Link to home
Start Free TrialLog in
Avatar of tsurugi
tsurugi

asked on

Logon Error Submitting jobs in ARCServe 9 to NW5.1

Hello
I'm new to Netware 5.1 and installed Trial Version of ARCServe Backup V9 successfully (I think..).

But when I try to submit a Scheduled Backup Job, comes out a window (Security and Agent Information) asking me for username and password.  When I click on "Security..." and there is a window to enter a supervisor username and password, with a text that says "To log on to a Netware server, enter the full NDS context".
I try, but everytime comes out an error that says: "An error occurred while submitting the job.  Logon Failure: unknown username or bad password". (I'm sure about my password)

How should I write the username with "the full NDS context"?
admin.CONTEXT? .admin.CONTEXT? admin.CONTEXT.SERVER? I've tried all of these but nothing works.

Something that i'm doing wrong??
Thank you.
Avatar of Bud Durland
Bud Durland
Flag of United States of America image

This will sound like I'm splitting hairs, but I'm not..

The "full context" name for admin would be the one that specifies the name and all te containers, like so:

.admin.context1.context2.org  (leading period)

However, in "novell speak", there is a format called the "contextfull" name, which would look like this:

cn=admin.ou=context1.ou=context2.o=org

Notice there's no leading period, and the fields are explicitly named.  I'd try that; I seem to recall that ArcServe liked that format best -- I haven't used AS in 5 years, so it's a foggy memory.

Hope this helps
on your workstation, modify the HOSTS file to include the name of the server running ARCserve and it's IP address.  Do that then reboot your workstation:

     x.x.x.x      myserver

Next, modify the SYS:\ETC\HOSTS file on the NetWare server, include in it the IP address of the server holding the Master replica of the Root and then the name of your Tree instead of the name of the server:

     y.y.y.y     mytree

 - then REINITIALIZE SYSTEM

back on your workstation, you can use the fully-distinguished method:  .admin.context

btw:  BrightStor ARCserve Backup for NetWare r11.1 just hit the streets.

Erm, that's "typeful" and "typeless" - not "contextfull" - unless they've changed things since I last attended Novell training.

The full typeless context should start with a dot to make it absolute.  The full typeful context doesn't have to, because it indicates that it is a common named (cn) object and not subject to being relative.

If you don't start a typeless context with a dot, it becomes ambiguous because it is then relative to the current context.

ARCserve will work with full typeless or with typeful, but in their documentation they show typeful notation.

The admin context is fully dependent on where the admin user is located in the NDS tree.  The server ID should never figure into it, because if it does, that means someone has named a server and an OU using the same name, which is very bad practice.

Speaking of bad practice, it is common to use the tree admin as the backup user for NetWare backup login, but best practices say that you should create a backup user, and use that backup user for NetWare backup login and not the admin user.  No matter how well a software package thinks they have protected the passwords of users, any saved password is another security breach waiting to happen.  Do your automated backups with a user that has full rights to READ everything, but NOT "S" rights to [ROOT] for gosh sakes!  Use Admin (or another user with full S rights to [ROOT] if you need to do a restore, but NOT for an automated backup.
Avatar of tsurugi
tsurugi

ASKER

I've found the solution.
It is .CN=user.O=context, with periods preceding.
That's odd, because when I use typeful for ARCserve, I don't need the leading period.  Only when using typeless, as Bud mentioned in his comment.  And I use ARCserve now, logging into NWAGENT using typeful notation with no leading period.
Avatar of tsurugi

ASKER

In my case, that was the only way (With the leading period) that worked after many combination attempts.  
It worked on ARCServe 9 and 11, that was the one I bought.  Thank you.
ASKER CERTIFIED SOLUTION
Avatar of modulo
modulo

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial