Chapter 18
Using the Server Console
Certification Objectives
*Navigating the Server Console *
Navigating Console One *
Exercise 18-1 Editing a Server Configuration File
*Navigating the Console with RCONSOLE *
Using SECURE CONSOLE *
Using SCRSAVER to secure the server *
The NetWare server console is where the administrator performs fundamental server management and configuration tasks. It is from the server console that NLMs are loaded so that network services are made available. From the console prompt NLM utilities can be accessed, server configurations performed, and server commands run.
In this chapter we will discuss some of the commands that can be executed at the console prompt. We will also explore server configuration files and how you can edit them.
You will find it efficient to remotely manage the NetWare server from a workstation and Remote Console lets you do this. Security is also a constant issue with networks, and we will look into it briefly.
A new item introduced in NetWare is Console One, a Java-based application that gives NetWare its first marketed Graphical User Interface (GUI). We will see how Console One makes administration easier to manage.
On the Job Note: Novell has tried server console GUI before, but it was received with hostility by the CNE community. It was compared to X-Windows for UNIX, and was considered slow and cumbersome to use. The only time that the Java GUI is required, is during the install process. Once NW5 is installed, the command to load the GUI can be commented out of the NCF file. This feature was generally well received by CNIs during the 529 classes presented at Novell.
NetWare Server Overview
When a NetWare server loads, a lot of rapidly scrolling text is displayed on the monitor’s screen, as the configuration information processes and NLMs load, to bring the server up. The NetWare 5 server has many screen types, most of them associated with NLM utilities and enhancements. The basic server screen is the NetWare Console, which comes in two formats. The first is the standard text console, which looks like a DOS command prompt. The second is the graphical Java-based Console One.
The standard server console screen looks similar to a DOS prompt. Figure 18-1 shows what a basic server console screen looks like.
Figure 1: Basic server console screen
Different types of commands can be executed at the console prompt. For example, NLMs can be loaded or unloaded, and NetWare utilities such as NWCONFIG and DHCPCFG can be loaded to configure the server. The server can be brought down from the Server Console prompt as well as restarted. The new Console One has some extended capabilities that the traditional console does not have. You can use Console One to browse and organize network resources, add accounts, and configure existing accounts. Figure 18-2 shows an example of what Console One looks like. From Console One, you can set access to network resources as well as access remote server consoles on other servers. The first release of Console One has some capabilities of NetWare Administrator but not all of them. Other tasks that can be accomplished with Console One are managing local files and folders as well as hosting other Java applets.
Figure 2: Console One Java application
Executing Console Commands
There are many different commands that can be executed at the server console screen, and this is something you need to know for the exam. Pay particular attention to how certain things are loaded or unloaded at the console prompt.
Along with knowing how to load and unload items, you also should know some key combinations to help you navigate from one screen to the next.
To successfully manage a server from the console prompt, you should know how to navigate to other screens that are loaded when other NLMs running in the background. There are a couple of key sequences to become very familiar with as a NetWare engineer.
The first one is the ALT-ESC combination, which goes through the various screen loaded on a server. As you press ALT-ESC, you will move from screen to screen until you get to the one you want. A second way to navigate from one screen to another is to use the CTRL-ESC combination, which brings up a list of what is loaded on the server. This can serve two purposes: it summarizes what is running on the server and is a quick way to jump from screen 1 to screen 12.
With Console One you can browse a number of resources with the various menus available. The left window pane allows you to browse the different container objects, while the right window pane shows the actual contents of the resources.
With Console One running on the server there are two key items in the left-hand window: the My Server and Shortcuts containers allow for management of local and remote server operations. Maneuvering around Console One is done with a mouse or other pointing device. To get to the properties on an object you can right-click and select Details. This is similar to the process in NetWare Administrator.
