Anonymous_User Absent Member.
Absent Member.
4161 views

nds2LDAPAttr failed in ReadclassDefCallBack

Got nds2LDAPAttr failed in ReadclassDefCallBack on a DSTRACE of LDAP while
trying to login iFolder management. TID10088976 fix is "
Labels (1)
0 Likes
44 Replies
Anonymous_User Absent Member.
Absent Member.

nds2LDAPAttr failed in ReadclassDefCallBack

> Got nds2LDAPAttr failed in ReadclassDefCallBack on a DSTRACE of LDAP while
> trying to login iFolder management. TID10088976 fix is " Add Read

attribute right To the proxyuser or the public user for the tree. Right
Click on Tree object. Trustees of this object|Highlight user|Assigned
Right|Add Property|Check Show all properties. Select CN and check Compare
Read and Inheritable.
I'm not exactly sure what tree object this refers to?


0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

,
> I'm not exactly sure what tree object this refers to?


Your tree in ConsoleOne.

- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop (http://support-forums.novell.com)
Pedago, The Aaland Islands (N60 E20)
Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

> ,
> > I'm not exactly sure what tree object this refers to?

>
> Your tree in ConsoleOne.
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop (http://support-forums.novell.com)
> Pedago, The Aaland Islands (N60 E20)
> Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195
>

Unfortunately changing the attribute didn't resolve my problem.......
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

,
> Unfortunately changing the attribute didn't resolve my problem.......
>

OK. What version of iFolder, running on what OS, DS etc?

- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop (http://support-forums.novell.com)
Pedago, The Aaland Islands (N60 E20)
Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

> ,
> > Unfortunately changing the attribute didn't resolve my problem.......
> >

> OK. What version of iFolder, running on what OS, DS etc?
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop (http://support-forums.novell.com)
> Pedago, The Aaland Islands (N60 E20)
> Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195
>

iFolder 2.1 on Netware 6.5 , eDirectory 8.7.1

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

,
> iFolder 2.1 on Netware 6.5 , eDirectory 8.7.1
>

OK. Just to make sure... You right click on your tree in consoleOne,
say ACME_TREE, Trustees, there you see the LDAP Proxy user listed?

Select user, hit "assigned rights", There you see CN with "compare",
"Read" and "inheritable" checked?

- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop (http://support-forums.novell.com)
Pedago, The Aaland Islands (N60 E20)
Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

> ,
> > iFolder 2.1 on Netware 6.5 , eDirectory 8.7.1
> >

> OK. Just to make sure... You right click on your tree in consoleOne,
> say ACME_TREE, Trustees, there you see the LDAP Proxy user listed?
>
> Select user, hit "assigned rights", There you see CN with "compare",
> "Read" and "inheritable" checked?
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop (http://support-forums.novell.com)
> Pedago, The Aaland Islands (N60 E20)
> Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195
>

OK, trustee of the tree includes administrator.XXXX whose assigned rights
for [All attribute rights] are supervisor, compare, read, inheritable
checked and [Entry rights] are supervisor, browse, inheritable checked.
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

> ,
> > iFolder 2.1 on Netware 6.5 , eDirectory 8.7.1
> >

> OK. Just to make sure... You right click on your tree in consoleOne,
> say ACME_TREE, Trustees, there you see the LDAP Proxy user listed?
>
> Select user, hit "assigned rights", There you see CN with "compare",
> "Read" and "inheritable" checked?
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop (http://support-forums.novell.com)
> Pedago, The Aaland Islands (N60 E20)
> Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195
>

I didn't see anything called "LDAP proxy list"...?!
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

,
> I didn't see anything called "LDAP proxy list"...?!
>

There is none. There should be an "LDAP Proxy User" though...

This is what Novell suggested:

"There are some utilities that you can grab rights, but usually i would
check the objectthis tid really isn't well written... SO see if he
changed the proxy user for the ifolder server (ifolder server agent)

Sometimes where I have seen this stuff go wrong is where they use an
admin equiv instead of ADMIN for the Ifolder admin do you know if this
is the case for this guy?

Can you get a full ldap trace that will tell us if it is rights or not"

- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop (http://support-forums.novell.com)
Pedago, The Aaland Islands (N60 E20)
Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

> ,
> > I didn't see anything called "LDAP proxy list"...?!
> >

> There is none. There should be an "LDAP Proxy User" though...
>
> This is what Novell suggested:
>
> "There are some utilities that you can grab rights, but usually i would
> check the objectthis tid really isn't well written... SO see if he
> changed the proxy user for the ifolder server (ifolder server agent)
>
> Sometimes where I have seen this stuff go wrong is where they use an
> admin equiv instead of ADMIN for the Ifolder admin do you know if this
> is the case for this guy?
>
> Can you get a full ldap trace that will tell us if it is rights or not"
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop (http://support-forums.novell.com)
> Pedago, The Aaland Islands (N60 E20)
> Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195
>

I've been trying to get into iFolder management as Admin and Administrator
for over 2 weeks!
Zak
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

,
> I've been trying to get into iFolder management as Admin and Administrator
> for over 2 weeks!
>

And? Did you try the steps I suggested? Your last post was:

"I didn't see anything called "LDAP proxy list"...?!"

To which I replied:

There is none. There should be an "LDAP Proxy User" though...

This is what Novell suggested:

"There are some utilities that you can grab rights, but usually i would
check the objectthis tid really isn't well written... SO see if he
changed the proxy user for the ifolder server (ifolder server agent)

Sometimes where I have seen this stuff go wrong is where they use an
admin equiv instead of ADMIN for the Ifolder admin do you know if this
is the case for this guy?

