Novell Account Management

We use Novell Account Management 2.1 on our NT domain controllers. We have Edirectory 8.7 running on Netware 5.5, 6.0 & 6.5.

Most of  our clients are windows XP and some are Windows 2000 , all part of the NT domain running AM 2.1.  Our applications are running on W2K/IIS with integrated authentication. When a user logs in on his/her workstation using the Novell 4.9 client, he is automatically signed on to the NT domain in the background . He then accesses the applications running on IIS and is automatically signed in since he has already authenticated to the domain.

Every few days are users experience a problem when accessing the IIS applications, ie. they are prompted for an id and password for the IIS applications. Although they have signed in to the domain. When we remote console to the PDC , we find that we cannot login on the PDC as well. The only solution is to restart the pdc after which authentication for both IIS apps and Client login is fine.

We have 1 PDC and 1 BDC, both running NT 4.0 , SP6.

Does anyone have a idea on how we can solve this.. ?

Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

pintoa2000Author Commented:
The event log of the PDC has only these errors, 5722, 5723, 5721.
Here's a great TID to look at first when you are having Acct. MgMt issues:


How many clients do you have accessing the BDC/PDC?  I found the following Microsoft documentation that references these error messages.

It makes reference to installing NT 4.0 SP6a
Cloud Class® Course: Microsoft Office 2010

This course will introduce you to the interfaces and features of Microsoft Office 2010 Word, Excel, PowerPoint, Outlook, and Access. You will learn about the features that are shared between all products in the Office suite, as well as the new features that are product specific.

And just an FYI, seeing as you have NetWare v6.5 in your network - NetWare v6.5 with SP2 or later can function as a DC in the Windoze Domain. So, if you're willing to re-engineer a bit, you might not even need to have an actual Windoze DC.
pintoa2000Author Commented:

That is real news to me.. Do you have any documentation that I can refer to. We are at the cross roads here with NT 4 becoming end of life in December. Since I dont like MS AD and since we have a robust Edirectory setup, we were looking at putting in Linux/Samba . But your suggestion is an excellent one and I will investigate this further , however if you could send me more information that would be great.

pintoa2000Author Commented:

we have sp6a on the DC's.


Checked the TID no information I can use there.

Really need to fix this problem.


I'll dig up where I found that reference. I saw it in black-n-white, but I'll be Micro$ofted if I can remember where right this second.
For the info straight from Novell, take a look at the NetWare v6.5 documentation (, specifically the Native File Access Protocols Guide, about page 95 of the PFD (, also accessible in HTML (

Additionally, I found this NetApp article -->
pintoa2000Author Commented:
Will look through them and get back to you if this is feasible in our environment.. cant think why not .

Also , any cluse on the the problem.


Sounds more like a PDC problem than a NAM problem.

How about the PDC's swapfile/paging file?  Is is a fixed size, and is it on a different volume than the SAM database?

How big is the SAM database?  Have you ever compacted it?  (one of the joys of using Windoze domains...)

Has the PDC been defragged lately?

pintoa2000Author Commented:

That is a really good  question and we have never looked into any of the aspects that you mention.

Will look into it  tommorrow and get back to you.

I think you may have something there.. too bad the points are only 500.. cos if any of your suggestions are good  I think its worth a lot more..

Maybe you and Psi should think about moving to more lucrative surroundings.

*chuckle* In another Question, we traded info on where the 3 of us (DSPoole, ShineOn and myself) were located, and found out we have the whole country covered (West Coast, Middle North America, East Coast; in that order).

I just not the salesman to hang out my own shingle - I can't lie...excuse me, prospective customers enuf to impress them more than the smooth-talking salesperson who's next in line for the decision-maker's time. Altho I do a little freelancing.

And all that's fascinating, I'm sure, but it doesn't get you any closer to a solution, pintoa2000. Cleaning up the NT disk environment is a good idea; even if it doesn't solve this particular problem, it may solve/prevent others.
It sounds like one of 2 events likely happened:

1. The revision count on the Domain object got out of sync and forced a constant recache of the domain object from nds/edir.
2. The connectivity between the PDC and eDir is broken.

To start off with I would download the latest patch for AM 2.10, which has a great many enhancements to eDir connectivity (server failover timers and such). The samsrv.dll from the PT8 patch is dated 12/02/2003. You can check your existing file in C:\WINNT\SYSTEM32 to see how close to this date it is already. FYI the URL to download this patch is:

To apply it, you simply rename your existing SAMSRV.DLL, copy this one in, and then reboot.

Next I would use the current version of NDS 4 NT toolbox. It is downloadable from the following URL:

It can be used to report the revision number on all eDir replicas. If these aren't the same, then this can cause cache looping and will likely cause the PDC/BDCs to be unable to authenticate anyone.

Post back in here if you patch the server, don't have a revision mismatch, and still are having problems authenticating to the domain.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Fonts Typography

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.