Problems after extending the eDirectory schema for Shared Secret Authentication

Document ID:7006154
Creation Date:31-May-2010
Modified Date:14-May-2013
- Micro Focus Products:
  eDirectory
  Open Enterprise Server
  ZENworks Configuration Management

Environment

Novell ZENworks 10 Configuration Management with Support Pack 3 - 10.3 Authentication

Situation

Various issues with user objects after extending the eDirectory schema (see "Extending the eDirectory Schema to enable Shared Secret Authentication" in "32.2 Authentication Mechanisms" in "ZENworks 10 Configuration Management System Administration Reference" at https://www.novell.com/documentation/zcm10/index.html

One of the symptoms is that users can't be moved any more.

Resolution

If the schema has not yet been extended, then this is fixed in version 10.3.1 - see KB 7006265 "ZENworks Configuration Management 10.3.1 - update information and list of fixes" which can be found at https://www.novell.com/support

Workaround: at this time, the only fix is for Novell Technical Support to access the schema.

Additional Information

Extending the schema for Shared Secret Authentication with "novell-zenworks-configure -c ExtendSchemaForSmartCard " adds the container flag to the user objectclass, and this flag is added to all user objects.