November 2, 1999 Novell Conf idential - ITwelzel.bizgwise.itwelzel.biz/Novellpdf/Novell Licensing...

er Access Licensing for NetWare

November 2, 1999Novell Confidential

doc_tpl.fm Rev 99a 14 September 99

, and e. without

claims . notify

the

pied,

Legal Notices

Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentationspecifically disclaims any express or implied warranties of merchantability or fitness for any particular purposFurther, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,obligation to notify any person or entity of such revisions or changes.

Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disany express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Increserves the right to make changes to any and all parts of Novell software, at any time, without any obligation toany person or entity of such changes.

This product may require export authorization from the U.S. Department of Commerce prior to exporting fromU.S. or Canada.

Copyright © 1993-1999 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocostored on a retrieval system, or transmitted without the express written consent of the publisher.

U.S. Patent Nos. 5,870,739, 5,873,079; and 5884,304. U.S. and Foreign Patents Pending.

Novell, Inc.122 East 1700 SouthProvo, UT 84606U.S.A.

www.novell.com

User Access Licensing for NetWareOctober 1999000-000000-000

Online Documentation: To access the online documentation for this and other Novell products, and to get updates, see www.novell.com/documentation.

� User Access Licensing for NetWare

User Access Licensing for NetWare000-000000-000



Novell Trademarks

ManageWise is a registered trademark of Novell, Inc., in the United States and other countries.

NDS is a registered trademark of Novell, Inc., in the United States and other countries.

NetWare is a registered trademark of Novell, Inc., in the United States and other countries.

Novell is a registered trademark of Novell, Inc., in the United States and other countries.

Third-Party Trademarks

All third-party trademarks are the property of their respective owners.

�








Contents

Overview

1 Understanding

NetWare 5 in the SCL Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9NetWare 5 in the UAL Model . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10What You Purchased . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19

Kits for SCL Environments . . . . . . . . . . . . . . . . . . . . . . . . . . 20License Certificates for Accounts with Agreements . . . . . . . . . . . . . . 23

What to Expect from NetWare License Certificates . . . . . . . . . . . . . . . . . 23

2 Setting Up

Guidelines for Placing License Certificates . . . . . . . . . . . . . . . . . . . . . 25Installing SCL License Certificates . . . . . . . . . . . . . . . . . . . . . . . . . 27Installing SCL License Certificates for MLA Accounts . . . . . . . . . . . . . . . 28

Certificates in an NDS Partition . . . . . . . . . . . . . . . . . . . . . . . . 28Copying NICI Foundation Keys . . . . . . . . . . . . . . . . . . . . . . . . 29

Upgrading License Certificates to UAL . . . . . . . . . . . . . . . . . . . . . . . 29Changes to Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30

3 Troubleshooting

Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31No access to license units . . . . . . . . . . . . . . . . . . . . . . . . . . . 31The system erroneously reports duplicate licenses . . . . . . . . . . . . . . 32The server beeps frequently. . . . . . . . . . . . . . . . . . . . . . . . . . 32

Questions and Answers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33TIDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33

�







doc_tpl.fm Rev 99a11 14 September 99

ne or

cts of to them d to

t

ge

del.

Overview

Earlier versions of NetWare® used the Server Connection License (SCL) model, where users gained access to network services by connecting to omore servers on the network.

Novell® Licensing Services 5.01 supports User Access Licensing for NetWare. The User Access Licensing (UAL) model focuses on User objegaining access to network services by connecting to the network instead servers. These User objects receive a permanent license unit that allowsto access network services at any time and from any workstation attachethe network.

This documentation

� Assumes that you understand basics about NDS® and NLS.

To review NDS basics, see Novell online documentation, available awww.novell.com/documentation.

To review information about the licensing service (concepts and howNLS works), see Understanding in NLS Administration. Other chapters explain how to install NLS, how to use NetWare Administrator to manalicense units, and how to troubleshoot the licensing service).

� Provides information about the NetWare 5 User Access Licensing mo

To review how NetWare 5 functions in the UAL model, see “Understanding” on page 9.

