Novell Upgrades ZENworks Linux Management Software 119
cfelde writes "eWeek reports that Novell launched a major new release of its ZENworks Linux Management software at CeBIT on Friday, with the aim of bringing management of Linux desktops and servers on par with that of Windows desktops and servers.
ZENworks 7 Linux Management adds remote control, imaging, hardware and software inventory, a Web console, and ZENworks' automated policy management to make it a full life-cycle management suite."
Bring it on par with Windows? (Score:1, Funny)
yes (Score:1, Interesting)
(of course I'd say that plan9 beats both in this regard, in plan9 unlike happens in windows and linux apps don't really need to be "LDAP aware", you just exports and imports filesystem namespaces)
Re:yes (Score:1)
Twaddle... AD is a poor response to Edir, too late and a few slices short.
It's single platform, and brings all the 'inSecurity' features of Win32 to what is meant to be an identity management solution.
Addresses Critics Wells (Score:5, Insightful)
Now CIOs will have an even more robust product to be able to tell their MS reps to stop chanting "TCO" as a reason to stick with/switch to Windows.
Screenshots.... (Score:4, Informative)
... here [novell.com], here [novell.com], here [novell.com], here [novell.com], here [novell.com], and here [novell.com].
Re:No it does not! (Score:4, Interesting)
Rightly so, considering that a Linux support/admninstrator can handle, in average, 3 times more users/machines.
Absolutely (Score:1)
They have a skill set that others don't. It is basic supply/demand.
Re:Absolutely (Score:4, Insightful)
I was comparing people with comparable skills. Just a question of productivity due to system resources, and the fact that you will have, in the long run, lower suport calls with a unix network.
Most people tend to forget a basic fact about Unix versus Windows. Their learning curves are the inverse of each other.
To learn basic skills, Windows is (usually) easier. But the more you want to advance your knowledge, the harder it gets.
Unix is the oposite. Harder to learn the basics, and keeps getting easier and easier to advance your knowledge.
Re:Absolutely (Score:3, Interesting)
It takes a linux admin 5yrs to get a firm handle on linux. It takes a windows admin about 3 months tops.
Like most things in life, you get what you pay for. Whether you go with the cheap admin or the system that requires cheap admins, you get lower q
Re:Absolutely (Score:2)
Also, your statement that it takes a linux admin 5 years to get a firm handle on linux, wrongly
Re:Absolutely (Score:2)
No actually it is quite possible to know everything about windows from top to bottom short of programming API's after about 3 months of exposure. You can manipulate almost every part of windows via the gui tools you mentioned. There is next to nothing that need be done with the CLI.
"Also, your st
wtf? (Score:5, Interesting)
Um, how about a tool that does the reverse? Something that turns the windows registry and software configurations into a bunch of sensible and human readable text files all in a single directory with sane permissions.
Although the imaging is nice. I know way too many imaging programs which do not correctly support certain bootloaders in the mbr.
Cygwin does this (Score:2, Informative)
Re:wtf? (Score:4, Interesting)
HKLM = Machine specific Settings
HKCU = Link to HK_Users\ = User specific settings
HK_Classes_Root = Link to HKLM\Classes\Software Classes
In both HKCU and HKLM there are Software subkeys which is where apps are supposed to write and user or machine specific settings
Machine specific System Settings (i.e Services, etc) are located in HKLM\System.
In there are CurrentControlSet (curren System Settings) as well as ControlSetx which (I think) are previous settings as well as LastKnownGoodRecovery
Probably the most convoluted section is the Classes but rarely does anyone need to go in there.
It's a little of a different mindset but not that big. The nice thing about Linux is that since they are human readable files there is no singular point of failure (i.e if registry corrupts) but the Registry is still not that daunting and it can be backed up easily by backing up the System state.
Re:wtf? (Score:2)
For example if you go into Regedit as the local administrator and look in HKU you will see two subkeys called -500 and -500_Classes. The local Administrator account SID always ends in 500
This is why renaming the admin account is not always a foolproof method of stopping people to hack in as all they need to figure out is what name corresponds to the *500 SID.
