aferris

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2016-05-16
19:37
2300 views
ndsconfig upgrade fails to recreate certs
iPrint Appliance 1.1.0.407-HP419
Our self signed certs expired last week so I followed the "ndsconfig upgrade plus unload and reload ldap" method.
it didn't work:
Configuring SAS service
ERROR 111: Unable to connect to local server.Unable to configure LDAP server with default SSL CertificateDNS certificate. Use ConsoleOne/ldapconfig to associate SSL CertificateDNS certificate with LDAP server
Server is Down.
ERROR 2: Unable to unload dsi module - No such file or directory.
The instance at /etc/opt/novell/eDirectory conf/nds.conf is upgraded sucessfully
ERROR: ndsconfig return value = 100.
I've reverted back to the snapshot I took so we're still running with a working LDAP server. But I would like to update my certs so we can see printer status pages. I haven't applied the latest 1.1 patch (patch 5) yet. Is there anything I can do to make this successfully complete?
thanks,
Andrew
Our self signed certs expired last week so I followed the "ndsconfig upgrade plus unload and reload ldap" method.
it didn't work:
Configuring SAS service
ERROR 111: Unable to connect to local server.Unable to configure LDAP server with default SSL CertificateDNS certificate. Use ConsoleOne/ldapconfig to associate SSL CertificateDNS certificate with LDAP server
Server is Down.
ERROR 2: Unable to unload dsi module - No such file or directory.
The instance at /etc/opt/novell/eDirectory conf/nds.conf is upgraded sucessfully
ERROR: ndsconfig return value = 100.
I've reverted back to the snapshot I took so we're still running with a working LDAP server. But I would like to update my certs so we can see printer status pages. I haven't applied the latest 1.1 patch (patch 5) yet. Is there anything I can do to make this successfully complete?
thanks,
Andrew
7 Replies
aferris

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2016-05-16
19:46
One other thing to mention is that I didn't run ndsconfig from the full path which I see now would be a good idea.
Andrew
Andrew
Bobert

Micro Focus Frequent Contributor
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2016-05-17
03:32
This knowledgebase article will step you through the process. There are more steps involved than the steps you took. You can watch the video by clicking the link in the article. Under additional information there is another process you may wish to follow if you choose. Here is the link to the article:
https://www.novell.com/support/kb/doc.php?id=7016720
https://www.novell.com/support/kb/doc.php?id=7016720
aferris

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2016-05-17
17:52
Thanks for info. My original problem was from not running ndsconfig from /opt/novell/eDirectory/bin.
Andrew
Andrew
aferris

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2016-06-01
16:57
I have followed TID 7016720 and re-created valid certs that expired in June 2018. If I try and manage a Print or the PrintManager I get:
Authorization Required
IPP Error: 0xF0191
HTTP Error: 401
I've been stepping through TID 3897348 and steps 1, 2, and 3 don't seem to apply. Step 4 is edit /etc/opt/novell/iprint/httpd/conf/iprint_ssl.conf and change the AuthLDAPURL from DNS to localhost. Is this still the best TID to follow?
thanks,
Andrew
Authorization Required
IPP Error: 0xF0191
HTTP Error: 401
I've been stepping through TID 3897348 and steps 1, 2, and 3 don't seem to apply. Step 4 is edit /etc/opt/novell/iprint/httpd/conf/iprint_ssl.conf and change the AuthLDAPURL from DNS to localhost. Is this still the best TID to follow?
thanks,
Andrew


Knowledge Partner
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2016-06-02
08:39
aferris;2430357 wrote:
I have followed TID 7016720 and re-created valid certs that expired in June 2018. If I try and manage a Print or the PrintManager I get:
Authorization Required
IPP Error: 0xF0191
HTTP Error: 401
I've been stepping through TID 3897348 and steps 1, 2, and 3 don't seem to apply. Step 4 is edit /etc/opt/novell/iprint/httpd/conf/iprint_ssl.conf and change the AuthLDAPURL from DNS to localhost. Is this still the best TID to follow?
thanks,
Andrew
Maybe this: https://www.novell.com/support/kb/doc.php?id=7016906 ?
Thomas
aferris

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2016-06-02
17:41
Thanks for the reply. My iprint_ssl.conf has AuthzLDAPDNAuthoritative already set to off.
Andrew
Andrew
aferris

Absent Member.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Email to a Friend
- Report Inappropriate Content
2016-06-02
17:57
And step 4 of TID 3897348 did fix it - changing from DNS_NAME to localhost. /etc/opt/novell/iprint/httpd/con/iprint_ssl.conf says not to modify the file right at the top. I wonder if 1.1 Patch 4 changed the AuthLDAPNURL value back to DNS_NAME rather than localhost.
anyhow thanks again for all the help,
Andrew
anyhow thanks again for all the help,
Andrew