Highlighted
Honored Contributor.
Honored Contributor.
776 views

iManager no longer working after server patch


I have an OES 11 server that has the simple task of holding the master
partitions of my network and hosting iManager.

Due to not updating the credentials with my current SUSE keycode, the
server had not been patched and was still on SLES11 SP2, OES11 SP1 and
eDirectory 8.8 SP7.
I dealt with that issue and the server patched itself to current
versions of SLES, OES and eDirectory.

Unfortunately, after patching the server, iManager no longer works.
The login screen still comes up, but attempts to log result in a 500 or
503 web page error.
Remote Manager is also non-functional, although iMonitor works fine.

Initially, I found that novell-tomcat6 wasn't starting automatically,
but that's no longer the case.
I've no clue as to why. It would manually start without error, but
iManager/Remote monitor are still non-functional. Now it starts
properly, but no change in iManager/Remote Manager.

Since all the server does is hold the partitions and host iManager, I
figured I'd just create another server with iManager installed, add
partition replicas to it, promote the replica to master, and remove
remove my original iManager server from the system.

The problem: Attempts to promote, edit or add any replica results in a
-608 illegal attribute error.
An attempt to put a R/W replica on the new server looks to be stuck.

This is what I see if I look at iMonitor on the original iManager
server.

-15:52:45 CCA3C700 OSync: DCRequest failed, illegal attribute (-608).
15:52:45 CCA3C700 OSync: SYNC: Multiple packet Response for [00008455]
<.NFAUUser.CRCH.CRCHDIR.>, failed, illegal attribute (-608)
15:52:45 CCA3C700 OSync: Sending [000080cc]
<.ldapauth.WEB.CRCH.CRCHDIR.> from Sync Point 4 failed, illegal
attribute (-608)
15:52:45 CCA3C700 OSync: Send Partition Updates completed in Seconds 0,
in MilliSeconds 212 - Total objects 30 Total Changes 533, 1 Packet(s)
Sent
15:52:45 CCA3C700 OSync: Sync - objects: 30, total changes: 533, sent to
server <.manager.Servers.CRCH.CRCHDIR.> for .CRCH.CRCHDIR..
15:52:45 CCA3C700 OSync: Sync - Process: Send updates to
<.manager.Servers.CRCH.CRCHDIR.> for .CRCH.CRCHDIR. failed, illegal
attribute (-608).
15:52:45 CCA3C700 SyncI: **Processing incoming value for attribute
..Transitive Vector.[Attribute Definitions].[Schema Root].
15:52:45 CCA3C700 OSync: rescheduling sync (replica on
..manager.Servers.CRCH.CRCHDIR. in state: new replica ) .CRCH.CRCHDIR.
15:52:45 CCA3C700 OSync: Sync - Partition - Server.CRCH.CRCHDIR.,
..manager.Servers.CRCH.CRCHDIR. Server processed = NO
15:52:52 CE106700 OSync: Adding Server mode psEntry for partition
..CRCH.CRCHDIR. server .manager.Servers.CRCH.CRCHDIR. to PSQueue
15:52:52 CCC3E700 OSync: Skulk Partition - change cache entry count 178
for .CRCH.CRCHDIR.
15:52:52 CCC3E700 OSync: 2015/09/03 15:52:52 Start partition
sync.CRCH.CRCHDIR., server .manager.Servers.CRCH.CRCHDIR. state:[0],
type:[0].
15:52:52 CCC3E700 OSync: Sync - Start outbound sync with (#=5, state=1,
type=1 partition .CRCH.CRCHDIR.) .manager.Servers.CRCH.CRCHDIR..
15:52:52 CCC3E700 OSync: Initial replica Syncup: remoteRxVector has to
be NULL since initial replica syncup should not depend on remote seerver
timestamp
15:52:52 CCC3E700 OSync: Sync - using version 9 on server
<.manager.Servers.CRCH.CRCHDIR.>.
15:52:52 CCC3E700 OSync: Sending to ---->
..manager.Servers.CRCH.CRCHDIR.
15:52:52 CCC3E700 OSync: Sync - sending updates to server
<.manager.Servers.CRCH.CRCHDIR.>.
15:52:52 CCC3E700 OSync: Send Partition Updates started
usingDispatcher=0
15:52:52 CCC3E700 OSync: Received Sync Point for .CRCH.CRCHDIR. from
..manager.Servers.CRCH.CRCHDIR. of type 4
15:52:52 CCC3E700 OSync: ComputeLowestCompareTime 0x0 (1900/00/00
0:00:00, 0, 0)
15:52:52 CCC3E700 OSync: Using Sync Point Type 4, for .CRCH.CRCHDIR. to
