Environment
NetIQ eDirectory
NMAS
Novell CIFS
Situation
Users can not login with nmas enabled on the Novell Client
When logging in with the Novell Client and NMAS enabled the following error is seen in nmas trace
ERROR: -1691 System default sequence not authorized for user
In the NMAS tab in the Novell Client the NDS login sequence is selected. The authentication fails.
ERROR: -1660 Client can not do requested login sequence "NDS"
Resolution
This usually indicates the NDS login sequence is corrupted.
1) Check that the NDS login sequence is Authorized.
How to Authorized the NDS login sequence in iManager
Click on the NMAS Roles on the right side
Cick on Login Sequences
Look for the login sequence named NDS. In the Authorized colum verify the NDS login sequence is Authorized.
2) If the Login Sequence is Authorized then delete and recreate the Login Sequence
a) Delete the NDS login sequence and recreate
How to delete the NDS login sequence in iManager
Click on the NMAS Roles on the right side
Cick on Login Sequences
Check the NDS login sequence and click Delete (just under NMAS Login Sequences title)
Click Apply at the bottom of the page.
b) How to create the NDS login sequeince in iManager
Click on the NMAS Roles on the right side
Cick on Login Sequences
Check the NDS login sequence and click New (just under NMAS Login Sequences title)
For the Name enter NDS
For the Squence Type verify AND is showing in the drop down box
In the Available Login Methods select NDS and press the arrow to move it to Login Methods
Click Finish at the bottom of the page.
3) If no default login sequence is selected NDS is used. If desired NDS can be selected as default to ensure a login sequence is selected or for company policy. However the NDS login squence is not required to be the default sequence.
To make a login sequence default browse Login Sequence object (usually in the Security container)
Click on the Login Sequences sub tab under NMAS
Select the desired login sequence to be default and press Make Default and the Apply.