HP 9000 Networking NetWare 4.1/9000 Concepts ® HP Part No. J2771-90012 Printed in U.S.A.
Notice Notice Hewlett-Packard makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. This product is based in whole or in part on technology developed by Novell, Inc.
Printing History Printing History The manual printing date and part number indicate its current edition. The printing date will change when a new edition is printed. Minor changes may be made at reprint without changing the printing date. The manual part number will change when extensive changes are made. Manual updates may be issued between editions to correct errors or document product changes.
H ow to Use This Manual How to Use This Manual Introduction Concepts is an extended glossary that includes terms related to the NetWare, network operating system and to networking in general. Use this manual as a reference if you have questions during the installation and operation of your network. Concepts are arranged alphabetically. Some entries contain “See” or “See also” references to other entries where concepts are explain in detail. Some entries refer you to related information in other manuals.
H ow to Use This Manual Do not type the bar. Commands DOS commands and command option letters are shown in uppercase letters. For example: FTPD. Because DOS is not case-sensitive, you can type DOS commands in uppercase or lowercase letters. HP-UX commands and command option letters are shown in bold monospace font. For example, ls -l. Because HP-UX commands are case sensitive, type them exactly as shown.
H ow to Use This Manual “Note” icon to the left of this text. Vital information about system or software requirements, etc., that deserves particular attention is marked with the “Important” icon to the left of this text. Guidelines or tips about fine-tuning, optimizing, etc., which might be applicable to your site or situation but maybe not to all, are emphasized with the “Suggestion” icon to the left of this text.
H ow to Use This Manual Example To make NetBIOS wait longer before sending a request-for-acknowledgment packet, you could place the following lines in your NET.CFG file: netbios netbios verify timeout 1350 Because interpretation of this file is not case-sensitive, you can type its contents in uppercase or lowercase letters. Options In syntax examples, braces indicate that you are required to choose one of the enclosed options.
H ow to Use This Manual viii
Contents Chapter 1 NetWare Glossary 1-1 A 1-2 Access Control List (ACL) 1-2 Access Control right 1-2 Access privileges 1-3 Accounting 1-3 ACL 1-5 Add or Delete Self right 1-5 Add-on board 1-5 Address 1-5 Address Resolution Protocol (ARP) ADMIN object 1-6 Alias object 1-7 Application 1-7 Archive 1-8 Archive Needed attribute 1-8 ARP 1-8 Attaching 1-8 Attributes 1-9 Authentication 1-12 AUTOEXEC.
Contents Browsing 1-20 Buffer 1-21 C 1-22 Cabling system 1-22 Cache memory 1-22 Can’t Compress attribute 1-22 Client 1-22 COM port 1-23 Command format 1-23 Common name 1-23 Communication 1-23 Communication protocol 1-24 Compare right 1-24 Complete name 1-25 Compressed attribute 1-25 Computer object 1-25 Configuration 1-25 Connection number 1-26 Connectivity 1-26 Console 1-26 Container object 1-26 Context 1-26 Country object 1-28 Create right 1-28 D 1-29 Daemon 1-29 Default drive 1-29 Default server 1-29
Contents Directory and file rights 1-30 Directory management request 1-31 Directory Map object 1-31 Directory path 1-32 Directory rights 1-32 Directory Services 1-32 Directory Services daemons 1-32 Directory services request 1-33 Directory structure, file system 1-33 Directory structure, NetWare Directory Services Directory tree 1-40 Disk 1-41 Disk format 1-41 Don’t Compress attribute 1-41 Don’t Migrate attribute 1-41 DOS boot record 1-42 DOS client 1-42 DOS filenames 1-42 DOS Requester 1-42 DOS setup rout
Contents FAT 1-55 File Allocation Table (FAT) 1-55 File caching 1-56 File compression 1-56 File handle 1-56 File locking 1-56 File rights 1-56 File Scan right 1-57 File sharing 1-57 File Systems, NetWare Services 1-57 HP-UX Partitions and NetWare Volumes File system, HP-UX 1-59 File Transfer Protocol (FTP) 1-59 Filename extensions, NetWare 1-59 Flag 1-60 Form 1-60 Frame 1-61 FTP 1-61 1-58 G 1-62 Gateway 1-62 Group object 1-62 H 1-63 Handle 1-63 Hard disk 1-63 HCSS 1-63 Hexadecimal 1-63 Hidden attribute
Contents I 1-67 Identifier variables 1-67 Immediate Compress attribute 1-67 Indexed attribute 1-67 Inherited Rights Filter, file system 1-67 Inherited Rights Filter, NDS object 1-68 Internal network number 1-70 Internet Protocol (IP) 1-70 Internetwork 1-71 Internetwork Packet eXchange (IPX) 1-71 Internetwork Packet eXchange Open Data-Link Interface (IPXODI) 1-71 Interoperability 1-72 Interprocess communication (IPC) 1-72 IPX 1-73 IPX external network number 1-73 IPX internal network number 1-73 IPX interne
Contents Login 1-78 LOGIN directory 1-79 Login restrictions 1-79 Login scripts 1-80 Logout 1-93 Long filename 1-93 Long machine type 1-93 LPT1 1-94 LSL (Link Support Layer) 1-94 M 1-95 MAIL directory 1-95 Map 1-95 Memory, DOS management 1-95 Memory allocation 1-96 Memory board 1-96 Message packet 1-96 Message system 1-96 Migrated attribute 1-97 MLID 1-97 Modify bit 1-97 Modify right 1-97 Multiple-byte character 1-97 Multiple Link Interface Driver (MLID) Multiple name space support 1-98 Multiserver networ
Contents NETBIOS.EXE 1-101 NET.
Contents Novell Virtual Terminal (NVT) 1-126 Novell Virtual Terminal 2 (NVT2) 1-126 NPS daemon 1-126 NSE 1-126 NVT 1-126 NVT2 1-126 nwcm 1-127 nwconfig 1-127 NWDIAGD 1-128 O 1-129 Object 1-129 Object rights 1-138 ODI 1-138 ODINSUP 1-138 Open Data-Link Interface (ODI) 1-138 Open Data-Link Interface Network driver interface specification SUPport (ODINSUP) 1-141 Organization object 1-143 Organizational Role object 1-143 Organizational Unit object 1-143 P 1-144 Packet 1-144 Packet Burst protocol 1-144 Parall
Contents Port, hardware 1-150 Port, software 1-150 Power conditioning 1-150 Primary time server 1-151 Print device 1-151 Print device mode 1-152 Print job 1-152 Print job configuration 1-153 Print queue 1-153 Print queue name 1-154 Additional information 1-154 Print queue operator 1-155 Print queue polling time 1-155 Print server 1-155 Print Server object 1-156 Print Server Operator 1-156 Printer 1-156 Printer definition 1-157 Printer form 1-158 Printer object 1-158 Printing 1-158 Process 1-159 Profile log
Contents Q 1-165 Queue 1-165 Queue polling time 1-165 R 1-166 RAM 1-166 Read-ahead cache 1-166 Read Only attribute 1-166 Read right 1-166 Real mode 1-166 Record locking 1-167 Recursive copying 1-168 Reference time server 1-168 Registered resources 1-168 Remote administration 1-169 Remote boot 1-169 Remote connection 1-169 Remote Reset 1-169 Remote workstation 1-170 Rename Inhibit attribute 1-170 Rename right 1-171 Replica 1-171 Resources 1-172 Restore 1-173 Rights 1-173 RIP 1-178 Root directory 1-178 Roo
Contents SAP 1-182 SAP daemon 1-182 SCSI 1-182 SCSI bus 1-182 Search drive 1-182 Search modes 1-183 Secondary time server 1-184 Security 1-184 Security equivalence 1-190 Semaphore 1-192 Sequenced Packet Exchange (SPX) 1-192 Sequenced Packet eXchange II (SPXII) 1-192 Serial port 1-193 Server console 1-193 Server protocol 1-194 Service Advertising Protocol (SAP) 1-194 Service Advertising Protocol daemon (SAPD) 1-195 Shareable attribute 1-195 Shared memory 1-196 Short machine type 1-196 Single Reference time
Contents System attribute 1-201 SYSTEM directory 1-201 System login script 1-201 T 1-202 Tape backup unit 1-202 TCP/IP 1-202 Terminal emulation software 1-202 Time synchronization 1-202 Topology 1-208 Transmission Control Protocol/Internet Protocol (TCP/IP) Transaction Tracking System (TTS) 1-209 Transactional attribute 1-209 Transmission Control Protocol (TCP) 1-209 Trustee 1-209 Trustee database 1-212 TTS 1-212 U 1-213 Unbinding 1-213 Unknown object 1-213 Unicode 1-213 UNIX client 1-214 UNIX host locki
Contents Volume 1-223 Volume object 1-224 W 1-226 Wait state 1-226 WAN 1-226 Watchdog 1-226 Wide Area Network (WAN) 1-226 Windows client 1-227 Workstation 1-227 Write right 1-227 xxi
Contents xxii
1 NetWare Glossary 1-1
NetWare Glossary A A Access Control List (ACL) A property of NetWare Directory Services (NDS) objects that controls how other objects can access the object. An ACL contains trustee assignments that include NDS object and property rights. The ACL also contains the Inherited Rights Filter. When you view an object’s trustees or Inherited Rights Filter, you are seeing the values of that object’s ACL. An ACL for NDS objects is like the list of trustees for a file or directory.
NetWare Glossary A See also “Inherited Rights Filter, file system”;“Inherited Rights Filter, NDS object”; “Rights”; “Trustee.” Access privileges Any of the directory or file rights that control access to files or directories. Types of access privileges differ for HP-UX users, NetWare users, and hybrid users. See also “HPFS”; “Rights”; “Security.” Accounting The process of tracking resources used on a network so that the network supervisor can charge for network services and resource usage.
NetWare Glossary A or three weeks. For example, if 30% of the server’s charges are from service requests, the network supervisor would want to recoup 30% of the cost through charging for service requests. At the end of the monitoring period, use ATOTAL to determine the total use for each service. (ATOTAL is located in SYS:SYSTEM and requires the Supervisor right.
NetWare Glossary A Assigning account balances The network supervisor can • Assign each user a balance to control how much service the user can use • Assign a credit limit (or allow unlimited credit) • Assign a default account balance for all users • Increase a user’s account balance The user must log out and log in again before changes take effect. Related utilities: “AUTOTAL”; “NETADMIN”; “NetWare Administrator” (Utilities Reference). ACL See “Access Control List (ACL).
NetWare Glossary A Address Resolution Protocol (ARP) A process in Internet Protocol (IP) and AppleTalk networks that allows a host to find the physical address of a target host on the same physical network when it only knows the target’s logical address. Under ARP, a network board contains a table that maps IP addresses to the hardware addresses of the objects on the network. To create entries, the ARP broadcasts a request with the target’s IP address. The target responds with its physical address.
NetWare Glossary A Alias object A leaf object that points to the original location of an object in the Directory. Aliases can make NDS easier to use. Any object located in one place in the Directory can also appear to be in another place in the Directory by using aliases. For example, an administrator could create aliases pointing to all modems on the network. The aliases could all be created in one container.
NetWare Glossary A independent computer. Only one user can access the application. • Network application. An application that runs on networked computers and can be shared by users. Network applications use network resources such as printers. Advanced network applications (such as electronic mail) allow communication among network users. Archive A transfer of files to long-term storage media, such as optical disks or magnetic tape. See also “Attributes”; “Backup.
