Re: Can't add clients to DAS object

[Craig Johnson]

In article <Mike021548...@no-mx.forums.novell.com>,
Mike021548141 wrote:
> NMAS snapin issue?
>
Sorry - don't have time here to investigate thoroughly, but it does
sound like it may be a snapin issue.

I'm wondering if perhaps using an older version of ConsoleOne might
work.

Unfortunately, it will be a week at least before I get home again and
can debug this on my own test servers. I was hoping to have a look at
the NDS attributes to see if there was some entry there you could add
manually if you just knew what to add. (Using ConsoleOne without RADIUS
snapins and editing the objects directly, in the Other tab).

Craig Johnson
Novell Support Connection SysOp
*** For a current patch list, tips, handy files and books on
BorderManager, go to http://www.craigjconsulting.com ***

[Craig Johnson]

In article <Mike021548...@no-mx.forums.novell.com>, Mike021548141
wrote:

> I will try an older version of C1. I suspect manually entering a valid
> value in the attribute would work but to do that you would need to
> encrypt the secret with the tree key wouldn't you?

That, I don't know.
>
> By the way if your still looking for proofreaders for your manual I'm
> happy to help
>
I'm still looking, but I've been doing on-site work all month in Trinidad
and Tobago, and I'm just not ready to do anything until I get back, which
is either going to be March 31 or March 7. If you (and anyone else
interested), please email me then.

[Craig Johnson]

The only workaround I've found so far is to uninstall SP8 (backrev to
SP7), change the DAS as needed, and then reinstall SP8.

I'm pretty sure it is not a ConsoleOne snapin issue. (I've tried many
versions of ConsoleOne and snapins to get around this). I believe it
has to do with a certificate server-related update in SP8 that breaks
how passwords are stored for the RADIUS DAS object. I've tried a
couple of radical things to force a backrev of the certs, and while I
was able to get the DAS object to update, so many other things broke on
the server that it was ruined.

[Craig Johnson]

In article <tkerlin...@no-mx.forums.novell.com>, Tkerlin wrote:
> If Could
> one then build out an old 8.7.3 server in the tree and use it as a
> launch point for modifying the DAS?
>
That should work fine (I think).

In my testing, I don't remember whether or not I had installed eDir 8.8
on this, but backrevving to SP7 in my case immediately fixed the
problem, and reinstalling SP8 immediately broke it again.