Changing IP numbers on NetWare, NW 6.0 and 6.5

1
Changing IP numbers on NetWare, NW 6.0 and 6.5

• Joe Doupnik
• Oxford University Computing Services
• joe.doupnik_at_oucs.ox.ac.uk, jrd_at_cc.usu.edu
• 1 August 2004

2
Finding IP number citations

• Find almost all occurrences of an IP number by
  using grep.nlm (version 2.5)
• http//forge.novell.com/modules/xfmod/proje
  ct/showfiles.php?
• group_id1143release_id1396selected
• sysgrep Hr 129.67.103.180 sys\ gt
  /vol1ipnum.txt
• -H means record filename with findings
• -r means recurse into subdirectories
• Redirect output to a volume not being scanned
• Move from 129.67.103.180 to 129.67.103.181
• After removing log file and backup files we get
  the following IP number references

3
NetWare 6.0 series
4
IP number (old) references

• sys/Apache/conf/adminserv.confListen
  129.67.103.18051080
• sys/Apache/conf/adminserv.conf SecureListen
  129.67.103.18051443 "SSL CertificateDNS"
• sys/Apache/conf/adminserv.confListen
  129.67.103.1802211
• sys/Apache/conf/adminserv.conf SecureListen
  129.67.103.1802200 "SSL CertificateDNS"
• sys/Apache/conf/adminserv.conf Listen
  129.67.103.1802200
• sys/Apache/conf/adminserv.conf Redirect
  /iManager/ https//129.67.103.1802200/eMFrame/iMa
  nager.html
• sys/Apache/conf/adminserv.conf Redirect
  /iManager https//129.67.103.1802200/eMFrame/iMan
  ager.html
• sys/Apache/iFolder/Server/httpd.confListen
  129.67.103.18052080
• sys/Apache/iFolder/Server/httpd.conf
  SecureListen 129.67.103.18052443 "SSL
  CertificateIP
• sys/ETC/certserv/PkisInst.logSubjectDN
  .CN129.67.103.180.OJRD-TREE
• sys/ETC/GATEWAYSNet 0 Gateway 129.67.103.254
  Metric 1 Passive
• sys/ETC/HOSTNAME129.67.103.180
  netlab3.oucs.ox.ac.uk
• sys/ETC/hosts129.67.103.180
  netlab3.oucs.ox.ac.uk EDU-USU-NETLAB3
• sys/ETC/NETINFO.CFGBIND IP CE100B_1_EII ARPYes
  Mask255.255.252.0 Address129.67.103.180
• sys/ETC/NETINFO.CFG129.67.103.180
• sys/ETC/TCPIP.CFG Address 129.67.103.180
  

5
IP number (old) references

• sys/ni/data/response.niiFolder.ipaddress.2129.6
  7.103.180
• sys/ni/data/response.niiPrint.ipaddress129.67.1
  03.180
• sys/ni/data/response.niiPrint.ipaddress.2129.67
  .103.180
• sys/ni/data/response.niIP Address
  1129.67.103.180
• sys/ni/data/response.niGateway 1129.67.103.254
• sys/ni/data/response.niIP Address
  1129.67.103.180
• sys/ni/data/response.niWebIPAddress129.67.103.1
  80
• sys/ni/data/response.niifSecondaryIPAddress129.
  67.103.180
• sys/ni/update/data/PortResolverInstalled.properti
  esEnterprise.ipaddress129.67.103.180
• sys/ni/update/data/PortResolverInstalled.properti
  esiFolder.ipaddress129.67.103.180
• sys/ni/update/data/PortResolverInstalled.properti
  esiPrint.ipaddress129.67.103.180
• sys/ni/update/data/PortResolverInstalled.properti
  esApache.ipaddress129.67.103.180
• sys/Novonyx/suitespot/https-EDU-USU-NETLAB3/confi
  g/magnus.confAddress 129.67.103.180
• sys/Novonyx/suitespot/https-EDU-USU-NETLAB3/confi
  g/obj.confNameTrans fn"document-root"
  address"129.67.103.180" port"443"
• root"/novonyx/suitespot/docs" secure"1"
  ssl2"0" ssl3"0" secure_auth"0"
• sys/NSearch/sitelist.propertiesnetlab3.oucs.ox.a
  c.ukSYS/NSearch/sites/default_at_Alias129.67.103.1
  80

