simple pass words

[terry712]

scenario

one netware server 6.5 sp2 running the zen 6.5 inventory and all the stuff
one netware 6.5 server running as a middle tier
one windows 2003 server running AD , dns , dhcp and all associated stuff
one w2k pro client - a zen 6.5 client on it
user has an AD account and an nds account with a simple pwd on it
can login no probs and it logs into middle tier - imports , remote control , inventory the full monty

but if i try to change the edirectory pwd from the client - i get an error - any thoughts

the plan is to probably get identity manager or whatever it is called this week but i feel this will only sync the pwd's and i imagine i will still have above issue
this is a test for a seperate network we will have that will be AD but i want zen on it

 

[marvhuffaker]

I think that may be a client problem. I remember reading something about it. What client are you on?



Marvin Huffaker MCNE, CNE
Marvin Huffaker Consulting

http://www.redjuju.com

 

[terry712]

it's a 2000 sp4 pc

or is it sp4 ?
there is no novell client at all
only the zen agent

 

[marvhuffaker]

So you have no Novell client but you do have the Zen 6.5 agents installed. And you are trying to change your edir Password from the Zen Agent client?

I just gotta make sure I understand what you're trying to do..



Marvin Huffaker MCNE, CNE
Marvin Huffaker Consulting

http://www.redjuju.com

 

[terry712]

ok he's the step by step
one pc - windows 2000 sp4 - network stuff - tcpip and thats it
one server - windows 2003 - AD , dns , dhcp
in AD create BCrosby and KCobain
create very basic scrip that maps each to a home drive and a share drive and give them a printer
verify they can both login ok

step 2
install a netware 6.5 sp2 server with zfd 6.5 on it - make this the inventory and all that kind of thing -
install an additional 6.5 sp2 server but only install as a middle tier in terms of zfd
create users KCobain and Bcrosby - when creating allocate them a simple password (make it the same as the active directory) - also create a TElephant ok with simple pwd

step 3
back to the pc
install the zfd 6.5 agent onto pc
this gives me a mini zfd login box
if i login as bcrosby - i login to AD get my drives and it also logs into middle tier - pc imports , policies are applied etc etc - can remote pc and also the user - can do this either through directory or the password

step 4
reboot pc
change login a bit
login to edir with telephant but set network login to kcobain - just to verify above not a fluke and that it is logging into both
again - logs into all no probs

step 5
login to all resource as kcobain
press ctrl alt and del - change password
can change the windows one but the edir one comes back with a sod off and some number

basically this is a test as we have a site that is a bit to do with us and currently runs nt. has about 100 pc's and we have no proper remote , inventory or anything nice there. what i want is for them to up to 2003 and then install the zen agent on to it and point them back to one of our 2nd tiers. i asume that i would need the identity manager or whatever it's called now to keep the passwords in sync but i beleive i would still have a prob as this is just automating the above procedure - i should be able to manually do it

oh i do have an nt pc in the mix as well - still to try the pwd on it

 

[marvhuffaker]

Sorry Terry, haven't done much of anything with that configuration except in a lab.

Marvin Huffaker MCNE, CNE
Marvin Huffaker Consulting

http://www.redjuju.com

 

[Provogeek]

Terry,

First off, make sure you can ping the DC in AD and the Master Replica server in NDS by short name. Then check your NMAS configuration on the NW6.5 box.

I am not 100% sure on using the NW6.5 box in pure AD enviroment, most installs I have done similar use 2k3 for both mid tier and backend server (pain inthe rump, and I am still working on a secure workstation app deployment issue, but for the most part it works).

My suggestion; hid ZFD from your end users. Normally in a Windows enviroment, users see Novell and think the network is about to crash because they think the company is going under. Easier to work with then than to educate them. You can configure the agent to use the default windows login and pass the authentication on to the midteir in the back ground.

You are licensed for ZDF6.5, there for you are licensed for NIM 2.0 with the AD driver. Use it, make your life easier. It can be kinda difficult ot get in place to start, but once you have it in, it works great.

Oh, and BTW, your issue with the password change thing. Make sure you have your Universal Password stuff configured.

Looks like interesting stuff is popping up in here again, guess I'll have to visit more often.

=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+
Brent Schmidt Certified nut case
Senior Network Engineer

http://www.kiscc.com

 

[terry712]

thanks - i'm away on a course this week so will need to wait till next week to have a look

i will have a wee read up about the universal pwd
you say check the nmas config - what for specifically

the pings are ok - check all that when i sat this up

i'm going to look at nim as i think we need it here and at another site