Re:wtf? (Score:3, Insightful)
Well the other nice thing about config files is the ability to have in-line comments and manage the files via CVS or something similar.
Re:wtf? (Score:2)
The comment thing would be nice however Active Directories gives a lot of power to applying specified configurations to specific computers or groups of computers. Rather than managing the files you just create Group Policies and apply to specific OUs that are necessary. You can also limit which members of the OU (machine or User) that gets it applied by setting specific pe
About time (Score:2, Insightful)
Vidar
to late, to little (Score:3, Informative)
Companies with large numbers of clients already have that funtionality. From Microsoft's own SMS [microsoft.com] in combination with Vintela's fantastic extensions for Linux / Unix / Mac management.
The catch is, most companies are MS centric, so they use SMS to manage their clients. With Linux replacing the Unix (if any) machines in those companies it makes sense to extend the existing management product, to use ONE solution to manage ALL clients.
Check out Vintela [vintela.com] if you haven't. They offer client management, authentication and single sign on for integration of non-MS clients into MS-centric networks.
eghads! (Score:2)
Re:to late, to little (Score:5, Insightful)
Re:to late, to little (Score:4, Informative)
Also vintella is a canopy company. If you can avoid it you should boycott canopy companies.
Re:to late, to little (Score:1)
Novell was rolling out its directory service and Zen back when Microsoft was trying to get SMS 1.0 working. Back then it required the netware client. It has come a long, long way since then.
At one time, most of the world was using Netware clients. So if most of the world is using Windows file servers now, it can change just like it did before.
Lastly, most Windows admins that I know don't really care for SMS all that much--never have.
DFossmeister
Oh, *great* (Score:3, Interesting)
And why would we want to subject ourselves to that kind of difficulty, pain, and anguish? The tools that are already part and parcel of Unix/Linux are complete and useful for that. All it takes is someone that knows what the hell they are doing.
Re:Oh, *great* (Score:3, Insightful)
> pain, and anguish? The tools that are already part and parcel of
> Unix/Linux are complete and useful for that.
Ever used Zen on Windows? There's a lot to like.
> All it takes is someone that knows what the hell they are doing.
Heh. In case you haven't noticed, there's a severe shortage of people who know what the hell they're doing.
Yes! (Score:1, Funny)
Eventually, yes!
What's more, Zen could configure Xen to configure Zen to configure Xen to configure Zen to....
To hell with it.
Let's just rename Xen to XINZ (Xen Is Not Zen) and be done with it.;-)
Re:Yes! (Score:2)
Re:Yes! (Score:2)
I seriously doubt this, unless you're just talking about the Linux part of Zen.
Re:Oh, *great* (Score:2)
Yes.
There's a lot to like.
Not in my experience with multi-thousands of desktops. About all I can say is that it's better than nothing.
Heh. In case you haven't noticed, there's a severe shortage of people who know what the hell they're doing.
I noticed that at work, actually. Starting with the management and all the way down. Most of the people that actaully DO the work are pretty bright, or at minimum CAN do the work... This isn't the usual PHB gripe either. I mean, managemen
Re:Oh, *great* (Score:2)
I don't know if you're directly responsible for the Zen stuff, but there's an excellent Novell mailing list that might be of help.
http://netlab1.usu.edu/novell.faq/nvfaq-b.htm#B000 [usu.edu]
Good luck etc.
Re:Oh, *great* (Score:1)
Answers to why. (Score:2)
What? (Score:1, Insightful)
Am I the only one who has been trying for years to finally bring management of Windows desktops and servers on par with that of Linux desktops and servers? I'm sure that "full life-cycle management suite" may be very interesting to anyone who employ cutting edge proactive paradigm shifts, but in
Re:What? (Score:5, Interesting)
They are not referring to making Linux like Windows. They are referring to making the management of Linux, through ZenWorks, like the management of Windows, through ZenWorks. This is an important feature for ZenWorks and its users and is a feature that Novell has been missing for some time, despite their previous claims of ZenWorks Linux support.
