admin trustee rights

[Coopfab]

We have successfully migrated to a new server using the migration wizard,
( a great time and aggravation saver). The only issue are the directory
rights for the admin. In NEAT, it shows that the admin has full rights for
the entire SYS but some folders he has none. When trying to Set Rights for
these folders the message appears that admin does not have sufficient right
to modify this trustee assignment. Looking in Netware Administrator it
appears that the admin has supervisor rights to the whole tree. Obviously
something is not set properly.

Where do I look and how do I set supervisor rights for the entire tree and
context?

Thanks for your help.

M. Cooper

[AndersG]

Coopfab,

> Where do I look and how do I set supervisor rights for the entire tree and
> context?
>

Does Admin have S rights to ROOT and the server object?

- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop (http://support-forums.novell.com)
Pedago, The Aaland Islands (N60 E20)
Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195

[Coopfab]

The admin has S rights to the sys.context and NSS.admin context.

Mcooper

"AndersG" <dal...@nomail.to.me> wrote in message
news:VA.000007e...@nomail.to.me...

[AndersG]

Coopfab,

> The admin has S rights to the sys.context and NSS.admin context.
>

And what about the NCP server object?

[Coopfab]

Everything seems to be in order but we still don't have sufficient rights to
all folders.

Another issue has come up which I believe is related to this issue. We are
now unable to submit backup jobs with arcserve, we get login denied messages
due to insufficient rights.

Is there a DSrepair command that can be run to correct our trustee and
rights issue? Something is amiss since we did our migration.

Thanks for your continued support.

M. Cooper

"AndersG" <dal...@nomail.to.me> wrote in message
news:VA.000007e...@nomail.to.me...

[AndersG]

Coopfab,

> Everything seems to be in order but we still don't have sufficient rights to
> all folders.

Have you checked "Effective rights" in NWAdmin/Consoleone to verify that it is
indeed the case?

> Another issue has come up which I believe is related to this issue. We are
> now unable to submit backup jobs with arcserve, we get login denied messages
> due to insufficient rights.
>

See above, ie rights to the AS queue

[Coopfab]

The effective rights for the admin for SYS: are; Supervisor,Read, Write,
Create, Erase, Modify, File Scan, Access Control. This information came
from NWAdmin.

"AndersG" <dal...@nomail.to.me> wrote in message

news:VA.0000083...@nomail.to.me...

[AndersG]

Coopfab,

> The effective rights for the admin for SYS: are; Supervisor,Read, Write,
> Create, Erase, Modify, File Scan, Access Control. This information came
> from NWAdmin.
>

OK. Then check for a file you cannot access.

[Edison Ortiz]

Along with Anders' suggestion:

Also, did you install user licenses ? It sounds like the Admin
connection is employing a licenseless connection.

--
Edison Ortiz
Novell Product Support Forum SysOp
(No Email Support, Thanks !)

[Coopfab]

During the migration process I'm quite certain I installed the server
license when I installed the user connection licenses. However, I went to
install the server license, which has 5 user licenses on the same diskette,
and got the error message, "Cannot install this license because the network
is unavailable or because licensing is not available. Create license
service provider and reinstall licenses". I created the provider, tried to
install the licenses again, and got the same error messages.

What's next? Uninstall licenses and reinstall?

Thanks very much for your interest.

Michael

"Edison Ortiz" <eor...@nscsysop.com> wrote in message
news:4120D040...@nscsysop.com...

[Edison Ortiz]

> Uninstall licenses and reinstall?

Yes.

[Coopfab]

Here's what happened.

"An error occurred while trying to find licenses to remove. NLSInstalled
returned error code 0XC0001003. Cannot remove licenses."

What now?

"Edison Ortiz" <eor...@nscsysop.com> wrote in message

news:4120D6F9...@nscsysop.com...

[AndersG]

Coopfab,

> "An error occurred while trying to find licenses to remove. NLSInstalled
> returned error code 0XC0001003. Cannot remove licenses."
>

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10027731.htm

delete the lsp_servername object and all licenses
run dsrepair until no errors
run setupnls. It will ask for login, use the fll DN ir .admin.ou.o
install licenses

[Edison Ortiz]

Follow Anders' suggestions. It sound your problem was originally license
related.

[Donald Albury]

On Mon, 16 Aug 2004 16:47:38 GMT, "Coopfab"
<mic...@cooperfabrics.com> wrote:

>What now?

What version and support pack of NetWare?

---------------
Donald Albury
Novell Product Support Volunteer SysOp
Sorry, no replies to e-mail responses

"If something is so complicated that you can't
explain it in 10 seconds, then it's probably not
worth knowing anyway." Bill Waterson

[Coopfab]

sp6

"Donald Albury" <dal...@not.bellsouth.net> wrote in message
news:0972i05inonogvsat...@4ax.com...

