Page 2: (G - J)

|

Getbal

Getbal lists account balances, account holds or credit limits for multiple NDS or bindery users. Features include:

• Can specify a multiplier to change the units in which values are displayed.
• Can control which values are displayed and in what order.
• The values may be sorted by user name, balance, or credit limit.
• The output can be filtered by value e.g. display all users with a balance of less than $10.00.
• May be used in a login script to display the account balance for each user as they log in.
• Totals are given when displaying balances and holds for multiple users.
• Can list users without credit limits or account balances.
• Can process all users in a container and in all subcontainers of that container.
• Can display balances and credit limits for print servers.
• Can display balances held by individual servers (a bug in replication can result in servers holding different values).
• Can display the default account balance and credit limit given to new users on bindery based servers. This is normally viewed via syscon’s “Supervisor Options” - “Default Account Balance/Restrictions”.

Getequiv

Getequiv may be used to check for or display security equivalences for NDS objects and bindery users. It can do the following:

• List all security equivalences for one or more users.
• List all users who are security equivalent to another e.g. admin under NDS or supervisor under NW 3.x.
• Check for accounts under NW 3.11 which have been modified using Wolfgang Schreiber’s super utility allowing supervisor equivalence to be turned on and off at will.
• List bindery users who are managers of their own accounts. Under 3.11, these users can grant themselves supervisor equivalence using super.
• List those bindery users with more than 32 security equivalences. NetWare 3.x takes into account only the first 32 when calculating an object’s rights.
• In NDS mode check for security equivalence to file server objects. This equates to supervisor equivalence in bindery mode.

Getname

Getname may be used to display a wide range of attribute values for any class of NDS object. The values of single attributes may be displayed, the values for all attributes may be displayed, or a template file may be used allowing the values for multiple attributes to be retrieved and displayed in any format. The template file comprises one or more lines of text with substitution identifiers representing the attributes to be displayed. A non-exhaustive list of substitution identifiers for objects of class user is:

The identifier may be followed by a ‘\’ and a field width e.g. ‘%title\10’. A sample template file (t1.dat) is:

%login_name,%full_name,%department,%location,%telephone

The command getname * /r/x/a=@t1.dat /l=all.log would produce a comma delimited list comprising the user name, full name, department, location and phone number for all users in the NDS tree.

Another template file (t2.dat) is:

The command getname jane /a=@t2.dat /yd produces

Getquota

Getquota can display disk quotas, disk usage and disk available for multiple users. It can handle both volume based and directory based quotas under NW 3.11 onwards, and supports both traditional and NSS volumes. Features include:

• Can obtain a user’s home directory from the NDS or bindery.
• Can show a user’s volume quotas on all volumes or a single volume.
• Can show quotas on all subdirectories of a directory.
• Optional sorting into ascending or descending order of quota, space used, space available, or by user name.
• Optional totals only.
• Can suppress any of the output (quotas, space used, space available).
• Can filter by value e.g. list all users whose usage exceeds 100 MB, or whose free space is less than 20% of their quota.
• Output may be in bytes, 4096 byte blocks, KB, MB or GB.
• Can operate on user’s mail directories. These can be subdirectories of SYS:MAIL, or PMAIL subdirectories of the user’s home directory.
• Can process all users in a container and in all subcontainers of that container.
• Can display all volume quotas on a volume.
• Can display values for queue directories.
• Can display values for paths pointed to by directory map objects.
• Can accept and display paths in the DOS or LONG name space.
• Can calculate the usage in directories without quotas on NSS volumes.

Getrest

Getrest displays account restrictions for multiple NDS or bindery users. These include:

Account is activated (eDir 8.7 onwards)
Account activation date (eDir 8.7 onwards)
Account is disabled
Account expired
Account expiration date and time
Account is locked
Creation date/time
Creators name (eDir 8.5 onwards)
Force periodic password changes
Grace logins allowed
Grace logins remaining
GroupWise login disabled
GroupWise mailbox expiration time
GroupWise visibility
Intruder lockout bad login address
Intruder lockout bad login count
Intruder lockout next reset time
Last login date and time
Login time restrictions
Maximum concurrent connections
Modification date/time
Modifiers name (eDir 8.5 onwards)
Network address restrictions
Network addresses
Password is expired
Password expiration date and time
Password expiration interval
Password last change date/time
Previous login date and time
Password minimum length
Password is required
User can change their own password
Unique passwords are required
Proxy password age limit
Proxy password change allowed
Proxy password expiration date and time
Proxy password grace logins
Proxy password force periodic changes