ZenWorks is a fantastic tool and is extremely powerful. It performs functions such as hardware and software inventory, application installation and removal, remote control, system policy management and more. But, ZenWorks primary area of support has been Windows systems. Novell claimed that it supported Linux and PDA's but, this support was very limited. Now, with ZenWorks 7, the supported features for Linux approach the level of the Windows features that have always been there.
First off, you need to understand what ZenWorks can do. ZenWorks is a system for controlling and managing workstations and servers network-wide from a single location, using policies that are stored in eDirectory, Novell's directory service. With ZenWorks, an administrator can control settings like Windows Policies and KDE kiosk configuration. With ZenWorks an administrator can install and remove applications, patches and configurations remotely from a single location. With ZenWorks, an administrator can install new operating systems or reinstall broken operating systems remotely, from a single location.
Some of these things you can do with Linux already and some of them you can't. Or at least, you can't do them easily. This new ZenWorks is supposed to make it brain dead easy to do these things for 10 systems or 10,000 systems. The key concepts are ease and volume/automation. Sure, you could write a script to ssh into your systems and install some software or what-have-you but, it will be different every time and too often requires some form of manual intervetion. Most importantly, nothing about the script will be useable on Windows workstations. You'll have to use different scripts and scripting languages for those systems so, the overhead is relatively high.
Here are a couple of scenarios. Suppose your working the helpdesk and a user calls to say that their PC isn't working. You open up the management console and quickly locate the PC in question from amongst the thousands in your firm. With two clicks you are connected to the PC and remotely controlling it. Regardless of whether the PC is Windows or Linux, the procedure is the same.
Now you see that the PC isn't actually broken, as the user reported but, it is simply missing an application because the user had moved in from another department and had not yet been configured to use that application. A couple of clicks associates the user with the application and the application is automatically installed and made available to the user. Again, Windows or Linux, the procedure is the same in ZenWorks.
Now, let's suppose that during the install of the application, the user unplugged the PC. I don't know why they did it, they just did it. They're a user, OK? Anyway, for what ever reason the disk is corrupted and the OS is hosed. You instruct the user to restart the machine and choose the appropriate option from the boot menu. The PC is reimaged with a fresh copy of the OS and the appropriate applications are reinstalled. In ten minutes the user is up and running with no user or admninistrator intervention. Again, Windows or Linux, the procedure is the same from within ZenWorks.
Now, let's assume a different scenario. This time, let's assume that your boss has decided that the company will now use the latest Windows 200X on all workstations. This is a massive upgrade that requires not only the installation of a new OS but also the installation or upgrade of numerous applications that were being used before but no longer work under the new Windows version. Even if you use RIS or Ghost
Re:What? (Score:1)
Re:What? (Score:2)
Have you heard of rsync? rcp? ssh logins? How about nfs? How about centralized home directories? How about running an application that is stored on the network? 20 years ago a sysadmin could "remote administrate" a user without their machine even being turned on! And
Re:What? (Score:4, Informative)
From your post, obviously not.
Have you heard of rsync? rcp? ssh logins? How about nfs? How about centralized home directories? How about running an application that is stored on the network?
Rsyc - Synchronizes files doesn't really help with specifics like settings in Gconf or updates to Postfix alias databases or RPM installations.
Rcp - insecure. Better to use scp or sftp.
Ssh logins - that's what I said in the original post.
Nfs - File sharing isn't systems management.
Centralized Home directories - the only way to go for network connected uses.
Running apps from the network - excellent when possible. But, doesn't work with some apps, with large apps when bandwidth is an issue, or with people disconnected from the network such as laptops.
Also, many of the above services are not available on Windows, only Linux/Unix. This limits your options for network management as even your environment seems to have Windows as well as Linux.
I'm not trying to flame you but, rather point out that it isn't a case of Windows-centric thinking. It is a case of network-wide management thinking. Thinking in terms of doing as much as possible from a central point with the greatest of ease. Volume and automation.