6
Hand edit items

• Edit sysapache\conf\adminserv.conf
• Edit sysapache\iFolder\Server\httpd.conf
• Inetcfg, Bindings, TCP, change IP number
• Check files hosts, hostname, gateways in sysetc.
  Also check NFS setup.
• Edit sys/ni/update/data/PortResolverInstalled.pro
  perties
• Via web, change Novonyx web server (see next
  slides)
• Restart server
• Run pkidiag.nlm to regenerate certificates
• Restart server

7
Novonyx web server

• Change Novonyx web server via its own management
  interface (sensitive to manually editing files)
• Get to interface via normal port 80
• Post reboot fix up may be needed for doc root

8
Novonyx web server
9
Novoynx doc root fixup
10
Apply Novonyx changes to files
11
Postscript

• iFolder and iPrint clients may have old IP number
  (vs name), redo clients to match
• Port 80 opening web page uses IP name URLs
• Name servers point to old IP number, thus
  iManager etc will not start via IP name
• Use https//ipnumber2200/ to access
  administrative web interfaces by number
• Grep does not scan NDS, beware

12

• NetWare 6.5 series

13
NW 6.5, all but exteNd, original
14
Grep on old IP subnet (129.65.103)

• sys/adminsrv/conf/adminserv.confListen
  129.67.103.1802211
• sys/adminsrv/conf/adminserv.confSecureListen
  129.67.103.1802200 "SSL CertificateDNS"
• sys/adminsrv/conf/adminserv.conf Listen
  129.67.103.1802200
• sys/adminsrv/conf/adminserv.confltVirtualHost
  129.67.103.1802200gt
• sys/ETC/certserv/PkisInst.log ip_address
  129.67.103.180
• sys/ETC/CONSOLE.LOGBound to board 1 with IP
  address 129.67.103.180 and mask FF.FF.FC.00.
• sys/ETC/CONSOLE.LOG SLPTCP bound to
  129.67.103.180
• sys/ETC/CONSOLE.LOGDNS resolving name for
  129.67.103.180 --gt netlab3.oucs.ox.ac.uk
• sys/ETC/GATEWAYSNet 0 Gateway 129.67.103.254
  Metric 1 Passive
• sys/ETC/HOSTNAME129.67.103.180
  netlab3.oucs.ox.ac.uk
• sys/ETC/hosts129.67.103.180
  netlab3.oucs.ox.ac.uk EDU-USU-NETLAB3
• sys/ETC/hosts.org129.67.103.180
  EDU-USU-NETLAB3
• sys/ETC/NETINFO.CFGBIND IP CE100B_1_EII ARPYes
  Mask255.255.252.0 Address129.67.103.180
• sys/ETC/NETINFO.CFG129.67.103.180
• sys/ETC/TCPIP.CFG Address 129.67.103.180
  
• sys/ETC/TCPIP.CFG Address 129.67.103.180
  
• sys/ETC/TCPIP.CFG Address 129.67.103.180
• Binary file sys/NI/DATA/NI.LOG matches

15
Old subnet findings, contd

• sys/NI/DATA/protdb.txtBindIP card 0
  CE100B_1_EII address 129.67.103.180 returned 0
• sys/NI/DATA/protdb.txtNWIProtocols.configureHost
  s wrote to hosts (insertLine) 129.67.103.180
  EDU-USU-NETLAB3
• sys/NI/DATA/protdb.txtNWIProtocols.configureHost
  s fullHostName netlab3.oucs.ox.ac.uk ipAddress
  129.67.103.180
• sys/NI/DATA/protdb.txtNWIProtocols.saveSettingsT
  oResponseFile Primary IP129.67.103.180 card
  num 0
• sys/NI/DATA/protdb.txtNWIProtocols.saveSettingsT
  oResponseFile adding IP129.67.103.180 card num
  0
• sys/NI/DATA/protdb.txtNWIProtocols.sstrf bind
  ip 129.67.103.180 to CE100B_1_EII
• sys/NI/DATA/response.rspIP Address
  1129.67.103.180
• sys/NI/DATA/response.rspGateway
  1129.67.103.254
• sys/NI/DATA/response.rspIP Address
  1129.67.103.180
• sys/NI/nis30/bin/pkiinst.txt ip_address
  129.67.103.180
• sys/NSearch/SiteList.propertiesnetlab3.oucs.ox.a
  c.ukSYS/NSearch/sites/default_at_Alias129.67.103.1
  80
• sys/SYSTEM/autoexec.000BIND IP CE100B_1_EII
  addr129.67.103.180 mask255.255.252.0
  gate129.67.103.254
• sys/SYSTEM/ipconf/ApacheAdmin/AppConf.xml
  ltIPaddressgt129.67.103.180lt/IPaddressgt
• sys/SYSTEM/ipconf/ApacheAdmin/AppConf.xml
  ltIPaddressgt129.67.103.180lt/IPaddressgt
• sys/SYSTEM/ipconf/httpstk/AppConf.xmlltContextInf
  ormationgt129.67.103.18081lt/ContextInformationgt
• sys/SYSTEM/ipconf/httpstk/AppConf.xmlltIPaddressgt
  129.67.103.180lt/IPaddressgt
• sys/SYSTEM/ipconf/httpstk/AppConf.xmlltContextInf
  ormationgt129.67.103.1808008lt/ContextInformationgt
• sys/SYSTEM/ipconf/httpstk/AppConf.xmlltIPaddressgt
  129.67.103.180lt/IPaddressgt

