Table of Contents

NetIQ eDirectory maintenance how-to

This is a checklist needed do to in order to keep your eDirectory healthy and happy. I do these regularly.

Operating system checks

Basic checks and updates.

uptime
date
df -h
yum update #rhel / centos
zypper ref; zypper up #suse

Check for errors in system logs.

journalctl -p err -b

Other log checks as necessary including eDirectory / IDM logs.

Version check and time sync

Check that time is in sync on all of the replicas.

ndsrepair -T

Server to server synchronization

Fire up ndstrace, give following commands and see if any red errors come up.

#enables screen and file logging to the ndstrace.log file
SET NDSTRACE=ON
#turns off all preset filters
SET NDSTRACE=NODEBUG
#enables filtering of synchronization traffic
SET NDSTRACE=+SKLK
#initiates synchronization between file servers
SET NDSTRACE=*H

If unsure of the output do

less -iR /var/opt/novell/eDirectory/log/ndstrace.log

Replica synchronization

View the replica state for each partition with

ndsrepair -E

View replica configurations for each replica with command

ndsrepair -P

Obituaries and external references

View obituaries with command

ndsrepair -C -Ad -A

Check my other document about handling stuck obituaries if you find ones.

Schema synchronization

Again fire up ndstrace and give folloing commands

#enables screen and file logging to the ndstrace.log file
SET NDSTRACE=ON
#turn off all preset filters
SET NDSTRACE=NODEBUG
#enables filter of schema synchronization traffic
SET NDSTRACE=+SCMA
Additionally you can look at the schema-related operations for both inbound and outbound by entering:
SET NDSTRACE=+SCMD
#initiates synchronization of all schemas
SET NDSTRACE=*SS

Repair local database

Issue local repair at each replica, one at a time.

ndsrepair -R

Check backups

Check that your ndsbackup is in operation

crontab -l
ls -alt <backup-dir>

Reboot and check

If need do a reboot

ndsmanage stopall && reboot

And check that drivers are active by using iManager, ndstrace, log files or dxcmd

dxcmd -host 127.0.0.1 -user admin.dn

Comments and suggestions

If you find bugs above please comment below. Also feel free to rate.