How to back rev from eDirectory 8.8 to eDirectory 8.7.3

How to back rev from eDirectory 8.8 to eDirectory 8.7.3

Procedure for eDirectory on NetWare
Procedure for eDirectory on Solaris
Procedure for eDirectory on Windows

 Option 1

These instructions apply only if you have a backup copy of all files from the DIBfiles directory (usually C:\NOVELL\NDS\DIBfiles) on the Windows server taken before it was upgraded to eDirectory 8.8. If you do not have a copy of the DIBfiles directory you will need to follow the Option 2 directions to remove and re-install the server into the tree.

1. If this server holds any master replicas, switch the master to another server. If it is the only server in the tree skip this step.

2. Disconnect the server from the network.

3. Shutdown the eDirectory service.

4. Remove eDirectory from the server using Add/Remove Programs. If that method does not remove eDirectory completely you can follow KB 10058219 to manually remove eDirectory.

5. Install eDirectory 8.7.3.x onto the server and place it into its own tree.

6. Install the latest security update.

7. Shutdown the eDirectory service

8. Remove the DIBfiles directory and copy the backup of your original DIBfiles directory in its place.

9. Open the NDS Console and start the eDirectory service.

   Note: If this is the only server in the tree stop here.

10. Follow KB 10066543 to remove all replicas from the server and clean up the replica rings on other servers.

11. Reconnect the server to the network, verify communication between servers and then add back replicas one at a time.

Option 2

These instructions are for removing the server from the tree and re-installing. If it is the only server in the tree you cannot follow these steps and you will need to remove eDirectory completely and re-install eDirectory 8.7.3.x then restore from a backup.

1. If this server holds any master replicas, switch the masters to another server.

2. Disconnect the server from the network.

3. Follow KB 10057553 and use xbrowse to redirect the references from this server object to a temporary dummy object.

4. Once the references are redirected successfully delete ONLY the server object from the tree.

5. Remove eDirectory from the server using Add/Remove Programs. If that method does not remove eDirectory completely you can follow KB 10058219 to manually remove eDirectory.

6. Reconnect the server to the network and install eDirectory 8.7.3.x

7. Use xbrowse to redirect server references back to the new server object.

Procedure for eDirectory on Linux

Note: This procedure assumes that you have made a backup of the /var/nds/dib directory and the /etc/nds.conf file before upgrading to eDirectory 8.8.

1. Modify the /opt/novell/eDirectory/sbin/nds-uninstall script.  Comment out line 1833, the call to preDibCheck.  Once you are done, the line should look like this -

#preDibCheck

2. Shutdown ndsd.

3. Run nds-uninstall.

4. Remove the novell-NOVLsubag-8.8-1 package.

# rpm -e novell-NOVL-subag-8.8-1

5. Remove the nici-2.7.0-0.01 package.

# rpm -e nici-2.7.0-0.01

6. Remove all the files and directories from /var/nds/dib.

# rm -rf /var/nds/dib/*

7. Restore the backup of the /var/nds/dib directory made before the eDirectory 8.8 upgrade.  For example, you would use this command, if the backup was /dib.tar.

# cd /var/nds/dib
# tar -xvf /dib.tar

8. Restore the backup of /etc/nds.conf made before the eDirectory 8.8 upgrade.  For example, you would use this command, if the backup was /etc/nds.conf.org.

# mv /etc/nds.conf.org /etc/nds.conf

9. Install eDirectory 8.7.3.

10. Install the desired eDirectory 8.7.3 patch.

11. Start ndsd.
Procedure for eDirectory on Netware

Note: This procedure assumes that you have made a backup DIB archive via DSRepair -RC (found in the Sys:system\dsr_dib directory) before upgrading to eDirectory 8.8.

1.  Download the appropriate Overlay cd for the support pack you are currently on from https://support.novell.com/filefinder   (search for nw65ossp*).  Copy the ISO that you downloaded to a volume on the server.

2.  Download the edirectory 8.7.3 patch level you were on previously from https://support.novell.com/filefinder  (search for edir873*).  Extract the edirectory patch and copy the files to the server.

3.  Mount the ISO file as a volume (KB 10095903) with the following command:

nss /MountImageVolume=path_imagefilename  

4.  LOAD NWCONFIG | COPY FILES OPTION | POINT TO THE OVERLAY CD

During the file copy you will be asked about newer files:  Select Always overwrite newer files....stay close to the server because you will have to do this multiple times.

5.  Install the eDirectory Patch you previously downloaded.

6.  Call Novell Technical Support to restore the DIB Archive that was taken from the Sys:system\dsr_dib directory.

7.  Follow the XK2 TID 7001592 to remove all replicas from the server.  Make sure to wait until backlinking is completed.

8.  Delete the Ldap Group & Ldap Server objects along with Certificates and the SAS object associated to the server.

9.  LOAD PKIDIAG from the console prompt to recreate the certificates and the SAS object.  Select option 4 to go into fix mode and then option 0 to run.  This should recreate the objects.

10.  Use iManager or ConsoleOne to recreate your ldap objects.

Formerly known as TID# 10100138