..manager.Servers.CRCH.CRCHDIR.
15:52:52 CCC3E700 OSync: Sync - [00008455] <.NFAUUser.CRCH.CRCHDIR.>
[2004/07/14 1:49:24, 4, 1].
15:52:52 CCC3E700 OSync: Sync - [00008456] <.NFAUWorld.CRCH.CRCHDIR.>
[2004/07/14 1:49:25, 4, 1].
15:52:52 CCC3E700 OSync: Sync - [00008457]
<.NISSERV_GATEWAY.CRCH.CRCHDIR.> [2004/07/14 1:49:46, 2, 1].
15:52:52 CCC3E700 OSync: Sync - [0000803a]
<.apchadmn-Administrators.CRCH.CRCHDIR.> [2004/07/14 1:51:04, 3, 1].
15:52:52 CCC3E700 OSync: Sync - [0000803b]
<.sshadmn-Administrators.CRCH.CRCHDIR.> [2004/07/14 1:51:36, 3, 1].
15:52:52 CCC3E700 OSync: Sync - [00008458] <.OpenSSH
Servers.CRCH.CRCHDIR.> [2004/07/14 1:51:36, 3, 36].
15:52:52 CCC3E700 OSync: Sync - [00008459] <.NetWare Servers.OpenSSH
Servers.CRCH.CRCHDIR.> [2004/07/14 1:51:36, 3, 74].
15:52:52 CCC3E700 OSync: Sync - [0000845a]
<.OpenSSH-ExampleServer.NetWare Servers.OpenSSH Servers.CRCH.CRCHDIR.>
[2004/07/14 1:51:36, 3, 112].
15:52:52 CCC3E700 OSync: Sync - [0000845b]
<.apchadmn-Registry.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 3].
15:52:52 CCC3E700 OSync: Sync - [0000845c] <.Apache Group.CRCH.CRCHDIR.>
[2004/07/14 7:06:36, 3, 41].
15:52:52 CCC3E700 OSync: Sync - [0000845d] <.NetWare Group.Apache
Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 79].
15:52:52 CCC3E700 OSync: Sync - [0000845e] <.cgi-bin.NetWare
Group.Apache Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 117].
15:52:52 CCC3E700 OSync: Sync - [0000845f] <.Icons-Directory.NetWare
Group.Apache Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 157].
15:52:52 CCC3E700 OSync: Sync - [00008460] <.Document-Root.NetWare
Group.Apache Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 197].
15:52:52 CCC3E700 OSync: Sync - [00008461] <.System-Root.NetWare
Group.Apache Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 237].
15:52:52 CCC3E700 OSync: Sync - [00008462] <.ldap_module.NetWare
Group.Apache Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 277].
15:52:52 CCC3E700 OSync: Sync - [00008463] <.auth_ldap_module.NetWare
Group.Apache Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 318].
15:52:52 CCC3E700 OSync: Sync - [00008464] <.eDir_module.NetWare
Group.Apache Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 360].
15:52:52 CCC3E700 OSync: Sync - [00008465] <.Manual-Directory.NetWare
Group.Apache Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 402].
15:52:52 CCC3E700 OSync: Sync - [00008466] <.Error-Directory.NetWare
Group.Apache Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 442].
15:52:52 CCC3E700 OSync: Sync - [00008467] <.Mime_Magic_Module.NetWare
Group.Apache Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 482].
15:52:52 CCC3E700 OSync: Sync - [00008468] <.Protect-ht-Files.Apache
Group.CRCH.CRCHDIR.> [2004/07/14 7:06:36, 3, 524].
15:52:52 CCC3E700 OSync: Sync - [00008386] <.Prevention
Laptop.CRCH.CRCHDIR.> [2004/07/14 15:50:46, 1, 1].
15:52:52 CCC3E700 OSync: Sync - [00008387] <.Prevention
Projector.CRCH.CRCHDIR.> [2004/07/14 15:52:09, 1, 1].
15:52:52 CCC3E700 OSync: Sync - [00008388] <.Prevention Digital
Camera.CRCH.CRCHDIR.> [2004/07/14 15:52:50, 1, 1].
15:52:52 CCC3E700 OSync: Sync - [00008389] <.Prevention Large Conf
Room.CRCH.CRCHDIR.> [2004/07/15 14:40:43, 2, 1].
15:52:52 CCC3E700 OSync: Sync - [00008469] <.SN:301747074.Novell+NetWare
6 Server+600.CRCH.CRCHDIR.> [2004/07/20 17:34:32, 5, 1].
15:52:52 CCC3E700 OSync: Sync - [0000846a] <.GATEWAY Backup Job
Queue.CRCH.CRCHDIR.> [2004/07/20 17:35:05, 5, 1].
15:52:52 CCC3E700 OSync: Sync - [0000803c] <.WEB.CRCH.CRCHDIR.>
[2004/07/22 20:19:45, 5, 1].
15:52:52 CCC3E700 OSync: Sync - [00008475] <.SMS SMDR
Group.WEB.CRCH.CRCHDIR.> [2004/07/22 20:27:20, 5, 1].
15:52:52 CCC3E700 OSync: Sync - [000080cc] <.ldapauth.WEB.CRCH.CRCHDIR.>
[2004/07/29 23:06:30, 1, 1].
15:52:52 CCC3E700 OSync: DCRequest failed, illegal attribute (-608).-

