manualshive.com logo in svg

Novell ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE STRUCTURE, Руководство системного администратора

Novell ZENworks 10 Configuration Management SP3 - Network Discovery Database Structure - это системное руководство для администраторов системы, которое поможет в настройке и управлении сетевыми ресурсами. Скачайте бесплатное руководство по системному администрированию с нашего сайта manualshive.com.

Поделиться
Скачать
background image

User Authentication

275

n

ov

do

cx (e

n)

  16
 Ap
ril 20

10

Extending the eDirectory Schema to enable Shared Secret Authentication

To authenticate in to ZENworks by using Shared Secret authentication mechanism, the schema of 
the eDirectory specified when the user source is added must have been extended using novell-
zenworks-configure tool.

Perform the following steps to extend the eDirectory schema:

1

Run the 

novell-zenworks-configure

 utility on a ZENworks Server:

On Windows:  

At the command prompt, change to 

ZENworks_installation_path\bin

 and 

enter the following command:

novell-zenworks-configure.bat -c ExtendSchemaForSmartCard

On Linux:  

At the console prompt, change to 

/opt/novell/zenworks/bin 

 and enter the 

following command:

./novell-zenworks-configure -c ExtendSchemaForSmartCard

2

You are prompted to continue with the action of extending the Novell eDirectory schema and 
adding an optional zcmSharedSecret attribute to the user class. By default, 1 is selected. Press 
Enter. 

3

Enter the DNS name or IP address of the Novell eDirectory server to extend the schema.

4

You are prompted to select Secure Socket Layer (SSL) or Clear Text communication for 
communicating with the eDirectory server. Enter 1 for SSL communication or 2 for Clear Text 
Communication, then press 

Enter

 again.

5

Enter the port for communicating with the eDirectory server. 
The default port for SSL communication is 636 and for Clear Text communication is 389.

6

Enter the fully distinguished name (FDN) of the Administrative User. 
For example, cn=admin,o=organization

7

Enter the password for the Administrative User specified in 

Step 6

.

8

(Optional) Enter the fully distinguished name for the ZENworks user source admin for whom 
the ACL would be applied.
The ZENworks user source admin is configured as a user in the ZENworks user source 
configuration for reading users from the user source and need not be the Administrative User 
specified in 

Step 6

. If you specify the fully distinguished name of this user, the program sets 

ACLs at the specified containers to provide read access to zcmSharedSecret attribute for this 
user. 

9

Enter the user containers for which you want to extend the schema.
 Multiple containers can be given separated by + sign. For example, o=sales or o=sales + 
o=marketing.

10

Press 

Enter

 to generate random secret for all the users within the above containers. 

11

(Conditional) If you have chosen SSL communication for communicating with the eDirectory 
server, the server presents a certificate. Enter 

y

 to accept the certificate.

Содержание ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE STRUCTURE

Страница 1: ...l com novdocx en 16 April 2010 AUTHORIZED DOCUMENTATION ZENworks 10 Configuration Management System Administration Reference ZENworks 10 Configuration Management SP3 10 3 April 16 2010 System Administ...

Страница 2: ...nd the trade laws of other countries You agree to comply with all export control regulations and to obtain any required licenses or classification to export re export or import deliverables You agree...

Страница 3: ...Trademarks For Novell trademarks see the Novell Trademark and Service Mark list http www novell com company legal trademarks tmlist html Third Party Materials All third party trademarks are the prope...

Страница 4: ...4 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 5: ...ors 29 2 1 4 Changing Administrator Passwords 29 2 2 Managing Administrator Rights 30 2 2 1 Assigning Super Administrator Rights 30 2 2 2 Assigning Additional Rights 30 2 2 3 Modifying Assigned Rights...

Страница 6: ...Creating a Folder for Credentials 66 5 3 Assigning Credential Rights 67 5 4 Editing a Credential 68 5 5 Renaming a Credential 68 5 6 Moving a Credential to Another Folder 68 5 7 Removing a Credential...

Страница 7: ...10 Refreshing a Satellite 92 7 11 Troubleshooting Satellites 92 8 Server Hierarchy 95 8 1 Primary Servers Peer Versus Parent Child Relationships 95 8 2 Satellite Role Relationships 95 8 2 1 Authentica...

Страница 8: ...gs after Deployment 145 14 1 Configuring Agent Settings on the Management Zone Level 145 14 2 Configuring Agent Settings on the Device Folder Level 147 14 3 Configuring Agent Settings on the Device Le...

Страница 9: ...nstalling the PRU 194 21 4 Canceling or Deleting a System Update 195 22 Deploying Updates 197 22 1 Understanding Deploying Updates 197 22 2 Deploying Updates 199 22 3 Starting a Pending Stage 206 22 4...

Страница 10: ...ory on a Windows Server 237 28 2 Changing the Location of the Content Repository on a Linux Server 239 28 2 1 Mounting a Share 239 28 2 2 Unmounting a Share 240 28 2 3 Creating a Permanent Mount 240 2...

Страница 11: ...o Define Additional LDAP Servers for a ZENworks Server 269 31 6 2 Using the zman Command Line Utility to Define Additional LDAP Servers for a ZENworks Server 270 32 User Authentication 271 32 1 User S...

Страница 12: ...3 35 1 Backing Up the External Sybase Database 313 35 1 1 Backing Up the External Sybase Database on a Windows or Linux Server 313 35 1 2 Backing up the External Sybase Database Running on a Windows S...

Страница 13: ...ing Messages 349 39 1 Understanding Message Formats 349 39 1 1 Local Log File Format 349 39 1 2 E Mail Format 350 39 1 3 SNMP Message Format 350 39 1 4 UDP Payload Format 351 39 2 Viewing the Message...

Страница 14: ...l 2010 C Customizing the Look and Feel of the ZENworks Icon 369 C 1 Replacing the Default ZENworks Icons with the New Customized Icons 369 C 2 Replacing the Customized Icons with the Default ZENworks...

Страница 15: ...63 Appendix C Customizing the Look and Feel of the ZENworks Icon on page 369 Appendix D Documentation Updates on page 371 Audience This guide is intended for ZENworks administrators Feedback We want t...

Страница 16: ...ovell trademark An asterisk denotes a third party trademark When a single pathname can be written with a backslash for some platforms or a forward slash for other platforms the pathname is presented w...

Страница 17: ...about using ZENworks Control Center ZCC to configure system settings and perform management tasks in your Management Zone Chapter 1 ZENworks Control Center on page 19 Chapter 2 Administrators on page...

Страница 18: ...18 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 19: ...e Config xml File to Modify ZENworks Control Center Settings on page 23 Section 1 7 Bookmarking ZENworks Control Center Locations on page 24 Section 1 8 Troubleshooting ZENworks Control Center on page...

Страница 20: ...onfiguration Management includes a Novell plug in module npm that you can use to access ZENworks Control Center from Novell iManager which is a management console used by many Novell products The ZENw...

Страница 21: ...bjects The Frequently Used list in the left pane displays the 10 objects that you have accessed most often from most used to least used Clicking an object takes you directly to the details page for th...

Страница 22: ...amodel zdm xml 2 Add the following lines to the file entry key allowedLoginAttempts 5 entry entry key lockedOutTime 300 entry The 5 in this example represents the number of retries before disabling lo...

Страница 23: ...le Therefore changes made in this file are not lost when the config xml file is overwritten during software updates or upgrades The custom config xml file is located in the same directory as the confi...

Страница 24: ...This setting is not functional at this time To manually suppress the page open the ZENworks Control Center display the Getting Started page then select Do not show me this again noQuickTaskAutoRefres...

Страница 25: ...URL as a new bookmark in your Web browser 1 8 Troubleshooting ZENworks Control Center An HTTP request is not redirected to HTTPS if IIS is running on the Primary Server on page 25 An HTTP request is...

Страница 26: ...26 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 27: ...r Rights on page 30 If you need any further help contact Novell Support http www novell com support In some cases you might have multiple administrator accounts that require the same administrative ri...

Страница 28: ...dialog box The Add New Administrator dialog box lets you create a new administrator account by providing a name and password or you can create a new administrator based on an existing user in the user...

Страница 29: ...strator account For more information see Administrator Commands in the ZENworks 10 Configuration Management Command Line Utilities Reference 2 1 2 Deleting Administrators 1 In ZENworks Control Center...

Страница 30: ...ng Assigned Rights on page 31 2 2 1 Assigning Super Administrator Rights A Super Administrator has all rights to perform all actions in ZENworks Control Center For more information about all of the ri...