NetWare Glossary A Attributes The characteristics of a directory or file that tell NetWare what to do with the directory or file; also called flags. Attributes cannot be assigned to NetWare Directory Services objects. NetWare reads the attributes the user sets (for example, Delete Inhibit) and sets other attributes to show what has been done (for example, Archive Needed). Effective rights cannot override attributes.
NetWare Glossary A Table 1-1 Directory Attributes Attribute Description Don’t Migrate [Dm] Prevents directories from being migrated to a secondary storage device. Not supported in NetWare Services. Hidden [H] Hides the directory from the DOS DIR command and prevents it from being deleted or copied. This is a DOS attribute. However, the NetWare NDIR command shows the directory if the user has the File Scan right (see “Rights”).
NetWare Glossary A Table 1-2 File Attributes Attribute Description Don’t Migrate [Dm] Prevents the file from being migrated to a secondary storage device. Not supported in NetWare Services. Execute Only [X] Prevents a file from being copied. Only the network supervisor can set this file attribute: it cannot be cleared. It should be set only if you have a second copy of the file. Backup utilities do not back up the file, and some program files with this attribute set don’t execute properly.
NetWare Glossary A Table 1-2 File Attributes Attribute Description Shareable [S] Allows the file to be accessed by more than one user at a time. Usually used in combination with the Read Only attribute. System [Sy] Marks DOS files that are used only by the operating system. The files are hidden from the DOS DIR command and cannot be deleted, renamed, or copied. However, the NetWare NDIR command shows the file if the user has the right to see it (see “Rights”).
NetWare Glossary A Neither the two keys nor the user’s password are ever sent across the network. Authentication is illustrated in the following figure. Requests login Requests authentication. Returns encrypted private key. Enters password Client Uses password to decrypt private key. Uses private key to build an electronic ID. NetWare server Decodes the client's ID with the public key. Confirms authentication for continued network use.
NetWare Glossary B B Backup A duplicate of data (file, directory, volume), copied to a storage device (floppy diskette, cartridge tape, hard disk). A backup can be retrieved and restored if the original is corrupted or destroyed. Related utilities: “ndsrestore”; “ndsbackup” (Utilities Reference). See also: “Backing Up and Restoring the NetWare Directory Services” (Supervising the Network).
NetWare Glossary B Table 1-3 Comparison of bindery and Directory environments Feature Bindery Directory Login Password per server System-wide with authentication Printing No friendly map User-friendly Volumes Server-specific Global objects Queues Local objects only System-wide objects Trustees Server-specific Global objects Bindery emulation See “Bindery services.
NetWare Glossary B Objects in a bindery exist in a flat database instead of a hierarchical database like a NetWare Directory Services database. Bindery services occur when NDS provides a flat structure for the objects within an Organization object or within an Organizational Unit object. All objects within that container object can then be accessed both by NDS clients and by bindery-based clients and servers. Bindery services applies only to the leaf objects in that Organizational Unit.
NetWare Glossary B WARNING: Do not change a server’s bindery context once you have set it. Doing so will prevent all bindery services users (from the original context) who need to log in to that server from accessing the network. Changing the server’s bindery context can also disable access to print queues. When you install any NetWare server into the Directory tree, a NetWare Server object is created in the same container object the server object was installed in.
NetWare Glossary B • equal signs= • question marks? For example, the complete name for a User object might be MRICHARD.ACCOUNTING.HEWLETT-PACKARD US However, only the common name of the User object MRICHARD can be seen by bindery-based clients and servers when using bindery services. Therefore, the object’s common name must match bindery object naming rules. Related utilities: “NetWare Setup”; “nwcm”; “PARTMGR” (Utilities Reference). See also: “Context”; “Directory tree”; “Object.
NetWare Glossary B When you bind a protocol to a board, you specify the cabling scheme’s IPX external network number. This hexadecimal number must be different from all other numbers for cabling schemes attached to this server. The cabling scheme’s IPX external network number must also be different from the internal network address for the server as well. NOTE: For NetWare OS file services, only the IPX protocol is available. For more information on network numbers, see “IPX external network number.
NetWare Glossary B Bridge A device that retransmits packets from one segment of the network to another segment. A router, on the other hand, is a device that receives instructions for forwarding packets between topologies and determines the most efficient path. See also: “Router.” Browse right An object right that grants the right to see an object in the Directory tree. See also: “Rights.” Browsing A way of finding objects in the Directory. Objects in the Directory are in hierarchical order.
NetWare Glossary B If PRINTER3 isn’t in your current context, search up or down the Directory tree until you find it, or use browser’s search feature. Related utilities: “NetWare Administrator”; “NETADMIN” (Utilities Reference). Buffer An area in server or workstation memory set aside to temporarily hold data, such as packets received from the network. See also: “Cache memory”; “Read-ahead cache.
NetWare Glossary C C Cabling system Part of a network’s physical layout. See also: “Topology.” Cache memory Available random access memory (RAM) that NetWare uses to improve NetWare server access time. NetWare Services relies mainly on the HP-UX cache system for reading and writing files. NetWare Services also keeps local caches in shared memory. For example, a read-ahead cache in shared memory predicts what the next block request will be in a sequential file.
NetWare Glossary C With the respective client software, users can perform networking tasks. These tasks include mapping drives, capturing printer ports, sending messages, and changing contexts. See also: “DOS client”; “MAIL directory”; “Windows client”; “Workstation”; “UNIX client.” COM port Asynchronous serial port on IBM PC-compatible computer. See also: “Serial port.” Command format Instructions that show how to type a command at the keyboard; also called syntax.
NetWare Glossary C Communication protocol Conventions or rules used by a program or operating system to communicate between two or more endpoints. Although many communication protocols are used, they all allow information to be packaged, sent from a source, and delivered to a destination. NetWare Services breaks information to be communicated into blocks called packets. In addition to data, each packet contains control information that can be used for addressing, error checking and other purposes.
NetWare Glossary C Complete name An object’s complete name consists of its common name (if it has one), followed by a period (.), then the name of the container object, also followed by a period, and on up through succeeding container object names through the root of the tree, for example TWILLIAM.SALES PV.SALES.HEWLETT-PACKARD US.
NetWare Glossary C Connection number A number assigned to any workstation that attaches to a NetWare server; it may be a different number each time a station attaches. Connection numbers are also assigned to processes, print servers, and applications that use server connections. The server’s operating system uses connection numbers to control each station’s communication with other stations. Related utility: “NLIST” (Utilities Reference).
NetWare Glossary C For example, in the following figure, the context for the User object ESAYERS is SALES PV.SALES.HEWLETT-PACKARD US. The context for the User object RJONES is ACCOUNTING.HEWLETTPACKARD US. Figure 1-6 Context in a Directory tree When you move from one container object to another, you change contexts. Whenever you change contexts, indicate the complete name of the object you are changing the contexts to.
NetWare Glossary C Country object A container object that designates the countries where your network resides and organizes other objects in the Country object. For example, you could use a Country object for the country where your organization headquarters reside. If you have a multinational network, you could use a Country object for each country that is a part of your network. NOTE: The Country object is not part of the default NetWare server installation.
NetWare Glossary D D Daemon A HP-UX process running in the background that can perform tasks with no user input and can spawn (initialize) other processes. Daemons provide services for clients, such as printing and server advertising. Some daemon processes such as the NetWare daemon perform administrative functions and access the host file system. See “NetWare daemon”; “NetWare Directory Services daemons”; “NPS daemon”; “SAP daemon.
NetWare Glossary D Delete right An object right that grants the right to delete an object from the Directory tree. See also: “Rights.” Delimiter A symbol or character that signals the beginning or end of a command or of a parameter within a command. For example, in the command NCOPY F:*.* G:, the blank space between F:*.* and G: is a delimiter that marks two distinct parameters. Other delimiters used in NetWare include the comma (,), the period (.
NetWare Glossary D See also: “Rights.” Directory management request A request that controls the physical distribution of the NetWare Directory Services database. Through these requests, network supervisors can install new Directory partitions and manage their replicas. The following Directory management requests are supported: Request Description Add partition Creates a new Directory partition on the server. Add replica Adds a replica of an existing Directory partition to a server.
NetWare Glossary D If you create a Directory Map object to point to an application, users can access the application by clicking on the Directory Map icon from the Browser. If the application’s location in the directory structure changes, you can update the object instead of having to change all users’ drive mappings. Related utilities: “MAP”; NETUSER” (Utilities Reference). See also “Using Directory Map Objects” (Supervising the Network); “Object.
NetWare Glossary D Directory services request A request made to the Directory database by users or network supervisors. NetWare Directory Services requests can be divided into three types: • Directory access requests. These requests are submitted by users who are accessing or network supervisors who are managing the Directory database’s contents. These requests support the Directory database’s interface and allow objects to be created, modified, and retrieved. • Directory access control requests.
NetWare Glossary D Subdirectories Directories File Volumes Server Figure 1-7 Volumes, directories, and files In addition to such NetWare file system features as volumes, directories, subdirectories and files, NetWare also provides for file attributes and trustee assignments. Volume. The highest level in the NetWare file system. To NetWare Services users, a volume appears much like a hard disk in a stand-alone system.
NetWare Glossary D Files. Individual records that can be created in or copied to any level of the directory structure (except, in practice, the volume level). Directory path A file or directory is located by its path, which states where the directory or file is on a volume. The following figure shows how to specify a path. NetWare server \ Volume : Directory \ (Sub)directory \ Filename Separate volume and directory with a colon (:). Separate all others with a slash (\).
NetWare Glossary D utilities and programs for network users. SYS:PUBLIC/CLIENT contains the requester software for DOS, and Windows clients. Types of directory structures All directory structures are tree structures, but a directory structure can be flat with many directories coming off the volume, or it can be deep if you create several levels of directories.
NetWare Glossary D application off the root. Make trustee assignments for each application. Then go into the system or profile login script and map a search drive to each application. The following figure shows this type of directory structure. SYSTEM PUBLIC LOGIN MAIL SYS servername_SYS WORDPROC DBAPP SPRDSHT APPSVOL Figure 1-10 Application volume • Create a separate directory off volume SYS: for each application. Make trustee assignments for each application.
NetWare Glossary D APPS WORDPROC DBAPP SPRDSHT SYS servername_SYS Figure 1-12 Parent directory for applications • Create a parent directory for applications in SYS:PUBLIC. Because users generally have Read and File Scan rights in SYS:PUBLIC, you don’t make trustee assignments or map a search drive. However, users can see and use all applications and know they exist. Use this directory structure only if you want all users to have access to all applications.
NetWare Glossary D NOTE: Some applications write files to the root. For security reasons you don’t want users working at the root level. Therefore, use MAP ROOT to map a drive to a fake root— a directory or subdirectory in which the user can be assigned rights (see “Fake root”). Data directories. These are work directories for groups and users to keep work files in. You can also create a directory to transfer files between directories on the network.
NetWare Glossary D See also “Drive mapping”; “File Systems, NetWare Services”; “File system, HP-UX”; “Path”; “Parent directory”; “PUBLIC directory”; “Security”; “Subdirectory”; “SYSTEM directory.” Directory structure, NetWare Directory Services See “Directory tree”; “NetWare Directory Services (NDS).” Directory tree A hierarchical structure of objects in the Directory database. The Directory tree includes container objects that are used to organize the network.
NetWare Glossary D Disk A magnetically encoded storage medium in the form of a plate (also called a platter). The following types of disks are used with personal computers: • Hard disks use a metallic base and are usually installed within a computer or disk subsystem. (In some cases, they are removable.) • Floppy disks (also called diskettes) use a polyester base and are removable. • CD-ROM (Compact Disc Read Only Memory) is a small plastic optical disk that isn’t erasable or writable.
