Red Hat DIRECTORY SERVER 7.1 SP7 - S Guide de dépannage Page 1

www.novell.com/documentationTroubleshooting GuideeDirectoryTM 8.8 SP7April 2013

10 Novell eDirectory 8.8 SP7 Troubleshooting GuideDocumentation UpdatesFor the most recent version of the Novell eDirectory 8.8 SP7 Troubleshooting Gu

100 Novell eDirectory 8.8 SP7 Troubleshooting Guide

19Accessing HTTPSTK When DS Is Not Loaded 10119Accessing HTTPSTK When DS Is Not LoadedYou can set up a preconfigured admin user that allows access to

102 Novell eDirectory 8.8 SP7 Troubleshooting GuideDHost remote management pageUse the DHost remote manager page (accessible through the /dhost URL or

20Encrypting Data in eDirectory 10320Encrypting Data in eDirectoryIn Novell eDirectory 8.8 and later, you can encrypt specific sensitive data while th

104 Novell eDirectory 8.8 SP7 Troubleshooting GuidePossible CauseThe encrypted attributes are configured to be accessed only over a secure channel. Th

Encrypting Data in eDirectory 105Possible CauseIf the parent partition has pre-eDirectory 8.8 servers (mixed version ring) and if the child partition

106 Novell eDirectory 8.8 SP7 Troubleshooting Guide20.5 Viewing or Modifying Encrypted Attributes through iManagerIf an attribute of an object is encr

21The eDirectory Management Toolbox 10721The eDirectory Management ToolboxThe Novell eDirectory Management Toolbox (eMBox) lets you access all of the

108 Novell eDirectory 8.8 SP7 Troubleshooting Guide

22SASL-GSSAPI 10922SASL-GSSAPIThis section discusses the error messages logged by the SASL-GSSAPI authentication mechanism.  Section 22.1, “SASL-GSSA

1Resolving Error Codes 111Resolving Error CodesFor a complete list and explanation of eDirectory error codes, see the Novell Error Codes Web page (htt

110 Novell eDirectory 8.8 SP7 Troubleshooting GuideSASL-GSSAPI: Reading Object Realm_FDN FAILED eDirectory error codeCause: This error is generated i

SASL-GSSAPI 111ldap_simple_bind_s: Invalid credentials major = 1, minor =0Cause: The cause might be the version mismatch between the LDAP service pri

112 Novell eDirectory 8.8 SP7 Troubleshooting Guide

23Miscellaneous 11323Miscellaneous Section 23.1, “Backing Up a Container,” on page 113 Section 23.2, “Repeated eDirectory Logins,” on page 114 Sect

114 Novell eDirectory 8.8 SP7 Troubleshooting Guide23.2 Repeated eDirectory LoginsRepeated eDirectory logins can use up the available memory. Disable

Miscellaneous 115tcp_keepalive_probes: Determines the frequency of sending TCP keepalive probes before deciding a broken connection. The tcp_keepaliv

116 Novell eDirectory 8.8 SP7 Troubleshooting Guide23.7 Disabling SecretStoreAn eDirectory administrator can disable SecretStore using the following p

Miscellaneous 11723.11 ldif2dib Fails to Open the Error Log File When the DIB Directory Exists In the Custom Pathldif2dib fails to open the default lo

118 Novell eDirectory 8.8 SP7 Troubleshooting Guide23.16 Troubleshooting Ports with Custom eDirectory 8.8 InstancesIn eDirectory 8.8, if you configure

Miscellaneous 11923.22 Listening on Multiple NICs Slows Down eDirectory ldapsearch PerformanceTo work around this issue, Disable the NICs in the confi

12 Novell eDirectory 8.8 SP7 Troubleshooting Guide

120 Novell eDirectory 8.8 SP7 Troubleshooting Guide

2Installation and Configuration 132Installation and Configuration Section 2.1, “Installation,” on page 13 Section 2.2, “Configuration,” on page 15

14 Novell eDirectory 8.8 SP7 Troubleshooting Guide If the -632: Error description System failure error message appears during installation, exit from

Installation and Configuration 152.1.7 NICI Does Not Get Installed in the Server Mode on WindowsIn the Properties dialog box of the NICIFK file there

16 Novell eDirectory 8.8 SP7 Troubleshooting GuideTo workaround: select only one interface that eDirectory can communicates on; do not select the loop

