IBM Security Directory Server: Troubleshooting Guide Operation Times out
Total Page:16
File Type:pdf, Size:1020Kb
IBM Security Directory Server Version 6.3.1 Troubleshooting Guide GC27-2752-01 IBM Security Directory Server Version 6.3.1 Troubleshooting Guide GC27-2752-01 Note Before using this information and the product it supports, read the general information under “Notices” on page 147. Edition notice Note: This edition applies to version 6.3.1 of IBM Security Directory Server licensed program (product number 5724-J39 ) and to all subsequent releases and modifications until otherwise indicated in new editions. Contents Figures ..............vii Installation with the installation wizard ....28 Uninstallation with the installation wizard . 32 Tables ...............ix Chapter 5. Migration issues ......33 About this publication ........xi Migration log files ............33 Kerberos service name...........33 Access to publications and terminology .....xi Database instance or database in configuration file Accessibility ..............xii but no longer on system ..........33 Technical training ............xiii Format of backed-up schema files is incorrect . 34 Support information ...........xiii ibm-slapdPlugin entry in configuration file changed 34 Statement of Good Security Practices .....xiii Considerations for migration ........34 Chapter 1. Introduction to problem Chapter 6. Instance creation and determination and troubleshooting . 1 configuration issues .........37 Directory server overview ..........1 Instance creation overview and common errors . 37 Built-in troubleshooting features ........1 Instance creation overview ........37 Tools for troubleshooting a directory server instance 1 Cannot create another instance because of invalid Error Message Reference ..........2 IP address ..............38 Information about troubleshooting .......2 idssethost command does not recognize second IP address ..............38 Chapter 2. Utilities for logging .....5 Two directory instances use the same port number...............39 Chapter 3. Other diagnostic tools . 11 Instance creation fails on Windows 2003 ....39 Core file generation............11 Administration server fails to start after instance Server debug mode............12 creation...............40 Tracing and debugging LDAP client APIs ....14 Configuration overview and common errors . 40 Collecting an ASCII server trace at startup ....15 Configuration overview .........40 Collecting a binary server trace at startup ....16 Incorrect status is returned for files .....41 Collecting performance records dynamically . 17 Existing database instance and database Collecting a dynamic ASCII server trace .....17 configuration failure ..........41 Collecting trace information .........18 Error occurs when Configuration Tool is started Enabling tracing from the command-line interface 18 onAIX...............41 Enabling tracing with Web Administration Tool 20 Configuration programs terminate on AIX . 42 Directory server log and configuration file locations 20 DB2 is not configured properly .......42 Server does not start after configuration file Chapter 4. Installation and attributes are changed ..........42 uninstallation issues.........21 Transaction log is full ..........43 Problems in Configuration Tool windows . 43 Product installation overview ........21 Configuration issues ..........44 Prerequisite software ...........21 Failure during installation of IBM Security Directory Server with corequisite software . 23 Chapter 7. DB2 issues ........47 Mounting of DVD for installation ......23 DB2 license file expired ..........47 The idsldap user and group .........24 Recovery from migration failure in DB2, version 9.1 Installation logs .............25 or later ................48 Logs for embedded WebSphere Application DB2 9.5 installation on Linux operating systems . 48 Server ...............25 DB2 diagnostic information in db2diag.log ....49 DB2 logs on Windows ..........26 SQL0964C error when large amount of data is DB2 logs on AIX, Linux, and Solaris systems . 26 loaded ................49 The log for idslink on AIX, Linux, Solaris, and Instance starts in config-only mode after DB2 fix HP-UX (Itanium) systems.........27 pack .................50 GSKit logs on Windows operating systems . 27 Log files for native packages on AIX, Linux, Solaris, and HP-UX operating systems ....27 Information for troubleshooting installation and uninstallation..............28 iii Chapter 8. Web Administration Tool Consumer server that does not support SHA-2 79 and application server issues .....51 Corruption of data entered in the Web Chapter 10. Performance issues ....81 Administration Tool ...........51 Identification of performance problem areas . 