cifsd: ERROR: ENTRY: DDCLogin() failed Error: -669
The only thing the common proxy handles is CIFS on this server.
I've tried to change the common proxy password according to TID 7016334 but it fails:
[Status] Running the password change job automatically
Retrieving the current common proxy username from OCS
Executing command: /opt/novell/proxymgmt/bin/cp_retrieve_proxy_cred username
Retrieving the current common proxy username from OCS returned: 0
Thu Nov 5 10:03:42 PST 2020: [Status] Starting Change Password Task
[Status] ENTRY =========>>> cn=OESCommonProxy_[Server],ou=[Server Context]
[Status] Current user is common proxy user
Executing command: /opt/novell/proxymgmt/bin/cp_retrieve_proxy_cred password
Retrieving the current common proxy password from OCS returned: 0
Verifying ndslogin with the existing common proxy credentials.
Ldapsearch command to be executed to verify the common proxy credentials is env LDAPTLS_CACERT=/etc/opt/novell/certs/SSCert.pem /usr/bin/ldapsearch -b -s base -D cn=OESCommonProxy_[Server],ou=[Server Context] -w -H ldaps://127.0.0.1:636
Ldapsearch command executed to verify the common proxy credentials returned: 49
ERROR: Common Proxy credentials verification failed in change password task, exiting the password change task.
What would my next step be?
Server is OES2018 SP1 with latest patches.
And also note that starting with IIRC eDir 8.8.1 a LDAP bind request would also return
ldap_bind: Invalid credentials (49)
additional info: NDS error: failed authentication (-669)
if the bind ID is invalid. In earlier versions (and of course always with NCP) this would trigger a 601 (no such object). I think this was done to make brute force guys' lifes a little harder.