100 000457 001 Novell NetWare for Macintosh Users Guide Dec1988

NOVELL 4 User’s Guide NetWare -N FOR MACINTOSH. DISCLAIMER Novell, Inc. makes no representations or warranties with respect to the contents or use of this manual, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time, without obligation to notify any person or entity of such revisions or changes. Further, Novell, Inc. makes no representations or warranties with respect to any NetWare software, and specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc. reserves the right to make changes to any and all parts of NetWare software, at any time, without obligation to notify any person or entity of such changes. FCC WARNING Computing devices and peripherals manufactured by Novell generate, use, and can radiate radio frequency energy, and if not installed and used in accordance with the instructions in this manual, may cause interference to radio communications. Such equipment has been tested and found to comply with the limits for a Class A computing device pursuant to Subpart J of Part 15 of the FCC Rules, which are designed to provide reasonable protection against radio interference when operated in a commercial environment. Operation of this equipment in a residential area is likely to cause interference, in which case the user—at his own expense—will be required to take whatever measures may be required to correct the interference. Some components may not have been manufactured by Novell, Inc. If not, Novell has been advised by the manufacturer of the component that the component has been tested and complies with the Class A computing device limits as described above. © Copyright 1988 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied, stored on a retrieval system, or transmitted without the express prior written consent of the publisher. Novell, Incorporated 122 East 1700 South P.O. Box 5900 Provo, Utah 84601 USA December 1988 Edition Manual Revision 1.00 For NetWare for Macintosh Novell Part #100-000457-001 PRO +489 Contents Figures Preface About This Guide What You Need to Know xiii Do You Have What You Need? xiii Chapter 1 Welcome to NetWare What Is a NetWare Network? 1-3 The Role of the File Server 1-3 Network Disk Storage 1-5 Who Can Use the Network? 1-6 How Does NetWare Security Work? 1-8 How Does NetWare for Macintosh Work? 1-10 Where to Go from Here 1-11 Chapter 2 Getting Started Creating a Startup Disk 2-3 Installing the System and AppleShare Files 2-4 Installing the NetWare Desk Accessory 2-6 Checking Your Macintosh Clock 2-8 166/Rev1.00 Logging In to a File Server 2-9 Selecting a File Server 2-9 Entering a Password 2-11 Selecting a Volume 2-13 Logging Out of a File Server 2-15 Where to Go from Here 2-15 Chapter 3 Working on the Network Accessing Volumes 3-3 Using the Finder on the Network 3-4 Folder Icons 3-5 Gray Folders 3-5 Dropbox Folders 3-6 Plain Folders 3-6 Black-Tab Folders 3-6 Access Privilege Icons 3-7 Can’t See Files 3-7 Can’t Make Changes 3-7 Can’t See Folders 3-7 Working with Folders and Files on the Network 3-8 Creating Folders 3-8 Naming Folders 3-8 Creating Files 3-9 Opening Files 3-10 Copying Folders and Files 3-10 Modifying Files 3-11 Flagging Files 3-11 Hidden 3-11 Indexed 3-11 Modified Since Last Backup 3-12 System 3-12 Transaction Tracking 3-12 Using Applications 3-12 Printing on the Network 3-14 Where to Go from Here 3-18 ii User’s Guide 166/Rev1.00 Chapter 4 Understanding NetWare Security Login Security 4-3 Username 4-3 Passwords 4-3 Other Login Restrictions 4-4 Folder Security 4-5 Effective Rights 4-7 Maximum Rights Mask 4-8 Trustee Rights 4-9 Individual Trustee Assignments 4-9 Group Assignments 4-10 Security Equivalence 4-10 Effective Rights Revisited 4-11 How Folder Attributes Affect Security 4-14 Private Attribute 4-14 Invisible and System Attributes 4-15 File Security 4-16 File Flags 4-16 Read-Only 4-16 Shareable 4-16 NetWare Security and Folder Icons 4-17 Where to Go from Here 4-19 Chapter 5 Security and the NetWare Desk Accessory Accessing the Rights Module 5-3 Viewing Your Rights in a Folder or Volume 5-7 Viewing Your Trustee Rights 5-7 Viewing Your Effective Rights 5-9 Viewing and Modifying a Maximum Rights Mask 5-10 166/Rev1.00 Contents iii Sharing Your Folders with Others 5-12 Making a Folder Private 5-12 Adding Trustees 5-14 Removing Trustees 5-16 Letting Others Make Changes 5-17 Creating a Bulletin Board 5-19 Creating a Dropbox Folder 5-21 Giving Others Ownership in a Folder 5-23 Where to Go from Here 5-25 Chapter 6 Using the NetWare Control Center Launching the NetWare Control Center 6-3 Using the File and Edit Menus 6-4 Open Server 6-4 Close Window 6-4 Close All Windows 6-4 Understanding the Server Window 6-5 Showing and Hiding the Server Window 6-6 Accessing File Server Information 6-7 Using the Server Window to Log In 6-7 Listing Volumes 6-8 Listing Folders and Files 6-9 Listing Users 6-11 Listing Groups 6-12 Accessing Volume Information 6-13 Name 6-15 Owner 6-15 Volume Type 6-15 Volume Size 6-15 Available Space 6-15 Maximum Directory Entries 6-15 Directory Entries Available 6-15 Calculate Contents 6-16 Accessing Folder and File Information 6-17 Name 6-19 Owner 6-19 Calculate Contents 6-19 User’s Guide 166/Rev1.00 Created 6-19 Name 6-20 Owner 6-20 State 6-20 Resource Fork 6-20 Data Fork 6-20 Total Size 6-21 Created 6-21 Modified 6-21 Accessed 6-21 Archived 6-21 Accessing User Information 6-22 Accessing Group Information 6-24 Security and the NetWare Control Center 6-26 Viewing Your Trustee Assignments 6-26 Viewing Your Group's Trustee Assignments 6-28 Working with Trustee Rights 6-31 Viewing Trustee Rights 6-31 Modifying Trustee Rights 6-33 Adding Trustees 6-36 Removing Trustees 6-38 Accessing a Maximum Rights Mask 6-39 Viewing Your Effective Rights 6-42 Viewing and Modifying Folder Attributes 6-43 Modifying File Flags 6-45 Changing Your Password 6-46 Chapter 7 If Something Goes Wrong When You're Logging In 7-3 The Chooser Isn’t Present 7-3 The Chooser Won't Open 7-4 The AppleShare Icon Isn’t Present in the Chooser 7-5 A Dialog Box with a Bomb Icon Appears 7-5 The Chooser Won’t Let You Select a File Server 7-6 The File Server Isn’t Listed in the Chooser 7-7 166/Rev1.00 Contents You Can’t Log In with Your Registered Username or Password 7-8 Your Startup Disk Failed to Automatically Access the File Server 7-9 When You're Using the File Server 7-10 You Can’t Open a Volume that Appears on the Desktop 7-10 You Can’t Delete a Folder 7-11 You Can’t Open an Application Stored on the File Server 7-11 The Folder You Want Doesn’t Appear in the Directory 7-12 You Can’t Copy a Folder Stored on the File Server 7-13 You Can’t Close, Save, or Continue Your Document 7-13 The NetWare Desktop Accessory Won’t Work 7-14 Appendix A About the Current Startup Disk Appendix B DOS File Naming Conventions DOS Filenames B-2 Apple Filenames B-3 NetWare for Macintosh Conversion B-3 DOS to Apple B-4 NetWare Conversion: Example B-4 Glossary Trademarks Index vi User’s Guide 166/Rev1.00 Chapter 1 Chapter 3 166/Rev1.00 Figures Welcome to NetWare Figure 1.1 A NetWare Network 1-4 Figure 1.2 File Server Disk Storage 1-5 Figure 1.3 Types of Network Users 1-6 Figure 1.4 NetWare Security 1-8 Figure 1.5 How the “Gateway” Works 1-10 Getting Started Figure 3.1 Queue Configurations 3-15 vii 166/Rev1.00 About This Guide This guide explains what you should know to work on a NetWare network from your Macintosh. It explains what a NetWare file server is and how you use the file server from your workstation to store and share your folders and files. Chapter 1 is a general introduction to NetWare. It explains what a NetWare network is and the concepts you should be familiar with to work on the network. Chapter 2 explains how to access a NetWare file server from your workstation. Chapter 3 covers the typical tasks you will be performing as you use the NetWare file server to create, manipulate, print, and store documents. Chapter 4 examines how NetWare security works. Chapter 5 shows you how to use the NetWare desk accessory to view and change trustee security. Chapter 6 presents the NetWare Control Center application. You can use this chapter as a reference for viewing network information and modifying security. Chapter 7 offers some possible solutions for problems that might come up as you work on the network. Appendix A provides additional information about startup disks. Appendix B explains file naming rules for DOS files, and how Apple filenames are affected when displayed on a DOS-based computer. A glossary of technical terms and an index are also included. User’s Guide 166/Rev1.00 166/Rev1.00 What You Need to Know To use this guide, you need to be familiar with basic Macintosh vocabulary and skills. If opening files and using folders are not familiar tasks, you need to review your Macintosh owner’s guide before you read this guide. To access a NetWare file server, you need to find out if your supervisor has assigned you a username and password. (If you don’t have a username and password, you may still be able to access the file server as “guest.”) Do You Have What You Need? To work on a NetWare network, you need a copy of the NetWare Workstation Installer disk. Ask your supervisor for a copy if you do not have one. Also, this guide assumes that a NetWare file server is set up on your network and your Macintosh is properly connected to it. About This Guide xi 166/Rev1.00 Chapter 1 Welcome to NetWare This chapter explains what you need to know to begin working on a NetWare network. It covers the important NetWare terms and concepts and the special features NetWare has developed for networking Macintosh. This chapter answers the following questions: = What is a NetWare network? = How does NetWare for Macintosh work? = How does NetWare security work? = Who can use NetWare? The answers to these questions will prepare you to work with NetWare from your Macintosh. User’s Guide 166/Rev1.00 What Is a NetWare Network? Networks create a way for personal computers to work with each other and with different information systems. Connecting your personal computer to a network lets you communicate with other personal computer users and share folders and files with them. A network also lets you share network resources, such as hard disks and printers. A NetWare network is designed around the concept of a file server, a computer that controls network activity. The file server provides an extensive security system that determines what users can do on the network. Within this security system, users are given specific rights which define how they can work with files and folders on the network. As a user, you will use the file server to set user security within the folders and files you create. The Role of the File Server The file server is a personal computer that provides networking services to other personal computers (or workstations). Workstations use the file server to share files, send messages, and access network information. Printers and other resources connected to the file server are also available for workstations to use. 166/Rev1.00 Welcome to NetWare 1-3 NetWare File Server Disk Storage tom Printer Workstations Figure 1.1 A NetWare Network The file server monitors and processes workstations’ requests for network resources or information. Each request is answered according to the security status of the person using the workstation. If the user is not authorized to make the request, the request is denied. Two or more file servers can be connected together to form an internetwork. On an internetwork, workstations can access many file servers at once. If your Macintosh is connected to an internetwork, your workstation can access other file servers on the internetwork. User’s Guide 166/Rev1.00 Network Disk Storage The main advantage in networking your Macintosh with other personal computers is the opportunity to share the file server’s disk storage. Information stored on the network can include documents and the applications that create them, system files that control the network, and NetWare applications that access network information. All of this information is readily available to any workstation connected to the network, provided the user has been given the rights to folders and files on the file server. (] : | (ara Volumes . Disk (os = ce Folders Workstation L NetWare . VOL: File Server Folders Figure 1.2 File Server Disk Storage A file server’s disk storage is divided into volumes. Volumes are the largest units of data on the network. Whenever you access a file server, you select the volumes you want to open. From your Macintosh, you work with volumes in much the same way you work with disks, clicking them open and moving folders and files around inside them. 166/Rev1.00 Welcome to NetWare 1-5 Who Can Use the Network? A network user is anyone who accesses the file server from a workstation. Most network users want to use the file server’s resources and security features without being bothered with the file server’s maintenance and managerial needs. These responsibilities are assumed by two special types of users: the file server’s supervisor and its operators. oe & Lic) ot) cM Supervisor User Operator Groups Figure 1.3 Types of Network Users The supervisor (also known as an administrator on Macintosh networks) is a special user created when the network is installed. The supervisor has complete control over the file server and is responsible for organizing the file server’s disk storage and updating its system files as needed. The supervisor also adds users to the network and manages each user’s activity on the network by assigning them rights. To better organize and control the network, the supervisor can assign supervisor equivalences to other users, allowing them to share in the supervision of the network. (See page 4-10.) User’s Guide 166/Rev1.00 166/Rev1.00 The supervisor can assign some users special duties over particular areas of the network; these users are called operators. An operator is given additional privileges within the network utilities that apply to that operator's area. For example, a Print Queue operator uses NetWare’s printing utilities to make sure the network’s printing services continue to run smoothly. The supervisor can also organize users with similar needs into groups. Groups offer a convenient way to assign network security, as well as distribute information over the network. Groups are assigned their own rights, and the users that belong to a group share the rights assigned to that group. For example, there could be several people on your network who are working on a method for creating more durable ice cubes. The supervisor could make each person involved in this effort a member of the group ICEBREAKERS and assign the group rights in a folder, “Iceberg Tips.” With this single assignment, the supervisor is able to give all members in the group the same rights within the folder. Welcome to NetWare 1-7 How Does NetWare Security Work? NetWare provides an extensive security system that allows users to define security for each folder they create. Depending on the kind of information that is stored on the network, it may not be desirable for some folders to be available to every network user. You will probably have some folders that you would like to protect from other users and other folders that you would like to share. Network security is a combination of login security, folder security, and file security. These three areas form a flexible security system that can be as thorough or routine as your supervisor desires. File Security Login Security i — Figure 1.4 NetWare Security Login security controls who can access a file server. Your supervisor will give you a special name that the file server will recognize each time you log in. A file server can also require each user to provide an individual password before logging in. Also, the supervisor can restrict when certain users can log in, and which files and folders they can access. User’s Guide 166/Rev1.00 166/Rev1.00 Folder security uses a system of rights that determines what users can do with folders and with files inside of folders stored on the file server. Your rights in particular folders define exactly what you can do on the network. In addition to rights, folders can be assigned folder attributes that determine how folders behave on the network (for example, whether a folder is visible). File security is created with file flags. Just as folder attributes affect how a folder behaves, file flags can affect how a file behaves. You can flag any file that you store on a file server to specify how the file can be used (such as whether the file can be written to). However, not all flags perform security functions. The Needs Archiving flag, for example, indicates whether a file has been archived since it was last modified. For more details about NetWare security, see Chapter 3. File security is also based on folder rights. Without the necessary folder rights, you cannot make changes to files in the folder, no matter how the files are flagged. Welcome to NetWare 1-9 1-10 = WE How Does NetWare for Macintosh Work? Macintosh uses a special language called AppleTalk to transmit information over the network. Because NetWare and AppleTalk are different languages, or “protocols,” they can’t exchange information directly. Instead, NetWare uses an enhancement feature, called the Service Protocol Gateway, that overcomes the language barrier. The Gateway is a software program installed in the file server (or in a specialized personal computer called a bridge). The Gateway acts as a translator between NetWare and AppleTalk, allowing the two systems to understand and respond to one another. Service Protocol Gateway Apple File NetWare Core Protocol Protocol File Server SPG Translator I Figure 1.5 How the “Gateway” Works From your Macintosh, you can ask your NetWare file server to do many different tasks for you, such as print a document or show information about a folder. Some files can be shared by Macintosh and DOS-based computers. Whether or not a file can be shared depends on the format of the file and the application that will be using the file. User’s Guide 166/Rev1.00 166/Rev1.00 Where to Go from Here Now that you know the basics of a NetWare network, you can prepare your workstation software and log in toa NetWare file server. To access the file server, you need a network startup disk. Chapter 2 explains how to create a startup disk and log in. Welcome to NetWare 4-11 166/Rev1.00 Chapter 2 Getting Started 2-1 2-2 This chapter explains how to set up your Macintosh on the network and access a NetWare file server. To access a file server you need to = Create a workstation startup disk; = Log in with your username and password; = Select the volumes you want to access. User’s Guide 166/Rev1.00 166/Rev1.00 Creating a Startup Disk To access the file server, you need a startup disk. A startup disk contains the software that lets your workstation communicate over a network, as well as the system files your Macintosh normally requires. If you already have a startup disk for your Macintosh, you can update it to use on the network. If you do not already have a startup disk, you must use an 800KB two-sided floppy diskette as a startup disk. If the disk is not initialized, follow the procedure explained in your Macintosh owner’s guide to initialize the disk. Creating the startup disk for a NetWare workstation involves two major steps: = First, you install the System and AppleShare files on the startup disk with the Installer utility. = Second, you use the Font/DA Mover utility to copy the NetWare desk accessory into the System folder. The Macintosh System Tools disk and the NetWare Utilities disk have everything you need to get started, including the latest versions of the following software: = System « Finder = Chooser = AppleShare The System folder on the Macintosh System Tools disk contains the latest versions of the system files, the Finder, and the Chooser. Getting Started 2-3 2-4 If you are installing system files on a Macintosh with 512KB RAM or a Macintosh Plus, you may not want to use the latest system files, which use more RAM than previous versions. Consult your Macintosh manual for the recommended system version. NetWare for Macintosh works with v4.2 and above. Installing the System and AppleShare Files 1. Insert a copy of the Macintosh System Tools disk into your floppy disk drive and turn on your Macintosh. If you don’t have a copy of this disk, ask your network supervisor for one. Open the disk. The Macintosh System Tools disk contains several icons, including a system folder, the Installer scripts, and the Installer utility. Double-click the Installer utility icon. The Installer dialog box appears. In the top-right corner of the box, the name of the targeted disk is shown. This should be the name of the startup disk on which you will be installing the System and AppleShare files. If any other disk name appears, click the “Drive” box to select the startup disk. If you are using a single floppy disk drive, use the Eject button to swap disks when copying the system files to your startup disk. You may have to swap disks 20 times or more. User’s Guide 166/Rev1.00 Target Disk v2.5 Installer AppleShare (v1.1) i] HARD DISK tosh Plus Installation (v4.2) Macintosh SE Installation (v4.2) ImageWriter (v2.6) LaserWriter (v5.0) Drive Remove Help Macintosh II Installation (v4.2) | (Remove ) Cie) Installation will leave 13794K free on this disk; Removal will free zero K. 4. Highlight AppleShare and, if you are updating or installing the System files, shift-click the appropriate system (Macintosh Plus, Macintosh SE, or Macintosh Il). If you do not need to update your system files, you only need to select AppleShare. Be sure, however, that you have selected your startup disk as the target disk, so that the AppleShare file will be installed in the System folder. For each selection you highlight, a message appears telling you how much room you will have left on your target disk if you perform the installation. If adequate space is not available, the Install button stays dimmed and a message tells you how much additional room is needed. Refer to your Macintosh owner’s guide (and, if 166/Rev1.00 Getting Started 2-5 2-6 you have a Laserwriter, the LaserWriter and LaserWriter Plus manual) for help with claiming space on a startup disk. 5. Click the Install button. When you click the Install button, the Installer updates the system files on your startup disk and installs the AppleShare software. To repeat the installation on a another startup disk, use the Drive or Eject button to select a new disk. Press the Quit button to close the Installer when you are finished. Installing the NetWare Desk Accessory The system files and the AppleShare software are the only files you need on your startup disk to access the network. However, you will probably also want to install the NetWare desk accessory on your startup disk. The NetWare desk accessory (included on the NetWare Utilities disk) provides a convenient way to view network information. (For more information on the NetWare desk accessory, see Chapter 5.) The NetWare desk accessory contains a Rights module that allows you to examine and modify a folder’s security information. This same information can be viewed and modified by using the NetWare Control Center application, but under most circumstances the NetWare desk accessory will be faster and easier to use. Like other desk accessories, the NetWare desk accessory can be installed using the Macintosh Font/DA Mover. A copy of the Font/DA Mover is included on the NetWare Utilities disk. For help in using the Font/DA Mover, follow the instructions in your Apple Macintosh Utilities User’s Guide. User’s Guide 166/Rev1.00 166/Rev1.00 Copy the Rights module from the NetWare Utilities disk to the System folder. Open the System folder on the startup disk. If the System folder is on a floppy diskette and you have only one disk drive, eject the disk after opening it. Insert the NetWare Utilities disk and open it. Drag the Rights icon from the NetWare Utilities disk to the System folder. The Rights module must be in the same folder with the system files and the Finder; otherwise, the NetWare desk accessory will not be able to access the module. Chapter 5 of this manual explains more about the NetWare desk accessory and how to use it. Getting Started 2-7 Checking Your Macintosh Clock Before you log in to a file server, you should check your Macintosh’s clock. 