NetWare Glossary D DOS boot record A record containing information that ROM-BIOS uses to determine which device to boot from. The boot record can be on either a floppy diskette, a local hard disk, or a remote boot chip. ROM-BIOS then runs a short program from the boot record to determine disk format and location of system files and directories. Using this information, ROM-BIOS loads the system files (including two hidden files, IBMBIO.COM and IBMDOS.COM) and the command processor (COMMAND.COM).
NetWare Glossary D DOS setup routine The routine that sets up the system configuration of your DOS client. The setup routine records the system’s built-in features (add-on boards, hard drives, disk drives, ports, math-coprocessor) and available system memory. It also lets you set date and time, password, and keyboard speed. The system configuration is accessed from the reference diskette (for IBM PS/2 systems) or from the setup or user diagnostics diskette (for most other systems).
NetWare Glossary D Drive mapping A pointer to a location in the file system, represented as a letter assigned to a directory path on a volume. To locate a file, you follow a path that includes the volume, directory, and any subdirectories leading to the file. You create drive mappings to follow these paths. You assign a letter to the path, and then use the letter in place of the complete path name. Drive mappings can be temporary or permanent: • Temporary mappings.
NetWare Glossary D Search drive mappings let you execute a program even if it is not located in the directory you are working in by enabling the system to search for the program. Search drive mappings are numbered, although they also have drive letters. For example, search drive 1 (or S1) may also be known as network drive Z:. You can map up to 16 network search drives (letters K: through Z:, starting with Z:). You can’t map a search drive and a regular network drive to the same letter.
NetWare Glossary D A continuous electrical current is necessary to maintain dynamic memory. All data is lost from dynamic memory when the power is turned off.
NetWare Glossary E E Effective rights The rights that an object can actually exercise to see or modify a particular directory, file, or object. An object’s effective rights to a directory, file, or object are calculated by NetWare 4 each time that object attempts an action. In native NetWare, trustee assignments are kept in the file system. In NetWare Services, the trustee assignments are kept in a separate database for each volume.
NetWare Glossary E Access in the host file system can affect access to files and directories even though effective rights computed by NetWare are valid. Effective rights to an object are shown in the following figure.
NetWare Glossary E list (only valid when the object requesting rights is a User object). If MWILKENS has a trustee assignment to SALES LA and to MANAGERS, the Trustee assignment on MANAGERS overrides the trustee assignment on SALES LA. Trustee assignments to groups, however, are added to previous trustee assignments for User objects. No rights are granted by default. They must be granted by a trustee assignment at some point.
NetWare Glossary E In an Ethernet environment, stations communicate with each other by sending data in frames along an Ethernet cabling system. Different Ethernet standards use different frame formats. NetWare 4 uses the IEEE 802.2 standard by default. NetWare Services uses 802.2 as its default if no IPX networks are found. If Networks are discovered, NWDISCOVER configures the frame type to match. The following figure illustrates the Ethernet 802.2 frame.
NetWare Glossary E Destination Source Length Data unit 6 6 2 46-1500 All units in bytes Figure 1-18 Ethernet 802.3 raw frame • Ethernet II. This is the default for NetWare Services. The frame type used on networks that communicate with DEC minicomputers, and on computers that use TCP/IP. The following figure illustrates the Ethernet II frame. Destination Source Type Data unit 6 6 2 46-1500 All units in bytes Figure 1-19 Ethernet II frame • Ethernet SNAP. The IEEE standard 802.
NetWare Glossary E NOTE: On Ethernet 802.2, Ethernet II, and Ethernet SNAP cabling systems, stations using different protocol numbers can coexist, but they cannot communicate directly with each other. 802.3 raw frames are able to communicate with other frames using an internal IPX router in the server.
NetWare Glossary E IPX LSL MLID Ethernet II Ethernet 802.2 Ethernet SNAP Ethernet 802.3 (Raw) Network board Figure 1-22 ODI architecture using multiple Ethernet frames See also: “Open Data-Link Interface (ODI)”; “Multiple Link Interface Driver (MLID)”; “Link Support Layer (LSL)”; “Packet.” Execute Only attribute A NetWare file system attribute that prevents a file from being copied. See also “Attributes.
NetWare Glossary E Some typical standard extended attributes are: .TYPE, .ICON, .HISTORY, .SUBJECT, .KEYPHRASES, .APPTYPE, and .ASSOCTABLE. The application that creates the extended attributes and the applications that read the extended attributes must recognize the format and meaning of the data associated with the given name. In NetWare Services, extended attribute files are stored in a hidden subdirectory off the directory that stores the main files.
NetWare Glossary F F Fake root A subdirectory that functions as a root directory. NetWare allows you to map a drive to a fake root (a directory where rights can be assigned to users). NOTE: Fake roots work with the NetWare 4 DOS Requester, as well as with NetWare shells included with NetWare 2.2 and 3.x. . ( The search functionality is provided with the OS/2 PATH, LIBPATH, and DPATH commands.) Some applications cannot be run from subdirectories; they read files from and write files to the root directory.
NetWare Glossary F File caching The method of holding recently-used data in cache memory to enable quick access to frequently requested files. NetWare Services uses the file caching of the host operating system. In addition, it uses read-ahead cache. See also: “Cache memory”; “Read-ahead cache.” File compression In NetWare 4, a means of allowing more data to be stored on server hard disks by compressing (packing) files. NetWare Services does not support file compression.
NetWare Glossary F File Scan right A file system right that grants the right to see the directory and file with the DIR or NDIR directory command. See also: “Rights.” File sharing A feature of networking that allows more than one user to access the same file at one time. See also: “Rights”; “Attributes.” File Systems, NetWare Services NetWare Services supports the Standard file system. The Standard file system is portable to any HP-UX system and to non-HP-UX systems such as VMS.
NetWare Glossary F name. Standard file system volumes • Can exist on any native HP-UX partition type including ufs, vxfs, s5, and sfs. • Are created by specifying a path to a mount point. • Use a NetWare inodes file (USInodes) to maintain NetWare information. • Use an extended names file for HP-UX names longer than 28 characters and OS/ 2 names longer than 96 characters. • Use a NetWare database to maintain trustee assignments and modifications to Inherited Rights Masks.
NetWare Glossary F File system, HP-UX The HP-UX file system is hierarchical and represented as a tree. It has a single root directory but can have many subdirectories, which can contain files and other subdirectories. Each hard disk may be divided into one or more partition. Each partition is assigned to a particular type of file system. These file systems are then mounted into a single hierarchical tree and appear as a single file system.
NetWare Glossary F DOS filename extensions used by NetWare: • .EXE—Executable file • .BAT—Executable batch file • .DAT—ASCII text file (usually) • .COM—Executable command file • .ERR—Error log file • .OVL—Overlay file used with NetWare menu utilities • .HLP—Help screens (F1 help) in a menu or graphical utility • .MSG—Message file • .SYS—Operating system or driver file Extensions specific to NetWare 4: • .PDF—NetWare printer definition file • .
NetWare Glossary F Frame A packet data format for a given media. Some media support multiple packet formats (frames), such as Ethernet 802.2, Ethernet 802.3, Ethernet II, Ethernet SNAP, Token-Ring, or TokenRing SNAP. For NetWare 4 and NetWare Services, the default Ethernet frame type is 802.2. See also “Ethernet configuration.” FTP (File Transfer Protocol) Control procedures to prevent errors in information transmitted between workstations. For complete information, see “File Transfer Protocol (FTP).
NetWare Glossary G G Gateway A link between two networks. A gateway allows communication between dissimilar protocols (for example, NetWare and non-NetWare networks) using industry standard protocols such as TCP/IP, X.25, or SNA. Group object A leaf object listing several User objects, used to provide collective, rather than individual, network administration. A Group object isn’t a container object like an Organization Unit object. A Group object has a list of User object names.
NetWare Glossary H H Handle A pointer used by a computer to identify a resource or feature. For example, a directory handle identifies a volume and a directory, such as SYS:PUBLIC. Other types of handles used to access NetWare include file handles, request handles, device handles, and volume handles. Hard disk A high-capacity magnetic storage device that allows a user to write and read data. Hard disks can be network or local workstation disks. See also: “Disk.
NetWare Glossary H High Capacity Storage System (HCSS) A system that increases data storage capacity by integrating an optical disk library into the NetWare file system. HCSS is not supported in NetWare Services. High Performance File System (HPFS) NetWare Services file systems support the following features of OS/2’s High performance file system: • Long filenames of up to 253 characters • Extended attributes Disk partitions and memory features are not supported. See also: “Extended attribute.
NetWare Glossary H HPFS See “High Performance File System (HPFS).” Hybrid user A hybrid user is a user who can own or access the same files when logged in either as a NetWare user or as a HP-UX user.
NetWare Glossary H Users with both NetWare and HP-UX accounts can be made hybrid users by associating HP-UX login names with NetWare Directory Services common names. You can set up hybrid users with the graphical utility User Setup, or by modifying the nwuser file in the /etc/netware4 directory. In this case the owner of files created by the NetWare server is the HP-UX user that the NetWare user maps to.
NetWare Glossary I I Identifier variables Variables used in login scripts that allow you to enter a variable (such as LOGIN_NAME) in a login script command, rather than a specific name (such as RICHARD). See “Login scripts.” Immediate Compress attribute A file system attribute that causes NetWare files to be compressed as soon as the operating system can do so, without waiting for a specific event to occur (such as a time delay). NetWare Services does not support file compression or use this attribute.
NetWare Glossary I The directory's IRF controls which parent directory effective rights can be exercised in the current directory. The file's IRF controls which of the current directory's rights can be exercised in the file. The following figure shows how a trustee assignment to a parent directory is inherited by a file or subdirectory. Compare Figure 24. File system directory and file rights 1. Nick's trustee assignment to directory PROJECTS: [ RWCE F ] 2. IRF on file PLAN: [SR C F ] 3.
NetWare Glossary I In the following figure, Nick’s trustee assignment to Organizational Unit SALES grants him BCDR object rights.
NetWare Glossary I Instead, grant the trustee all rights, so that if Supervisor is blocked by an IRF, the trustee will still have Browse, Rename, Create and Delete rights. The following figure shows how a trustee assignment to a container object is inherited by an object lower in the structure. The following figure shows how a trustee assignment to a container object is inherited by an object lower in the directory structure. Compare Figure 24. Directory tree object rights all property rights 1.
NetWare Glossary I See also: “TCP/IP.” Internetwork Two or more networks connected by a router. Users on an internetwork can use the resources (files, printers, hard disks) of all connected networks, provided they have security clearance. See also: “Router.” Internetwork Packet eXchange (IPX) A Novell communication protocol that sends data packets to requested destinations (for example, workstations and servers). IPX addresses and routes outgoing data packets across a network.
NetWare Glossary I IPXODI attaches a header to each data packet. The header specifies information that targets network delivery, announcing where the packet came from, where it’s going, and what happens after delivery. Because IPXODI transmits data packets as datagrams (self-contained packages that move independently from source to destination), it can only deliver the packets on a best-effort basis. Delivery is assured by SPX. See also: “IPX”; “Link Support Layer (LSL)”; “NetWare DOS Requester”; “SPXII.
NetWare Glossary I For example, NetWare Services processes communicate using variables stored in shared memory. Access to the shared memory is synchronized using variable granularity locks. NetWare Services also uses streams and message queues for IPC. See “Synchronization services.” IPX See “Internetwork Packet eXchange (IPX).” IPX external network number A four-byte network address that identifies a specific logical network or LAN on an IPX internetwork.