Страница 31: ...es Or you could create an administrator account that allows access to all management tasks except those pertaining to Management Zone configuration user sources registration configuration settings and...

Страница 32: ...17 User Rights on page 40 Section 2 3 18 ZENworks User Group Rights on page 41 Section 2 3 19 Zone Rights on page 41 2 3 1 Administrator Rights The Administrator Rights dialog box lets you allow the s...

Страница 33: ...folders Modify Settings Allow or deny the administrator the rights necessary to modify settings Assign Bundles Allow or deny the administrator the rights necessary to assign bundles to the devices or...

Страница 34: ...or delete credentials Modify Folders Allow or deny the administrator the rights necessary to modify folders Create Delete Folders Allow or deny the administrator the rights necessary to create or dele...

Страница 35: ...ry to modify the list of devices contained in device groups Modify Folder Allow or deny the administrator the rights necessary to modify folders Create Delete Folders Allow or deny the administrator t...

Страница 36: ...modify the rights associated with those folders Contexts on page 36 Privileges on page 36 Contexts To select the folder that contains the inventoried devices for which you want to assign rights click...

Страница 37: ...icense components associated with the contexts folders you selected in the Contexts section Modify Allow or deny the administrator the rights necessary to modify the licenses Create Delete Allow or de...

Страница 38: ...the policies for which you want to assign rights click Add to display the Contexts dialog box then browse for and select the folders for which you want to assign rights Privileges The Privileges sect...

Страница 39: ...xts section The following rights are available Shutdown Reboot Wake Up Devices Specify whether the administrator can shut down reboot or wake up the devices in the folders you selected in the list Exe...

Страница 40: ...xecute Allow or deny the administrator the rights necessary to remotely execute processes on devices Remote Diagnostics Allow or deny the administrator the rights necessary to perform remote diagnosti...

Страница 41: ...rks group membership If you select this option you must also grant rights to Modify ZENworks Group Membership under User Rights Assign Policies Allow or deny the administrator the rights necessary to...

Страница 42: ...elete ZENworks Server Refresh Device Configure Registration Allow or deny the administrator the rights necessary to configure device registration Registration lets you manage the various configuration...

Страница 43: ...oles Panel on page 43 Role Settings Page on page 44 Administrator Settings Page on page 45 Roles Panel The Roles panel displays the following information Figure 2 1 Roles Panel Name You specified this...

Страница 44: ...nformation Figure 2 2 Role Settings Page General panel Displays the ZENworks Control Center object type Role its GUID and a description that you can edit here Rights panel Displays the ZENworks Contro...

Страница 45: ...or the role Rights panel Lists the rights that are assigned to the administrator independent of rights granted or denied by any roles assigned to the administrator The rights listed in this panel over...

Страница 46: ...e novdocx en 16 April 2010 2 Specify a name and description for the role 3 To configure the rights for the role click Add and select a rights type from the drop down list 4 In the following dialog box...

Страница 47: ...ators see Section 2 4 3 Assigning Roles on page 47 2 4 3 Assigning Roles You can assign roles to administrators or administrators to roles Assigning Roles to Administrators on page 47 Assigning Admini...

Страница 48: ...48 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010 2 In the Assigned Roles panel click Add to display the Select Role dialog box...

Страница 49: ...Select Context dialog box click Add and browse for a ZENworks Control Center context While browsing you can select multiple contexts in the Browse dialog box 4c When you are finished selecting the co...

Страница 50: ...50 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010 2 In the Assigned Administrators panel click Add to display the Select Administrator dialog box...

Страница 51: ...click a role type Role types that are designated with the Zone context are not clickable because they are generally available 4b In the subsequent Select Context dialog box click Add and browse for a...

Страница 52: ...vilege select whether it should be allowed denied or left unset The most restrictive right set in ZENworks prevails If you select the Deny option the right is denied for any administrator assigned to...

Страница 53: ...ails If you select the Deny option the right is denied for any administrator assigned to that role even if the administrator is granted that right elsewhere in ZENworks If you select the Allow option...

Страница 54: ...select the check box for the role to be renamed 2 Click Edit Rename to open the Rename Role dialog box 3 Specify the new role name then click OK 2 4 6 Deleting a Role When you delete a role its rights...

Страница 55: ...or downloading the news Section 3 1 Managing ZENworks News Alerts on page 55 Section 3 2 Configuring ZENworks News Settings on page 56 3 1 Managing ZENworks News Alerts Figure 3 1 ZENworks News Alerts...

Страница 56: ...to display all the news alerts based on the selected category 3 1 4 Viewing the News 1 In ZENworks Control Center click Home 2 In ZENworks News Alerts panel click the news alert to display the news in...

Страница 57: ...Dedicated News Server 1 In ZENworks Control Center click Configuration in the left pane 2 On the Configuration tab expand the Management Zone Settings section if necessary click Infrastructure Managem...

Страница 58: ...Schedule Type field select No Schedule click Apply to save the schedule change then skip to Step 6 With this option selected you must download the news updates manually For more information see Updat...

Страница 59: ...aved state such as when you last clicked Apply or OK 5e When you have finished configuring the recurring schedule click Apply to save the schedule change 6 To exit this page click OK when you are fini...

Страница 60: ...60 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 61: ...on that file During the creation process you can specify the full path to the file for example C Program Files OpenOffice org 2 0 program setup ini Instead of specifying the entire path and filename y...

Страница 62: ...to contain the devices in the accounting department You can set the value for the ProgramFiles variable to D program files on the Accounting Department device folder level When the same bundle is appl...

Страница 63: ...he check box next to the variable or variables 5 Click Remove 6 Click Apply 4 4 Editing System Variables 1 In ZENworks Control Center click the Configuration tab 2 In the Management Zone Settings list...

Страница 64: ...64 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 65: ...can use ZENworks Control Center or the zman command line utility to manage credentials The procedures in this section explain how to manage credentials by using ZENworks Control Center If you prefer t...

Страница 66: ...Vault panel click New Credential to display the Add Credential dialog box 3 Fill in the fields If you need help click the Help button 5 2 Creating a Folder for Credentials 1 In ZENworks Control Cente...

Страница 67: ...lder field click to browse for and select the folder where you want the new folder created 5 Type a description for the new folder if desired 6 Click OK to create the folder 5 3 Assigning Credential R...

Страница 68: ...a Credential 1 In ZENworks Control Center click the Configuration tab 2 In the Credential Vault panel select the check box next to the credential 3 Click Edit Rename 4 Type the new name for the creden...

Страница 69: ...about configuring the ZENworks Servers and Satellite devices Chapter 6 ZENworks Server on page 71 Chapter 7 Satellites on page 79 Chapter 8 Server Hierarchy on page 95 Chapter 9 Closest Server Rules...

Страница 70: ...70 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 71: ...s Server Reports on page 77 6 1 ZENworks Services on a Windows Server When it is running on a Windows server a ZENworks Server includes the services listed in the following table All services are alwa...

Страница 72: ...restart the services ensure that your server hardware meets the ZENworks minimum requirements If the server does not have adequate RAM ZENworks services might not continue running For more information...

Страница 73: ...FTP Service novell tftp Used by PXE enabled devices to request files that are needed to perform imaging tasks ZENworks Agent Service novell zmd Used to enable the server as a managed device ZENworks D...

Страница 74: ...prompt opt novell zenworks bin novell zenworks configure c Start By default the Start option is selected 2 Press Enter The ZENworks services start when the ZENworks Server is booted and should not nor...

Страница 75: ...ge 75 6 3 1 Addressing Non Detectable IP Address Conditions The Non Detectable IP Addresses panel lets you specify the addresses that can be used to access the ZENworks Server when the server s IP add...

Страница 76: ...rs in your Management Zone To see ZENworks version information for a specific Primary Server in your Management Zone 1 In ZENworks Control Center click the Devices tab 2 Click Servers then click the d...

Страница 77: ...lained in Deleting Devices from Your ZENworks System in the ZENworks 10 Configuration Management Discovery Deployment and Retirement Reference To remove a ZENworks Primary Server from your Management...

Страница 78: ...78 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 79: ...or Windows 2000 You might for example create a Satellite in a location across a slow WAN link and create Closest Server rules to offload one or more roles from the Primary Server to the newly created...

Страница 80: ...source to provide failover When a managed device uses a Satellite for authentication the Satellite issues a certificate to the managed device so that it can authenticate to the Management Zone using...