1. Choose the alarm clock from the Apple menu. If no alarm clock is listed in the Apple menu, it may have been removed. It can be installed using the Font/DA Mover. 2. Click the “lever” on the right side of the clock. A control panel appears below the clock, displaying a date and below that a clockface, a calendar, and an alarm. 09:43:57 AM e+;—Lever 2/11/89 If the date displayed is incorrect, click the digits you want to change. Then click the Up- or Down-arrow to scroll the numbers higher or lower. Or use the keyboard to type the numbers. If the time displayed is incorrect, click the clockface icon. The time appears where the date was formerly displayed. If the time displayed is incorrect, click the digits you want to change. Then click the Up- or Down-arrow to scroll the numbers higher or lower. When you have finished, you can hide the control panel by clicking the lever again. Click the close box to hide the alarm clock. User’s Guide 166/Rev1.00 Logging In to a File Server When you have created your startup disk, you can use it to start your Macintosh. Then you can select a file server and log in. To log in, you must know the username that the supervisor has created for you on the file server. If you do not have a username, most file servers will let you log in as GUEST, a user with very limited rights. Selecting a File Server The Chooser desk accessory lets you select the file server you want to access. The Chooser lists the names of all available file servers. These are the file servers running NetWare v2.15 or above. (The Chooser is a regular feature of the Macintosh system software and is found under the Apple menu.) 1. Start up your Macintosh and choose Chooser from the Apple menu. The Chooser displays the AppleShare icon, as well as icons for any other available resources (such as printers). 2. Click the AppleShare icon. The Chooser lists the NetWare file servers that are currently available from your workstation. It will also show any AppleShare file servers that are connected. 166/Rev1.00 Getting Started 2-9 2-10 Chooser ; Select a file server: AppleTalk L... LaserWriter | User Name: @ Active AppleTalk O Inactive oI 3.3 If the AppleTalk option is inactive, a dialog box appears asking if you want AppleTalk turned on. Click OK to make AppleTalk active. 3. Highlight the name of the file server you want to log in to, and enter your username. Tf you have a username on the network, type the name in the UserName box. In the future, the startup disk will enter your name in the box for you. If you are logging in as GUEST, do not type a name in the UserName box, unless the supervisor has assigned a password to the username GUEST. 4. Click OK. A dialogue box appears that allows you to log in to the file server you have selected. User’s Guide 166/Rev1.00 Entering a Password After you have selected a file server from the Chooser window, the login dialogue box will appear. This dialogue box gives you two login options: = You can log in as GUEST; = You can log in as a Registered User. The GUEST option does not require a password or any additional information, unless a password has been assigned by the system supervisor. If you are logging in as a guest, click Guest, click OK, and continue with “Selecting a Volume” on Page 2-12. 1. Make sure the Registered User option is checked. This option is checked for you by default. 2. Make sure your username is entered correctly in the Name box. Tf you entered your username in the Chooser window, the name appears in the dialog box and you are checked in as a Registered User. If you did not enter your username in the Chooser window, type the name. Click in the password box to enter the password. Use the Backspace key to correct a typing error. (If you entered your username in the Chooser window, it will be entered automatically every time you log in.) 166/Rev1.00 Getting Started 2-11 = Connect to the file server "GERONIMO" as: © Guest @ Registered User Name: [cindy Password: | (Clear text) Cancel Set Password OK 2.0.1 If a password is required on your file server, type your password in the Password box. As you type, your password is displayed as a row of dots so that others can’t see it. A NetWare file server does not distinguish between upper-case and lower-case characters. If you don’t know what your password is or whether a password is required, check with your supervisor. (For details about how to change your password, see page 6-46.) After you enter your password, click OK. When you have successfully accessed the file server, a new dialog box appears that lets you select server volumes. User’s Guide 166/Rev1.00 166/Rev1.00 Selecting a Volume To finish logging in to a file server after you have entered your username and password, you must select the volumes you want to work with. The volume dialog box provides a list of all the volumes on the file server. You can select as many volumes as you want. There will always be at least one volume, servername_SYS, available. If you quit the Chooser without selecting a volume, you are not logged in to the file server. (For more details about working with network volumes, see page 3-2.) 4; Highlight the name of each volume you want to access. Notice that the name of the server you are accessing appears in the upper-left corner of the dialog box. You can shift-click to select more than one volume at a time. If you check the box to the right of a volume name, that volume is selected for you automatically the next time you log in. If a volume name is dimmed, you either don’t have rights in that volume or you have already accessed it. You can set the automatic access option by clicking “Save My Name and Password.” Once automatic access is set up, you will be logged in to the file server automatically each time you turn on your Macintosh. Keep in mind that with this option selected, anyone can log in to the file server using your name and password simply by turning on the computer. If security is important, click “Save My Name Only.” You will be prompted to enter your password at system startup time. Getting Started 2-13 2-14 @ GERONIMO Select the server volumes you want to use: GERONIMO/SYS UVOLUME_1 Checked volumes ()) will be opened at system startup time. © Save My Name Only @ Save My Name and Password yvt.1b3 2. | When you have selected the volumes you want to access, click OK. When you click OK, an icon for each volume you selected appears on the desktop and you return to the Chooser window. Close the Chooser when you have selected all the file servers you want to access. (You can close the Chooser by selecting Close from the File menu, or you can click the close box.) User's Guide 166/Rev1.00 166/Rev1.00 Logging Out of a File Server Logging out terminates your connection with the file server. When you are finished working on a file server, you should log out. Also, there may be times when the supervisor needs to have users log out. If you want to use the network after you have logged out, you need to log in again. To log out, drag all the volume icons for that file server to the trash. Where to Go from Here When you have set up your Macintosh on the network and understand how to log in to the file server, you can begin working on the network. For help with performing basic network tasks, continue with Chapter 3, “Working on the Network.” Getting Started 2-15 166/Rev1.00 Chapter 3 Working on the Network 3-1 3-2 When you have set up your Macintosh on the network and logged in to a file server, you can begin working with files and folders that are stored on the file server’s volumes. Working with volumes is not very different from working with local drives. This chapter explains how to do everyday tasks such as « Working with folders and files = Using applications = Printing = Accessing multiple file servers Before you begin working on the network, check with your supervisor to find out what volumes and folders you have rights in. You can only work in volumes and folders in which you have been made a trustee. To find out more about how trustee assignments work, see Chapter 4. User’s Guide 166/Rev1.00 Accessing Volumes All folders and files on a file server’s hard disks are stored in volumes. When you logged in to the file server, you selected the volumes you wanted to access. For each volume you accessed, a volume icon appeared on the desktop. Whenever you access your network folders, you will be working within one or more of the network’s volumes. For the most part, a volume icon works the same way on the desktop as a disk icon does. By double-clicking the volume icon, you can access the folders and files inside. As with local disk storage, folders on a volume can be nested within other folders to create a hierarchy of folders. You can open several volumes at a time and copy folders and files between them. One of the things you can’t do with a volume is move items out of the volume and leave them on the desktop. If you try to do this, an error message appears telling you it can’t be done. The number of volumes on your network depends on how your supervisor has divided up the file server's disk storage. Every NetWare file server has a volume called SYS, which contains some standard folders that help organize the files that network users depend on. These folders include the LOGIN, MAIL, PUBLIC, and SYSTEM folders. These are NetWare system folders, and you should not alter them or their contents in any way. Your supervisor will create other volumes and folders to suit the needs of your network. 166/Rev1.00 Working on the Network 3-3 3-4 Using the Finder on the Network One of the things you will notice as you work within volumes is the different icons that are used to represent folders. On the network, these additional icons are added to the Finder to give you an idea of what your rights are in a folder. The finder displays five basic folder icons: Gray folders Dropbox folders Plain folders Black-tab gray folders Black-tab plain folders User’s Guide 166/Rev1.00 166/Rev1.00 In addition to folder icons, the Finder may display any or all of these three Access Privilege icons: © File’ Edit = — SRR 11 items Can't Make Changes Can't See Folders Can't See Files The Access Privilege icons appear in the upper left-hand corner of the window of an open folder. None of the icons tells the whole story about your rights in a folder. To understand exactly how the icons relate to trustee security, read the discussion of NetWare security in Chapter 4. (You can use the NetWare desk accessory to find out what your rights are in a specific folder. See Chapter 5.) Folder Icons Gray Folders A gray folder icon means the folder is not available for you to use. You can’t open the folder, and you can’t copy files into it, unless there is an arrow above the folder. (See “Dropbox Folders” on the next page.) You can’t change its name or make other modifications. You can only see that it is there. Working on the Network 3-5 3-6 Dropbox Folders A dropbox folder icon is a gray folder with an arrow above it. A dropbox works as you would expect it to. You can copy folders and files into a dropbox, but you can’t open it up and see what’s inside. You may or may not have the right to change security for a dropbox folder. Dropbox icons don’t show you if you have the right that allows you to control a folder’s security. Plain Folders A plain folder icon means that you can open the folder and see the name of the folders and files inside. Depending on the rights you’ve been assigned in the folder, you may or may not be able to manipulate the files and folders in the plain folder. For example, in one plain folder you may be able to create files but not delete them. In another, you may be able to do everything except set security for the folder. It all depends on the specific rights you have been given within that folder. Those rights are further identified by the three Access Privilege icons. Black-Tab Folders A black tab means that you can modify the folder’s security. For example, you could use the NetWare desk accessory to change your own rights inside the folder. Naturally, if you changed your rights, the folder’s icon might change also. Therefore, even though you can’t open a gray folder, if it has a black tab you can give yourself the right to open it. Of course, when you give yourself that right, it will appear