NetWare Glossary I In earlier versions of NetWare, the IPX internal network number was referred to as the internal network number. See also: “IPX external network number.” IPX internetwork address A 12-byte number (represented by 24 hexadecimal characters) divided into three parts, illustrated in the following figure. Figure 1-26 AAAAAAAA 00001B1EA1A1 0451 IPX network number Node number Socket number IPX internetwork address The first part is the 4-byte (8-characters) IPX network number.
NetWare Glossary J J Jumper block A group of jumper pins that can be connected (jumpered) or left unconnected to make hardware configuration settings on a circuit board.
NetWare Glossary L L LAN See “Local Area Network (LAN).” LAN driver, client A LAN driver serves as a link between a station's operating system and the physical network parts. NetWare 4 clients are designed for LAN drivers written to the Open DataLink Interface (ODI) specification. ODI drivers connect directly to the ODI model’s Link Support Layer (LSL), which serves as an intermediary between the drivers and the communication protocols. See also: “Link Support Layer (LSL)”; “ODI.
NetWare Glossary L How LIP works In NetWare versions earlier than NetWare 4, the workstation initiated a negotiation with the NetWare server, during the connection process, to determine an acceptable packet size. If, during this negotiation, the server detected a router between it and the station, the server made the maximum packet size 576 bytes. In NetWare 4, the station still initiates acceptable packet size. However, the server does not default to 576 bytes when a router is detected.
NetWare Glossary L LSL is part of the ODI architecture. In NetWare Services, it is implemented only on the client portion of the network. See also: “Open Data-Link Interface (ODI).” LIP See “Large Internet Packet (LIP).” Loadable module A program that can be loaded and unloaded from NetWare client memory while the system is running. In NetWare 4 there are two common types: NLMs (NetWare Loadable Modules) for NetWare servers and VLMs (Virtual Loadable Modules) for NetWare clients.
NetWare Glossary L When a user initiates a login request, the operating system looks for security rights; the user is then asked for a password. All security information is placed into the NetWare server’s connection list and the user is said to be logged in. At this point, LOGIN executes one or more login scripts (which initialize environment variables, maps network drives, and so forth). Related utility: “LOGIN” (Utilities Reference).
NetWare Glossary L When a user violates login restrictions, NetWare Services disables the account and no one can log in using that username. This prevents unauthorized users from logging in. Login scripts A file containing commands that set up your users’ DOS workstation environments whenever they log in. Login scripts are similar to configurable batch files and are executed by the LOGIN utility. You can use login scripts to • Map drives and search drives to directories. • Display messages.
NetWare Glossary L Deciding which login scripts to create Maintaining many user login scripts can be time-consuming. Therefore, include as much customizing information as possible in the container login scripts, which are fewer in number and easier to maintain. For example, if all users need access to NetWare utilities in the same volume, put the search drive mapping to that volume in a single container login script rather than in every user login script.
NetWare Glossary L Root O=NOVELL US OU=SALES Orga Con OU=ACCOUNT Organizational Units: Contain system scripts OU=SALES PV CN=MRICHARD Figure 1-27 CN=ESAYERS CN=SWILLIAMS User: Contains user script User: Contains user script User: No script Belongs to "CLERKS" Profile object C Prof Con Where login scripts are located In the previous figure, there are three users, ESAYERS, SWILLIAMS, and MRICHARD. The following table shows which login scripts execute when each user logs in.
NetWare Glossary L If SALES PV had no container login script defined, no container login script would execute for ESAYERS and SWILLIAMS, even though a container login script exists at a higher level. Since SWILLIAMS has no user login script defined, the default login script executes after the container login script. Since MRICHARD belongs to the profile CLERKS, the CLERKS’ profile login script executes before MRICHARD’s user login script.
NetWare Glossary L Table 1-4 Selected login script commands Login script command Description ATTACH Connects to bindery-based NetWare servers (NetWare 2.x or 3.x) or to NetWare 4 servers using bindery services. COMSPEC If users run DOS from the network, this specifies the directory where the DOS command processor (COMMAND.COM) is loaded. EXIT Terminates execution of the LOGIN utility and executes an external program. FIRE PHASERS Emits a phaser sound when certain conditions exist. IF...
NetWare Glossary L The following table lists identifier variables you can use in login scripts. Table 1-5 Category Identifier variables Identifier variable Function DAY Day number (01 through 31). DAY_OF_WEEK Day of week (Monday, Tuesday, etc.). MONTH Month number (01 through 12). MONTH_NAME Month name (January, February, etc.). NDAY_OF_WEEK Weekday number (1 through 7, with 1=Sunday). SHORT_YEAR Last two digits of year (93, 94, 95, etc.).
NetWare Glossary L Table 1-5 Identifier variables Category Workstation Miscellaneous Identifier variable Function LOGIN_NAME User’s unique login name. (Long names are truncated to eight characters.) MEMBER OF “group” Group object that the user is assigned to. NOT MEMBER OF “group” Group object that the user is not assigned to PASSWORD_EXPIRES Number of days before password expires. USER_ID Number assigned to each user. MACHINE Type of computer (for example, IBM_PC).
NetWare Glossary L Table 1-5 Identifier variables Category Identifier variable Object properties property name Function You can use any property of NDS objects as a variable. Use the property’s name just as you do any other identifier variable. If the property name includes a space, enclose the name in quotation marks. Examples of login scripts The following examples of login scripts may help you plan your own container, profile, and user login scripts. Each example script is shown in a table.
NetWare Glossary L Table 1-6 Sample container login script Login script commands IF OS2 THEN MAP P:=SYS:PUBLIC ELSE MAP INS S1:=SYS:PUBLIC MAP INS S2:=SYS:PUBLIC\%MACHINE\%OS\ %OS_VERSION END Purpose The first search drive is mapped to SYS:PUBLIC, where DOS-based NetWare utilities are stored. The second search drive is mapped to the directory where DOS is stored. For example, if all stations use DOS, use the following two commands instead of the IF...
NetWare Glossary L Table 1-6 Sample container login script Login script commands Purpose MAP O:=SYS:DOC Maps drive O: to a directory necessary for running the electronic NetWare documentation (DynaText). IF MEMBER OF “MANAGERS” THEN MAP *3:=VOL1:PROJECTS\REPORTS END If the user belongs to the MANAGERS Group object, the script maps the third network drive to the REPORTS directory.
NetWare Glossary L Profile login script. If you have groups of users with identical login script needs, you can create a Profile object, then create a login script for the Profile object. Then you can assign each user to be a member of that Profile object. The following is an example of a profile login script you might create for users in the ACCOUNTING Profile object. The ACCOUNTING profile login script would execute after the container login script.
NetWare Glossary L Table 1-7 Sample profile login script Login script commands Purpose IF DAY_OF_WEEK = “FRIDAY” THEN WRITE “Weekly progress report is due today.” FIRE PHASERS 2 TIMES END On Fridays, the phaser sound occurs twice to alert the user while the message “Weekly progress report is due today” displays on the screen. PCCOMPATIBLE EXIT “NMENU WORK” Stops the profile login script and sends the user into a menu program called WORK. EXIT also prevents user login scripts from executing.
NetWare Glossary L Table 1-8 Sample user login script Login script commands Purpose MAP *8:=VOL1:FORMS Maps Mary’s eighth network drive (after those assigned in the container and profile scripts) to the FORMS directory. REM Mary needs access to FORMS while she’s on the REM troubleshooting team. Remove this drive mapping REM when she’s reassigned. This remark is a reminder to the person who created the login script. This remark won't display on the user’s screen.
NetWare Glossary L Logout A procedure that breaks the network connection and deletes drives mapped to the network. If you log out without specifying a NetWare server name in the LOGOUT command, the station connections and drives mapped to all servers are terminated. To log out of one server and remain logged in to the other servers, specify the server name in the LOGOUT command.
NetWare Glossary L Use the six-letter name for the long machine type as the subdirectory name when you use more than one brand of workstation. Example: COMPAQ. Use the same six-letter name for DOS directories that you use for the long machine type. If you use more than one version of DOS, you must have separate subdirectories for each DOS version used on each machine type. See also: “DOS version”; ; “Login scripts”“Short machine type.” LPT1 The primary parallel printer port of a personal computer.
NetWare Glossary M M MAIL directory The SYS:MAIL directory, created during network installation, used by mail programs that are compatible with NetWare. In previous versions of NetWare, the MAIL directory held user login scripts. When you upgrade to NetWare 4, existing users still have subdirectories in the MAIL directory, but their login scripts become a property of the new User object. New users that you create under NetWare 4 won’t have subdirectories in the MAIL directory.
NetWare Glossary M Memory allocation The process of reserving specific memory locations in RAM for processes, instructions, and data. When a computer system is installed, the installer may allocate memory for items such as disk caches, RAM disks, extended memory, and expanded memory. Operating systems and application programs allocate memory to meet their requirements, but they can only use memory actually available to them. Memory can be reallocated between resources to optimize performance.
NetWare Glossary M Migrated attribute A NetWare status flag that indicates a file is migrated. NetWare Services does not support data migration or use this attribute. See also: “Attributes.” MLID See “Multiple Link Interface Driver (MLID).” Modify bit A bit set by NetWare, when a file is changed, to indicate that data has been modified. Modify right A directory or file right that grants the right to change the attributes or name of a directory or file. See also: “Rights.
NetWare Glossary M Multiple name space support The method that allows workstations running different operating systems to use their native naming conventions. The file system can present any given file using the client operating system’s naming conventions. The filename conversions require the following steps: • Character mappings • Collision detection • Binding Character Mappings Characters that are legal in filenames of one client operating system may not be legal in another.
NetWare Glossary M Binding Binding is the action of generating valid filenames for the client types that did not create a file. In NPFS, the binding occurs when the volume is configured for the name space and mounted and as files are created. See also: “Name space.” Multiserver network A single network that has two or more NetWare servers operating. On a multiserver network, users can access files from any NetWare server they have access rights to.
NetWare Glossary N N Name context The position of an object in the Directory tree. See also: “Context.” Name space A feature that allows you to store non-UNIX files on a NetWare Services server. Files appear in native mode to users at different workstations. DOS and UNIX name spaces are always enabled on a volume and cannot be disabled. OS/2 name spaces can be added and removed. NetWare Services supports the following lengths for filenames: DOS8.3 UNIX255 See also: “Multiple name space support.
NetWare Glossary N See also: “NEMUX”; “NetWare Core Protocol (NCP)”; “NetWare daemon”; “Lock manager.” NCP Packet Signature A NetWare security feature that protects servers and clients using NetWare Core Protocol (NCP) by preventing packet forgery. Without NCP Packet Signature, a client could pose as a more privileged client by sending a forged NCP request to a NetWare server. By forging the proper NCP request packet, an intruder could gain rights to all network resources.
NetWare Glossary N NET.CFG A workstation boot file, similar to DOS CONFIG.SYS, that contains configuration values that are read and interpreted when your workstation starts up. These configuration values adjust the operating parameters of the NetWare DOS Requester, IPX, and other workstation software.
NetWare Glossary N NetWare Core Protocol (NCP) NetWare Core Protocol. Procedures that a server’s NetWare operating system follows to accept and respond to workstation requests. The process of requesting service from a NetWare server begins in the workstation’s RAM where the NetWare DOS Requester or NetWare . The Requester then hands the requests to the station’s IPX communication protocol. IPX transmits the request to the server after attaching a header designating the source and destination.
NetWare Glossary N If a query is made that does not make sense in a particular NetWare Services environment, NWDIAG responds that the query is unsupported. For example, NetWare shell function calls would not be supported. The NWDIAG startup is configurable using the nwcm utility. See also: “nwcm.” NetWare Directory database The database (commonly referred to as the Directory) that organizes NetWare Directory Services objects in a hierarchical tree structure called the Directory tree.
