Novell eDirectory 8.8 Troubleshooting Guide - NetIQ

NOTE: We recommend using iManager 2.6 or later for viewing or modifying encrypted attributes.
Alternatively, you can turn off the secure channel required option for viewing or modifying the
encrypted attributes by disabling the requireSecure attribute in the EA policy. This makes the object
and the encrypted attributes accessible by any client over clear text channel. After this, iManager
will be able to access the object.
novdocx (en) 22 June 2009
20.6 Merging Trees With Encrypted Replication
Enabled Fails
When encrypted replication is enabled, merging trees fails. Disable secure replication on each tree
before doing a merge.
20.7 Limber Displays -603 Error
Limber displays the -603 error if the server has only sub-ref replica of the encrypted attribute policy
partition.
To work around this issue, do any one of the following:
• Give read access to the NCP server object. You can do this through iManager by adding
a trustee at the tree root and giving read access to NCP server object. In the attributes, specify
attrEncryptionDefinition and attrEncryptionRequiresSecure.
• Give Public Read access to the following attributes through LDAP or ndssch:
• attrEncryptionDefinition
• attrEncryptionRequiresSecure
102 Novell eDirectory 8.8 Troubleshooting Guide