Troubleshooting guide

ManualsBrandsRed Hat ManualsConsumer electronicsDIRECTORY SERVER 7.1 SP7 - S

Table Of Contents

Novell eDirectory 8.8 SP7 Troubleshooting Guide
About This Book
1 Resolving Error Codes
2 Installation and Configuration
- 2.1 Installation
- 2.2 Configuration
- 2.3 Upgrade
- 2.4 Multiple Instances
3 Determining the eDirectory Version Number
- 3.1 Windows
- 3.2 Linux
- 3.3 Solaris
- 3.4 AIX
4 Log Files
- 4.1 modschema.log
- 4.2 dsinstall.log
- 4.3 ndsd.log
5 Troubleshooting LDIF Files
- 5.1 Understanding LDIF
- 5.2 Debugging LDIF Files
- 5.3 Using LDIF to Extend the Schema
6 Troubleshooting SNMP
- 6.1 Traps Might Not Get Generated As Expected
- 6.2 SNMP Group Object
- 6.3 SNMP Initializing Errors
- 6.4 SNMP Subagent Does Not Start
- 6.5 LDAP SNMP Statistics Not Reported
- 6.6 SNMP Issues
- 6.7 SNMP Walk Hangs on Solaris Platform
7 iMonitor
- 7.1 Browsing for Objects Containing Double-Byte Characters in iMonitor
- 7.2 Agent Health Check on a Single-Server Tree
- 7.3 iMonitor Report Does Not Save the Records for Each Hour
- 7.4 Creation and Modification Time Stamps
- 7.5 iMonitor Issues in Older Versions of Mozilla
- 7.6 Run Report Screen Layout Not Aligned on iMonitor
- 7.7 iMonitor Displays Error -672
- 7.8 Time Stamps Displayed in Hexadecimal Format
8 iManager
- 8.1 LDAP Operations Fail After Creating a New LDAP Group Using Quick Create
- 8.2 Issues While Backing Up on Red Hat EUC in the Japanese Locale
9 Obituaries
- 9.1 Examples
  - 9.1.1 Deleting an Object
  - 9.1.2 Moving an Object
- 9.2 Impact of Stuck and Orphaned Obituaries
- 9.3 Prevention
- 9.4 Troubleshooting Tips
  - 9.4.1 Solutions
  - 9.4.2 Previous Practices
10 Migrating to Novell eDirectory
- 10.1 Migrating the Sun ONE Schema to Novell eDirectory
- 10.2 Migrating the Active Directory Schema to Novell eDirectory Using ICE
- 10.3 Migrating from OpenLDAP to Novell eDirectory
11 Schema
12 DSRepair
- 12.1 Running DSRepair on an NFS Mounted DIB on Linux
- 12.2 Running DSRepair with -R Option Hangs
- 12.3 Running DSRepair after Upgrade or Migration
13 Replication
14 Clone DIB Issues
- 14.1 Clone DIB Fails With -601 and -603 Errors
- 14.2 Clone DIB Can Fail Immediately After Offline Bulkload
- 14.3 Issue in Cloning with Enabled Encrypted Replication Feature
15 Novell Public Key Infrastructure Services
- 15.1 PKI Operations Not Working
- 15.2 LDAP Search from Netscape Address Book Fails
- 15.3 Removing the configuration of an eDirectory server that is acting as a treekey server in a multiserver tree after having moved the existing eDirectory objects to a different server fails with the error code for Crucial Replica.
- 15.4 While uninstalling the eDirectory Server holding the CA, the KMOs created on that server will be moved to another server in the tree and become invalid
16 Troubleshooting Utilities on Linux and UNIX
- 16.1 Novell Import Convert Export Utility
- 16.2 ndsconfig Utility
- 16.3 ndsmerge Utility
- 16.4 DSTrace Utility
- 16.5 ndsbackup Utility
- 16.6 Using DSRepair
  - 16.6.1 Syntax
  - 16.6.2 Troubleshooting DSRepair
- 16.7 Using DSTrace
17 NMAS on Linux and UNIX
- 17.1 Unable to Log In Using Any Method
- 17.2 The User Added Using the ICE Utility Is Unable to Log In Using Simple Password
18 Troubleshooting on Windows
- 18.1 The eDirectory for Windows Server Won’t Start
- 18.2 The Windows Server Can’t Open the eDirectory Database Files
- 18.3 SLP_NETWORK_ERROR(-23) Occurs in Windows Machines
19 Accessing HTTPSTK When DS Is Not Loaded
- 19.1 Setting the sadmin Password on Windows
- 19.2 Setting the sadmin Password on Linux, Solaris, and AIX
20 Encrypting Data in eDirectory
- 20.1 Error Messages
- 20.2 Problem With Duplicate Encryption Algorithms
- 20.3 Encryption of Stream Attributes
- 20.4 Configuring Encrypted Replication through iManager
- 20.5 Viewing or Modifying Encrypted Attributes through iManager
- 20.6 Merging Trees With Encrypted Replication Enabled Fails
- 20.7 Limber Displays -603 Error
21 The eDirectory Management Toolbox
- 21.1 Unable to Stop the eMTool Services
- 21.2 Restore gives -6020 error
22 SASL-GSSAPI
- 22.1 SASL-GSSAPI Issues
  - 22.1.1 Issue with Multiple User Objects
  - 22.1.2 Authorization ID
- 22.2 Log File
- 22.3 Error Messages
23 Miscellaneous
- 23.1 Backing Up a Container
- 23.2 Repeated eDirectory Logins
- 23.3 Enabling Event System Statistics
- 23.4 Tracking Memory Corruption Issues on Linux
- 23.5 TCP Connection not Terminating after Abnormal Logout
- 23.6 NDS Error, System Failure (-632) Occurs When Doing ldapsearch for the User Objects
- 23.7 Disabling SecretStore
  - 23.7.1 On Linux and UNIX
  - 23.7.2 On Windows
- 23.8 Viewing SLP Man Pages
- 23.9 dsbk Configuration File Location
- 23.10 SLP Interoperability Issues on OES Linux
- 23.11 ldif2dib Fails to Open the Error Log File When the DIB Directory Exists In the Custom Path
- 23.12 eDirectory Server Does Not Start Automatically in the Virtual SLES 10
- 23.13 ndsd Does Not Start After a System Crash
- 23.14 Do not Execute DSTrace With All Tags Enabled on UNIX Systems
- 23.15 LDAP is Not RFC Compliant For Anonymous Search Requests
- 23.16 Troubleshooting Ports with Custom eDirectory 8.8 Instances
- 23.17 Rebooting the Host
- 23.18 ndsd Not Listening at the Loopback Address on a Given NCP Port
- 23.19 LDAP Transaction OIDs
- 23.20 Errors -5871 and -5875 in LDAP Trace
- 23.21 NDSCons Gives -625 Error if a Tree is Renamed
- 23.22 Listening on Multiple NICs Slows Down eDirectory ldapsearch Performance
- 23.23 Unable to Limit the Number of Concurrent Users on UNIX/ Linux Platforms
- 23.24 ndsd Fails to Shut Down Due to SLP
- 23.25 eDirectory Does Not Support Symbolic Links for DIB Location

