• State Not Answered
  • Replies replies
    7
  • Subscribers subscribers
    16
  • Views views
    298
  • Users 0 members are here
  • Locked Locked
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Negative number of remaining grace logins

MigrationDeletedUser

After a user's password expires, we have recently been experiencing a
problem where the remaining grace logins eventually ends up being a
negative number. The "biggest" we have seen so far is -16, but more
commonly we see -2, etc. This has happened to a significant number of
users.

An associated problem is that the remaining grace logins sometimes drops
by several increments all at once, without any obvious cause.

Any idea what might be going on?

The primary version of eDirectory we are running is v8.8 SP7, 20703.00.
A few servers are also running v8.8 SP6, 20608.00, and we have a few
instances of eDirectory running on old NetWare servers, v8.8 SP5,
20506.07. The site which is most frequently experiencing the problem is
running v8.8 SP7 on an OES 11 SP1 server.

Rick P


--
RPummel
------------------------------------------------------------------------
RPummel's Profile: https://forums.netiq.com/member.php?userid=4769
View this thread: https://forums.netiq.com/showthread.php?t=47503

Tags:

Parents
  • 0
    On Mon, 08 Apr 2013 22:44:02 0000, RPummel wrote:

    > After a user's password expires, we have recently been experiencing a
    > problem where the remaining grace logins eventually ends up being a
    > negative number.

    I've seen that occasionally if there are replica sync problems. Each
    replica decrements the counter by one, underflowing zero. It's been a
    while since I've seen it happen, though.

    Are you using NDS passwords or Universal Password?


    --
    --------------------------------------------------------------------------
    David Gersic dgersic_@_niu.edu
    Knowledge Partner http://forums.netiq.com

    Please post questions in the forums. No support provided via email.

  • 0 in reply to 

    As far as I know, we are using NDS passwords, but I suppose it is
    possible that we are using Universal Passwords. How can I find out?

    I am not sure how to identify replica sync errors, if they are
    occurring. Suggestions?

    We have a mix of OES Linux and NetWare servers. I have been nervous
    about the possibility of sync errors since the NetWare servers are
    running eDirectory 8.8 SP5 while the Linux servers are using a mix of
    v8.8 SP6 and v8.8 SP7. However, I have not had anything concrete to base
    my nervousness on.

    Rick P

    dgersic;228335 Wrote:
    >
    >
    > I've seen that occasionally if there are replica sync problems. Each
    > replica decrements the counter by one, underflowing zero. It's been a
    > while since I've seen it happen, though.
    >
    > Are you using NDS passwords or Universal Password?


    --
    RPummel
    ------------------------------------------------------------------------
    RPummel's Profile: https://forums.netiq.com/member.php?userid=4769
    View this thread: https://forums.netiq.com/showthread.php?t=47503

  • 0 in reply to 
    On Wed, 10 Apr 2013 18:44:02 0000, RPummel wrote:

    > As far as I know, we are using NDS passwords, but I suppose it is
    > possible that we are using Universal Passwords. How can I find out?

    The default, if you've done nothing, is to use NDS passwords.

    The better answer, is to use Universal Password, which uses NMAS. To
    enable this, you'd create a password policy in your Security container,
    then assign it (tree wide = the "login policy" object in the Security
    container). You'll find more on this in the eDirectory docs.


    > I am not sure how to identify replica sync errors, if they are
    > occurring. Suggestions?

    iMonitor. The first page you see shows a chart of Replicas by type,
    Partitions (count) and Errors.


    > We have a mix of OES Linux and NetWare servers. I have been nervous
    > about the possibility of sync errors since the NetWare servers are
    > running eDirectory 8.8 SP5 while the Linux servers are using a mix of
    > v8.8 SP6 and v8.8 SP7. However, I have not had anything concrete to base
    > my nervousness on.

    That's fine. Personally, I'd bring all of them up to the latest version
    available, but those are recent enough that I wouldn't worry too much
    about it.


    --
    --------------------------------------------------------------------------
    David Gersic dgersic_@_niu.edu
    Knowledge Partner http://forums.netiq.com

    Please post questions in the forums. No support provided via email.

Reply
  • 0 in reply to 
    On Wed, 10 Apr 2013 18:44:02 0000, RPummel wrote:

    > As far as I know, we are using NDS passwords, but I suppose it is
    > possible that we are using Universal Passwords. How can I find out?

    The default, if you've done nothing, is to use NDS passwords.

    The better answer, is to use Universal Password, which uses NMAS. To
    enable this, you'd create a password policy in your Security container,
    then assign it (tree wide = the "login policy" object in the Security
    container). You'll find more on this in the eDirectory docs.


    > I am not sure how to identify replica sync errors, if they are
    > occurring. Suggestions?

    iMonitor. The first page you see shows a chart of Replicas by type,
    Partitions (count) and Errors.


    > We have a mix of OES Linux and NetWare servers. I have been nervous
    > about the possibility of sync errors since the NetWare servers are
    > running eDirectory 8.8 SP5 while the Linux servers are using a mix of
    > v8.8 SP6 and v8.8 SP7. However, I have not had anything concrete to base
    > my nervousness on.

    That's fine. Personally, I'd bring all of them up to the latest version
    available, but those are recent enough that I wouldn't worry too much
    about it.


    --
    --------------------------------------------------------------------------
    David Gersic dgersic_@_niu.edu
    Knowledge Partner http://forums.netiq.com

    Please post questions in the forums. No support provided via email.

Children
No Data

Resources

Support
Documentation
Learning Services
Partner Programs
Privacy
Compliance
Help
Company
Privacy Policy
Terms of Use
Cookies Preferences
Accessibility
Anti-Slavery Statement
Support
Contact Us
Careers
Code of Business Conduct and Ethics
The opinions expressed above are the personal opinions of the authors, not of OpenText. By using this site, you accept the Terms of Use. Certain versions of content ("Material") accessible here may contain branding from Hewlett-Packard Company (now HP Inc.), Hewlett Packard Enterprise Company, or Micro Focus. As of January 31, 2023, the Material is now offered by OpenText, a separately owned and operated company. Any reference to the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks is historical in nature and the HP, Hewlett Packard Enterprise/HPE, and Micro Focus marks are the property of their respective owners.