostart/logon.sh, i have
Code:
if [ ! ~/.novell/ncl/StartupLogin.conf.new ]; then
mv ~/.novell/ncl/StartupLogin.conf.new ~/.novell/ncl/StartupLogin.conf
FDN=`ldapsearch -x -h 10.251.1.99 -b ou=its,o=fca | grep -i 'dn:' | grep -i $USER | grep -iv workstation`
CONTEXT=`echo $FDN | cut -d, -f2- | sed -e 's/ou=//ig' -e 's/o=//ig' -e 's/,/./ig'`
sed -i "s/UserName.*/UserName = $USER/" ~/.novell/ncl/StartupLogin.conf
sed -i "s/FDN.*/FDN = $FDN/" ~/.novell/ncl/StartupLogin.conf
sed -i "s/Context.*/Context = $CONTEXT/" ~/.novell/ncl/StartupLogin.conf
sudo /bin/update_login.conf.sh $CONTEXT
fi # if [ ! ~/.novell/ncl/StartupLogin.conf.new ];
/bin/update_login.conf.sh has the following and has '%users ALL=(root) NOPASSWD:/bin/update_login.conf.sh' added to /etc/sudoers
Code:
if [ ! -z "$1" ];then
sed -i "s/Default_Context=.*/Default_Context=$1/" /etc/opt/novell/ncl/login.conf
fi
So far this is working well.
The novell login needs to be run once, and on the advanced tab, have the session saved. This then auto runs afterwards for each logon.
as a troubleshooting tool, I :
Code:
cp /etc/etc.1
rsync -avP etc* my-pc:/tmp/
i can then use krusader to compare files (on my-pc), but most importantly, after doing something (eg yast ldap). rerun the rsync line and and it will tell exactly which file(s) changed, so you know which ones to check/keep/alter/etc
hope this helps.
ph

Experience about life without Novell Client?

Hi,
got anyone a wider experience about OES Infrastructure without Novell
Client and W7 Workstations?
We didn't need absolut highest performance but an absolut stable and
reliable Environment (24h Healthcare).
- Is Performance with CIFS Access to OES NSS Cluster Ressources comparable?
- Is availability comparable (in special Cluster migrations, Filelocking
on Files)
Today we run ~250 XP Workstations on OES2
Cluster/Filesharing/iprint/Zen7 and Groupwise.
Now we are going to ZCM11 and W7/64bit and think about avoid to use the
Novell Client for Windows to reduce complexity and switch on Client Side
to AD-Domain and use OES Infrastructur only for the "Backend".
Most Novell Services (Groupwise/iPrint) are going to auth to AD too, so
why should we use Novell Client and the NCP Protocol anymore?
Is the NCP Protocoll so much better against CIFS in current OES
Implementations (i'm no Expert in this Things).
Regards
Thomas

On 25.04.2012 06:16, kvishwanath wrote:
>
> Welcome to Novell CIFS !!
>
> To begin with - "OES Infrastructure without Novell Client on Win 7 is
> possible by Novell CIFS"
>
> To answer your specific questions,
> - Yes, CIFS has Comparable performance improvement w.r.t. Novell Client
> in recently released versions like OES2SP3,OES11FP0& Upcoming OES11
> SP1.
> - CIFS service is a cluster enabled, It works seamlessly on cluster
> migration, supports cross protocol lock feature across protocols (CIFS,
> NCP, AFP).
>
>
> In addition, CIFS supports Distributed File Services(DFS), Dynamic
> Storage Technology (DST), backup an many more features. Please refer
> Novell Documentation for more details.
I know this, but in real life there are always pitfalls...
>
> Specific to your infrastructure question of ~250 XP workstations, we
> have scaled CIFS service up to 4000 connections on single server 3 node
> cluster setup. Howe ever we are interested to know more details on your
> setup and infrastructure details further on this.
>
What would you like to know?
Most infos are on my first post.
We get more and more Windows Applikations who need a Windows Server as
Plattform for Services, Shares and Authentication.
In the past we create lokal "system" Accounts on these Applikation
Servers and map there Shares with help of the Loginskripts.
like map use R: \\app-server\files password /user:<systemaccount>
But now we are low on Drive Letters...
So now we think about to bring the Applikation Server and Windows
Workstation into AD-Domain for using same User Accounts/Passworddatabase
and use the UNC Syntax for this kind of Applikations.
Or we use some Applikations/Infrastruktur who use "transparent" Login
with AD Authentication (sp. Citrix) or use this as Authentication Point.
And that's our thoughts about CIFS and Novell Infrastractur in General.
Regards
Thomas

Novell Client help

I just finished setting up my tree in edirectory and Imanager. I installed Novell Client and when I went to login it said the tree couldn't be found.
It is frustrating because I don't know what's wrong.