The imaging that you describe in your environment is likely the same one the ZenWorks uses, PXE booting. While it can be setup on almost any network it is fiddly to say the least. ZenWorks makes its setup much easier and it is only a small part of what ZenWorks does. For instance, can they take a backup image of your workstation remotely because, your hard drives S.M.A.R.T. is predicting a failure or they want to have a backup for some other reason? PXE doesn't do this but, with ZenWorks they can, and now it doesn't matter if your running Windows or Linux.
Re:What? (Score:2)
In Unix it is assummed that a program is quite able to look in arbitrary places for it's configuration. The user has to set an environment variable that says "look here", but *that* can be set by another script. Even totally broken
Re:What? (Score:2)
OK, you take these script/envvar/symlink tricks, mulitply by hundreds of applicaitons, multiply by thousands of workstations and the whole thing ends up looking like one big
Re:What? (Score:2)
I am not a sysadmin or even a real networking dude; my network-grok is at best crude. However... when I went to Novell's seminar and watched the ZenWorks live demo, my immediate thought was, "That is SO simple, even *I* could do that". How to accomplish desired tasks was flamingly evident, and did not assume any serious knowledge of networks b
Re:What? (Score:2)
What I was getting at, is that given X content (and an assumption that SOMEONE has tested it, because untested patches/updates are tantamount to network suicide), anyone with half a clue could DEPLOY that content with ZenWorks -- selectively, if necessary.
Huh? (Score:2)
Could they be better? Sure they could. Do they work? Yep.
Until tools such as Zen, that many unix boxes to manage would be a nightmare.
Now let me wait... (Score:2)
Critical need (Score:4, Insightful)
Re:Critical need (Score:4, Insightful)
I must be missing the point here - what is involved in managing desktops in a 'policy-driven fashion'? Perhaps it is more difficult if you can't assume that 99% of the desktop machines have almost identical settings.
To put things another way: hundreds of universities have big networks of Linux desktops, with a varied range of applications and hardware configurations. I don't think many of them shell out for expensive 'policy-driven' tools, yet they manage to enforce sensible policies in the face of fairly hostile and ingenious users (students). I understand the need for extra tools when administering Windows because Windows configuration is otherwise so fiddly and obscure. But I don't see what extra these tools bring to Unix.
Re:Critical need (Score:2)
Care to give some examples? This would help...or are you bound by some non-disclosure agreement?
Re:Critical need (Score:2)
Re:Critical need (Score:2, Informative)
Re:Critical need (Score:2)
As you have assumed, those tasks get more difficult when you mix user types, tasks and profiles; at work, we have developers (a small minority of users), which get different software and permissions on their PC's than the rest of people. Zenworks manages that and separate shared directories for each unit
Re:Critical need (Score:2)
I'd say apt or yum or smart or Red Carpet or (insert favourite package management tool here) handle these tasks pretty well. Perhaps Zenworks or other payware also do a good job but I don't see what real advantage it could have over the existing tools. On Windows, where every application has its own executable installer program, of course you need some kind of fancy tool to make
Re:Critical need (Score:1)
Look at it this way -- the
Re:Critical need (Score:1)
I'd never considered 'unneeded garbage' to be a problem, certainly it appears less of a problem than the extra complexity involved in carefully measuring out the amount of garbage each machine gets. I'm referring to Linux systems here; on Windows it's not a good idea to install too many applications since they may do unpleasant thin
Re:Critical need (Score:1, Interesting)
Re:Critical need (Score:2)
Actually there are a couple of commercial ones. I can't remember the names but go through the radmind [umich.edu] mailing list archives and they're probably mentioned a bunch of times. Speaking of radmind, are you aware of the fact that several university administrators are using it to manage networks consisting of hundreds of Mac OS X machines? radmind can work on UNIX, BSD and Linux machines as well.
Re:Critical need (Score:1)
A brief history lesson (Score:2, Interesting)
Long ago, Novell entertained the idea of replacing NetWare with Linux. This was way before the big Linux boom so management obviously just laughed off the idea. So Ransome Love took a bunch of engineers away from Novell and started Caldera.