NetWare Glossary N Compatibility with previous versions of NetWare is provided through bindery services. NetWare Directory Services helps you manage Directory resources such as NetWare servers and volumes, but it does not provide control over the file system (files and file directories). Graphical and text utilities are available to help you control the file system.
NetWare Glossary N Directory tree NetWare Directory Services operates in a logical organization called the Directory tree. It is called a Directory tree because objects are stored in a hierarchical tree structure, starting with the root object and branching out. Two types of objects make up the Directory tree: container objects and leaf objects. A branch of the Directory tree consists of a container object and all the objects it holds, which can include other container objects.
NetWare Glossary N [Root] [Root] Country Organization Organization Organizational Unit Organizational Unit Leaf objects Leaf objects [Root] [Root] Organization Organization Leaf objects Leaf objects Organizational Unit Leaf objects Figure 1-29 Possible Directory tree configurations See also: “Directory tree”; “Object.” Object names The path from an object to the root of the Directory tree forms the object’s complete name (sometimes called the distinguished name), which is a unique name.
NetWare Glossary N An object’s complete name consists of its common name (if it has one), followed by a period (.); then the name of the container object, also followed by a period, and on up through succeeding container object names to the root of the tree. For example, in the following figure, for User object ESAYERS (the common name), the complete name would be ESAYERS.SALES PV.SALES.
NetWare Glossary N When querying the Directory, you can supply the complete name of an object; then receive information that describes that object. Or, you can supply a property value of an object and receive a list of objects that have that value. For example, to find all users with a last name of Smith, then “Smith” is the value you want to find in the LAST NAME property of User objects. Object context NetWare Directory Services allows you to refer to objects according to their positions within a tree.
NetWare Glossary N ADMIN does not have significance like SUPERVISOR did in earlier versions of NetWare. It is only the first User object created and therefore must have the ability to create other objects. As you create other User objects on the Directory tree, you can give some of them the Supervisor object right to create and manage other container objects and their leaf objects. Control of the network is as dispersed or centralized as you make it.
NetWare Glossary N [Root] First default partition Organization First server installed Organizational Unit Organizational Unit Server object Server object Other leaf objects Organizational Unit Server object Other leaf objects Figure 1-31 Other leaf objects Default partitions Example of default partitions The tree of partitions is transparent to Directory users (unless they are running Partition Manager); users usually see only a global tree of Directory objects.
NetWare Glossary N Replicas For NetWare Directory Services to be distributed across a network, the database must be stored on many servers. Rather than have a copy of the whole database on each server, replicas of each partition are stored on many servers throughout the network. A replica is a copy of a partition. You can create an unlimited number of replicas for each partition and store them on any server in the network. Replicas serve two purposes: • To eliminate any single point of failure.
NetWare Glossary N See also: “Bindery services.” Time synchronization NetWare allows servers to synchronize their time with each other. NetWare Services gets its time from NTP, and when the NetWare Server is run in reference mode, it can advertise this clock value to the other NetWare servers on the network. Time synchronization is critical to the operation of NetWare Directory Services because it establishes the order of events.
NetWare Glossary N table in the bindery partition current with all servers using SAP • DSBackground daemon, which performs asynchronous background tasks, such as synchronization, for NDS • DSJanitor daemon, which performs one of the asynchronous background tasks • TimeSynch Daemon, which keeps the NetWare Services server’s time synchronized with other NDS servers. See also: “NetWare daemon”; “NetWare Directory Services (NDS).
NetWare Glossary N DOS NETX DOS NetWare DOS Requester VLM.EXE VLM.EXE AUTO DOS Redirection Layer Service Protocol Layer Transport Protocol Layer Figure 1-32 C O N N REDIR NWP PRINT FIO CACHE NDS RSA BIND LITE FIO PBODI TRAN IPXNCP TCPNCP NetWare DOS Requester NetWare DOS Requester layers and modules DOS redirection The NetWare DOS Requester includes a redirector that, in contrast to the NetWare shell, is called by DOS.
NetWare Glossary N The primary function of NEMUX is to schedule work for NetWare Services engines as messages arrive upstream and to route messages to the appropriate downstream protocol stack. NEMUX passes messages between the NetWare Services processes and the NetWare protocol stack in NetWare core protocol (NCP). NEMUX interacts with four types of NetWare Services processes—the NetWare daemon, engine processes, ancillary processes, and admin processes. All run as root users. • NetWare daemon.
NetWare Glossary N USInode contains such information as • Filename • Modification time • Access time • NetWare owner ID • Name space information for DOS and OS/2 USInode can be located by looking at the NPFS volume control path in the voltab file. See also: “Attributes”; “File Systems, NetWare Services”; “voltab.” NetWare Loadable Module (NLM) A program in NetWare 4 that you can load and unload from server memory while the server is running.
NetWare Glossary N The SNMP management agent (daemon) communicates with many peer daemons. NetWare Services has two such peer daemons: nwumps and nwum. The SNMP management agent can communicate with the management console using either IP or IPX. See also: “Network management”; “NetWare managed node.” NetWare operating system The network operating system developed by Novell, Inc.
NetWare Glossary N which daemons to spawn • Opens the IPX driver • Builds the lower multiplexor for IPX by • Configuring the LANs • Setting up Ethernet frame types • Initializing IPX with information from the nwconfig file • Setting up routing • Starting IPX • Builds the upper multiplexor for IPX by linking the SPX and NetBIOS drivers • Spawns daemons according to parameters in the nwconfig file.
NetWare Glossary N A NetWare Server object can represent a server running any version of NetWare. See also: “Creating Leaf Objects”; “Cautions When Deleting Server Objects” (Supervising the NetWork); “Object.” Network A group of computers that can communicate with each other, share peripherals (such as hard disks and printers), and access remote hosts or other networks. A NetWare network consists of workstations, peripherals, and one or more NetWare servers.
NetWare Glossary N Workstations Printer Network server Network backbone Figure 1-33 Tranceiver Terminator Network backbone Network board A circuit board installed in each workstation to allow stations to communicate with each other and with the NetWare server. Some printers contain their own network board to allow them to attach directly to the network cabling. Network communication Data transmission between workstations.
NetWare Glossary N Network Interface Card (NIC) A circuit board installed in each workstation to allow stations to communicate with each other and with the NetWare server. NetWare documentation uses the term “Network board” instead of “NIC.” Network management Network management is the part of NetWare Services that offers client applications the capability to view and manage many of the resources on the network.
NetWare Glossary N When NetWare Services are initialized, the NetWare daemon checks the configuration parameters for network management. If NetWare Services are configured for network management, the NetWare daemon spawns the NWUM daemon, which allows the following to be managed: shared memory, NetWare queues, connection, NetWare Directory Services, the file system, NCP, and AFP. The NWUM daemon uses shared memory, NCP calls, and ioctls to obtain statistics.
NetWare Glossary N Node number 00001B1E47E7 Node number IPX external network number 00001B1EAAAA AAAAAAAA NetWare server Workstation IPX internal network number A1A1A1A1 Figure 1-34 Network numbering See also “IPX external network number”; “IPX internal network number”; “Node number.” Network printer A printer shared in a network environment. See also: “Printer.
NetWare Glossary N NIC See “Network Interface Card (NIC).” NLM See “NetWare Loadable Module (NLM).” Node address A number that uniquely identifies a network board; usually referred to as the node number. See “Node number.” Node number A number that uniquely identifies a network board. Every node must have at least one network board, by which the node is connected to the network. Each network board must have a unique node number to distinguish it from all other network boards on that network.
NetWare Glossary N Novell Virtual Terminal (NVT) A method of allowing DOS clients to establish a virtual terminal sessions with a UNIX host running NetWare transport protocols. See also: “NVT2.” Novell Virtual Terminal 2 (NVT2) A method of allowing DOS clients to establish terminal sessions with a UNIX host running NetWare transport protocols. This feature gives clients access to UNIX applications. NVT2 runs as a TSR program on the client.
NetWare Glossary N nwcm The HP-UX command line interface to the NetWare run-time configuration library. You can use the nwcm (NetWare Configuration Manager) command to get or set values from the configuration database and get help messages for and descriptions of configuration parameters. It is also used to set parameters in the nwconfig file. NOTE: You can also use the graphical utility “NetWare Setup” to view or change nwcm values. See also: “Configuration”; “nwconfig.
NetWare Glossary N NWDIAGD See “NetWare Diagnostic Daemon (NWDIAGD).
NetWare Glossary O O Object In NetWare Directory Services, a structure that stores information about a network resource (a user, group, printer, volume, etc.). An object consists of categories of information, called properties, and the data in those properties. The information is stored in the NetWare Directory database. Some objects represent physical entities. For example, a User object represents a user and a Printer object represents a printer.
NetWare Glossary O [Root] object Container object Container object Container object Leaf objects Leaf objects Container object Container object Leaf objects Leaf objects Figure 1-35 Objects in a Directory tree Container objects. Container objects hold, or contain, other objects. Container objects are used as a way to logically organize all other objects in the Directory tree. Container objects are like directories in a file system in that they group related information together.
NetWare Glossary O Table 1-9 Types of container objects Container object Abbreviation Organization O Description A level below the Country object (unless you don’t use the Country object), the Organization object helps you organize other objects in the Directory and allows you to set template information for users created in this container. For example, you could use an Organization object to designate a company, or a university with various departments, or a department with several project teams.
NetWare Glossary O Table 1-10 Types of leaf objects Leaf object Description Points to the original location of an object in the Directory. Aliases can make NetWare Directory Services easier to use. Any Directory object located in one place in the Directory can also appear to be in another place in the Directory by using aliases. Alias When you create an alias, name it in a way that you can recognize it as an alias. The name is the only way you can recognize it as an alias once it is created.
NetWare Glossary O Table 1-10 Types of leaf objects Leaf object Directory Map Description Refers to a directory on a volume. You cannot look at the file structure on the volume from the Directory Map object, but login scripts can use the MAP command with a Directory Map object to record the location of frequently used applications. If the application moves, you change only the directory map; all login scripts remain unchanged. Group Assigns a name to a list of User objects in the Directory.
NetWare Glossary O Table 1-10 Types of leaf objects Leaf object Description Volume Represents a physical volume on the network. In the Volume object’s properties, you store information about which server the volume is located on, the volume’s name (for example, SYS:), the volume’s owner, space restrictions for users, and so forth. Objects in the Directory tree In a Directory tree, you can place container objects and leaf objects in different configurations, according to your company’s needs.
NetWare Glossary O You are not limited to using only one container object in a tree; you can use many at each level. The following figure shows an example Directory tree that has several container objects at each level of a tree.
NetWare Glossary O Figure 1-38 Complete and common names At times, such as when you move from one container object to another, you must include the object’s name type in the complete object name. For example, in the previous figure you would express ESAYERS as CN=ESAYERS.OU=SALES PV.OU=SALES.O=HEWLETTPACKARD US (where CN is the common name, OU is the Organizational Unit name, and O is the Organization name).
NetWare Glossary O Object contexts NetWare Directory Services allows you to refer to objects according to their positions within a tree. When you add an object (such as a server or user) to the network, you place that object in a container object in the Directory tree. The position of the object within its container is its context. For example, in the previous figure, the context for User object ESAYERS is SALES PV.SALES.HEWLETT-PACKARD US.