The Novell Client installation after eDirectory may have broken eDirectory
if it's all on windows. eDirectory uses a new version of NICI, and the
Novell Client may still ship with an older one. Also, the Novell Client
typically installs NICI in client mode (of course) where eDirectory
requires it to be in server mode, and while the client can live in server
mode, the server cannot run in client mode.
I won't bore you, again, with my comments on platform choice. You're in
for a ride as you can see.
Hopefully you're in a VM and can revert a snapshot. Otherwise you may
want to call support to see if they can help fix this. There may be a TID
by now on this, but I haven't seen one lately. You may be able to
reinstall eDirectory, but on windows the eDir install both installs the
binaries that run the service as well as configure a tree, so you may need
to recreate the tree for this to work.
Good luck.
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...

Novell Client patch kills authentication to middle tier

Hi,
There was a recent patch for the novell client which replaces the file nicm.sys due to a security vulnerability. When I install this patch onto servers which have the Zenworks Middle Tier software installed it prevents the client machines from authenticating to edirectory via the middle tier servers.
Once I put the old vulnerable nicm.sys file back then the authentication begins working again.
I've had dig around to see if any one else is experiencing this problem but I haven't found anything.
Any suggestions on how I might fix this. I would ideally like to resolve this as I don't like my servers being vulnerable.
Thanks in advanced
Liz

You can install a server that only has Middle-Tier.
The rest of the stuff requires the client IIRC.
If you have upgrade protection, you may be able to test with a ZDM7 SP1 IR3
version of the middle-tier.
The problem is that Novell is no longer patching/testing against ZDM6.5, so
even if there was a code issue, its not likely you could get a fix.
Craig Wilson - MCNE, MCSE, CCNA
Novell Support Forums Volunteer Sysop
Novell does not officially monitor these forums.
Suggestions/Opinions/Statements made by me are solely my own.
These thoughts may not be shared by either Novell or any rational human.
"enegro" <[email protected]> wrote in message
news:[email protected]..
>
> Hi,
>
> There was a recent patch for the novell client which replaces the file
> nicm.sys due to a security vulnerability. When I install this patch
> onto servers which have the Zenworks Middle Tier software installed it
> prevents the client machines from authenticating to edirectory via the
> middle tier servers.
>
> Once I put the old vulnerable nicm.sys file back then the
> authentication begins working again.
>
> I've had dig around to see if any one else is experiencing this problem
> but I haven't found anything.
>
> Any suggestions on how I might fix this. I would ideally like to
> resolve this as I don't like my servers being vulnerable.
>
> Thanks in advanced
>
> Liz
>
>
> --
> enegro
> ------------------------------------------------------------------------
> enegro's Profile: http://forums.novell.com/member.php?userid=24444
> View this thread: http://forums.novell.com/showthread.php?t=335789
>

Group Policy causes novell client to never show up windows XP

Hello,
I've been having a problem for the last couple of months that I have no
idea how to fix. I'm using Windows XP SP1, Novell Client 4.91, and
Zenworks 3.2 (included in Novell Client 4.90 SP2). This is a Netware 6
server. I am running E-trust Antivirus 7.1.192. I am having a problem
where the novell client will not show up after restarting the workstation.
An hourglass comes up for a couple of seconds, disappears, and then I'm
left with a blank screen and a mouse curser. The only thing I can do is
power the machine down manually, no keystrokes work at that point. It
doesn't happen all the time, it's completely random, but it occurs often
enough for the users to complain.
The source of the problem seems to be the group policy that is in effect
for students (this is a K-12 school district). If I disable the group
policy for students, the problem appears to go away (this is not an
option). If the login screen shows up, then everything else on the
computer functions perfectly (including policy after login). Are there are
group policy updates available that may solve this problem? Please let me
know if I've left out any important information. I appreciate any help
provided as I've been at this for the past couple months!
Thanks,
Patrick

Pat,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Do a search of our knowledgebase at http://support.novell.com/search/kb_index.jsp
- Check all of the other support tools and options available at
http://support.novell.com.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://support.novell.com/forums)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://support.novell.com/forums/faq_general.html
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://support.novell.com/forums/

