NOVELL TECHNICAL INFORMATION DOCUMENT

TITLE:  Readme and File; DSRIGHT2.EXE
TID #:  2924751
README FOR:  dsright2.exe

SUPERSEDES:
DSRIGHT1.EXE

NOVELL PRODUCTS and VERSIONS:
NetWare 4.2

ABSTRACT:

DSRights is a utility that displays the Directory Services rights one object
has to another and how the rights were derived from the tree.  

NOTE: This utility was created to help system administrators troubleshoot
Directory Services rights problems and is provided free of charge as a
courtesy.  It is not a Novell supported product.  8/20/2004 readme change only 


-----------------------------------------------------------------
DISCLAIMER
THE ORIGIN OF THIS INFORMATION MAY BE INTERNAL OR EXTERNAL TO 
NOVELL.  NOVELL MAKES ALL REASONABLE EFFORTS TO VERIFY THIS 
INFORMATION.  HOWEVER, THE INFORMATION PROVIDED IN THIS DOCUMENT 
IS FOR YOUR INFORMATION ONLY.  NOVELL MAKES NO EXPLICIT OR IMPLIED 
CLAIMS TO THE VALIDITY OF THIS INFORMATION.
-----------------------------------------------------------------


INSTALLATION INSTRUCTIONS:

Copy  DSRIGHTS.EXE to the SYS:\PUBLIC directory on your server.


========================================
Usage:
_____________________________________________

     DSRights <object A>  <object B>

     This displays a flow diagram of Object A and its equivalents with
     their rights to Object B.  It shows Object, All Property, and
     Selected Property rights.


ISSUE: 

========================================
Usage:
_____________________________________________

     DSRights <object A>  <object B>

        This displays a flow diagram of Object A and its equivalents with
        their rights to Object B.  It shows Object, All Property, and
        Selected Property rights.

========================================
Related Technical Information Documents:
_____________________________________________

TID                       TITLE
--------------            -------------------------------------------
2924520               Understanding Effective Rights of NDS
2913776               File and NDS Rights
2913794               File System Directory and File Rights



========================================
Known Issues:
_____________________________________________

Issue 
DSRights has not been tested in non-English languages.


========================================
Frequently Asked Questions:
_____________________________________________
Q:  What rights do I need in the tree to run DSRights?

A:  You must have rights to read
        1) The ACL property for Object B and its parents including [Root],
        2) The Security Equivalent property for Object A. 

Q:  Why are some rights displayed in upper case and some in lower case?

A:  Some explicit rights imply other rights. Here are some examples:
        1)  Object [S----] implies Object [Sbwrc], 
                                            All Property [scrwa], 
                                            Selected Property [scrwa].
         2)  All Property [---W-] implies All Property [---Wa]
              All Property [--R-- ] implies All Property [-cR--]
         3)  Selected Property [---W-] implies Selected Property [---Wa]
              Selected Property [--R-- ] implies Selected Property [-cR--]

            The uppercase letters show explicit rights given while the
            lowercase letters show that a right is in effect or implied.

Q:  Why are Selected properties only displayed relative to object B?

A:  Object and All Property rights can be inherited, but Selected Property
rights cannot.  Therefore, the only Selected Property rights that object A has
to object B are those rights that object A (or its equivalents) is explicitly
given to object B.

Q:  Why does this utility show equivalences of object A that are not shown as
Security Equivalents in NetAdmin or NWAdmin?

A:  By default, All objects are security equivalent to 1) [Public], 2) all of
its parents including [Root].  For example, for an object whose full name is 
LMinser.eng.newyork.acme , we see that LMinser is a security equivalent to
[Public], eng, newyourk, acme, and [Root].  The significance of this it that
these equivalents are NOT inherited, and therefore,  CANNOT be blocked by an
inherited rights filter. 

Novell Product and Version:
NetWare 4.1
NetWare 4.11
Z.E.N.works 1.1
intraNetWare 4.11
intraNetWare for Small Business 4.11 



Self-Extracting File Name: dsright2.exe

Files Included          Size         Date          Time
..\
  DSRIGHT2.TXT   (This file)
  DSRIGHTS.EXE        519000     5-2-1997   10:07:00 am



-----------------------------------------------------------------
Any trademarks referenced in this document are the property of their respective
owners.  Consult your product manuals for complete trademark information.
-----------------------------------------------------------------