NOVELL TECHNICAL INFORMATION DOCUMENT TITLE: NDS 7.x Update for Netware 5.1 ver. 7.62c TID #: 2967598 README FOR: ds762c.exe SUPERSEDES: fds762c.exe NOVELL PRODUCTS and VERSIONS: NDS - NW51 Server 5.x - EOL NDS - EOL ABSTRACT: NDS update for Netware 5.1 servers running with the NDS 7 (RECMAN) database. This update to Directory Services contains a new DSLOADER.NLM. DS 7.62c provides the following updates to facilitate migration to later versions of NetWare and eDirectory: - Enhanced Auxiliary Class handling - Enhancements to allow for coexistance with NetWare 6.5 (Includes external reference referral buffer enhancement) Updated files since Novell NetWare 5.1 Support Pack 6: DS.NLM - 7.62c DSREPAIR - 5.30a ----------------------------------------------------------------- DISCLAIMER THE ORIGIN OF THIS INFORMATION MAY BE INTERNAL OR EXTERNAL TO NOVELL. NOVELL MAKES ALL REASONABLE EFFORTS TO VERIFY THIS INFORMATION. HOWEVER, THE INFORMATION PROVIDED IN THIS DOCUMENT IS FOR YOUR INFORMATION ONLY. NOVELL MAKES NO EXPLICIT OR IMPLIED CLAIMS TO THE VALIDITY OF THIS INFORMATION. ----------------------------------------------------------------- INSTALLATION INSTRUCTIONS: Novell recommends applying NetWare 5.1 SP6 before applying this update. The minimum support pack supported by this update is SP5. This patch MAY work on earlier support pack releases, however, be aware that Novell did not test this update with older service pack releases. This patch may work on a NetWare 5.0 SP6a server however, as indicated above, Novell does not test current patches on discontinued products. ******** NOTE ******** DO NOT INSTALL THIS DS patch ON A NETWARE 5.1 IF YOU HAVE DS 8.x, 85.x, or eDirectory 8.6.x or higher INSTALLED! DO NOT INSTALL ON A NETWARE 4.X OR NETWARE 6.X or higher SERVER!!! ************** Proactive NOTE *********************************************** As with all patches, take standard precautionary disaster recovery steps. This includes loading "DSREPAIR -RC" which in NDS 7.x will create a file called SYS:\SYSTEM\DSREPAIR.DIB which contains a backup of the NDS database. Running a DSREPAIR -RC on a regular basis provides additional disaster recovery for the database. This will put a copy of the database in the SYS:\SYSTEM directory by default and this file should be copied to another location so it will not be overwritten the next time it is run. ******************************************************************************* 1. Copy this update to a temporary directory on the server being patched. (IE., SYS:\PATCHES) 2. From a workstation, run the executable. 3. Install at a minimum NetWare 5.1 SP5 or higher if it is not yet installed. See the disclaimer above if you do not have one of these support packs installed. 4. Run NWCONFIG.NLM from the server console prompt. 5. Go to Product Options 6. Go to Install a product not listed 7. Hit F3 to specify a different path 8. Specify the path were the patch was extracted (ie sys:\patches). NOTE: You are looking for the directory where the *.IPS file is located. 9. Press ENTER and follow the prompts. 10. After the installation, you must reboot the server (RESET SERVER) to load the new DSLOADER.NLM. This must happen or the database will not load properly. 11. You should then observe that DS v7.62c has been loaded. NOTE: The install script included in this update will not allow you to install on a server that is not at least running NetWare 5.1 SP5. Also this executable file will not extract or run if run within a long name directory. Always make a backup copy of original files. BACKREVVING Back rev ONLY if absolutely necessary. If necessary, follow all instructions below: 1. Load DSREPAIR.NLM | Advanced Options | Create Database Dump File Call the file SYS:\SYSTEM\DSREPAIR.ORG 2. Log into the network as ADMIN or a user with rights to SYS:SYSTEM of the file server. Locate the following files in the SYS:\SYSTEM sub-directory: DS.NLM DSREPAIR.NLM These files might be flagged read-only. Rename these file to *.ORG. 3. Load "DSREPAIR -RC" at the console to create the DSREPAIR.DIB backup file. 4. Log into the network as ADMIN or a user with rights to the SYS:SYSTEM directory of the server. 5. Locate the DS.NLM file in the SYS:\SYSTEM directory. Rename this file to DS.ORG. Copy the previous DS.NLM to the SYS:SYSTEM directory of the server. This file might be flagged read-only. 6. Locate the DSLOADER.NLM in the C:\NWSERVER directory. Rename this file to DSLOADER.ORG. Copy the previous DSLOADER.NLM to the C:\NWSERVER directory of the server. You may need to use a server based utility. (ie. JCMD.NLM, TOOLBOX.NLM, NETBASIC or a floppy disk) This file might be flagged read-only. 7. BEFORE REBOOTING THE SERVER TYPE THE FOLLOWING AT THE CONSOLE PROMPT: set dstrace=on set dstrace=downgradedibtoversion9 8. The local database will close and downgrade itself. It will not reopen automatically (if it did, then it would simply reupgrade immediately.) After the database has closed and the console prompt returns, down the server. 