78 Novell eDirectory 8.8 SP7 Troubleshooting Guide

16.2.2 ndsconfig Does Not Verify an Invalid Configuration File Path

To create the necessary configuration file, ndsconfig requires the full path and the configuration

filename. When the same path name is passed for both the configuration file and the instance

directory, ndsconfig cannot create the configuration file and aborts the operation.

16.2.3 ndsconfig get Outputs Junk Characters for Non-English Characters

The

ndsconfig get

command outputs junk characters (on Linux and AIX) or nothing (on Solaris) for

some parameters that contain non-English characters.

To work around this, enter the specify parameter name you want to get, as follows:

ndsconfig get <parameter_to_be_displayed>

For a list of parameters, refer to the

nds.conf

man page.

16.3 ndsmerge Utility

The PKI servers are not active after a merge operation. They must be restarted using the

npki -l

command.

Merge operations might not be successful on different versions of the product. If your server is

running an older version of NDS or eDirectory, update to the latest version of eDirectory, then

continue the merge operations.

The merging of two trees will not succeed if containers with similar names subordinate to a tree are

present in both the source and target trees. Rename one of the containers, then continue with the

merge operation.

During the graft operation, error message -

611 Illegal Containment

might appear. Modify the

schema by running

ndsrepair

. Then run

ndsrepair -S

and select Optional Schema Enhancements.

16.4 DSTrace Utility

When you turn on the DSTrace screen, an error message might display indicating that a primary

object is invalid for the reference link. You can ignore this message if eDirectory is functioning

correctly.

16.5 ndsbackup Utility

While backing up eDirectory,

NDS Error: Connect to NDS server failed

might display. This

might be caused by eDirectory listening on a port other than the default port 524. At the command

line, enter the port number that eDirectory was configured on. For example, if eDirectory is

configured on port number 1524, enter the following:

ndsbackup sR 164.99.148.82:1524

In eDirectory 8.8 and later, while you back up the data, NDS Error: Requires a Password might be

displayed. This is because the server might have attributes marked for encryption and you might not

have used the option -E to encrypt or decrypt the backup data.