as a black-tabbed plain folder. User's Guide 166/Rev1.00 166/Rev1.00 All folder icons appear either gray or plain. In every case, you can open a plain folder but not a gray one. The dropbox and black-tab icons are just gray or plain folders in which you have some specific rights. To find out if you can do something that an icon does not explicitly show, you can use the NetWare desk accessory to look at your rights. Access Privilege Icons Can’t See Files The Can’t See Files icon is the standard file icon, only crossed out. It means you can’t read any files the folder might contain. Depending on your rights, you may be able to see the filenames inside the folder, but you can’t open the files. Can't Make Changes The Can’t Make Changes icon is a crossed-out pencil, which means you can’t write to files within the folder. If the Can’t Make Changes icon appears without the Can’t See Files icon, you may be able to open and read files even though you can’t write to them. Can't See Folders The Can’t See Folders icon is a crossed-out folder. It means you can’t see folders within the folder. Working on the Network 3-7 3-8 Working with Folders and Files on the Network Aside from questions of security, folders and files stored on the network are handled in much the same manner as when they are stored on a local disk. As long as you have the required rights, you can create, open, update, and copy your folders and files as you usually would. Creating Folders You can create folders on volumes by using the New Folders command the same way you would create folders on a local disk drive. In most cases, your supervisor will set up work areas for you on volumes. These are folders in which you are given all the rights you need to create your own folders and work within them. To create a folder, open the volume or folder you want to create it in and then choose the New Folder command from the File menu. An empty folder appears inside the volume or folder. Naming Folders You can name the folder just as you would a folder on a local disk. Naming folders and files creates a problem for DOS, which has greater restrictions for filenames. NetWare for Macintosh solves this problem by changing how filenames appear on the DOS side. A file saved as “Jim’s Notes,” for example, becomes JIMSNOTE to a DOS workstation. For a detailed discussion, read Appendix B, “DOS File Naming Conventions.” User’s Guide 166/Rev1.00 Creating Files You can create files on a volume with any application you normally use on your Macintosh. If the application is stored on a local disk or in a different folder from the one you want to create the file in, you can create the file and then save it to the desired volume and folder. When you save the file, use your application’s Save dialog box to specify the volume as the drive and then select the desired folder. © Dan's folder <> © Marilyn's folder © Robyn's folder © Susan's folder OQ Trent's folder ub Save Current Document As GERONIMO [EO Ga C Save J (Cancel } (Drive ) @ Entire Document OText Only 166/Rev1.00 Working on the Network 3-9 Opening Files You can open a file on a volume as usual—by specifying the file from within the application or by double-clicking on the file’s icon. If you double-click on the file’s icon, both local disks and the network volumes you have accessed are searched to find the application. Since both Macintosh and DOS workstations can store files on a volume, you may see DOS files inside of folders. DOS files are represented by a “DOS” file icon. If your Macintosh application is designed to read the format of a particular DOS file, you can access these files from your Macintosh. Whether or not a DOS file can be opened by a Macintosh application depends on both the application that created the file and the application that is attempting to read the file. WordPerfect files, for example, can be read by WordPerfect for Apple and WordPerfect for DOS. If you try to open a DOS application from your Macintosh, an error message appears saying that an application could not be found for the document. Although you can’t access DOS files without the appropriate software, you can use the NetWare Control Center application to obtain information about a DOS file just as you would about any other file. Copying Folders and Files You can copy folders and files between volumes as you would between disks—by dragging the items across the desktop. If you are unfamiliar with copying folders and files, see your Macintosh computer user’s guide. User’s Guide 166/Rev1.00 166/Rev1.00 Modifying Files NetWare has many security features governing what a user can do with files in any given folder. For example, modifying a file’s name and modifying a file’s content are two very different activities, each controlled by a different right. In most cases, if you can’t perform a certain task, you probably lack sufficient rights for the folder you are working in. A common situation is for a user to be able to read a file but not modify it. If you want, you can copy the file to a local drive and modify the copy there without any problem. If you need to modify a file on a volume and cannot, discuss your security status with your supervisor. Flagging Files You can flag the files you store on a file server to give them special properties. There are seven file flags you can assign. Two of the flags, Read-Only and Shareable, are explained in Chapter 4. The other five are explained below. Hidden Hidden files do not appear in the Finder. However, a hidden file can be detected using the NetWare Control Center Application or other software. You can use the Hidden flag to hide the existence of a file from other users. Indexed Indexing a file allows it to be more quickly retrieved from the file server’s disk storage. The Indexed flag is most effective for files larger than 1MB. When a large file is indexed, data within the file can be found much more quickly by an application. This is especially important in large database files. Working on the Network 3-11 Modified Since Last Backup The Modified Since Last Backup flag indicates whether a file has been modified since it was last archived. If your network uses archiving software, changing this flag may affect whether the file will be archived. System The System flag indicates that a file is used by the DOS operating system. Like a hidden file, a system file does not appear in the Finder; in fact, to the Macintosh user a file flagged System behaves the same as a file flagged Hidden. Transaction Tracking Files flagged Transaction Tracking are protected from possible harm caused by disruption of the file server. If for some reason you cannot complete the changes you are making to a transactional file, the file is returned to its previous condition, thus saving it from possible corruption. Check with your supervisor to find out if Transaction Tracking is effective on your file server. Using Applications You can use applications stored on volumes the same way you would use them if they were stored on a local drive. Your supervisor probably has created a folder where applications are kept for your use. If you have problems trying to open an application stored on the file server, you will probably see the message, “The file filename could not be opened/printed (the application is busy or missing).” It is possible that someone else is using the application and it can’t be shared. If you want access to an application that can’t be shared on the network, you should obtain a private version and store it locally or ina private network folder. User’s Guide 166/Rev1.00 166/Rev1 .00 You may also have problems accessing an application if the application is stored in a folder that you don’t have sufficient rights in. Without sufficient rights, you may not be able to access the application at all, or you may be able to access the application but not use it to create, see, or modify files. To overcome a security conflict, try quitting the application and accessing it from another folder. You can do so by having ready an existing document that was created with that application. Place the document in a folder where you have all rights and see if the application will open it. If the application opens the document, you can exit that document and create another from within the current folder. If you can’t solve the problem, ask your supervisor to assign you the rights you need to access the application. Some applications are not compatible with networks and must be copied to your workstation’s drive before being launched. Working on the Network 3-13 3-14 Printing on the Network There are two ways to access printers on the network. You can send a print job directly to a printer from your workstation as you normally would, or you can send it toa print queue that will submit the job to the printer. If your network is set up with Ethernet cable, you must send your print jobs to the network print queue. A print queue is a place where the NetWare file server stores print jobs that are waiting to be serviced. Jobs move through a print queue on a first-come-first-serve basis. A supervisor will often create several print queues on a file server to help organize jobs and assign them priorities. By sending your job to a network queue, you can cut down on the amount of time your workstation spends getting a document to a printer. As soon as the queue receives your job, your Macintosh is free to do something else. When a printer is available, it picks up the job from the queue and prints it. Without the network queue, you would have to wait until the printer was ready to accept each print job before you could continue. Print queues are defined by type; therefore, only one type of printer will service jobs for a queue (for example, only ImageWriters). However, a printer can serve several queues, and, likewise, a queue can have several printers serving it. If you send a job to a queue that is served by several printers, the job will be printed by the first printer available (assigned to that queue). You can’t know in advance which printer will do the job, only that it will be taken care of. Figure 3.1 illustrates a situation where two queues are serviced by two printers. In this case, a job in Queue A might be printed by either printer, but a job in Queue B can be printed only by Printer B. Ask your supervisor which printers on your network serve which print queues. User’s Guide 166/Rev1.00 166/Rev1.00 Queue B Printer B Figure 3.1 Queue Configurations In order to send jobs to a print queue, you must select the queue in advance. Once you select a queue, you can print as you normally would from within an application, and your print jobs will be sent to that queue automatically. 