The features of getrest include:

• Displays all restrictions, or a single restriction e.g. minimum password length.
• Can control the order and width of each output field (user name, server/user name, full name, server name, restriction value) when displaying individual restrictions.
• Can sort into ascending or descending order by user name or by restriction value.
• Can filter by restriction value e.g. list all users whose account has expired, or all users whose maximum concurrent connections is not equal to 3.
• Can process users in the specified container and all containers below it.
• Can set an error level indicating the number of matching users. This allows testing in a batch file for example if a particular user’s account is disabled.
• Can ignore objects for which the requested attribute does not exist.

Groups

Groups is a GUI program combining grpadd, grpdel and grplist. Its features include:

• Can add or remove all selected users, all members of another group, or a list of users in a file.
• Can create and delete groups.
• Displays the full name of each user when listing members.
• Can use logical operators ‘and’, ‘or’ and ‘not’ to list users who are or are not members of a combination of groups.
• Optional listing of members as grpadd or grpdel commands.

Grpadd

Grpadd adds one or more users to a group. Its features include:

• Can process a single group or a file containing a list of groups.
• Can create the group.
• Can accept one or more users on the command line.
• Can add all members of another group.
• Can add a list of users from a file.
• Can process a file containing one group name and one user name per line.
• Can search NDS for matching users to add.
• Can warn if a bindery user has more than 32 security equivalences after being added to the group (NetWare 3.x uses only the first 32 when determining a user’s rights).
• Can provide an exclusion list of members not to be added. This may be useful when adding via wildcards or when adding all members of one group to another.
• Can check the linkages of a group’s members and either report or fix missing links.

Grpdel

Grpdel removes one or more users from a group. Its features include:

• Can process a single group or a file containing a list of groups.
• Can accept one or more users on the command line.
• Can remove all members of another group.
• Can remove a list of users from a file.
• Can process a file containing one group name and one user name per line.
• Can delete the group if it has no remaining members.

Grplist

Grplist lists the members of one or more NDS or bindery groups. Features include:

• Displays the full name of each member.
• Optional sorting by member name.
• Optional totals only.
• Optional listing of all users on the server or in an NDS container.
• Can use logical operators ‘and’, ‘or’ and ‘not’ to list users who are or are not members of a combination of groups.
• Optional listing of members as grpadd or grpdel commands.
• Can list all aliases for each member of a group.

Grpmemb

Grpmemb is intended for use in a batch file to determine if a specific user is a member of a particular group. It functions in NDS or bindery mode and returns an error level.

Gwdlists

This program provides a means of managing GroupWise distribution lists via the command line and hence in scripts and batch files. It can do the following:

• Create and delete distribution lists.
• Add members to lists and remove members from lists.
• Display the members of lists.
• Change the participation type of existing list members.
• Set the visibility of existing or new distribution lists.
• Supports nested distributed lists, and can display these members under separate headings, or as part of the overall list.
• Can display a wide range of GroupWise attributes when listing members. The complete list of attributes is given for gwusers.
• Display the visibilities of distribution lists.
• Display the nicknames of distribution lists.
• Can sort the results by any of the fields available for display.

Gwlink

This program checks that users in GroupWise are correctly linked with their corresponding NDS object. It can:

• Identify objects which are not correctly linked.
• Relink objects based on name or file ID, or if relinking a single user, the user to link with can be named on the command line.
• Unlink objects by deleting the GroupWise attributes from the NDS object. The “NGW: GroupWise ID” attribute is retained by default as it is necessary for relinking, but it may also be removed.

Gwmove

Move users and external entities en masse from one GroupWise post office to another.

