home
***
CD-ROM
|
disk
|
FTP
|
other
***
search
/
ftp.seagate.com
/
2014.07.ftp.seagate.com.tar
/
ftp.seagate.com
/
pub
/
palindrome
/
technote
/
tn9402.asc
< prev
next >
Wrap
Text File
|
1994-12-13
|
13KB
|
372 lines
CREATING THE ARCHIVIST USER UNDER NETWARE 4.02
12-13-94, Rev 1.1
PURPOSE OF THIS TECH NOTE
=========================
This tech note covers:
* How to create Archivist (PNA Auto Login user) on a NetWare 4.02 server
using NETADMIN (DOS-based) or NWADMIN (Windows-based).
* Understanding and setting bindery context.
NOTE: To simplify this tech note, the Auto login user is referred to as
Archivist. You do not have to use the name, Archivist, for
your PNA Auto login user. You can use any valid NetWare user name.
Important Notes:
* Always use a 4.x utility (NETADMIN and NWADMIN) to create users.
Never use SYSCON when creating users on a NetWare 4.x server.
* Do not limit Archivist's concurrent connections or place any other
restrictions on this user.
* Make sure that Archivist's default server setting corresponds to the PNA
installation server. If the DEFAULT SERVER field does not match the PNA
installation server. the following error may result when attempting to
add a resource to the Protect Resource List in PNA.
Error: SMS-fffefff
The Storage Management Services API <NWSMListSMDRS>
has failed. The reason given is <>.
In NWADMIN, double click on Archivist, which brings up a user
information screen. Select ENVIRONMENT and check the DEFAULT SERVER
field. This field should contain the complete name of the PNA
installation server. (The field can also be blank)
In NETADMIN, choose MANAGE OBJECTS, and highlight Archivist and
press [enter]. Choose VIEW and EDIT PROPERTIES OF THIS OBJECT, then
select ENVIRONMENT. Check that DEFAULT SERVER matches the PNA
installation server. (This field can also be blank)
CONTENTS
1. OVERVIEW
============
2. SETTING PROPER SERVER BINDERY CONTEXT
==========================================
2.1 FINDING THE CURRENT BINDERY CONTEXT
2.2 SETTING BINDERY CONTEXT
3. CREATING A PNA AUTOLOGIN USER
=================================
3.1 USING NETADMIN
3.2 USING NWADMIN
4. GIVING AN EXISTING AUTO LOGIN USER APPROPRIATE RIGHTS
=========================================================
4.1 USING NETADMIN
4.2 USING NWADMIN
1. OVERVIEW
===========
When backing up a NetWare 4.02 server, it is important to give the PNA AUTO
LOGIN user (Archivist) appropriate rights. This will ensure that both the
NetWare file system and NetWare Directory Services (NDS) are backed up
properly.
This tech note uses the NetWare 4.x utilities, NETADMIN and NWADMIN,
to create the Archivist user and give it supervisory object rights to the
[ROOT] object.
2. FINDING THE SERVER'S BINDERY CONTEXT
=========================================
Because PNA uses bindery emulation for Auto login, the Archivist user has
to reside within the same container (or context) as the server to be backed
up. The server's bindery context points to the container within the NDS
structure (tree) that the server resides in.
NOTE: To backup servers residing in different containers, you will need to
create an Archivist user within each one of those containers.
When you install a NetWare 4.x server into the Directory tree, a NetWare
server object is created in the specified container. By default, the bindery
emulation is activiated and the server's bindery context is set for that
container.
Also required for bindery emulation is a read/write replica or master of the
partition that the server is located in. The replica must be stored on the
server for which you want bindery emulation enabled. This is done by
default when you install a server into an existing context.
NOTE: A read only replica will not work.
2.1 FINDING THE CURRENT BINDERY CONTEXT
----------------------------------------
1.) Access the server console and type SET BINDERY CONTEXT.
Or you can load SERVMAN from the server console, choose CONSOLE SET
COMMANDS, then MISCELLANEOUS. Arrow key down to the bottom settings
to find bindery context.
The bindery context setting displayed here is the context where the
Archivist user should be created in the directory tree.
