NetWare 3 used a Bindery, which existed on each server. This in essence meant that each server had its own SAM equivalent and was 'stand alone'. If you needed to connect to a server resource, then you needed a login account created on that server. [Imagine using local accounts in w2k on each server - this is how NetWare 3 worked].
NetWare 4 introduced NDS, which is an LDAP compliant hierarchy, similar to Active Directory (but introduced 6 years before AD!) Users now receive one login per NDS instance and are then granted rights to resources within the hierarchy (again, similar to AD). I could go on ad infinitum, but maybe you should visit www.novell.com instead :) Neil -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: 28 November 2003 04:29 Subject: [ActiveDir Digest] --------------------------------------------------------- Subject: RE: [ActiveDir] [OT] Novells directory server Date: Thu, 27 Nov 2003 09:52:07 -0000 From: "Oliver Marshall" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] No, but would be good to show what the 'competition' once looked like.=20 -----Original Message----- From: GRILLENMEIER,GUIDO (HP-Germany,ex1) [mailto:[EMAIL PROTECTED] Sent: 26 November 2003 20:50 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] [OT] Novells directory server hope you're not writing an article based on some screenshots... ________________________________ From: Oliver Marshall [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 26. November 2003 18:49 To: [EMAIL PROTECTED] Subject: [ActiveDir] [OT] Novells directory server Anyone know what the name of the directory server in Novell 3 & 4 was called ? Even better, anyone got any screen shots as well ? ;) --------------------------------------------------------- From: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Exchange 2003 DL Management in a multi-domain forest Date: Thu, 27 Nov 2003 07:44:34 -0400 Reply-To: [EMAIL PROTECTED] The behaviour you're describing is a little different than what the directory access whitepaper describes; it claims that DSProxy removes GCs from the working GC list that are in nonlocal DOMAINS, so that it ends up with a list of up to ten GCs from the same site and DOMAIN as the Exchange server; it was the domain part that made me think it wouldn't be much of an issue for us. We were going to IP address the root DCs/GCs into a different subnet anyway, to give us the option to defines sites down the road fairly painlessly if we had to (the whole AD structure is going to be in a single data centre); from what you're saying, though, I think we should play it safe and define sites right off the bat. This won't be the 1st time in history a MS process didn't behave exactly as advertised :-) Thanks again, Andy > Yes your description of what dsaccess/proxy does is what we understand. > However non-local simply means GCs not in the site that the exchange server > is in. > > If you have GCs that are DCs from multiple domain within a single site, ANY > one of the GCs could be what gets returned to the clients. > > I.E. In our example, we have a site that has Exchange servers and GCs that > are DC for two different North America Domains and a South America Domain. > The Exchange server could give out any one of those GCs as a local GC to the > clients to use. So if you have say a North America 1 User and they can get a > South American GC which means they won't be updating things like public > delegates, DL's, nor certs and possibly other things. > > Basically your design has to be that there are only GCs from one domain in a > single Exchange AD Site. So say are like us and have three domains in the > American Data Center. We actually need three logical Active Directory sites > to hold those domains in if they are all mail enabled. If you don't mind > hardcoding things you can get away from that but hard coding leads to times > later where you find someone screaming "who was the bright moron who hard > coded this..." - followed by "Well the reason everything was down because > someone in their infinite wisdom hard coded this value and everyone forgot > about it and then we killed that last domain controller and...". > > joe > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Wednesday, November 26, 2003 8:33 AM > To: [EMAIL PROTECTED] > > Since my original post, I've done further research into this (I can't do any > lab testing at the moment because our lab's in the process of being rebuilt > for our formal Proof of Concept the end of this week). > > I was reading the "Understanding and Troubleshooting Directory Access" > (http://www.microsoft.com/downloads/details.aspx? > displaylang=en&familyid=c976433f-f979-4745-b7a6-9d8446ef6409) > Exchange 2000 whitepaper, and the understanding that I came away with for > the DSProxy process is that is obtains a working GC list from the DSAccess > process, removes any nonlocal (from the Exchange server's perspective) GCs, > and uses the resulting list for client proxies/referrals on a round-robin > basis (for load balancing). > > Since our lab is unavailable at the moment, though, I can't confirm any of > this. Is this the behaviour you've seen, or have you found that clients get > GC referrals to nonlocal GCs? > > With this behaviour, it looked to