NetWare Workstation for Macintosh

NetWare^® for Macintosh client software provides access to NetWare services from Macintosh workstations. The Macintosh client software includes the AppleShare 7.1 (workstation) software for logging in to servers, and the following components:

NetWare UAM, for NetWare password encryption
NetWare Notify, for receiving messages from other users
Extension Mapper, for attaching Macintosh application information to files on servers running NetWare 4.0

The NetWare Tools^TM application is an important new component of the client software. Using NetWare Tools from a Macintosh workstation, you can administer servers running NetWare for Macintosh v3.0 or later. The NetWare Tools application consists of the utilities described below:

The Users and Groups utility enables you to manage NetWare users and groups.
The Rights utility and the File and Folder Flags utility enable you to manage folder and file security.
The Print Queue utility enables you to manage NetWare print queues.
The Messaging utility enables you to send messages to other NetWare users.

This guide describes how to install the NetWare for Macintosh client software, how to carry out basic NetWare for Macintosh operations, and how to use each utility provided with the NetWare Tools application.

What This Guide Contains

This guide contains the following chapters and appendices:

Installing and Using the Client Software describes how to install the NetWare for Macintosh client software, and explains how to carry out such basic user operations as accessing shared data and printing to a NetWare queue.
Working with NetWare Tools details the features and special terms associated with the NetWare Tools application. It explains how to launch each utility, and describes such new elements as the Workspace and the session file.
Managing Users and Groups describes how to set up your user base with the Users and Groups utility. It explains how to add and delete users and groups, how to create passwords, how to add a user to a group, and how to make one user security-equivalent to another.
NOTE: Both the Users and Groups utility and the Rights utility enable you to set trustee rights. Managing Users and Groups discusses how to set trustee rights from the Users and Groups utility.
Managing Rights and Flags contains a discussion of NetWare security and its implications for Macintosh users. It details using the Rights utility to set trustee rights, and describes how to set flags with the File and Folder Flags utility.
Managing Print Queues discusses how to use the Print Queue utility to manage NetWare print queues.
Sending and Receiving Messages describes how to use the Messaging utility. It explains how to send messages to other NetWare users and how to specify whether you wish to receive messages.
Mapping Filename Extensions discusses how to use the Extension Mapper application on NetWare 4.0 servers.
Troubleshooting covers how to resolve any problems that may occur when you use the NetWare Tools application.
A glossary and an index appear at the end of this guide.

Who Should Read This Guide

These types of NetWare for Macintosh users should use this guide:

The Network Administrator
This user is responsible for managing a NetWare network. He or she must have Supervisor status, and should be familiar with NetWare terms, management tools, and operation.
The Workgroup Manager
The network administrator can assign Workgroup Manager status to one or more NetWare for Macintosh end users. A Workgroup Manager has responsibility for one or more groups of NetWare users. A Workgroup Manager can assign users to a designated group, delete users from the group, and assign trustee rights to the group and its members.
The Queue Operator
This user is responsible for managing NetWare print queues. Supervisor status automatically gives the network administrator Queue Operator status. In addition, the network administrator may choose to give Queue Operator status to a NetWare for Macintosh end user.
The NetWare for Macintosh End User
This type of user may occasionally need to carry out limited administrative tasks; for example, the end user may need to set trustee rights for personal folders, or manage his or her own print jobs.

A Network Administrator's Tasks

The network administrator can carry out these tasks from a Macintosh workstation:

Install the NetWare for Macintosh client software. See Installing the NetWare for Macintosh Client Software.
Perform basic user operations. See Basic NetWare for Macintosh Operations.
Set up and maintain NetWare users and groups. See Managing Users and Groups.
Set trustee rights for volumes, folders, and files. See Managing Rights and Flags.
Set folder and file flags. See Managing Rights and Flags.
Manage NetWare print queues. The network administrator can perform these tasks on any print job in a queue:
View the status of a job
Get information about a job
Place a job on hold
Release a job from hold
Determine the date and time a job will print
Delete a job
Move a job
For information, see Managing Print Queues.
Send and receive short messages. See Sending and Receiving Messages.
Use the Extension Mapper to change default extension mappings on a NetWare 4.0 server. See Mapping Filename Extensions.

