Pegasi Wiki

This wiki acts as a memo for our own work so why not share them? Feel free to browse and use out notes and leave a note while at it.

NetIQ eDirectory maintenance how-to

This is a checklist needed do to in order to keep your eDirectory healthy and happy. I do these monthly.

Operating system checks

Basic checks and updates.

df -h
yum update #rhel / centos
zypper ref; zypper up #suse

Log checks, journalctl and eDirectory / IDM logs.

(Something else too?)

Version check and time sync

Check that time is in sync on all of the replicas.

ndsrepair -T

Server to server synchronization

Fire up ndstrace, give following commands and see if any red errors come up.

#enables screen and file logging to the ndstrace.log file
SET NDSTRACE=ON
#turns off all preset filters
SET NDSTRACE=NODEBUG
#enables filtering of synchronization traffic
SET NDSTRACE=+SKLK
#initiates synchronization between file servers
SET NDSTRACE=*H

If unsure of the output do

less -iR /var/opt/novell/eDirectory/log/ndstrace.log

Replica synchronization

View the replica state for each partition with

ndsrepair -E

View replica configurations for each replica with command

ndsrepair -P

Obituaries and external references

View obituaries with command

ndsrepair -C -Ad -A

Check my other document about handling stuck obituaries if you find ones.

Schema synchronization

Again fire up ndstrace and give folloing commands

#enables screen and file logging to the ndstrace.log file
SET NDSTRACE=ON
#turn off all preset filters
SET NDSTRACE=NODEBUG
#enables filter of schema synchronization traffic
SET NDSTRACE=+SCMA
Additionally you can look at the schema-related operations for both inbound and outbound by entering:
SET NDSTRACE=+SCMD
#initiates synchronization of all schemas
SET NDSTRACE=*SS

Repair local database

Issue local repair at each replica, one at a time.

ndsrepair -R

Check backups

Check that your ndsbackup is in operation

crontab -l
ls -alt <backup-dir>

Comments and suggestions

If you find bugs above please comment below. Also feel free to rate.

 stars  from 0 votes

Leave a comment

Enter your comment:
O P A​ B O
 

  //check if we are running within the DokuWiki environment if (!defined("DOKU_INC")){ die(); } //place the needed HTML source codes BELOW this line