
64 Novell eDirectory 8.8 SP7 Troubleshooting Guide
Step 1: Perform the Schema Cache Update Operation
You can write the errors encountered while comparing the schema to an error file using the following
command:
ice -e error_file -C -a -S ldap -s OpenLDAP_server -p Open_LDAP_port - D ldap -s
eDirectory_server -p eDirectory_port -d eDirectory_full_admin_context -w
eDirectory_password
For example:
ice -e err.ldf -C -a -SLDAP -s open_srv1 -p open_port1 -DLDAP -s edir_srv2 -p
edir_port2 -d cn=admin,o=novell -w secret
Any errors encountered while comparing the schema is written to the error file (
err.ldf
in the
example).
Step 2: Rectify the Error LDIF File to Eliminate the Errors
Open LDAP defines some schema definitions publicly, which include attributes like
objectClasses
,
attributeTypes
,
ldapSyntaxes
, and
subschemSubentry
. These definitions exist internally and are
very important to the schema, and therefore, they cannot be modified. Operations that try to modify
these definitions results in the following error:
LDAP error : 53 (DSA is unwilling to perform)
Any records that contain references to these definitions cause the following error:
LDAP error : 16 ( No such attribute )
Thus, records that contain any reference to these objects or that try to modify these definitions need
to be commented in the LDIF error file (
err.ldf
in the example).
10.3.3 Migrating the Open LDAP Data to Novell eDirectory
Execute the following command to migrate the data:
ice -e error_data.ldif -SLDAP -s OpenLDAP_server -p OpenLDAP_port -d admin_context
-w password -t -b dc=blr,dc=novell,dc=com -F objectclass=* -DLDAP -d admin_context
-w password -l -F
For example:
ice -e err_data.ldif -SLDAP -s open_srv1 -p open_port1 -d
cn=administrator,dc=blr,dc=novell,dc=com -w secret1 -t -b dc=blr,dc=novell,dc=com
-F objectclass=* -DLDAP -d cn=admin,o=novell -w secret2 -l -F
Some objects also may fail due to forward referencing and internal dependencies on the objects,
which may not break any applications.
10.3.4 Making PAM Work with Novell eDirectory After Migration
After migrating from OpenLDAP to eDirectory, you need to make some changes for PAM to work
with eDirectory.
Comentários a estes Manuais