Loading and Unloading NLMs
To add additional network services or to access a server utility, you will need to know the name of the NLM to load. Sometimes you may need to know the order of how a group of NLMs must be loaded. The two most basic commands are LOAD and UNLOAD. These are used in conjunction with the name of a particular NLM installed on the server. For example:
NWCONFIG
INETCFG
CDROM
These are just a few of the NLMs that can be loaded. When you want to unload an NLM, the most common way to do it is to type UNLOAD and the name of the NLM afterwards. Some NLMs allow you to unload them from their menu. For example, if you type MONITOR, you can then exit the MONITOR utility by pressing the ESC key while on the monitor screen. You will be prompted if you want to exit MONITOR. Alternatively you can type UNLOAD MONITOR and monitor will be unloaded
On the Job Note: Unlike earlier versions of NetWare, you no longer need to use the LOAD command when loading NLMs. Just typing the NLM’s filename will automatically load the module. Using LOAD is optional. For example, to load MONITOR.NLM, just type MONITOR at the server prompt.
Server Configuration Files
To optimize and tune your server to make it run efficiently, you must learn how to edit server configuration files. There are also two ways to do this, but the easiest one that I recommend is using the NWCONFIG utility. The NWCONFIG utility gives an administrator quick and easy access to the two most important NetWare Configuration Files (NCF): STARTUP.NCF and AUTOEXEC.NCF .
Exam Watch: INSTALL.NLM has been replaced by NWCONFIG.NLM in NetWare 5.
To get to the NWCONFIG utility type
NWCONFIG at the console prompt. This will allow you to look at and edit your main startup files, as shown in Figure 18-3. However, with NetWare there will be other NCF files that you may need to edit or at least look at.Figure 3: NWCONFIG utility and NCF file option
Customizing the Server Configuration Files
To edit the NCF files or other files that can be edited with a text editor, you can use EDIT.NLM to load the NetWare text Editor (see Figure 18-4) If you include a path and filename after the EDIT command, you can immediately open the file for editing. If you do not enter a path and filename after the EDIT command, you will be prompted for them.
NetWare NCF files, with the exception of STARTUP.NCF, can be edited with any text editor on a workstation. To edit NCF files from a workstation though, you will have to know where the file exists on the server. Many times NCF files are in either the SYSTEM directory on the SYS: volume, or, for example, stored with their other program files in the case of Computer Associates’ ARCSERVE for NetWare product.
Exam Watch: STARTUP.NCF can only be edited using EDIT.NLM or NWCONFIG.NLM since it resides on the DOS partition of the hard drive physically located on the server box.
Figure 4: EDIT utility in NetWare
Creating Server Batch Files
When it comes to simplifying commands and grouping configuration statements together you will want to use server batch files. These batch files should reside on the SYS: volume in the SYSTEM directory.
To create the files you can use any ASCII text editor. Just make sure that the file is saved in the appropriate location: the SYSTEM directory on the SYS: volume.
Accessing the Server Console from a Workstation
Many NetWare administrative tasks must be done at a workstation. NetWare has had a utility called RCONSOLE available for administrators to remotely access the server’s console. As shown in Figure 18-5, RCONSOLE looks exactly like the server's console. The major difference is the keystroke sequence used to navigate from screen to screen.
Figure 5: RCONSOLE on a Windows 95 workstation
Before RCONSOLE will work, two NLMs must be loaded: REMOTE.NLM andRSPX.NLM To load the NLMs type
REMOTE (follow with the RCONSOLE password) and RSPX at the console prompt. You can then access the server with RCONSOLE.Many times REMOTE and RSPX will be loaded in one of the startup files so that, by default, the administrator will have remote access. When this is the case, the password for the remote console is entered immediately after the RSPX statement. Exercise 18-1 will show you how to do this.
Exercise 18-1 Editing a Server Configuration File
Navigating the Console with RCONSOLE
In Windows 95 there are some keystrokes that cannot be used to navigate the console remotely because they already do something else. The ALT-ESC and CTRL-ESC combinations we looked at earlier will not work with RCONSOLE, because they are compiled into RCONSOLE.EXE. There are four main keystrokes with RCONSOLE, as shown in Table 18-1.