1. Open the Chooser. The Chooser displays the AppleShare icon and the icons for any print drivers in your system folder. Click the icon that represents the type of printer you want to use. For example, if you want to print to a LaserWriter, click the LaserWriter icon. A list of LaserWriters and LaserWriter queues appears in the right-hand side of the Chooser. Also, the Background Printing option appears. Leave this option off. Background Printing allows your Macintosh to work on a print job “in the background” while you work with another application. Working on the Network 3-15 Note The network print queue is a faster way to do the same thing, and Background Printing will cause the network queue to ignore the print job. The Chooser lists both the printer and its network queue unless your network uses EtherTalk cable, in which case only the network queue will be displayed. You can find out from your supervisor the name of the queue that is serviced by the printer you want to use. 3. Highlight the print queue you want to submit your print jobs to. You can only select one queue. In the example on the next page, a queue for LaserWriters is selected. In this case, the supervisor named the queue “LaserQueue.” User's Guide 166/Rev1.00 Ta Chooser AppleShare AppleTalk I. By Select a LaserWriter: LaserWriter Background Printing: O Gn @ Off User Name l AppleTalk @ Active O Inactive 3.2 Note 166/Rev1.00 When you are finished selecting a print queue, close the Chooser. Your selection is saved, and your print jobs will be submitted to that queue whenever you print a document. You can change your queue selection any time the Chooser is available. When you use a network queue to print a job, the file server will act as a PostScript Document Manager. This means that the definitions of downloaded fonts are placed in the file server’s disk storage. If a particular procedure is ever required again, you don’t have to reload it from your Macintosh. Working on the Network 3-17 Where to Go from Here The basic tasks you must know to work with files and folders on the network were covered in this chapter. However, to really take advantage of the file server's potential, you need to study the details of how NetWare security operates. Chapter 4 explains NetWare security and how it affects you as a NetWare user. 3-18 User’s Guide 166/Rev1.00 166/Rev1.00 Chapter 4 Understanding NetWare Security 4-1 4-2 NetWare provides an extensive security system that controls access to information stored on network volumes. Network security operates in three areas: = Login security = Folder security = File security The supervisor uses NetWare security to decide which areas of the network you have access to. Some folders will be off-limits to you; you may not even be able to see they are there. In some folders you may have limited rights. In others, including the ones you create, you will have complete control to decide what anyone else can see and do within them. User’s Guide 166/Rev1.00 Login Security Login security is general access security—it establishes your right to use the file server from your Macintosh. Username A username is the identity a supervisor has created for you on a file server. Each time you log in to a file server, you must provide a username (either a registered name or GUEST). The file server uses this identity to determine your security status in network folders. Passwords A supervisor has the option of requiring passwords on a file server. If password security is in effect, a supervisor assigns a password to go with your username, or allows you to choose your own password. On most file servers, you will be able to change your password at any time using the NetWare Control Center application. In fact, a supervisor may set up password restrictions that require you to change your password periodically. 166/Rev1.00 Understanding NetWare Security 4-3 4-4 Other Login Restrictions Your network supervisor may have also set up the following optional login restrictions: = A limit to the hours of the day when you can log in = A limit to the particular stations you can log in from « A limit to the number of stations you can log in from simultaneously = Accounting features that monitor usage = Intruder lockout features that monitor inaccurate login attempts If you are not sure whether any of these restrictions apply to you, ask your supervisor. User’s Guide 166/Rev1.00 166/Rev1.00 Folder Security The majority of NetWare security is managed on the folder level. Folder security uses an assortment of rights to define exactly what you can do in any given folder on the network. There are eight NetWare rights: Read The right to read from open files. Write The right to modify a file that is open. Open The right to open a file that already exists. Create The right to create new folders and files. Delete The right to delete folders and files. Parental The right to modify a folder’s security and create, rename, and erase folders within the folder. Search The right to “see” folders and files. Modify The right to change filenames and file and folder attributes. For the sake of brevity, each NetWare right is commonly abbreviated to its initial letter. Thus, if you have all NetWare rights in a folder, you have [ROWCDPSM]. As a Macintosh user, you may be familiar with AppleShare privileges: See Folders The right to see folder icons within a folder. Whether or not you can open those folders depends on the privileges you have for those folders. See Files The right to see, open, and copy files within a folder. Understanding NetWare Security 4-5 4-6 Make Changes The right to alter the contents of folders and files within a folder. You can open, copy, move, and delete the folders and files. Because NetWare’s rights are much more comprehensive, there is no direct correlation between NetWare rights and AppleShare privileges. The AppleShare icons discussed in Chapter 8 tell only part of the NetWare story. Both the NetWare desk accessory and the NetWare Control Center application have been designed to help you examine—and. possibly modify—your NetWare security restrictions. The following chart shows the mapping of AppleShare privileges to NetWare rights and vice versa. AppleShare Privileges iis) Nn x No rights fo RN Bsa See Folders fo D Sg See Files f D ‘8 See Folders & Files WN N _Q Make Changes f N G Make Changes & See Folders User’s Guide NetWare Rights No rights (S] [ROS] [ROS] [WwOcM] [WOCSM] 166/Rev1.00 AppleShare Privileges NetWare Rights fo D . 744 Make Changes & See Files [ROWCDSM] Oo D DI Make Changes, See Files, & [ROWCDSM] See Folders One NetWare right, the Parental right, is absent in the preceding list. This is because the Parental right has no AppleShare equivalent. Any or all of the combinations of rights listed above can exist with or without the Parental right. Throughout the remainder of this manual, security will be discussed in terms of NetWare rights, rather than AppleShare privileges. AppleShare privileges apply only when you are accessing an AppleShare file server; NetWare rights apply whenever you are accessing a NetWare file server. Effective Rights The rights you have in a folder—to see, make changes to, create, copy, move, delete, or open files and folders—are, in NetWare terminology, your effective rights. In some folders you may be able to see the files in the folder, but not use them. In others, you may be allowed to access applications and open folders within the folder, but you won't be able to copy or delete them. 166/Rev1.00 Understanding NetWare Security 4-7 4-8 NetWare allows supervisors—and users with the Parental right—to set security in a folder in two ways: for the folder itself, and for the users who will be working with the folder. It is the combination of these two sets of rights that determines a user’s effective rights. If the rights assigned to the folder include ROS (Read, Open, and Search), and the rights assigned to you as a user include RWOCSM (Read, Write, Open, Create, Search, and Modify), you will have only three rights in the folder: ROS (Read, Open, and Search). rR O S§ ] folder assignments IRWOCSM) your assigned rights [IR O S§ ] effective rights In this example, you would have the equivalent of AppleShare’s See Folders and See Files. Maximum Rights Mask The rights assigned to a folder are called the folder’s maximum rights mask. The purpose of a maximum rights mask is to restrict the rights that are available within a folder. When you create a folder, the folder’s maximum rights mask contains all eight rights. When you remove a right from the mask, no user can exercise that right within that folder, no matter what rights he or she may have been assigned. Only a user with the Parental right in a folder or in its parent folder can change the maximum rights mask. A supervisor automatically has all rights in every folder, and can therefore change the maximum rights mask of any folder. User’s Guide 166/Rev1.00 166/Rev1.00 Trustee Rights Any user who has been given any rights at all in a folder is called a trustee of that folder. A supervisor, therefore, is a trustee of all folders. A user with the Parental right in any folder can make another user a trustee of that folder. The rights a user has in a folder, aside from any restrictions placed on the folder by the maximum rights mask, are called trustee rights. Three factors make up trustee rights: = Individual trustee assignments = Rights assigned to a group the user is a member of = Rights assigned to another user or group of users that the user has been made equivalent to Individual Trustee Assignments A user can be assigned any or all of the eight NetWare rights in a folder. These rights will be assigned by a supervisor or by another user with the Parental right in the folder. If you create a new folder, you automatically have the Parental right in that folder and can therefore assign rights to other users or groups. Obviously, creating a trustee assignment for every user who wants to access a folder could become an exasperating task for all concerned. NetWare simplifies trustee assignments by extending an assignment in one folder to all the folders nested within it. In other words, you will have the same rights in any nested folder that you have in the parent folder—unless rights have been specifically revoked in the nested folder. As an example, suppose two folders, “Dancing Elephants” and “Better Mousetraps,” are nested within a folder, “Promotional Ideas.” If you have rights to open and read files in “Promotional Ideas,” then you would have those rights in both nested folders. Understanding NetWare Security 4-9 4-10 However, your trustee assignment in “Dancing Elephants” could be redefined. Perhaps the right to delete files is added, and the right to open files is taken away. Your new trustee assignment in “Dancing Elephants” will not affect your rights in “Promotional Ideas,” or in “Better Mousetraps.” Promotional Ideas Open Read Dancing Elephants Better Mousetraps Delete Read Open Read Group Assignments If you are a member of a group, you will share any rights assigned to the entire group. Granting rights to groups is an easy way to distribute trustee rights uniformly among certain users. A single group assignment ensures that the entire group will share a specific level of authority within a folder. Once again, rights in a folder can be granted to a group only by a supervisor or a user with the Parental right in that folder. Security Equivalence The third way for you to receive trustee rights is through a security equivalence. A security equivalence gives you all the trustee rights of another user or group of users—you share that user’s or group’s trustee rights in all directories. A user given security equivalence to a supervisor becomes, User's Guide 166/Rev1.00 Note 166/Rev1.00 in essence, another supervisor, with all rights in all directories. Security equivalences can be granted only by a supervisor. A user’s trustee rights in a folder include all three assignments of rights: individual trustee assignments, group assignments, and security equivalence. If a right is granted in any of the three categories, the user will have that right as part of his or her trustee rights. For example, if a user is given the rights [ROS] (Read, Open, and Search) in a folder; belongs to a group with [WOC] (Write, Open, and Create); and has security equivalence to a user with [DS] (Delete and Search), then the user will have six rights in the folder: [RWOCDS] (Read, Write, Open, Create, Delete, and Search). [RO S] Individual trustee assignment [ woc ] Group trustee assignment L DS} Security equivalence [RWOCDS] Trustee rights Effective Rights Revisited Let’s put these combinations of rights together in an example. Remember, you as a user are interested in your effective rights. We'll set you up with the following rights in a particular folder: Maximum rights mask [RWODS] Individual trustee assignment [RWC] Group trustee assignment [CP] Equivalent to user “Jim” [OPS] Equivalent to group “Manual Readers” _—[RS] Understanding NetWare Security 4-11 To figure out your effective rights you must first figure out your trustee rights by adding together individual assignment, group assignment, and security equivalences: [RW Cc ] Individual trustee assignment { CP J Group trustee assignment [ PS] Equivalent to user “Jim” [RO Ss] Equivalent to group “Manual Readers” [RWO CPS] Trustee rights Remember, if you are granted a right in any of the three categories, you have that right in your trustee rights. Now add all rights that appear in both your trustee rights list and in the maximum rights mask: [RWO D §] Maximum rights mask IRWOC PS] _ __Trustee rights _ [RWO Ss] Effective rights The net effect is that you can open files, read from and write to open files, and search the folder (see the folder and file icons in the finder). You cannot