Summary
While extending schema, the following error code -669 can be seen.

Products
eDirectory (NetIQ eDirectory)

Environment
NetIQ eDirectory 9.1.x
NetIQ Identity Manager (IDM) 4.7.x

Situation
When executing "ndssch -h localhost -t <YOUR_TREE> <ADMIN.FDN> rfc2307-usergroup.sch", the error code (-669 can be seen.

When executing "ndslogin admin.sa.system" command, the error code (-641) can be seen..

Cause
This issue was due to EBA has been turned on.

Resolution
Please follow the steps below to disable EBA on all the active eDir servers.

1. Add "DISABLE_EBA=1" line in the env file at /etc/opt/novell/eDirectory/conf folder.
2. Restart eDirectory service.

You can check if EBA has been enabled or disabled with the steps below.
1. Run "ndsconfig get|grep eba" command
2. If it shows "n4u.server.eba_enable=1", EBA has been enabled.
3. If it shows "n4u.server.eba_enable=0", EBA has been disabled.

Additional Information
Please refer to the article: "How to disable Enhanced Background Authentication ( EBA ) on an eDirectory 9.0 server" for details.
https://support.microfocus.com/kb/doc.php?id=7017232

Knowledge Base Article Link

URL Name
KM000009863