Issues Requiring a Vote

This document may be modified as needed by a vote of the NDS Tech Committee.

Unless otherwise specified, changes to shared resources in NCSUNDS require an affirmative vote by NDS Tech before they can be implemented.

The NDS schema. The schema is the set of rules and syntaxes that determine what information can be stored in NDS and how that information is stored. The schema must be consistent across the entire tree. Schema extensions or changes require approval of the NDS Tech Committee.

Directory Services. The version of DS.NLM and DSREPAIR.NLM in particular affect the functioning of NDS. All servers in the tree should run the same version of directory services to ensure the proper functioning of the NCSUNDS tree. NDS Tech approves the versions of DS.NLM and DSREPAIR.NLM that are authorized in NCSUNDS, and all NetWare servers in the tree must update to the approved versions.

Organizational Certificate Authority. The tree's Org CA server is responsible for supplying the tree key (NICISDI.KEY) and for signing digitial certificates. Modifications to the NCSUNDS Certificate Authority object, and changes to the WO.KAP.Security object specifically require a vote.

Time Services. Fundamental changes to the configuration in time services in NCSUNDS would require a vote (for example, implementing or discontinuing NTP). Changes to the servers which provide time services as REFERENCE or PRIMARY time servers do not require a vote provided there are at least one REFERENCE and two PRIMARY time servers at any given time, but any such changes should be announced in advance barring an emergency.

[Root].
ACLs (rights) set at [Root] affect every object in the tree and require a vote.
The following partition operations at [Root] require a vote:
- Partitioning off a container that is held in the [Root] partition into its own partition.
- Merging a child partition into the [Root] partition.
Creation of new objects under [Root] requires a vote.

O=NCSU. ACLs (rights) set at O=NCSU affect all subordinate objects and require a vote. Creation of new objects, or modification/deletion of existing objects in the O=NCSU container requires a vote. The following partition operations at O=NCSU require a vote:
- Partitioning off a container that is held in the NCSU partition into its own partition.
- Merging a child partition into the NCSU partition.
Partition merges/splits in the child partitions of NCSU do not require a vote; however, they should be announced in advance on SYSNEWS and performed after hours, as there is the potential for trouble involving the subordinate reference partitions held on the servers which hold the NCSU partition.

O=Internet Services. This container is used primarily by the Novell NetMail product (formerly known as NIMS). Change such as adding mailing lists do not require a vote. Any change that has the potential to impact service or security for other groups using NetMail requires a vote. The following partition operations at O=Internet Services require a vote:
- Partitioning off a container that is held in the Internet Services partition into its own partition.
- Merging a child partition into the Internet Services partition.

Servers on which [Root], O=NCSU or O=Internet Services replicas are held. It is not necessary to obtain a vote to move replicas of these partitions to other servers as necessary, provided such work does not cause the number of replicas of to drop below 3 writeable copies. Such work should be announced in advance on SYSNEWS. A vote is required to permanently increase or decrease the number of replicas of these partitions.

O=Security. Changes in this container may affect security throughout the tree and require a vote. Objects in this container are typically used by NMAS (Novell Modular Authentication Services) and NFAP (Native File Access Protocols).

Last modified August 26, 2002