Gwusers

This program manages users within GroupWise via the command line and hence can be used in scripts and batch files. Its can do the following:

• Add existing NDS users into a GroupWise post office. The GroupWise name may differ from the NDS name.
• Remove users from GroupWise.
• List members of post offices or domains or the entire GroupWise system.
• Display a wide range of GroupWise attributes when listing users. These include:

  Account ID
  Address format
  Allowed address formats Department
  Description
  Distribution lists belonged to
  Domain
  Email address
  Fax number
  Full name
  Gateway access
  Given name
  GroupWise name
  GroupWise name in the format name.po.domain
  Internet domain name exclusive
  Internet domain name
  Last modified by
  LDAP authentication ID
  Login disabled
  Mailbox expiration date and time
  Mailbox ID (File ID)
  NDS object name
  Net ID
  Nicknames
  Object class
  Post office
  Preferred email ID
  Resources owned
  Surname
  Telephone number
  Title
  Visibility
  

• Can produce output in columns or delimited by any character.
• Can sort the results by any of the fields available for display.
• Set the visibility for new and existing GroupWise users, and for existing external entities.
• Set passwords for new and existing GroupWise users and for existing external entities.
• Set the mailbox expiration date and time for new and existing users, and for existing external entities.
• Set whether logins are enabled or disabled.
• Set the preferred address format.
• Add nicknames for new and existing GroupWise users and for existing external entities.

Home2

This is an NDS version of David Harris’ home utility for mapping your current drive or a designated drive to a user’s home directory or mail directory. Home2 works in both NDS and bindery mode. In NDS mode it will check first for a “Home Directory” attribute, and if this does not exist, home2 will check for a bindery HOME_DIR property. Other features include:

• Can map root.
• Can map to a queue’s directory.
• Can map to a print server’s directory.
• Can map to an NDPS printer’s spool directory.
• Can map to an NDPS manager’s directory.
• Can search NDS for the specified object.
• Can map the drive to the user’s mail directory (the subdirectory of sys:mail).

Homedirs

This is a GUI program combining the features of chkhome and sethome2 for checking and setting home directories and default servers. It incorporates more functionality for displaying and modifying related settings. The following fields may be displayed. Those marked with ‘*’ can be set or modified by right clicking on the corresponding column in the results list view, as well as being set under the “set” options.

Object name
Object’s full name
Home server
Home volume object *
Home path *
Name space of the home path
Default server *
Creation date/time of the home directory
Trustee rights to the home directory *
Quota on the home directory *
Volume quota on the home volume *
Home directory attributes *
Home directory owner *
Home directory inherited rights filter *
A messages column for feedback such as “Home directory does not exist”

Fields marked with * can be be modified by right clicking in that column in the results list view.

When creating and modifying home directories, the following may be set:

The “Home Directory” attribute
The home directory may be created
Rights to the home directory
Home directory quota
Home volume quota
Home directory attributes
Default server

Ifcheck

Lists iFolder 2.x users by searching NDS, and can display the iFolder name, NDS object name, full name, iFolder directory name, iFolder quota and space used. It can also scan the iFolder directory structure under both iFolder 1.x and 2.x, identify the owner of each directory and produce a report similar to when scanning NDS. Directories for which owners have been deleted may be identified, and a file of fsupdate commands produced to delete these.

Jberrtxt

Accepts a NetWare error code in decimal or hexadecimal, looks it up in jrberr.msg (the file of error code translations used by all of JRButils) and displays the description if found. Jrberr.msg includes all bindery, NDS, file system, NICI, NMAS and NPKI errors but does not include NDPS.

Jblookup

For locating users in NDS and displaying selected attributes specified in a file or chosen from a list. This is essentially a much simplified version of getname, but also has the ability to search a particular attribute for a given value e.g. the “Telephone Number” attribute for “7885”. It is intended for performing quick look up’s on information in NDS, and can be activated from the system tray.

Jrbcapt

A replacement for Novell’s capture program. This incorporates almost all of the functionality of capture but has the advantage of allowing capturing of NDPS printers if using the 3.20 or later client under Windows 95/98/ME. The current clients for NT/W2K/XP do not support capturing of NDPS printers.

Jrbcx

Jrbcx is an alternative to Novell’s cx program without the options to browse the tree. Its primary purpose is to provide a 32 bit program for changing the current context at a command prompt, where execution of a 16 bit program can be very slow. However, it also provides better support than cx for multi-tree environments allowing setting of a context in any tree, displaying of contexts for any or all trees and setting a selected tree as the default. It will also establish a connection to another tree if required.

