NW5 IP client fails login through NAT

(Last modified: 01Nov2002)

This document (10011447) is provided subject to the disclaimer at the end of this document.

goal

NW5 IP client fails login through NAT

fact

Novell NetWare 5.0

symptom

Error: "You have encountered an unexpected login failure! Status: 0x8885"

cause

This problem happens in two different situations. First, if the server is behind an address translation firewall and second, when the client is attempting to login through a dial up connection. When you attempt to login through the GUI an error "You have encountered an unexpected login failure! Status: 0x8885" will
be displayed. If a DOS box is opened and login.exe is used the login will work perfectly ONLY if a failed attempt to login through the GUI was made first and ONLY if there is a read/write replica of the partition where the users exists on the server you are attempting to connect to. Login through the GUI will work if a bindery connection is made.

The GUI login attempt, even though it fails, will actually make a query to the destination servers connection table (network connections on server show not authenticated connection).

fix

Working as designed with current technologies.

Access to a server through an address translation firewall is not currently supported!

Because name services (such as NDS) are being used behind a translated environment, there is no possible way to fix this with current technology. Address translation services can be hosted by NT servers, Cisco routers, Novell Border Manager, etc. for which the client nor the server behind the firewall has any idea that address transalation is happening. More testing is currently being done with dial up adapters.

Novell will be investigating this issue as a future enhancement. WORKAROUND: Though access through an address translation firewall is not supported you can attempt to use login.exe from a dos command prompt or login to the remote server with a bindery connection. Create a location profile that makes a bindery connection. Configure the bindery context on the remote server.

document

Document Title: NW5 IP client fails login through NAT
Document ID: 10011447
Solution ID: 4.0.1842782.2212204
Creation Date: 10Jul1999
Modified Date: 01Nov2002
Novell Product Class:Groupware
NetWare
Novell BorderManager Services

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.