OES2SP3

March 2014 Scheduled Maintenance Patch

March 2014 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-March-2014-Scheduled-Maintenance | 8935| recommended | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-March-2014-Scheduled-Maintenance

Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-March-2014-Scheduled-Maintenance   | 8935

To apply all OES11 SPa updates run the following command
zypper up -t patch -r OES11-SP1-Updates

To apply all SLES 11 SP2 updates run the following command
zypper up -t patch -r SLES11-SP2-Updates

Key DSfW specific bugs fixed with this… Continue reading

January 2014 Scheduled Maintenance Ptach

January 2014 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-January-2014-Scheduled-Maintenance | 8685| recommended | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-January-2014-Scheduled-Maintenance

Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-January-2014-Scheduled-Maintenance   | 8685

To apply all OES11 SPa updates run the following command
zypper up -t patch -r OES11-SP1-Updates

To apply all SLES 11 SP2 updates run the following command
zypper up -t patch -r SLES11-SP2-Updates

Key DSfW specific bugs fixed with this… Continue reading

November 2013 Scheduled Maintenance

November 2013 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-November-2013-Scheduled-Maintenance | 8483| recommended | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-November-2013-Scheduled-Maintenance

Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-November-2013-Scheduled-Maintenance   | 8483

To apply all OES11 SPa updates run the following command
zypper up -t patch -r OES11-SP1-Updates

To apply all SLES 11 SP2 updates run the following command
zypper up -t patch -r SLES11-SP2-Updates

Key DSfW specific bugs fixed with this… Continue reading

September 2013 Scheduled Maintenance

July2013 Scheduled Maintenance has been released

How to apply the patch with zypper.  YaST Online Update can also be used.

List repositories to ensure the update the server is registerd and the updated repository is present
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-September-2013-Scheduled-Maintenance | 8284| recommended | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-September-2013-Scheduled-Maintenance

Then list the patches again to verify the patch is listed as Installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-September-2013-Scheduled-Maintenance   | 8284| recommended | Installed

September 2013 Scheduled Maintenance for OES11SP1 (8284)

Key DSfW specific bugs fixed with this maintenance patch for OES11SP1

How To Register OES and SLES Servers Using Command Line and a Script

It is important to keep your servers at the current patch level.  Usually there are many bugs fixed and if you come across a new issue it helps Novell Support the the Developers.

I like to use the command line to register my servers.  It is easy and relatively fast compared to the GUI.  Even easier is to use a script.  Just copy the script to the server, modify the e-mail account and registration codes and run the script.  If something happens to the update services and repositories just run the script to clean up the old and re-register.

Below is a video demonstrating the register.sh script

TID 3030847 goes over the command line process.

Note: do not include < > for email or regcodes in the examples below

The command to register a OES server is
suse_register -a email=<user@email.com> -a regcode-sles=<your sles code>… Continue reading

July 2013 Scheduled Maintenance

July2013 Scheduled Maintenance has been released

How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-July-2013-Scheduled-Maintenance | 7889 | recommended | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-July-2013-Scheduled-Maintenance

Then list the patches again to make sure it is installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-July-2013-Scheduled-Maintenance       | 7889 | recommended | Installed

July 2013 Scheduled Maintenance for OES11SP1

Key DSfW specific bugs fixed with this maintenance patch for OES11SP1

  • 806538 – MS cluster support in DSfW
  • 816741 – DSFW: ldapsearch fails when the entryDN specified in search filter contains spaces before or after comma.
  • 818366 – xadsd crashes in rpc__naf_addr_free ()
  • 819547 – DSFW: No results for ldapsearch with… Continue reading

May 2013 Scheduled Maintenance

May 2013 Scheduled Maintenance has been released

How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-May-2013-Scheduled-Maintenance       | 7715    | security    | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-May-2013-Scheduled-Maintenance

Then list the patches again to make sure it is installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-May-2013-Scheduled-Maintenance       | 7715    | security    | Installed

