1. Question about Novell's CNE Study Guide for Netware 4.1
I have a copy of this book and some of the examples used in Ch. 11 to explain
Inheritance and the IRF are either confusing (to me) or just wrong. I was
under the impression that an explicit trustee assignment to an object overrided
any inherited rights to that object. A few quick tests I performed using
NWADMIN seem to confirm this and this book sstates this as well.
The problem is in the examples shown at the end of the chapter. David Clark,
the author, states that "Effective Rights = trustee assignment + inheritance -
IRF (inherited rights filter)." Example Case #1 states:
"In this case, we are helping Sherlock Holmes gain administrative rights to
the Crime Fighting division. Refer to Figure 11.41. It all starts at
.CRIME.TOKYO.ACME. He is granted [CD] NDS privileges. Also, he ancestrally
inherits Browse rights from the special [Public] trustee. There is no IRF in
CRIME.
In the next container, WHITE, SHolmes gets [S] from his "CRIME-Group" group.
Also, there's an IRF of [D]. Finally, these privileges flow down to the
WHITE-SRV1 server object and become inherited rights. But the server's IRF is
set to [BR], so some of them are blocked. Also, Sholmes has a explicit trustee
assignment of [D] to the WHITE-SRV1 server. Finally, Sherlock's home container,
WHITE, is granted [C] privileges to the server object."
Figure 11.41 shows
OU=CRIME
|
OU=WHITE
|
CN=WHITE-SRV1
The solution appears as follows:
[BCDRS]
IRF [ - ]
Inheritance [ - ]
[Public] [B ]
SHolmes-TA [ CD ]
Effective Rights [BCD ] - CRIME
IRF [ D ]
Inheritance [ D ]
Group-TA [ S]
Effective Rights [BCDRS] - WHITE
IRF [B R ]
Inheritance [B R ]
WHITE-TA [ C ]
SHolmes-TA [ D ]
Effective Rights [BCDR ] - WHITE-SRV1
My question really concerns the rights to the WHITE-SRV1. Why are they not
just CD? Can someone explain why Mr. Clarke is right and I am wrong or vice
versa? The other examples he sites are not consistent wrt this issue. In
one he shows that explicit trustee assignments at a lower level are added to
inherited rights and in the other he shows that these explicit assignments
override the inherited rights. HELP!
Email would be appreciated.
--
Bob Sweeney
"We've got to pause and ask ourselves: How much clean air do we
need?" -- Lee Iacocca, on Detroit's resistance to tougher auto
emission standards
2. PPPD (Linux) No local or remote host
3. *** Wanted: Netware 3.12 & 4.1 two user license ***
4. Won't Connect To Terminal Services Server
5. *** Wanted: Netware 3.12 & 4.1 two user license
6. WTB: Interlink cable & SW for Sharp OZ-7000
7. FA: $11.00 NETWARE 4.1 Survial Guide
8. ANIMATION
9. Netware 3.12 licenses - Netware 4.1
10. FS: NOVELL NETWARE 4.1 NEW SEALED LICENSES
11. WTB: Novell Netware 4.1 Offical Study Guide Books