Страница 81: ...s the same content delivery service as a Primary Server but requires only the Content role module that is installed with the ZENworks Adaptive Agent The module is inactive until you enable it on the m...

Страница 82: ...n the Server Hierarchy panel select the check box next to the Satellite that you want to configure click Action then click Configure Satellite Server You can only configure one Satellite at a time or...

Страница 83: ...ed devices Make sure that the specified port is not in use 6 Click OK to save your changes and exit the dialog box 7 Repeat the previous steps to configure other Satellites 7 2 1 Authentication Role T...

Страница 84: ...nd policy and bundle statuses then rolls that information up to its parent Primary Server which in turn either writes to the database directly or passes the information to its parent Primary Server wh...

Страница 85: ...he time period during which an update can start If you select Days of the Week or Month and set a random start and end time the update starts between these times and continues for the specified durati...

Страница 86: ...Configure 2 Conditional Select the check box next to Enable PXE Services to automatically start the Proxy DHCP service on the device to which the Imaging Server role has been assigned To check whether...

Страница 87: ...ts child Satellite Be aware that the cleanup action for content occurs every night at midnight If you do not set a schedule the Default schedule applies to the Imaging content 5d Click OK to save the...

Страница 88: ...check box next to the Satellite from which you want to remove the role 3 Click Actions Configure Satellite Server 4 In the Configure Satellite Server dialog box deselect the check box next to the Sate...

Страница 89: ...r content from their parent Primary Servers any content that you want hosted on a Satellite must also be hosted on its parent Primary Server You can specify the content that is included or excluded on...

Страница 90: ...g content from the content repository see the zman satellite server export content ssec command under Satellite Commands in the ZENworks 10 Configuration Management Command Line Utilities Reference Af...

Страница 91: ...content repo directory in that path If you need to save the content that is now in this directory rename the existing directory and create a new empty directory named content repo You can later copy...

Страница 92: ...tions take place immediately 1 Select the check box next to the Satellite that you want to refresh 2 Click Action Refresh Device The QuickTask Status box is displayed while the action is in progress 3...

Страница 93: ...llite Commands in the ZENworks 10 Configuration Management Command Line Utilities Reference The managed device is not promoted to the Imaging Satellite role even though the role has been assigned to i...

Страница 94: ...urce ZENworks 10 Configuration Management Satellite Explanation If ZENworks database is running on Oracle and the Content Replication schedule for a satellite is set to No Schedule you would encounter...

Страница 95: ...e direct write access to the database However you should try to maintain peer relationships between your Primary Servers unless your network connections do not allow it Being in a child relationship i...

Страница 96: ...naged device to collect inventory information messages errors warning informational and so forth and policy and bundle statuses then rolls that information up to its parent Primary Server which in tur...

Страница 97: ...laces the Primary Server back to the first level of the hierarchy or moves it to be a child of another Primary Server if it is nested more than one level deep If you move a Primary Server back to the...

Страница 98: ...98 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 99: ...structions for setting up Closest Server rules Section 9 1 Understanding Closest Server Rules on page 99 Section 9 2 Configuring the Closest Server Default Rule on page 101 Section 9 3 Creating Closes...

Страница 100: ...on 9 1 2 Mapping Devices to Servers A Closest Server rule maps devices with specific network addresses to the following lists Collection Server list Content Server list Configuration Server list Authe...

Страница 101: ...lies apply the default rule to the device The Default rule is simply a listing of all content servers in the order you want devices to contact them 9 2 Configuring the Closest Server Default Rule The...

Страница 102: ...lick the Configuration tab click Infrastructure Management in the Management Zone Settings panel then click Closest Server Default Rule 2 To configure the servers listed in the any section do any of t...

Страница 103: ...o manage server groups in any of the server lists Collection Content Configuration and Authentication Task Steps Additional Details Reorder the list 1 In the desired server list select the check box f...

Страница 104: ...group later using the Groups Add to Group option 2 Specify a name for the group then click OK to add the group to the list 3 Click Apply to make the change effective Add servers to a group 1 In the d...

Страница 105: ...ver2 Copy a group from one list to another list 1 In the server list to which you want to copy a group click Groups Copy Existing Group For example to copy a group from the Collection Servers list to...

Страница 106: ...ocx en 16 April 2010 Remove a group 1 In the server list select the check box for the group you want to remove 2 Click Groups Remove Group then click OK 3 Click Apply to make the change effective The...

Страница 107: ...u can add servers to the empty definition later using the L4 Switch Add to L4 Switch Definition option 2 Specify the DNS name or the IP address of the L4 switch then click OK to add the L4 switch to t...

Страница 108: ...s in the lists differently This allows you to spread the workload initiated by devices by placing different servers higher in one list than in the other lists For example Collection Servers Server1 Gr...

Страница 109: ...open the device s details page then click Settings Infrastructure Management in the Settings panel Closest Server Rules 3 Conditional If you are creating Closest Server rules on a device or device fo...

Страница 110: ...For example DNS Name Filter equal to novell com DNS Name Filter is the criteria option equal to is the operator and novell com is the value In the above example the Closest Server rule is applied onl...

Страница 111: ...Collection Content Configuration or Authentication click Add 2 Browse for and select one or more ZENworks Servers or Satellites 3 Click OK to add the selected servers to the list By default ZENworks...

Страница 112: ...server lists Collection Content Configuration and Authentication Reorder the list 1 In the desired server list select the check box for the server group or L4 switch you want to move 2 Click Move Up...

Страница 113: ...roups Add to Group option 2 Specify a name for the group then click OK to add the group to the list 3 Click Apply to make the change effective Add servers to a group 1 In the desired server list selec...

Страница 114: ...p1 L4Switch5 Server1 Server2 Copy a group from one list to another list 1 In the server list to which you want to copy a group click Groups Copy Existing Group For example to copy a group from the Col...

Страница 115: ...ange effective The group s servers are not removed only the group Task Steps Additional Details Create an L4 switch definition 1 In the server list select the check boxes for the servers to include in...

Страница 116: ...nge effective Reorder the list 1 In the desired server list select the check box for the server group or L4 switch you want to move 2 Click Move Up or Move Down as necessary to change its order in the...

Страница 117: ...vices or device folders location export rules to file loctf Exports Closest Server rules data in XML format to a file The XML file can be used as input for creating or appending to the Closest Server...

Страница 118: ...118 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 119: ...ry Server in the Management Zone If you have two or more Primary Servers and you ve replicated all content to both servers they serve as backup copies to each other The ZENworks database if it resides...

Страница 120: ...1 Backing Up a ZENworks Server on page 119 If the ZENworks database resides on the ZENworks Server you have a backup of the database See Section 34 3 Backing Up the Embedded Sybase SQL Anywhere Databa...

Страница 121: ...work content repo images directory on a Windows server or the var opt novell zenworks content repo images directory on a Linux server 8 Restart the ZENworks Server 10 3 Backing Up the Certificate Auth...

Страница 122: ...the CaConfig xml file which is located in ZENworks_installation_directory conf security directory on Windows and in the etc opt novell zenworks security directory on Linux to ensure that the Keystore...

Страница 123: ...irst Primary Server and the second Primary Server must have the same version of the ZENworks 10 Configuration Management installed NOTE This scenario has been tested on the following platform combinat...

Страница 124: ...s Image field click The Server and Path Information dialog box is displayed 3f In the Server Object IP or DNS field click to browse for and select the second Primary Server 3g In the File Path on Serv...

Страница 125: ...Click OK twice 7 Refresh all the devices Primary Serves Satellites and managed devices in the Management Zone so that they get the new closest server rules 8 Conditional Move the database to another...

Страница 126: ...ining Data Moved from Another Oracle Database on page 328 9 Remove all Satellites under the first Primary Server from the Server Hierarchy For more information on how to remove the Satellites from the...

Страница 127: ...e Embedded Sybase SQL Anywhere Database on page 295 To take a backup of an external database see the documentation for the database 4 Stop all the ZENworks services on the Primary Server For detailed...

Страница 128: ...imary Server after Installing ZENworks 10 Configuration Management on page 132 Section 11 3 3 Changing the DNS Name or the IP Address and DNS Name of the Primary Server after Installing ZENworks 10 Co...

Страница 129: ...n all the Primary Servers in the Management zone whose certificate you want to change 1 Reconfigure the certificates on the Primary Server whose IP address and DNS name you changed in Step 2 by enteri...

Страница 130: ...the server s command prompt enter the following command novell zenworks configure c RebuildCustomPacks Z Replacing the Existing Certificate with the New External Certificate on the Satellites Perform...