Overview �




see

For information about licensing a NetWare 5 server, see “Setting Up” on page 25.

For information about troubleshooting the policy manager for NetWare 5, “Troubleshooting” on page 31.





nd

on

ing

cate.

� Understanding

This section assumes that you know basics about NDS®, key terms for Novell® Licensing Services (NLS), and how NLS works. For this backgrouinformation, see Understanding in NLS Administration.

This documentation describes the following:

� How a policy manager works with NetWare 5 in the Server ConnectiLicensing (SCL) model.

� How a policy manager works with NetWare 5 in the User Access Licensing (UAL) model.

� What to expect from NetWare license certificates

NetWare 5 in the SCL Model

NLS 5.01 supports the Server Connection Licensing model. Understandthe following concepts helps you manage license units on your NetWarenetwork.

� NetWare License Container Objects and License Certificates

NLS creates two License Container objects for NetWare 5: one for aserver base license certificate and one for a connection license certifiThe server base license certificate allows the NetWare 5 operating system to provide authenticated connections for clients. Its License Container object displays as follows:

Understanding �




you

ou

e

t, lable .

the

y,

he No

Connection license certificates allow users to log in and use NetWare services. A License Container object for a server connection licensecertificate displays as follows:

If licensing is not installed properly (for example, if you choose not toinstall NLS during NetWare 5 installation), you have two login connections (but not the 5, 50, or 1000 that you purchased). That is,have a two-user server. These connections allow you to log in, troubleshoot, and install certificates.

Each license container has one or more license certificates (unless ymove or delete them). The following figure shows:

� A license container and certificate for a server connection licens

� A license container and certificate for a server base license

Using NetWare Administrator, you can view License Container and License Certificate objects as they appear in the NDS tree.

� Searching for a license unit When an NLS client requests a license unia License Service Provider searches the server’s context for an availicense unit. If it doesn’t find one, it searches up the NDS tree for one

NetWare 5 in the UAL Model

The following concepts and terms help you understand how NLS supportsUser Access Licensing (UAL) model.

� Convey a license unit— To allocate or consign a license unit to an entitsuch as an NDS User object

With the UAL model for NetWare, the first time that a user logs in to tnetwork, NLS conveys a license unit to a corresponding User object.license unit is conveyed until a user logs in.

�� User Access Licensing for NetWare




te ave

it lly

nd ense ool r

go

r:

st)

n,

ees.

For example, a network administrator has installed a license certificathat contains 100 license units. Of 100 users on the network, only 90 hcompleted a first-time login to a service. Ten license units remain unconveyed.

Once a User object has a license unit, NLS allows that user to retainuntil the User object is deleted or the network administrator specificarevokes that User object's license unit.

Conveying a license unit might differ for other products, such as ManageWise®.

� Reconvey a license unit— To allocate a license unit that has been returned to a pool of license units

If a previously deleted User object is again assigned a license unit alogs in to a network service, that object again receives a conveyed licunit (provided one is available). The license unit, conveyed from the pof available license units, may be a released license unit or any otheavailable license unit.

A released license unit returns to the pool of license units. It can be reconveyed.

Scenario. At the OptionsPlus company, the network administrator installs a certificate that contains 100 license units. Three employeeson medical leave and seven employees take three-week vacations. Because 10 temporary employees are coming in until the full-time employees return from leave and vacation, the network administrato

� Creates 10 additional user accounts (110 total accounts now exi

� Revokes the full-time users’ license units

� Reconveys those license units to the contract workers

When the full-time employees return from medical leave and vacatiothe network administrator revokes license units from the temporary employees and reconveys those license units to the full-time employ

Understanding ��




any logs nse that

nse ns,

The following graphic illustrates this flexibility:

� Primary license unit— A license unit that is conveyed to an object

A primary license unit is a user’s permanent one. It is unavailable to other user. It does not return to a pool of license units once the user out of the network. It can be released and returned to the pool of liceunits if a User object is deleted or the network administrator revokes user’s license unit.