Novell at the time was developing Zenworks and many in the group felt that there ought to be a Zen for Linux. Again, Novell management flatly rejected that idea as well, so they left novell and
Re:A brief history lesson (Score:2)
Novell actually announced they were replacing NetWare with UNIXWare. The product map whoed this UNIX-based thing called "SuperNOS" would appear after NetWare 4.
Turned out to be a terrible decision because the technical limitations of NetWare killed Novell's dominant standing in the market.
Re: Linux Management Software (Score:3, Informative)
"The goal of this project is to provide a complete Open Source implementation of a WBEM-based management solution for Linux. "
Re: Linux Management Software (Score:2)
Ill Omens - Uncommon Proprietary Demo Software (Score:1)
Any free alternatives ? (Score:2)
Re:Any free alternatives ? (Score:2)
Re:Any free alternatives ? (Score:1)
I admit i dont mess with YAST as im not a SUSE fan, but does it allow remote admin of machines as well as local?
Im sure YAST wont support windows machines, which wont help.
Re:Any free alternatives ? (Score:3, Informative)
I don't know about Windows machines but for maintaining *nix ones you can use projects like radmind [umich.edu] or Cfengine [cfengine.org]. Someone else in this discussion mentioned sblim [sourceforge.net] but it doesn't look that project is ready to be used in production environments. Hopefully someone else wi
Re:Any free alternatives ? (Score:2)
I personally don't use Webmin or any similar product. But I have never had to manage more then a dozen machines. I know of Webmin as it has been around forever and it is still being developed.
Note: like all remote administration tools, includeing Zenworks, Webmin does add a security risk. However the risk is easy to manage if you read the docs and
Webmin (Score:2)
Yes, it does help..
I just hate to have to go out and start writing my own scripts, and we dont have the size to warrant the cost of the 'enterprise' packages.
Re:Webmin (Score:2)
Re:Any free alternatives ? (Score:2)
Look at Open Carpet [opencarpet.com] as well as the Open Source ZLM (formerly Red Carpet)client [ximian.com]
For small shops it should be enough. For hackers and developers - it's free (see above)
Removes last excuse for Linux on Desktop (Score:2, Insightful)
The ground under Microsoft's castle is shifting.
The final problem is the agreements that MS has with the large PC OEMs (Does anyone _not_ buy Dell for corporate desktops?). MS will continue to (ab)use their monopoly power in this regard. Try to buy
Re:Will they be as good with error messages? (Score:3, Interesting)
Call me when Microsoft starts including the documentation in the OS instead of giving me meaningless numbers.
Oh, and I don't think that a support site for servers that says you "click in start -> run and type regedt32.exe" instead
Re:Will they be as good with error messages? (Score:2)
Well.. and how could then try to open something that it can't see? Obviously, there's something
Besides, the error is When you use an Internet Information Server (IIS) ASP page to access a database, the connection may fail with the following error message: Microsoft OLE DB Provider for ODBC Drivers error '80004005' [Microsoft][ODBC Driver Manager] Data source name not found and no
Hey - my* product is on Slashdot (Score:4, Informative)
ZENworks 7 Linux Management can trace its roots back to Ximian [ximian.com] Red Carpet Enterprise.
What we* have done with this project is extended the really strong RPM delivery and dependancy resolution (messaged as software and patch management for Linux) and added much of the traditional ZENworks functionality.
What ZENworks 7 Linux Management aims to do is really change the story for managing Linux in the Enterprise; we're not targetting the hacker community here really (take a look at projects like OpenCarpet [opencarpet.org]).
Novell will be including OS deployment via imaging as well policy-enabled AutoYaST and Kickstart (yes - it's cross distro!)
There will also be inventory and asset management, remote control and support, strong auditing and logging and the ZENworks [novell.com] one-to-many policy management.
Novell BrainShare [novell.com]is next week - we will be showcasing this and have live demo systems. There is also a 'Sneak Peek' [novell.com] online [registration required].
