Novell EDIRECTORY 8.8 SP2 User manual

Novell
www.novell.com
novdocx (en) 6 April 2007
Novell eDirectory 8.8 Troubleshooting Guide
eDirectoryTM
8.8 SP2
October 12, 2007
TROUBLESHOOTING GUIDE

novdocx (en) 6 April 2007
Legal Notices
Novell, Inc. makes no representations or warranties with respect to the contents or use of this documentation, and
specifically disclaims any express or implied warranties of merchantability or fitness for any particular purpose.
Further, Novell, Inc. reserves the right to revise this publication and to make changes to its content, at any time,
without obligation to notify any person or entity of such revisions or changes.
Further, Novell, Inc. makes no representations or warranties with respect to any software, and specifically disclaims
any express or implied warranties of merchantability or fitness for any particular purpose. Further, Novell, Inc.
reserves the right to make changes to any and all parts of Novell software, at any time, without any obligation to
notify any person or entity of such changes.
Any products or technical information provided under this Agreement may be subject to U.S. export controls and the
trade laws of other countries. You agree to comply with all export control regulations and to obtain any required
licenses or classification to export, re-export, or import deliverables. You agree not to export or re-export to entities
on the current U.S. export exclusion lists or to any embargoed or terrorist countries as specified in the U.S. export
laws. You agree to not use deliverables for prohibited nuclear, missile, or chemical biological weaponry end uses.
Please refer to www.novell.com/info/exports/ for more information on exporting Novell software. Novell assumes no
responsibility for your failure to obtain any necessary export approvals.
Copyright © 2005 Novell, Inc. All rights reserved. No part of this publication may be reproduced, photocopied,
stored on a retrieval system, or transmitted without the express written consent of the publisher.
Novell, Inc. has intellectual property rights relating to technology embodied in the product that is described in this
document. In particular, and without limitation, these intellectual property rights may include one or more of the U.S.
patents listed at http://www.novell.com/company/legal/patents/ and one or more additional patents or pending patent
applications in the U.S. and in other countries.
Novell, Inc.
404 Wyman Street, Suite 500
Waltham, MA 02451
U.S.A.
www.novell.com
Online Documentation: To access the online documentation for this and other Novell products, and to get
updates, see www.novell.com/documentation.

novdocx (en) 6 April 2007
Novell Trademarks
Client32 is a trademark of Novell, Inc.
eDirectory is a trademark of Novell, Inc.
NetWare is a registered trademark of Novell, Inc., in the United States and other countries.
NetWare Core Protocol and NCP are trademarks of Novell, Inc.
NMAS is a trademark of Novell, Inc.
Novell is a registered trademark of Novell, Inc., in the United States and other countries.
Novell Client is a trademark of Novell, Inc.
Novell Directory Services and NDS are registered trademarks of Novell, Inc., in the United States and other
countries.
Ximiam is a registerd trademark of Novell, Inc., in the United States and other countries.
ZENworks is a registered trademark of Novell, Inc., in the United States and other countries.
Third-Party Materials
All third-party trademarks are the property of their respective owners.
This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit (http://
www.openssl.org).