� Secondary license unit— An additional license unit that is conveyed toan object that already has a primary license unit

A secondary license unit provides multiple license units for a single object. In a UAL environment, a User object is conveyed for each concurrent network login instance. Three concurrent login instancesconvey two secondary User object license units and one primary liceunit. Each time a user logs in simultaneously from multiple workstatioNLS conveys an additional secondary license unit.

A secondary license unit returns to the pool of available license unitswhen it is not used for 72 hours.

100

- 3

- 7

+ 10

100





st m. ne

ring ay,

s

r

P

hes

User

its. take

100

ow, nse

o the its

Scenario. You log in to a UAL network and remain logged in. To assiother employees, you go to two other workstations and log in from theNLS conveys a second and third license unit to you. You now have oprimary license unit and two secondary (concurrent) license units. Duthe next three days, you only log in to one workstation; after the third dthe two secondary license units return to the pool of license units. Youtill have a permanent license unit.

� Search for a license unit— A function that the License Service Provide(LSP) performs when an NLS client requests a license unit

When an NLS client requests a license unit in the UAL model, the LSfirst searches the User object’s context for an available license unit. If itdoesn’t find a license unit, it searches up the NDS tree for one.

If no license unit is found in the User’s context, the LSP server searcthe server’s context for one.

� Unlicensed User object— A User object that does not have a primarylicense unit

The UAL model allows you to create or maintain more accounts or objects than the number of available license units. You can create a object but not convey a license unit to that user.

Scenario. You install a license certificate that contains 100 license unBecause the company brings in temporary workers when employeesvacation or medical leave, you choose to create and maintain 110 accounts or User objects. (Even though 110 user accounts exist, onlyusers can receive license units.)

� Hard stop— A function that prevents a user from accessing an application or service

For example, during any 180-day period, UAL allows 30 individual, arbitrary days of overdrafts. For any 30 days during the 180-day windan unlimited number of users can exceed the number of available liceunits.

However, on the 31st day of overdrafts, a hard stop prevents access tspecified application or licensing service. Only users with license uncan log in.





nit.

ving

r the

s. ser

ws gs e

g in

e ng of user t

A hard stop does not allow overdrafts or logging in without a license uUsers who cannot use the expected application or service receive a message that lets them know

� The application or service is unavailable

� The name of the designated person to contact (the person receithe notifications)

The hard stop is released after a new license certificate is supplied ocustomer meets requirements for the 180-day window.

Scenario: 30 Days of Overdrafts. On May 1, Sandy (a network administrator) installs a license certificate that has 1,000 license unitOne thousand users have logged in by May 30. The first time each ulogs in, that user receives a license unit.

On June 1, an additional 50 users log in. The licensing software allothe 50 users to log in and work, without license units. However, UAL lothe overdraft and notifies Sandy that license usage has exceeded thnumber of available license units

During June, the 1,000 users with license units and 50 other users loand work every calendar day. On each of the 30 days in June, UAL allows, logs, and notifies Sandy of the overdrafts.

On July 1 (the 31st day that users exceed available license units), thlicensing software prevents all users without license units from loggiin. Only the 1,000 users with license units can log in and work. Nonethe 50 users that had logged in without license units can log in. Each without a license unit views a message instructing the user to contacSandy.





al

The following graphic illustrates this scenario:

Sandy purchases and installs 50 more license units. As the followinggraphic illustrates, all 1,050 users can log in and work after the additionlicense units are installed.

The software has notified Sandy of

� Specific users that logged in without license units

� How many users logged in without license units

� The number of days remaining in the 30-day overdraft period

1000

1050

1100

1150

1200

180-day window

JAN FEB MAR APR MAY JUN JULDECNOVOCT SEPAUG

Hard stop on 31st day of overage

180-day windowMAY JUN JUL AUG SEPOCT NOV APRMARFEBJANDEC

1000

1050

1100

1150

1200

50 more licenses.





ce

s

day tions

rs

e

o use ears rs

of

ed.

nse

� Notification— A message indicating a problem concerning complianor concerning the licensing service

NLS provides out-of-compliance and NLS alert notifications.

