Installing eDirectory for NetWare

eDirectory for NetWare can co-exist with the following NDS^® and eDirectory versions:

• NetWare 4.11 or 4.2 with NDS 6.09 or later
• NetWare 5 with Support Pack 5 or later , and NDS 7.47 or later (but earlier than NDS 8)
• NetWare 5 with Support Pack 5 or later , and NDS 8.51 or later
• NetWare 5.1
• NDS eDirectory 8.5 on Windows NT/2000, NetWare, Solaris, Linux, or Tru64 UNIX*
• Novell eDirectory 8.6 on Windows NT/2000, NetWare, Solaris, or Linux

If your eDirectory tree does not have a Novell Certificate Server^TM, the eDirectory installation program does the following:

• Creates a Security container object for the entire eDirectory tree

  This object is created at the top of the eDirectory tree and must remain there.

• Creates an Organizational Certificate Authority (CA) object
• Places the Organizational CA object in the Security container

Only one Organizational CA object can exist in an eDirectory tree. Because you must not move this object from one server to another, ensure that the first eDirectory server is the one that you intend to permanently host the Organizational CA object. For more information, see Understanding the Novell Certificate Server.

System Requirements

• If you are using RCONSOLE, you will need a ConsoleOne^TM administrator workstation with the following:
  • A 200 MHz or faster processor
  • A minimum of 64 MB RAM (128 MB recommended)

• Novell Client^TM software that shipped with NetWare 5 or later.
• Administrative rights to the eDirectory tree, so that you can modify the schema.

For additional information, see the following:

• System Requirements for eDirectory in AppNotes
• Hardware Requirements

Prerequisites

If you are installing into a tree that has NetWare 5 servers, each NetWare 5 server must be running NetWare 5.0 SP5 Support Pack 6a or later.

If you are upgrading eDirectory 8.6 on a NetWare 5.1 server, the NetWare 5.1 server must be running NetWare 5.1 SP2a or later.

Updating the eDirectory Schema for NetWare

When upgrading a NetWare 5.x server to eDirectory 8.6, you must update the eDirectory schema by running DSREPAIR on the server that has the master replica of the Tree partition.

IMPORTANT:  If the master replica of the Tree partition resides on an NT server, follow the instructions in Updating the eDirectory Schema for NT/2000.

If one or both of the following conditions exist, you must run DSREPAIR.NLM before installing the first eDirectory server in your tree:

• Any NetWare 5 server in your eDirectory tree is running eDirectory 8.
• Your first installation of eDirectory is on a NetWare 5 server that does not hold a writeable replica of the root 8.6 partition.

To update the schema:

1. Copy the appropriate DSREPAIR.NLM file from the product CD (or downloaded and expanded file) to the SYS:\SYSTEM directory of the server that contains the master replica of the Tree partition.

   
   Table 3. DSREPAIR Versions

   For This Version of NetWare	With This Version of NDS	Copy
   4.11 or 4.2	6.09 or later	PATCHES\DSREPAIR\ NW4X\DSREPAIR.NLM
   5.0 or later	NDS 7 (version 7.47 or later)	PATCHES\DSREPAIR\ NW5X\DSREPAIR.NLM
   5.0 or later	8.11 or 8.17	Not supported
   5.0 or later	8.51 or later	PATCHES\DSREPAIR\ NWNDS8\DSREPAIR. NLM

2. At the server console of the master replica of the Tree partition, load DSREPAIR.NLM.

3. Select Advanced Options Menu > Global Schema Operations.

4. Enter the Administrator's name (for example, Admin.VMP) and password.

5. Select Post NetWare 5 Schema Update > Yes.

   DSREPAIR.NLM updates the schema and posts the results to the DSREPAIR.LOG file.

   Ignore errors associated with adding object classes. DSREPAIR.NLM is simply applying the Post NetWare 5 Schema Update changes to each object.

6. Copy the appropriate patch version of DSREPAIR.NLM to each NetWare server in the eDirectory tree.

   Use Table 3 as a reference. Having a correct version on each server ensures that the schema needed for eDirectory is properly maintained when DSREPAIR.NLM is run in the future.

   If you use an earlier version of DSREPAIR.NLM and select Rebuild Operational Schema, schema enhancements made by the Post NetWare 5 Schema Update will be lost. To resolve lost schema enhancements, run DSREPAIR.NLM according to the following table.

