Novell Advanced Audit Service

Excessive Memory Consumption

Using NAAS on a NetWare^® 6 Support Pack 1 sever running on a Pervasive* database might cause the NetWare server that hosts the NAAS database to abend when there is excessive memory consumption.

To avoid this, do one of the following:

• Move the Pervasive database to a machine with 512 MB or more RAM.
• When the memory buildup occurs, restart the Pervasive database on the server.

  View the Loaded Module screen in the Monitor screen of the NetWare server and verify whether there is a steady and excessively high increase in the memory consumption of NWSQLMGR.NLM and NWODBCEI.NLM.

  If the memory is increasing, stop and restart the Pervasive database by using MGRSTOP and then MGRSTART at the server console. This will refresh the memory occupied by the Pervasive NLM^TM programs; it will not disrupt auditing. The frequency of this start/stop can be determined by viewing the memory consumption behavior of the NLMs and NAAS configuration.

• Install Pervasive SQL 2000i SP4, the latest version of the Pervasive database. For more details, see the Pervasive Web site.
• NAAS also works with the Oracle* database. As an alternate to the Pervasive database, Oracle 8i can be installed and configured on NetWare 5.1 to be used as a NAAS database.

NAAS Components Fail to Come Up on a Non-eDirectory Replica Server

To resolve this, do one of the following:

• Load the NAAS Agent on the nonreplica server:

  adagtset -nr username password

  where the username is the dot-delimited Fully Distinguished Name for a user with the Supervisor right on the partition with the server.

• Load the NAAS server on the non-replica server by entering the following at the server console:

  adsrvset -nr username password

  where username is the dot-delimited Fully Distinguished Name for a user with the Supervisor right on the partition with the server.

The NAAS components can then be loaded following the normal procedure.

Deploying NAAS in a Mixed Environment with NetWare 6 and NetWare 6 Support Pack 1 Servers

NOTE:  If you are configuring and using NAAS for the first time after installing NetWare 6 with Support Pack 1 and do not have NAAS on any other NetWare 6 server, this issue isn't applicable to your setup.

Auditing eDirectory^TM on NetWare 6 servers with Support Pack 1 installed uses a new eDirectory event template with Service Version 2.0, Service Identifier NDS^®, and a new eDirectory event policy. The new eDirectory event template and eDirectory event policy are created as part of the default configuration of NAAS on NetWare 6 Support Pack 1.

Auditing eDirectory on NetWare 6 servers without Support Pack 1 continues to use the eDirectory template with Service Version 1.0, Service Identifier NDS, and the eDirectory event policy derived from it.

In order for eDirectory auditing to function on NetWare 6 Support Pack 1 servers, you must reconfigure the existing NAAS framework using the NAAS snap-ins that ship with Support Pack 1.

IMPORTANT:  Only the administrator can reconfigure the existing NAAS configurations, using the NAAS default configuration utility.

To successfully audit eDirectory after installing NetWare 6 Support Pack 1, complete one of the following procedures.

If the Auditor has not created an eDirectory event policy template and an eDirectory event policy in the eDirectory partition manually (NAAS uses the DS Event policy template and DS Event Policy created by the NAAS default configuration utility on NetWare 6), complete the following steps:

1. Manually replicate the contents of the old eDirectory policy contents to the newly created eDirectory event policy.

2. Restart NetWare servers with Support Pack 1 after reconfiguring the NAAS framework.

3. To refresh templates and policies, restart ConsoleOne^® after reconfiguring NAAS.

If the Auditor has created new eDirectory event policy template or eDirectory event policy in the eDirectory partition manually (by creating new ones in addition to the DS event policy template and DS event policy created by the default configuration utility on NetWare 6), complete the following steps:

1. For every eDirectory event template and eDirectory event policy in the partition, other than DSEventPolicyV2 and DSEventPolicyTemplateV2 created by default, manually create a new eDirectory event template using the EVENTS.TXT file located in the SYS:\AUDIT\naasEvents folder on all NetWare 6 Support Pack1 servers and a new eDirectory event policy respectively.

2. Manually replicate the contents of the old eDirectory policy contents to the newly created directory event policy.

3. Replicate associations to new event policies.

   For example, associate the new eDirectory event policies to wherever the old ones were associated.

4. After reconfiguring the NAAS framework, restart your NetWare 6 Support Pack 1 servers.

5. To refresh templates and policies, restart ConsoleOne after reconfiguring NAAS.