create new files, nor can you delete files or modify file and folder attributes. You will not have to make these calculations to determine your effective rights in a file or folder. Both the NetWare desk accessory and the NetWare Control Center can display your effective rights. User’s Guide 166/Rev1.00 Individual Group Trustee Equivalent Equivalent to Trustee Assignment to Jim Manual Readers Assignment RWC cP OPS RS . Maximum Trustee Rights Rights Mask RWOCPS RWODS 166/Rev1.00 NL Effective Rights Rwos Note that in this example the Parental right is a trustee right, but not an effective right. (This is the right that allows you to add trustees, create nested folders, and change security.) In a sense, it’s a master key of rights. However, the Parental right has been removed from the maximum rights mask, so it isn’t an effective right. Understanding NetWare Security 4-13 How Folder Attributes Affect Security You can use folder attributes to assign special properties to individual volumes or folders. There are three folder attributes that may or may not be set: = Private = Invisible = System The Private attribute plays an important role in network security. The Invisible and System attributes are not as vital as the Private attribute to folder security, but they can provide some additional protection. Private Attribute When you create a new folder on a file server, using a Macintosh computer, the folder is automatically set up as a private folder (one with the Private attribute assigned to it). A private folder icon will appear gray to other users if they don’t have rights in the folder. If a folder is created using a DOS computer, the private attribute is not set, and the folder icon appears as a plain folder. Your private folders cannot be opened by other users unless you have given them the Search right. To allow individual users or groups to open a private folder, you can give them the Search right. (Make sure the Search right is included in the folder’s maximum rights mask.) The Search right lets trustees open a private folder and see the files and folders it contains. Of course, the Search right does not guarantee they can do anything more than look. That would depend on the other rights you assign them. User's Guide 166/Rev1.00 You can use the NetWare desk accessory or the NetWare Control Center application to set or remove the Private attribute from a folder. Removing the Private attribute makes a folder “public.” Other users can open your public folders and see the folders inside, but they cannot open any files unless they have Search as one of their effective rights. Note In order to make a folder private, you must have the Parental right in either the folder you are making private or the folder’s parent folder. Invisible and System Attributes When you set either of the Invisible or System attributes, a folder is hidden from view—your own and others’. Both attributes operate the same way, the main difference being that the System attribute indicates that a folder contains files used by the DOS operating system. You can’t throw away a hidden folder until you remove the Invisible or System attribute. Note Setting the Invisible or System attribute is not a reliable security device. A determined effort will probably succeed in disclosing an Invisible or System folder; therefore, the Invisible attribute is best used to protect a folder from casual users and inadvertent harm. 166/Rev1.00 Understanding NetWare Security 4-15 4-16 File Security In addition to protecting your files through folder security, you can protect individual files by assigning them file flags {also called file attributes). File Flags There are seven file flags, but only two affect NetWare security: Read-Only and Shareable. These flags create an absolute level of file protection. If you set or remove a file flag, the flag applies to anyone who accesses the file, including yourself. Chapter 6 explains how to use the NetWare Control Center application to flag a file. For more details about how the other flags operate, see page 3-11. Like a user’s effective rights, these flags indicate a trustee’s maximum permissible rights. Read-Only The Read-Only flag controls whether users can modify a file. A Read-Only file can be read but not modified. Any user with the necessary NetWare rights within the folder can read the file, but no user can write to, rename, or delete the file, even if those rights are part of that user’s trustee assignment. Shareable When you create a file, it can be used only by one user at a time. If you flag a file Shareable, more than one user can access the file simultaneously—if the application has been designed to be shareable. Most Macintosh applications, however, cannot be used by more than one person at a time, no matter how the file is flagged. User’s Guide 166/Rev1.00 In most cases, the Read-Only flag is used in conjunction with the Shareable flag to allow many users to access a file, but none to change it. NetWare Security and Folder Icons NetWare security is reflected in the icons that appear on your desktop when you access a network volume. These icons were introduced in Chapter 3, but here we look at them as they are affected by NetWare rights. When you open a network volume, a typical window showing information by icon might look something like the one below. SaaS. 02 0 SS a_i 15 items 16, 708K in disk 130,668K available Ky i (a +H Judy's Chris's Reviews Reports Susan's Trent's Schedules Big ideas i om Robyn's Robb's Suggestions Planning Juan's Kelley's I] ss aim i 166/Rev1.00 Understanding NetWare Security 4-17 Notice that this screen shows a variety of folder icons. The specific icons you see when you open a volume depends on the rights you are assigned in the folder. As explained in Chapter 8, each folder icon represents a specific level of security within a folder. However, a folder icon does not necessarily reflect all of your rights within a folder. A folder icon may denote that some specific rights are granted or denied, but other rights may or may not exist. Each folder icon is listed below, followed by an explanation of the specific security conditions that it corresponds to. Folder Type NetWare Rights Gray Private folder attribute Does not have: Search, Parental May have: Delete, Modify, Read, Write, Open, Create 4 e Dropbox Private folder attribute Does have: Create, Open, Write Does not have: Search, Parental May have: Delete, Modify, Read Plain Private folder attribute AND Search OR Public folder (no Private attribute) Does not have: Parental May have: Read, Write, Open, Create, Delete, Search, Modify Black-Tab Gray Does have: Parental Does not have: Search May have: Read, Write, Open, Create, Delete, Modify 4-18 User’s Guide 166/Rev1.00 166/Rev1.00 Folder Type NetWare Rights Black-Tab Plain Does have: Parental May have: Read, Write, Open, Create, Delete, Modify, Search Where to Go from Here Now that you know how NetWare security works, you can set security for your own files and folders. Chapter 5 explains how to view and modify trustee security with the NetWare desk accessory. Chapter 6 explains how to do similar tasks with the NetWare Control Center, as well as how to access folder and file attributes, change your password, and view network information. Understanding NetWare Security 4-19 166/Rev1.00 Chapter 5 Security and the NetWare Desk Accessory 5-1 This chapter explains how to use the NetWare desk accessory to access security information for a volume or folder. The NetWare desk accessory contains a Rights module that lets you view and modify folder security without closing any documents or applications you may have open. Some tasks you can use the NetWare desk accessory’s Rights module for include Making a folder private Creating trustees in a folder Modifying a maximum rights mask Modifying trustee rights Setting up a dropbox Giving others ownership of a folder Learning how to use the NetWare desk accessory will give you control over the information you store on your file server. User’s Guide 166/Rev1.00 Note 166/Rev1.00 Accessing the Rights Module The NetWare desk accessory’s Rights module is a fast and convenient way to work with trustee security. You can access the Rights module anytime you are working on the network, The NetWare desk accessory must be installed in the system, using the Font/DA mover utility, and the Rights module must be in the same folder as the System and Finder. If the NetWare desk accessory isn’t installed properly, it will not work. (See page 2-5.) Choose NetWare from the Apple menu. The NetWare desk accessory begins searching for NetWare file servers. If no file servers are found, a message appears telling you that no servers were found. Select the OK button to close the NetWare desk accessory. Then, using the Chooser desk accessory, log in to a file server and try the NetWare desk accessory again. When a file server is found, the NetWare window appears. The left side of the window contains module icons. The right side of the window provides an area for displaying module information. Click on the Rights icon. A dialog box appears listing the folders on one of the volumes you have selected. The name of the volume is shown both at the top of the list of folders and in the upper-right corner of the dialog box. Security and the NetWare Desk Accessory 5-3 5-4 NetWare Or Rights Select a folder to view NetWare rights: TEST TEST SE [Fotser info} © DESKTOP © Planning (Volume Info) ww © Projects cee Seca © Schedules Open Folder Cancel D Utilities Highlight the folder you want to view security for. If the folder you want is nested in another folder, highlight the parent folder and click the Open Folder button (or double-click the parent folder). The list of folders changes to the names of those nested in the parent folder. The name of the parent folder is shown above the list. If the folder you want is on a different volume, click the Volume button. The dialog box displays the contents of another volume. (The volume must be one of those you selected when you logged in.) If you need to move back up the folder path to a parent folder, click the volume or folder name at the top of the folder list. The folder path appears, allowing you to highlight the level you want to move to. User’s Guide 166/Rev1.00 4. Click the Folder Info button. (For volume information, click the Volume Info button.) The Rights module appears with the name of the volume or folder you selected in the upper left-hand corner. NetWai J Susan's folder © Effective Rights O Maximum Rights Server: SERVER-1 CO Trustee Rights Logged in as: Larry Private Trustees: KH Rparestat | K] write fo open files Kereate ites J folders EK] petere ties *talders RK] Moditg tite attribates KB Bd pen existing files Ei] Read tram open files tT i] & searet: {et tiles é see folders ——~ (Q The Rights module is divided into three panels. The top panel displays = The name of the volume or folder for which you are viewing security « The name of the file server and the username = The “View Another” button you can click to return to the original dialog box 166/Rev1.00 Security and the NetWare Desk Accessory 5-5 5-6 = The Private attribute, which will be checked if the folder is Private = Three radio buttons you can click to view effective rights, maximum rights mask, and trustee rights The bottom left-hand panel displays the eight NetWare rights. Each right is mapped to a corresponding AppleTalk access privilege icon. The bottom right-hand panel contains a field where trustees can be displayed, and a button for saving changes. User’s Guide 166/Rev1.00 Viewing Your Rights in a Folder or Volume The Rights module lets you view your effective rights, maximum rights mask, and trustee rights for any folder or volume. If you have the proper rights, you can also view the assigned trustees of the volume or folder. If you have problems accessing or working in a folder, one of the first things you should do is check to see if you have sufficient rights in that folder. Viewing Your Trustee Rights Your trustee rights are the rights you have been assigned in a volume or folder. You must have the Parental right in a folder or in its parent folder to change your trustee rights or assign rights to others. 