May 2013 Scheduled Maintenance for OES11SP1 7715

Key DSfW specific bugs fixed with this maintenance patch for OES11SP1

  • – 769530: OES11SP1LH: DSfW provisioning task “Assign Rights” – rerun fails with error -614 (entry already exists)
  • – 783005: DSFW: AD Ping doesn’t… Continue reading

April 2013 Scheduled Maintenance

April2013 Scheduled Maintenance has been released

How to apply the patch with zypperList repositories
zypper lr
Should see the following:
nu_novell_com:OES11-SP1-Updates | OES11-SP1-Updates | Yes | Yes

List patches in the Updates repository
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-April-2013-Scheduled-Maintenance | 7421 | security | Needed

Install the maintenance patch
zypper up -t patch oes11sp1-April-2013-Scheduled-Maintenance

Then list the patches again to make sure it is installed
zypper pch OES11-SP1-Updates
Should see the following:
OES11-SP1-Updates | oes11sp1-April-2013-Scheduled-Maintenance     | 7421    | security    | Installed

April 2013 Scheduled Maintenance for OES11SP1 (7421)

Key DSfW specific bugs fixed with this maintenance patch for OES11SP1

  • 770208: OES11SP1LH: DSfW provisioning of DNS generates duplicate forward and reverse lookup zones if they already exists
  • 785697: Provsioning pre healthCheck fails in ADC.
  • 791640: DSFW FTU1:During ADC Provosioning PreCheck, the… Continue reading

January 2013 Scheduled Maintenance for OES2SP3

January 2013 Maintenance patch for OES2P3 has been released

Key DSfW specific bugs fixed with this maintenance patch

  • 787330: Can’t install ADC to DSfW domain that is updated to Sept 2012 patch level
  • 790828: DSfW Assign rights fails in XAD\_RETAIN\_POLICIES=no case and if there are containers with nspm… attr set
  • 792131: DSFW – behavior for isdeleted attribute doesn’t match with Active Directory
  • 792146: DSFW FTU1: “Enable Kerberos” task fails while provisioning for CDC in case of FRD is updated with FTU1 build
  • 792192: DSFW – “unavailableCriticalExtension” being returned when LDAP\_SERVER\_NOTIFICATION\_OID is being used during ldapsearch
  • 793390: Fresh install & configuration of OES11SP1 DSFW Server along with November 2012 patch is failing.

January 2013 Scheduled Maintenance for OES2SP3

  • 567151: provide an icon for group in the history window
  • 624515: Adding an Auxiliary Class fails if a mandatory attribute of the Aux Class is an optional for another class
  • 638542: iManager upgrades… Continue reading

November 2012 Scheduled Maintenance for OES2SP3

November 2012 Maintenance patch for OES2P3 has been released

Key DSfW specific bugs fixed with this maintenance patch

  • 736416: DSfW – Apple OSX Compatibility: Login to DSfW without ID mapping doesn’t work
  • 739450: DSfW: W32Time auth provider for ntp does not work in a cross partition setup
  • 768113: DSFW: xadsd crashes in dcerpc libprot\_ncacn.so library
  • 769945: Assignment of users of authorise RDP Access to Windows Workstation
  • 771993: gposync runs in a loop
  • 774802: xadsd crashes in rpc\_\_list\_element\_alloc ()
  • 778235: gposync tool reports success even if nsimAssignments is not updated
  • 783939: DSFW: No results for LDAP Query when OID is used instead of attribute name in the search filter.
  • 784366: xadsd crashes in rpc\_\_cn\_binding\_inq\_addr () due to failed NTLMSSP authentication requests
  • 790470: KDC service and Domain services daemon does not come up post Nov 2012 patch build installed

Key CIFS, DNS, and AFT specific bugs fixed with this maintenance… Continue reading

Diagnostic tool for DNS Records

The DSfW team has a great tool called check-dns.pl to help diagnose DNS issue with DSfW.