Installation and Configuration 172.3 Upgrade Section 2.3.1, “The Integrated Installer Fails to Upgrade on Windows 2003,” on page 17 Section 2.3.2, “

18 Novell eDirectory 8.8 SP7 Troubleshooting Guide/etc/init.d/ndsd stop2 Remove NICI.pkgrm NOVLniu03 Install NICI shipped with eDirectory 8.8 SP7.pkga

Installation and Configuration 19 Perform the following:1. Create /var/opt/novell/eDirectory/data_upg_bak directory.2. Move the files from /var/opt/n

Legal NoticesNovell, Inc., makes no representations or warranties with respect to the contents or use of this documentation, and specifically disclaim

20 Novell eDirectory 8.8 SP7 Troubleshooting Guide2.4.2 eDirectory Does Not Listen on All the Configured InterfacesEnsure that all the interfaces on w

3Determining the eDirectory Version Number 213Determining the eDirectory Version NumberThe following sections list ways you can determine the version

22 Novell eDirectory 8.8 SP7 Troubleshooting GuideThe ndsstat utility displays information related to eDirectory servers, such as the eDirectory tree

Determining the eDirectory Version Number 23On the Agent Summary page, click Known Servers. Then under Servers Known to Database, click Known Servers.

24 Novell eDirectory 8.8 SP7 Troubleshooting Guide

4Log Files 254Log FilesThis section contains information on the following log files: Section 4.1, “modschema.log,” on page 25 Section 4.2, “dsinstal

26 Novell eDirectory 8.8 SP7 Troubleshooting Guide

5Troubleshooting LDIF Files 275Troubleshooting LDIF FilesThe Novell Import Conversion Export utility lets you easily import LDIF files into and export

28 Novell eDirectory 8.8 SP7 Troubleshooting Guide5.1.2 LDIF Content RecordsAn LDIF content record represents the contents of an entire entry. The fol

Troubleshooting LDIF Files 295.1.3 LDIF Change RecordsLDIF change records contain modifications to be made to a directory. Any of the LDAP update oper

Contents 3ContentsAbout This Book 91 Resolving Error Codes 112 Installation and Configuration 132.1 Installation . . . . . . . . . . . . . . . . . . .

30 Novell eDirectory 8.8 SP7 Troubleshooting Guide 1 version: 1 2 dn: c=US 3 changetype: add 4 objectClass: top 5 objectClass: country 6 7 dn: l=San

Troubleshooting LDIF Files 31The following is an example of a modify change type that will add an additional telephone number to the cn=Peter Michaels

32 Novell eDirectory 8.8 SP7 Troubleshooting Guide19 description: guitar player20 description: solo performer21 -22 # Delete a specific value from the

Troubleshooting LDIF Files 33 1 version: 1 2 3 # Rename ou=Artists to ou=West Coast Artists, and leave 4 # its old RDN value. 5 dn: ou=Artists,l=San

34 Novell eDirectory 8.8 SP7 Troubleshooting Guide 1 version: 1 2 dn: cn=Peter Michaels, ou=Artists, l=San Francisco, c=US 3 sn: Michaels 4 givenname:

Troubleshooting LDIF Files 355.2.1 Enabling Forward ReferencesYou might occasionally encounter LDIF files in which a record to add one entry comes bef

36 Novell eDirectory 8.8 SP7 Troubleshooting Guide8 Under Advanced Settings, click Allow Forward References.9 Click Next, then click Finish.To enable

Troubleshooting LDIF Files 379 Click Next.10 Specify the LDAP server where the data will be migrated.11 Click Next, then click Finish.NOTE: Ensure tha

38 Novell eDirectory 8.8 SP7 Troubleshooting Guide9 Click Next, then click Finish.Using the Novell Import Conversion Export Utility Command Line Inter

Troubleshooting LDIF Files 39Using the Novell Import Conversion Export Utility Command Line InterfaceTo configure error log options in the command lin

4 Novell eDirectory 8.8 SP7 Troubleshooting Guide5 Troubleshooting LDIF Files 275.1 Understanding LDIF. . . . . . . . . . . . . . . . . . . . . . . .

