Troubleshooting Error: Restrict, Unable to update NDS attributes -614

(Last modified: 10Aug2005)

This document (10074727) is provided subject to the disclaimer at the end of this document.

goal

fact

BorderManager 3.8

BorderManager 3.7

fix

You'll need to download the following utility:

TID# 2953710, "BorderManager Enterprise Edition 3.x DS Utils"
bm3rmv3.exe; 30429 bytes; Date/Time: 10-20-1999/01:11PM
http://support.novell.com/servlet/tidfinder/2953710

You'll then want to backup the existing access rules in NDS:
TID# 10066764, "Backing up Novell BorderManager Access Rules"
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10066764.htm

Check the SYS:\ETC\HOSTS file; verify an entry exists for the NBM server using the PRIVATE IP ADDRESS and that the entry is correct.

Before loading BR3RMALL.NLM, run "stopbrd" on the BorderManager server.

LOAD BR3RMALL.NLM to remove from NDS all BorderManager attributes from that server object (same server where this NLM is run). BM3RMALL.NLM will effectively leave BorderManager unconfigured in NDS, as if it still needs to be configured for the first time.

Load ConsoleOne, select details from the NBM server object, select the "other" tab. Remove any entries that start with "BRD".

TID# 10060600, "NDS Health Check Procedures - Cross Platform"
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10060600.htm

Run SCHEXT.NLM at the console prompt. Enter the following mandatory parameters:

SCHEXT <USER FDN> <PASSWD>

The user must have supervisor rights at the Root level of the tree.
Example: SCHEXT .CN=ADMIN.O=NOVELL PASSWORD

Load NetWare Administrator, go to details of the server object, select "BorderManager Setup". You should be prompted at this point, click "Deny". Add the NBM IP Addresses under the "IP Addresses..." button | Click "OK" | "OK".

Unload all filtering related modules (IPFLT.NLM, IPXFLT.NLM, FILTCFG.NLM FILTSRV.NLM, etc.). Rename/erase the SYS:\ETC\FILTERS.CFG file. LOAD BRDCFG, place the default filters on the public interface. Unload all NBM filtering related modules (IPFLT.NLM, IPXFLT.NLM, FILTSRV.NLM).

LOAD FILTSRV MIGRATE
UNLOAD FILTSRV
REINITIALIZE SYSTEM

The system should be ready to add filters and should work correctly; it also sounds like NDS isn't fully initialized when BRDSRV.NLM is loaded (thus loading PROXY.NLM, ACLCHECK.NLM, etc.); it is my suggestion that you add a delay to the loading of NBM when the server is restarted:

Place a question mark "?" in front of the command. The syntax is:

? LOAD BRDSRV.NLM

The delay should then be increased in certain environments (may require more or less; you'll have to test to be certain).

SET COMMAND LINE PROMPT DEFAULT CHOICE=ON (Which is the default)
SET COMMAND LINE PROMPT TIME OUT=420 (Default is 10 seconds, 300 = 5 mins)

It is also recommended that you add the following to the AUTOEXEC.NCF

? LOAD BRDSRV.NLM
UNLOAD ACLCHECK.NLM
LOAD ACLCHECK.NLM /G /S

document

Document Title:	Troubleshooting Error: Restrict, Unable to update NDS attributes -614
Document ID:	10074727
Solution ID:	NOVL82422
Creation Date:	19Sep2002
Modified Date:	10Aug2005
Novell Product Class:	NetWare Novell BorderManager Services Web Services

disclaimer

The Origin of this information may be internal or external to Novell. Novell makes all reasonable efforts to verify this information. However, the information provided in this document is for your information only. Novell makes no explicit or implied claims to the validity of this information.
Any trademarks referenced in this document are the property of their respective owners. Consult your product manuals for complete trademark information.