Страница 131: ...included in the Closest Server rule reconfigure the Closest Server rule to include the Satellite 1 In the default Closest Server rule ensure that device has been correctly placed in the Authenticatio...

Страница 132: ...by default in the ZENworks_installation_directory work directory on Windows and in the var opt novell zenworks on Linux Ensure that the images directory located within the content repo directory has...

Страница 133: ...e DNS and DHCP servers are configured on the same device 1 Before changing the IP address of the Primary Server take a reliable backup of the following on all the Primary Servers in the Management Zon...

Страница 134: ...on page 135 3 Replacing the Existing Certificate with the New External Certificate on the Managed Devices on page 136 Replacing the Existing Certificate with the New External Certificate on the Primar...

Страница 135: ...the ZENworks cache by running the zac cc command 9 Restart the ZENworks Adaptive Agent Service 10 Re create all the default and custom deployment packages Default Deployment Packages At the server s c...

Страница 136: ...tion about zac view the zac man page man zac on the device or see zac 1 in the ZENworks 10 Configuration Management Command Line Utilities Reference 6c Add the Authentication role to the device For mo...

Страница 137: ...works_installation_directory Novell ZENworks cache zmd s 3 Restart the ZENworks Adaptive Agent Service 4 Run the following command to register the device in the Management Zone zac reg https ZENworks_...

Страница 138: ...138 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 139: ...y and device messages Each of these services is provided through the use of modules that plug in to the Adaptive Agent Using ZENworks Control Center you can configure which modules are active on devic...

Страница 140: ...140 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 141: ...ns to view the Adaptive Agent software version on a workstation 3 Click the underlined link for the desired device 4 In the General section view the version in the ZENworks Agent Version row 5 Optiona...

Страница 142: ...142 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 143: ...stalled 1 Depending on whether you want to search for all devices servers and workstations for servers or for workstations that have the specified version of the Adaptive Agent installed do one of the...

Страница 144: ...144 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 145: ...ment Zone The setting applies to all devices in the Management Zone Device Folder The setting applies to all devices contained within the folder or its subfolders It overrides the Management Zone sett...

Страница 146: ...ation Management System Administration Reference novdocx en 16 April 2010 3 Click ZENworks Agent 4 Fill in the fields For more information see Section 14 4 ZENworks Agent Settings on page 148 5 Click...

Страница 147: ...gure settings 4 Click the Settings tab click Device Management then click ZENworks Agent 5 Fill in the fields For more information see Section 14 4 ZENworks Agent Settings on page 148 6 Click OK to ap...

Страница 148: ...s on a device folder or a device click Override settings The following settings can be configured Allow Users to Uninstall Agent Enable this option if you want users to be able to uninstall the ZENwor...

Страница 149: ...sed on July 1 at 10 00 a m Without the default Cache Orphaning Threshold setting 30 days the entry becomes an orphan if it is not accessed again before July 31 at 10 00 a m A higher Cache Orphaning Th...

Страница 150: ...pted that the ZENworks 7 Desktop Management Agent will be uninstalled Ensure that you enable only the Asset Management feature if you want to use ZENworks 10 Asset Management and you want to continue...

Страница 151: ...might require a reboot of the device when installing or uninstalling the module If a reboot is required during install the module does not function until the reboot occurs If a reboot is required dur...

Страница 152: ...bundle or Directive bundle related zac commands If you disable the Bundle Management module when a bundle is being applied to the device the module is disabled after the bundle is applied and the dev...

Страница 153: ...d but it is not uninstalled on the Windows Vista Windows 2008 Windows 7 and Windows 2008 R2 managed devices The icon properties page displays the status of Image Management as Disabled novell ziswin i...

Страница 154: ...abled The patch bundles that are assigned to the device are not displayed in the NAL window or in the shortcut locations such as Desktop Start Menu Quick Launch or System Tray of the device You cannot...

Страница 155: ...running a Dynamic Local User DLU policy the module is disabled after the device is rebooted The Policy Management service is uninstalled from the device The icon properties page does not display an e...

Страница 156: ...is stopped and disabled on the device The icon properties page displays the Remote Management status as Disabled The Remote Management policy is unenforced from the device The device cannot be remote...

Страница 157: ...vice The bundle settings apply only to the device for which they are configured The following sections contain more information Section 15 1 Configuring ZENworks Explorer Settings on the Management Zo...

Страница 158: ...lorer Settings on the Device Folder Level 1 In ZENworks Control Center click the Devices tab 2 Click the Servers or Workstations folder 3 Click Details next to the folder for which you want to configu...

Страница 159: ...tab 2 Click the Servers or Workstations folder 3 Click the device for which you want to configure settings 4 Click the Settings tab click the Content tab then click ZENworks Explorer Configuration 5...

Страница 160: ...stalled after it is no longer assigned to a device or the device s user If you choose to uninstall the bundle select the number of days to wait before uninstalling the application Specify 0 if you wan...

Страница 161: ...an IP based discovery is performed on the device To remove the ZENworks Pre Agent from a device after ZENworks has been uninstalled from the device perform the following steps 1 Delete the directory n...

Страница 162: ...162 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 163: ...e Agent that resides on managed devices including whether a dialog box displays on managed devices prompting users to allow the system update or a required boot after a system update is applied and wh...

Страница 164: ...164 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 165: ...ive Agent Explanation When you promote a device to Satellite through ZENworks Control Center the configured Satellite role is added to the device However when you double click the icon the Satellite m...

Страница 166: ...to the new name for NWGina dll 3 Reboot the server Install Novell Client NOTE This needs to be done only once The ZENworks Adaptive Agent Policies page does not display the correct status for the DLU...

Страница 167: ...ches 1 Open the Registry Editor 2 Go to HKLM Software Novell ZENworks 3 To enable batch refreshes create a DWORD called EnableBatchRefresh and set the value to 1 By default there are 5 sessions in a b...

Страница 168: ...168 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 169: ...tic downloads of the updates Chapter 19 Introduction to ZENworks System Updates on page 171 Chapter 20 Configuring Updates on page 173 Chapter 21 Managing Update Downloads on page 191 Chapter 22 Deplo...

Страница 170: ...170 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 171: ...u can apply the update for version 10 0 4 You can also download the latest Product Recognition Update PRU to update your knowledgebase so that Inventory can recognize newer software When you select to...

Страница 172: ...172 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010 Chapter 24 Reviewing the Content of an Update on page 215 Chapter 25 Update Statuses on page 219...

Страница 173: ...can check for software updates is to do so manually in the Available System Updates panel on the System Updates tab You can specify how often you want to check for updates When you do this informatio...

Страница 174: ...checking for updates to your ZENworks software click the down arrow in the Schedule Type field then select Recurring 5 Fill in the fields 5a Select one or more check boxes for the days of the week 5b...

Страница 175: ...trol Center click Configuration in the left pane then click the Configuration tab 2 Click Management Zone Settings to expand its options click Infrastructure Management to expand its options then sele...

Страница 176: ...s immediately after the server comes back online Use Coordinated Universal Time Causes the schedule to interpret the times you specify as UTC instead of local time Start at a Random Time Between Start...

Страница 177: ...ly With Notification Advance To Next Stage and Notify When Complete SMTP must be configured in order for the staging e mail configuration to work 3 Conditional If you do not have SMTP configured 3a To...

Страница 178: ...ke the changes effective 6 Either click OK to close the page or continue with another configuration task If you did not click Apply to make your changes effective clicking OK does so Clicking Cancel a...

Страница 179: ...one ZENworks Server to be dedicated to handling your update downloads The server that you select should have access to the Internet directly or through a proxy server The following sections contain m...

Страница 180: ...time such as to a test group first then to your managed devices If a failure occurs during the update process the process is halted E mail notifications can let you know when each stage has completed...

Страница 181: ...gs panel if necessary click Infrastructure Management then click System Update Settings to display the Reboot Behavior panel 3 Select one of the following options Prompt User to Reboot When Update Fin...

Страница 182: ...with stages Set them up for different devices or groups such as for a test group specific devices or device groups or all managed devices in the zone Modify an existing stage s membership Change the...

Страница 183: ...al Displays the order in which the stages run You can rearrange the staging order by using the Move Up and Move Down options For more information see Rearranging the Order in Which Stages Start on pag...

Страница 184: ...lied a request to reboot is immediately displayed If the user initially rejects rebooting the user is periodically requested to reboot the device until the device is rebooted Do Not Reboot Device The...