2.2 SETTING BINDERY CONTEXT
-----------------------------
NOTE: Organizations (O) and Organizational Units (OU) are also referred to
as containers. For the remainder of this tech note, O and
OU will be referred to as containers.
1.) If for some reason, the default bindery context setting has been
changed, you can use a command similar to the command listed below
to set bindery context. Remember to set it for the container under
which the server object resides. Also remember the Archivist user needs
to reside within this same container.
Example:
Server object, FS1, exists in the directory tree under an Organizational
Unit (OU) named SALES. The OU, SALES, exists under an Oganization (O)
named FIRM1. Archivist should be created under OU=SALES.O=FIRM1.
Therefore, the bindery context on FS1 should be:
BINDERY CONTEXT: OU=SALES.O=FIRM1
This can be accomplished by issuing the following CONSOLE set command:
SET BINDERY CONTEXT =OU=SALES.O=FIRM1
NOTE: Using the example above for reference, if bindery context cannot be
set, ensure that a read-write replica or master of the partition that
contains OU=SALES.O=FIRM1 is located on server FS1. If it does not, use
Partition Manager to place a copy of the partition on the server.
3. CREATING AN PNA AUTO LOGIN USER
===================================
3.1 TO CREATE AN AUTO LOGIN USER USING NETADMIN
------------------------------------------------
1.) Log in to NetWare Directory Services as ADMIN or equivalent and type
NETADMIN <enter>
2.) Choose MANAGE OBJECTS <enter>
3.) Choose the Container Unit that corresponds to the bindery context
setting on the server to be backed up <enter>.
4.) Press INS, (SELECT AN OBJECT CLASS screen appears) and choose USER <enter>
5.) The CREATE OBJECT USER screen appears. Fill in Login name and Last name
and press F10 to save.
Example:
LOGIN NAME: Archivist
LAST NAME: Pna
6.) You should receive confirmation that user was created and a screen prompt
appears asking you create another user. Choose NO.
7.) With Archivist highlighted, press [enter], choose VEIW/EDIT PROPERTIES
OF THIS OBJECT.
8.) Choose CHANGE PASSWORD and enter a password for Archivist.
9.) (Optional) At this time you can set up Archivist's login script by
choosing LOGIN SCRIPT. Archivist's login script should contain a
search map to the PNA installation directory. This only applies to
Archivist on the PNA installation server. For Archivist users created
on remote servers, no login script is required.
NOTE: Archivist and its password will be used later as the AUTO LOGIN ID
and AUTO LOGIN PASSWORD when installing PNA. Before installing PNA,
login as Archivist.
10.) Choose ENVIRONMENT. Make sure Default Server setting corresponds
to the PNA installation server.
You have now completed creating Archivist user under NETADMIN. To assign
appropriate rights, continue to SECTION 4.1.
3.2 TO CREATE AN AUTOLOGIN USER UNDER NWADMIN
----------------------------------------------
1.) Log in to NetWare Directory Services as ADMIN or equivalent, access
Windows, then NWADMIN. (from a DOS prompt, type WIN NWADMIN and
press enter)
2.) Access the container matches the bindery context setting of the
server to be backed up. Select the VIEW, then SET
CONTEXT options to accomplish this, or click your way down the directory
tree.
NOTE: The container Archivist is created in must match the server's
bindery context setting. If Archivist is placed in the wrong Container
Object, PNA's AUTO LOGIN will fail. See Section 2.1 of this tech note
for more information.
Example:
Server to be backed up = TS_ENGR
TS_ENGR's Bindery Context = OU=SALES.O=FIRM1
Archivist should be placed in the OU=SALES.O=FIRM1 context.
3.) Once in the correct context, select on the following options:
OBJECTS
CREATE
USER (select OK)
4.) After the User screen appears, type in:
Example:
LOGIN NAME: Archivist
LAST NAME: Pna
Then select the DEFINE ADDITIONAL PROPERTIES box, and finally
select CREATE.
5.) A screen appears where additional user parameters can be defined.
Select:
PASSWORD RESTRICTIONS
CHANGE PASSWORDS
Type in Archivist's password, then select OK.
