| IntranetWare 4.11 Administration - Cramsession |
Typical context format: .CN=Joe.OU=FBI.O=USGovernment
Two types of context available:
Current context - Defines where you are in the tree at the time.
Object context - Defines where an object resides in the tree.
Types of NDS names:
Distinguished name
Object's complete NDS path.
Complete path for Joe: .CN=Joe.OU=FBI.O=USGovernment
Relative distinguished name
Object's NDS path, relative to its current context. Relative distinguished names are not preceded by a dot.
Joe's current context: .OU=FBI.O=USGovernment
Joe's relative distinguished name: CN=Joe
Typeful name
Complete NDS path, which contains descriptors to define the object.
Joe's typeful name: .CN=Joe.OU=FBI.O=USGovernment
Typeless name
Complete NDS path, which does not contain descriptors to define the object.
Joe's typeless name: .Joe.FBI.USGovernment
To rename a physical volume, change its server definition with INSTALL.NLM.
To rename a logical volume, use NWADMIN.
One server can hold up to 64 volumes
Each volume can span up to 32 hard disks
Each volume can support up to 32 segments
IntranetWare default directory structure:
| SYSTEM | Contains OS files, NLMs and NDS programs. By default, access limited to users with Supervisor rights. |
| PUBLIC | Contains user utilities and commands. |
| NLS | Contains message and help files for multi-lingual support. |
| ETC | Sample and miscellaneous files. |
| QUEUES | Folders which store print data. Used as a medium between a print server and printer. Contains *.QDR directories, which are individualized print queue folders. |
| DOC | Contains IntranetWare's documentation files. |
| DOCVIEW | Contains DynaText viewers to view documentation. |
NDS and File System Security
Supervisor rights cannot be blocked by an IRF for file system security
Supervisor rights can be blocked by an IRF for NDS security.
Rights from NDS to not transfer into the file-system, except for supervisory rights.
Creator is always given supervisor rights to the file/directory they create.
Container is always given RF access to SYS:PUBLIC
User is always given RWCEMF access to their own personal directory.
In NWADMIN:
Rights to Files and Directories is used to assign rights from a user's aspect.
Trustees of this Directory is used to assign rights from a directory's aspect.
IRF (Inherited Rights Filter):
When the filter is applied, the rights specified are the rights allowed to pass through.
If Joe has RF rights, and goes through an IRF with only F specified, Joe keeps only F rights.
Security equivalence:
When one object's access rights are specified to be equivalent of another object's access rights.
Ancestral Inheritance:
Any object is security equivalent to its parent container.
Clients for IntranetWare
| NIOS.VXD | Core Client32 component, running as a VXD (virtual device driver). |
| LSLC32.NLM | Link Support Layer for protocol switchboarding. |
| x.LAN | NIC driver. Specific driver for card, where x= specific file name relative to the card's driver. |
| CMSM.NLM | Media Support Module in the ODI architecture. |
| ETHERTSM.NLM | Provides Ethernet topology support. |
| IPX.NLM | Communications protocol language. |
| CLIENT32.NLM | Module for all Client32 services. |
Client 32 file requirements for DOS:
| NIOS.EXE | Core Client32 component, running as a EXE (executable). |
| LSLC32.NLM | Link Support Layer for protocol switchboarding. |
| x.LAN | NIC driver. Specific driver for card, where x= specific file name relative to the card's driver. |
| IPX.NLM | Communications protocol language. |
| CLIENT32.NLM | Module for all Client32 services. |
| CONFIG.SYS | Must have LASTDRIVE statement to specify the last drive letter that is available for network use. |
| AUTOEXEC.BAT | Must activate C:\NWCLIENT\STARTNET.BAT. |
| STARTNET.BAT | Initializes ODI and VLM drivers. |
| NET.CFG | Customizes ODI and VLM settings. |
Preferred Server, Context, NDS Tree and login settings are specified in the NET.CFG file when using Client32 for DOS, and in the Network Properties page when using Client32 for Windows 95.
Login Scripts
Users can only be assigned to one profile group.
Place NO_DEFAULT in the profile or container script to avoid executing a default login script.
Remarks are used to insert a line of text which will be ignored by IntranetWare.
REMARK, REM, ; , or * can be inserted before the line of text to define it as a remarked line.
REM MAP F:=SYS:PUBLIC
DOS executables, commands unrecognized by an IntranetWare login script, need to be preceded by # to specify that the script will need to run an external command.
#CAPTURE P=HPLJColor5
File Server Security
To enable RMF for remote access:
Type at the console LOAD REMOTE.
Type either:
LOAD RSPX - to allow remote management across a LAN
LOAD RS232 - to allow remote management through dialup access.
LDREMOTE can be loaded to encrypt passwords.
Commands
Know how to use the following commands and all of their options.
| MAP | Displays a list of current drive mappings. |
| MAP X:=SERVER1\SYS: | Maps the X drive to the SYS volume on SERVER1. |
| MAP N SERVER1\SYS: | Maps the next available drive to the SYS volume on SERVER1. |
| MAP DEL X: | Deletes the drive mapping to X:. |
| MAP S2:=SYS:SYSTEM | Makes the SYS:SYSTEM directory the second search drive. |
| MAP C S2: | Maps the second search drive to a network drive. |
| /SH | Displays a list of current LPT mappings. |
| /S SERVER1 | Specifies that you are mapping to SERVER1 as the server you will be printing to. |
| /Q=HPLJCOLOR5 | Specifies that you are mapping the the queue HPLJCOLOR5. |
| /C | Specifies the number of copies you would like printed each time. |
| /B | Enables a banner to be printed before each job to decipher who sent the print job. |
| /NB | Disables banner printing. |
| /CR | Print job will be saved to a text file, instead of a being printed. |
| /L=1 | Specifies LPT1 as the mapped local port. |
| /NOTI | Will send a message to user after the print job is sent. |