me like it would be a big issue in a > multi- user domain environment with lots of cross-domain interaction, but we > should be OK with the bulk of our users in the same domain as the Exchange > servers. There will be a 2nd user domain, but they're a very autonomous > section with a much more secure, highly classified network that will have > their own Exchange server > (s) in their domain, so there shouldn't be much cross-DL and delegate > management, if any at all. > > Thanks, > > Andy > > > > Yes you absolutely will run into the issue. > > > > The problem has nothing to do with load, it is how DSPROXY hands out > > GC's to clients. If you have GC's from multiple domains in the site > > where your exchange servers are, the exchange servers will have them > > all (up to I think > > 25 or something like that) in its GC list, any and all of those are > > valid to be given out to ANY client requesting a GC irregardless of > > the domain of the client or the user. You must break out your Exchange > > stuff into single domain AD sites or you must hard code the Exchange > > Servers DSACCESS list or hardcode the clients. > > > > On the positive side I really escalated this problem within MS as an > > MVP and our MS Premier Alliance folks really escalated this problem > > through their channels. Although Exchange Dev dismissed and said it > > would be corrected previously, they are now being forced to look at it > again. > > > > My recommendation to everyone this list is if you have multiple domain > > GCss in a single AD site and use Exchange 2000/3 call now and bitch to > > MS about this functionality. Initially they falled back on the old > > tried and true, people don't really have this problem, it is just you > > guys because you are doing things differently... > > > > Right off the bat we know it can affect DL's, Delegates, and email Certs. > > > > > > joe > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of > > [EMAIL PROTECTED] > > Sent: Tuesday, November 25, 2003 7:14 AM > > To: [EMAIL PROTECTED] > > Cc: [EMAIL PROTECTED] > > > > Good Morning: > > > > Long time lurker, 1st time poster :-) This topic was somewhat covered > > in a thread initiated by Joe, but I have a follow-up question. > > > > Our scenario: > > Approximately 6800 users. A Windows 2003 AD design with an empty > > forest root domain, and 2 child domains, 2 DCs per domain. The bulk of > > the users will be in one child domain, and there won't be much > > interaction between the 2 child domains. The root and the main child > > domain will both be within the data centre in a single site. We will > > be deploying Exchange 2003 in the main child domain. > > We are in the lab proof of concept phase, and the question has arisen > > whether when users attempt to manage DLs once we're in Exchange native > > mode, if they'll be potentially referred to a GC in the root domain, > > thus having their modification attempt fail. The time to determine > > this is now, before we move to the pilot (which involves deploying AD, > > then deploying the 1st > > E2K3 server). > > > > My initial thought was to simulate a heavy messaging load to DLs (UGs) > > with Loadsim. Using that approach, though, is there a relatively easy > > way to determine what GCs are being hit? Or is there a completely > > different approach I should be taking? > > > > Or, is the thoughts of the big brains on this list that this won't be > > an issue at all? Any and all feedback would be greatly appreciated. > > > > ADthanksVANCE, > > > > Andy Schan > > Messaging > > Contractor > > > > List info : http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > List info : http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > --------------------------------------------------------- From: John Reijnders <[EMAIL PROTECTED]> Subject: RE: [ActiveDir] Happy Thanksgiving... Date: Thu, 27 Nov 2003 15:41:22 +0100 Reply-To: [EMAIL PROTECTED] I don't want a turkey ... I want a NETPRO CHICKEN *#&#*(@*&#&**@ !!!!!!!!!!!! -----Original Message----- From: GRILLENMEIER,GUIDO (HP-Germany,ex1) [mailto:[EMAIL PROTECTED] Sent: woensdag 26 november 2003 21:49 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Happy Thanksgiving... well, you all enjoy your turkeys Greeting from Germany - where it's sad to say that we don't celebrate this day (but we have many, many, many other holidays ;-)) /Guido -----Original Message----- From: Christopher Hummert [mailto:[EMAIL PROTECTED] Sent: Mittwoch, 26. November 2003 20:14 To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] Happy Thanksgiving... You wacky Canadians :) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Lefkovics Sent: Wednesday, November 26, 2003 11:16 AM To: [EMAIL PROTECTED] Subject: Re: [ActiveDir] Happy Thanksgiving... That was like 5 weeks ago. ----- Original Message ----- From: "Myrick, Todd (NIH/CIT)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, November 26, 2003 11:02 AM Subject: [ActiveDir] Happy Thanksgiving... > Just wanted to wish everyone on the list a Happy Thanksgiving... > > Todd Myrick > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ --------------------------------------------------------- From: Richard Sumilang <[EMAIL PROTECTED]> Subject: [ActiveDir] Windows 2000 Server Down