Removing Novell Client from Windows 7

Hello,
We have an issue with programs running slowly on our SUSE Linux server 11.0. We set up a test machine with Windows 7 without Novell Client and the same programs run extremely fast. (They run fast on a Windows 2008 server too with or without the client.) This is great for the new test machine but I have about 20 workstations that need to have the Client removed. If we remove it through control panel (both NICI and Novell Client - whatever version is installed) the programs are still slow. However, if we do a restore to the time before the Novell client was installed, the machine is fast. Because these machines have had the Novell Client installed for months, we cannot go back to an old restore point. Is there some registry file or other file that needs to be removed or changed to make the computer like it was installed without the Novell Client? I really do not want to have to rebuild 20 computers in order to fix this. I have researched the web and forums and cannot find any information about anything else that needs to be changed when the Novell client is removed. FYI - this is the same on our few Windows XP machines with the appropriate last updated Client on them.
Any help would be welcome!
Susan

We have had many issues with the Novell Client / Windows 7. Here is what we have done to get to an acceptable point.
We are running OES 11SP1 fully updated up until July (Getting ready to apply more updates), we are also talking about switching from CIFS to Samba as we have been seeing some weirdness with CIFS and NSS disconnects.
OES11 SP1 - Primary File Server NSS with CIFS
OES11 SP1 - DSFW/DNS Server for Domain Authentication for the CITRIX Servers, this server also runs ZCM 11.2.2 (Also going to update this as we need windows 8 support and the ZCM Agent has some issues at this level; however ZCM has a horrible way to apply updates and is time consuming)
OES11 SP1 Squid Proxy With transparent user authentication using LDAP with SquidTrust. Also has NSS Shares
Other servers exist as well.
We standardized on Novell Client 2 SP3 or Greater. Currently SP3 IR3 is what is in use. But prior to SP3 the client had many issues for us.
Also, We do not use Group policy with ZCM (We tried But it was painful and slow and policies would randomly just quit working / remove themselves) we reverted back to just digging in and finding the registry keys. If a key only existed in the Policy Section we put it there and do a GPUPDATE /force on login.
Server Settings:
Disable OPLOCKS
Workstation Settings:
NW Client Settings
File Commit (Enabled)
File Cache (Disabled) - NW Client Setting
Name Services DNS / SLP Only (Default on the newer Netware Client)
Win7 Machine Settings:
Static DNS Server - Set to the internal servers only. No external server set. The win 7 machines for some reason would use the secondary DNS Server randomly instead of the primary, never really dug in on why but disabling / removing a public DNS Server as the secondary and adding in a second internal.
MS Client For Microsoft Networks Remove, We tried changing the preferred order on the network adapters with no help. I believe the fact that we are running CIFS on the Server side the client is having issues with deciding on how to connect to the NSS Volumes when the client is installed. With the MS Client removed we see a huge improvement In the Novell client.
Libraries Disable - Registry - We redirect Documents Folders and such and these libraries are wanting to index the locations. As the Libraries consist of multiple locations.
Offline Files Disable - Registry
Windows Search Disable Registry (Service)
Zone Mapping - Registry Adds the servers & domain to the Trusted list for the OS (Even though it says Internet Explorer its used by other portions of the OS)
User Access Control Registry
I have others that helped but this is the short list of changes that made major improvements.
When I have a moment I will look back and see if there are other major changes. This is just what I remember.

Novell Client breaks LUM

Hi,
SLED11 SP2 (confirmed same on SP1)
I am trying to set up integrated login as per:
Support | How to set up Single Sign-On for Novell Client for Linux on SLED 11.0
and have done this Support | Single Sign-On does not work after initial setup.
I have LUM working correctly on SLED 11 Sp2 without the Novell Client installwed - all works 'as it should' edirectory users can login and accounts and user home dirs are created. Once the Novell Client is installed, LUM is broken. Specifically namcd is dead and cannot be started with this error:
Starting NAM Cache Daemon .../usr/sbin/namcd: /usr/lib/libldapssl.so.0:: no version information available (required by /usr/sbin/namcd)
Removing Novell Client and CASA results in LUM working again.
Does anyone have any idea how to fix this?
Thanks in advance,
Trevor Storr