Can you get a full ldap trace that will tell us if it is rights or not"

- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop (http://support-forums.novell.com)
Pedago, The Aaland Islands (N60 E20)
Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

> ,
> > I've been trying to get into iFolder management as Admin and Administrator
> > for over 2 weeks!
> >

> And? Did you try the steps I suggested? Your last post was:
>
> "I didn't see anything called "LDAP proxy list"...?!"
>
> To which I replied:
>
> There is none. There should be an "LDAP Proxy User" though...
>
> This is what Novell suggested:
>
> "There are some utilities that you can grab rights, but usually i would
> check the objectthis tid really isn't well written... SO see if he
> changed the proxy user for the ifolder server (ifolder server agent)
>
> Sometimes where I have seen this stuff go wrong is where they use an
> admin equiv instead of ADMIN for the Ifolder admin do you know if this
> is the case for this guy?
>
> Can you get a full ldap trace that will tell us if it is rights or not"
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop (http://support-forums.novell.com)
> Pedago, The Aaland Islands (N60 E20)
> Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195
>

I think I'm getting closer to the problem.....
Here are some errors from my dstrace:
08:34:56 B41B21E0 00008053 Agent: Calling DSARead conn:0 for client
..DDTP2.DDTP.DDTP_TREE.
08:34:56 B41B21E0 00008053 Agent: DSARead failed, no such attribute (-603).
08:34:56 B41B21E0 FF000001 Auth: 4 GlobalGetSEV succeeded.
08:34:56 B41B21E0 00008053 Auth: [0000811d]
<.iFolder_ServerAgent.DDTP.DDTP_TREE.> LocalLoginRequest. Error success,
conn: 59.
08:34:56 B499E0C0 00008056 Agent: Calling DSAResolveName conn:50 for client
..Administrator.DDTP.DDTP_TREE.
08:34:56 B499E0C0 00008056 Agent: Calling DSASearch conn:50 for client
..Administrator.DDTP.DDTP_TREE.
08:34:56 B499E0C0 00008056 Agent: Calling DSAResolveName conn:50 for client
..Administrator.DDTP.DDTP_TREE.
08:34:56 B499E0C0 00008056 Agent: Calling DSAOpenStream conn:50 for client
..Administrator.DDTP.DDTP_TREE.
08:34:56 B499E0C0 00008056 Agent: Calling DSAReadStream conn:50 for client
..Administrator.DDTP.DDTP_TREE.
08:34:56 B499E0C0 00008056 Agent: Calling DSACloseStream conn:50 for client
..Administrator.DDTP.DDTP_TREE.
08:34:56 B499E0C0 00008056 Agent: Calling DSAResolveName conn:50 for client
..Administrator.DDTP.DDTP_TREE.
08:34:56 B499E0C0 00008056 Agent: Calling DSAOpenStream conn:50 for client
..Administrator.DDTP.DDTP_TREE.
08:34:56 B499E0C0 00008056 Agent: Calling DSAReadStream conn:50 for client
..Administrator.DDTP.DDTP_TREE.
08:34:56 B499E0C0 00008056 Agent: Calling DSACloseStream conn:50 for client
..Administrator.DDTP.DDTP_TREE.
08:34:56 A1682160 FFFFFFFF LDAP: Illegal ndsname "*O=DDTP" in ldap2uNDSDN,
err = 34 (0x22)
08:34:56 A1682160 FFFFFFFF LDAP: ldap2uNDSDN ldapDN = "*O=DDTP" - error 34
(0x22)
08:34:56 A1682160 FFFFFFFF LDAP: nds_back_search: ldap2uNDSDN failed with
err 34 (0x22)
08:34:56 A1682160 00008053 Agent: Calling DSARead conn:0 for client
..DDTP2.DDTP.DDTP_TREE.
08:34:56 A1682160 00008053 Agent: DSARead failed, no such attribute (-603).
0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

,
> 08:34:56 A1682160 FFFFFFFF LDAP: Illegal ndsname "*O=DDTP" in ldap2uNDSDN,


OK. THis was an upgrade from iFolder 1.x? Right, iFolder 1.x user the
asterisk to denote "search subrtee", iFolder 2.x does not use that. Look up
your context in your ifolder_nw_addtitions.conf file and remove the
asterisk, see:

- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop (http://support-forums.novell.com)
Pedago, The Aaland Islands (N60 E20)
Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195

0 Likes
Anonymous_User Absent Member.
Absent Member.

Re: nds2LDAPAttr failed in ReadclassDefCallBack

> ,
> > 08:34:56 A1682160 FFFFFFFF LDAP: Illegal ndsname "*O=DDTP" in ldap2uNDSDN,

>
> OK. THis was an upgrade from iFolder 1.x? Right, iFolder 1.x user the
> asterisk to denote "search subrtee", iFolder 2.x does not use that. Look up
> your context in your ifolder_nw_addtitions.conf file and remove the
> asterisk, see:
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop (http://support-forums.novell.com)
> Pedago, The Aaland Islands (N60 E20)
> Using VA 4.52 build 277 (32-bit) on Windows 2000 build 2195
>

I don't have a ifolder_nw_addtitions.conf file, only httpd_ifolder_nw.conf,
httpd.conf, httpd_ifolder_nw.conf.org, httpd_ifolder_nw.org in the SYS:
apache2 directory. This was a new iFolder ver 2 install that came with the
Netware 6.5 90 day evaluation copy (supposedly fully functional..)
Zak
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.