Solved

Moving a netware 6.5 server to a new context

Posted on 2004-10-07
8
471 Views
Last Modified: 2008-02-01
Just looking for a refresher. I have a netware 6.5 server that is moving to a new data center tomorrow. It will be getting a new IP address and will have to be moved/consolidated into a new OU (along with all the users/groups etc). I Haven't done either (IP change or context move) since 5.1 and I'm looking for a refresher. The IP address change seems long winded but fairly straight forward. However, the move concerns me. My memory tells me there are a few objects that don't like to be moved.

Specifically, the SSL certificates and DNS/DHCP objects? Also, seems like the server should be clear of replicas? The old OU won't be going away just yet, but it will be soon. The server I'm moving holds the master replica of the OU I'm moving it out of and there is another server which holds the master replica of it's OU (where this server will be going).

Anyone have any gotchas for either the IP change or the move. No patching or updating will occur. All servers in the tree are 6 or 6.5 and the root replica sits on 6.5. I know the users, groups, templates, profiles, etc will move easy.

Thanks for any insight,
Tim
0
Comment
Question by:timmr72
  • 4
  • 3
8 Comments
 
LVL 34

Assisted Solution

by:PsiCop
PsiCop earned 60 total points
ID: 12258407
I wouldn't change all those things at once. Change the IP address first. Give that a day or so (depends on the size of the NDS tree) to settle out and make sure replication continues to work. Then move it to its new OU.

As long as the license object is higher in the tree (and within the server's search radius) than the server, it should continue to find the license object it wants. If the server is making a change such that its license object is no longer "above" it in the tree, then it will need to be associated with a new license object. If needed, adjust the license search radius.

If you support Bindery Emulation, be sure to change that value in AUTOEXEC.NCF.
0
 
LVL 34

Expert Comment

by:PsiCop
ID: 12258422
Also, I'd put off other moves until the server object had been moved for a day or so, unless those other moves were for objects that had no impact on the server. Gotta give NDS time to get all the backlinks (sorry, Distributed Reference Links) updated.
0
 
LVL 35

Expert Comment

by:ShineOn
ID: 12259120
The biggest gotchas in the IP change is catching all of the places the IP address is used, including Apache, Tomcat, config files in ETC.  A search of SYS vol for the old IP address helps a lot in locating all of those.

I think the master of the partition thing will be the biggest issue.  Is there another server in the partition that the server is master of, that will be assuming the role of master, or is the partition going away?  Is the new OU's partition a child of the same parent partition or what?

If this partition is going away, merge it with the parent before doing anything else, so another server is handling the objects in eDirectory for that OU.  It may slow down some operations going across a WAN link, but this will allow you to remove the replica from the server, making it easier to move to its new context.
0
 
LVL 35

Expert Comment

by:ShineOn
ID: 12259225
Since the change is not going to have a couple of days to settle out, take care of NDS first.  If you are "retiring" the old OU, do the partition merge with the parent partition ASAP, so the replica ring holding the parent partition can be relied on to handle all of the other changes that will be happening, including the server addressing change and the context changes for the other objects.
0
Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

 
LVL 35

Expert Comment

by:ShineOn
ID: 12259841
I believe you will have to delete and re-create the SMS SMDR object for the server.  Not sure about DNS/DHCP or cert objects.
0
 
LVL 35

Accepted Solution

by:
ShineOn earned 65 total points
ID: 12259950
On the partition/ou thing - you can have an OU without it being a partition, remember.  Merging the partition with its parent accomplishes much more than allowing you to not have the server holding a partition master and trying to move that server to another partition, which I don't think will work.  It also makes it that much easier to phase out the old OU, because it then has no direct, 1-1 relationship with an NDS partition.

I suppose that if you wanted to, you could remove that server from the replica ring for that partition, making some other server in the ring become master, and then move the server leaving the partition intact, but since it's going away anyway, might as well kill 2 birds with one stone, making the server and other object moves cleaner in the short term and the removal of the old OU cleaner in the long term.
0
 

Author Comment

by:timmr72
ID: 12265119
Thanks to you both. I merged the partition back into it's parent early today, and then changed the IP address tonight. No problems. In fact, the new "IP Management" utility in 6.5 is quite nice. Much less manual file editing.

Tomorrow night I'll move the server and all the OU's objects to the new container. Hopefully, that goes as smoothly. I'll split the points.

Thanks again,
Tim
0
 
LVL 34

Expert Comment

by:PsiCop
ID: 12266905
Glad to see it went well.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Register Computer In Console One 4 445
ldap_bind() with Novell eDirectory LDAP 2 982
Connecting to GroupWise 2 990
Need help setting up GropWise 2012 on Windows Server 2008R2 10 699
Some code to ensure data integrity when using macros within Excel. Also included code that helps secure your data within an Excel workbook.
An analysis of the phishing scam that has been affecting Google users, along with steps to take for protection, as well as what to do if you receive one of the emails.
Internet Business Fax to Email Made Easy - With  eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, f…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

920 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now