• Workshop Session at the TTP EMEA Munich: eDirectory 9.3: A Sneak Peak into the most secure version yet, Feb 25th

    Feb 25th, 11.30 - 12.15 at OpenText office in Grasbrunn, Munich Speaker: Shalabh Garg Abstract: Join us for an exclusive walk through of the latest security updates in eDirectory 9.3. Discover what's changing, why it matters, and how to effectively…
  • Workshop Session at the TTP EMEA Munich: Identity Roadmap, Feb 25th

    Feb 25th, 09.00 - 10.00 at OpenText office in Grasbrunn, Munich Speaker: Shalabh Garg, Naga Prasad Abstract: Discover the new features and releases for Identity Products (ILM,IDM, eDirectory, Identity Console) …
  • Half Day Hands-On Workshop at TTP EMEA Munich: Domain Services for Windows - Upgrade and Troubleshooting, Feb 28th

    Feb 28th, 09.00 to 12.30 at OpenText office in Grasbrunn, Munich Instructor: Mike Hunsche, Girish K S Abstract: Learn troubleshooting upgrade DSfW issues and best practices in this half-day hands-on workshop Register now!
  • Knowledge Document: Assign a default Server IP Address to Identity Console (IDC)

    By default Identity Console does not store the last used Server IP Address / FQDN or allow to define a default. This is to show how a default server can be set manually. Environment Identity Console 1.7.2 Identity Console 1.8 Situation…
  • Add the possibility to read the "creation/modification timestamp of an attribute value" for any object to eDirAPI

    Customer would like to get the creation or modification timestamp for requested Attributes via eDirAPI. Background: If attributes have been added/changed to an object it would be nice to see the timestamp when the attribute has been added/changed. For…
  • Knowledge Document: DSAgentOpenLocal Failed, Illegal Transaction Operation (-772)

    The eDirectory service starts, and the instance shows as "Active," but the NCP port (524) is not listening. The following error is seen in the ndsd.log file: DEBUG: DSAgentOpenLocal failed, illegal transaction operation (-772). Environment…
  • Knowledge Document: Unable to start eDirectory after upgrading RHEL from 7.9 to 8.10

    The following error occurs while trying to start eDirectory: Failed to connect to bus: No such file or directory Environment Identity Manager 4.8.6 for Linux Identity Manager 4.8.7 for Linux Identity Manager 4.9 for Linux eDirectory 9…
  • Knowledge Document: Identity Console Workstation on Windows is restricted to listen on port 9000 only

    Identity Console Workstation on Windows is restricted to listen on port 9000 only. This behavior is different from Linux, Container or Azure Kubernetes Services based installation, as it's possible to configure a different listener port in them. …
  • Knowledge Document: What are the minimum eDirectory rights to gather information from cn=monitor via LDAP

    This article should provide information about the needed eDirectory rights for a non-admin account to gather monitoring information of an eDirectory server. Environment eDirectory 9.2.x Identity Manager 4.8.x Situation Customer might…
  • eDirectory Services start with after restore server

    Hi Team. After restore a snapshot from server and restar the O.S the nds services start with errors. We try to start using systemctl start ndsdtmpl-etc-opt-novell-eDirectory-conf-nds.conf@-etc-opt-novell-eDirectory-conf-env.service and when check…
  • Knowledge Document: ndsconfig return value = 65 while running ndsconfig upgrade command

    Environment eDirectory 9.2.6 Situation Unable to run the ndsconfig upgrade command. Get "ndsconfig return value = 65" error. ndsconfig upgrade [1] Instance at /etc/opt/novell/eDirectory/conf/nds.conf: ipedir010.O=services.IPLDAP Upgrading NetIQ…
  • Knowledge Document: eDirectory objects with objectclass “Unknown”

    eDirectory objects with BaseClass “Unknown” were identified either in iMonitor or through an LDAP tool. Environment eDirectory 9.2.6 eDirectory 9.2.7 eDirectory 9.2.8 eDirectory 9.2.9 Situation eDirectory objects with BaseClass “Unknown…
  • Knowledge Document: Blocking of eDirectory by DSAVRSetOperation due to prolonged DIB Write Log

