Novell Public Key Infrastructure Services; Pki Operations Not Working; Ldap Search From Netscape Address Book Fails; Removing The Configuration Of An Edirectory Server That Is Acting As A Treekey Server In A - Novell EDIRECTORY 8.8 SP2 Troubleshooting Manual

Novell Public Key Infrastructure
1 0
Services
Section 10.1, "PKI Operations Not Working," on page 63
Section 10.2, "LDAP Search from Netscape Address Book Fails," on page 63
Section 10.3, "Removing the configuration of an eDirectory server that is acting as a treekey
server in a multiserver tree after having moved the existing eDirectory objects to a different
server fails with the error code for Crucial Replica.," on page 63
Section 10.4, "While Uninstalling the eDirectory Server holding the CA, the KMOs created on
that server will be moved to another server in the tree and become invalid," on page 64

10.1 PKI Operations Not Working

If PKI operations in ConsoleOne or iManager are not working, it could be because Novell PKI
Services are not running on the Linux, Solaris, AIX, or HP-UX host. Start the PKI Services by
entering npki -1.
If you cannot create certificates, you need to ensure that the NICI module has been properly
installed. See "Initializing the NICI Module on the
Administration Guide. To verify if NICI is initialized, see
Initialized on the Server" in the Novell eDirectory 8.8 Administration Guide.
10.2 LDAP Search from Netscape Address Book
Fails
If you are using an export version of the Netscape browser and a KMO key size larger than 512 bits
associated with the LDAP Server object, the LDAP search from the Netscape Address Book might
fail.
Use a domestic version of the Netscape browser in such cases.
10.3 Removing the configuration of an
eDirectory server that is acting as a treekey
server in a multiserver tree after having moved
the existing eDirectory objects to a different
server fails with the error code for Crucial
Replica.
To complete the operation, change the Key Server DN attribute in the W0 object under Security
Container > KAP to another server in the tree that has downloaded the treekey from this server.
1 In Novell iManager, click the Roles and Tasks button
2 Click eDirectory Administration > Modify Object.
Server" in the Novell eDirectory 8.8
"Verifying Whether NICI Is Installed and
.

Novell Public Key Infrastructure Services

10
63