Installing eDirectory 8.7 or 8.8 generates errors when modifying schema

Document ID:7003425
Creation Date:02-Jun-2009
Modified Date:26-Apr-2012
- Micro Focus Products:
  eDirectory

Environment

Novell eDirectory 8.7.1 for NetWare
Novell eDirectory 8.7.3 for NetWare 6.5
Novell eDirectory 8.8 for NetWare 6.5

Situation

Installing eDirectory 8.7.1 generates errors during modifying NDS schema

ERROR: NDS Error -641 (FFFFFD7F hex), description: invalid request
<SAS:PKIStore:Keys>: WARNING: Different from existing definition, will attempt to modify Flags:
<SAS:SecretStore:Data>: WARNING: Different from existing definition, will attempt to modify Flags:
<SAS:SecretStore:Key>: WARNING: Different from existing definition, will attempt to modify Flags:
<NDSPKI:Keystore>: WARNING: Different from existing definition, will attempt to modify Flags:
DS_HIDDEN_ATTR: Set Failed

Resolution

These errors are cosmetic. You may press <Enter> to continue on with the install of eDirectory and everything should be fine.

These errors will persist during each upgrade to eDirectory 8.7.1, 8.7.3, or 8.8. Currently, an incident with Novell Technical Support can resolve the Flag differences through a dial-in.

Additional Information

The installation calls the SAS.SCH schema file. When this file runs, it tries to modify the schema flags on 4 attributes. Currently we have only seen the problem with SAS:SecretStore:Key, SAS:SecretStore:Data, SAS:PKIStore:Keys from the SAS.SCH file and <NDSPKI:Keystore> from the NDSPKI.SCH file. The problem occurs when these 4 attributes are missing the "HIDDEN" flag. The schema file detects that these attributes are missing the "HIDDEN" flag and tries to add it but it can't and produces the -641 error. By default, the "HIDDEN" flag should be there already. Why the flags ever disappear on these attributes in the first place is still under investigation.
Errors seen in SYS:\SYSTEM\DSMISC.LOG

/****************************************************************************************

Adding schema attributes...
<SAS:Security DN>: Identical to existing definition
<SAS:Service DN>: Identical to existing definition
<SAS:SecretStore>: Identical to existing definition
(Note: Successfully resolved to server: .FS1.servers.novell)
<SAS:SecretStore:Key>: WARNING: Different from existing definition, will attempt to modify
    Flags:
      DS_HIDDEN_ATTR: Set Failed
      ERROR: NDS Error -641 (FFFFFD7F hex), description: invalid request
<SAS:SecretStore:Data>: WARNING: Different from existing definition, will attempt to modify
    Flags:
      DS_HIDDEN_ATTR: Set Failed
      ERROR: NDS Error -641 (FFFFFD7F hex), description: invalid request
<SAS:PKIStore:Keys>: WARNING: Different from existing definition, will attempt to modify
    Flags:
      DS_HIDDEN_ATTR: Set Failed
      ERROR: NDS Error -641 (FFFFFD7F hex), description: invalid request
Adding schema classes...
<SAS:Security>: Proper subset of existing definition
<SAS:Service>: Proper subset of existing definition
Modifying schema classes...
<NCP Server>: Modification unnecessary
<User>: Modification unnecessary
<SAS:Service>: Modification unnecessary
<NDSPKI:Keystore>: WARNING: Different from existing definition, will attempt to modify
    Flags:
      DS_HIDDEN_ATTR: Set Failed
      ERROR: NDS Error -641 (FFFFFD7F hex), description: invalid request
--
Formerly known as TID# 10086666

Change Log

6/2/09 - Added 8.7.3 and 8.8 to environment, added info on editing NDSPKI:Keystore to list also - MHinckley