Out-of-compliance notifications are sent when your company exceedthe terms and conditions of the license agreement. UAL sends thesenotifications to a designated person on the first and any subsequentthat one or more users exceed available license units. These notificaidentify

� The number of days remaining before functionality prevents usefrom using the service

� The number of overdrafts used that day

By default, these notifications are sent to the person who installed thaffected license certificate. The notifications are sent through the NetWare broadcast utility and (optionally) SNMP. Multiple network users or groups can receive these notifications.

If you do not correct out-of-compliance situations, users receive a separate notification. This message explains that the user is unable tthe application or service until the designated person (a name that appon the user’s screen) installs necessary license units. With UAL, usereceive this notification on the 31st day (in a 180-day window) of noncompliance.

In addition, if you delete a license certificate while a user is using oneits license units, that user receives an out-of-compliance notification.

Alert notifications are sent when NLS discovers a problem with the licensing service.

� Forgiven overdraft— An overdraft that is ignored or does not cause ahard stop

UAL ignores overdrafts that meet any of the following criteria:

� The overdraft occurred earlier than the last 180 days.

� During the 180-day window, fewer than 31 overdrafts have occurr

� A customer installs additional required license units.

� Overdrafts were equal to or less than the number of additional liceunits installed.





le

fts

0

re e

Scenario: No Hard Stops. Employees at OptionsPlus exceed availablicense units only 29 times during a 180-day window. The software allows all who logged in to work.


Scenario: A Moving 180-Day Window. Users at OptionsPlus exceed available license units on June 1 and 2. During the next 179 days, OptionsPlus can have 28 more overdrafts.

On November 28 (the 181st day), the software “forgives” the overdrathat occurred on June 1. OptionsPlus now has 29 available days of overdrafts. On November 29 (another 181st day), OptionsPlus has 3available days of overdrafts (provided no overdrafts occurred on November 28 and 29).

Users at OptionsPlus may have exceeded available license units mothan 30 times since the license certificate was installed. However, thusers did not exceed the limit 30 times during the last 180 days.

1000

1050

1100

1150

1200

180-day window

Only 29 overdrafts.No hard stops.

MAY JUN JUL AUG SEP OCT NOVAPRMARFEB JANDEC





onal ewly st of


Scenario: Additional License Units Absolve Overdrafts. OptionsPlus had the following overdrafts:

On August 15, the network administrator purchases and installs 50 additilicense units. UAL assesses the history of overdrafts. Because of the 50 ninstalled license units, the software deletes June 1 and July 15 from the lioverdrafts.

Date Overdraft

June 1 50

June 23 55

July 15 5

August 10 200

180-day window

1000

1050

1100

1150

1200

June 1st overdraftforgiven.






f rafts.

tely e the

on ugh t


Scenario: Disgruntled Employees. The KwinTel Company has been out ocompliance for 30 days because 50 employees have logged in with overdOn Tuesday, the 50 employees cannot log in. Sandy, the network administrator, has already purchased a 10-license connection kit but hasforgotten to install it. The disgruntled employees call Sandy, who immediainstalls the certificate. Ten of the affected employees are again able to usapplication. Forty remain unable to log in.

What You Purchased

License certificates for NetWare 5 are available through regular distributichannels (from Novell resellers) and agreements for large accounts. Althonot documented here, special license certificates (demo, evaluation, FirsLook fulfillment, and education) are also available.

180-day window

1000

1050

1100

1150

1200

June 1stand July 15overdraftsdeleted.

August15,50 newlicenses

50 new licenses






on

rver

are

y to

e

hese

, e

nts t the

Kits for SCL Environments

Novell resellers provide you with off-the-shelf NetWare. To avoid duplicatiand simplify packaging, Novell is standardizing its packaging of NetWareproducts. You can now customize orders by purchasing a NetWare 5 SePlus 5 Connections kit and (optionally) NetWare 5 x-Connection Additive License kits.

These kits allow you to install new NetWare 5 servers, upgrade from NetW3 and NetWare 4, and add connection license units to existing NetWare 5servers.