novdocx (en) 6 April 2007

Contents 5
Contents
novdocx (en) 6 April 2007
About This Book 9
1 Resolving Error Codes 11
2 Installation and Configuration 13
2.1 Installation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.1.1 Installation Not Successful . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 13
2.1.2 Installation Takes a Long Time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
2.1.3 eDirectory Install Fails for Container Administrators . . . . . . . . . . . . . . . . . . . . . . . . . 14
2.1.4 Unable to Install into an Existing Tree over the WAN . . . . . . . . . . . . . . . . . . . . . . . . 14
2.1.5 NICI Installation Failed - 1497 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
2.1.6 Naming Objects. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
2.1.7 NICI Does Not Get Installed in the Server Mode on Windows . . . . . . . . . . . . . . . . . 15
2.1.8 Tarball Upgrade Fails With "Cannot open or remove a file containing a running
program" Error Message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
2.2 Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
2.2.1 Tree Name Lookup Failed: -632 Error While Configuring eDirectory 8.8 on Linux . . 16
2.3 Multiple Instances . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
2.3.1 If the First Instance is Down, HTTP Does Not Work . . . . . . . . . . . . . . . . . . . . . . . . . 16
2.3.2 eDirectory Does Not Listen on All the Configured Interfaces . . . . . . . . . . . . . . . . . . 16
2.3.3 ndsd Falls Back to Default Port if the Interface Specified is Incorrect . . . . . . . . . . . . 16
3 Determining the eDirectory Version Number 17
3.1 NetWare. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
3.2 Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
3.3 Linux . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
3.4 Solaris . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
3.5 AIX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
3.6 HP-UX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
4 Log Files 23
4.1 modschema.log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
4.2 dsinstall.log . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23
5 Troubleshooting LDIF Files 25
5.1 Understanding LDIF. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
5.1.1 LDIF File Format . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
5.1.2 LDIF Content Records. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
5.1.3 LDIF Change Records. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
5.1.4 Line Folding within LDIF Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
5.1.5 Hashed Password Representation in LDIF Files. . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
5.2 Debugging LDIF Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
5.2.1 Enabling Forward References. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
5.2.2 Checking the Syntax of LDIF Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35
5.2.3 Using the LDIF Error File. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36
5.2.4 Using LDAP SDK Debugging Flags . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

6Novell eDirectory 8.8 Troubleshooting Guide
novdocx (en) 6 April 2007
5.3 Using LDIF to Extend the Schema . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
5.3.1 Adding a New Object Class . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37
5.3.2 Adding a New Attribute . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
5.3.3 Adding or Removing Auxiliary Classes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40
6 Troubleshooting SNMP 43
6.1 Traps Might Not Get Generated As Expected . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
6.2 SNMP Group Object. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
6.3 SNMP Initializing Errors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 43
6.4 SNMP Subagent Does Not Start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
6.5 SNMP on HP-UX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
6.5.1 Error while Contacting the SNMP Master Agent from the MIB Browser . . . . . . . . . . 44
6.5.2 Problems Configuring NET-SNMP-5.0.8 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
6.5.3 Problems Configuring the NAA Agent . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44
6.5.4 Unable to Get the SNMP Query Result from the MIB Browser . . . . . . . . . . . . . . . . . 44
6.5.5 Traps are Not Received at the SNMP Console or the MIB Browser . . . . . . . . . . . . . 45
6.6 SNMP Issues After Upgrading from eDirectory 8.7.3 to eDirectory 8.8 . . . . . . . . . . . . . . . . . . 45
7Obituaries 47
7.1 Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
7.1.1 Deleting an Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
7.1.2 Moving an Object . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
7.2 Impact of Stuck and Orphaned Obituaries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
7.3 Prevention . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
7.4 Troubleshooting Tips . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
7.4.1 Solutions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51
7.4.2 Previous Practices . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 52
8 Migrating to Novell eDirectory 53
8.1 Migrating the Sun ONE Schema to Novell eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 53
8.1.1 Step 1: Perform the Schema Cache Update Operation . . . . . . . . . . . . . . . . . . . . . . . 53
8.1.2 Step 2: Rectify the Error LDIF File to Eliminate the Errors. . . . . . . . . . . . . . . . . . . . . 53
8.1.3 Step 3: Import the LDIF File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 55
8.2 Migrating the Active Directory Schema to Novell eDirectory Using ICE . . . . . . . . . . . . . . . . . . 56
8.2.1 Step 1: Perform the Schema Cache Update Operation . . . . . . . . . . . . . . . . . . . . . . . 56
8.2.2 Step 2: Rectify the Error LDIF File to Eliminate the Errors. . . . . . . . . . . . . . . . . . . . . 56
8.2.3 Step 3: Import the LDIF File . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
8.3 Migrating from OpenLDAP to Novell eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
8.3.1 Prerequisites . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
8.3.2 Migrating the OpenLDAP Schema to eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . 58
8.3.3 Migrating the Open LDAP Data to Novell eDirectory . . . . . . . . . . . . . . . . . . . . . . . . . 59
8.3.4 Making PAM Work with Novell eDirectory After Migration . . . . . . . . . . . . . . . . . . . . . 59
9 Replication 61
9.1 Recovering from eDirectory Replica Problems. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
10 Novell Public Key Infrastructure Services 63
10.1 PKI Operations Not Working . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
10.2 LDAP Search from Netscape Address Book Fails . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
10.3 Removing the configuration of an eDirectory server that is acting as a treekey server in a