The tool validates essential records for forward and reverse lookups.  This tool can be found at Novell Coolsolutions.

The tool might incorrectly report PDC and DC records if there is more than one Domain Controller.  The Coolsolutions article will be updated with a new check-dns.pl to address this issue.

Until the Coolsolutions article is updated you can download it from dsfwdude.com.

Download

September 2012 Maintenance for OES2SP3 is released

September 2012 Maintenance patch for OES2P3 has been released

Key DSfW specific bugs fixed with this maintenance patch

  • – 667829: On Win2K8 R2 client joined to DSfW domain fails to create xen Desktop image from xendesktop studio
  • – 723878: Normal Domain Users have all filesystem rights to new GPOs with Oes2Sp3
  • -736413: DSfW – Apple OSX Compatibility: memberOf query returns incorrect groupmembership results
  • – 736414: DSfW – Apple OSX Compatibility: ObjectSid queries return incorrect results
  • – 737877: CIFS- Support for CIFS invalid user name/password presented multiple times
  • – 738031: DSFW: Configuration of Windows 2008R2 Remote Desktop Licensing fails
  • – 765721: DSfW – Apple OSX Compatibility: OSX 10.6.x mobile account login issues when attribute loginintruderaddress is populated for users

September 2012 Scheduled Maintenance for OES2SP3

  • 583261: httpstkd randomly stops
  • 667829: On Win2K8 R2 client joined to DSfW domain fails to create xen Desktop image from xendesktop studio
  • 675596: oes-ldap not getting… Continue reading

Updated dsfw_processchk script 2.1.5

I updated the dsfw_processchk script to not only check all essential DSfW processes, but to handle multiple pids for the xadsd process.  The script is great to use if you are worried that a DSfW process will stop and you don’t want to receive several phone calls alerting you to the problem or the DSfW server has been unstable you you need to time track down the invalid requests hitting the DSfW server.

The script will report which processes are running or have stopped. It works by validating that a PID exists for each process. If a process is not running the script has the option to restart the services, send an e-mail that a process has stopped, and update the syslog.

Key configuration

# Set RESTART_DSFW to 1 to reload DSfW services if one or service is not running,
# Set RESTART_DSFW to 0 to leave the services… Continue reading

VMWare and best practices for Timekeeping

Lately I’ve been getting a lot of requests for timekeeping best practices for VMWare

VMWare has a great support article on this.  Below are the SLES recommendations.  The article can be found here

 

SLES 11 (All updates) No additional kernel parameters required.
SLES 10 SP4 on ESX 5.0 and later clock=pmtmr
hpet=disable
SLES 10 SP4 on ESX 4.x Use a VMI enabled kernel.
SLES 10 SP3 on ESXi 5.0 clock=pmtmr
hpet=disable
SLES 10 SP3 on ESX 3.5 and 4.x Use a VMI enabled kernel.
SLES 10 SP3 on ESX 3.0.x and earlier clock=pmtmr
hpet=disable
SLES 10 SP2 on ESXi 5.0 clock=pmtmr
hpet=disable
SLES 10 SP2 on ESX 3.5 and 4.x Use a VMI enabled kernel.
SLES 10 SP2 on ESX 3.0.x and earlier clock=pmtmr
hpet=disable
SLES 10 SP1 clock=pmtmr
hpet=disable
SLES 10 clock=pmtmr
hpet=disable
SLES 9 (All updates) clock=pmtmr
hpet=disable
SLES 8 No additional kernel parameters required.… Continue reading

Script to check if ports are listening

If you are concerned about a DSfW service going down and or the port is not accessible, this script will help keep the services up or notify you of a service going down.  The script will check if each DSfW service is listening, then telnet to each port.  If it can not telnet, the script will log which port is not accessable in the /var/opt/novell/xad/log/dsfw_portchk.log.

The dsfw_portchk.sh script can be ran on PDC or ADC, running Novell DNS or not running Novell DNS.