No - and even if it does not break it, LUM and Novell Client do not
really work well together in my experience. Personally I have decided
to not use LUM on Linux client PCs anymore.
But maybe somebody else found a working solution for this.
W. Prindl
tstorr wrote:
>
>Hi,
>
>SLED11 SP2 (confirmed same on SP1)
>I am trying to set up integrated login as per:
>
>'Support | How to set up Single Sign-On for Novell Client for Linux on
>SLED 11.0' (http://www.novell.com/support/kb/doc.php?id=7005012)
>and have done this 'Support | Single Sign-On does not work after
>initial setup.' (http://www.novell.com/support/kb/doc.php?id=7006896)
>
>I have LUM working correctly on SLED 11 Sp2 without the Novell Client
>installwed - all works 'as it should' edirectory users can login and
>accounts and user home dirs are created. Once the Novell Client is
>installed, LUM is broken. Specifically namcd is dead and cannot be
>started with this error:
>
>Starting NAM Cache Daemon .../usr/sbin/namcd:
>/usr/lib/libldapssl.so.0:: no version information available (required
>by /usr/sbin/namcd)
>
>Removing Novell Client and CASA results in LUM working again.
>
>Does anyone have any idea how to fix this?
>
>Thanks in advance,
>
>Trevor Storr

Roaming profiles did not work with Novell client

I've Problems with roaming profiles.
It is perhaps not a Novell problem but anything with windows rights?
We use ZCM11: (Server: SLES11 SP1)
Client new PC with a freshly installed Windows7, all updates.
(Only Turn on file and printer sharing, anything else default, no virusscanner)
The pre-agent has been installed and then the the Novell Client 2SP1 IR7
The PC gets a "Dynamic Local User Policy" with the settings:
- Use the credentials of the user source
- (Manage existing user account - but we have none there)
- Volatile user (with no cache, meaning that the user is immediately deleted ... We have also tested with cache.)
- e-dir user should be only member of Users
The users from edir get a Roaming Profile Policy with:
- Store user profile in user's Home Directory. (which is on the OES/SLES server)
---- results ----
If the user has no centrally stored profile, then he can log on but just once!
(if "Enable Volatile User cache" also several times to the same PC)
If the user already has a stored profile, he can not log on Error: "The Group Policy client service failed the logon Access is denied"
In my view, the following happens. W7 create the user locally and want's put in the settings from a central profile in the local
Profile and can not do that.
Only when no "central profile" is there in the homedir, or if this profile does not contain the file ntuser.dat, the user can log in locally.
However, no files are used from te saved profile, for instance from the saved desktop.
I can not imagine that anyone around the world with ZCM11 on a SLES/OES Server don't use the Novell client and raoming profiles
It must therefore give a simple trick to solve the problem.
But which one? Can some one here help me?

Alix,
It appears that in the past few days you have not received a response to your
posting. That concerns us, and has triggered this automated reply.
Has your problem been resolved? If not, you might try one of the following options:
- Visit http://support.novell.com and search the knowledgebase and/or check all
the other self support options and support programs available.
- You could also try posting your message again. Make sure it is posted in the
correct newsgroup. (http://forums.novell.com)
Be sure to read the forum FAQ about what to expect in the way of responses:
http://forums.novell.com/faq.php
If this is a reply to a duplicate posting, please ignore and accept our apologies
and rest assured we will issue a stern reprimand to our posting bot.
Good luck!
Your Novell Product Support Forums Team
http://forums.novell.com/

CIFS, Novell Client, & Windows 7

We are running 6.5 sp6 cluster nodes. We have some windows xp clients using cifs and others using the novell client v4.9.1 . We are now setting up windows 7 clients on our network. Please advice how to setup some windows 7 clients with cifs, and what version of the novell client and settings do i need for windows 7.
appreciate any tips.
thanx.

On 30/03/2010 15:26, robles wrote:
>>> Have you set Windows 7 to use NTLMv1?
> No, i haven't. how where do i change this? is there a document i can
> refer to?
Please see TID 3437586. Note that is only required to connect via CIFS
and not via NCP (the protocol the Novell Client uses).
In additional I'll also note that you can also use the distributable
"reg" file method with Windows 7 (as well as Vista).
HTH.
Simon
Novell Knowledge Partner (NKP)
Do you work with Novell technologies at a university, college or school?
If so, your campus could benefit from joining the Novell Technology
Transfer Partners (TTP) group. See www.novell.com/ttp for more details.

Novell Client 2.0 SP1(IR6) - TID 7008266 - Service/eDir Auth

Similar Messages

Maybe you are looking for