Hello Mathias, hello Greiner.

I know it´s pretty old and I wanted to update the System today to 2023 or 2024. 

I deleted the Objects several times and also the CA. I will not geting an error, it just won´t create new certificates. Even in iManager manually or in eh console by ndsconfig upgrade. The ca an the sas objects are recrated fine.

These are the result of ndsconfig:

Extending schema... Done
For more details view schema extension logfile: /var/opt/novell/eDirectory/log/schema.log

Configuring HTTP service... Done
Configuring LDAP service... Done
Configuring SNMP service... Done
Configuring SAS service... Done
Associating certificate with the NCP server object... INFO: Server is already associated with a certificate.
Done
Configuring NMAS service... Done
Configuring SecretStore...
INFO: SecretStore extensions have already been added to the server.Done
Configuring LDAP Server with default SSL CertificateDNS certificate...
INFO: LDAP Server is already associated with SSL CertificateDNS certificate.
Done
Triggering the 'External Reference Check' process... Done

The interessting thing is, that the eDir is working and ldap as well even it has an outdated certificate.

Best Peter

So you've deleted the "SSL CertificateDNS" for the server in question, ran "ndsconfig upgrade" and get the message "INFO: LDAP Server is already associated with SSL CertificateDNS certificate"? Is there a new eDir object for "SSL CertificateDNS"?

yes

And what are the start and end dates if this certificate and of the CA?

2017 to 2027 or with the new one to 2034

That's the CA. And what about "SSL CertificateDNS"?

the ssl original 2017 to 2019 and I have no new one. 

I've asked above "Is there a new eDir object for "SSL CertificateDNS"? And you've answered "yes"...

Sorry I haven´t red it correctly I´m a bit unconcentrated after this day ;-). No new certifiactes are created at all. I´ved opened a call at opentext and hope that they will support me with this old system, otherwise it is just a groupwise server. I will move it to a new server and if I have a eDir Problem at this system I will install juas a sles and bind groupwise to the Active Directory (that´s plan C). Thanks for your help till now. I will go offline for today. 

Cheers Peter

Sorry I haven´t red it correctly I´m a bit unconcentrated after this day ;-). No new certifiactes are created at all. I´ved opened a call at opentext and hope that they will support me with this old system, otherwise it is just a groupwise server. I will move it to a new server and if I have a eDir Problem at this system I will install juas a sles and bind groupwise to the Active Directory (that´s plan C). Thanks for your help till now. I will go offline for today. 

Cheers Peter

If they are unable / unwilling to help i can have a look at the box. Just post here or send a PM.

Thanks for the offer, I will try to give you a call on thuesday, enjoy your eastertime.

...working the entire weekend. Three consecutive days of downtime, luxury.