OES 11 SP2 Shema Extensions

I am planning on adding my first OES 11 SP2 server into our Tree. What is the best way to Extend the schema to prepare for this? According to the Docs it says
"The simplest way to extend the schema for OES 11 SP2 servers is to have a tree admin install the first OES 11 SP2 server and the first instance of each OES 11 SP2 service that you plan to run on your network."
I am a tree admin, so if I install the latest SLES/OES on a server, does this mean that the schema will automatically be extended and I will not have to do anything else with the Schema? Or is there a better way to do this by extending it prior to installing the server into the tree?
Thanks,
Andrew

On 04/08/2014 10:56 AM, acshearer wrote:
>
> Here is the link from the documentation.
>
> https://www.novell.com/documentation...t.html#bhora0c
Good to know.
Well, there are technically correct things about that page, though I wish
it would elaborate a bit more.
First, the reason you use a tree admin is because you need to be a tree
admin to make schema changes at the [root] of the tree. Simple enough.
Second, while pointing to a Read/Write of [root] should work, the fact of
the matter is that one of the few roles that a Master has alone is control
of schema, so why does the doc state to point to a R/W? No idea. Point
to the Master of [root] unless you really, really cannot (and I would be
surprised if this was ever really a legitimate problem/limitation). Doing
so ensures that, if schema is taken by the Master, it will be pushed out
(to other server holding replicas of the [root] partition) and down (to
child partition Masters and R/Ws). Schema always flows out and down.
That a R/W may be clever enough to take changes and send them to the
Master is moot, in my mind.
Finally, I've never used that Yast-based schema tool, and that may work
really well. The biggest concern I would have with that is that it
implies adding your new server to the tree in a way that cannot extend
tree schema, and then doing the schema extension later. That's not
terrible, and eDirectory will be fine eventually, but in the meantime your
new OES server may have fits about things requiring new schema, such as
the LDAP services in eDir 8.8 SP8. As a result, LDAP may not load until
you do this schema extension, then some followup steps ('ndsconfig
upgrade' on the new server may do all of it for you) to get things
configured once the new schema is available throughout the tree. My hope,
though, is that the Yast-based tool can be pointed not just to the Master
(not R/W... a broken record I am, I know) or [root], but that it can be
pointed from this tree (the test one I mentioned before) to that tree over
there (the production one) and do the same thing. If so, this may be the
easiest and safest way (since not using ndsrepair) to extend schema in a
tree from another server. If so, I like this tool.
Good luck.
If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...

Similar Messages

  • OES 11 SP2 Imanager doesn't Create IP Certificates???

    If I recreate certificates in Imanager from one of our older OES 2 SP3 or OES 11 SP1 systems, it recreates IP AG, SSL CertificateIP, DNS AG, and SSL CertificateDNS certificates. If I recreate them from an OES 11 SP2 system in Imanager, it only creates Certificates DNS AG and SSL Certificate DNS. I noticed there is a check box to create the IP certs, but even when that box is checked it still only creates the DNS certs. Is this how it should be? I'm guessing not since the check box still doesn't seem to affect whether the IP certs are created.

    On Tue, 08 Jul 2014 16:26:02 +0000, spashia wrote:
    > If I recreate certificates in Imanager from one of our older OES 2 SP3
    > systems, it recreates IP AG, SSL CertificateIP, DNS AG, and SSL
    > CertificateDNS certificates. If I recreate them from an OES 11 SP2
    > system in Imanager, it only creates Certificates DNS AG and SSL
    > Certificate DNS. I noticed there is a check box to create the IP certs,
    > but even when that box is checked it still only creates the DNS certs.
    > Is this how it should be? I'm guessing not since the check box still
    > doesn't seem to affect whether the IP certs are created.
    Yes, I've seen some other reports that suggest that it works differently
    now. I don't know if this was a deliberate change, or if it's a bug. Is
    it causing a problem for you?
    David Gersic dgersic_@_niu.edu
    Knowledge Partner http://forums.netiq.com
    Please post questions in the forums. No support provided via email.
    If you find this post helpful, please click on the star below.

