Windows NT Clients Authenticating to NetWare Servers

On Terra Flora's network, there are existing installations of Novell NetWare, which are primarily used for file and print services. User accounts and privileges are stored in the NetWare Bindery, which is Novell's equivalent of the Windows NT directory. Access is validated based on user accounts and passwords in a Windows NT domain via the directory database, or on a Novell NetWare server via the bindery.

Novell uses the IPX/SPX protocol as their primary network protocol. In order for Windows NT Workstations or Windows NT Servers to communicate with the NetWare services, Microsoft developed NWLINK, an IPX/SPX-compatible protocol. NWLINK is the fundamental building block for the NetWare-compatible services on the Windows NT platform, and by itself, NWLINK does provide connectivity for database access to databases running as NetWare Loadable Modules on NetWare servers. So, for example, a Visual Basic application running on Windows NT Workstation can access an Oracle database running on a NetWare server, through ODBC and the NWLINK components.

Client Service for NetWare (CSNW)

The Client Service for NetWare installed on a computer running Windows NT Workstation provides basic file and print connectivity for that client to a NetWare 3.x server, or a NetWare 4.x server which includes the functionality of CSNW on the server platform. A different service, Gateway Service for NetWare (GSNW), provides access for computers running Windows NT Server to NetWare Servers.

To add CSNW

1. Click Start, point to Settings, and click Control Panel.

2. Double-click Network.

3. Click the Services tab.

4. Click Add.

5. Click Client Services for NetWare, and click OK.

6. Type the path to the CSNW files, and click Continue.

7. In the Client Services for NetWare Dialog box, type the name of the NetWare Server that will be used for authentication, click OK, and then click Close.

You must restart the computer to complete the installation. Click Yes and the computer will restart to complete the process.

Configuration of CSNW is necessary for the Windows NT Client to be able to connect to the NetWare server. A preferred server is selected when the CSNW service is added to the computer running Windows NT Workstation. In addition, as a result of adding CSNW, a CSNW icon is added to the Control Panel.

To activate and configure CSNW

1. Click Start, point to Settings, and click Control Panel.

2. Double-click CSNW.

3. In the Current Preferred Server dialog box, select a server, if necessary, and then click OK.

The Preferred Server setting performs the Attach command to the NetWare server and thus provides authentication to the NetWare server providing that the user and privileges have been added to the NetWare Bindery on the server that the user is trying to access.

Gateway Service for NetWare (GSNW)

The Gateway Service for NetWare (GSNW) provides computers running Windows NT Server all support necessary to connect to NetWare servers, plus the additional capability to re-share the network connections from a NetWare server. The service allows the computers running Windows NT Server to access the NetWare servers as if they were just another client and, in addition, allows the network clients to access files on a NetWare server without having to have a NetWare client redirector on an IPX/SPX protocol stack loaded.

Gateway Service for NetWare depends on and works with two other NetWare compatibility features of Windows NT Server; the NWLink protocol, and NWLink NetBIOS. NWLink is an implementation of the internetworking packet exchange (IPX) and sequenced packet exchange (SPX) transport protocols used by the NetWare network. NWLink NetBIOS is a Microsoft-enhanced implementation of Novell NetBIOS, and transmits Novell NetBIOS packets between a NetWare server running Novell NetBIOS and a Windows NT computer, or between two Windows NT computers. The Microsoft implementations of the IPX, SPX, and Novell NetBIOS compatible protocols can seamlessly coexist with other protocols on the same network adapter card.

The computer running Windows NT Server establishes a network connection to the NetWare server, similar to any network client connection.

Gateway Service for NetWare is installed from the Windows NT Server CD-ROM.

Note

Before you install the Gateway Service, you must remove any existing NetWare redirectors, such as NetWare Services for Windows NT from Novell, and then restart your computer.

To remove existing NetWare redirector installations

1. Click Start, point to Settings, and click Control Panel.

2. Double-click Network.

3. Click the Services Tab.

4. Click the existing NetWare redirector software, and click Remove.

5. When prompted to confirm your choice, click Yes.

You must restart your computer to complete the removal process.