Jrbimprt

A replacement for Novell’s uimport for mass creation of users. Jrbimprt supports all of uimport’s modes of operation i.e. ‘c’ (create), ‘u’ (update), ‘b’ (both create and update) and ‘r’ (remove) modes. Jrbimprt overcomes many of the limitations of uimport. Advantages over uimport include:

• Supports a wider range of attributes e.g. “Internet Email  Address”. Jrbimprt supports all text attributes and those of type ‘integer’, ‘counter’, ‘interval’ and ‘boolean’ including those added as custom schema extensions.
• Supports creation of home directories in the LONG name space allowing directories longer than 8 characters to be created. The “Home Directory” attribute will also be set in the LONG name space.
• Supports a “Template” control statement specifying the name of a template object to use e.g. “template=.t_1.sales.abc”. The template may be a user or template object.
• Supports attributes specific to template objects such as “New Object’s DS Rights” and “Volume Space Restrictions”.
• Supports a “Home directory rights” control statement specifying the rights to be granted to the home directory e.g. “home directory rights=RWCEMF”.
• Supports a “Home directory restriction” control statement allowing a restriction to be set on each user’s home directory. The restriction is specified in any units e.g. “home directory restriction=5000KB”.
• Supports a “Home volume restriction” control statement allowing a restriction to be set on the volume on which each user’s home directory resides. The restriction is specified in any units e.g. “home volume restriction=250MB”.
• Supports a “Home directory attributes” control statement allowing attributes such as ‘Di’ and ‘Ri’ to be set on the home directory.
• Can check the syntax of the input files and the validity of NDS objects referenced in the data file. This also checks the existence of the users to be created, updated or deleted and can optionally search the tree for other objects of the same name.
• Can wait for a specified number of seconds after object creation or deletion to allow replication to occur.
• Can initiate a replica synchronization after object creation to speed replication.
• Can standardize the case in new user names. The first character is made uppercase, the remainder lowercase.
• Allows object names to be used as attribute values in the data file to be specified relative to the current context rather than the context in which the new users are to be created. This can be achieved by placing the import control statement “Use current context=y” before the “Name context” statement in the control file.
• Can do two passes through the data file for import modes ‘b’ and ‘c’. Users are created on the first pass, attribute values are set on the second. This potentially avoids replication issues and the need to introduce delays after creating each user. Use the import control statement “Use two passes=y” to enable this option.
• Can create a subdirectory of sys:mail for each user. Use the import control statement “Create mail directory=y” to enable this option. It will be created on the same server as the home directory. By default when deleting users, jrbimprt deletes both the home directory and a mail directory (a subdirectory of sys:mail). These actions may be controlled via import control statements. Jrbimprt will not delete the home directory if (a) the lowest level directory name does not match the user name, or (b) the user does not have RWCEMFA rights to the directory, but this behaviour can also be changed using import control statements.
• Can create an alias for each new user. This can be done in one of two ways. The first is to specify “alias” as a field name and to give the alias object name in the data file. The name may be a distinguished name with a leading ‘.’, or it may be relative to the context in which the new user is created. The second method is controlled by two import control statements and creates aliases with the same name as the new object
  