That gets repeated over and over.

My biggest concern is that I can't create or modify any objects until
this is cleared up.

I tried moving a test user on the new iManager installation and got a
message that the move request failed.
I tried the same in C1 and got a little more info:
(Error -654) Another partition operation is currently taking place.

I've created an SR with Novell, but thought I'd also look to the forums
for advice in fixing it.
The new server can be destroyed, but I don't think that will fix the
underlying issue.


--
gathagan
------------------------------------------------------------------------
gathagan's Profile: https://forums.netiq.com/member.php?userid=2788
View this thread: https://forums.netiq.com/showthread.php?t=54229

Labels (1)
0 Likes
5 Replies
Highlighted
Knowledge Partner
Knowledge Partner

Re: iManager no longer working after server patch

I'd probably destroy the new server, put the old server back as the Master
replica, and then focus on iManager, specifically using the catalina.out
file, an iManager Workstation instance (new instance that runs on your
workstation to rule out the server, eDirectory, etc.), and the iManager
forum (another one like this, but for iManager). That Remote Manager does
not work seems odd, especially if iMonitor does work, but there are also
OES forums which may help you better on that front if that is the only
thing left after everything else is working.

Start with iManager Workstation if you can get your tree back to the
previous state, but that may take a bit of work at this point. Be sure
bidirectional, unsolicited communications are allowed between all servers
on the appropriate (524 by default) TCP and UDP ports (TCP mostly). If a
firewall or router somewhere blocks traffic in one direction, it may lead
to schema's eventual inability to fully synchronize, particularly with
this new box.

--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Highlighted
Honored Contributor.
Honored Contributor.

Re: iManager no longer working after server patch


Thanks for the quick reply, ab

Just to clarify: the old server still holds the Master replicas of my
partitions.
The R/W replica I attempted to add to the new server still shows as
being in the "new" state when I look at the partition in other iManager
installations and C1.

Tech support had me run -ndsrepair -T,ndsrepair -E- and -ndsrepair -C
-Ad -a- on the server holding the master replicas.
The log shows a -625 error in the replica list for the new server.
The firewalls on both servers are disabled.