The script can also e-mail and restart the services if desired.

It will detect if the server has IPv6 enabled so to properly detect the correct port Samba and NetBios is listening on.

The script detects if Novell DNS is configured to start.  Some times on ADC servers DNS is not configured or is not set to run.  The original script… Continue reading

Script to check DSfW Processes

I have a updated script to check all essential DSfW processes.  The name of the script is dsfw_processchk.  The script is great to use if you are worried that a DSfW process will stop and you don’t want to receive several phone calls alerting you to the problem or the DSfW server has been unstable you you need to time track down the invalid requests hitting the DSfW server.

The script will report which processes are running or have stopped.  It works by validating that a PID exists for each process.  If a process is not running the script has the option to restart the services, send an e-mail that a process has stopped, and update the syslog.

Key configuration

# Set RESTART_DSFW to 1 to reload DSfW services if one or service is not running,
# Set RESTART_DSFW to 0 to leave the services… Continue reading

July 2012 Maintenance for OES2SP3 has been released

The July 2012 Maintenance Patch for oes2 sp3 has been release
The 64 bit version can be found here
The 32 bit version can be found here

List of bug fixes in the July 2012 Maintenance for OES2SP3

  • 142091: Inconsistency with naming in the GUI
  • 142183: Secrets added to Gnome Keyring through CASAManager have a default key/value pair of GKPassword/novell
  • 146015: A CASAKeyring is created to add secrets to the Gnome Keyring through CASAManager
  • 147031: CASAManager should have a menu item.
  • 155529: Firefox Tab is available in CASAManager Preferences even if Firefox is not installed
  • 172719: Starting CASAManager with store locked throws exception
  • 200912: After a lun is resized gpt does not work correctly
  • 508945: When micasad is stopped its status is displayed as “dead”
  • 509471: miCASASetCredential handles input argument incorrectly
  • 523398: CASA Manager prints GTK warning messages on terminal
  • 523402: CASA Manager prints messages on terminal when… Continue reading

July 2012 Maintenance for OES2SP3 eDirectory 8.8 SP6 patch 6 released

The July 2012 Maintenance Patch for eDirectory 8.8 SP6 has been release
The 64 bit version can be found here
The 32 bit version can be found here

List of bug fixes in the July 2012 Maintenance for OES2SP3 for eDirectory patch 6

  • – 679767: NMAS Client aborts NCP connection and returns error -625 immediately upon having sent NMAS Start Session request on an idle NCP connection where server sent Watchdog packets.
  • – 733188: eDirectory returns error 48 ‘Anonymous Simple Bind Disabled’ for authenticated TLS bind
  • – 749516: Dclient DDCGetSEVList function does not return cifs users GUID causing CIFS users authorization failure and Memory/CPU spike up.
  • – 765688: Right granted to dynamic group is assigned to whole tree, not just its members
Files included in the patch
novell-dclient-32bit-8.8.6.6-0.7.x86_64.rpm 372.8 KB (381796)
novell-dclient-8.8.6.6-0.7.x86_64.rpm 385.3 KB (394647)
novell-edirectory-jclnt-8.8.6.6-0.7.x86_64.rpm 273.7 KB (280353)
novell-edirectory-ldap-extensions-32bit-8.8.6.3-0.11.x86_64.rpm 28.2 KB (28933)
novell-edirectory-ldap-extensions-8.8.6.3-0.11.x86_64.rpm 29.7 KB (30492)
novell-edirectory-tsands-32bit-8.8.6.6-0.7.x86_64.rpm 257.4 KB… Continue reading

How to find all DNS Locator objects

When installing DSfW into an environment were Novell DNS is already in use, be sure to use the existing DNS Locator object.  It will simplify management for the all the zones and DNS servers.  The locator object is used by the DNS/DHCP Console to return all zones and DNS servers the locator object knows about.  If there are multiple locator objects then the first locator object discovered by the DNS/DHCP Console will be used.  What will happen is only zones and DNS servers the DNS Loctor object knows about will be displayed and managed in the DNS/DHCP Console.  This makes managing DNS difficult.  Before installing doe a quick search for existing locator objects.