A Workgroup Manager's Tasks

The Workgroup Manager can carry out these tasks from a Macintosh workstation:

Perform basic user operations, such as copying data to a NetWare server or printing to a NetWare print queue. See Basic NetWare for Macintosh Operations.
Add users to a group or delete users from a group. See Managing Users and Groups.
Set trustee rights for the users in a group. See Managing Rights and Flags.
Use the Print Queue utility to administer his or her own print jobs. See Managing Print Queues.
Send and receive short messages. See Sending and Receiving Messages.

A Queue Operator's Tasks

From a Macintosh workstation, the Queue Operator can carry out the same print queue management tasks as the network administrator. For a list of these tasks, see A Network Administrator's Tasks.

An End User's Tasks

Depending on the rights granted by the network administrator, a NetWare for Macintosh end user can carry out these tasks:

Perform basic user operations, such as copying data to a NetWare server or printing to a NetWare print queue. See Basic NetWare for Macintosh Operations.
Set trustee rights and flags for certain folders and files. See Managing Rights and Flags.
Use the Print Queue utility to administer his or her own print jobs. See Managing Print Queues.
Send and receive short messages. See Sending and Receiving Messages.
Use the Extension Mapper to change personal extension mapping on a NetWare 4.0 server. See Mapping Filename Extensions.

How to Use This Guide

This guide describes Macintosh client software and the NetWare Tools application, which can be used with NetWare 3.x or later and with NetWare 4.0. The guide assumes that the NetWare server and NetWare for Macintosh are installed and configured and that the basic setup tasks are complete.

Please see NetWare for Macintosh Installation and Maintenance for information about installing and configuring Macintosh access on NetWare servers.

Working With NetWare 3.x Servers

In most cases, the examples in this guide are identical whether you are working with NetWare 3.x or NetWare 4.0 servers. However, sometimes explicit information is provided about how Macintosh workstations interact with a NetWare Directory Services environment, which applies only to NetWare 4.0.

If you are using the NetWare Tools application or the NetWare UAM with NetWare 3.x servers, the windows might show slightly different information than the example windows shown in this guide. In each case, the information you see while using the software will be appropriate for the version of NetWare on the server you are using.

Working with NetWare 4.0 Servers

This section provides information about how the NetWare Directory Services and bindery emulation features of NetWare 4.0 affect Macintosh workstations and the use of NetWare Tools.

For background information on bindery contexts and Directory Services, see NetWare for Macintosh Installation and Maintenance for NetWare for Macintosh 4.0 and NetWare 4.0 Concepts.

Using the NetWare for Macintosh Client Software (NetWare 4.0)

NetWare for Macintosh 4.0 does not provide direct access to NetWare Directory Services (NDS). Instead, bindery emulation enables a Macintosh workstation to access the Directory database and handle directory objects as though they were bindery objects.

In most cases, bindery emulation is transparent to the Macintosh user, because NetWare 4.0 objects appear as pre-4.0 bindery objects. However, during the NetWare for Macintosh installation on a NetWare 4.0 server, a bindery context is set on each NetWare server that supports Macintosh access. The bindery context on a server affects users' ability to access NetWare services.

In addition, when a Macintosh user changes his or her password on a particular NetWare 4.0 server, the password is changed on all other servers in the same bindery context.

When the NetWare User Authentication Methods (UAM) software is installed on the Macintosh workstation and NetWare encrypted passwords are enabled on the NetWare 4.0 server, the NetWare UAM Macintosh dialog displays the bindery context and Directory Services Tree of the NetWare 4.0 server.

Using the NetWare Tools Application (NetWare 4.0)

The NetWare Tools application has utilities for administering users and groups, security, print queues, and messaging on NetWare servers. The NetWare entities you can work with in NetWare Tools include both file system objects (such as volumes, folders, and files) and bindery objects (such as users, groups, and print queues).

On NetWare 4.0 servers, file system information is maintained locally on a server, just as it is in earlier versions of NetWare. However, in a NetWare 4.0 Directory Services environment, what appear to be bindery objects (users, groups, and print queues) are actually Directory objects within a bindery context.