Keystroke |
What Happens |
ALT-F1 | Brings up the RCONSOLE menu giving you a series of options. |
ALT-F2 | Prompts to see if you want to exit your RCSONSOLE. |
ALT-F3 | Move ahead one screen on the server (similar to ALT-ESC directly on the server). |
ALT-F4 | Move backward one screen on the server. |
Table 1: RCONSOLE Keystrokes
Another NEW component of NetWare 5 is RCONSOLEJ. Along with the RCONSOLE.EXE in the public directory is a RCONJ.EXE that runs a Java based remote console utility. The Java-based management piece on the server cannot be seen with RCONSOLE, so Novell included RCONSOLEJ to manage the Java-based management piece remotely. Figure 18-6 shows the RCONSOLEJ connection screen. For the exam, make sure you that you know this utility exists.
Figure 6: RCONSOLEJ on a Windows 95 workstation
Protecting Your Server
With any network, security is a primary concern. One of the first things to do is make it physically inaccessible to unauthorized people by keeping it in a locked room. Some administrators go further and actually remove the keyboard from the server so that it can be monitored and managed only by remote access. Another recommendation (from the Novell web site) is to use a power-on password along with other passwords that can be put in place at the server.
One way to secure the server from tampering, is to use the SECURE CONSOLE feature, which does the following :
The one thing to keep in mind about using this command is that it cannot be undone until the server is taken down and rebooted. Once this is done the server is back to a state of being non-secure. One other note on using SECURE CONSOLE: remote management has the same restrictions as being on the server directly.
Using SCRSAVER to secure the server
NetWare 5 has some new and different features as you have discovered throughout this book. One of these is the new SCRSAVER utility that replaces the console-locking feature of MONITOR . There is no longer an option to lock the console in MONITOR with NetWare 5.
To load the SCRSAVER module you simply type:
SCRSAVER {options]
As with previous versions of NetWare, when the screensaver kicks in on a server, you see a snake for each processor in the server. With NetWare 5 you have the ability to lock the console with the SCRSAVER module. When the snake is crawling across the monitor you simply hit a key and then you will be prompted for a username and password. When a key is pressed, you must do the following:
When SCRSAVER is loaded, the default is to have the server locked when the screensaver kicks in.
Loading Support for Java Applications on the NetWare 5 Server
Java has taken the computer world by storm and Java-based applications are consequently proliferating. NetWare 5 comes with Java support, which makes NetWare 5 even more versatile as a web server .
With the built-in Application Program Interfaces supporting Java, developers can write object-oriented, multithreaded, dynamically-linked applications using the Java language. This makes NetWare 5 one of the most powerful servers for Java applications.
Using the NetWare ServerTop
With NetWare 5 there is a new look and feel with the GUI interface of Console One. The GUI interface is actually known as the ServerTop This is basically like the desktop in Windows 95.
The GUI interface makes NetWare come to life with a point-and-click style of Windows NT and Window 95/98. In the left-hand corner is the Novell menu, similar to the Start Menu in the various Windows products.
Certification Summary
Managing a server is the key component to successful network administration. With NetWare 5 an administrator has more tools available than ever before. In this chapter we looked at managing the server with the NetWare Console and the new Console One, GUI-based management tool.
Being able to navigate and know the appropriate commands makes you a successful server administrator. The other piece to Console Management is being able to do it remotely and configure the server to do so. We looked briefly at RCONSOLE and RCONSOLEJ, which I am sure you will see on the exam.
Along with the console comes the ability to view and edit the Server Configuration Files. The two most important of these are STARTUP.NCF and AUTOEXEC.NCF. Remember that NetWare has a built-in EDIT utility to edit text files and create batch files.
NetWare 5 comes with a couple of ways to secure the server. But the first step is to physically secure the server by limiting access to it. Remember that SECURE CONSOLE can secure the server from attacks. The new SCRSAVER replaces the old console lock function of MONITOR. In order to begin the process of locking the console using SCRSCAVER, you press ENTER at the login box to highlight the Username field, and then enter the Username. The Username must have write rights to the ACL for the Server object.
We briefly mentioned that NetWare 5 has support for Java applications. Along with Java support comes the new SERVER TOP that gives NetWare administrators a graphical user interface for managing their server.
Two-Minute Drill