  create aliases=[y/n]
  alias context=<context>

• Can create subdirectories of each user’s home directory via the “Create subdirectories” import control statement e.g. “create subdirectories=pmail,netscape\ini,photographs”. Multiple levels may be created e.g. netscape\ini results in both the netscape and ini directories being created.
• Supports NDS for NT (Corporate Edition). It can add each user to a domain via a template, or via a “domain” import control statement, and can set NDS for NT passwords. Use the import control statement “Set nds for nt passwords=y” to set these in addition to the NetWare passwords.
• Can set both IPX and IP network address restrictions.
• Does not require a “last name” field. When omitted, the last name is set to the user name.
• It is provided as a 32 bit Windows program rather than a 16 bit DOS program.
• Supports NDS 8 auxiliary classes via the “Auxiliary classes” control statement.
• Can create groups as required via the “Create groups” control statement.
• Supports a “Target server” control statement. All NDS requests are sent to the designated server to try to overcome replication issues.
• Can set simple passwords used by Novell Modular Authentication Services and Native File Access, via the “Set simple passwords” control statement.
• Can set NT domain passwords via the “Set NT domain passwords” control statement for existing domain accounts when Novell Account Management is not installed.
• Can control whether or not NDS passwords are set via the “Set NDS passwords” control statement. This may be useful if, for example, you want to set only simple passwords.
• Supports a “set passwords only on create” control statement to prevent setting passwords if the user is updated rather than created.
• Can search NDS for users when it is not known what context they are in via the “Search NDS” control statement. This may be useful when the data file is derived from a database which does not hold context information.
• Supports GroupWise. Users can be added to and removed from GroupWise, added to or removed from distribution lists, and can have their GroupWise passwords, visibility, mailbox expiration time, login disabled, preferred email ID, LDAP authentication ID and nicknames set. These may be achieved by a range of new control statements and field names, or via a template. A GroupWise password may be given separately from the NDS password allowing the two to be different. GroupWise external entities and external users can also be created, updated and removed. An option exists to check that a name is unique in the domain before adding each user.
• Group membership may be managed via “Group membership add” and “Group membership remove” control statements, rather than using “Group membership” field statements and including the group names in each line of the data file.
• A “Create subdirectory” control statement complements the “Create subdirectories” control statement allowing a single subdirectory of the home directory (possibly multi-level) to be created, the attributes of the lowest level directory to be set, and one or more trustee assignments created, granting objects rights to the lowest level directory. Multiple “Create subdirectory” control statements may be used.
• Supports a “Role membership” field for adding users to organizational roles.
• Supports “Role membership add” and “Role membership remove” control statements allowing adding users to and removing users from organizational roles without having to place the role names in every entry in the data file.
• Supports setting passwords for users in Active Directory via the “Set AD domain passwords” control statement when Novell Account Management 2.x is installed.
• Supports creating a second home directory for each user. This may be on a different volume and server to the primary home directory, and it is not stored in the “Home Directory” attribute. Six new control statements are available for creating and customizing the second home directory. They are “Create second home directory”, “Second home directory volume”, “Second home directory path”, second home directory rights”, “Second home directory restriction” and “second home directory attributes”.
• Supports a “Set directory ownership” statement to force ownership of the home directory, any subdirectories created within it, and the second home directory if created, to be assigned to the user. By default ownership remains with the user running jrbimprt.
• Supports an “iFolder server” field name allowing each user to be assigned to an iFolder server under NW 6.5.
• Supports a third section named “Fixed values” in the control file. This gives values for attributes to be assigned to all users, avoiding the need to use a template or to duplicate those values in each line of the data file. In conjunction with this, a new control statement has been added for controlling the order in which attributes from the different sources (a template, the data file or the “Fixed values” section of the control file) are set.
• Supports setting universal passwords under NW 6.5 via the “Set universal passwords” control statement.
• Supports multiple values for a single field in the control file. Both field and value separators may be specified allowing consecutive values for the same field. This eliminates the need to repeat a particular field name once for each value to be set, and simplifies the use of jrbimprt where a different number of values may be set for each user.
• Can generate and set random passwords, and save these passwords to a file. The passwords may be of any length and maybe alphabetic, numeric or alphanumeric.
• Supports storing the directory quota set on the home directory, or the volume quota set on the home volume, in NDS so that the value can be read via LDAP.
• Supports a “Retain NDS password case” control statement to retain the case of NDS passwords. This may be needed with Novell Account Management 3.x when synchronizing passwords with Active Directory and “MAINTAINPASSWORDCASE” is set in asamcore.conf.
• Supports a “Target tree” control statement allowing the target tree to be named when connected to multiple trees.
• Can delete users’ Netmail directories.
• Supports a user name and password being provided on the command line for authentication to the tree.
• Supports associating users with ZEN policy packages via a “Zen add policy package” control statement or the “Zen policy package” field name. Users may be removed from policy packages via a “Zen remove policy package” control statement.
• Supports associating users with ZEN applications via a “Zen add application” control statement or the “Zen application” field name. Users may be removed from applications via a “Zen remove application” control statement.
• Supports the ability to create and delete user subdirectories in class group directories.
• Can delete users’ iFolder directories via the “iFolder directory” and “Delete iFolder directory” control statements.
• Can export data from NDS into a file, which can be modified and subsequently re-imported.
• Supports the new NetWare Core Protocols (NCPs) introduced in NW 6.5 SP2 which use paths encoded in UTF-8 format to avoid issues with extended characters and different code page settings.
• Supports deleting directories associated with users without deleting the users themselves.
• Supports deleting the home directory contents but retaining the actual home directory.
• Supports copying files or a directory structure into the home directory or one of its subdirectories.
• Can log to the output file, the jrbimprt version, the name of the person running it, the date and time, and the names and paths for the control and data files.

