Novell ACCESS MANAGER 3.1 SP1 - EVENT CODES Manual page 61

Event Code Message
200104017 Error getting CRL/OCSP.
200104018 Could not verify CRL
signature.
200104019 Could not find Key for this
server.
200104020 CRL/OCSP is too old; New
version already available.
200104021 No Issuer Certificate found.
200104022 Error getting OCSP
Response.
200104023 Error processing OCSP
Response.
Remedy
Type: ERROR:NIDP:USERAUTH:017
Cause: Could not get to the CRL/OCSP URL for
validations.
Action: Make sure the CRL/OCSP URLs are
accessible Or disable validations in administration.
Additionally, can define a different CRL/OCSP URL in
the administration tool which the X509Class can also
use for validations.
Type: ERROR:NIDP:USERAUTH:018
Cause: Could not verify signature on the fetched CRL
Action: Make sure the CRL server public key/certificate
is in NIDP/ESP trust store.
Type: ERROR:NIDP:USERAUTH:019
Cause: Could not find Key/Cert for NIDP/ESP server
towards authenticating to OCSP server
Action: Make sure the NIDP/ESP Signing keystore has
appropriate Key/Cert in it.
Type: ERROR:NIDP:USERAUTH:020
Cause: During validations, the fetched CRL Or OCSP
is stale. Newer version will be available
Action: In case of CRLs, next attempt to fetch CRL
should get a fresh CRL after purging the cached one. In
case of OCSP, notify the OCSP server administrator.
Type: ERROR:NIDP:USERAUTH:021
Cause: Issuer of user certificate not found which is
required for OCSP validations
Action: Make sure the issuer of user/client certificate is
either found in certificate-chain or in NIDP/ESP trust
store.
Type: ERROR:NIDP:USERAUTH:022
Cause: Could not get OCSP Response from the OCSP
server
Action: Make sure its going to the right OCSP server.
Type: ERROR:NIDP:USERAUTH:023
Cause: OCSP response could not be processed
Action: Make sure its going to the right OCSP server
and that it is operating correctly.
Identity Server (001) 61