ndsconfig upgrade fails with error -337 after tree rename when EBA is configured

  • 7023126
  • 26-Jun-2018
  • 26-Jun-2018

Environment

eDirectory 9.X 
Enhanced Background Authentication enabled

Situation

Installed Tree = RH74-edir9 with EBA

Renamed Tree to RedHat74-eDir9-Tree and restarted ndsd

ndsconfig upgrade -a admin.novell

[1] Instance at /etc/opt/novell/eDirectory/conf/nds.conf:  server1.O=novell

Upgrading NetIQ eDirectory server with the following parameters, Please wait...
  Tree Name             : RedHat74-eDir9-Tree
  Server DN             : server1.O=novell
  Admin DN              : admin.novell

  Configuration File    : /etc/opt/novell/eDirectory/conf/nds.conf
  Instance Location     : /var/opt/novell/eDirectory/data
  DIB Location          : /var/opt/novell/eDirectory/data/dib

Current env file will be backed-up in format env.current_date, any customizations done to env file need to be copied back to new env file from backed-up file.

Checking if server is ready to service requests... Done
Enter the password for admin.novell:

Performing eDirectory health check...
ERROR -337: eDirectory pre-upgrade health check failed.[root@server1 ~]#

Resolution

ebaclientinit --mechanism ebatls

Cause

The certificate /root/.eba.p12 was created with the original tree name.  Running the ebaclientinit generates a new /root/.eba.p12 with the new tree name.