Environment
Products:
Novell eDirectory 8.7.3.x for All Platforms
Novell eDirectory 8.8.x for All Platforms
Novell Modular Authentication Service (NMAS)
Situation
Symptoms:
NMAS login errors -1660, -1663
Tree-Key inconsistency
Resolution
Corrective Actions:
1. Ensure every server in the tree is a trustee of W0 object
2. Ensure Key Server DN attribute in the other tab of W0 object have a valid server name. More servers can be added in the
2. Ensure Key Server DN attribute in the other tab of W0 object have a valid server name. More servers can be added in the
Key Server DN attribute for fault tolerence
3. Make sure all servers are communicating properly
4. Ensure every server is up an running and eDirectory database is open
5. Server Abend can cause reporting of - 672 errors when creating tree-key files with sdidiag
6. Run RD -T from sdidiag prompt of one of the Key servers(Servers in Key server DN).
7. Reboot all servers except Key Servers(Servers in Key server DN). after production hours if possible
8. If tree-key issues still exists use SDIMAN to resolve the issue.
4. Ensure every server is up an running and eDirectory database is open
5. Server Abend can cause reporting of - 672 errors when creating tree-key files with sdidiag
6. Run RD -T from sdidiag prompt of one of the Key servers(Servers in Key server DN).
7. Reboot all servers except Key Servers(Servers in Key server DN). after production hours if possible
8. If tree-key issues still exists use SDIMAN to resolve the issue.