Novell eDirectory 8.8 Troubleshooting Guide - NetIQ

More documents

Recommendations

Info

5.3.1 Adding a New Object Class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35 5.3.2 Adding a New Attribute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37 5.3.3 Adding or Removing Auxiliary Classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38 6 Troubleshooting SNMP 41 6.1 Traps Might Not Get Generated As Expected . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 6.2 SNMP Group Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41 6.3 SNMP Initializing Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 6.4 SNMP Subagent Does Not Start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42 6.5 SNMP Issues After Upgrading from eDirectory 8.7.3 to eDirectory 8.8 . . . . . . . . . . . . . . . . . . 42 novdocx (en) 11 July 2008 7 Obituaries 43 7.1 Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 7.1.1 Deleting an Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44 7.1.2 Moving an Object. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 7.2 Impact of Stuck and Orphaned Obituaries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 7.3 Prevention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45 7.4 Troubleshooting Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46 7.4.1 Solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47 7.4.2 Previous Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48 8 Migrating to Novell eDirectory 49 8.1 Migrating the Sun ONE Schema to Novell eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49 8.1.1 Step 1: Perform the Schema Cache Update Operation. . . . . . . . . . . . . . . . . . . . . . . 49 8.1.2 Step 2: Rectify the Error LDIF File to Eliminate the Errors . . . . . . . . . . . . . . . . . . . . 50 8.1.3 Step 3: Import the LDIF File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52 8.2 Migrating the Active Directory Schema to Novell eDirectory Using ICE. . . . . . . . . . . . . . . . . . 52 8.2.1 Step 1: Perform the Schema Cache Update Operation. . . . . . . . . . . . . . . . . . . . . . . 52 8.2.2 Step 2: Rectify the Error LDIF File to Eliminate the Errors . . . . . . . . . . . . . . . . . . . . 53 8.2.3 Step 3: Import the LDIF File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 8.3 Migrating from OpenLDAP to Novell eDirectory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 8.3.1 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 8.3.2 Migrating the OpenLDAP Schema to eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . 54 8.3.3 Migrating the Open LDAP Data to Novell eDirectory. . . . . . . . . . . . . . . . . . . . . . . . . 55 8.3.4 Making PAM Work with Novell eDirectory After Migration. . . . . . . . . . . . . . . . . . . . . 55 9 Schema 57 9.1 Troubleshooting Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57 10 Replication 59 10.1 Recovering from eDirectory Replica Problems . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59 11 Novell Public Key Infrastructure Services 61 11.1 PKI Operations Not Working . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 11.2 LDAP Search from Netscape Address Book Fails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 11.3 Removing the configuration of an eDirectory server that is acting as a treekey server in a multiserver tree after having moved the existing eDirectory objects to a different server fails with the error code for Crucial Replica. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61 6 Novell eDirectory 8.8 Troubleshooting Guide
11.4 While Uninstalling the eDirectory Server holding the CA, the KMOs created on that server will be moved to another server in the tree and become invalid . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 62 12 Troubleshooting Utilities on Linux and UNIX 63 12.1 Novell Import Convert Export Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 12.2 ndsmerge Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 12.3 ndstrace Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 12.4 ndsbackup Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63 12.5 Using Ndsrepair . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 12.5.1 Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64 12.5.2 Troubleshooting ndsrepair . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 12.6 Using ndstrace . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 12.6.1 Basic Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71 12.6.2 Debugging Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72 12.6.3 Background Processes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74 novdocx (en) 11 July 2008 13 NMAS on Linux and UNIX 79 13.1 Unable to Log In Using Any Method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 79 13.2 The User Added Using the ICE Utility Is Unable to Log In Using Simple Password . . . . . . . . 79 14 Troubleshooting on Windows 81 14.1 The eDirectory for Windows Server Won’t Start. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81 14.2 The Windows Server Can’t Open the eDirectory Database Files . . . . . . . . . . . . . . . . . . . . . . 81 14.3 Restoring eDirectory on Windows after an Emergency Repair . . . . . . . . . . . . . . . . . . . . . . . . 82 15 Accessing HTTPSTK When DS Is Not Loaded 83 15.1 Setting the SAdmin Password on NetWare . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 15.2 Setting the SAdmin Password on Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83 15.3 Setting the SAdmin Password on Linux, Solaris, and AIX . . . . . . . . . . . . . . . . . . . . . . . . . . . . 84 16 Encrypting Data in eDirectory 85 16.1 Error Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 16.1.1 -6090 0xFFFFE836 ERR_ER_DISABLED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85 16.1.2 -6089 0xFFFFE837 ERR_REQUIRE_SECURE_ACCESS. . . . . . . . . . . . . . . . . . . . 85 16.1.3 -666 FFFFFD66 INCOMPATIBLE NDS VERSION . . . . . . . . . . . . . . . . . . . . . . . . . . 86 16.2 Problem With Duplicate Encryption Algorithms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 16.3 Encryption of Stream Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87 17 The eDirectory Management Toolbox 89 17.1 Unable to Stop the eMTool Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 17.2 Restore gives -6020 error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89 18 SASL-GSSAPI 91 18.1 Log File Locations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91 18.2 Error Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91 Contents 7
Page 1 and 2: Troubleshooting Guide AUTHORIZED DO
Page 3 and 4: Novell Trademarks Client32 is a tra
Page 5: Contents About This Book 9 novdocx
Page 9 and 10: About This Book This Troubleshootin
Page 11 and 12: 1Resolving Error Codes For a comple
Page 13 and 14: 2Installation and Configuration •
Page 15 and 16: n4u.uam.ncp-retries = 5 n4u.base.sl
Page 17 and 18: 3Determining the eDirectory Version
Page 19 and 20: • Run iMonitor. On the Agent Summ
Page 21 and 22: 4Log Files This section contains in
Page 23 and 24: 5Troubleshooting LDIF Files The Nov
Page 25 and 26: Component Record Delimiters Descrip
Page 27 and 28: The Modify Change Type The modify c
Page 29 and 30: Field newsuperior (optional) Descri
Page 31 and 32: 5.2 Debugging LDIF Files • “Ena
Page 33 and 34: Option Base DN Scope Description Ba
Page 35 and 36: Using the Novell Import Conversion
Page 37 and 38: 5.3.2 Adding a New Attribute To add
Page 39 and 40: objectclasses: (2.16.840.1.113719.1
Page 41 and 42: 6Troubleshooting SNMP This section
Page 43 and 44: 7Obituaries There has been a great
Page 45 and 46: If the obituary is a Primary obitua
Page 47 and 48: Make sure that the obituaries are c
Page 49 and 50: 8Migrating to Novell eDirectory Thi
Page 51 and 52: dn: cn=schemachangetype: modifyadd:
Page 53 and 54: 8.2.2 Step 2: Rectify the Error LDI
Page 55 and 56: Any errors encountered while compar
Page 57 and 58:
9Schema This section includes infor
Page 59 and 60:
10Replication • Section 10.1, “
Page 61 and 62:
1Novell Public Key Infrastructure S
Page 63 and 64:
12Troubleshooting Utilities on Linu
Page 65 and 66:
Option Description -P Replica and P
Page 67 and 68:
Option Optional Schema Enhancements
Page 69 and 70:
Determines the complete synchroniza
Page 71 and 72:
12.5.2 Troubleshooting ndsrepair Er
Page 73 and 74:
Trace Flag DNS DRLK DVRS Descriptio
Page 75 and 76:
Trace Flag Parameters Description *
Page 77 and 78:
Trace Flag Parameters Description !
Page 79 and 80:
13NMAS on Linux and UNIX • Sectio
Page 81 and 82:
14Troubleshooting on Windows • Se
Page 83 and 84:
15Accessing HTTPSTK When DS Is Not
Page 85 and 86:
16Encrypting Data in eDirectory In
Page 87 and 88:
Action 1. Upgrade the server to a c
Page 89 and 90:
17The eDirectory Management Toolbox
Page 91 and 92:
18SASL-GSSAPI This section discusse
Page 93 and 94:
19Miscellaneous • Section 19.1,
Page 95 and 96:
To make the setting permanent (even
show all

Novell eDirectory 8.8 Troubleshooting Guide - NetIQ

Create successful ePaper yourself

Delete template?

Save as template?