Differences

This shows you the differences between two versions of the page.

--- opentext:linux:oes [2024/09/11 17:25] – [Change ndsHome for multiple users] gsys
+++ opentext:linux:oes [2026/10/10 23:54] (current) – gsys
@@ Line 28: / Line 28: @@
 </code>
-====== Change ndsHome for multiple users ======
+===== Change ndsHome for multiple users =====
+Export ldap objects with attribute ''ndsHomeDirectory'' and ''class=inetOrgPerson'':
+<code plain export.ldf>
+version: 1
+dn: cn=SpechtB-S01,ou=Lehrer,ou=Benutzer,ou=S01,ou=SCHULEN,o=ml3
+changetype: add
+ndsHomeDirectory: cn=gserver03_DOCS,ou=Server,ou=DIENSTE,o=ml3#0#\S01\home\le
+ hrer/SpechtB-S01
+</code>
-Export ldap information with attribute ''ndsHomeDirectory'' and ''class=inetOrgPerson'' \\
 Import customized ldif file into eDir:
-<code ldif import.ldf>
+<code plain import.ldf>
 version: 1
@@ Line 43: / Line 54: @@
 ===== ndsrepair =====
+https://www.netiq.com/documentation/edirectory-9/edir_admin/data/aflm3p7.html
 <code>
 ndsrepair -T          # check edir and replica status
+</code>
+===== ndstrace ====
+<code>
+ndstrace -c connections | grep "VALID|AUTHEN"                 # check active user connections to eDir
 </code>
@@ Line 65: / Line 82: @@
 https://support.microfocus.com/kb/doc.php?id=7014457
+===== NSS =====
+==== Commands ====
+<code>
+nss /CTimeIsMetadataModTime
+nss /ListXattrNWMetaData
+nss /NoCTimeIsMetadataModTime
+nss /NoListXattrNWMetaData
+nss /find=CTimeIsMetadataModTime
+nss /find=ListXattrNWMetaData
+</code>
 ===== DFS =====
@@ Line 92: / Line 124: @@
 Should contain the DFS-GUID from eDir Object
+===== NDS / eDirectory Health Check Procedures =====
+==== Frequency ====
+^ Static Tree | Every Month on every Server |
+^ Dynamic Tree | Every Week on every Server |
+==== Steps ====
+  - Check DS Versions and Timesync
+  <code>ndsrepair -T</code>
+  - Check Server-to-Server Synchronization
+  <code>ndstrace</code>
+  Within ndstrace enter:
+<code>
+#enables screen and file logging to the ndstrace.log file
+SET NDSTRACE=ON
+#turns off all preset filters
+SET NDSTRACE=NODEBUG
+#enables filtering of synchronization traffic
+SET NDSTRACE=+SKLK
+#heartbeat; initiates synchronization between file servers
+SET NDSTRACE=*H
+</code>
+  check log file
+  <code>ndsconfig get n4u.server.log-file</code>
+  - Check Replica Synchronization status
+  <code>ndsrepair -E</code>
+  - Check external references
+  <code>ndsrepair -C -Ad -A</code>
+  - Check Replica States
+  <code>ndsrepair -P</code>
+  - Check Schema Synchronization
+  <code>ndstrace</code>
+  Within ndstrace enter: <code>
+#enables screen and file logging to the ndstrace.log file
+SET NDSTRACE=ON
+#turn off all preset filters
+SET NDSTRACE=NODEBUG
+#enables filter of schema synchronization traffic
+SET NDSTRACE=+SCMA
+Additionally you can look at the schema-related operations for both inbound and outbound by entering:
+SET NDSTRACE=+SCMD
+#initiates synchronization of all schemas
+SET NDSTRACE=*SS
+</code>
+  check log file
+  <code>ndsconfig get n4u.server.log-file</code>
+  - Repair Local Database
+  <code>ndsrepair -R</code>
+https://support.microfocus.com/kb/doc.php?id=3564075
+===== rmupwd =====
+Remove password attributes
+<code>
+export LD_LIBRARY_PATH=/opt/novell/eDirectory/eDir-exclusive/lib64:/opt/novell/eDirectory/lib64:/opt/novell/eDirectory/lib64/nds-modules:/opt/novell/lib64:$LD_LIBRARY_PATH
+./rmupwd -pwd 10.1.1.32 636 /root/cert-ca.der cn=Installer,ou=Installers,ou=Verwalter,ou=Benutzer,ou=GSRV,ou=SCHULEN,o=ml3 base cn=admin,ou=Server,ou=DIENSTE,o=ml3
+</code>
+===== eDir =====
+<code>
+TCP: 10.123.1.32 524
+UDP: 10.123.1.32 524
+http://10.123.1.32:8028/portal
+https://10.123.1.32:8030/portal
+http://10.123.1.32:8028/nds
+https://10.123.1.32:8030/nds
+http://10.123.1.32:8028/soap
+https://10.123.1.32:8030/soap
+ldap://10.213.1.32:389
+ldaps://10.123.1.32:636
+</code>