40 Novell eDirectory 8.8 SP7 Troubleshooting GuideNDSObjectClassDescription = "(" whsp numericoid whsp [ "NAME" qdescrs ] [

Troubleshooting LDIF Files 41NDSAttributeTypeDescription = "(" whsp numericoid whsp ; AttributeType identifier [ "NAME" qdescrs

42 Novell eDirectory 8.8 SP7 Troubleshooting GuideAdding an Optional Attribute to an Existing Object ClassAlthough adding new schema elements is an ac

Troubleshooting LDIF Files 43# now create a person named john that will later be changed# into a bear when bearFeatures is added to its objectClass# l

44 Novell eDirectory 8.8 SP7 Troubleshooting Guide

6Troubleshooting SNMP 456Troubleshooting SNMPThis section includes information for troubleshooting SNMP on all platforms. Section 6.1, “Traps Might N

46 Novell eDirectory 8.8 SP7 Troubleshooting Guide6.2 SNMP Group ObjectIf the installation of the SNMP Group object fails, you can rectify this proble

Troubleshooting SNMP 476.6.1 Issues After Upgrading from eDirectory 8.7.3 to eDirectory 8.8After upgrading from eDirectory 8.7.3 to eDirectory 8.8, yo

48 Novell eDirectory 8.8 SP7 Troubleshooting GuideError: eDirectory SNMP Initialization component. Error code: -168Error: eDirectory SNMP Initializati

7iMonitor 497iMonitor Section 7.1, “Browsing for Objects Containing Double-Byte Characters in iMonitor,” on page 49 Section 7.2, “Agent Health Check

Contents 59.4 Troubleshooting Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

50 Novell eDirectory 8.8 SP7 Troubleshooting Guide7.3 iMonitor Report Does Not Save the Records for Each HourThe custom reports feature in iMonitor is

8iManager 518iManager Section 8.1, “LDAP Operations Fail After Creating a New LDAP Group Using Quick Create,” on page 51 Section 8.2, “Issues While

52 Novell eDirectory 8.8 SP7 Troubleshooting Guide

9Obituaries 539ObituariesThere has been a great deal of confusion surrounding obituaries stored in the directory and, as a result, some people have de

54 Novell eDirectory 8.8 SP7 Troubleshooting Guideremoved after the Primary obituary is ready to be removed or, in the case of Inhibit_move, the Track

Obituaries 55If the obituary is a Back Link obituary and this server is the master, then this server is responsible for processing this obituary.IMPOR

56 Novell eDirectory 8.8 SP7 Troubleshooting Guide This server can communicate with all other servers. There have not been any servers improperly or

Obituaries 57 Examine the Agent Process Status: Obituaries to look for any errors. Common problems in Agent Process Status: Obituaries include-625,

58 Novell eDirectory 8.8 SP7 Troubleshooting Guide9.4.2 Previous PracticesIn the past, several different strategies have been employed to resolve stuc

10Migrating to Novell eDirectory 5910Migrating to Novell eDirectoryThis chapter explains the process to migrate to Novell eDirectory from: Section 10

6 Novell eDirectory 8.8 SP7 Troubleshooting Guide16.5 ndsbackup Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

60 Novell eDirectory 8.8 SP7 Troubleshooting GuideThus, records that contain any reference to these objects or that try to modify these definitions ne

Migrating to Novell eDirectory 61-add:objectclassesobjectclasses : (2.5.6.0 NAME ’top’ STRUCTURAL MAY cn)Use the following Novell Import Conversion Ex

62 Novell eDirectory 8.8 SP7 Troubleshooting Guide10.2 Migrating the Active Directory Schema to Novell eDirectory Using ICEWhile migrating schema from

Migrating to Novell eDirectory 63delete: objectclassesobjectclasses: ( 2.16.840.1.113719.1.1.6.1.4 NAME ’computer’ )-add: objectclassesobjectclasses:

64 Novell eDirectory 8.8 SP7 Troubleshooting GuideStep 1: Perform the Schema Cache Update OperationYou can write the errors encountered while comparin

Migrating to Novell eDirectory 65Changes in /etc/ldap.conf File# The distinguished name to bind to the server with.# Optional: default is to bind anon

66 Novell eDirectory 8.8 SP7 Troubleshooting Guide

11Schema 6711SchemaThis section includes information for troubleshooting schema.Troubleshooting SchemaWhen an auxiliary class is disassociated with an

68 Novell eDirectory 8.8 SP7 Troubleshooting Guide

12DSRepair 6912DSRepair Section 12.1, “Running DSRepair on an NFS Mounted DIB on Linux,” on page 69 Section 12.2, “Running DSRepair with -R Option H

Contents 723.3 Enabling Event System Statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .11