Страница 185: ...dating any of the other managed servers and especially before updating any managed workstations 4c Repeat Step 4b until you are finished adding members to the stage 4d To add members to another stage...

Страница 186: ...2 4 Modifying Staging Behavior The default stage behavior is to automatically advance through the configured stages You can change this default behavior If you change the staging behavior for one stag...

Страница 187: ...click the System Updates tab 2 In the Deployment Stages panel select the check box for one or more the deployment stages click Action then click Modify Reboot Behavior 3 Select one of the following op...

Страница 188: ...before updating any managed workstations 2c Repeat Step 2b until you are finished adding members to the stage 2d To add members to another stage repeat Step 2a through Step 2c 3 Optional Remove devic...

Страница 189: ...overed 20 2 9 Rearranging the Order in Which Stages Start All updates that use stages deploy to the devices that are members of the stages according to the currently listed staging order To rearrange...

Страница 190: ...190 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 191: ...he following sections contain more information Section 21 1 Understanding Available Updates on page 191 Section 21 2 Downloading Updates on page 192 Section 21 3 Downloading and Installing the PRU on...

Страница 192: ...rrent status of the update which is automatically updated every 15 seconds For more information on the individual statuses see Chapter 25 Update Statuses on page 219 Importance Displays the relative i...

Страница 193: ...in the left pane then click the System Updates tab 2 In the Available System Updates panel click Action Check for Updates Any available updates are displayed with a status of Available 3 To re sort t...

Страница 194: ...e or Product Recognition Update PRU files from the Novell Downloads page http download novell com copy the files onto a CD or other media and then use the CD to import the files to a ZENworks Primary...

Страница 195: ...ted PRU then click Action Download Update 4 To install a downloaded PRU go to the Available System Updates panel then click Action Deploy PRU Now The PRU is now listed in the Deploying System Updates...

Страница 196: ...resume after reconnecting Attempting to use the Cancel Download action results in the update hanging in the Cancel state Use the zman sudu force command to delete the update To delete an update 1 In...

Страница 197: ...environment You can schedule the deployment Deploy the update to specific devices selected individually and by device groups without using deployment stages You can use this option to test the update...

Страница 198: ...e following reboot options Prompt User to Reboot When Update Finishes Applying After the update has been applied a request to reboot is immediately displayed If the user initially rejects rebooting th...

Страница 199: ...IED or BASELINE status the update deployment item is no longer displayed in this panel but is displayed in the Deployment History panel For more information see Section 22 8 Viewing Status by Device o...

Страница 200: ...Updates The following illustrates available updates 5 Optional To view the content of an available update click the name of the update in the Update Name column to display the Release Details page Fo...

Страница 201: ...7 Determine whether to deploy the downloaded update then select its check box You can deploy only one update at a time If you want to review the content of the update that you downloaded see Chapter 2...

Страница 202: ...ge containing the first Primary Server before deploying the update to other stages containing the remaining Primary Servers and managed devices Deploy System Updates to Selected Devices in the Managem...

Страница 203: ...ut user intervention if a reboot is required by the update Some updates do not require a device to be rebooted after they have been deployed to a device However if a reboot is required to complete the...

Страница 204: ...year on the start date Process Immediately if Device Unable to Execute on Schedule Do not use this option for updates It does not apply to updates Start Immediately at Start Time Lets you deploy updat...

Страница 205: ...a Linux device because these devices are not ZENworks managed devices and do not have the ZENworks icon The progress of downloading the update MSI files is displayed When it has finished the dialog bo...

Страница 206: ...nfiguration in the left pane then click the System Updates tab 2 In the Deploying System Updates panel select the check boxes for an update 3 Click Action Start Pending Stage 22 4 Rescheduling a Deplo...

Страница 207: ...s through stages for the other devices Therefore the status in the Available System Updates panel is changed to Ready if you cancel only the staged deployment Aborted if you cancel both the staged dep...

Страница 208: ...All Devices Lists all devices that were configured to receive the selected update regardless of status Pending Devices Lists only the devices where the selected update is pending Successful Devices Li...

Страница 209: ...ful or Failed column to display the appropriate Status by Device page For example if you click the link in the Pending column you see the status of devices on which the deployment is pending as in the...

Страница 210: ...ates panel click an underlined link in the Update Name Stage Pending Successful or Failed column to display the appropriate Status by Device page For example if you click the link in the Pending colum...

Страница 211: ...as a schedule of Now this option is not available 22 8 7 Refreshing Devices 1 In ZENworks Control Center click Configuration in the left pane then click the System Updates tab 2 In the Deploying Syste...

Страница 212: ...212 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 213: ...in the left pane then click the System Updates tab 2 In the Available System Updates panel select the check boxes for one or more updates 3 Click Action Delete Update The update is deleted from the li...

Страница 214: ...214 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 215: ...on Section 24 1 Viewing the Release Details Page on page 215 Section 24 2 Update Release Details on page 215 Section 24 3 Deployment History on page 216 24 1 Viewing the Release Details Page 1 In ZENw...

Страница 216: ...s content to your ZENworks installation Some possible entries OPTIONAL Not required for normal operation of ZENworks MANDATORY A required update that must be applied Description Brief information abou...

Страница 217: ...stage For more information on the individual statuses see Chapter 25 Update Statuses on page 219 Pending Displays the number of devices for which the update deployment process is pending A device can...

Страница 218: ...he devices where deployment was successful 1 In the Deployment Stages panel click the number in the Successful column 2 On the Status by Device page review the information Displays devices that have h...

Страница 219: ...ervers were rebuilt with the latest software In this version however the agent packages are rebuilt during the upgrade process of each individual Server Canceled Displays after you select Action Cance...

Страница 220: ...placed by another update listed in the Available System Updates section You should see this status only if you are in the process of deploying this update and there are pending devices You can delete...

Страница 221: ...an postpone the update five times NOTE Because this feature was added after localization for non English languages there is no translation available for the string required to indicate to the user tha...

Страница 222: ...nder HKEY_LOCAL_MACHINE Software Novell ZCM SystemUpdate using 0 to indicate the number of postpones remaining Reboot Prompt Timeout When an update is assigned with the Prompt User for Reboot option t...

Страница 223: ...April 2010 V Zone Administration This section contains information about Management Zone configuration settings that let you control a wide range of functionality for your Zone Chapter 27 Management...

Страница 224: ...224 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 225: ...ection 27 5 Event and Messaging Settings on page 230 Section 27 6 Infrastructure Management Settings on page 230 Section 27 7 Inventory Settings on page 231 Section 27 8 Reporting Services Settings on...

Страница 226: ...ging Settings on page 230 Infrastructure Management Settings on page 230 Inventory Settings on page 231 Reporting Services Settings on page 232 Asset Management Settings on page 232 Patch Management S...

Страница 227: ...page 230 Infrastructure Management Settings on page 230 Inventory Settings on page 231 Reporting Services Settings on page 232 Asset Management Settings on page 232 Patch Management Services Settings...

Страница 228: ...agement Settings on page 229 Discovery and Deployment Settings on page 230 Event and Messaging Settings on page 230 Infrastructure Management Settings on page 230 Inventory Settings on page 231 Report...

Страница 229: ...n ZENworks Control Center can be renamed as they update their registration information For more information see Registration resources help settings_registration html ZENworks Explorer Configuration C...

Страница 230: ...f discovery requests that can be running at one time and the technologies to use for the discovery You can also specify IP and SNMP settings used by the WMI Windows Management Instrumentation and SNMP...

Страница 231: ...the server and the schedule for downloading the ZENworks News For more information see ZENworks News Settings resources help settings_zenworksnews html 27 7 Inventory Settings The Inventory section c...

Страница 232: ...ENworks Control Center For more information see Folder Sync Schedule resources help cfg_report_foldersync html Reset the Passphrase of the ZENworks Reporting Server Allow the user to reset the Passphr...

Страница 233: ...ore information see Subscription Service Information resources help b9f6zcf html Configure HTTP Proxy Configure an HTTP proxy for access to Internet patch subscription The HTTP proxy server allows ZEN...

Страница 234: ...234 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 235: ...The set of rules that control a range of hardware and software configuration settings on managed devices Used in ZENworks Configuration Management Patches The files and instructions required to update...

Страница 236: ...236 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 237: ...tent repository to a different location The following sections provide instructions Section 28 1 Changing the Location of the Content Repository on a Windows Server on page 237 Section 28 2 Changing t...

Страница 238: ...If a driver letter is associated with the partition that you want to use as the new content repository location do the following 5a In the Computer Management dialog box right click the drive s parti...