    The eDirectory system is experiencing a significant synchronization issue, indicated by a high ring delta exceeding 2 hours. Products eDirectory (NetIQ eDirectory), Identity Manager (IDM) Environment eDirectory 9.2.6 eDirectory…
  • Knowledge Document: Cannot change master replica in eDirectory 9.x environment

    In the case of eDirectory 8.8 or older, user can easily change master replica to another eDirectory server in the tree. However, eDirectory from the version 9.0 has Enhanced Background Authentication (EBA) feature. This EBA may get in the way to be able…
  • Resetting Inherited Rights Filter in eDirectory

    Hi there, I was testing the Inherited Rights Filter in a LAB environment using Identity Console, because I wanted to restrict the access that users have by default to the AppConfig object inside the User Application Driver; this way, not all users would…
  • Knowledge Document: Unable to create a Certificate Authority

    Both ndsconfig upgrade and iManager fails to create a new Certificate Authority Symptom: An ndstrace with PKIA tag active shows: "Exiting pkiInstall::CreateOrganizationalCA, -708" The -708 error was also observed in ndsd.log ndsconfig…
  • Knowledge Document: eDirectory shows two master replica servers for the same partition

    eDirectory shows two Master replica servers for the same partition while there should be only one per partition environment: eDirectory Symptom: eDirectory partition shows a replica ring with 2 master servers Cause: This can be caused…
  • Workshop session at TTP Asia 2024, Bangalore: eDirectory 9.3: A Sneak Peak into the most secure version yet, Dec 2nd

    14.15 to 15.15 S-6 Session: eDirectory 9.3: A Sneak Peak into the most secure version yet Speaker: Harinath Reddy, Lead Product Manager, OpenText Abstract: Join us for an exclusive walkthrough of the latest security updates in eDirectory 9.3…
  • Negative number of remaining grace logins

    Hi, recently I came across an issue, where a user had -23 "Login grace remaining". She was able to log in anywhere using her credentials. OES client dropped an error message during login, that the she needs a password change, but she just ignored it…
  • iManager is not getting up - unable to find valid certification path to requested target

    I am unable to access iManager. I tried stopping and starting then trying to access iManager but I am getting a blank white page on the browser. In the log, I am getting errors, attached logs for your reference. 23-Sep-2024 09:58:36.333 INFO [main…
  • It appears our DNS server is accepting recursive DNS queries that are being abused to create denial of service attacks

    Hello, We have been notified that our DNS server is accepting recursive DNS queries that are being abused to create denial of service attack. I am not seeing anything obvious in my DNSDHCP tool on how to resolve this. We are running SLES 15sp4 and…
  • Workshop Session at the TTP EMEA, Amberg, Germany : Fortifying the Foundations: The Imperative of Auditing and Securing eDirectory and NSS File Systems, May 13th

    The presentation will cover: Data Integrity and Confidentiality, Meeting Compliance Requirements, Audit Trails and Monitoring, Security Vulnerabilities, Identity and Access Control Management, Preventing Unauthorized Access. Location: OTH Amberg-Weiden…
  • Identity Console: Create a permanent configuration setting for the amount of items to show in navigation frames.

    In pages with a list of subordinate objects to show you are able to change the amount of subordinate objects shown on the page but the setting is not persistent for the active logged in Identity Console session. The modified setting will always be reset…
  • CEF Auditing should support audit of SCHEMA changes

    In Novell Auditing there is an option to audit schema changes https://www.netiq.com/documentation/edirectory-92/edir_admin/data/bydeiav.html#b1191632 here you can see there is an option to log events of type Schema , we would like to do the same thing…
  • Bulk deletion of users

    Hi, I'm taking over the main administration of the domain for the college I work in, I've come across over 14,500 inactive accounts from the last 6/7/8/? years and want to delete them. These accounts are under the main tree but under different OU…