Contents 7
novdocx (en) 6 April 2007
multiserver tree after having moved the existing eDirectory objects to a different server fails with
the error code for Crucial Replica. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63
10.4 While Uninstalling the eDirectory Server holding the CA, the KMOs created on that server will be
moved to another server in the tree and become invalid. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 64
11 Troubleshooting Utilities on Linux and UNIX 65
11.1 Novell Import Convert Export Utility. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
11.2 ndsmerge Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
11.3 ndstrace Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
11.4 ndsbackup Utility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 65
11.5 Using Ndsrepair . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
11.5.1 Syntax . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 66
11.5.2 Troubleshooting ndsrepair. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72
11.6 Using ndstrace. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
11.6.1 Basic Functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
11.6.2 Debugging Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73
11.6.3 Background Processes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76
12 NMAS on Linux and UNIX 81
12.1 Unable to Log In Using Any Method . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81
12.2 The User Added Using the ICE Utility Is Unable to Log In Using Simple Password . . . . . . . . 81
13 Troubleshooting on Windows 83
13.1 The eDirectory for Windows Server Won’t Start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 83
13.2 The Windows Server Can’t Open the eDirectory Database Files . . . . . . . . . . . . . . . . . . . . . . 83
13.3 Restoring eDirectory on Windows after an Emergency Repair . . . . . . . . . . . . . . . . . . . . . . . . 84
14 Accessing HTTPSTK When DS Is Not Loaded 85
14.1 Setting the SAdmin Password on NetWare . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
14.2 Setting the SAdmin Password on Windows. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85
14.3 Setting the SAdmin Password on Linux, Solaris, AIX, and HP-UX . . . . . . . . . . . . . . . . . . . . . 86
15 Encrypting Data in eDirectory 87
15.1 Error Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
15.1.1 -6090 0xFFFFE836 ERR_ER_DISABLED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87
15.1.2 -6089 0xFFFFE837 ERR_REQUIRE_SECURE_ACCESS. . . . . . . . . . . . . . . . . . . . 87
15.1.3 -666 FFFFFD66 INCOMPATIBLE NDS VERSION . . . . . . . . . . . . . . . . . . . . . . . . . . 88
15.2 Problem With Duplicate Encryption Algorithms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
15.3 Encryption of Stream Attributes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 89
16 The eDirectory Management Toolbox 91
16.1 Unable to Stop the eMTool Services . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
16.2 Restore gives -6020 error . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 91
17 SASL-GSSAPI 93
17.1 Log File Locations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93
17.2 Error Messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 93

8Novell eDirectory 8.8 Troubleshooting Guide
novdocx (en) 6 April 2007
18 Miscellaneous 95
18.1 Backing Up a Container . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
18.2 Repeated eDirectory Logins . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
18.3 TCP Connection not Terminating after Abnormal Logout. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 95
18.4 NDS Error, System Failure (-632) Occurs When Doing ldapsearch for the User Objects . . . . 96
18.5 Disabling SecretStore. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
18.5.1 On Linix and UNIX . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
18.5.2 On NetWare . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97
18.5.3 On Windows. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