For example, if you create a new user on a server named MAIN, whose bindery context is set as follows

OU=Marketing. O=XYZ_Corp.

and there are five other servers who have the same bindery context set, the new user will appear identically on all six servers.

Setting Up Users, Groups, and Rights (NetWare 4.0). Unlike standard NetWare 4.0 tools such as NWADMIN and NETADMIN, the Macintosh NetWare Tools application has a built-in safeguard against creating Macintosh users in a bindery context that the Macintosh users themselves cannot access. Because these tools run on a Macintosh workstation, you cannot mistakenly create users and groups in a place in the Directory Tree that is not accessible to Macintosh users.

WARNING: Because Macintosh access depends on bindery emulation, it is inadvisable to change the bindery context on any NetWare 4.0 server that supports Macintosh access. If you create users and groups in one bindery context and then go to the server's console and change the bindery context, all Macintosh users you created in the previous context will be unable to log in to the server.

Administering and Viewing Print Queues (NetWare 4.0). NetWare for Macintosh print queues are implemented as directories, so they are part of the file system of a particular server. On the other hand, they are Directory objects, which appear to exist on all servers in the same bindery context.

A Macintosh user who is logged in to a NetWare 4.0 server and using NetWare Tools can see all print queues defined in the server's bindery context. However, the user cannot view or administer the jobs in a queue unless he or she is logged in to the server on which the actual print queue directory resides. Therefore, if a user tries to view queues that reside on a server that is not mounted, NetWare Tools opens a login dialog to the server on which the queue resides.

Print queues are usable by the group EVERYONE unless the administrator explicitly restricts access. In NetWare 3.x, the group EVERYONE includes all NetWare users on a particular server. In NetWare 4.0, the group EVERYONE includes all NetWare users in the server's bindery context. In large network environments that support many bindery contexts and Directory Services trees, it is possible for a DOS user who is not defined in the bindery context and is therefore not a member of the group EVERYONE to log in to a server and be unable to print to its queues.

NOTE: For NetWare print queues to be visible in the Chooser, the administrator must configure an AppleTalk "front end" or "spooler" on the server, which responds to Chooser requests on behalf of the queue. Usually a spooler is assigned the same name as the queue it represents, and they are referred to collectively as a print queue. However, because the AppleTalk spooler responds to all Chooser requests of type LaserWriter or ImageWriter, Macintosh users may have the ability to see print queues that have restricted access and which they do not have the NetWare rights to use.

Sending Messages to NetWare Users (NetWare 4.0). Under most circumstances, a Macintosh workstation must have the NetWare Notify software installed to receive messages. However, because the AFP implementation in NetWare for Macintosh 4.0 handles messaging, the NetWare Notify extension is not required to receive messages on Macintosh workstations that are running AppleShare 7.1 and are communicating only with servers running NetWare 4.0.

Admin User Rights (NetWare 4.0). On a NetWare 4.0 server, the Admin user is created automatically and assigned the rights necessary to administer the Directory Services tree. Because bindery emulation is used for Macintosh workstations, the NetWare Tools application sees the Admin user as an ordinary user with no special privileges.

HINT: If you want to, you can assign Supervisor equivalence to Admin to allow that login to create users and groups and perform other supervisory functions.

Using the Extension Mapper (NetWare 4.0 Only)

The Extension Mapper application requires that the user be logged in to a NetWare 4.0 server.

Each NetWare 4.0 server that supports Macintosh access maintains a default set of mappings that associate filename extensions such as ".TXT" and ".BAT" with Macintosh applications. The Extension Mapper application allows Macintosh users to remap the default extensions to automatically use their preferred Macintosh applications, and to add new extensions to the default list or to the personal list.

Mapping Filename Extensions describes how to use the Extension Mapper.

Conventions

In this manual, this type font indicates new terms, key concepts, or emphasis. The following icons denote special types of information:

NOTE: The Note icon introduces additional technical information about a command or procedure.

HINT: The Suggestion icon denotes information that may be useful, but is not critical.

IMPORTANT: The Important icon emphasizes important information. It is a visual cue to key concepts and facts.

WARNING: The Warning icon carries a stronger message than the Important icon and appears only when you must exercise due caution to prevent a critical or irreversible error.