  • PXE on OES Linux SP2

    Trying to get PXE to respond to a client on OES Linux SP2.
    Novell-pxydhcp, novell-tftp, and novell-zmgprebootpolicy are all
    running. UDP ports 67, 69, 111, 4011, and 18753 are listed in
    FW_SERVICES_EXT_UDP (and INT_UDP). Firewall has been restarted.
    Workstation does not get PXE connection. Previously, this machine did
    get a connection to a Netware server running PXE.
    Any thoughts on what we're missing?
    Thanks.
    Lyle

    On Tue, 12 Jun 2007 18:07:06 GMT, [email protected] wrote:
    > DHCP is on a Netware server on same network segment.
    did you configure option 60 on this dhcp server? if yes remove it
    Marcus Breiden
    If you are asked to email me information please change -- to - in my e-mail
    address.
    The content of this mail is my private and personal opinion.
    http://www.edu-magic.net

  • Since OES 11 SP2 computer members of groups are not shown in AD Users and Computers mmc snapin

    I have several groups of computers in my DSfW Domain, They are mainly
    used to apply different GPOs to different groups.
    If you look via iManager or C1 at the properties of the groups you see
    the computers, which are members of the groups on the membership and
    security self equivalancy pages.
    If you use the MS AD snapin the memberlist of the group shows not any
    computer - but the computer(user) template shows, that the computer is
    member of the groups in question. It seems as if the GPOs are applied
    correctly using the group membership.
    But the question remains, why are the computer members not shown in the
    group template. They did show up there before OES 11SP2, so it seems
    some attribute got lost or is not correctly interpreted on the AD side.
    W. Prindl

    Originally Posted by W_Prindl
    I have several groups of computers in my DSfW Domain, They are mainly
    used to apply different GPOs to different groups.
    If you look via iManager or C1 at the properties of the groups you see
    the computers, which are members of the groups on the membership and
    security self equivalancy pages.
    If you use the MS AD snapin the memberlist of the group shows not any
    computer - but the computer(user) template shows, that the computer is
    member of the groups in question. It seems as if the GPOs are applied
    correctly using the group membership.
    But the question remains, why are the computer members not shown in the
    group template. They did show up there before OES 11SP2, so it seems
    some attribute got lost or is not correctly interpreted on the AD side.
    W. Prindl
    This might be the side-effect of some bug fix we did in oes11sp2, and will require deeper debugging. Please raise the SR with appropriate priority so that we give greater attention.

  • NAS Drive and OES 11 SP2

    I was thinking about getting a NAS Drive, but I was wondering if anyone knows of a brand that works well with OES11SP2? Also are there instructions available for this procedure? I looked in the OES11SP2 documentation but really didn't see anything that went through the full procedure.
    Thanks,
    DS

    On 02/04/2014 01:46, dschaldenovell wrote:
    > I was thinking about getting a NAS Drive, but I was wondering if anyone
    > knows of a brand that works well with OES11SP2? Also are there
    > instructions available for this procedure? I looked in the OES11SP2
    > documentation but really didn't see anything that went through the full
    > procedure.
    By "works well" what are wanting the NAS drive to offer? CIFS/SMB shares
    that might hook into DSfW, iSCSI to host storage, or ... ?
    HTH.
    Simon
    Novell Knowledge Partner
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below. Thanks.

  • Can not login into GUI after OES 11 SP1 patches

    I had patched the OES 11 SP1 via YAST in order to update to OES 11 SP2. Upon restart, I can no longer login into the GUI.
    The log files shows this:
    Oct 19 09:45:08 millies1a [XTCOM]: WARNING: gdm_session_settings_load: lang = (null)
    Oct 19 09:45:12 millies1a pam_autoncl[22163]: Auto Login will not continue - disabled for root user
    Oct 19 09:45:13 millies1a checkproc: checkproc: can not get session id for process 32355!
    Oct 19 09:45:16 millies1a gdm-simple-greeter[6948]: GLib-GObject-CRITICAL: g_param_spec_flags: assertion `G_TYPE_IS_FLAGS (flags_type)' failed
    Oct 19 09:45:16 millies1a gdm-simple-greeter[6948]: GLib-GObject-CRITICAL: g_object_class_install_property: assertion `G_IS_PARAM_SPEC (pspec)' failed
    What happened and how do I correct it?
    Thanks in advance,
    Ken