About This Book
novdocx (en) 6 April 2007
9
About This Book
This Troubleshooting Guide describes how to resolve Novell®eDirectoryTM 8.8 issues and contains
the following sections:
Chapter 1, “Resolving Error Codes,” on page 11
Chapter 2, “Installation and Configuration,” on page 13
Chapter 3, “Determining the eDirectory Version Number,” on page 17
Chapter 4, “Log Files,” on page 23
Chapter 5, “Troubleshooting LDIF Files,” on page 25
Chapter 6, “Troubleshooting SNMP,” on page 43
Chapter 7, “Obituaries,” on page 47
Chapter 8, “Migrating to Novell eDirectory,” on page 53
Chapter 9, “Replication,” on page 61
Chapter 10, “Novell Public Key Infrastructure Services,” on page 63
Chapter 11, “Troubleshooting Utilities on Linux and UNIX,” on page 65
Chapter 12, “NMAS on Linux and UNIX,” on page 81
Chapter 13, “Troubleshooting on Windows,” on page 83
Chapter 14, “Accessing HTTPSTK When DS Is Not Loaded,” on page 85
Chapter 15, “Encrypting Data in eDirectory,” on page 87
Chapter 16, “The eDirectory Management Toolbox,” on page 91
Chapter 17, “SASL-GSSAPI,” on page 93
Chapter 18, “Miscellaneous,” on page 95
Audience
The guide is intended for network administrators.
Feedback
We want to hear your comments and suggestions about this manual and the other documentation
included with this product. Please use the User Comments feature at the bottom of each page of the
online documentation, or go to www.novell.com/documentation/feedback.html and enter your
comments there.
Documentation Updates
For the most recent version of the Novell eDirectory 8.8 Installation Guide, see the Novell
eDirectory 8.8 Documentation (http://www.novell.com/documentation/edir88/index.html) Web site.
Additional Documentation
For documentation on managing and administering eDirectory, see the Novell eDirectory 8.8
Administration Guide (http://www.novell.com/documentation/edir88/index.html).

10 Novell eDirectory 8.8 Troubleshooting Guide
novdocx (en) 6 April 2007
Documentation Conventions
In this documentation, a greater-than symbol (>) is used to separate actions within a step and items
within a cross-reference path.
A trademark symbol (®, TM, etc.) denotes a Novell trademark. An asterisk (*) denotes a third-party
trademark.
When a single pathname can be written with a backslash for some platforms or a forward slash for
other platforms, the pathname is presented with a backslash. Users of platforms that require a
forward slash, such as Linux and UNIX*, should use forward slashes as required by your software.

Resolving Error Codes
1
novdocx (en) 6 April 2007
11
1
Resolving Error Codes
For a complete list and explanation of eDirectory error codes, see the Novell Error Codes Web page
(http://www.novell.com/documentation/lg/nwec/index.html).

12 Novell eDirectory 8.8 Troubleshooting Guide
novdocx (en) 6 April 2007

Installation and Configuration
2
novdocx (en) 6 April 2007
13
2
Installation and Configuration
Section 2.1, “Installation,” on page 13
Section 2.2, “Configuration,” on page 15
Section 2.3, “Multiple Instances,” on page 16
2.1 Installation
This section discusses various problems you may encounter during the eDirectory 8.8 installation
alongwith troubleshooting tips.
Section 2.1.1, “Installation Not Successful,” on page 13
Section 2.1.2, “Installation Takes a Long Time,” on page 14
Section 2.1.3, “eDirectory Install Fails for Container Administrators,” on page 14
Section 2.1.4, “Unable to Install into an Existing Tree over the WAN,” on page 14
Section 2.1.5, “NICI Installation Failed - 1497,” on page 15
Section 2.1.6, “Naming Objects,” on page 15
Section 2.1.7, “NICI Does Not Get Installed in the Server Mode on Windows,” on page 15
Section 2.1.8, “Tarball Upgrade Fails With "Cannot open or remove a file containing a running
program" Error Message,” on page 15
2.1.1 Installation Not Successful
Check for the following error message in the /var/adm/messages directory:
Unable to bind to SLP Multicast Address. Multicast route not added?
This message is displayed if the Linux or Solaris machine is not configured for a multicast
route address.
Add the multicast route address and restart the slpuasa daemon.
If the -632: Error description System failure error message appears during
installation, exit from the installation process.
Set the n4u.base.slp.max-wait parameter to a larger value, such as 50, in the /etc/opt/novell/
eDirectory/conf/nds.conf file, then restart the installation process.
During installation, if the Tree Name Not Found error message is displayed, do the
following:
1Check whether multicast routing is enabled on the Solaris host that you are installing the
product on.
2Specify the IP address of the master server of the Tree partition.