Server Plus 5 Connections Kits

The NetWare 5 Server Plus 5 Connections kit is required. It is the only walicense your server. The kit includes the following:

� CDs that have server and client software and documentation.

� A license diskette that has license certificates for the Server Plus 5 software. (One certificate has a server base license; the other has fivconnection license units.)

� An installation manual.

� A registration or activation key card.

The server base license certificate and connection license certificate in tkits require a server assignment. The GUI Novell Installation Services program will automatically assign a server.

If you check the Install without Licenses box during the server installationyou can later use NWCONFIG.NLM or NetWare Administrator to install thlicense certificates. If you use NWCONFIG.NLM, the file server assignmeare made automatically. If you use NetWare Administrator, you need to seserver assignments manually.





kits -,

use f

5 kit. r.

es

l r

Additive License Kits

NetWare 5 x-Connection Additive License kits are optional. Because you can purchase combinations of connection license units that you need, these allow flexible configurations for your network. Options include 5-, 10-, 2550-, 100-, 250-, and 500-license-unit certificates.

Additive License kits include the following:

� A diskette that has license units for the client connections.

� Either a registration card or activation key card.

� Information that tells you how to install the license certificates.

These connection license certificates require a server assignment. If youNWCONFIG.NLM, the file server assignments are made automatically. Iyou use NetWare Administrator, you need to set the server assignmentsmanually.

Scenarios Concerning License Certificates

Scenario 1. The VMP Company plans to place 340 employees on a newNetWare 5 network. The company purchases and installs the Server PlusThe GUI installation program assigns the license certificates to the serve

To provide 335 additional connection license units, the company purchasthe following Additive License kits:

� Three 100-license-unit kits

� One 25-license-unit kit

� One 10-license-unit kit

Using NWCONFIG.NLM, the network administrator installs the additionalicense certificates, and NWCONFIG.NLM automatically makes file serveassignments.





ation ause y also

ail

E

kit e)

w

ible new

Scenario 2. The OptionsPlus Company, with 530 employees, plans to upgrade four NetWare 3 servers and provide license units for 1,070 connections. The company purchases four Server Plus 5 kits. The GUI installprogram assigns license certificates to the servers they are installed on. Becthe connections cannot be shared across servers, the OptionsPlus Companpurchases the following Additive License kits:

� One 500-license-unit kit and one 25-license-unit kit for server ROS (the mserver, so that all 530 employees can connect to it)

� One 250-license-unit kit and one 100-license-unit kit for server GRANIT(to allow 355 connections for Development and Production)

� One 100-license-unit kit, one 50-license-unit kit, and one 10-license-unitfor server KNOX1 (to allow 165 connections for employees in Commerc

� One 50-license-unit kit and two 10-license-unit kits for server IST (to allo75 connections to the database server)

Using NWCONFIG.NLM, the network administrator installs the additional license certificates. (The network administrator could optionally use NetWare Administrator to install the certificates and manually assign each certificate to a server.)

Scenario 3. The Puffin Company has already installed NetWare 5 on fiveservers. Because the company is hiring an additional 50 employees, thecompany purchases five 50-license-unit kits.

Using NWCONFIG.NLM, the network administrator installs a 50-license-unit kit on each of the five servers, placing certificates into contexts accessto the employees. With the additional license units on each server, the 50employees are able to log in to each of the five servers. (The network administrator could optionally use NetWare Administrator to install the certificates and manually assign each certificate to a server.)





the nt

nse See

c/

m/

m/

.

the rver

License Certificates for Accounts with Agreements

Novell provides various license agreements, depending upon the size ofaccount: Master License Agreement (MLA), Corporate License Agreeme(CLA), and Volume License Agreement (VLA). License certificates are available for SCL and UAL environments.

� MLAs are for global organizations. An MLA license certificate is a Server Plus Unlimited Connections certificate. You can install the licecertificate for as many connections as the license agreement allows.“Installing SCL License Certificates for MLA Accounts” on page 28.

For more information about MLAs, see www.novell.com/programs/ncmla.html.