Jrblist

A graphical utility to display the contents of a text file using the JRButils graphical display routines. This may be useful to redisplay output logged to a file, or to combine output from several programs (e.g. dquota, lastlgn and pwdexp in a login script) and then display it.

Jrbmap

Jrbmap is a replacement for Novell’s map program, primarily for use in batch files where it can map drives ‘silently’ without prompting if the drive is already a search drive. While it does not have all the features of map, it has numerous features which map does not have. Its features include:

• Can specify alternative paths so that in the event of one being unavailable it will try the next (this can be used for all applications so that in the event of one volume failing, the application will simply be retrieved from the corresponding volume on another server).
• Can map to both NetWare and Windows drives.
• Can save existing mappings to the parent environment under NT/2000/XP and subsequently restore from there.
• Supports ‘map root’.
• Supports ‘map next’.
• Can delete drive mappings.
• Can map multiple drive letters in a single command.
• Can save all mappings to a file and subsequently restore them.
• Can display current mappings including the paths for local drives.
• Can force truncation of the lowest level directory to eight characters. This could be useful in a login script e.g. #jrbmap p:=vol1:users\%LOGIN_NAME /b
• Can map drives across NDS trees with the username and password specified as options on the command line when there is no existing authenticated connection to the target tree.
• Can map to a user’s home directory by specifying the path as ~HOME.
• Accepts paths in either the DOS or LONG name space.

Jrbpass

Jrbpass is a graphical utility for changing passwords. Unlike setpword which sets them en masse, jrbpass allows a user to change their own password, or Help Desk staff to set passwords for individual users. Features include:

• Can change the NetWare or universal password.
• Can select the tree in which to change passwords.
• Can change the password on the local workstation if the user is logged in from NT, W2000 or XP.
• Can change the user’s NT domain password when Novell Account Management, Corporate Edition or NDS for NT is installed.
• Can change the user’s AD or NT domain password when logged into the domain directly i.e. Novell Account Management or its predecessors are not installed.
• Can set simple passwords for Novell Modular Authentication Services (NMAS) and Native File Access (NFA).
• Can change GroupWise passwords.
• Supports NW 3.x and bindery mode on NDS servers.
• Can search the tree or bindery for a user.
• When used by someone with sufficient rights to change the password of another user, the password expiration date can be retained. By default NetWare will expire the new password.
• When used by someone with sufficient rights to change the password of another user, the password expiration date can be updated by the password expiration interval.
• When used by someone with sufficient rights, it can unlock an account that has been locked by NetWare’s intruder detection.
• Can modify the interface via command line switches.
• Can log all details of attempts to change passwords to a file, including the name of the person running jrbpass.
• Can expire a universal password when changed by a privileged user. Unlike NDS passwords, NetWare does not expire a universal password but jrbpass can set the expiration date to 1 January 1992 after the password is set. This provides consistent behaviour when NDS and universal passwords are changed by a privileged user.
• Can automatically close after a specified delay when a password is successfully changed.

Jrbpurge

Jrbpurge allows selective purging of files in a single directory, in an entire directory tree, or for an entire volume. Features include:

• Supports purging by name.
• Supports purging by size.
• Supports purging by owner.
• Supports purging by deleter.
• Supports purging by deletion date and time.
• Can query whether or not to purge each file.
• Can specify multiple files to purge in a single run e.g. *.obj,*.tmp,*.swp,fred.bak.
• Can purge all volumes on a server in a single command.

|

[ Home | Purchasing | JRButils for NetWare | JRButils for AD | Search ]