14 Novell eDirectory 8.8 Troubleshooting Guide
novdocx (en) 6 April 2007
2.1.2 Installation Takes a Long Time
When you are installing eDirectory into an existing tree and the installation takes a long time to
complete, look at the DSTrace screen on the server. If the -625 Transport failure message
is displayed, you need to reset the address cache.
To reset the address cache, enter the following command at the system console:
set dstrace = *A
2.1.3 eDirectory Install Fails for Container Administrators
The eDirectory 8.8 installation program supports installations by administrators who have
supervisor rights to the container that the server resides in. In order to handle this, the first server
that eDirectory 8.8 is installed into must have supervisor rights to [Root] to extend the schema. From
that point on, subsequent servers do not have to have rights to [Root]. However, with eDirectory 8.8,
depending on the platform that eDirectory 8.8 is installed in to first, all schema might not be
extended, requiring supervisor rights to [Root] for subsequent server installations on different
platforms.
If eDirectory 8.8 will be installed on multiple platforms, make sure that you have supervisor rights
to [Root] for the first server eDirectory will be installed on for EACH platform. For example, if the
first server that eDirectory 8.8 is going to be installed on is running NetWare, and eDirectory 8.8
will also be installed on Solaris, the first server for each platform must have supervisor rights to
[Root]. Subsequent servers on each platform will only have to have container administrator rights to
the container where the server is being installed.
For additional information, see solution NOVL81742 (http://support.novell.com/cgi-bin/search/
searchtid.cgi?/10073723.htm) in the Novell eDirectory 8.7.x Readme Addendum.
2.1.4 Unable to Install into an Existing Tree over the WAN
You need a NetWare 5 or later server to install eDirectory on a Linux or Solaris system over the
WAN.
1Enter the following command at the server console to run the Directory Agent (DA) on the
NetWare server:
slpda
2On the server containing the master replica, edit the DA_ADDR parameter in slpuasa.conf:
DA_ADDR = IP_address_of_the_NetWare_server_where_the_DA_is_
running
3Restart the slpuasa daemon.
4Install eDirectory over the WAN on the Linux or Solaris system.
4a Run nds-install to add the product packages.
Do not configure the product. See “Linux, Solaris, AIX, and HP-UX Packages for Novell
eDirectory ” in the Novell eDirectory 8.8 Installation Guide for more information.
4b Edit the /etc/opt/novell/eDirectory/conf/nds.conf and add the following parameters:
n4u.uam.ncp-retries = 5
n4u.base.slp.max-wait = 20
4c Edit the /etc/slpuasa.conf to add the following parameter:

Installation and Configuration 15
novdocx (en) 6 April 2007
DA_ADDR =
IP_address_of_the_NetWare_server_where_the_DA_is_running
4d Run ndsconfig to configure eDirectory.
2.1.5 NICI Installation Failed - 1497
NICI initialization failed means the NFK file is not right. Ensure that you have the right NFK file.
This problem might not come on Linux and UNIX platforms as by default the NFK file is part of the
NICI package.
2.1.6 Naming Objects
When you use special characters while naming objects, the -671 No Such Parent error
message appears. Avoid using any of the following special characters when naming objects:
\ /, * ? .
2.1.7 NICI Does Not Get Installed in the Server Mode on
Windows
In the Properties dialog box of the NICIFK file there is a tab called Security. If there are no names in
the Group or user names field, then this issue occurs.
To work around this problem, do the following:
1Remove the NICIFK file.
This is present in C:/Windows/system32/novell/nici if the system root is C:/Windows/
system32. If the system root is F:/Windows/system32 then this file is present in F:/Windows/
system32/novell/nici.
2Install eDirectory.
2.1.8 Tarball Upgrade Fails With "Cannot open or remove a file
containing a running program" Error Message
While doing Tarball Upgrade in AIX, in the file copying stage if you get "Cannot open or remove a
file containing a running program" error message, perform the following steps to resolve the issue:
1Run "/usr/sbin/slibclean " as a root user.
2Continue the upgrade from file copying stage.
2.2 Configuration
The section contains problems you may encounter during the eDirectory 8.8 configuration.