Страница 239: ...ENworks requires that the ZENworks user has complete ownership rights on the directory to which you have created the symbolic link Run the following command to make the ZENworks user the owner of this...

Страница 240: ...vell zenworks content repo cifs credentials path_to_credentials_file 0 0 The credentials file listed in the command contains a username and password For more information see the mount cifs 8 man page...

Страница 241: ...oot user does not already exist smbpasswd a root For security reasons you must specify a root password that is different from the login password 7 Optional To test if the newly created share is access...

Страница 242: ...242 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 243: ...nd the setting is not configured directly on the bundle In other words the setting is not configured at the system level the folder level or the bundle level If the settings are configured at the syst...

Страница 244: ...vice set the Schedule Type to No Schedule For more information on setting the schedule type see Section 7 2 3 Content Role on page 84 Primary Server Output Throttling in KB Sec Select the throttling r...

Страница 245: ...nt Servers By default when a new content server ZENworks Server or Satellite devices is added to the zone all bundle and policy content is replicated to that content server You can however choose not...

Страница 246: ...g the content into a Satellite device s content repository see the zac cdp import content cic command under Content Distribution Commands in the ZENworks 10 Configuration Management Command Line Utili...

Страница 247: ...er without first excluding it from the Satellite devices If you have only one ZENworks Server in your Management Zone you can t exclude the content from it You can t include a Satellite devices withou...

Страница 248: ...ts content from the server As you include or exclude content from the server be aware of the following replication rules If a ZENworks Server is the parent server for one or more Satellite devices you...

Страница 249: ...you include or exclude content servers be aware of the following replication rules If a ZENworks Server is the parent server for one or more Satellite devices you can t exclude content from the ZENwo...

Страница 250: ...250 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 251: ...mine which content server a managed device uses to download content The Closest Server rules let you map devices to content servers based on network addresses DNS names and IP addresses For more infor...

Страница 252: ...each day If you want the blackout time period to extend for 24 hours select the same time as the start time 5 Click OK to save the blackout period 6 Repeat Step 4 to create additional blackout period...

Страница 253: ...If you want a device refreshed only when its user manually initiates the refresh select Manual Refresh then click Apply Users can initiate a refresh by clicking the ZENworks icon located in the deskt...

Страница 254: ...ays Hours and Minutes fields specify the amount of time between refreshes For example to set a refresh interval of 3 hours you would specify 0 Days 3 Hours 0 Minutes The default is 2 hours The Timed R...

Страница 255: ...nformation about connecting your ZENworks Management Zone to an authoritative user source Microsoft Active Directory or Novell eDirectoryTM and managing how users log in to the ZENworks Management Zon...

Страница 256: ...256 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 257: ...31 3 Managing User Source Connections on page 263 Section 31 4 Managing Primary Server Connections for User Sources on page 266 Section 31 5 Managing Authentication Server Connections for User Sources...

Страница 258: ...s on page 258 Section 31 2 2 Deleting User Sources on page 262 Section 31 2 3 Editing User Sources on page 262 Section 31 2 4 Adding a Container from a User Source on page 263 31 2 1 Adding User Sourc...

Страница 259: ...blishes the point in the directory where you can begin to browse for user containers Specifying a root context can enable you to browse less of the directory but it is optional If you don t specify a...

Страница 260: ...ectory specified in the Connection Information page is extended using the novell zenworks configure tool If Shared Secret is not selected as an authentication mechanism a ZENworks login dialog box is...

Страница 261: ...those users and groups you have two options You can add MyCompany EMEA as a user container so all containers located below EMEA are visible in ZENworks Control Center including the Servers and Servic...

Страница 262: ...the desired mechanisms then click OK For more information see Section 32 2 Authentication Mechanisms on page 272 Use SSL By default this option is enabled Click No to disable the option if the LDAP se...

Страница 263: ...Center The name cannot be the same as the name of any other user containers 4 Click OK to add the user container The container and its users and user groups is now available on the Users page 31 3 Man...

Страница 264: ...Port This field defaults to the standard SSL port 636 or non SSL port 389 depending on whether the user source uses SSL If your LDAP server is listening on a different port select that port number Ad...

Страница 265: ...ses SSL click the Update button to update the certificate if a new certificate exists 4 Click OK 31 3 3 Removing User Source Connections 1 In ZENworks Control Center click the Configuration tab 2 In t...

Страница 266: ...ource Connections dialog box 1 Optional In the Connection Name field specify all or part of the name for the connection to the LDAP directory then click Filter to display the list of connections that...

Страница 267: ...o an existing Satellite The following sections contain more information Section 31 5 1 Assigning a Connection to an Authentication Server on page 267 Section 31 5 2 Removing a Connection on page 268 S...

Страница 268: ...enter click the Configuration tab 2 In the User Sources panel click the name of a user source to display its details 3 In the Authentication Servers panel select the check box next to the server s nam...

Страница 269: ...ty to Define Additional LDAP Servers for a ZENworks Server on page 270 31 6 1 Using ZENworks Control Center to Define Additional LDAP Servers for a ZENworks Server 1 In ZENworks Control Center click t...

Страница 270: ...Line Utility to Define Additional LDAP Servers for a ZENworks Server To define additional LDAP servers for a ZENworks Server run the user source add connection usac command on the server For more info...

Страница 271: ...mple assume that a user has accounts in two eDirectory trees Tree1 and Tree2 Tree1 is defined as a user source in the Management Zone but Tree2 is not If the user logs in to Tree1 he or she is automat...

Страница 272: ...ory on page 276 32 2 1 Kerberos Active Directory only Kerberos an authentication protocol developed at MIT requires entities for example a user and a network service that need to communicate over an i...

Страница 273: ...a User Source You can enable Kerberos authentication while adding a user source For more information see Section 31 2 1 Adding User Sources on page 258 Enabling Kerberos Authentication on an Existing...

Страница 274: ...user uses a smart card to log in to eDirectory the user is automatically logged in to ZENworks provided the schema of the eDirectory specified when the user source is added has been extended using no...

Страница 275: ...cating with the eDirectory server Enter 1 for SSL communication or 2 for Clear Text Communication then press Enter again 5 Enter the port for communicating with the eDirectory server The default port...

Страница 276: ...rmation see Section 31 2 1 Adding User Sources on page 258 Enabling Username Password Authentication on an Existing User Source You can enable Username Password authentication on an existing user sour...

Страница 277: ...pdated in the CASA storage vault the next time the user logs in If you do run the CASA Manager you are prompted to install the GTK Library If you choose to install the library which is necessary to ru...

Страница 278: ...een on page 278 Unable to log in to the ZENworks Server on page 279 Large number of concurrent client logins might result in login failures on page 279 How do I enable debug logs on Windows 2003 Windo...

Страница 279: ...of concurrent client requests exceeds the value of Connector acceptCount the client connect requests might fail because the server is not able to accept these connections Action Increase the number of...

Страница 280: ...reshAsync and set the value to TRUE 4 Log in to the device again IMPORTANT If you change the login process to execute the device refresh asynchronously the latest policies might not be immediately ava...

Страница 281: ...user1 is logged in to the device instead of user2 because user1 appears first in the search performed by Novell CASA The settings assigned to user1 are applied on the device Action No two eDirectory u...

Страница 282: ...282 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 283: ...nsing VIII 283 novdocx en 16 April 2010 VIII ZENworks 10 Product Licensing This section contains information about evaluating activating and deactivating ZENworks products Chapter 33 ZENworks 10 Produ...

Страница 284: ...284 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 285: ...n 33 3 Activating a Product on page 286 Section 33 4 Deactivating a Product on page 286 Section 33 5 Possible License State Changes on page 287 Section 33 6 Using ZENworks 10 Asset Management with ZEN...

Страница 286: ...se Key then click Apply 6 Click OK For more information on license state changes see Section 33 5 Possible License State Changes on page 287 33 3 Activating a Product 1 Log in to the ZENworks Control...

Страница 287: ...oned from an evaluation state to deactivated state can be now moved to an active evaluation or extended evaluation state NOTE If you change the license state on a ZENworks Server it might take up to 3...

Страница 288: ...ports You must have installed ZENworks Reporting Server to view the predefined reports For more information on how to install ZENworks Reporting Server see the ZENworks 10 Configuration Management Rep...

Страница 289: ...ks Configuration Management and ZENworks Asset Management products installed on all the devices in your Management Zone You can view information such as the license status for the products the expirat...