81 Migration of files before you patch or migrate Web Adding memory after installation on Solaris systems 81 Administration Tool ...........52 Setting the SLAPD_OCHANDLERS environment Additional login panels fail .........52 variable on Windows ...........82 Web Administration Tool in inconsistent state . 53 DB2 rollbacks and isolation levels .......82 Incorrect language is displayed in Web Default value of LOGFILSIZ must be increased . 83 Administration Tool ...........53 Audits for performance profiling .......83 Microsoft Internet Explorer browser problems . 54 HTML special characters are not displayed correctly 54 Chapter 11. Information for Web Administration Tool requires IBM JDK on troubleshooting in various scenarios . 87 Domino server .............54 Server is not responding ..........87 Templates with object class that has no attributes . 55 Memory leak is suspected .........87 Non-editable fields are displayed as editable . 55 SSL communications return errors .......88 Back and Forward buttons not supported ....55 Recovering data from a directory server instance Log on issues in Internet Explorer .......55 where encryption seed value is lost ......88 Web Administration Tool issues on Windows Server Attribute encryption to be avoided for older 2003 .................56 versions ...............89 Web Administration Tool logon fails for new user 56 Character sets larger than 7-bit ASCII in passwords 90 Web Administration Tool backup creates another Premature expiry of user password ......90 folder ................57 Troubleshooting the limitation in the idssethost Embedded WebSphere Application Server - Express command ...............90 onAIX................57 Environment with SNMP agent configured ....92 Configuration update to directory server instance Chapter 9. Replication issues .....59 after reinstallation ............92 Replication overview ...........59 Tombstone entries in a directory server .....93 Diagnosis of replication errors ........59 Directory server instance backup .......95 Sample replication topology ........59 Configuration of preaudit records for serviceability 96 Replication status ...........60 Entries that are displayed to root and anonymous Viewing replication errors with the Web users ................97 Administration Tool ..........62 Directory server instance is restored to latest Viewing replication errors with the consistent state .............97 idsldapsearch command .........63 Online backup and restore limitation ......98 Lost and found log ...........65 Log management servers fails to stop......99 Write and replicated write messages .....65 Instance does not start and returns error ibm-replicaSubentry object class in a replication GLPCRY007E .............100 topology ..............65 Command-line utilities to view replication status 66 Chapter 12. Interoperability .....101 IBMSLAPD_REPL_UPDATE_EXTRA_SECS Interoperability with Novell eDirectory Server . 101 environment variable ..........67 Interoperability with Microsoft Active Directory 101 Information for troubleshooting replication ....68 Replicated suffix............68 Chapter 13. Known limitations and Verify that suffixes and replication agreements exist ................69 general troubleshooting .......103 Peer-to-peer replication error .......69 Known limitations............103 Insufficient access error .........70 IBM Installation Manager preinstallation Replication topology extended operation fails summary page shows existing software for with result code 80 ...........70 installation .............103 Replication command-line interface error . 71 Command-line utilities allow an option to be Entries in LDIF file are not replicated .....71 entered more than once .........103 Problem with cn=ibmpolicies subtree ....72 Invalid data entered on command-line utilities 103 Master server becomes unstable or stops . 73 No locking mechanism for conflicting Stopping a multithreaded replication supplier . 74 commands .............104 Synchronizing directory servers in a replicated Unable to drop database.........104 environment .............77 Partial replication ...........104 Multimaster configurations ........78 Replication is not initiated ........105 Options for replication filter and replication Migration of an instance from version 6.1 or method are not available .........79 later to version 6.3.1 ..........105 Alias dereferencing does not work .....106 iv IBM Security Directory Server: Troubleshooting Guide Operation times out ..........106 Error opening slapd.cat file on Windows Instance stops when nCipher cryptographic systems ..............118 hardware client is restarted........106 DSML file client produces error ......118 Error with idsldapdiff tool query .....106 Non-default log files need valid path ....118 Synchronization of entries with idsadsrun utility Null searches retrieve entries of deleted suffixes 119 fails ...............107 Error occurs with the idsldapsearch