16 Novell eDirectory 8.8 Troubleshooting Guide
novdocx (en) 6 April 2007
2.2.1 Tree Name Lookup Failed: -632 Error While Configuring
eDirectory 8.8 on Linux
While configuring eDirectory 8.8 on Linux, you might get the Tree name lookup failed: -632 error.
To resolve this, do the following:
1After installing the SLP package, ensure that you manually start SLP as follows:
/etc/init.d/slpuasa start
2After uninstalling the SLP package, ensure that you manually stop SLP as follows:
/etc/init.d/slpuasa stop
2.3 Multiple Instances
While handling Multiple Instances of eDirectory, you may encounter the following problems:
Section 2.3.1, “If the First Instance is Down, HTTP Does Not Work,” on page 16
Section 2.3.2, “eDirectory Does Not Listen on All the Configured Interfaces,” on page 16
2.3.1 If the First Instance is Down, HTTP Does Not Work
On Linux and UNIX platforms, if eDirectory is configured on a box with multiple NIC cards and if
HTTP is bound to more than one interface; if the first interface goes down, HTTP would not be
accessible from the remaining interfaces.
This is because the remaining interfaces will redirect the request to the first one, but the first
interface is down.
To resolve this issue, if the first interface goes down, restart eDirectory.
2.3.2 eDirectory Does Not Listen on All the Configured
Interfaces
Ensure that all the interfaces on which eDirectory is configured are up and connected.
2.3.3 ndsd Falls Back to Default Port if the Interface Specified
is Incorrect
When using ndsconfig new or ndsmanage to create a second instance of the directory, if the interface
specified is incorrect, nds tries to use the default interface. If you specify non default port (for
example 1524), the interface specified is incorrect, it uses the default interface and the default port
of 524.
For n4u.server.interfaces, if the interface specified is incorrect, then ndsd will try to listen on the first
interface and the port number would be the one specified in n4u.server.tcp-port.

Determining the eDirectory Version Number
3
novdocx (en) 6 April 2007
17
3
Determining the eDirectory
Version Number
The following sections list ways you can determine the version of eDirectory installed on a server:
Section 3.1, “NetWare,” on page 17
Section 3.2, “Windows,” on page 18
Section 3.3, “Linux,” on page 18
Section 3.4, “Solaris,” on page 19
Section 3.5, “AIX,” on page 19
Section 3.6, “HP-UX,” on page 20
3.1 NetWare
Run ds.nlm, or any other .nlm.
At the server console, enter ds.nlm. This displays both the marketing string (for example,
Novell eDirectory 8.7) and the internal build number (for example, DS v10410.xx).
Run iMonitor.
On the Agent Summary page, click Known Servers. Then under Servers Known to Database,
click Known Servers. The Agent Revision column displays the internal build number for each
server. For example, an Agent Revision number for Novell eDirectory 8.7.1 might be
10510.64.
For information on running iMonitor, see “Accessing iMonitor” in the Novell eDirectory 8.8
Administration Guide.
Run nwconfig.
At the server console, enter nwconfig, then select Product Info. If the install registered
eDirectory (which it does with NDS®eDirectory 8.5 and later), this will display what was
registered during the install. This is typically a hybrid of marketing and build numbers. For
example, you might see marketing version eDir 8.5 and build version 85.01.
LDAP shows configuration through DSTrace.
This is true for most utilities (for example, DSRepair or DSMerge) as they load. This method
will display the internal build number.
For more information on DSTrace, see Looking Into the Directory Services Trace (DSTrace)
Options (http://developer.novell.com/research/sections/netmanage/dirprimer/2001/august/
spv.htm) and More on Using the DSTrace Command (http://developer.novell.com/research/
sections/netmanage/dirprimer/2001/septembe/p010901.htm).
Read the eDirectory download filename.
The eDirectory download filename usually matches the marketing string. For example, the
download filename for Novell eDirectory 8.7.1 is edir871.exe.
Enter version at a console prompt.
This will display the eDirectory version.