Страница 290: ...290 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 291: ...up the ZENworks database on a regular basis However you can back up the server and the database in any order When restoring the ZENworks Server and the database you must first restore the ZENworks Ser...

Страница 292: ...292 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 293: ...that is bundled with ZENworks we recommend that you store the credentials of the database for future use 1 Retrieve the credentials of the embedded Sybase SQL Anywhere database by entering one of the...

Страница 294: ...d in zenworks_database conf the new number you specified in Step 1 On a Linux server In the opt novell zenworks share boe bobje odbc ini file change the value of TCP IP to the port number specified in...

Страница 295: ...immediately back up the embedded Sybase SQL Anywhere database or schedule the backup to run at a specific time To back up the embedded Sybase SQL Anywhere database immediately continue with Step 2 To...

Страница 296: ...s server as per the schedule in the c backupschedule sql file enter the following command zman database backup c dbbackup c backUpSchedule sql d DAYNAME now For more information about this command vie...

Страница 297: ...ated in Step 1a For example specify the user as Administrator and the password as novell 1f Click OK 2 Perform the following steps on the remote machine that has the network location where you want to...

Страница 298: ...d custom_directory_name is a name that you specify for a directory to be newly created by zman and into which the database files are to be backed up For more information about the command view the zma...

Страница 299: ...h the username created in Step 1a and set the password by using the passwd specify_the_password command 1c Create a directory to save the database backup For example create a directory with the name b...

Страница 300: ...URS A sample schedule file to back up the database at 1 00 a m on the first second third and fourth days of the month is as follows CREATE EVENT ZENDBBackup1 SCHEDULE START TIME 1 00 AM ON 1 2 3 4 Sam...

Страница 301: ...up the server and the database in any order For more information about backing up and restoring the ZENworks Server see Chapter 10 Backing Up and Restoring the ZENworks Server and Certificate Authorit...

Страница 302: ...g in to the ZENworks server as root 2 Change to opt novell zenworks bin and enter the following command ZenworksLinuxDBRestore sh F root dbBackup zenworks_zone_name db 3 Enter Y when the following mes...

Страница 303: ...ase database installed copy zenworks_database conf and all files within the database directory to the appropriate directories on the device that has the external Sybase database The zenworks_database...

Страница 304: ...he Data from an Embedded Sybase SQL Anywhere to an External Oracle Database ZENworks 10 Configuration Management allows you migrate the data from an internal Embedded Sybase SQL Anywhere database or a...

Страница 305: ...n utility uses only the USERS tablespace by default You cannot manually specify any other tablespace during the migration Make sure that the NLS_CHARACTERSET parameter is set to AL32UTF8 and the NLS_N...

Страница 306: ...trol Panel 2 Double click Administrative Tools Services 3 The status of the Novell ZENworks Embedded Datastore service must be Started On Linux At the console prompt enter etc init d sybase asa status...

Страница 307: ...r administrator s username and password 9 Enter the schema name when prompted for the database username 10 Enter the database schema password when prompted for the database user s password The databas...

Страница 308: ...e migration The database migration starts 10 After the database is successfully migrated continue with Section 34 6 3 Post Migration Tasks on page 308 34 6 3 Post Migration Tasks If there is only one...

Страница 309: ...s administrator account automatically created during installation uses an initial capital so in order to log in to ZENworks Control Center you must enter Administrator 34 6 4 Troubleshooting Database...

Страница 310: ...orks_installation_path bin novell zenworks configure bat file on Windows or opt novell zenworks bin novell zenworks configure on Linux 2 Follow the prompts When you are prompted to enter the location...

Страница 311: ...ubleshooting the Database Migration by Using An Existing User Schema If you choose to migrate the database by using an existing user schema the database migration utility creates the ZENworks database...

Страница 312: ...ministrative Tools Services 3 Start the following services Novell ZENworks Server Novell ZENworks Services Monitor and Novell ZENworks Agent Service On Linux At the console prompt enter the following...

Страница 313: ...ENworks 10 Configuration Management installation media you can back it up to a directory on the local machine or to a network location Section 35 1 1 Backing Up the External Sybase Database on a Windo...

Страница 314: ...ectory execute the following query BACKUP DATABASE DIRECTORY root dbBackup TRANSACTION LOG TRUNCATE You must manually archive the complete path of the database backup location that you specify in the...

Страница 315: ...NSACTION LOG TRUNCATE END To back up the database to the var day_of_the_week directory on Linux execute the following query CREATE EVENT ZENDBbackup SCHEDULE START TIME 1 00 AM EVERY 24 HOURS HANDLER...

Страница 316: ...rd of the administrative user you created in Step 1a For example specify the user as Administrator and the password as novell 1f Click OK 2 Perform the following steps on the remote machine that has t...

Страница 317: ...a specific time every day or on specific days of a month 1 Execute the following query by specifying it in the SQL Statements section CREATE EVENT backup_schedule_name SCHEDULE START TIME specify_the_...

Страница 318: ...server execute the following query CREATE EVENT ZENDBbackup SCHEDULE START TIME 1 00 AM EVERY 24 HOURS HANDLER BEGIN DECLARE backupDir varchar 256 DECLARE backup_stmt varchar 512 SET backupDir DAYNAME...

Страница 319: ...the password by using the passwd specify_the_password command 1c Create a directory to save the database backup For example create a directory with the name backup 1d Open the Samba server settings by...

Страница 320: ...p_directory_on_database_server TRANSACTION LOG TRUNCATE For example execute the following query to back up the database to the root zenworks_dbbackup directory BACKUP DATABASE DIRECTORY root zenworks_...

Страница 321: ...ANDLER BEGIN BACKUP DATABASE DIRECTORY root zenworks_dbbackup TRANSACTION LOG TRUNCATE END To back up the database to the root zenworks_dbbackup day_of_the_week directory on Linux execute the followin...

Страница 322: ...you want to restore the backed up database If you choose to restore the backed up database on a different device you must stop the service on that device as well as on the database server On Windows D...

Страница 323: ...ou restore the database to a location other than the one given in the zenworks_database conf file you must manually edit the file to specify the new location of the database The zenworks_database conf...

Страница 324: ...ocated in ZENworks_installation_path by default on Windows and in the var opt novell zenworks directory on Linux 3 On the EDB2 device open zenworks_database conf and make sure that it contains the cor...

Страница 325: ...the following Make sure that ZENworks 10 Configuration Management is installed with an external OEM Sybase database on a Windows or Linux device Install the Embedded OEM Sybase database on the ZENwork...

Страница 326: ...the ZENworks Server that has the embedded Sybase database The database directory is located in ZENworks_installation_path on Windows and in the opt novell zenworks directory on Linux 4 On the ZENwork...

Страница 327: ...new MS SQL database The following sections provide detailed information Section 35 5 1 Preparing to Move the Data on page 327 Section 35 5 2 Configuring the ZENworks Server to Point to the New MS SQL...

Страница 328: ...t the following services Novell ZENworks Server Novell ZENworks Services Monitor and Novell ZENworks Agent Service On Linux At the console prompt enter the following commands etc init d novell zenmntr...

Страница 329: ...in ZENworks_installation_path conf datamodel on Windows and in etc opt novell zenworks datamodel on Linux to do the following Make sure that the value of the Port entry key is the port number on whic...

Страница 330: ...330 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 331: ...vices make sure that the status of Novell ZENworks Embedded Datastore is Started On Linux At the console prompt enter etc init d sybase asa status to verify the status of the database If the database...

Страница 332: ...ybase bin32s directory on Linux 7a2 Enter the dbisql command 7a3 In the Identification tab specify the database credentials 7a4 Click the Database tab then specify the name of database service that is...

Страница 333: ...as been successfully completed take a reliable backup of the newly built database If you encounter any issues during the rebuild process contact Novell Support http www novell com support 13 Stop the...

Страница 334: ...atabase subsequent to its initial backup 1 Delete the existing database backup schedule by executing the following command at the Primary Server command prompt zman db current_database_backup_location...

Страница 335: ...ckup complete_path_of_the_database_backup_directory complete_path_of_the_modified_database_backup_schedule_file d SQL_function_call For example to back up the database to the c dbbackup directory on a...

Страница 336: ...want to back up the database to a directory on Windows you must use double backslash as the delimiter while specifying the database backup directory path For example assume that you have database back...

Страница 337: ...t second and third day on the month to a new location e zendb dbbackup change the database backup schedule and location in the zendbbackup event by executing the following query in the DBISQL utility...