    Originally Posted by mrosen
    Am 19.10.2014 16:56, schrieb RLMILLIES:
    >
    > I had patched the OES 11 SP1 via YAST in order to update to OES 11 SP2.
    > Upon restart, I can no longer login into the GUI.
    > The log files shows this:
    > Oct 19 09:45:08 millies1a [XTCOM]: WARNING: gdm_session_settings_load:
    > lang = (null)
    > Oct 19 09:45:12 millies1a pam_autoncl[22163]: Auto Login will not
    > continue - disabled for root user
    > Oct 19 09:45:13 millies1a checkproc: checkproc: can not get session id
    > for process 32355!
    > Oct 19 09:45:16 millies1a gdm-simple-greeter[6948]:
    > GLib-GObject-CRITICAL: g_param_spec_flags: assertion `G_TYPE_IS_FLAGS
    > (flags_type)' failed
    > Oct 19 09:45:16 millies1a gdm-simple-greeter[6948]:
    > GLib-GObject-CRITICAL: g_object_class_install_property: assertion
    > `G_IS_PARAM_SPEC (pspec)' failed
    >
    > What happened and how do I correct it?
    Go ahead and patch the server to SLES11Sp3 and OES11SP2 (via CLI and
    using yast wagon). I've seen the same recently, and after updating it it
    went away.
    CU,
    Massimo Rosen
    Novell Knowledge Partner
    No emails please!
    http://www.cfc-it.de
    Will do - Thanks
    Sincerely,
    Ken

  • Tomcat running high utilization on OES11 SP2

    I have Groupwise 2014 with webaccess and calendar publishing host installed on the same OES 11 SP2 in virtual environment. Tomcat is slowly eating up available CPUs until the system becomes unstable. Rcnovell-tomcat6 restart will temporarily clear the problem. The problem is described in TID 7010072 however, the document specifically says that the fix is not for OES11. Does anyone know how to address this on OES11?

    Originally Posted by smflood
    On 08/07/2014 20:46, bobodajdaj wrote:
    > I have Groupwise 2014 with webaccess and calendar publishing host
    > installed on the same OES 11 SP2 in virtual environment. Tomcat is
    > slowly eating up available CPUs until the system becomes unstable.
    > Rcnovell-tomcat6 restart will temporarily clear the problem. The problem
    > is described in TID 7010072 however, the document specifically says that
    > the fix is not for OES11. Does anyone know how to address this on OES11?
    Firstly I'm not aware of an equivalent TID specific to OES11 so I'll ask
    my Novell contacts.
    OES11 uses novell-tomcat6 rather than tomcat6 as used with SLES11 with
    configuration file at /etc/opt/novell/tomcat6/conf/novell-tomcat6.conf
    so in the meantime perhaps make the same change as noted in TID 7010072
    for SLES11 to the OES11 file.
    Note there is more than one line (re)defining CATALINA_OPTS so I'd be
    tempted to add the following line below the last CATALINA_OPTS line:
    CATALINA_OPTS="$CATALINA_OPTS -Xthr:minimizeUserCPU -Xms800m -Xmx900m"
    Restart the OES11 tomcat process via "rcnovell-tomcat6 restart".
    HTH.
    Simon
    Novell Knowledge Partner
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below. Thanks.
    We are experiencing the same issue on our OES GroupWise 2014 server. Restarting novell-tomcat6 fixes temporarily, but always returns. Anyone find anything further with this? Just downloaded (1/12/15) and installed latest available hotpatches for GW2014 and SLES/OES, but did not resolve issue.

  • "Copy to clipboard" issue with Acrobat X and Skype extension in Firefox

    This post is just to let you know that there is and issue with Acrobat X and the Skype extension in Firefox.
    I don't know why but when both programs (Firefox and Acrobat) are opened and I try to copy something from a PDF I always get an error
    message like "Impossible to copy into the clipboard. An internal error occurred".
    If I close Firefox or I disable the Skype extension for Firefox everything runs smoothly.
    It is really odd, I don't know if it is a problem of Acrobat, Firefox or of Skype....
    Are anyone experiencing the same problem?
    See you.
    Alessandro.
    Ps. I'm using Windows Vista SP2, Skype extension 5.2.0.7165, Acrobat 10.0.1, Firefox 3.6.16

    Just found your post after getting the same problem with Google Chrome and Adobe Reader 10. It doesn't happen all the time but is annoying. If I switch Chrome off the problem is cured. Switch it straight back on and the problem reappears. It has only started after Skype was installed. Thanks for posting - I'll just switch Chrome off for now when I want to copy and paste unless a fix appears.