On what may be a related note, I have unsuccessfully tried to put a R/W
replica of the tree's root partition on another OES 11 server in the
recent past (February 2015).
Placing a replica of the main context's partition on the same server was
successful.
I'm not sure whether or not that is related to this problem.

iManager is certainly the lesser problem, since I have it installed
other servers.

I've not yet heard back from tech support.


--
gathagan
------------------------------------------------------------------------
gathagan's Profile: https://forums.netiq.com/member.php?userid=2788
View this thread: https://forums.netiq.com/showthread.php?t=54229

0 Likes
Highlighted
Knowledge Partner
Knowledge Partner

Re: iManager no longer working after server patch

In article <gathagan.72pl7k@no-mx.forums.microfocus.com>, Gathagan
wrote:
> The log shows a -625 error in the replica list for the new server.


That says the servers don't see each other.
See if regular pings get through between all the servers in question.
Do you happen to have any NetWare boxes still with IPX on them?



Andy Konecny
KonecnyConsulting.ca in Toronto
----------------------------------------------------------------------
Andy's Profile: https://forums.netiq.com/member.php?3330-konecnya
If you find a post helpful, please show your appreciation by clicking
on the star below it. Thanks!

___
“i’ve sworn an oath of solitude til the blight is purged from these lands”
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
Highlighted
Knowledge Partner
Knowledge Partner

Re: iManager no longer working after server patch

On 09/04/2015 01:15 PM, gathagan wrote:
>
> Just to clarify: the old server still holds the Master replicas of my
> partitions.
> The R/W replica I attempted to add to the new server still shows as
> being in the "new" state when I look at the partition in other iManager
> installations and C1.


Good to know, thanks.

> Tech support had me run -ndsrepair -T


Time sync matters, especially on new box.

> ndsrepair -E-


Synchronization is critical, so here is probably the best place to see
those -625s.

and -ndsrepair -C
> -Ad -a- on the server holding the master replicas.


Checking for obituaries seems silly, but might as well be thorough.

> The log shows a -625 error in the replica list for the new server.
> The firewalls on both servers are disabled.


The best thing to probably do, then, is use a tool like netcat to see if
access to the other box's TCP 524 port can work. For example, if you see
all other servers reporting a -625 to one server, specifically check any
firewalls/routers/etc. around that box. If you see -625s all over, then
something on your network is probably blocking access to TCP 524. If you
do not have netcat, add it (zypper in netcat), and when you do, this
command on one server to check access to the remote server:


netcat -zv remote.server.address.here 524


--
Good luck.

If you find this post helpful and are logged into the web interface,
show your appreciation and click on the star below...
0 Likes
Highlighted
Knowledge Partner
Knowledge Partner

Re: iManager no longer working after server patch

What might be 'just' coincidental timing, your server certs might have
expired which would really trip things up.
To test, compare trying to get to Remote Manager on both port 8008 and
8009. If certs, I imagine you will get further with port 8008

other is if ldap is listing on port 636 or not. If its certs are
expired it generally doesn't start up listening to port 636

If you have other OES boxes, check their iManagers. If iManager wasn't
installed on them, it might be most effective to have it installed on
some just as a backup. I've had individual instances of iManager mess
up enough that having it configured and ready on other servers has been
a real time saver when needed the most.


Andy Konecny
KonecnyConsulting.ca in Toronto
----------------------------------------------------------------------
Andy's Profile: https://forums.netiq.com/member.php?3330-konecnya
If you find a post helpful, please show your appreciation by clicking
on the star below it. Thanks!

___
“i’ve sworn an oath of solitude til the blight is purged from these lands”
Andy of Konecny Consulting in Toronto
Knowledge Partner Profile
If you find a post helpful, click the Like button below. Thanks!
0 Likes
The opinions expressed above are the personal opinions of the authors, not of Micro Focus. By using this site, you accept the Terms of Use and Rules of Participation. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.) and Hewlett Packard Enterprise Company. As of September 1, 2017, the Material is now offered by Micro Focus, a separately owned and operated company. Any reference to the HP and Hewlett Packard Enterprise/HPE marks is historical in nature, and the HP and Hewlett Packard Enterprise/HPE marks are the property of their respective owners.