Страница 338: ...338 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 339: ...section includes information about Message Logger features and procedures to help you configure and maintain your Novell ZENworks system Chapter 37 Overview on page 341 Chapter 38 Configuring Message...

Страница 340: ...340 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 341: ...or local machines from the Primary Server Sends messages as UDP packets to UDP destinations Writes messages to the ZENworks database Automatically purges database entries from the ZENworks database Au...

Страница 342: ...em Administration Reference novdocx en 16 April 2010 37 3 Message Format Messages are logged in different formats depending on the output targets For more information on message formats see Section 39...

Страница 343: ...Logging In ZENworks Control Center the Local Device Logging page lets you configure the message logging to a local drive and the system log file of the managed device 1 In ZENworks Control Center cli...

Страница 344: ...o Local System Log if Severity Is Choose from one of the following Error Stores messages with severity of Error Warning and Above Stores messages with a severity of Warning and Error Information and A...

Страница 345: ...he warning messages dated until today are acknowledged By default all the warning messages older than 60 days are automatically acknowledged Auto delete when older than days Allows you to automaticall...

Страница 346: ...eld see Section 39 1 2 E Mail Format on page 350 5 In the SNMP Traps panel configure the SNMP traps on the ZENworks Server to send log messages Send as SNMP Trap if Severity Is Sends an SNMP trap if t...

Страница 347: ...Logger settings configured at the zone level are applied to all the managed devices However you can modify the Local Device Logging settings for the managed device 1 In ZENworks Control Center click D...

Страница 348: ...348 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 349: ...logged in different formats depending on the output targets such as local log e mail notification SNMP traps and UDP notification All error messages log the component name on which the error is genera...

Страница 350: ...at 4 1 07 5 31 01 PM then specify s occurred on device a at t in the Subject field Message Body The message body consists of the following fields Device Alias Name of the device where the message is g...

Страница 351: ...sageLogger INFO the specific trap is 3 Time Stamp The time stamp indicating when the trap occurred Variable Bindings Provides additional information pertaining to the trap This field consists of the f...

Страница 352: ...ge 353 39 2 1 Message Summary The Message Summary panel displays the number of critical warning and normal messages generated on the main objects in the Management Zone Figure 39 1 Message Summary In...

Страница 353: ...ction that fails so the ZENworks Adaptive Agent cannot complete the action on the device This column indicates the number of unacknowledged warning messages generated for the device A warning is any a...

Страница 354: ...ou can acknowledge or delete messages from the message log For more information on acknowledging messages see Section 39 4 Acknowledging Messages on page 355 and for information on deleting messages s...

Страница 355: ...ledging a Message on page 355 Section 39 4 2 Acknowledging Multiple Messages on page 355 Section 39 4 3 Acknowledging Messages Logged During a Specified Time on page 356 39 4 1 Acknowledging a Message...

Страница 356: ...click Message Cleanup to display 3 In the Message Cleanup dialog box select Acknowledge 4 In the Date Range option select the Beginning Date and the Ending Date 5 Select the Filter option None Cleans...

Страница 357: ...Deleting Messages Logged During a Specified Time on page 358 39 5 1 Deleting a Message 1 In the Message Log panel or the System Message Log panel click the message you want to delete 2 In the Message...

Страница 358: ...ete the message A system message is logged after the cleanup action is completed For more information on viewing the system log see Section 39 3 2 System Message Log on page 354 39 6 Viewing the Prede...

Страница 359: ...rks Messages Displays message details such as the log time and description for all the ZENworks System messages For more information on creating and managing reports see the ZENworks 10 Configuration...

Страница 360: ...360 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 361: ...database uppercase and lowercase letters might not create uniqueness for the same name The embedded database included with ZENworks 10 Configuration Management is case insensitive so Folder 1 and FOL...

Страница 362: ...362 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 363: ...use to select a date for the event You can add multiple dates one at a time Run Event Every Year Select this option to run the event every year on the dates shown in the Start Date s list Select When...

Страница 364: ...re B 2 Event Schedule Select from the following triggers User Login A user logs in to the device s operating system User Logout A user logs out of the device s operating system Device Boot The device...

Страница 365: ...work the device must be manually refreshed or refreshed according to schedule before the Adaptive Agent can upload or launch the bundle even if the device connects to the network B 3 Now Select this s...

Страница 366: ...between Start Time and End Time Starts the event at a randomly selected time between the time you specify in the Start Time and End Time fields You can use this option to avoid possible network overl...

Страница 367: ...example both 7 days 8 hours and 1 week 8 hours provide the same schedule Start Date Specifies the initial start date for the interval Start Time Specifies the initial start time for the interval Proc...

Страница 368: ...368 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Страница 369: ...ed Icons One or more custom animated icons named refresh_xx ico where xx is a double digit numeric value that can range from 00 to 99 These icons are displayed when the managed device is refreshed You...

Страница 370: ...the same name as the deleted file the icon associated with the renamed file is incorrectly displayed as the icon of the deleted file in the ZENWORKS_HOME bin icons ZIcon directory However the renamed...

Страница 371: ...16 2010 Updates were made to the following sections D 2 March 30 2010 SP3 10 3 Updates were made to the following sections Location Update Section 6 2 2 Starting the ZENworks Services on page 74 Upda...

Страница 372: ...o an NSS Volume on page 240 Added the section Chapter 29 Content Replication on page 243 Added information about the Force Inheritance feature Section 29 1 Configuring Content Replication at the Manag...

Страница 373: ...ctions for User Sources on page 267 Added entire section Section 32 2 Authentication Mechanisms on page 272 Added entire section Section 33 6 Using ZENworks 10 Asset Management with ZENworks 7 Desktop...

Страница 374: ...374 ZENworks 10 Configuration Management System Administration Reference novdocx en 16 April 2010...

Отзывы:

Нет отзывов

Похожие инструкции для ZENWORKS 10 CONFIGURATION MANAGEMENT SP3 - NETWORK DISCOVERY DATABASE STRUCTURE

NEC Versa LX Important Information preview
Versa LX
Бренд: NEC Страницы: 4
3Com 3C16120 - SuperStack 3 Server Load Balancer Release Note preview
3C16120 - SuperStack 3 Server Load Balancer
Бренд: 3Com Страницы: 20
Xerox DocuColor 45054549 User Addendum preview
DocuColor 45054549
Бренд: Xerox Страницы: 30
F-SECURE INTERNET GATEKEEPER WINDOWS 2000-2003 SERVER 6.61... Administrator'S Manual preview
INTERNET GATEKEEPER WINDOWS 2000-2003 SERVER 6.61...
Бренд: F-SECURE Страницы: 414
ScanSoft TextBridge PRO 8.5 User Manual preview
TextBridge PRO 8.5
Бренд: ScanSoft Страницы: 243
McAfee WEBSHIELD SMTP Datasheet preview
WEBSHIELD SMTP
Бренд: McAfee Страницы: 2
CenturyLink Prism TV Quick User Manual preview
Prism TV
Бренд: CenturyLink Страницы: 24
Samsung G2 PORTABLE HX-MU025DC Specifications preview
G2 PORTABLE HX-MU025DC
Бренд: Samsung Страницы: 1
Samsung EasyGSM Owner'S Manual preview
EasyGSM
Бренд: Samsung Страницы: 14
Amanda Amanda@Work.Group/DOS Version 7.xx User Manual preview
[email protected]/DOS Version 7.xx
Бренд: Amanda Страницы: 84
Amanda Amanda Portal CallQ Agent User Manual preview
Amanda Portal CallQ Agent
Бренд: Amanda Страницы: 61
Amanda Amanda Portal Telephone Features System Reference Manual preview
Amanda Portal Telephone Features
Бренд: Amanda Страницы: 226
Garmin GPSMAP GPSMAP 196 Specifications preview
GPSMAP GPSMAP 196
Бренд: Garmin Страницы: 2
Garmin MapSource User Manual preview
MapSource
Бренд: Garmin Страницы: 32
Symantec pcAnywhere Administrator'S Manual preview
pcAnywhere
Бренд: Symantec Страницы: 105
Symantec Norton Personal Firewall 2003 User Manual preview
Norton Personal Firewall 2003
Бренд: Symantec Страницы: 151
Symantec SERVICEDESK 7.0 MR2 Implementation Manual preview
SERVICEDESK 7.0 MR2
Бренд: Symantec Страницы: 188
Bai cells EG7035 User Manual preview
EG7035
Бренд: Bai cells Страницы: 24

Бренды по названию

Популярные бренды

Загрузить еще бренды