Novell eDirectory 8.8 Troubleshooting Guide - NetIQ

10Novell Public Key Infrastructure
Services
10
novdocx (en) 6 April 2007
• Section 10.1, “PKI Operations Not Working,” on page 63
• Section 10.2, “LDAP Search from Netscape Address Book Fails,” on page 63
• Section 10.3, “Removing the configuration of an eDirectory server that is acting as a treekey
server in a multiserver tree after having moved the existing eDirectory objects to a different
server fails with the error code for Crucial Replica.,” on page 63
• Section 10.4, “While Uninstalling the eDirectory Server holding the CA, the KMOs created on
that server will be moved to another server in the tree and become invalid,” on page 64
10.1 PKI Operations Not Working
If PKI operations in ConsoleOne or iManager are not working, it could be because Novell PKI
Services are not running on the Linux, Solaris, AIX, or HP-UX host. Start the PKI Services by
entering npki -1.
If you cannot create certificates, you need to ensure that the NICI module has been properly
installed. See “Initializing the NICI Module on the Server” in the Novell eDirectory 8.8
Administration Guide. To verify if NICI is initialized, see “Verifying Whether NICI Is Installed and
Initialized on the Server” in the Novell eDirectory 8.8 Administration Guide.
10.2 LDAP Search from Netscape Address Book
Fails
If you are using an export version of the Netscape browser and a KMO key size larger than 512 bits
associated with the LDAP Server object, the LDAP search from the Netscape Address Book might
fail.
Use a domestic version of the Netscape browser in such cases.
10.3 Removing the configuration of an
eDirectory server that is acting as a treekey
server in a multiserver tree after having moved
the existing eDirectory objects to a different
server fails with the error code for Crucial
Replica.
To complete the operation, change the Key Server DN attribute in the W0 object under Security
Container > KAP to another server in the tree that has downloaded the treekey from this server.
1 In Novell iManager, click the Roles and Tasks button .
2 Click eDirectory Administration > Modify Object.
Novell Public Key Infrastructure Services
63