Differences

This shows you the differences between two versions of the page.

--- opentext:linux:oes [2024/10/27 17:10] – [NDS / eDirectory Health Check Procedures] gsys
+++ opentext:linux:oes [2026/10/10 23:54] (current) – gsys
@@ Line 28: / Line 28: @@
 </code>
-====== Change ndsHome for multiple users ======
+===== Change ndsHome for multiple users =====
 Export ldap objects with attribute ''ndsHomeDirectory'' and ''class=inetOrgPerson'':
@@ Line 54: / Line 54: @@
 ===== ndsrepair =====
+https://www.netiq.com/documentation/edirectory-9/edir_admin/data/aflm3p7.html
 <code>
 ndsrepair -T          # check edir and replica status
+</code>
+===== ndstrace ====
+<code>
+ndstrace -c connections | grep "VALID|AUTHEN"                 # check active user connections to eDir
 </code>
@@ Line 76: / Line 82: @@
 https://support.microfocus.com/kb/doc.php?id=7014457
+===== NSS =====
+==== Commands ====
+<code>
+nss /CTimeIsMetadataModTime
+nss /ListXattrNWMetaData
+nss /NoCTimeIsMetadataModTime
+nss /NoListXattrNWMetaData
+nss /find=CTimeIsMetadataModTime
+nss /find=ListXattrNWMetaData
+</code>
 ===== DFS =====
@@ Line 106: / Line 127: @@
 ===== NDS / eDirectory Health Check Procedures =====
-Static Tree: Every Month
+==== Frequency ====
-Dynamic Tree: Every Week
+^ Static Tree | Every Month on every Server |
+^ Dynamic Tree | Every Week on every Server |
-  - Check DS Versions and Timesync <code>
+==== Steps ====
-ndsrepair -T
-</code>
+  - Check DS Versions and Timesync
-  - Check Server-to-Server Synchronization <code>
+  <code>ndsrepair -T</code>
-ndstrace
+  - Check Server-to-Server Synchronization
-</code> Within ndstrace enter: <code>
+  <code>ndstrace</code>
+  Within ndstrace enter:
+<code>
 #enables screen and file logging to the ndstrace.log file
 SET NDSTRACE=ON
@@ Line 126: / Line 150: @@
 #heartbeat; initiates synchronization between file servers
 SET NDSTRACE=*H
-</code> check log file <code>
-ndsconfig get n4u.server.log-file
 </code>
-  - Check Replica Synchronization status<code>
+  check log file
-ndsrepair -E
+  <code>ndsconfig get n4u.server.log-file</code>
-</code>
+  - Check Replica Synchronization status
-  - Check external references <code>
+  <code>ndsrepair -E</code>
-ndsrepair -C -Ad -A
+  - Check external references
-</code>
+  <code>ndsrepair -C -Ad -A</code>
-  - Check Replica States <code>
+  - Check Replica States
-ndsrepair -P
+  <code>ndsrepair -P</code>
-</code>
+  - Check Schema Synchronization
-  - Check Schema Synchronization <code>
+  <code>ndstrace</code>
-ndstrace
+  Within ndstrace enter: <code>
-</code> Within ndstrace enter: <code>
 #enables screen and file logging to the ndstrace.log file
 SET NDSTRACE=ON
@@ Line 155: / Line 176: @@
 #initiates synchronization of all schemas
 SET NDSTRACE=*SS
-</code> check log file <code>
-ndsconfig get n4u.server.log-file
-</code>
-  - Repair Local Database <code>
-ndsrepair -R
 </code>
+  check log file
+  <code>ndsconfig get n4u.server.log-file</code>
+  - Repair Local Database
+  <code>ndsrepair -R</code>
 https://support.microfocus.com/kb/doc.php?id=3564075
+===== rmupwd =====
+Remove password attributes
+<code>
+export LD_LIBRARY_PATH=/opt/novell/eDirectory/eDir-exclusive/lib64:/opt/novell/eDirectory/lib64:/opt/novell/eDirectory/lib64/nds-modules:/opt/novell/lib64:$LD_LIBRARY_PATH
+./rmupwd -pwd 10.1.1.32 636 /root/cert-ca.der cn=Installer,ou=Installers,ou=Verwalter,ou=Benutzer,ou=GSRV,ou=SCHULEN,o=ml3 base cn=admin,ou=Server,ou=DIENSTE,o=ml3
+</code>
+===== eDir =====
+<code>
+TCP: 10.123.1.32 524
+UDP: 10.123.1.32 524
+http://10.123.1.32:8028/portal
+https://10.123.1.32:8030/portal
+http://10.123.1.32:8028/nds
+https://10.123.1.32:8030/nds
+http://10.123.1.32:8028/soap
+https://10.123.1.32:8030/soap
+ldap://10.213.1.32:389
+ldaps://10.123.1.32:636
+</code>