70 Novell eDirectory 8.8 SP7 Troubleshooting Guide

13Replication 7113ReplicationeDirectory offers the Novell robust directory service and the fault tolerance inherent in replication. Replication allows

72 Novell eDirectory 8.8 SP7 Troubleshooting Guide

14Clone DIB Issues 7314Clone DIB Issues Section 14.1, “Clone DIB Fails With -601 and -603 Errors,” on page 73 Section 14.2, “Clone DIB Can Fail Imme

74 Novell eDirectory 8.8 SP7 Troubleshooting Guide

15Novell Public Key Infrastructure Services 7515Novell Public Key Infrastructure Services  Section 15.1, “PKI Operations Not Working,” on page 75 Se

76 Novell eDirectory 8.8 SP7 Troubleshooting Guide3 Specify the name and context of the W0 object (usually W0.KAP.Security), then click OK.4 In the Va

16Troubleshooting Utilities on Linux and UNIX 7716Troubleshooting Utilities on Linux and UNIX Section 16.1, “Novell Import Convert Export Utility,” o

78 Novell eDirectory 8.8 SP7 Troubleshooting Guide16.2.2 ndsconfig Does Not Verify an Invalid Configuration File Path To create the necessary configur

Troubleshooting Utilities on Linux and UNIX 7916.6 Using DSRepairThis section consists of the following: “Syntax” on page 79 Section 16.6.2, “Troubl

8 Novell eDirectory 8.8 SP7 Troubleshooting Guide

80 Novell eDirectory 8.8 SP7 Troubleshooting Guide-S Global Schema Operations option. This option contains several schema operations that might be nec

Troubleshooting Utilities on Linux and UNIX 81Function Modifiers Used with the -R OptionGlobal Schema OperationsYou can use the ndsrepair -S ([-Ad] ad

82 Novell eDirectory 8.8 SP7 Troubleshooting GuideReplica and Partition Operations OptionEnter the following command to display information about each

Troubleshooting Utilities on Linux and UNIX 83 Synchronize the Replica on All ServersDetermines the complete synchronization status on every server t

84 Novell eDirectory 8.8 SP7 Troubleshooting Guide View Entire Server's NameUsed to view the complete server name when the width of the server n

Troubleshooting Utilities on Linux and UNIX 85 View Entire Server’s NameDisplays the complete name of the server when the width of the server name is

86 Novell eDirectory 8.8 SP7 Troubleshooting Guide16.7.1 Basic FunctionsThe basic functions of DSTrace are to: View internal eDirectory activity and

Troubleshooting Utilities on Linux and UNIX 87You can also combine the debugging message flags by using the Boolean operators & (which means AND)

88 Novell eDirectory 8.8 SP7 Troubleshooting GuideINSP Messages related to the integrity of objects in the source server’s local database. Using this

Troubleshooting Utilities on Linux and UNIX 89As you use the debugging messages in DSTrace, you will find that some of the trace flags are more useful

About This Book 9About This BookThis Troubleshooting Guide describes how to resolve Novell eDirectory 8.8 issues and contains the following sections:

90 Novell eDirectory 8.8 SP7 Troubleshooting Guide*CTD None Displays, in comma-delimited format, the source server’s outbound connection table and the

Troubleshooting Utilities on Linux and UNIX 91*FL 1-10 Sets the number of rolling log files used by DSTrace. If you set this parameter to any value gr

92 Novell eDirectory 8.8 SP7 Troubleshooting Guide*M Bytes Changes the maximum file size used by the source server’s ndstrace.log file. The command ca

Troubleshooting Utilities on Linux and UNIX 93*STS None Displays the status information for the schema synchronization process on the source server.*S

94 Novell eDirectory 8.8 SP7 Troubleshooting Guide

17NMAS on Linux and UNIX 9517NMAS on Linux and UNIX Section 17.1, “Unable to Log In Using Any Method,” on page 95 Section 17.2, “The User Added Usin

96 Novell eDirectory 8.8 SP7 Troubleshooting Guide

18Troubleshooting on Windows 9718Troubleshooting on Windows Section 18.1, “The eDirectory for Windows Server Won’t Start,” on page 97 Section 18.2,

98 Novell eDirectory 8.8 SP7 Troubleshooting GuideIf there are other replicas, logging in might be slow and you will see communication errors and sync

Troubleshooting on Windows 99net.slp.isDA = true 3 Save the changes, then close the file.