Personally I'm really excited that this will change the perceptions of Linux in the Enterprise - it certainly helps with customer migrations from Windows to Linux.
It's taken a large, distributed, cross discipline team to get this far - I'll ruin my Karma by thanking them all publicly.
* the Novell ZENworks business unit - which includes the Ximian Red Carpet Enterprise engineering and QA team.
Go on - mod me down for not being objective ;)
Re:Hey - my* product is on Slashdot (Score:1)
Actually, i've played a lot with Novell products in the last 2-3 years. From Netware 5.x to 6.x, edirectory, ichain, extend, dirxml, groupwise, zen of course, and all sub derived products like ifolder and iprint.
I'm really a novell fan, but i'm bit afraid of what novell is doing now.
I've also played with suse9, and recently OES, all this is fine, but novell is preaching oneNet, but the problem is that there's so many flavor of products, and the devel seems to be done all over the
Re:Hey - my* product is on Slashdot (Score:2)
iManager (web admin) looked interesting during its early beta stages (cca. NetWare 6 release), then inevitable question was asked - "How are we going to do administration if the web server (
Re:Hey - my* product is on Slashdot (Score:2)
What is really fucked up is that people overlook the other question - What happens when the entire network is taken down by some new exploit/bug? What do we do with the MS network then?
(Yes, your firewall might prevent this. It will also prevent it in the Novell case. Better marketing, I guess).
ConsoleOne was a really, really bad idea anyway.
In some parallel universe, Novell ported everything to Linux or BSD ten years ago, and just worried
Re:Hey - my* product is on Slashdot (Score:2)
Tell me about it. So far we've been either dumb lucky or we have a really disciplined, smart users (my vote is for the former) - we had only one major outbreak in the last 3 years.
In the same parallel universe, OS/2 took off and Microsoft remained a bit player in office software business.....;)
Re:Hey - my* product is on Slashdot (Score:2)
That's what I'm facing right now. (Score:2)
Oops. Problems with the overlay CD and iManager just wouldn't work. (iManager relies upon LDAP, Apache2, Tomcat and their software all working together. Maybe it uses perl, too. Give me a single utility you idiots.)
Anyway, the iManager problem gets solved when Novell finally released a TID on how to MANUALLY install their iManager stuff. It seems that uninstalling and re-installing their stuff does NOT actually re-install their stuff. Novell, this is
Re:Hey - my* product is on Slashdot (Score:2)
Re:Hey - my* product is on Slashdot (Score:1)
Excellent! (Score:2)
on par? (Score:4, Informative)
Please don't. The nightmare of windos administration on Linux? There's a reason real professionals prefer Unix systems, and administration is a huge part of it.
This isn't a joke. At my 400 people company, there's half a dozen people employed just to keep the windos network running, plus another half dozen students and other cheap labor forces for simple stuff such as exchanging machines, etc. And I'm not saying it's running especially well.
On the other hand, four Unix admins keep several entire networks of production servers running.
Re:on par? (Score:2, Insightful)
The Desktop support people have a much tougher time. They deal with Users. Users have the right to install their own apps, because they need it (political). Management won't purchase new machines (and OSes) for users because it is jus
Re:on par? (Score:2)
I have managed a (small) Unix (mostly Solaris, one or two Linux machines) desktop network. It was painless and took up a tiny fraction of my time.
The most difficult part was convincing the users that no, they do not need root access and if they need an application installed anywhere but their home directories, I will gladly install the package for them.
Users without system access == users who cause you no trouble.
And that's where windos fai
Re:on par? (Score:1)
But does it work? (Score:1)
Re:But does it work? (Score:1)
Re:But does it work? (Score:1)
You should consider the Novell Press books for ZEN administration.
Re:But does it work? (Score:1)
What kind of reporting can you get (and how hard is it to get it)?
We have been told (by the group that runs ZenWorks at our company) that these iventory reports are not possible (perhaps that means easily available). Say, I want to find all the machines that are running a certain version of certain product, give me the list. We are told we can't get that with ZenWorks
Re:How Much? (Score:1)