� CLAs are for medium-to-large-size organizations. See www.novell.coprograms/ncc/cla.html.

� VLAs are for small-to-medium-size organizations. See www.novell.coprograms/ncc/vla.html.

To compare agreements, see the Novell Customer Connection Web site

What to Expect from NetWare License Certificates

Some confuse licensing services with the license certificate and license units.

When you bought NetWare 5 for an SCL environment, you purchased bothlicensing service and two types of license certificates. They came in the SePlus 5 Connection Licenses Kit.

Think of the Server part of that purchase as the following:

� SERVER.EXE

� All the software technology for the server

� A licensing service

� A policy manager for your license units





ou e

ate, you es.

the e

� A server base license certificate

If you install just that much, you have a functional, licensed server. But ydon’t have any connection license units (except the two emergency gracconnections).

Think of the Plus 5 Connection Licenses as a license certificate containing fivelicense units for connecting to a server. After you install the license certificfive users (or one user logging in five times) can connect to the server. If don’t install these license units, the five users can’t get to network servic

SetupNLS.EXE (a wizard) installs or upgrades the licensing service. SetupNLS.EXE does not install license certificates for NetWare. You installlicense certificates by using NetWare Administrator to access and installlicense certificates that are on the license diskette in the Server Plus FivConnections Kit.





re S

1) oes

are ting

� Setting Up

When you install a NetWare® 5 server or upgrade from NetWare 3 or NetWa4, the Novell® Installation Services (NIS) program automatically installs NLon that server.

By default, NIS also installs license certificates for an SCL environment. However, you may have elected not to install the certificates.

SetupNLS.EXE (a GUI utility that ships with Novell Licensing Services 5.0also installs NLS on NetWare 4 and NetWare 5 servers. SetupNLS.EXE dnot install NetWare 5 or license certificates for NetWare.

This section provides information about

� Guidelines for placing license certificates

� Installing SCL license certificates on a NetWare 5 server

� Installing SCL license certificates for MLA accounts

� Upgrading license certificates to UAL

Guidelines for Placing License Certificates

Placement of license certificates depends upon the model you have.

� For the Server Connection Licensing (SCL) model, place license certificates in or above the same NDS context as the server that youlicensing. Some policies require that certificates be close to the requesentity. Also, it is assumed that the server is running NLSLSP.NLM.

Setting Up ��




in

ace

in

tree, nit

� For the User Access Licensing (UAL) model, place license certificatesor above the users’ NDS context.

� Smaller companies can place license certificates at the topmost Organizational unit. Companies with more complex NDS trees can pllicense certificates at the Organization units beneath [Root].

� If you have a remote site and a WAN link, place a license certificate the remote site’s context.

Scenario: Main and Remote Sites. The KwinTel Company has 4,600 users: 3,600 at the main site and 1,000 at a remote site. In the NDS the organization is KwinTel and the remote site is an organizational unamed Venture.

Instead of purchasing one certificate for 4,600 users, the network administrator purchases two certificates:

� A 3,600-license unit certificate for the main site, installed in the KwinTel context

� A 1,000-license unit certificate for the remote site, installed in theVenture context

With these two certificates, the licensing service does not have to goacross a remote link to get a license unit from a certificate.

KwinTel Company

A license certificatethat has 3,600 licenses

(units)

A license certificatethat has 1,000 licenses

(units)

Venture

WANlink





del. ade

re ly r,

f the

Installing SCL License Certificates

NLS 5.01 continues to support the Server Connection Licensing (SCL) moIf you select the Install without Licenses box during an installation or upgrto NetWare 5, the installation program won't install license certificates for NetWare 5. However, licensing services will be installed and you will have two grace connections.

After the installation or upgrade, you can use NWCONFIG.NLM or NetWaAdministrator to install license certificates. NWCONFIG.NLM automaticalassigns license certificates to an LSP server. With NetWare Administratoyou manually assign the certificates.

IMPORTANT: License certificates with a nine-digit serial number cannot be installed while upgrading an existing server to NetWare 5. If the serial number printed on your license diskette has nine digits, you must check the Install without Licenses box on the License Installation screen during the server installation or upgrade.