[Coopfab]

In console one I can delete the nls_lsp_servername object but cannot delete
the licenses. I do not have "object delete rights".

How cab we work around this?

Thanks for your continued attention and help.

Michael

"AndersG" <dal...@nomail.to.me> wrote in message

news:VA.0000084...@nomail.to.me...

[Donald Albury]

On Mon, 16 Aug 2004 21:54:54 GMT, "Coopfab"
<mic...@cooperfabrics.com> wrote:

>sp6

NW 5.0 or NW 5.1?

[AndersG]

Coopfab,

> In console one I can delete the nls_lsp_servername object but cannot delete
> the licenses. I do not have "object delete rights".
>

What is shown as "Installer" on the license? You need to be logged in as
that.

[Coopfab]

In trying to determine the installer through NWadmin, I now get the error
0xc0001008, LS_Network_unavailable. I checked and the NDS is open.

I feel like I'm in an endless loop. If I installed a new server license
would I then be able to delete the old licenses?

Thanks for your continued support.

Michael

"AndersG" <dal...@nomail.to.me> wrote in message

news:VA.0000085...@nomail.to.me...

[Coopfab]

NSBS 5.1

"Donald Albury" <dal...@not.bellsouth.net> wrote in message

news:j4k2i016hncvn4o6g...@4ax.com...

[AndersG]

Coopfab,

> In trying to determine the installer through NWadmin, I now get the error
> 0xc0001008, LS_Network_unavailable. I checked and the NDS is open.
>

Sorry. Run setupnls, make sure that nls_lsp is running. Delete the
licenses, then delete the LSP objects, then dsrepair, then Setupnls and
reinstall licenses.

[Coopfab]

Nothing is working. . I ran setupnls and nls_lsp is running. I am still
blocked from deleting the licenses.

Please help me figure out a creative work around. I'm desperate.

Thanks

Michael

"AndersG" <dal...@nomail.to.me> wrote in message

news:VA.0000086...@nomail.to.me...

[AndersG]

Coopfab,

> I am still
> blocked from deleting the licenses.
>

Same error?? One way that I know about is to use NWadmin without
snapins:

Copy sys:public/win32 to a local disk. Delete the snapins dir
Run NWadmin32 from there. This should allow you to delete the licenses

As a last resor, use DSBROWSE
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10054705.htm

[Donald Albury]

On Tue, 17 Aug 2004 12:46:30 GMT, "Coopfab"
<mic...@cooperfabrics.com> wrote:

>NSBS 5.1

OK, that's up-to-date enough. Keep working with Anders. :-)

[AndersG]

Donald Albury,

> Keep working with Anders. :-)
>

But you are awake when I am not ;)

[Donald Albury]

On Tue, 17 Aug 2004 19:12:41 GMT, AndersG <dal...@nomail.to.me> wrote:

>But you are awake when I am not ;)

Go back to sleep! :-)

[AndersG]

Donald Albury,

> Go back to sleep! :-)
>

Will shortly. It is but 22:48 ;)

[Coopfab]

Anders,

Please tell me you have another trick up your sleeve. NWadmin without
snapins and DSBROWSE did not work! In dsbrowse I get error
messages -629, -672, -649 trying to delete the licenses.

Please reach into the deep recesses of your vast knowledge and come up with
another option.

Thanks for your time and wisdom.

Michael

"AndersG" <dal...@nomail.to.me> wrote in message
news:VA.0000086...@nomail.to.me...

[Donald Albury]

On Tue, 17 Aug 2004 22:03:47 GMT, "Coopfab"
<mic...@cooperfabrics.com> wrote:

>Please reach into the deep recesses of your vast knowledge and come up with
>another option.

While Anders is sleeping (he's 6 hours ahead of me), I'll take a stab
at it. Is it possible that the licenses were installed by another
user account? In any case, go to http://www.dreamlan.com/main.htm and
grab the free download rmLicIRF.zip (the name is case sensitive) and
use it to remove the IRF on the license objects, and see if that will
let you delete them.