   If you are running DSREPAIR.NLM from here	Do this
   A server that holds a writable replica of the root partition	Reapply the Post NetWare 5 Schema Update to your eDirectory tree.
   From any other server	Click Advanced Options > Global Schema Operations > Request Schema from Tree.

   This action resynchronizes the schema from the root of the tree.

7. Close DSREPAIR.NLM before installing eDirectory on the server.

   If DSREPAIR.NLM is loaded, the server might not restart.

Installing a Support Pack

Table 4. Installing a Support Pack

1. (Conditional) Download the latest support pack to the NetWare 5.x server.

   For example, download to SYS:\.

   If you purchased a support pack CD from Support Connection, skip this step.

2. (Conditional) Expand the support pack.

   For NW51SP1.EXE, the support pack might take several minutes to verify an ARJ-SECURITY envelope. After verification, the support pack creates an NW5SPX directory and places subdirectories and files there.

   If you purchased a CD from Support Connection, skip this step. The support pack is already expanded.

3. At the server console, start NWCONFIG.NLM.

4. Select Product Options > Install a Product Not Listed.

5. Press F3 (F4 if you're using RCONSOLE) > specify the path to the expanded Support Pack files, such as SYS:\NW5SP4.

6. Select options.

   Follow the online instructions to install the support pack.

   During installation, the support pack might prompt you concerning extending the schema. Although you have already extended the schema for eDirectory, you most likely need to extend the schema for other functionality, such as Novell Licensing Services.

7. Take the server down, then restart it.

   If you checked the Reboot Server option in Step 6, the server automatically restarts.

Installing eDirectory

1. (Conditional) If you are upgrading eDirectory, do the following:

   1. In the AUTOEXEC.NCF file, comment out the lines that load virus scanners, database applications such as Sybase* or Oracle*, backup applications, and other programs that rely on files being continually open and volumes being mounted.

      During the eDirectory installation, the software must dismount volumes so that trustee assignments can be migrated.

      Be aware that virus scanners and other programs might be embedded inside other products, for example, ZENworks^TM, ManageWise^TM, and BorderManager^TM.

   2. Restart the server and verify that the programs and applications referred to in Step 1.a are not running.

   HINT:  If you uncompress the volume you are installing eDirectory on, the install will finish quicker.

2. (Conditional) If you have an IP-only environment, load IPXSPX.NLM.

   NWCONFIG.NLM looks to Btrieve* for the product list. Btrieve subsequently requires IPX^TM. Loading IPXSPX.NLM allows Btrieve to load. When you reboot the server, IPXSPX.NLM does not reload, so you have an IP-only environment again.

3. At the server console, load NWCONFIG.NLM.

4. Select Product Options > Install a Product Not Listed.

5. Press F3 (F4 if you're using RCONSOLE) > enter the path to the eDirectory files under the NW directory, for example, SYS:\NW.

   Follow on screen prompts concerning license agreements, the readme file, and tips.

   After files are copied, the server automatically restarts and begins to install components for ConsoleOne and Novell Certificate Server. For more information on Novell Certificate Server, see Understanding the Novell Certificate Server.

6. Enter the administrator's login name (for example, Admin.VMP).

   IMPORTANT:  This window might close before you enter this information. If it does, toggle (Alt+Esc) to the screen and enter the information. Otherwise, the installation will not be complete.

7. Follow the online instructions concerning the Certificate Server, LDAP, languages, components, and products to install.

8. When the installation is completed, restore the lines that you commented out in Step 1.a > restart the server by clicking Yes.

Repeat this procedure for each NetWare server you want to upgrade to eDirectory 8.6 for NetWare.

Lost Trustee Assignments on NFS Gateway Volumes

The eDirectory installation process does not upgrade trustee assignments on NFS Gateway volumes. If you are hosting NFS Gateway volumes on a server upgraded to eDirectory, those trustee assignments are mapped to non-existent trustees.

To delete the inaccurate trustee assignments, complete the following steps:

1. On the server, load UNICON > authenticate to eDirectory.

2. Select Start/Stop Services > NFS Gateway Server > Del.

3. From a workstation, log in to the server > delete the file SYS:\NFSGW\SFSxxxx.DAT.

4. At the server, load UNICON again > authenticate to eDirectory.

5. Select Start/Stop Services > NFS Gateway Server.

You will need to manually create new trustee assignments for eDirectory objects to any NFS Gateway volumes.