Novell eDirectory 8.8 Troubleshooting Guide - NetIQ

Any records that contain references to these definitions cause the following error:
LDAP error : 16 ( No such attribute )
Thus, records that contain any reference to these objects or that try to modify these definitions need
to be commented in the LDIF error file (err.ldf in the example).
10.3.3 Migrating the Open LDAP Data to Novell eDirectory
novdocx (en) 22 June 2009
Execute the following command to migrate the data:
ice -e error_data.ldif -SLDAP -s OpenLDAP_server -p OpenLDAP_port -d
admin_context -w password -t -b dc=blr,dc=novell,dc=com -F objectclass=* -
DLDAP -d admin_context -w password -l -F
For example:
ice -e err_data.ldif -SLDAP -s open_srv1 -p open_port1 -d
cn=administrator,dc=blr,dc=novell,dc=com -w secret1 -t -b
dc=blr,dc=novell,dc=com -F objectclass=* -DLDAP -d cn=admin,o=novell -w
secret2 -l -F
Some objects also may fail due to forward referencing and internal dependencies on the objects,
which may not break any applications.
10.3.4 Making PAM Work with Novell eDirectory After Migration
After migrating from OpenLDAP to eDirectory, you need to make some changes for PAM to work
with eDirectory.
Changes in /etc/ldap.conf File
# The distinguished name to bind to the server with.
# Optional: default is to bind anonymously.
binddn cn=admin,o=acme
...
# The credentials to bind with.
# Optional: default is no credential.
bindpw secret
...
# The search scope.
scope sub
...
# Filter to AND with uid=%s
pam_filter objectclass=inetorgperson
...
# Remove old password first, then update in
# cleartext. Necessary for use with Novell
# Directory Services (NDS)
pam_password nds
...
ssl off
...
Migrating to Novell eDirectory 65