1. Access the Rights module and select the volume or folder you want to view security for. For help accessing the Rights module, see page 5-3. 2. Click the Trustee Rights button. If you have the rights to modify trustee rights, the Trustee Rights button will be available (not dimmed) and you can see and modify rights. If the Trustee Rights button is dimmed, you do not have the rights necessary to make changes. 166/Rev1.00 Security and the NetWare Desk Accessory 5-7 NetWare Server: SERVER-1 Logged in as: Larry O Effective Rights © Maximum Rights @ Trustee Rights private meommo Trustees: & Parental El write to open files El create files/folders EX pelete files/folders 1) Modify file attributes —-: ] Open existing files HO E] Read from open files ts] []Seareh: {see files ne {ee folders oOo _t ‘Add Trustee Save Chaoges 3. Highlight any username or group name in the list of trustees. The NetWare rights are displayed in the lower left-hand panel. Depending on the volume or folder’s maximum rights mask, you may not be able to exercise all the rights you have been assigned in a folder. The rights you can exercise are called your effective rights. You can view your effective rights by following the steps on the next page. User’s Guide 166/Rev1.00 Viewing Your Effective Rights Your effective rights in a volume or folder are the trustee rights you have been assigned that are included in the maximum rights mask. If you have been assigned a trustee right that is omitted from the maximum rights mask, you cannot exercise that right. 1. Access the Rights module and select the volume or folder you want to view security for. For help accessing the Rights module, see page 5-3. Click the Effective Rights button. The trustee rights in the left-hand panel are checked to show your effective rights. If you are not a trustee of the volume or folder, no rights are checked. ay i Planning Server: SERVER-1 Logged in as: Larry @ Effective Rights Maximum Rights O Trustee Rights kal 1.0 Crrivate Trustees: a K)Parentat K] write fo open files Rereate tiles folders 1 delete ties stotders |_| KX] Modity tie attribotes ] bpen existing tiles. Ri) Read from open files» K] searen: {ste tiles see folders 166/Rev1.00 Security and the NetWare Desk Accessory 5-9 5-10 For your effective rights to be broadened, someone must assign you additional trustee rights, or the maximum rights mask in the volume or folder must be modified. Try increasing your rights yourself. If you can’t change your rights, ask someone with the necessary rights to do it for you. Viewing and Modifying a Maximum Rights Mask A maximum rights mask defines the maximum rights that can be exercised in a volume or folder. If a right is omitted from a maximum rights mask, trustees cannot exercise that right even if it has been assigned to them. (See Chapter 4 for a complete explanation of these rights.) A maximum rights mask applies only to the current folder or volume and does not affect nested folders. You can modify a maximum rights mask if you have the Parental right in the volume or folder or in its parent folder. 1. Access the Rights module and select the volume or folder you want to view security for. For help accessing the Rights module, see page 5-3. 2. Click the Maximum Rights button. The NetWare rights in the left-hand panel are checked to show the maximum rights mask. User’s Guide 166/Rev1.00 | 7 Planning O Effective Rights Maximum Rights Server: SERVER-1 Trustee Rights Logged in as: Larry Drrivate (esa eh fo fa eh op Trustees: &) Parental EX write to open files create files/folders Cbetete files/folders &] Modify file attributes ~-: [>| a] & open existing files (Read from open files ~-+-D I5| search: (ee files .! see folders ~~~ (J (Gave changes } 166/Rev1.00 If you have the Parental right in this volume or folder, or in its parent folder, you can add or remove a right from the mask by clicking on the right’s check box. After you have modified the maximum rights mask, click the Save Rights button. You can also select rights by clicking the folder icons above the rights list. As you select an icon, the default settings of NetWare rights boxes will be checked automatically. (For a complete description of folder icons, see page 3-5 or 4-18.) Security and the NetWare Desk Accessory 5-11 Sharing Your Folders with Others As you store information on the file server, you may find you want or need to share your folders and files with others. NetWare gives you a great deal of control over what others can do in your folders. For example, you can allow them to place files inside a folder without being able to look inside. Or you can allow them to read documents but not modify them. You can even make others co-owners of a folder by giving them the Parental right, thus letting them share in making trustee assignments. The following sections describe some ways you can use NetWare security to create special kinds of folders. In these examples, the NetWare desk accessory is used to change the folders. You can also use the NetWare Control Center to perform these tasks. Making a Folder Private Folders can be public or private. A public folder works the way a folder normally does—other users can open it and view the names of the folders inside. A private folder is closed to all users except those who have the Search right in that folder. By making a folder private, you can be sure that only users you have given permission to are able to view its contents. You make folders private by setting the private attribute. You must have the Parental right either in the folder you are making private or in its parent folder. User’s Guide 166/Rev1.00 Access the Rights module and select the folder you want to make private. For help accessing the Rights module, see page 5-3. Click the Private check box. The Private check box is in the top panel across from the View Another button. Make sure the folder named in the top panel is the one you want to make private. eS rams Server: SERVER-1 Logged in as: Larry O Effective Rights © Maximum Rights @ Trustee Rights 9 Di Private Semomeo Trustees: & Parental 1] write to open files 9 El create files/folders —-i &] Delete files/folders Modify file attributes open existing files EK] Read from open files fe] Ed searen: {see files see folders (bes) 1.0 ID al 166/Rev1.00 Security and the NetWare Desk Accessory To allow another user to look inside one of your private folders, you must make that user a trustee and give the user the Search right. 5-13 5-14 Adding Trustees Before you can assign specific rights to other users in a volume or folder, you must make those users trustees. Of course, to add trustees, you must have the Parental right in the volume or folder, or in its parent folder. 1. | Access the Rights module and select the volume or folder you want to add trustees to. For help accessing the Rights module, see page 5-3. 2. Click the Trustee Rights button. The names of trustees appear in the lower right-hand panel. These are the users and groups who already have trustee assignments in this volume or folder. 3. Click the Add Trustees button. The left-hand panel displays a list of users and groups on the file server. These are the users and groups who have not been made trustees. User’s Guide 166/Rev1.00 NetWare i Applications CO Effective Rights Oo O Maximum Rights Server: MACSERVE © Trustee Rights ads Logged in as:Larry Brrivate Trustees: Trustees :MACSERVE (7) macusers (Q Ranpy (Qy craic @ rosvn (2) EVERYONE (Q surest (2) IcEBREAKERS (Q; voor Qy Larry Add Troster Ge) Gi | Gea) 1.0 166/Rev1.00 Highlight the name of the trustee you want to assign to this volume or folder and click the “Add >>” button. You can shift-click or drag select to highlight more than one user or group at a time. When you have finished adding trustees, click the Done button. New trustees are automatically given all rights. You can modify the rights of one or more trustees, or you can use the maximum rights mask to define what any user can do in a volume or folder. However, changing a maximum rights mask affects all trustees, yourself included. Security and the NetWare Desk Accessory 5-15 5-16 Removing Trustees If you have the Parental right in a volume or folder, or in its parent folder, you can remove users and groups from the list of trustees. te Access the Rights module and select the volume or folder you want to remove trustees from. For help accessing the Rights module, see page 5-3. Click the Trustee Rights button. The names of trustees appear in the lower right-hand panel. These are the users and groups who have trustee assignments in this volume or folder. & Modify file attributes EE] open existing files [i Read from open files ~-+-D) fell Search: {zee files see folders ~~ (9 kK] r | — Projects O Effective Rights © Maximum Rights Server: ERASMUS © Trustee Rights Logged in as: SUSAN Bprivate @eomeo Trustees: (Q RoBYN K>| CParentat Q ciwoy & write to open files create files/folders [) Delete files/folders rea Remove Trustee Add Trustee User’s Guide 166/Rev1.00 3. Highlight the name of the trustee you want to remove and click the Remove Trustees button. The trustee is removed from the list. Important Since trustee rights extend down through nested folders, removing a trustee from a folder could remove that trustee from other nested folders also. Before you remove a trustee from a folder, make sure the trustee is not depending on those trustee rights to work in other folders. Letting Others Make Changes You can set up a folder so that other users can work with the files within the folder but can’t modify the folder’s security. NetWare lets you combine rights to define exactly what changes trustees can make in a folder, whether they can write to files, create new files, delete old ones, or modify file attributes. 1. Access the Rights module and select the volume or folder you want to modify trustee rights for. For help accessing the Rights module, see page 5-3. 2. Click the Trustee Rights button. The names of trustees appear in the lower right-hand panel. These are the users and groups who have trustee assignments in this volume or folder. 3. Highlight the name of the trustee you want to modify rights for. Shift-click to highlight more than one trustee at a time. When you select multiple trustees, the rights for all the trustees are set at once. 166/Rev1.00 Security and the NetWare Desk Accessory 5-17 4. Select the rights you want to give the trustee. To modify the trustee’s rights, you can click the check box next to each right you want to change. The rights 5-18 you click are checked (added) or unchecked (removed). To allow a trustee to make changes in a folder, you should give the trustee Write, Open, Read, and Search rights. Projects Server: SERVER-1 Logged in as: Larry Olffective O Maximum @ Trustee Rights Cprivate Hero [pparentar r= write to open files create files/folders - Delete files/folders I] Modify file attributes | Open existing files Bow $ | ‘Add Trustee |_| [X]Read from open files --+.-[) Dl Di searen: {see fies 1.0 see folders ~- (> An easy way to assign a trustee all the rights for making changes is to use the folder icons above the NetWare rights list. Click the plain folder icon. The trustee is automatically given all the rights needed to make changes in the folder (all rights except Parental). These rights are equivalent to AppleShare’s Make Changes, See Folders, and See Files privileges. User’s Guide 166/Rev1.00 Important 166/Rev1.00 Because of the mapping that NetWare uses to accommodate AppleShare’s security design, some rights may rely on others in order to operate. For example, to write to a file, a trustee must be assigned both Write and Create rights, but to create files a trustee needs only the Create right. Creating a Bulletin Board A bulletin board is a special kind of folder. Trustees of a bulletin board can open and read the files inside the bulletin board, but they can’t make any changes. You can create a bulletin board by assigning trustees Read, Open, and Search rights and denying all other rights. 1. Access the Rights module and select the volume or folder you want to make a bulletin board. For help accessing the Rights module, see page 5-3. 2. Click the Trustee Rights button. The names of trustees appear in the lower right-hand panel. These are the users and groups that have trustee assignments in this volume or folder. 