Sophos

Online support

Product maintenance

Contact support

Support services

Sophos Endpoint Security and Control: Novell Directory Services (NDS) support

Sophos Anti-Virus and Enterprise Console support Novell Directory Services (NDS) in four areas, each of which is described more fully below:

A separate article details installation in a NetWare environment.

The NDS credentials format

In each of the four components listed above, the following format is used for the NDS credentials:

[account]|[Tree]|[Server]

  1. Account
    The account name must use the fully distinguished user name, for example:
    • cn=peter.ou=support.o=mycompany.c=uk
  2. Tree
    The tree name, for example:
    • support
  3. Server
    The server name must use the fully distinguished server name, for example:
    • cn=myserver.o=mycompany.c=uk
    • cn=peter.ou=support.o=mycompany.c=uk|support|
      cn=myserver.o=mycompany.c=uk

The separators between the NDS credentials are | (pipe) characters, and the text should all be on one line.

EM Library

  1. At the Windows computer running EM Library, from the 'CID properties' menu, select the 'Credentials' tab.
  2. Click 'NDS details', to open the NDS Information dialog box
  3. Enter the tree name, the fully distinguished user name and the server name in the format:
    cn=user.o=organisation
    If you are uncertain what to enter, run the NetWare 'NWADMIN' utility supplied with the NetWare Windows client.
  4. Click 'OK'. The credentials are displayed as a single string. In the example above, the string would be:
    cn=peter.ou=support.o=mycompany.c=uk|support|
    cn=myserver.o=mycompany.c=uk
    (that string should all be on one line).
  5. Ensure that the account specified has full permissions to the update location.

Sophos AutoUpdate

  1. At the Windows computer, right-click on the shield icon in the system tray and select 'Configure updating'. The 'Properties for Sophos AutoUpdate' dialog is displayed.
  2. In the 'User name' field, enter an NDS fully distinguished user name in the format:
    [account]|[Tree]|[Server]
  3. Ensure that the account specified has read and filescan permissions to the update location.

Enterprise Console

The updating policy in the Sophos Enterprise Console supports NDS.

  1. At the Windows computer running Enterprise Console, in the tree view on the left-hand side, select a group and click 'Updating policy'.
  2. In the 'Set updating policy for computers...' dialog, select the 'Type of computer'. Click 'Configure'.
  3. In the 'Set updating policy for...' dialog, in the 'User name' field, enter an NDS fully distinguished user name in the format:
    [account]|[Tree]|[Server]
  4. Ensure that the account specified has read and filescan permissions to the update location.

The Windows installer setup.exe

You can install the Windows computer components by running setup.exe. There are two ways this can be done:

  1. Running setup.exe directly from the CID
    When you run setup.exe directly from the CID, the Setup dialog box is displayed.
    1. In the Username field, enter an NDS fully distinguished username in the format:
      [account]|[Tree]|[Server]
    2. Ensure that the account specified has read and filescan permissions to the update location
  2. Running setup.exe with the required parameters
    You can run setup.exe on a command line using parameters that specify which account and password to use. For example:
    \\netware_server\sys\sophos\esxp\setup.exe -user "cn=peter.ou=support.o=mycompany.c=uk|support|
    cn=myserver.o=mycompany.c=uk" -pwd mypassword
    (the text above should all be on one line).
    An NDS fully distinguished username may be entered in the following format:
    [account]|[Tree]|[Server]
    The account specified will need read and filescan permissions to the update location.

Note: The NDS fully distinguished username must be surrounded by speech marks for the command to execute successfully.

If you need more information or guidance, then please contact technical support.