  • SLES/OES Partitioning

    I have an HP ml110 G7 server with B110i (fakeraid) controller 2 - 1 Tb drives in Raid 10 with 1 Tb online spare drive. I am installing SLES 11 SP3 and OES 11 SP2. I partitioned the storage with a /boot, /, and swap partition the remainder as LVM. When I try to initiate an NSS pool there is no device space available.
    How should I partition the array? Can NSS pools use the unassigned space on the LVM partition? How?

    On 21/02/2014 23:06, jjoyce wrote:
    > I have an HP ml110 G7 server with B110i (fakeraid) controller 2 - 1 Tb
    > drives in Raid 10 with 1 Tb online spare drive. I am installing SLES 11
    > SP3 and OES 11 SP2. I partitioned the storage with a /boot, /, and swap
    > partition the remainder as LVM. When I try to initiate an NSS pool
    > there is no device space available.
    >
    > How should I partition the array? Can NSS pools use the unassigned
    > space on the LVM partition? How?
    There are two issues at play here:
    1) OES11 includes it's own Novell Linux Volume Manager (NLVM) which is
    used instead of LVM and that's why there is no free space available to
    create a NSS pool
    2) you should not use software RAID for NSS storage and instead use NSS
    Software RAID
    See http://www.novell.com/documentation/...a/bwvc1xm.html
    HTH.
    Simon
    Novell Knowledge Partner
    If you find this post helpful and are logged into the web interface,
    please show your appreciation and click on the star below. Thanks.

  • Installing OES 11 SP3 into Existing OES 11 SP1 tree

    It been a while since I personally have installed a server into an existing Edir tree, never done it on Linux/OES. Can someone give a quick checklist I can follow that will aid me installing the new OES 11 SP3 into our existing EDir tree?
    I am reading the OES 11 Documentation and it seems to me there should be some more server / tree health checking done before installing. I cant remember the command to check tree health right now either.
    Thanks in advance,
    Ken

    Thanks for the reply. For some reason I remember more checks having to be done. But it has been several years and it was on Netware.
    Thanks for the information,
    Ken
    Originally Posted by ab
    OES 11 SP3 does not exist; I presume you mean OES 11 SP2.
    The documentation should have everything you need. If you want to check
    health further there are TIDs to do an eDirectory health check, but the
    only thing I ever bother doing outside of looking things over briefly in
    iMonitor (agent summary, obituary report, check the replica-ring for
    non-green stuff) and time checking (be sure time is in syhnc, which is an
    OS issue) is perhaps install a new test server into its own tree from
    which I can import schema into the new tree. It is not required, but it's
    one less thing to have fail during the real server install into the
    existing tree.
    Good luck.
    If you find this post helpful and are logged into the web interface,
    show your appreciation and click on the star below...

  • Veeam and OES NSS drives and GroupWise

    Can anyone give me some tips and or tricks when it comes to backing up SLES 11 Sp3 / OES 11 Sp2 servers with NSS drives and GroupWise 2014 using Veeam 8.0?
    I am testing Veeam 8.0 for our company and am a little leery about do a restore of files on our production server and really dont want to setup a complete test server if it pretty straight forward.
    Just wondering,
    Ken

    Veeam 8.0 does have a restore using NSS file system option. My concern is when Veeam does a FLR proxie and brings up a duplicate (excluding IP Address) of my main OES 11 System. Will they conflict having the same name/tree structure or wont the original OES tree even know its there?
    I dont really have the equipment to setup a full test environment so I am hoping someone can help me with this.
    Thanks,
    Ken

  • OES Linux, Print Solutions

    Hello all,
    I am currently using Netware 6.5 SP5(OES Netware SP2), and wandering what
    print solutions are available for the OES Linux platform. Specifically, is
    NPDS available on OES Linux? If so is it the primary solution or is there
    a different solution?
    A direction to documentation would be more helpful. Any assistance is
    appreciated.
    Regards,
    Matt Rigor

    Matt,
    NDPS isn't really state of the art on NW6.5.
    iPrint is, as well on Netware as on OES Linux. Check the manuals.
    Uwe
    Novell Support Connection Volunteer SysOp
    Please don't send me support related e-mail unless I ask you to do so.