NetWare Glossary O Many of an object’s properties can contain multiple values. For example, the telephone number property, found in many object types, can contain several different telephone numbers. The NETADMIN and NetWare Administrator utilities allow you to see and change properties for any object that you have sufficient rights to. See also: “Managing Directory Service Objects” (Supervising the Network); “NetWare Directory Services (NDS).
NetWare Glossary O Client applications IPX TCP/IP AppleTalk Protocol stacks Link Support Layer (LSL) RX-Net Ethernet Token-Ring FDDI Multiple Link Interface Drivers (MLIDs) Network boards Figure 1-39 ODI model The major components of the ODI architecture are described in the following sections. Multiple Link Interface Driver (MLID) The MLID is a device driver written to the ODI specification that handles the sending and receiving of packets to and from a physical or logical LAN medium.
NetWare Glossary O In DOS client environments, the MSM and TSMs are linked in with the HSM so that only one module is loaded. Link Support Layer (LSL) The LSL is a software module that implements the interface between drivers and protocol stacks. It essentially acts like a switchboard, directing packets between the drivers and protocol stacks. Any ODI LAN driver can communicate with any ODI protocol stack through the LSL. The LSL handles the communication between protocol stacks and MLIDs.
NetWare Glossary O Hardware Specific Module (HSM) The HSM is created for a specific network board. The HSM handles all hardware interactions. Its primary functions include adapter initialization, reset, shutdown, and removal. It also handles packet reception and transmission. Additional procedures may also provide support for timeout detection, multicast addressing, and promiscuous mode reception.
NetWare Glossary O How ODINSUP Works ODINSUP functions as a default protocol stack. As a default protocol stack, it accepts packets from the ODI Link Support Layer (LSL) that aren’t specifically marked with a protocol identifier (PID) for registered ODI protocol stacks (such as IPX or TCP/IP). When it receives a packet, ODINSUP provides the packet to the NDIS Protocol Manager and passes it on to the NDIS protocol stack. ODINSUP allows the NDIS protocol stack to communicate with a network board.
NetWare Glossary O Organization object A container object that helps you organize other objects in the Directory and allows you to set template information for users created in this container. For example, you could use an Organization object to represent a company, or a university with various departments, or a department with several project teams. The Organization object is a level below the Country object (if used), and a level above the Organizational Unit object (if used).
NetWare Glossary P P Packet A unit of information used in network communication. Messages sent between network devices (for example, workstations and NetWare server.) are formed into packets at the source device. The packets are reassembled, if necessary, into complete messages when they reach their destination. A packet might contain a request for service, information on how to handle the request, and the data that will be serviced. An individual packet consists of headers and a data portion.
NetWare Glossary P The Packet Burst protocol speeds the transfer of NCP data between a workstation and a NetWare server by eliminating the need to sequence and acknowledge each packet. Packet Burst protocol is more efficient than the one-request/one-response protocol in earlier NetWare versions. With Packet Burst protocol, the server or workstation can send a whole set (burst) of packets before it requires an acknowledgment.
NetWare Glossary P NetWare Services requires the following configuration parameters to be set in nwconfig to enable Packet Burst at the server: • burst_mode_protocol=(on or off; on=default) • burst_mode_clients=(number of clients allowed: 0-1,000) Other parameters can be used to tune the Packet Burst protocol. For NETX workstations to send and receive Packet Burst data, you must enable Packet Burst under the NetWare DOS Requester. On the VLM client, burst-mode is enabled by default.
NetWare Glossary P Partition, Directory Services In NetWare Directory Services, a logical division of the Directory's global database. A partition forms a distinct unit of data in the Directory tree that you use to store and replicate Directory information. Each partition consists of a container object, all objects contained in it, and data about those objects. Partitions don’t include any information about the file system or the directories and files contained there.
NetWare Glossary P Partition replication improves access and provides the Directory with fault tolerance. Since a partition can be replicated at several locations, damage to one of the replicas does not need to interrupt access to the partition information. Furthermore, the Directory allows replicas to be designated as read-write or read-only, thus controlling the introduction of updates into the system.
NetWare Glossary P Password The characters a user must type to log in with. NetWare allows the network supervisor to specify whether passwords are required and, if so, to assign a login password to each user on the network. The network supervisor can also specify whether passwords must be unique and whether they must be changed periodically. In NetWare, login passwords are encrypted at the workstation and put into a format that only the NetWare server can decode.
NetWare Glossary P See also “HPFS”; “Rights.” Port, hardware A connecting component that allows a microprocessor to communicate with a compatible peripheral. See also “Parallel port”; “Serial port.” Port, software A memory address that identifies the physical circuit used to transfer information between a client LAN driver and a peripheral. Power conditioning Methods of protecting sensitive network hardware components against power disturbances.
NetWare Glossary P Make sure the proper amperage is available for each system; dedicated power lines should provide ample amperage. Also, make sure all outlets are grounded. Power conditioning devices connected to poorly grounded outlets offer very little protection. Primary time server In NetWare Directory Services, a server that synchronizes the time with at least one other Primary or Reference time server, and provides the time to Secondary time servers and to workstations.
NetWare Glossary P You specify modes using the NetWare Administrator or PRINTCON. Then NPRINT, CAPTURE, or PCONSOLE use the print job configuration option to send print jobs to your printer with the correct control sequences. Related utilities: “CAPTURE”; “NPRINT”; “PCONSOLE”; “PRINTCON”; “PRINTDEF.” (Utilities Reference) See also: “Working with Print Device Definitions and Printer Forms” (Print Services); “Printing.
NetWare Glossary P As soon as print job 024B0001.Q is printed, the next print job to enter the print queue is named 024B0001.Q. Like all print jobs, it would follow the first-in, first-out basis, unless the print job was held or a print queue operator changed the order of service. Print job configuration A group of characteristics that determine how a job is printed.
NetWare Glossary P In bindery mode, the print queue directory resides in the SYSTEM directory on volume SYS: of the current server. The “Quick Setup” option in PCONSOLE automatically creates a print queue for each printer. Print queue name The print queue directory is assigned a random name. This name is the print queue ID seen in NetWare Administrator or PCONSOLE with a .QDR extension. For example, print queue LETTERHEAD_Q might be directory LEGAL/ SYS:SYSTEM/4B020057.
NetWare Glossary P See also: “Configuring and Managing Print Services with Printer Setup”; “Configuring and Managing Print Services with NetWare Administrator”; “Configuring and Managing Print Services with PCONSOLE” (Print Services); “Print queue operator.” Print queue operator A user who can edit other users’ print jobs, delete print jobs from the print queue, or modify the print queue status by changing the operator flags.
NetWare Glossary P See also: “Configuring and Managing Print Services with Printer Setup”; “Configuring and Managing Print Services with NetWare Administrator”; “Configuring and Managing Print Services with PCONSOLE” (Print Services); “Printer”; “Printing.” Print Server object A leaf object that represents a network print server. See also “Object.” Print Server Operator A user or member of a group delegated rights by ADMIN to manage the print server.
NetWare Glossary P Network printer drivers Every network printer requires a network printer driver to pass a print job from the network to the printer. The type of driver depends on how the printer is attached to the network. Printers attached to the network store their own printer driver. Printers attached to the workstation need NPRINTER.EXE loaded on the workstation. Printers attached to HP-UX can use the printer driver in either the NPrinter daemon or the PServer daemon.
NetWare Glossary P If your printer or plotter does not function with one of the available print device definitions, you can create your own set of control characters and specify what forms your print device accepts. See “Working with Print Device Definitions and Printer Forms” in Print Services. Printer form A print option designed to prevent print jobs from being printed on the wrong paper.
NetWare Glossary P Workstation Figure 1-43 Printer Non-network printing NetWare Services uses a print queue and print server to allow workstations to print to a printer. The print server takes print jobs from the print queue and sends them to the printer. Workstations NetWare server Print queue Figure 1-44 Printer Print server Network printing Process A systematic sequence of operations that transforms raw data into useful information.
NetWare Glossary P See also “Client”; “Engine”; “NetWare daemon”; “NPS daemon”; “ncp_engine.” Profile login script A type of login script that sets environments for a group of users. Use profile login scripts if there are groups of users with identical login script needs. Profile login scripts are optional; if used, they execute after the container login script and before the user login script. See also “Login scripts.
NetWare Glossary P For example, to change your DOS prompt at the command line so that the prompt displays the current drive mapping followed by the > symbol, you would type SET PROMPT=$P$G See your respective DOS manual for further details on changing prompts, including prompt variables. (The NetWare server console prompt can't be changed.) See also “Drive mapping”; “Login scripts.” Property A characteristic of a NetWare Directory Services object.
NetWare Glossary P Property rights Rights that apply to the properties of a NetWare Directory Services object. See “Rights.” Protected mode The mode that 80286, 80386, and 80486 processors run in by default. When running in protected mode, these processors are not subject to the same memory constraints as 8086 processors. The 80286 processor uses a 24-bit address bus, and can address up to 16 MB of memory. The 80386 and 80486 processors use a 32-bit address bus, and can address up to 4 GB of memory.
NetWare Glossary P Protocol stack The protocols that allow a UNIX host to communicate with the rest of the NetWare Services network. The protocol stack contains IPX, SPX, RIP, and SAP. See “IPX”; “SAP”; “SPXII”; “RIP.” PUBLIC directory The SYS:PUBLIC directory, created during network installation, that allows general access to the network and contains NetWare utilities and programs for network users.
NetWare Glossary P Whatever rights are granted to [Public] are effective for any object in NetWare Directory Services that does not have any other effective rights. This is similar to granting trustee rights to user GUEST or group EVERYONE in previous NetWare versions. Make [Public] a trustee of areas that every object should have access to. (A user does not have to log in to access areas where [Public] is granted rights.
NetWare Glossary Q Q Queue A list of jobs to which new jobs are added at the end and jobs are accessed from the beginning. There are various types of queues, including the NetWare printer queue. The list of print jobs is stored in a network directory. When the printer assigned to the print queue is ready, the print server takes the print job out of the print queue and sends it to the printer. See “Print queue.
NetWare Glossary R R RAM (Random Access Memory) The internal dynamic storage of a computer that can be addressed by the computer’s operating system. See “Memory, DOS management.” Read-ahead cache A data cache that can be used to enhance client reads for clients that do not use packet burst mode protocol. While a client is processing the first response to a read request, the NetWare engine reads the rest of the file into read-ahead cache so that subsequent requests can be served from memory.
NetWare Glossary R The 8086 processor uses a 20-bit address bus, and can address up to 1 MB of memory. The 8086 processor is also limited to running only one application or process at a time. When running in protected mode, the 80286, 80386, and 80486 processors are capable of multitasking and addressing much more than 1 MB of memory. When running in real mode, these processors are subject to the same 1MB memory constraint as the 8086 processor, and they can run only one application or process at a time.
NetWare Glossary R Recursive copying The process of copying a specified source directory to a destination directory until all files and subdirectories in and below the specified source directory are copied. Recursive copying copies all directories and files of a logical drive to the destination, keeping them exactly as they were in the source directory. The DOS XCOPY and BACKUP utilities use recursive copying, as does the NetWare NCOPY command. Related utility: “NCOPY” (Utilities Reference).
NetWare Glossary R information is then transmitted to the resource through the appropriate daemon and then back through the daemon and the SNMP agent to the source of the request. See also “NetWare management agents”; “Network management.” Remote administration The use terminal emulation by network supervisors to run configuration (for example, nwcm) and system management utilities from a client rather than from the host machine or other servers.