NOTE: Archivist and its password will be used later as the AUTO LOGIN
ID and AUTO LOGIN PASSWORD during the PNA installation. Before
installing PNA, log in as Archivist.
6.) (OPTIONAL) At this point you can define Archivist's login scripts which
should include a search map to the PNA installation directory. This only
applies to Archivist on the PNA installation server. For Archivist users created
on remote servers, no login script is required.
7.) Highlight ENVIRONMENT. Make sure Default Server setting corresponds
to the PNA installation server.
This completes the creation of Archivist using NWADMIN. To assign
appropriate rights to Archivist, continue to SECTION 4.2.
4. GIVING AN EXISTING AUTO LOGIN USER APPROPRIATE RIGHTS
=========================================================
4.1 GIVING AN EXISTING AUTO LOGIN USER APPROPRIATE RIGHTS USING NETADMIN
-------------------------------------------------------------------------
Archivist needs complete access to the entire NDS tree as well as the
server's file system. To best accomplish this, Archivist needs super-
visory object rights to the ROOT OBJECT. To give Archivist this necessary
right, follow the steps listed below:
1.) Log in to NDS as ADMIN or equivalent.
2.) Type NETADMIN <enter>
3.) Choose MANAGE OBJECTS <enter>
4.) Find the [ROOT] object on the tree, then press F10 to VIEW or EDIT.
Note: The upper-left corner of the screen should display:
CONTEXT: [ROOT]
5.) Highlight VIEW OR EDIT THE TRUSTEES OF THIS OBJECT <enter>
6.) Highlight TRUSTEES <enter>
7.) Highlight any trustee listed that has [Object Rights] displayed on the
left portion of the screen and press the INS key.
Example : [Object Rights] [ S] Admin.Palindrome
9.) When the box ENTER TRUSTEE NAME appears, press the INS key.
10.) Scan the tree, find Archivist, and press <enter>
NOTE: Archivist may exist further down the tree in another container.
After you choose Archivist, the ENTER TRUSTEE NAME box should
appear again, this time with the Archivist's complete name.
Example: ARCHIVIST.SALES.FIRM1
11.) Press <enter> with Archivist defined as the TRUSTEE NAME.
12.) The PROPERTIES screen appears, choose [Object Rights] <enter>.
13.) Archivist should now appear as a trustee with the Browse right.
Example: [OBJECT RIGHTS] [B ] ARCHIVIST.SALES.FIRM1
14.) Highlight Archivist <enter>
15.) ENTRY RIGHTS ALLOWED screen should appear on the left half of the
screen, press the INS key to add additional rights.
16.) Highlight the SUPERVISOR right <enter>
17.) Press the ESC key and choose YES to save changes.
You should see Archivist listed as a trustee of the [ROOT] object with the
supervisory object right.
Example: [OBJECT RIGHTS] [B S] ARCHIVIST.SALES.FIRM1
This gives Archivist supervisory object rights to the directory tree's Root
object. This will ensure that Archivist has the rights needed to backup the
entire directory tree, as well as the server's file system.
4.2 TO GIVE AN EXISTING AUTO LOGIN USER APPROPRIATE RIGHTS USING NWADMIN
------------------------------------------------------------------------
Archivist needs complete access to the entire NDS tree as well as the
server's file system. To best accomplish this, Archivist needs super-
visory rights to the ROOT OBJECT. To give Archivist this necessary
right, follow the steps listed below:
1.) From NWADMIN, select VIEW, then SET CONTEXT. Select the Root. (it
will appear as a globe)
2.) With the Root (globe) highligted, select on OBJECT, then select TRUSTEES
OF THIS OBJECT. Select ADD TRUSTEE.
3.) Choose Archivist from the appropriate container within the directory tree
and select OK.
4.) Archivist should now appear as a trustee of the ROOT OBJECT with the
Browse right selected in the OBJECT RIGHTS box. Select SUPERVISOR
from the OBJECT RIGHTS box, and then select OK.
This gives Archivist the supervisory right to the ROOT OBJECT. Archivist
will be able to backup the NDS tree as well as the File System on the server.
