Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Re: Can't edit DAS object.

5 views
Skip to first unread message

Craig Johnson

unread,
Oct 5, 2009, 2:13:15 PM10/5/09
to
In article <allenjack...@no-mx.forums.novell.com>, Allenjackson
wrote:
> I see a few posts regarding this problem. Has anyone actually resolved
> this issue (which I'm having too). I'm also on nw65sp8. Radius is
> working fine I just cant edit the object.
>
I've been working on it, but no solution yet. I'm strongly suspecting
something changed with eDir 8.8x. Did you set up the DAS with 8.7.3.x
or earlier, and then upgrade the server to 8.8x? It seems the only
variable I can think of in my situation, and one of my clients. I've
tried various versions of ConsoleOne.

If I have time I'm going to set up a test environment with 8.7.3.9,
create and edit a DAS, then update it to 8.8.5. If it breaks, then I'd
like to add another 8.7.3.9 server into to the tree and see if I can
edit the DAS object by working through that server somehow.


Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***


Craig Johnson

unread,
Oct 5, 2009, 4:51:38 PM10/5/09
to
In article <allenjack...@no-mx.forums.novell.com>, Allenjackson
wrote:
> Thanx for replying. I did set this up under 873x and BM38. The real bad
> part about this is that if I even try to edit the das, I actually lose a
> client for each one I try to add (so I've stopped doing that). I know
> that someone here claimed that they used the c1 nmas snapin from the
> BM38 cd but I don't know where mine is or even if I still have it laying
> around somewhere.
>
I've tried that, and it didn't help. I also looked for a while at the
Other attributes, in a ConsoleOne that did not have RADIUS snapins
installed. I could see some issues when adding new entries, and through a
more or less trial-and-error method, was able to delete some problem
entries. But I didn't figure out the syntax enough to know how to
manually edit entries to get a new entry set up. (I was able to find the
IP address entries, in hex, for the existing clients, which helped a bit).

Craig Johnson

unread,
Oct 5, 2009, 6:13:35 PM10/5/09
to
By the way, I've asked Novell for information on this issue.

Craig Johnson

unread,
Oct 6, 2009, 2:11:39 PM10/6/09
to
I got info, but it's not what I wanted to hear. Since RADIUS (NMAS or
BMAS versions) isn't supported, Novell won't investigate or fix it.

However, I'm still willing to see if I can come up with a workaround.
I have only two areas of investigation that make sense to me:
1. ConsoleOne versions. I've tried the version that came on the 3.8
CD's, and that didn't work. I've also tried the latest version, but
I'd appreciate it if someone else could do some experiments on either
version and any others that come to mind to double-check.
2. EDir versioning. It's not reasonable to backrev eDir 8.8.x, but
perhaps adding an 8.7.3.9 server into the mix and running ConsoleOne
from there would work. Not much of a workaround, but it may end up
being the only thing we've got, unless some developer can modify a
ConsoleOne plugin.

Craig Johnson

unread,
Oct 7, 2009, 7:49:56 PM10/7/09
to
I don't think the trace would help me.

So... You created an older tree, used older software, and it still
didn't work?

Mysterious

unread,
Oct 8, 2009, 3:43:20 AM10/8/09
to
allenjackson wrote:
> No luck on old tree. I did a trace and there were no errors packet-wise.
> I noticed that alot of CA Cert info got passed back and forth. If you'd
> like to see the trace of me editing the das object and saving it then
> let me know.
> AJ


Did you try to search in support.novell.com regarding this issue? So far
as i know, there are already 3 tids that talk about it.

Mysterious

unread,
Oct 8, 2009, 9:59:20 AM10/8/09
to
allenjackson wrote:
> I have seen tid's like 3886714 and 3077458. I'm sure Craig has as well.
> Does this mean that these worked for you? If they did then please zip
> your c1 and attach it to this thread or email it to me. Let us know.
> Thank you...
> Allen
>

I do not have this problem but as nmas radius is not longer supported
already for years, you only chance is that one of this tids provide you
with the solution.

Craig Johnson

unread,
Oct 8, 2009, 3:24:04 PM10/8/09
to
In article <allenjack...@no-mx.forums.novell.com>, Allenjackson
wrote:
> I have seen tid's like 3886714 and 3077458.
>
I've definitely seen those. Tried the NMASWrap.dll trick, but it
didn't help.

Craig Johnson

unread,
Oct 8, 2009, 10:31:20 PM10/8/09
to
In article <allenjack...@no-mx.forums.novell.com>, Allenjackson
wrote:
> What's funny about this is that when I add a client to the das and save
> it, it gets written to the SAS:login configuration section in the
> "other" tab. So even though it appears to be written to the object I get
> unknown radius client when I radping the server.
>
I've noticed that too. It puts in entries that it then doesn't recognize.
I'm guessing there is a syntax error in how it starts or ends the entry,
though it's a complete mystery to me why it changed. I've seen one entry
cause another one to disappear, and the other entry to come back when I
manually deleted the problem entry in the Other menu.

Craig Johnson

unread,
Oct 13, 2009, 11:16:47 AM10/13/09
to
Can you add a client in the working tree, then manually make the same
changes to the NW 6.5sp8 tree, using the Other tab in ConsoleOne?
(Duplicate the entry completely manually, using a ConsoleOne that
doesn't have the Radius snapins).

Craig Johnson

unread,
Oct 14, 2009, 11:29:22 AM10/14/09
to
One of the other sysops is going to have a look at the situation (NMAS
RADIUS update failures) this weekend. Hopefully he'll be able to come
up with some explanation, and perhaps a fix.
0 new messages