NetWare Glossary R BOOTNCP.COM and RPL.COM, a DOS terminate-and-stay-resident (TSR) module need to be loaded in that order on a workstation, or RPL.NLM on a native NetWare 4 server. When RPL.COM is loaded on a DOS client it function as an “RPL Server.” An ODI driver must also be loaded at the RPL server. A NET.CFG file is used by various ODI modules—including the LSL, NAN drivers, and protocol stacks— to get network configuration information at initialization. RPL.COM reads this file. BOOTCONF.
NetWare Glossary R Rename right A Directory Services object right that grants the right to change the name of an object, in effect changing the naming property. See “Rights.” Replica A copy of a Directory partition. For a NetWare Directory Services database to be distributed across a network, the database must be stored on many servers. Rather than have a copy of the whole database on each server, replicas of each partition are stored on many servers throughout the network.
NetWare Glossary R Types of replicas • Master replica. Although many replicas can exist in the Directory, only one is the master replica. Use it to create a new partition in the Directory database, or to read and update Directory information, such as adding or deleting objects. • Read-write replica. Use to read or update Directory information (such as adding or deleting objects). • Read-only replica. Use to view, but not to modify, Directory information.
NetWare Glossary R subsystems—protocols, gateways, LAN and disk drivers, etc. • Data structures and other network resources that do not easily fit into one of the above categories, or are created by a combination of network components— volumes, queues, users, processes, security, and so forth. Restore A retrieval of data previously copied and backed up to a storage media. Perform a restore if data has been lost or corrupted since the backup. See also “Backup.
NetWare Glossary R Directory rights are a part of the file system. They aren’t assigned to NetWare Directory Services objects. But a User object can be granted Directory rights to a directory on a volume. The following table describes directory rights. Table 1-11 Directory rights Right Description Supervisor Grants all rights to the directory, its files, and subdirectories. The Supervisor right can't be blocked by an Inherited Rights Filter.
NetWare Glossary R The following table describes file rights. Table 1-12 File rights Right Description Supervisor Grants all rights to the file. The file Supervisor right can't be blocked with an Inherited Rights Filter. Users who have this right can also grant other users any rights to the file, and can change the file’s Inherited Rights Filter. Read Grants the right to open and read the file. Create Grants the right to salvage the file after it has been deleted.
NetWare Glossary R Table 1-13 Object Rights Right Description Create Grants the right to create a new object below this object in the Directory tree. Rights are not defined for the new object. This right is only available on container objects, because non-container objects can't have subordinates. Delete Grants the right to delete the object from the Directory tree. Objects that have subordinates can't be deleted (unless subordinates are deleted first).
NetWare Glossary R To grant directory or file rights to other objects, a trustee must have the Access Control right to a directory or file. To grant object or property rights to other objects, a trustee must have the Write, Add or Delete, Self, or Supervisor right to the ACL property of the object. Rights are granted and revoked by creating trustee assignments with the “RIGHTS”, “NETADMIN”, or “NetWare Administrator” utilities.
NetWare Glossary R “HPFS”See also “Access Control List (ACL)”; “File Systems, NetWare Services”; “File system, HP-UX”; ; “Security”; “Trustee database.” RIP See “Router Information Protocol (RIP).” Root directory The highest directory level in a hierarchical directory structure. With NetWare, the root directory is the volume; all other directories are subdirectories of the volume.
NetWare Glossary R Root user A special user in the HP-UX operating system who has unrestricted access to files and system resources. See also “Root Directory.” Router A workstation or NetWare server running software that manages the exchange of information (in the form of data packets) between network cabling systems. A NetWare router runs as part of a NetWare server. It connects separate network cabling topologies or separate networks by way of the server’s NetWare operating system.
NetWare Glossary R For example, a NetWare router can connect a network using the Ethernet addressing structure and RG/58 coaxial cable to another network using the ARCnet addressing structure and RG/62 coaxial cable. Local vs. remote When a router is used within the cable length limitations for its LAN drivers, it is a local router. If the router is connected beyond its driver limitations or through a modem, it is a remote router.
NetWare Glossary R To avoid inconsistencies in broadcast and aging intervals, all routers on the same network segment must have the same RIP configuration. See also “Router”; “Service Advertising Protocol (SAP).
NetWare Glossary S S Salvageable files Files saved by NetWare, after being deleted by users, that can be salvaged (recovered). NetWare Services does not support salvageable files. SAP See “Service Advertising Protocol (SAP).” SAP daemon See “Service Advertising Protocol daemon (SAPD).” SCSI See “Small Computer Systems Interface (SCSI).” SCSI bus See also: “Small Computer Systems Interface (SCSI)”; “Hard disk.
NetWare Glossary S Search modes Methods of operation that specify how a program will use search drives when looking for a data file. When a DOS .EXE or .COM file requires an auxiliary file, it makes an open request through the operating system. The request may or may not specify the path to that file. If a path is specified, the operating system searches that path. Otherwise, it only searches the default directory.
NetWare Glossary S Table 1-15 Search modes Mode Description 6 Reserved. 7 The executable file searches the path specified first. If the open request is read only, the file searches the search drives. If there is no path, the file searches the default directory, and then all search drives. For example, if you assign an executable file mode 2, it won't use search drives.
NetWare Glossary S Inheritance Security. Passes rights from higher to lower levels. See “Inheritance security.” Attributes Security. Describes characteristics of directories and files. See “Attributes security.” Effective rights Security. Determines a user’s actual calculated rights to a directory, file, or object. See “Effective rights security.” Two categories of HP-UX security are HP-UX Login Security. Controls who can access the network through HPUX. See “HP-UX login security.
NetWare Glossary S You can assign and change passwords, or assign initial passwords and allow users to change them. To increase login security, consider requiring these password options: • Minimum password length. Prevents the use of passwords that might be easily guessed. Default: 5 characters. • Periodic change in the password. Prevents keeping a password indefinitely. Default: every 90 days. • Unique password. Prevents alternating between a few favorite passwords.
NetWare Glossary S Rights are granted to a specific directory, file, or NDS object by trustee assignments. An object with a trustee assignment to a file, directory, or NDS object is a trustee of that file, directory, or object. Within each NDS object is an Access Control List (ACL) that defines who has rights to the object. Files and directories contain similar information, but not in the form of ACLs.
NetWare Glossary S Inheritance security By inheritance, rights granted by a trustee assignment apply to everything below the point where the assignment is made, unless another trustee assignment is made or unless the rights are blocked by an Inherited Rights Filter (IRF). Inheritance applies both to directories and files on a volume, and to objects in the Directory tree. For directories and files, all access rights are inherited. For objects, only object and property rights are inherited.
NetWare Glossary S Be careful not to block everyone’s rights to an object with an Inherited Rights Filter, leaving no one with access to part of the Directory tree. The utilities don’t allow you to block the Supervisor object right unless a trustee already has the Supervisor object right at that point. But you could still delete the trustee object, making the trustee assignment invalid and cutting off access to that part of the Directory tree.
NetWare Glossary S trustee assignments to the current directory or file.) • Trustee assignments of Group objects that a User object belongs to. • Trustee assignments of objects listed in a User object’s security equivalences list. Trustee assignments to a group are added to individual user trustee assignments. No rights are granted by default. They must be granted by a trustee assignment at some point.
NetWare Glossary S When a user is added to the membership list of a Group object or the occupant list of an Organizational Role object, the Group or Organizational Role is listed in that user’s security equivalence. By using a security equivalence, you avoid having to review the whole directory structure and determine which rights need to be assigned to which directories, files, and objects. Use security equivalence with caution.
NetWare Glossary S Semaphore A flag that coordinates activities of both programs and processes to prevent data corruption in multiprocess or multiuser environments. Semaphores are similar to logical locks in that they lock a certain string. However, unlike logical locks, semaphores allow more than one user to control the lock at one time. For example, semaphores can allow a specified number of users access to a resource, such as to network applications with limited-user licenses.
NetWare Glossary S SPXII maintains full backward compatibility with the existing SPX. The interface is the same, but taking full advantage of SPXII requires minor changes to user applications. TLI (Transport Level Interface) is the only supported application interface to SPXII. SPXII verifies and acknowledges successful packet delivery to any network destination by requesting a verification from the destination that the data was received.
NetWare Glossary S nwcm -s console_device=/dev/fd/1 Since NetWare Services operates as a set of daemons, input to the system is not possible through the console device. All maintenance and server commands are executed through appropriate utilities (for example, “NetWare Server Status” and “Directory Services Repair”). Related utility: “nwcm” (Utilities Reference). Server protocol Procedures that a NetWare server follows to accept and respond to workstation requests. See “NetWare daemon.
NetWare Glossary S To keep workstations from attaching to a server, network supervisors can turn off the “Get Nearest Server” SAP option. By default, an SA sends SAP packets to each of its connected network segments every 60 seconds. Related utilities: “nwsapinfo(1M)”; “nwsaputil(1M)”. See also: “Router”; “Router Information Protocol (RIP)”; “Service Advertising Protocol daemon (SAPD).
NetWare Glossary S Shared memory A pool of memory that HP-UX processes have access to. Shared memory is divided into pools and controlled by internal locking mechanisms. NetWare Services stores the following in shared memory: • Connection table • Synchronization data structures • Trustee database • NetWare server information • Volume table Short machine type A four-letter (or less) name representing a DOS workstation brand.
NetWare Glossary S Small Computer Systems Interface (SCSI) Commonly pronounced scuzzy. An industry standard that sets guidelines for connecting peripheral devices and their controllers to a microprocessor. The SCSI interface defines both hardware and software standards for communication between a host computer and a peripheral. Computers and peripheral devices designed to meet SCSI specifications have a large degree of compatibility.
NetWare Glossary S SPX See “Sequenced Packet Exchange (SPX).” SPX2 See “Sequenced Packet eXchange II (SPXII).” SPXII See “Sequenced Packet eXchange II (SPXII).” Station Usually a shortened form for workstation, but can also be a server, router, printer, fax machine, or any computer device connected to a network by a network board and a communication medium. Station address A number that uniquely identifies a network board; usually referred to as the node number. See “Node number.
NetWare Glossary S Supervisor right A NetWare file system right that grants all rights to the respective directory and files. Also, an object right that grants all privileges to all objects in that container. Also, a property right that grants all rights to the property. See “Rights.” Switch block A set of switches mounted to form a single component. In some computers, a switch block is used to control system configuration data, such as type of monitor, amount of memory, and number of drives.
NetWare Glossary S NOTE: Normally, only a client can invoke Synchronization Services. However, the NetWare server will occasionally issue synchronization services calls to perform internal synchronization on critical data. NetWare Services provides a simple synchronization mechanism through the mode in which the file is opened. For example, opening a file in denywrite mode would prevent other clients from modifying the file, but would still allow them to read the file.
NetWare Glossary S daemons: the file lock daemon, the physical lock daemon, the logical lock daemon, and the semaphore daemon. An additional timer daemon keeps accurate time for lock aging. See “File locking”; “Record locking”; “Semaphore.” System attribute A file system attribute that marks directories or files for use only by the operating system. See “Attributes.” SYSTEM directory The SYS:SYSTEM directory, created during NetWare installation, that contains NetWare utilities for managing the network.
NetWare Glossary T T Tape backup unit Typically, an external tape drive that backs up data from hard disks. TCP/IP See “Transmission Control Protocol/Internet Protocol (TCP/IP).” Terminal emulation software Software that duplicates the communication protocol of a dedicated terminal, connecting workstation users to the UNIX environment. A workstation running terminal emulation software acts as if it were wired directly to the UNIX terminal ports.
NetWare Glossary T NetWare Directory Services uses time stamps to • Establish the order of events (such as object creation and partition replication) • Record “real world” time values • Set expiration dates Time stamps are especially important when NetWare Directory Services partitions are replicated and need to be concurrent with one another. Replication allows partition updates to originate from many locations.
