DSfW install: The administrator specified is not a tree administrator

  • 7011828
  • 22-Feb-2013
  • 22-Feb-2013

Environment

Novell Open Enterprise Server 11 (OES 11) Linux Support Pack 1
Novell Open Enterprise Server 11 (OES 11) Linux Support Pack 2
Novell Open Enterprise Server 2 (OES 2) Linux Support Pack 3
Domain Services for Windows
DSfW 

Situation

During installation of a DSfW server after specifying the tree administrator name the following message is returned:

The administrator specified is not a tree administrator.
Ensure that the DSfW schema is already extended and the specified user has administrator rights on the mapped container, security container, and DNS-related contexts.

Resolution

If you are sure that the user specified is a tree administrator with the necessary rights then check the following.

If this is the first DSfW server being installed into the tree specify the "IP Address of an existing eDirectory server with a replica" as the server that holds the master of the [Root] partition.

If this is not the first DSfW server being installed specify the "IP Address of an existing eDirectory server with a replica" as the Primary DSfW server.

Make sure time is in sync between the new server and the existing eDirectory server.

Verify that the LDAP certificates in use by the server specified in the "IP Address of an existing eDirectory server with a replica" field are valid.
Once you are sure the certificates on the existing server with a replica are valid then delete the /etc/opt/novell/certs/SSCert.der file on the new DSfW server and try specifying the administrator information again.