18 Novell eDirectory 8.8 Troubleshooting Guide
novdocx (en) 6 April 2007
3.2 Windows
Run iMonitor.
On the Agent Summary page, click Known Servers. Then under Servers Known to Database,
click Known Servers. The Agent Revision column displays the internal build number for each
server. For example, an Agent Revision number for Novell eDirectory 8.7.1 might be
10510.64.
For information on running iMonitor, see “Accessing iMonitor” in the Novell eDirectory 8.8
Administration Guide.
Run NDSCons.exe.
In the Windows Control Panel, double-click Novell eDirectory Services. In the Services
column, select ds.dlm, then click Configure. The Agent tabs displays both the marketing string
(for example, Novell eDirectory 8.7.1) and the internal build number (for example, 10510.64).
Run an eDirectory utility.
Most eDirectory utilities have an About option on their Help menu that displays the version
number of the utility (for example, Merge Graft Utility 10510.35). Some utilities include the
internal build version in the main label of the utility (for example, DSRepair - Version
10510.37).
To load an eDirectory utility (such as DSMerge or DSRepair), double-click Novell eDirectory
Services in the Windows Control Panel. In the Services column, select the utility, then click
Start.
View the properties of an eDirectory .dlm file.
Right-click the .dlm in Windows Explorer, then click the Version tab in the Properties dialog
box. This will display the version number of the utility. The default location for eDirectory .dlm
files is C:\novell\NDS.
3.3 Linux
Run ndsstat.
The ndsstat utility displays information related to eDirectory servers, such as the eDirectory
tree name, the fully distinguished server name, and the eDirectory version. In the following
example, eDirectory 8.7.1 is the product version (marketing string), and 10510.65 is the binary
version (internal build number).
osg-dt-srv17:/>ndsstat
Tree Name: SNMP-HPUX-RASH
Server Name: .CN=osg-dt-srv17.O=novell.T=SNMP-HPUX-RASH.
Binary Version: 10510.65
Root Most Entry Depth: 0
Product Version: NDS/Unix - NDS eDirectory v8.7.1 [DS]
For information on running ndsstat, see “Novell eDirectory Linux and UNIX Commands and
Usage” in the Novell eDirectory 8.8 Administration Guide, or the ndsstat man page
(ndsstat.1m).
Run ndsd --version.
For information on running ndsd, see “Novell eDirectory Linux and UNIX Commands and
Usage” in the Novell eDirectory 8.8 Administration Guide, or the ndsd man page (ndsd.1m).