NetWare Glossary T workstations. This server determines the time for the entire network and is the only source of time on the network. The network supervisor sets the time on the Single Reference time server. Because the Single Reference time server is the source of time on the network, all other servers must be able to contact it. The following figure illustrates a Single Reference time server providing time to Secondary time servers and to its own workstations.
NetWare Glossary T The following figure shows Primary time servers in various locations providing time to their respective Secondary time servers. Secondary time servers, in turn, provide time to their workstations.
NetWare Glossary T Reference time servers may be synchronized with an external time source, such as a radio clock. Reference time servers “vote” with other Primary or Reference time servers to determine what the common network time should be. However, Reference time servers do not adjust their internal clocks; instead, the Primary servers’ internal clocks are adjusted to synchronize with the Reference time server. Therefore, a Reference time server acts as a central point to set network time.
NetWare Glossary T You must have at least one other Primary time server that the Reference time server can contact. Whenever Primary and Reference time servers are on a network, they must be able to contact each other for polling. • Secondary time server. Secondary time servers obtain the time from a Single Reference, Primary, or Reference time server. They adjust their internal clocks to synchronize with the network time, and they provide the time to workstations.
NetWare Glossary T Custom configuration. You can list the specific time servers that a particular server should contact. You can also specify that a server shouldn’t listen for SAP information from other time sources, and that it is not to advertise its presence using SAP An advantage of custom configuration is that the network supervisor maintains complete control of the time synchronization environment.
NetWare Glossary T Transmission Control Protocol/Internet Protocol (TCP/IP) An industry-standard suite of networking protocols, enabling dissimilar nodes in a heterogenous environment to communicate with one another. TCP/IP is built upon four layers that roughly correspond to the seven-layer OSI model.
NetWare Glossary T Rights are granted to objects (making them trustees) by trustee assignments. Trustee assignments are part of the directory, file, or object to which they grant access. Trustee assignments are stored in a trustee list. An object’s trustee list is stored in the object’s ACL property. In NetWare Services a directory or file’s trustee list is stored in the volume’s trustee database.
NetWare Glossary T A trustee through inheritance is an object that has a trustee assignment to a directory, file, or object higher in the structure and inherits rights for the current directory, file, or object. Hole in the tree. A trustee assignment for a file or directory always allows the user to see the path to the root directory of the volume. A trustee assignment for an object, however, does not automatically show the user the directory tree to the root.
NetWare Glossary T Trustee database A database that contains information about trustee assignments and inherited rights filters (IRFs) in NetWare. Since NetWare checks trustee rights every time a user accesses a file or directory, quick access to the trustee information is essential.
NetWare Glossary U U Unbinding The process of removing a communication protocol from network boards and LAN drivers. See “Binding and unbinding.” Unknown object A leaf object that represents a NetWare Directory Services object that has been corrupted and can't be identified as belonging to any of the other object classes. See also “Object.” Unicode A 16-bit character representation, defined by the Unicode Consortium, that supports up to 65,536 unique characters.
NetWare Glossary U For example, to use code page 850 (Europe) with country information for France (for which the international telephone country code is 33), you need the following Unicode files: • 850_UNI.033 — Translates code page 850 to Unicode • UNI_850.033 — Translates Unicode to code page 850 • UNI_MON.033 — Handles monocasing (the proper alphabetization of upperand lower-case letters) • UNI_COL.
NetWare Glossary U When a NetWare client tries to lock a file, NetWare first makes sure that the lock request does not conflict with other NetWare locks. If it does not, NetWare attempts to lock the entire file under UNIX. If any UNIX locks are on the file, the lock request fails. Many NetWare clients can set locks on the file or many UNIX processes can set locks on the file, but not both concurrently.
NetWare Glossary U HP-UX The operating system developed by the UNIX Systems Group at HewlettPackard., that provides all the power and reliability of a traditional UNIX operating system in an easy-to-use, graphical user interface (GUI) environment. User login script A type of login script that sets environments specific to a user. Use user login scripts to contain items that cannot be included in system or profile login scripts.
NetWare Glossary U Group membership You can assign a user to Group objects. When added to a group, a user inherits the rights assigned to that group. Home directories A home directory serves as a user’s personal workspace. If you create home directories, plan a parent directory (such as SYS:HOME or SYS:USERS) for them. Or, for a large system, set aside a separate volume for users’ home directories.
NetWare Glossary U User login scripts These configurable batch files customize the network environment for users by initializing environment variables, mapping drives, and executing other commands. Up to three login scripts are used at login, executed in the following order: • The login script of the user’s immediate container. • The login script in a profile object specified for that user. • The user’s individual login script.
NetWare Glossary U If accounting hasn’t been installed, this option isn’t available. • Expiration restrictions. You can specify an expiration date for a user account. The account expires at 12:01 a.m. the following day. Any attempt to log in after the account expires disables the account. (Default: no expiration.) • Password restrictions. You can require passwords.
NetWare Glossary U User template A file containing default information you can apply to new User objects to give them default property values. This helps if you are creating many users who need the same property values. You create user templates in Organization or Organizational Unit objects. When you create a User object, you can specify that you want to use a user template.
NetWare Glossary U Server utilities NetWare administrators use server utilities to maintain the network. These utilities are available from the server console or from a Remote Console™.
NetWare Glossary V V Value-added server A separate, specialized, dedicated computer (such as a print server or a database server) that fulfills a specific function for network users. Virtual Loadable Module (VLM) A modular executable program that runs at each DOS workstation and enables communication with the NetWare server. A VLM file has a .VLM filename extension. For example, the IPX VLM file is IPXNCP.VLM. The NetWare DOS Requester is composed of several VLMs.
NetWare Glossary V See also “NetWare DOS Requester.” VLM See “Virtual Loadable Module (VLM).” voltab The NetWare Services configuration file that contains all volume parameters. All other configuration parameters are stored in nwconfig. Parameters in voltab are set using the graphical utility NetWare Volume Setup. Related utilities: “NetWare Volume Setup” (Utilities Reference). Volume The highest point in a NetWare file system. Volumes contain directories, subdirectories, and files.
NetWare Glossary V Volume Configuration To configure NetWare volumes, use the “NetWare Volume Setup” graphical utility to set the following volume properties: • Volume Name. Specifies the name NetWare clients use to access the volume. The first volume is always SYS. Other volumes may have the same name as the HPUX directory, or may be different. Names must be from 2 to 15 characters long. • Type.
NetWare Glossary V In the Volume object’s properties, you can store information about which NetWare server the physical volume is located on and the volume name recorded when the volume was initialized at the server (for example, SYS:). You can also store information such as the volume’s owner, space use restrictions for users, or a description of its use. See “Creating Leaf Objects” in Supervising the Network. See also “Object”; “Volume.
NetWare Glossary W W Wait state A period of time when the processor does nothing; it simply waits. A wait state is used to synchronize circuitry or devices operating at different speeds. For example, wait states used in memory access slow down the CPU so all components seem to be running at the same speed. WAN See “Wide Area Network (WAN).” Watchdog Packets used to make sure workstations are still connected to the NetWare server.
NetWare Glossary W A local area network (LAN) becomes a part of a WAN when it’s linked (by modems, remote routers, phone lines, satellites, or microwave) to a mainframe, public data network, or another LAN. See also “Local Area Network (LAN).
NetWare Glossary W 1-228
Index A Access Control List, explained, 1-2 Access Control right, explained, 1-2 Access privileges, explained, 1-3 Accounting assigning account balances, 1-5 charge rate formula, 1-4 charging for network services and resources, 1-3 explained, 1-3 sample charge rate, 1-4 ACL. See Access Control List Add Self right, explained, 1-5 Add-on board, explained, 1-5 Address Resolution Protocol (ARP), explained, 1-6 Address.
Index object, 1-26, 1-130 Context explained, 1-26, 1-109 illustrated, 1-27 in a Directory tree, example, 1-27 name, 1-100 object, 1-137 Copying, recursive, explained, 1-168 Country object, explained, 1-28 Create right, explained, 1-28 Custom configuration, time servers, 1-208 D Daemon explained, 1-29 NetWare, 1-102 NetWare Protocol stack, 1-118 NPS, 1-126, 1-195 SAP, 1-182 Daemons, NetWare Dirctory Service, 1-113 Data directory, 1-39 Database, NetWare.
Index E EAs. See extended attribute Effective rights explained, 1-47, 1-189 illustrated, 1-48 Engine, explained, 1-49 Erase rights, explained, 1-49 Ethernet configuration, 1-49 Execute Only attribute, explained, 153 Extended attribute, explained, 1-53 Extension, filename, explained, 1-59 External network number, explained, 1-73, 1-123 File Transfer Protocol (FTP), explained, 1-59 Filename DOS, 1-42 extension, 1-59 long, 1-93 Finding. See Browsing Flag.
Index IPXODI, explained, 1-74 J Jumper block, explained, 1-75 K Keystroke notation, vi L LAN driver, client, explained, 1-76 LAN. SeeLocal Area Network Large Internet Packet (LIP), explained, 1-76 Leaf object examples, 1-132 explained, 1-77, 1-131 types, 1-132 Link Support Layer (LSL), explained, 1-77, 1-140 LIP. See Large Internet Packet Loadable module. See NetWare Loadable Module; Virtual Loadable Module Local Area Network, explained, 1-78 Local drive mapping, explained, 1-44 Lock manager.
Index properties, 1-105 request, explained, 1-33 NetWare Directory Services daemon, explained, 1-113 NetWare DOS Requester explained, 1-114 illustrated, 1-115 NetWare inode, explained, 1-116 NetWare Loadable Module (NLM), explained, 1-117 NetWare management agents, explained, 1-117 NetWare operating system, explained, 1-118 NetWare Portable File System (NPFS) volumes, 1-58 NetWare Protocol stack daemon, explained, 1-118 NetWare server default, explained, 1-29 object, 1-119 print, 1-155 value-added, 1-222 N
Index P Packet explained, 1-144 message, explained, 1-96 signature, 1-101 Packet Burst protocol explained, 1-144 Parallel port, explained, 1-146 Parent directory explained, 1-146 for applications, example, 1-38 Parent object, explained, 1-130, 1-146 Parity, explained, 1-146 Partition directory, 1-110 NetWare Directory Services, 1-147 Password explained, 1-149 related to security, 1-185 Password restriction, for managing user objects, 1-219 Path, directory example, 1-35 explained, 1-35, 1-149 Permanent driv
Index Restoring data, explained, 1-173 Right write, 1-227 Rights directory, 1-30, 1-32, 1-173, 1-174 effective, 1-47 effective, illustrated, 1-48 erase, 1-49 explained, 1-173, 1-186 file, 1-30, 1-174, 1-175 filter, 1-188 inherited, 1-188 modify, 1-97 object, 1-138, 1-175 object, described, 1-175 property, 1-162, 1-176 property, described, 1-176 read, 1-166 related to security, 1-186 rename, 1-171 supervisor, 1-199 RIP.
Index TCP, explained, 1-209 TCP/IP, explained, 1-202 Temporary drive mapping, explained, 1-44 Terminal emulation software, explained, 1-202 Time restrictions, for managing user objects, 1-219 Time server custom configuration, 1-207, 1-208 explained, 1-203 primary, 1-151, 1-204 primary, illustrated, 1-205 refereence, illustrated, 1-206 reference, 1-168, 1-205 secondary, 1-184, 1-207 single reference, 1-196, 1-203 single reference, illustrated, 1-204 Time synchronization, explained, 1113, 1-202 Topology bus