9. When the server comes back up, verify that the versions of DS.NLM, DSREPAIR.NLM, DSLOADER.NLM are the previous versions. ALLOCATING CACHE MEMORY One of the major changes starting with DS v7.55 or later of DS.NLM is the ability of caching DS objects in memory, which increases performance. The 7.55 and greater versions of DS.NLM will, upon loading, calculate the amount of free memory that the server currently has. We will refer to this value as MaxMemory. Next, DS will set the value of MemoryLimit to be equal to 20% of MaxMemory. Finally, DS will set the value of BackoffPoint to be 80% of MemoryLimit. This means that on a server with 200Mb of available memory (cache buffers) at DS.NLM load time, DS.NLM will set it's BackoffPoint to be 32MB (80% of 40MB which is 20% of 200MB.) While DS.NLM is operating, we have found that it will consistently receive a 99% cache success rate (an object being sought was already in cache, no disk I/O); UNTIL the cache size reaches the BackoffPoint. Once the BackoffPoint has been reached, DS.NLM will replace the oldest objects within the cache as new objects are coming in. Also, a cache cleaning service will be scheduled to actually free up the memory within the cache which represent the oldest objects. In the event that memory cannot be allocated for the cache, DS.NLM will immediately schedule the cache cleaning service. In conclusion, when the new DS.NLM loads, it will take more memory than it previously did. This is intended and there are checks and balances in place to ensure that we don't hog too much. Also, you can get a really rough estimate as to the number of objects that DS.NLM can cache by taking the 80% of 20% of Max and dividing by 4k. For example, with a 32MB cache, we can cache roughly 8192 objects. If you want, you can manually configure DS.NLM for a lower or higher value for MemoryLimit (remember, the BackoffPoint is 80% of MemoryLimit). This can be done with the following console command: SET DSTRACE=!M64 That command will permanently configure DS.NLM (the value is stored in the database) to set the MemoryLimit to be 64MB instead of the 20% of MaxMemory value. Therefore, the value for BackoffPoint will be 80% of 64MB or 51MB. This would give you approximately enough cache for 13000 objects. Also, do not be concerned if there are 100000 objects but can only cache 13000 objects. Remember that the cached objects represent the number of objects being accessed within the same time period (meaning that object A and B are both being used within seconds of each other). If we look at simultaneous access, we would need thousands of server processes to be active simultaneously to access thousands of cache objects simultaneously. A good estimate would be caching 5% of the total objects in the tree. ISSUE: Changes in DS.NLM v7.62c (Supercedes DS.NLM 7.62b - Found in last public released patch DS762B.EXE) - cache memory allocator out of available memory on backlink trigger Changes in DS.NLM v7.62b (Supercedes DS.NLM 7.61) - NetWare 6.5 reports -609 during installation - END_NAMEBASE_TRANSACTION event is reported incorrectly - Enhanced Auxiliary class support Note: This update provides several enhancements that will allow a DS 7.x server to coexist in mixed rings while upgrading to the latest versions of NetWare and eDirectory. 1. Enhanced Auxiliary class support. No longer will objects associated with auxiliary classes show up as unknown while being viewed from a management interface such as ConsoleOne when reading the database from a DS 7 based server. To enable/disable the new auxiliary class support you must type the following commands at the server console: SET DSTRACE=AUXSUPPORT ON SET DSTRACE=AUXSUPPORT OFF These settings are persistant. Additional information can be found in TID 10083622 - Unable to create Organizational Unit through LDAP Changes in DS.NLM v7.61 (Same version found in NetWare 5.1 Support Pack 6) - Security enhancements in Portal --------------------------------------------------------------- Changes in DSREPAIR.NLM v5.30a (Supersedes v5.29 found in NetWare 5.1 Support Pack 6) - Repair Replica Ring strips replica off of unknown partition root entries due to aux classes - NLS attribute getting to large causing High Utilization (new -nlc switch) - Dsrepair aborts because of corrupted bindery attributes in the schema attribute definitions - Resolves the message: "ERROR: Dynamic bindery entry was already referenced" - Novell Support internal switch enhancements --------------------------------------------------------------- NLDAP.NLM v3.09a (Same version found in NetWare 5.1 Support Pack 6) - A fix for using ldap to modify user's passwordExpirationTime - seconds are now optional. --------------------------------------------------------------- Updated NDS500.SCH - Resolves an issue removing and reinstalling a server into a NDS7 Support Pack 4 tree. Self-Extracting File Name: ds762c.exe Files Included Size Date Time ..\ DS762C.TXT (This file) APPEND.NLM 965 9-29-1998 2:26:08 pm DS7.IPS 1478 12-4-2003 2:33:08 pm ICMD.MSG 7331 8-24-2000 7:05:54 am ICMD.NLM 32901 8-24-2000 7:06:24 am ISDOS.NLM 1148 2-19-1998 4:42:44 pm ..\INSTALL\ ..\INSTALL\4\ DS7.ILS 6595 12-4-2003 2:33:38 pm SHUTDOWN.ILS 600 10-24-2003 2:56:12 pm STARTUP.ILS 1862 12-22-2003 5:40:44 pm ..\STARTUP\ DSLOADER.NLM 17003 12-11-2001 1:13:56 pm ..\SYS\ ..\SYS\SYSTEM\ DS.NLM 655354 7-14-2003 2:18:44 pm DSBROWSE.NLM 104155 5-10-2000 4:00:02 pm DSREPAIR.NLM 219421 5-19-2003 2:59:50 pm NLDAP.NLM 124861 3-1-2001 11:16:24 am ..\SYS\SYSTEM\SCHEMA\ NDS500.SCH 6934 11-8-2001 12:01:18 pm ----------------------------------------------------------------- Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information. -----------------------------------------------------------------