NOVELL TECHNICAL INFORMATION DOCUMENT

TITLE:  Dmptrust Utility
TID #:  2964701
README FOR:  DMPTRUST.EXE

NOVELL PRODUCTS and VERSIONS:
NSS - NW6SFS

ABSTRACT:

This utility is designed to dump the trustees of a NetWare 6 NSS volumes to a
file.


-----------------------------------------------------------------
DISCLAIMER
THE ORIGIN OF THIS INFORMATION MAY BE INTERNAL OR EXTERNAL TO 
NOVELL.  NOVELL MAKES ALL REASONABLE EFFORTS TO VERIFY THIS 
INFORMATION.  HOWEVER, THE INFORMATION PROVIDED IN THIS DOCUMENT 
IS FOR YOUR INFORMATION ONLY.  NOVELL MAKES NO EXPLICIT OR IMPLIED 
CLAIMS TO THE VALIDITY OF THIS INFORMATION.
-----------------------------------------------------------------


INSTALLATION INSTRUCTIONS:

DMPTRUST.NLM is NSS build specific.
The only versions currently available are for NetWare 6 Support Pack 2 servers
and NetWare 6 Support Pack 2 servers with either the NW6NSS2B or NW6NSS2C NSS
patches.

1) Extract this DMPTRUST.EXE to a temporary directory.
2) Browse the temporary directory to find the appropriate DMPTRUST.NLM for the
NSS version.
3) Copy DMPTRUST.NLM to SYS:SYSTEM.
4) At the server console type "dmptrust volname" where volname is the name of
the volume that you want to dump the trustees from.

Example:
DMPTRUST SYS

The results will be written to DMPTRUST.OUT located at the root of the volume
that was checked (SYS in this example).


ISSUE: 

Below are examples of what you might see in this file and its explanation.

Normal:
Name: \Shared
  (1-0) Rights: 0x41   GUID=C50E5900-7D6C-11D6-A5-DD-0002A5FB7812 ID=8372
    Name=.CN=BUS-ROB.OU=admin.O=vjc.T=VJC.
  (2-1) Rights: 0x41   GUID=C3DD2BC4-7D6C-11D6-A5-DD-0002A5FB7812 ID=814B
    Name=.CN=msapps.OU=academic.O=vjc.T=VJC.

Error:
Name: \Classes\math210
  (1-0) Rights: 0xFB   GUID=C8094A36-7D6C-11D6-A5-DD-0002A5FB7812 ID=0
    Name=GUID to ID error 21351
  (2-1) Rights: 0xFB   GUID=C80949C0-7D6C-11D6-A5-DD-0002A5FB7812 ID=0
    Name=GUID to ID error 21351
  (3-2) Rights: 0xFB   GUID=C8A1DFA3-7D6C-11D6-A5-DD-0002A5FB7812 ID=0
    Name=GUID to ID error 21351

Description:
The GUID that is stored in NSS does not match with an NDS GUID.
ID=0 indicates that NSS believes the user was deleted or was never there.
21351: ZERR_NEGATIVE_CACHE_ENTRY_FOUND
This is an expected error if the owner of a file in NSS has been deleted from
eDirectory without the file being deleted.

Fix:
This will remain in this state for at least 90 days.  The two criteria that
must be met are that the GUID must not be found in eDirectory on at least four
consecutive runs of the background checker (runs roughly every 14 days), and at
least 90 must have passed since the first time the background checker did not
find it.  If there are users that are missing rights then they need to be
reassigned.


ERROR:
Name: \
  (1-0) Rights: 0xDB   GUID=DEC9C31E-12EE-11D7-BF-BA-00D0B76DEF11 ID=80AE
    Name=.CN=Kidsway.OU=ON.O=SBUSD.T=SBUSD_TREE.
!!! NSS GUID does not match eDIR (88449086-12BE-11D7-91-F9-00D0B781729E) !!!
  (2-1) Rights: 0xDB   GUID=88DD2728-12BE-11D7-91-F9-00D0B781729E ID=80AB
    Name=.CN=Kidware.OU=ON.O=SBUSD.T=SBUSD_TREE.

Description:
The NSS GUID does not match what eDirectory has for the GUID.  

Fix:
Make sure eDirectory GUIDs are synchronized and then run SYNCGUID.NLM to sync
the nss volume with eDirectory.  SYNCGUID.NLM is available by contacting Novell
Technical Support.


Self-Extracting File Name: DMPTRUST.EXE

Files Included          Size         Date          Time
..\
  DMPTRUST.TXT   (This file)
..\DMPTRUST\
..\DMPTRUST\60_SP2\
  DMPTRUST.NLM          4295    9-18-2002   10:57:50 am
..\DMPTRUST\60_SP2_2B\
  DMPTRUST.NLM          4295    11-6-2002    2:26:48 pm
..\DMPTRUST\60_SP2_2C\
  DMPTRUST.NLM          4297   12-11-2002    7:06:50 am



-----------------------------------------------------------------
Any trademarks referenced in this document are the property of their respective
owners.  Consult your product manuals for complete trademark information.
-----------------------------------------------------------------