  • Novell OES DNS not forwarding

    Never mind: it works, I just needed to wait for the dynamic config. Please delete.

    On 04.12.2012 05:26, mpatterson2100 wrote:
    >
    > I am having a problem getting novell dns to foward to another dns
    > server. Even though I have an entry in the forwarding list, my server is
    > not forwarding queries to that server.
    >
    > Here is a summary of my configuration:
    > Server01:
    > Services: (Novell DNS, Novell eDirectory)
    > IP address: 192.168.100.1
    > zones: test.local, 100.168.192.IN-ADDR.ARPA
    > forwarding list: 10.2.1.141
    > OS: OES 11 SP2, SLES 11 SP1
    Basic stuff first, as this ofte nis a problem: YOu *are* running
    novell-named, *not* named, yes?
    The usual cause for forwarding not happening is missing/corrupt
    rootserverinfo zone. Please check or post your dns server logs.
    CU,
    Massimo Rosen
    Novell Knowledge Partner
    No emails please!
    http://www.cfc-it.de

  • OES11 SP2 -- Use SLES SP3?

    The question is simple.
    Part1
    Should I also be upgrading to SLES SP3 when I do the upgrade to OES 11 SP2?
    Due to version confusion -- the answers given in this forum are not always Crystal Clear.
    Part 2:
    Is this spelled out somewhere in the (thousands of pages) of the documentation that I missed somewhere? (Perhaps I am having a "senior moment" and just can't see the words in one of the manuals.
    Thanks for any help.
    Cheers!

    On 09/01/2014 11:16 AM, davewr50 wrote:
    >
    > The question is simple.
    >
    > _PART1_[/B]
    > SHOULD I ALSO BE UPGRADING TO SLES SP3 WHEN I DO THE UPGRADE TO OES 11
    > SP2?
    >
    > DUE TO VERSION CONFUSION -- THE ANSWERS GIVEN IN THIS FORUM ARE NOT
    > ALWAYS CRYSTAL CLEAR.
    Yes; OES versions are, by default (with very, very few exceptions) linked
    directly to SLES versions, with OES versions being one SP behind SLES SPs.
    Thus, OES 11 SP2 is linked to SLES 11 SP3.
    > [B]_PART_2:_
    > Is this spelled out somewhere in the (thousands of pages) of the
    > documentation that I missed somewhere? (Perhaps I am having a "senior
    > moment" and just can't see the words in one of the manuals.
    https://www.novell.com/documentation...a/btmu44d.html
    Top of the page under Meeting All Server Software and Hardware Requirements:
    Code:
    Server Software
    As part of the OES 11 SP2 installation, you install SUSE Linux Enterprise
    Server 11 SP3.
    IMPORTANT:OES 11 SP2 services were developed and tested on a default and
    fully-patched SLES 11 SP3 server base.
    As you install OES 11 SP2, do not change any of the SLES 11 SP3 Base
    Technologies package selections, such as Java support. Doing so can cause
    various problems, such as the installation failing or one or more OES 11
    SP2 services not working properly.
    If you are installing on an existing SLES 11 SP3 server, be sure to verify
    that all of the default SLES 11 SP3 components are installed before
    attempting to install OES 11 SP2 services.
    I would not define missing this as a senior moment; powerful products come
    with lots of docs, and knowing exactly where to find one specific piece of
    information is not always clear.
    Good luck.
    If you find this post helpful and are logged into the web interface,
    show your appreciation and click on the star below...

  • OES 11 sp1 & ShellShock

    I have a couple of systems on OES11 SP1 - updated to the latest patches
    but still showing as vulnarable !
    is there a patch for this yet ?
    We are several months away for updating these servers & GW
    Other OES 11 SP2 systems seems ok once patched

    I've been patching machines today. I'm seeing the same thing. There is no patch for CVE-2014-6271 in the list of security updates.
    Originally Posted by bhrt60
    I have a couple of systems on OES11 SP1 - updated to the latest patches
    but still showing as vulnarable !
    is there a patch for this yet ?
    We are several months away for updating these servers & GW
    Other OES 11 SP2 systems seems ok once patched

Maybe you are looking for