3. Highlight the name of the trustee you want to modify rights for. Shift-click to highlight more than one trustee at a time. When you select multiple trustees, the rights for all the trustees are set at once. Security and the NetWare Desk Accessory 5-19 4. Select the Read, Open, and Search rights and click Save Changes. To modify the trustee’s rights, click the check box next to each right you want to change. The rights you click are checked (added) or unchecked (removed). NetWare ay om ial Schedules O Effective Rights © Maximum Rights Rights] Server: ERASMUS @® Trustee Rights Logged in as: ROBYN Bprivate RYO OParentat 1 write to open files OU create files/folders Li detete files/folders Di modify file attributes & open existing files |_| [Read from open files ~-+-D) i) see folders Oo You can allow some trustees to post things in the bulletin board by giving them Write and Create rights. That way they can copy files into the bulletin board folder. You can give them rights to make other changes as well. To prevent users who are not trustees from seeing what files are inside a bulletin board, set the bulletin board’s private attribute by clicking the Private box. 5-20 User’s Guide 166/Rev1.00 Creating a Dropbox Folder Trustees of a dropbox can put files into the folder but they can’t open the folder and see what’s inside. You can create a dropbox by giving trustees the rights to make changes. By setting the Private attribute and withholding the Search right, you prevent trustees from seeing inside the dropbox. 1. Access the Rights module and select the volume or folder you want to make a dropbox. For help accessing the Rights module, see page 5-3. 2. Click the Trustee Rights button. The names of trustees appear in the lower right-hand panel. These are the users and groups that have trustee assignments in this volume or folder. 3. Highlight the name of the trustee you want to modify rights for. Shift-click to highlight more than one trustee at a time. When you select multiple trustees, the rights for all the trustees are set at once. 4 Select the rights you want to give the trustee and click Save Changes. To use the folder as a dropbox, a trustee needs Open, Create, Write, and Modify rights. To modify the trustee’s rights, you can click the check box next to each right you want to change. The rights you click are checked (added) or unchecked (removed). 166/Rev1.00 Security and the NetWare Desk Accessory 5-21 NetWare ay ; AF Projects Server: ERASMUS Logged in as: DENNIS O ffective Rights © Maximum Rights @ Trustee Rights private OParentat ] write to open files Create files/folders [i Delete files/folders ] Modify file attributes: ‘Add Trustee & open existing files Di Read from open files | Search: ssee files u {ice folders ~-- N 1.0 An easy way to assign a trustee all the rights for a drop box is to use the folder icons above the rights list. Click the gray folder with the arrow and the plain tab (the second to the left). This will give the trustee the Open, Write, Create, and Modify rights, and will set the Private attribute. These rights are equivalent to AppleTalk’s Make Changes privilege. (For a complete description of folder icons, see page 3-5 or 4-18.) 5-22 User’s Guide 166/Rev1.00 166/Rev1.00 Giving Others Ownership in a Folder You can let others share the ownership rights in a folder. By sharing ownership, you give others the right to assign trustees and modify the folder’s security. However, you remain the folder’s owner in the sense that you are the one who created the folder. To share a folder’s ownership, you give a trustee the Parental right within the folder. Assigning trustees the Parental right does not automatically give them all rights in a folder. You can give trustees the Parental right in special folders, for example in a dropbox. This allows them to change security if they need to. Of course, to assign the Parental right to another trustee, you must possess it yourself. 1. Access the Rights module and select the volume or folder you want to modify trustee rights for. For help accessing the Rights module, see page 5-3. 2. Click the Trustee Rights button. The names of trustees appear in the lower right-hand panel. These are the users and groups that have trustee assignments in this volume or folder. 3. Highlight the name of the trustee you want to share ownership with. Shift-click to highlight more than one trustee at a time. When you select multiple trustees, the rights for all the trustees are set at once. Security and the NetWare Desk Accessory 5-23 5-24 ay CO Planning O Effective Rights © Maximum Rights Server: SERVER-1 @ Trustee Rights Logged in as: Bruce Private fmnormemnpo Trustees: UgParentat & write to open files Ki) create files/folders Delete files/folders Modify file attributes - ‘Add Trustee (& open existing files [EX Read from open files ~~ [] Rl search: {zee files see folders Select the Parental right and click Save Changes. To modify the user’s rights, you can click the check box next to each right you want to change. The rights you click are checked (added) or unchecked (removed). Another way to assign a trustee the Parental right is to use the folder icons above the rights list. Click a folder with a black tab. There are three Parental folders: a plain folder, a gray folder, and a dropbox folder (a gray folder with an arrow above). The trustee is automatically given the parental right along with the rights to make the folder function as indicated by the icon. (For a complete description of folder icons, see page 3-5 or 4-18,) User’s Guide 166/Rev1.00 166/Rev1.00 Where to Go from Here Now that you know how to use the NetWare desk accessory to modify folder security, you have broad control over your networking environment. You can find out what your rights are in any network folder, and you can specify exactly what other users can do in your own network folders. To access additional information about your network, you can use the NetWare Control Center application, explained in Chapter 6. If you have problems working on the network (for example, you can’t open a file), Chapter 7 offers some troubleshooting information. Security and the NetWare Desk Accessory 5-25 166/Rev1.00 Chapter 6 Using the NetWare Control Center 6-1 The NetWare Control Center application lets you view and modify network information. Like the NetWare desk accessory, the NetWare Control Center allows you to work with security; you can use it to see what rights you have been given in any folder and to change the security for folders that you have the Parental right in. But the NetWare Control Center has many other features as well, including the ability to display and modify information for users, groups, servers, volumes, folders, and files. This chapter explains how to = Launch the NetWare Control Center application = Access server, volume, folder, and file information = Access user and group information = View and modify security The information and tasks that you can perform with the NetWare Control Center depend on your rights and security equivalences. If you find you can’t use the NetWare Control Center to perform a certain task, you may need to ask your supervisor for additional rights. User’s Guide 166/Rev1.00 166/Rev1.00 Launching the NetWare Control Center As with any application, you access the NetWare Control Center from the finder. Unless you are using multitasking software, you must quit any applications you have open to run the NetWare Control Center. You can run the NetWare Control Center from a local drive if you have the application on a floppy or hard disk, or you can run it from a folder on the file server. If you are not sure where to find the application, check with your supervisor, or use the Find File desk accessory. To run the NetWare Control Center, double-click on the NetWare Control Center icon. The NetWare Control Center begins searching for NetWare file servers. If no file servers are found, a message appears allowing you to either try again or cancel the application. If file servers are found, but you are not logged in to any of them, server icons will appear. By double-clicking the icons, you can log in to the file servers. You can also log in by highlighting a file server icon and choosing “Open Server” from the File menu. When a file server is found, the NetWare menus appear in the menu bar, and the Server window appears on the desktop. The NetWare Control Center includes five special menus: Server, Volumes, Folders/Files, User, and Groups. Using the NetWare Control Center 6-3 6-4 SSS NetWare File Servers Saas fs} () I Users PONANALLLSIS | @ = Groups WORK el Using the File and Edit Menus The File and Edit menus appear in the NetWare Control Center application’s menu bar. In addition to the Quit command, the File menu includes the following special commands: Open Server This command lets you log in to file servers. You can also use the Chooser desk accessory to log in, as described in Chapter 2. Close Window This command closes the window that is currently active. Close All Windows This command closes all the windows except the Server window. User's Guide 166/Rev1.00 Note 166/Rev1.00 The Edit menu contains the typical editing commands for cutting, copying, pasting, and clearing text, as well as a command for undoing the most recent change. This menu becomes active whenever a window contains a field you can edit. Your ability to edit information (for example, a filename) depends on your rights. Understanding the Server Window The Server window is the main feature of the NetWare Control Center application. The Server window is divided into left and right panels. The left panel contains an icon for each file server on the network. The icons on the right-hand panel let you access information about users, groups, and volumes for a particular file server. Both panels have scrolling fields. Use the Server window to select the categories of network information you are interested in. It displays all available file servers, and, for the selected server, all volumes. Using the Server window, you can also open the following lists: = Folders and files on a file server * Users ona file server = Groups on a file server The NetWare menus are dimmed when they are disabled, but respond to the selections you make from the Server window. By selecting Server window icons, you can activate a corresponding menu. You can access information for only one server at a time, but the number of information windows that can be open at once is limited only by available memory. Using the NetWare Control Center 6-5 Since the Server window plays such an important role in controlling the NetWare Control Center, you will refer to it often whenever you use the NetWare Control Center. To help you get to the Server window when you need it, the Server menu includes options for showing and hiding the window. Showing and Hiding the Server Window The Server window appears automatically when you open the NetWare Control Center application. You can open and close this window by using the Server menu. The Server menu alternates a Show Server Window command and a Hide Server Window command, depending on whether the window is visible. 1. Pull down the Server menu. If the Control Center is the active window, the Server menu contains the command Hide Server Window. If the window is not shown or is partially visible, the menu contains the command Show Server Window. If the window is hidden from view, the command Show Server Window is also shown. 6-6 falders‘Files Users Groups -) #5 Server Bitty Show Server Window 2. | Choose the command to hide or show the Server window. If you choose Hide Server Window, the Server window disappears from the desktop. If you choose Show Server Window, the Server window appears at the front of the desktop. User’s Guide 166/Rev1.00 SEER SERVER-1 SERVER-1 166/Rev1.00 Accessing File Server Information You can use the Server window to list items on any file server you are logged in to. The left-hand panel of the Server window shows the file servers on your network. The right-hand panel shows the volumes of the selected server, and allows you to open lists of folders, files, users, and groups for each volume. Using the Server Window to Log In From the Server window, you can log in