Environment
Novell eDirectory 8.7.3 for All Platforms
Novell eDirectory 8.7.1 for All Platforms
Novell eDirectory 8.7 for All Platforms
Novell NetWare 6.5
Novell NetWare 6.0
Novell NetWare 5.1
Novell eDirectory 8.7.1 for All Platforms
Novell eDirectory 8.7 for All Platforms
Novell NetWare 6.5
Novell NetWare 6.0
Novell NetWare 5.1
Situation
A user will no longer have an entry in their "Network Address" attribute even though they are logged into the eDirectory Tree.
LDAP searches on the "networkaddress" property return null on users that are logged into the eDirectory tree. Can cause issues for apps that use this to reverse lookup the user (i.e. search on IP address to find the user's CN and context) such as Websense.
LDAP searches on the "networkaddress" property return null on users that are logged into the eDirectory tree. Can cause issues for apps that use this to reverse lookup the user (i.e. search on IP address to find the user's CN and context) such as Websense.
Resolution
This was fixed in the 4.91 SP3 client. NWFS.SYS was modified so that it will check the monitor connection on a reconnect and if it is not connected close the connection and try and get a new monitor connection to the tree.
Prior to the 4.91 SP3 client, the solution is to have the user login again so that it issues the NDS Finish Login request again that will populate Network Address again.
Additional Information
The Network Address property is populated when a client or other application issues a NDS Finish Login request. It is depopulated when one of the following occur:
1. The client or other application issue a NDS Logout request.
2. The Connection Manager process on a NetWare server clears the connection due to failing IP/IPX watchdog (can't ping the workstation over IP/IPX for approximately 10 minutes).
3. The server holding the user's primary NDS / eDir connection is rebooted. On shutdown it is clearing out all connections, including the process that removes the network address from the user object.
If conditions 2 or 3 happen, the Novell Client will use the Auto-Reconnect feature to reattach to the servers/resources it needs. When it does this, it uses a NDS Finish Authentication (NOT the same as NDS Finish Login) request to each server, which does NOT repopulate the Network Address for the user. This is how a user can hold a valid connection to the eDirectory tree, but not have a Network Address entry.
Formerly known as TID# 10099118
Formerly known as TID# 10099118