[AndersG]

Coopfab,
> 629
>
That means that you cannot delete a container whilst it has children. You need to enter on the license envelope object, ie:

+------------------------------------------------------------------------------+
Ś Object Browser Current Context: O=ASP Objects: 56 Ś
Ś------------------------------------------------------------------------------Ś
Ś Object Name Object Class Sub Count Entry ID Ś
Ś ŚCN=PAMIR_WOLService Ś zendmWolService Ś 00000000 Ś 000082BA Ś
Ś ŚCN=Role Based Service 2 Ś rbsCollection2 Ś 00000068 Ś 000080BF Ś
Ś ŚCN=SAS Service - PAMIR Ś SAS:Service Ś 00000000 Ś 0000804B Ś
Ś ŚCN=Server Package Ś zenServerPackage Ś 00000000 Ś 000082F5 Ś
Ś ŚCN=SMS SMDR Group Ś Group Ś 00000000 Ś 00008054 Ś
Ś ŚCN=SSL CertificateDNS - PAMIR Ś NDSPKI:Key Material Ś 00000000 Ś 0000804F Ś
Ś ŚCN=SSL CertificateIP - PAMIR Ś NDSPKI:Key Material Ś 00000000 Ś 0000804D Ś
Ś ŚNLS:Publisher=Novell+NLS:Pr... Ś NLS:Product Conta... Ś 00000001 Ś 0000830F Ś
Ś ŚNLS:Publisher=Novell+NLS:Pr... Ś NLS:Product Conta... Ś 00000002 Ś 00008311 Ś<- Enter here:

Which will bring you to:
+------------------------------------------------------------------------------+
Ś Object Browser Current Context: NLS:Publisher=Novel... Objects: 2 Ś
Ś------------------------------------------------------------------------------Ś
Ś Object Name Object Class Sub Count Entry ID Ś
Ś ŚNLS:License ID=SN:xxxxxxxx Ś NLS:License Certi... Ś 00000000 Ś 00008312 Ś
Ś ŚNLS:License ID=SN:yyyyyyyy Ś NLS:License Certi... Ś 00000000 Ś 00008313 Ś
Ś Ś Ś

Then delete the individual licenses. After that you should be able to delete the license envelope.

[Coopfab]

First of all, thank you Anders and Donald for your continued support.

I installed and ran rmlicirf and was then able to delete the licenses, lsp
object. After confirming through NWadmin that everything was deleted I went
to nwconfig and again made sure the licenses were removed. I did a
dsrepair, setupnls and then went to install the licenses. I couldn't
install them since nwconfig said they were already installed. I rebooted
the server and went through this process again with the same result,
licenses already installed.

What do I have to do to get a clean boot with no record of the licenses?

My continued thanks.

Michael

"Donald Albury" <dal...@not.bellsouth.net> wrote in message

news:8l55i01jtlhl04f55...@4ax.com...

[Coopfab]

I tried DSBrowse and could delete the licenses but they still came back.
Is there a file that stores the license information that needs to be
deleted?

Please don't give up on me.

Michael

"Donald Albury" <dal...@not.bellsouth.net> wrote in message

news:8vd7i01mussbtgp31...@4ax.com...
> Michael,
>
> Maybe DSBrowse will help. See TID 10054705
> (http://support.novell.com/cgi-bin/search/searchtid.cgi?/10054705.htm).

[Donald Albury]

On Wed, 18 Aug 2004 20:19:56 GMT, "Coopfab"
<mic...@cooperfabrics.com> wrote:

>I tried DSBrowse and could delete the licenses but they still came back.
>Is there a file that stores the license information that needs to be
>deleted?

Have you run an NDS health check recently? If not, please do so, to
see if everything is synching correctly. Also, after deleting one of
the problem objects, use DSBrowse to look at all replicas of the
partition to see whether the deletion is propagating to all replicas.

[Coopfab]

I'm out of the office for 2 days and will check over the weekend.

Michael

"Donald Albury" <dal...@not.bellsouth.net> wrote in message

news:t4n7i0d3vdqt3nu5l...@4ax.com...

[AndersG]

Coopfab,

> I'm out of the office for 2 days and will check over the weekend.
>

Please do. When you have deleted the licenses, please give DS time to
sync. Make sure that you have no obituaries. Ie do a check external
references from DSrepair.

[Coopfab]

I have finally had success thanks to you. I was able to remove and
reinstall the licenses. Thanks you again for all your time and efforts.

What still isn't working correctly is the original user rights issue.
Users are able to access folders that they have not been given rights to. I
found this document,
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10020512.htm, but I
have found NWadmin confusing to work with. Do you know of a similar article
that focuses on using ConsoleOne?

Thanks

Michael

"AndersG" <dal...@nomail.to.me> wrote in message

news:VA.0000088...@nomail.to.me...

[AndersG]

Coopfab,

> http://support.novell.com/cgi-bin/search/searchtid.cgi?/10020512.htm, but I
> have found NWadmin confusing to work with. Do you know of a similar article
> that focuses on using ConsoleOne?
>

No. Sorry. I would turn on Policy Manager tracing to verify that that user
indeed has a licensed connection.