Environment
Products:
Novell eDirectory 8.7.3.7 for All Platforms
Novell NetWare 6.5
Novell Open Enterprise Server (Linux based)
Novell SUSE Linux Enterprise Server 9
Novell SUSE Linux Enterprise Server 10
Situation
Symptoms:
Create button in the Security | Certificates tab in User Properties is greyed out
Create button in the User Object Properties | Security |Certificates tab is greyed out for all users under one specific container
Container under question is an eDirectory Partition
Launching ConsoleOne with "-forcemaster" switch enables the button
Resolution
Corrective Actions:
1. Find out all servers in the Replica Ring of the partition under question, eithr through ConsoleOne, iManager or DSREPAIR
2. Launch DSREPAIR using the command "dsrepair -a" from the NetWare server console
3. Perform a basic DS Health Check (Time Synchronization, Report Synchronization Status and Check external references (Advanced Options Menu) and make sure that there are no errors
4. In case there are any errors take necessary steps to clear all errors or contact Novell Technical Support
5. Perform the DS Health Check on all servers in the Replica Ring of the partition under question and clear all errors
6. Open ConsoleOne or iManager and check again
Additional Information
Root Cause:
Unprocessed Obituaries present in different servers in the Replica Ring of the partition under question
Notes:
In this particular case all servers in the replica ring of the partition under question, except the Master server, had obituaries. Performing a "Check External References" will list obituries on the server. Obituaries need to be cleared in order to fix the issue. Clearing obituaries may require different steps depending upon different error messages you have on your servers. Search Novell Knowledgebase for documents related with different error messages which you get from basic DS Health Check