Environment
Open Enterprise Server 2018 (OES 2018) Linux
eDirectory
eDirectory
Situation
As part of the upgrade to SP2 (from SP1), the files will get installed and then eDirectory will get configured/upgraded. The eDirectory portion would fail during the "Upgrade and start eDirectory using "ndsconfig" portion:
Upon looking at "Details", one would might see:
The bottom of the ndsd.log file showed:
Resolving to master of ServerDN to extend the schema: /opt/novell/eDirectory/lib64/nds-schema/nspm.sch
Jan 01 02:03:04 extendSchema: Schema extension failed for /opt/novell/eDirectory/lib64/nds-schema/nspm.sch
Jan 01 02:03:04 DHModuleInit_dsi: Returning -2.
Jan 01 02:03:04 Module dsi is not loaded
Resolution
A user object with supervisor rights to [Root] is needed. When one was obtained, ndssch ran successfully. That same object was used when the eDirectory update (via ndsconfig) also completed successfully.
Cause
Given the upgrade kept failing on the same schema file, we manually tried to apply that one file with the ndssch tool:
# /opt/novell/eDirectory/bin/ndssch -h <hostIPorDNS> -t <treename> admin_FDN /opt/novell/eDiretory/lib64/nds-schema/nspm.sch
after prompting for the password for "admin_FDN" (the FDN of an admin user); it generated the following message:
The message:
"You do not have write rights to the [Root] of the tree to continue this operation."
in the above output from ndssch, as well as a -672 error in /root/schema.log, indicate that the user object being used has insufficient rights in the tree to modify schema.