Do the following search to discover existing locator objects

ldapsearch -x -b “” -s sub objectClass=dNIPlocator

June 2012 OES2SP3 Hot Patch for NCP and FTP 8170

TID 5144804 (32 bit) and 5144805 (64 bit)

Files Included

ovell-libncputil-1.0.1-0.9.x86_64.rpm 12.4 KB (12788)
novell-libncputil-32bit-1.0.1-0.9.x86_64.rpm 12.5 KB (12825)
novell-ncpenc-5.1.5-0.65.x86_64.rpm 581.9 KB (595918)
novell-ncpns-5.3-0.20.x86_64.rpm 51.3 KB (52589)
novell-ncpserv-2.0.3-0.38.x86_64.rpm 847.5 KB (867866)
novell-ncpserv-nrm-2.0.3-0.25.i586.rpm 341.1 KB (349309)
novell-ncpserv-tools-2.0.3-0.38.x86_64.rpm 182.6 KB (187033)
novell-pure-ftpd-config-1.1.0-0.12.x86_64.rpm 7.4 KB (7647)

June 2012 OES2SP3 Hot Patch for NCP and FTP

  • 612700: pure-ftpd seg fault if init script contains PRELOAD line for libldapsdk.so
  • 612452: Restore of NSS metadata fails via xattr when there are no local replica on the server
  • 745847: AFP core for MapGUIDToID function call
  • 747903: NSS: NSSMU throws error 23388 during volume creation
  • 748802: viewing user quotas from iManager give CIMOM error after deleting the user having quota
  • 749428: SMS Backup Performance degradation after OES2 SP2 to SP3 upgrade
  • 755875: zERR\_USER\_ABORTED when trying to update eDirectory for pool object
  • 756027: OES2SP3 – segfault in adminusd

OES2 SP3 March 2012 Maintenance Patch released

March 2012 Scheduled Maintenance for OES2 SP3

TID 5137450

Here are a list of bug fixes in the patch

  • – 520981: Disable Login does not work if the source server is OES Linux
  • – 612452: Restore of NSS metadata fails via xattr when there are no local replica on the server
  • – 637743: NCPCON NSS VERIFY shows trustee differences after moving a volume from NetWare to Linux
  • – 647600: OES2SP2 ncpcon log level ALL
  • – 666858: Dynamic DNS update for a Windows 7 or Windows 2008R2 WS fails
  • – 668859: Directory quotas incorrectly displayed.
  • – 681363: Samify Objects fails on NetWare License Object
  • – 681567: VLOG does not have any option to specify a different location for stream files
  • – 685243: ndsd core stack in GetVolInfo()
  • – 687449: Copying files across mounted volumes fails with a -50 error on Mac Clients
  • – 692761: CIFS quits working and service needs… Continue reading

How to Install an ADC DSfW server

This is the follow up to the “Prepare for an ADC Install of DSfW” video.
In this video an OES2SP3 ADC DSfW server is installed into an existing domain.
Requirements and suggestions are made along the way.

Be sure to follow TID 7009927 and TID 3564075 before doing the install.

Prepare to install an ADC DSfW server

This video will go through the preparation of installing an ADC DSfW server.  It will guide you through TID 7009927.

 

 

 

Prepare and Install Novell’s Domain Services for Windows

TID 7002172 provides steps to follow to ensure a successful install.

Start with a clean install, eDirectory can not be installed on the server prior to installing DSfW.
Be sure the /etc/hosts has the server name and domain name you want for the name of your domain.
List the DSfW server as the first DNS server in the /etc/resolv.conf
If you removed DSfW and are installing again, be sure to follow TID 7005431 to properly clean up the tree.

 

 

 

 

Categories