Version PK-2.20
(Apr 28, 1999)
DISCLAIMER: THIS PRODUCT IS SUPPLIED "AS IS". DREAMLAN DISCLAIMS ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THE WARRANTIES OF MERCHANTABILITY AND OF FITNESS FOR ANY PURPOSE. DREAMLAN ASSUMES NO LIABILITY FOR DAMAGES, DIRECT OR CONSEQUENTIAL, WHICH MAY RESULT FROM THE USE OF THIS PRODUCT. |
NDSRight is a DOS command-line utility that allows a user to change the ACL assignments of any NDS objects. The use of wild card ("*") is supported. Therefore, you can batch-update/change ACL assignments. This is particularly useful if you have a large number of objects to manage.
You can also use NDSRight to report the ACL assignments for audit purposes. This utility is designed to be command-line based and perhaps invoked through batch files. Therefore, there is not much user-interface or fancy menu prompts is built into the utility.
- In version 1.5 and higher, a [Self] option has been added to the -t (Trustee) parameter. This allows you to assign an object rights back to itself. For example, the following command will assign each object (named USER*) as a trustee to its own Network Address property, with RW rights to Network Address:
NDSRIGHT -n User* -t [self] -a network_address -rRW -s
This makes USER1 a trustee to the Network Address property of USER1, with RW rights; makes USER2 a trustee to the Network Address property of USER2, with RW rights, etc.- In version 2.01+, a new (yet undocumented in the on-line help) command-line switch has been added. Using the -T classname option (note: uppercase T), you can now limit either the search or action results to a given class of NDS object. The default is all classes. In the interactive mode, you are prompted for the Class Name as well. Enter * for all classes. For example,
NDSRIGHT -n * -T printer -a Revision -t .printer-admin.testing -rRW
grants PRINTER-ADMIN.TESTING Read and Write access to all Printer objects.- Version 2.01+ is NetWare 5 certified. (YES Bulletin #44439)
No special installation steps or program need to be used. Simply copy NDSRight to SYS:PUBLIC of your servers. You must have the Unicode files for the country code and code page that your workstation use available in the respective NLS directories, for example, SYS:PUBLIC\NLS.
Should you install NDSRight into a different directory, you may need a search path to the directory where the unicode files are located.
You can run NDSRight either with command-line parameters, or allow it to prompt you for input. The allowable command-line parameters are:
NDSRight [-5] [-a] [-c] [-f] [-F] [-n] [-o] [-r] [-s] [-t] [-T] [-v] [-x] [-Z]
where
- -5 specifies the additional NetWare 5 NDS rights, Inheritence, support be enabled. This is so that on NetWare 4 trees, you don't see the additional "I" right unnecessarily.
- -a attrname specifies the attribute to which the ACL assignment is to be made. If the attribute you referenced is composed of multiple words, such as Login Script, you need to place an underscore ("_") between each word. For example, "-a Login_Script". This is the standard notation used by NDS. However, this utility also allows you to use a period (".") instead of the underscore to save yourself having to use the Shift key.
- -c specifies continuous scroll on display. Otherwise, pause at the end of each displayed screen.
- -f specifies that a report file should be generated. This is helpful when you are viewing a large number of objects, or would like a log file for your modification operation. If you use -F, the report file will be appended to, if it exists.
- -n oName specifies the target object name. This is the object to which the assignment will be made. For example, "-n admin". The use of wild card (i.e. "*") is allowed, i.e. "-n adm*".
- -o instructs the utility to assign rights to the object rather than to the attributes of the object. When this option is specified, the "-a" option is disregarded. Using this option is the same as specifying [Entry Rights] for the attribute.
- -r rightslist specifies the NDS rights to be assigned to the attribute of the object. For example, "-r BC" for Browse and Create.
- -s specifies searching of the subtree. This will cause the utility to recursively search the lower containers for a name match to the target object.
- -t tName indicates the trustee object name. It is the object that will be made the trustee. For example, "-t .admin.dreamlan" or "-t guest" . As of version 1.5, you can now also use [Self] to assign an object to be a trustee to itself. Useful when you are using wildcards in the object name.
- -T ClassName (Note: uppercase T) specifies the NDS object class to work with. For example, -T user will affect the changes to User objects only. (If you specified Alias, you'll be working with the actual Alias object and not the real object to which it is aliased.)
- -v views rights of target object(s). This is useful is getting a list of the different ACL rights assigned to an object.
- -x clears right before assigning new ones. If a trustee assignment is made to an attribute, but the trustee object already has an assignment to the same attribute, you must clear the old assignment before the new one can be assigned. This is to prevent you from accidentally overwrite an existing assignment.
- -Z will remove ALL the ACL assignments to an attribute of an object by default! Use it with care. Should you wish to only remove one of the trustees from an attribute, make sure you ALSO specify the -t parameter. This parameter must be in uppercase.
All of the above parameters (except for -F, -f, -T, -t and -Z) are not case sensitive.
n/a
Two variations of NDSRight are available. The version included here is a Freeware version. The following options are disabled in the Freeware version:
1. -c for continuous scroll on output. 2. -f for the generating of report log file. 3. -s for the ability to search subcontainers. 4. -x for the ability to clear a trustee assignment before a new one is assigned. 5. -Z for the ability to remove a trustee assignment. 6. For the ability to use wildcard on the "target object name".The Freeware version does not include a complete list of attribute names for NetWare 4.10's Organization, Organizational Unit, and User objects.
You are granted an unlimited usage at no cost. However, you are not allowed to sell or package this utility as part of another software package or service contract. Bottom line: you can not make money using this Freeware version. All standard Freeware limitation applies.
The full version of NDSRight is available by registering on-line through the following Web sites:
The NDS tree name is required as it is used to generate a key. The registration cost is $99 US. Canadian registration is $135 CDN plus GST. All other countries, please remit in US funds.
You can also FAX a company Purchase Order to +1 (905) 887-3836. Please make sure you either include your tree name information on the FAX or send a follow up email.
Special site agreements for multiple trees and service providers are available. Although the license does not grant you the right to resell the program (for a profit; but you can charge the customer a service charge for your time). If you are a service provider, you can register copies on behave of your customers (by providing your customer's mailing information -- this is used only for tracking purposes). At the same time, we ask you to send us a separate email indicating that you are registering on behave of your customer and inciate in this email if further software upgrade (free or for a charge) be send to you or the customer directly, and an email address for that purpose.
NDSRight is written in C using Microsoft C optimizing compiler and Novell Developer Kit. Some string manipulating routines are from the CXL library.
Inclusion of this utility on CD-ROMs (except for backup purposes) without permission from DreamLAN Network Consulting Ltd. is expressly prohibited.