16
Old subnet findings, contd

• sys/tomcat/4/webapps/eGuide/help/en/install/getti
  ngstarted.htmlltpgtTo launch eGuide, go to lta
  href"http//129.67.103.180/eGuide/admin/index.htm
  l" target"_blank"gthttp//129.67.103.180/eGuide/ad
  min/index.htmllt/agt
• sys/tomcat/4/webapps/eGuide/WEB-INF/properties/di
  rectories.propertiesBookServerKey129.67.103.180
• sys/tomcat/4/webapps/eGuide/WEB-INF/properties/Ne
  w_Data_Source_DIR_SCHEME.xmlltHostgt129.67.103.180lt
  /Hostgt
• sys/tomcat/4/webapps/nps/WEB-INF/PortalServlet.pr
  opertiesSystem.DirectoryAddress129.67.103.180\6
  36
• sys/tomcat/4/webapps/nps/WEB-INF/PortalServlet.pr
  opertiesCustom_Backend_Renderer_Portal_Locationh
  ttp\//129.67.103.180\80/nps

17
Change IP via Remote Manager
New
18
After forcing new IP number
19
Waiting, then fixing red apps
20
After NRM manual changes
Click Restart Server. Reattach soon via new IP
number (not IP name)
21
After reboot, grep on old IP number

• sys/ETC/certserv/PkisInst.log ip_address
  129.67.103.180
• Binary file sys/NI/DATA/NI.LOG matches
• sys/NI/DATA/protdb.txtBindIP card 0
  CE100B_1_EII address 129.67.103.180 returned 0
• sys/NI/DATA/protdb.txtNWIProtocols.configureHost
  s wrote to hosts (insertLine) 129.67.103.180
  EDU-USU-NETLAB3
• sys/NI/DATA/protdb.txtNWIProtocols.configureHost
  s fullHostName netlab3.oucs.ox.ac.uk ipAddress
  129.67.103.180
• sys/NI/DATA/protdb.txtNWIProtocols.saveSettingsT
  oResponseFile Primary IP129.67.103.180 card
  num 0
• sys/NI/DATA/protdb.txtNWIProtocols.saveSettingsT
  oResponseFile adding IP129.67.103.180 card num
  0
• sys/NI/DATA/protdb.txtNWIProtocols.sstrf bind
  ip 129.67.103.180 to CE100B_1_EII
• sys/NI/DATA/response.rspIP Address
  1129.67.103.180
• sys/NI/DATA/response.rspIP Address
  1129.67.103.180
• sys/NI/nis30/bin/pkiinst.txt ip_address
  129.67.103.180 (This is just a log
  file, not active config)
• sys/SYSTEM/AUTOEXEC.NCFBIND IP CE100B_1_EII
  addr129.67.103.180 mask255.255.252.0
  gate129.67.103.254
• sys/tomcat/4/webapps/eGuide/help/en/install/getti
  ngstarted.htmlltpgtTo launch eGuide, go to lta
  href"http//129.67.103.180/eGuide/admin/index.htm
  l" target"_blank"gthttp//129.67.103.180/eGuide/ad
  min/index.htmllt/agt
• sys/tomcat/4/webapps/eGuide/WEB-INF/properties/di
  rectories.propertiesBookServerKey129.67.103.180
• sys/tomcat/4/webapps/eGuide/WEB-INF/properties/Ne
  w_Data_Source_DIR_SCHEME.xmlltHostgt129.67.103.180lt
  /Hostgt

Manually edit Tomcat files. Also run PKIDIAG
22
NW 6.5, the end

• After hand editing and Restart Server
• NRM and iManager work fine
• Web pages work
• No certificate complaints (thus far), but watch
  for Tomcat troubles later (use tckeygen.ncf and
  tceDirInt.ncf in syssystem)
• Do run PKIDIAG to cleanse certificates
• I think we are done