�� At the server console, load NWCONFIG.NLM by entering NWCONFIG.

�� Select License Options > Install Licenses.

�� Select a path to the .NLF file that has the license certificate.

For example, select D:\LICENSE.

�� Log in.

Enter the complete name (for example, .admin.vmp) and password oadministrator.

�� At the Installable Licenses screen, select an envelope file.

An envelope file contains one or more license certificates. A sampleenvelope file is 42C1F1D0.NLF.

�� Exit NWCONFIG.NLM.

Setting Up ��




g

ith

e same ltiple

not

, the

tion nce

e

S lready

You can now view the installed license certificates by using NetWareAdministrator. The certificates typically resemble those in the followinfigure.

Installing SCL License Certificates for MLA Accounts

License certificates for MLA accounts in SCL environments do not come wa server limit or connection limit. You can install (and reinstall) a license certificate for as many connections as the terms and conditions of the license agreement allow.

When the first NetWare 5 server is installed into an NDS tree, two licensobjects (the server base license and connection license) are created in thecontainer as the NetWare 5 server. These two objects can be installed mutimes, but they do not need to be installed more than once.

Certificates in an NDS Partition

Although you could install the server base license certificate and server connection license certificate at the [Root] of the NDS tree, doing so mightprovide the best performance. For best performance, install the license certificate in each partition that contains a Cobra server. These multiple installations speed authentication. (When the first license unit is requestedLSP has to scan the tree to find the certificate. After finding the license certificate, the server stores that certificate in memory.)

Not every server in the partition requires a server base license or conneclicense. In fact, you cannot install an MLA license certificate more than oin the same partition. Although multiple occurrences of the same serial number can reside in the same NDS tree, the license certificate cannot binstalled more than once in a partition. (The license certificate has one common serial number. Attempting to reinstall the certificate into the NDcontext generates a system message stating that the license certificate aexists.)





hen ut

will

er, ICI

e

file

s

Therefore, only the first NetWare 5 server in a partition can be licensed. Winstalling NLS on other servers in an NDS partition, check the Install withoLicenses check box. This means that some MLA servers might have an NLS_LSP_servername object without any associated license objects.

The license certificate does not require a server assignment. In fact, youshould not assign a server. If you make a server assignment, other serversnot be able to use the license certificate.

Copying NICI Foundation Keys

During a typical installation, the NICI foundation keys (FKs) are automatically copied from the MLA license diskette to the server. Howevwhen you select Install without Licenses, you need to manually copy the Nfoundation keys from the MLA license diskette to each server.

�� Install the cryptographic foundation key on each server by copying thkey from the MLA license diskette to the SYS:SYSTEM directory.

The cryptographic foundation key is stored on the MLA diskette as a named serial_number.NFK. When copying the key, rename the file fromserial_number.NFK to NICIFK. The file naming is not case sensitive.

�� Reboot the server.

The server will come up with the level of cryptographic functionality supported by the distribution CD-ROM.

Upgrading License Certificates to UAL

Although you can have SCL and User Access Licensing (UAL) license containers in the same NDS context, you need to delete the SCL licensecertificates when you upgrade to User Access Licensing.

Using NetWare Administrator, delete SCL License Certificate objects forserver base and server connection license certificates. Then install UAL license certificates.

�� Right-click the License Certificate object.

Setting Up ��




le

nd

n't or

LS

You might have to expand the License Container object (Novell + NetWare 5 Server + 500).

�� Click Delete > Yes.

Using NetWare Administrator or NWCONFIG, install UAL license certificates.

Changes to Files

On NetWare 4 servers, SetupNLS.EXE modifies the AUTOEXEC.NCF fito include the following line:

LOAD NLSLSP

This line is already in the AUTOEXEC.NCF files on NetWare 5 servers. SetupNLS.EXE copies a new NLSLSP.NLM file, unloads the earlier file, aloads the new file.