You are now ready to install the Gateway Service on a computer running Windows NT Server. You must be logged on as a member of the Administrators group for the local computer to install and configure the Gateway Service for your Windows NT computer. When you install the Gateway Service on a computer running Windows NT Server, the NWLink transport protocol is also installed if it is not already on your computer.

Activating a Gateway

Before enabling a gateway on a computer running Windows NT Server:

By controlling membership in the NTGATEWAY group, the administrator can control which Windows NT Server computers can be gateways to the NetWare server, and what kind of access to what files each user account has.

The administrator has total control over whether the gateway allows access to files and print queues on the NetWare server. With a gateway, the network administrator can control access to NetWare network resources either over the gateway or directly on the NetWare network:

To make a NetWare server available to a gateway account

1. Use the NetWare syscon utility to create the NTGATEWAY group account on the NetWare file server.

2. Use syscon to create a NetWare user account with the same name and password the user will use to log on from the Windows NT Server computer.

3. Add the gateway account to the NTGATEWAY group.

4. Establish trustee rights for the NTGATEWAY group.

For detailed information on the syscon utility and NetWare user accounts and trustee rights, see your NetWare documentation.

If you want to control user access, you can set permissions for the share when you create it, or later if your needs change.

Install Gateway Services for NetWare

Once the user gateway and information is added to the NetWare server, you are ready to install GSNW on the computer running Windows NT Server.

To install GSNW

1. Click Start, point to Settings, and click Control Panel.

2. Double-click Network.

3. Click the Services tab.

4. Click Server, and then click Add.

5. Click Gateway Services for NetWare, and click OK.

6. Type the path to the source files, and click Continue.

7. In the Gateway Services for NetWare dialog box, enter the name of the NetWare server to which the computer running Windows NT Server will connect.

8. Click Gateway.

9. Select the Enable Gateway check box.

10. Type the NetWare user account created to logon to the NetWare server from a computer running Windows NT Server, and click Add.

11. In the New Share dialog box. type the Share name of the gateway on the NetWare server.

12. Type the full path to the new share on the NetWare server.

13. Type an entry in Comment, if you want one.

14. Enter a letter for the drive on which the new share will reside.

15. If necessary, enter a value to limit the number of users.

16. Click OK.

The GSNW option is added to Control Panel and is used to activate the gateway.

Limitations of the Gateway Service for NetWare

GSNW is not designed to be a high bandwidth, user intensive, high performance gateway. It is designed to meet the needs of the customers who desire to have casual access to files that exist on a NetWare server, from a Windows Networking, or remote client.

Accessing Shared Resources on the NetWare Server

To access shared resources on a NetWare server, use the Map Network Driver option in the Explorer. You can map to both print and file servers. Again, this assumes that the proper privileges are assigned to the user when the connection is attempted.

To access shared resources

1. Click Start, point to Programs, and click Windows NT Explorer.

2. On the Tools menu, click Map Network Drive.

3. In Drive, confirm that the drive displayed is the one that is mapped to the server you want to access.

4. In Path, type the path to the resource to which you are trying to connect.

5. To connect to the specified drive on start up, select the Reconnect at Logon check box.

6. Click OK.

Commands to View and Find NetWare Servers

From the command line you can view your existing network connections, and their network providers.

To view network connections

1. Click Start, point to Programs, and click Command Prompt.

2. Type Net Use, and press enter.

You can also browse the network to specifically find NetWare servers.

To browse for NetWare Servers

1. Click Start, point to Programs, and click Command Prompt.

2. Type Network:NW, and press enter.

Windows NT Client Logon to NetWare

Logging onto the NetWare network is accomplished through Windows NT. When the user starts a computer running Windows NT Server or Workstation and the steps outlined above are complete, the Begin Logon dialog box appears. The user then supplies the alt+ctrl+del key sequence and the Logon Information dialog box appears. When the user provides the logon information, the user is authenticated to the Windows NT network. At the same time, the user is authenticated to the NetWare network and has access to all NetWare resources for which they have been granted permissions.