Determining the eDirectory Version Number 19
novdocx (en) 6 April 2007
Run iMonitor.
On the Agent Summary page, click Known Servers. Then under Servers Known to Database,
click Known Servers. The Agent Revision column displays the internal build number for each
server. For example, an Agent Revision number for Novell eDirectory 8.7.1 might be
10510.64.
For information on running iMonitor, see “Accessing iMonitor” in the Novell eDirectory 8.8
Administration Guide.
Run rpm -qi NDSserv.
Entering this command will display similar information to ndsd --version.
3.4 Solaris
Run ndsstat.
The ndsstat utility displays information related to eDirectory servers, such as the eDirectory
tree name, the fully distinguished server name, and the eDirectory version. In the following
example, eDirectory 8.7.1 is the product version (marketing string), and 10510.65 is the binary
version (internal build number).
osg-dt-srv17:/>ndsstat
Tree Name: SNMP-HPUX-RASH
Server Name: .CN=osg-dt-srv17.O=novell.T=SNMP-HPUX-RASH.
Binary Version: 10510.65
Root Most Entry Depth: 0
Product Version: NDS/Unix - NDS eDirectory v8.7.1 [DS]
For information on running ndsstat, see “Novell eDirectory Linux and UNIX Commands and
Usage” in the Novell eDirectory 8.8 Administration Guide, or the ndsstat man page
(ndsstat.1m).
Run ndsd --version.
For information on running ndsd, see “Novell eDirectory Linux and UNIX Commands and
Usage” in the Novell eDirectory 8.8 Administration Guide, or the ndsd man page (ndsd.1m).
Run iMonitor.
On the Agent Summary page, click Known Servers. Then under Servers Known to Database,
click Known Servers. The Agent Revision column displays the internal build number for each
server. For example, an Agent Revision number for Novell eDirectory 8.7.1 might be
10510.64.
For information on running iMonitor, see “Accessing iMonitor” in the Novell eDirectory 8.8
Administration Guide.
Run pkginfo -l NDSserv.
Entering this command will display similar information to ndsd --version.
3.5 AIX
Run ndsstat.

20 Novell eDirectory 8.8 Troubleshooting Guide
novdocx (en) 6 April 2007
The ndsstat utility displays information related to eDirectory servers, such as the eDirectory
tree name, the fully distinguished server name, and the eDirectory version. In the following
example, eDirectory 8.7.1 is the product version (marketing string), and 10510.65 is the binary
version (internal build number).
osg-dt-srv17:/>ndsstat
Tree Name: SNMP-HPUX-RASH
Server Name: .CN=osg-dt-srv17.O=novell.T=SNMP-HPUX-RASH.
Binary Version: 10510.65
Root Most Entry Depth: 0
Product Version: NDS/Unix - NDS eDirectory v8.7.1 [DS]
For information on running ndsstat, see “Novell eDirectory Linux and UNIX Commands and
Usage” in the Novell eDirectory 8.8 Administration Guide or the ndsstat man page
(ndsstat.1m).
Run ndsd --version.
For information on running ndsd, see “Novell eDirectory Linux and UNIX Commands and
Usage” in the Novell eDirectory 8.8 Administration Guide, or the ndsd man page (ndsd.1m).
Run iMonitor.
On the Agent Summary page, click Known Servers. Then under Servers Known to Database,
click Known Servers. The Agent Revision column displays the internal build number for each
server. For example, an Agent Revision number for Novell eDirectory 8.7.1 might be
10510.64.
For information on running iMonitor, see “Accessing iMonitor” in the Novell eDirectory 8.8
Administration Guide.
3.6 HP-UX
Run ndsstat.
The ndsstat utility displays information related to eDirectory servers, such as the eDirectory
tree name, the fully distinguished server name, and the eDirectory version. In the following
example, eDirectory 8.7.1 is the product version (marketing string), and 10510.65 is the binary
version (internal build number).
osg-dt-srv17:/>ndsstat
Tree Name: SNMP-HPUX-RASH
Server Name: .CN=osg-dt-srv17.O=novell.T=SNMP-HPUX-RASH.
Binary Version: 10510.65
Root Most Entry Depth: 0
Product Version: NDS/Unix - NDS eDirectory v8.7.1 [DS]
For information on running ndsstat, see “Novell eDirectory Linux and UNIX Commands and
Usage” in the Novell eDirectory 8.8 Administration Guide, or the ndsstat man page
(ndsstat.1m).
Run ndsd --version.
For information on running ndsd, see “Novell eDirectory Linux and UNIX Commands and
Usage” in the Novell eDirectory 8.8 Administration Guide, or the ndsd man page (ndsd.1m).
Run iMonitor.
On the Agent Summary page, click Known Servers. Then under Servers Known to Database,
click Known Servers. The Agent Revision column displays the internal build number for each