SetupNLS.EXE also copies a new NLSAPI.NLM to the server. This file isavailable on NetWare 4 or NetWare 5 servers until the server is rebootedthe program is manually loaded and reloaded.

Also, rebooting the server causes the changes to take place in updated Nfiles and updated NLS objects.

IMPORTANT: Before rebooting a server, either choose a time when no users are logged in or notify users that they will temporarily lose their connections to that server.





list of

h do so.

slow

r the any

will NDS

� Troubleshooting

This section contains tips, answers to frequently asked questions, and a Technical Information Documents (TIDs).

Tips

No access to license units

Some NLS clients might not have access to licensing services if LicenseService Provider objects are not well-placed in the NDS® tree.

Place license certificates as close as practical to the actual users but higenough in the NDS tree so that everyone who needs to access them can

Consider the following guidelines:

� Place license certificates so that NLS servers do not have to traverseWAN links to access license units.

� Place at least one License Service Provider object in a container nearoot of the tree. Also, consider loading LSP software on servers that mor most users log in to in the NDS tree. These two actions distribute requests for license units.

� Identify license certificates that many users throughout the NDS tree use. Place these license certificates in a context near the root of the tree.

Troubleshooting ��




for

DS

t tree nd

was ins

e

rver.

� Identify license certificates that a small group will use. Place these licensecertificates in the same NDS context as those users' objects.

� Identify license certificates that larger groups will use. Place these certificates in the NDS context that represents the root-most contextthe group.

The system erroneously reports duplicate licenses

Problem: The system reports that duplicate licenses are installed in the Ntree.

Possible cause: In a mixed NetWare® 4 and NetWare 5 environment, you installed a NetWare 5 license certificate, deleted it, and then reinstalled ielsewhere in the NDS tree. When the 4.0 dredge process walks the NDSand looks for certificates, the dredge encounters the deleted certificate aconsiders it a duplicate.

Solution: If that license certificate was the only certificate in the License Container object, delete the License Container object where the certificateinstalled and deleted. (Don’t delete the License Container object if it contaother license certificates.)

Solution: Deploy NLS 5.01 to all NetWare 4 and NetWare 5 servers in thNDS tree.

The server beeps frequently

Problem: The server base license may not be consuming a license unit.

Possible cause: No license certificate is installed.

Action: Install a license certificate by running NWCONFIG.NLM. Select License Options > Install Licenses.

Possible cause: The server base license certificate is not assigned to a se

Action: Using NetWare Administrator, assign a server.





ect

er's

t p

at

n

Questions and Answers

Question: Why do I get Policy Manager errors when I move a Server objin the NDS tree?

Answer: You might also have to move the license certificates to the servnew context.

Question: Why do I get Policy Manager errors when I use NWCONFIG.NLM to uninstall and then reinstall NDS?

Answer: If you uninstall NDS from a server and then reinstall NDS on thaserver, you have to run NWCONFIG and select License Options > Set ULicensing Service. You might also have to reinstall or move the license certificates.

Question: Why do I get Policy Manager errors when I rename a server this using a Server Plus 5 license certificate?

Answer: You need to change the file server assignment on the license certificate so that it matches the new name of the server.

TIDs

The following TIDs might help you resolve some issues relating to NLS oyour network. The TIDs are available at www.support.novell.com/servlet/knowledgebase.

TID Description

2943750 Understanding NetWare 5 licensing

2945708 What to do when the Licensing Service is not available; prerequisites for licensing to install properly

2943405 What to do when the server is unable to obtain a valid server base license

2944797 Installing MLA certificates

2947496 What to do when the installation fails to assign a license certificate to a server

2925689 Renaming a server

Troubleshooting ��




2943157 Moving a server to a different NDS context

2949028 What to do when you can’t install a license certificate because Admin doesn’t have proper privileges

2947263 What to do when the system displays "NW5 GUI Install Error 0x0001003"

2907966 Adding license certificates when you have a two-user version of NetWare

2949634 Responding to a C0001002 message

TID Description




Date post:	26-Sep-2020
Category:	Documents
Upload:	others
View:	0 times
Download:	0 times