"/opt/novell/nss/sbin/rights" returns improper trustee assignments

  • 7016167
  • 09-Feb-2015
  • 09-Feb-2015

Environment

Novell Open Enterprise Server 2 (OES 2) Linux

Situation

When checking trustees of a given directory with /opt/novell/nss/sbin/rights, the there appear to be no trustees assigned.  Checking the trustees of the same directory with iManager, shows the proper trustees assigned.

Verifying the trustees on the volume with "ncpcon nss verify=volName" yields an error on the directory similar to:

[Trustee difference] path="/PRV/NTS/USER1" fdn=".user1.OU1.OU.novell" ncprights="RWCEMF" nssrights=""

Resolution

At the time of this writing, OES 2 is out of development support.  The best way to resync the trustees is to:
  1. Log into Novell Remote Manager (NRM)  (https://dns_or_ip:8009)
  2. Navigate to "Manage NCP Services"->"Manage Server"
  3. In the right pane, find "SYNC_TRUSTEES_TO_NSS_AT_VOLUME_MOUNT" and change the value to "1".

             

  4. Dismount the volume in question (offline if it's a clustered volume).
  5. Mount the volume in question (online if it's a clustered volume).
    This will sync the trustees.
  6. Repeat steps 4-5 for any other effected volumes.
  7. When all volumes are remedied, change the value of "SYNC_TRUSTEES_TO_NSS_AT_VOLUME_MOUNT" (#3 above) back to "0".
  8. Log out from NRM.
If you encounter this on a version of OES that is still in developmental support (per the life cycle), you can also contact support for further assistance in trouble shooting and identifying the root cause.

Cause

The NCP and NSS list of trustees are out of sync.