Novell eDirectory 8.8 Troubleshooting Guide - NetIQ

Action
The application should access the encrypted attributes through a secure channel, like LDAP secure
channel or HTTP secure channel.
Possible Cause
If you get this error during replication, one or more servers in the replica ring have some attributes
marked for encryption and are configured to be accessed only over secure channel.
novdocx (en) 22 June 2009
Action
Change the configuration of the encrypted attribute policy, so that the encrypted attributes can be
accessed over insecure channels. For more information, refer to Novell eDirectory 8.8
Administration Guide (http://www.novell.com/documentation/edir88/index.html).
Possible Cause
If you get this error when encrypted replication is configured at the partition level or between the
replicas of the partition, then the replica ring has pre-eDirectory 8.8 servers in it.
Action
Upgrade all the servers in the replica ring to a version compatible with eDirectory 8.8.
20.1.3 -666 FFFFFD66 INCOMPATIBLE NDS VERSION
Text goes here
Possible Cause
If encrypted replication is enabled at a partition level and if you are trying to add a replica of this
partition to an eDirectory server, then the eDirectory version on this server is incompatible with the
version on the source server.
Action
Upgrade the server to a compatible version of eDirectory.
Possible Cause
If the parent partition has pre-eDirectory 8.8 servers (mixed version ring) and if the child partition
has ER enabled, the merge and/or join partition operations would be disallowed and the
ERR_INCOMPATIBLE_DS_VERSION error will be returned.
The reason for this is that the child partition contains sensitive data with ER enabled at the partition
level and the parent partition having pre-eDirectory 8.8 server. With ER enabled only between
eDirectory 8.8 servers, on merging, sensitive data is exposed when replicating to pre-eDirectory 8.8
servers.
100 Novell eDirectory 8.8 Troubleshooting Guide