Date: Thu, 27 Nov 2003 18:29:52 -0800 Reply-To: [EMAIL PROTECTED] Heres my story... One of my users gave me a call because they could not VPN to the server. My first assumption was that there account might have gotten locked out because maybe they tried to log in too many times with a wrong password so I took a look at my Active Directory Users and Computers snap in and there was nothing in there! I mean absolutely nothing! No tree on the left column and no data on the right column. I then took a look at the Remote routing management service and that service was shut down. I tried to start it back up but I got an error. Another thing I noticed was the DHCP service was down. I tried to start that up but also got an error that it will not start up. Lastly I didn't know what to do so I restarted the server but after I typed in the admin user name and password and it got to the point of applying personal settings and it will not go past that part. The blue scrolling thing was still scrolling but did not move past that after 20 minutes. I was able to restart the computer into safe mode but don't know how to resolve this issue. I would appreciate any help and suggestions. Thank You, - Richard S. --------------------------------------------------------- Subject: RE: [ActiveDir] Windows 2000 Server Down Date: Fri, 28 Nov 2003 14:09:45 +1100 From: "Chakravarty, Sakti" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Well the first thing I'd say is "restore" but if you could give some more detail there might be another way. It sounds like this is the only DC/server in your environment? If not you should be able to connect to another DC to view ADUC. What functions does the server perform? Apparently VPN and DHCP, but does it do anything else like run a database or something? Perhaps it was taking so long to boot up because it was running some recovery procedures? =20 What are the exact error messages you see? Have a look in the event log to try and determine when the problem started occurring and then you can start trying to figure out why. -----Original Message----- From: Richard Sumilang [mailto:[EMAIL PROTECTED] Sent: Friday, 28 November 2003 1:30 PM To: [EMAIL PROTECTED] Subject: [ActiveDir] Windows 2000 Server Down Heres my story... One of my users gave me a call because they could not VPN to the=20 server. My first assumption was that there account might have gotten=20 locked out because maybe they tried to log in too many times with a=20 wrong password so I took a look at my Active Directory Users and=20 Computers snap in and there was nothing in there! I mean absolutely=20 nothing! No tree on the left column and no data on the right column. I then took a look at the Remote routing management service and that=20 service was shut down. I tried to start it back up but I got an error.=20 Another thing I noticed was the DHCP service was down. I tried to start=20 that up but also got an error that it will not start up. Lastly I didn't know what to do so I restarted the server but after I=20 typed in the admin user name and password and it got to the point of=20 applying personal settings and it will not go past that part. The blue=20 scrolling thing was still scrolling but did not move past that after 20=20 minutes. I was able to restart the computer into safe mode but don't=20 know how to resolve this issue. I would appreciate any help and=20 suggestions. Thank You, - Richard S. List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ ********************************************************************** This message is intended for the addressee named and may contain privileged information or confidential information or both. If you are not the intended recipient please delete it and notify the sender. ********************************************************************** List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ ============================================================================== This message is for the named person's use only. It may contain sensitive and private proprietary or legally privileged information. No confidentiality or privilege is waived or lost by any mistransmission. If you are not the intended recipient, please immediately delete it and all copies of it from your system, destroy any hard copies of it and notify the sender. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient. CREDIT SUISSE GROUP and each legal entity in the CREDIT SUISSE FIRST BOSTON or CREDIT SUISSE ASSET MANAGEMENT business units of CREDIT SUISSE FIRST BOSTON reserve the right to monitor all e-mail communications through its networks. Any views expressed in this message are those of the individual sender, except where the message states otherwise and the sender is authorized to state them to be the views of any such entity. Unless otherwise stated, any pricing information given in this message is indicative only, is subject to change and does not constitute an offer to deal at any price quoted. Any reference to the terms of executed transactions should be treated as preliminary only and subject to our formal written confirmation. ============================================================================== List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
