NetIQ Documentation: Novell SecretStore 3.4.1 Administration Guide

4.6 Using Server Commands

You can use the following command line options at the server console:

NOTE:The commands are specific to Windows and NetWare.

Load sss [/a] [/d] [/t] [/m] [/c=# of Mins] [/o=DN] [/? | /h]

Table 4-1 Server Command Line Options

Option	Description
/a	Enables Novell Audit
/d	Clears the ACS file and load sss.dlm without command line parameters
/t	Enables Last Accessed Time Stamp
/m	Disables Master Password
/c= Minutes	Caches Refresh Period in Minutes (Minimum 30)
/o= DN	The NSSO object DN to use. NSSO DN form: my_nsso_obj.my_orgunit.my_org
/h	Displays Help
/?	Displays Help

With the SecretStore 3.3.3 release, the need to enable the cache with a separate command line parameter was eliminated. You now don't need to use the /e option, because it has been deprecated.

The autoexec.ncf file in NetWare® saves startup commands as a batch file. The commands are then executed when the SecretStore server starts. If you want to use command line options with the SecretStore server, you must first load the server sss.nlm before nldap.nlm. Otherwise, nldap.nlm auto-loads the sss.nlm without the command line option. Both sss.nlm and nldap.nlm are called from the autoexec.ncf file.

To take advantage of the Novell Audit logging features, load the logging NLM files in the autoexec.ncf file before loading SecretStore. Because the SecretStore service can connect to Novell Audit logging server only at load time, you must reload SecretStore if the connection to the logging server is lost.

For a detailed description on installing and configuring Novell Audit, refer the

Because eDirectory for Windows Server doesn’t have an autoexec.ncf file, DHost provides Active Configuration Services (ACS) that work as follows:

1. In the Windows Server plus eDirectory environment, the command line options are saved into an ACS file.
2. After the DLM (server) is loaded with a set of options for the first time, DHost saves the command line options to the ACS file.
3. Subsequent loadings of the server (DLM) cause the DHost to automatically read the same options from the ACS file.

On subsequent startups, there is no need to pass command line options.

If you must change the command line options, use the following procedure to reset the ACS file. Save the new options in the file for future use.

Take the server (DLM) down.
Restart the server by using the /d switch.

This is a Windows Server-specific option. It deletes the Windows Server command line options from the ACS file.
Restart the server again with the new command line options to be written to the ACS file.
Take the server down again.

After Step 4, loading the server does not require the command line options. The command line options are automatically read from the ACS file.

Whenever new command line options are supplied, the previous options saved into the ACS file are automatically reset. However, in the presence of ACS command line configuration, the /d switch can be used to clear the ACS file and load sss.dlm without command line parameters.

Otherwise, the command line parameters are read from the ACS file on every load of the server, just like commands are read from the autoexec.ncf file for NetWare.