Novell OPEN ENTERPRISE SERVER 2.0 SP2 - DOMAIN SERVICE FOR WINDOWS Manual page 38

Time is Synchronized
Ensure time is synchronized between all servers in the replica ring by executing the following
command:
ndscheck -a <bind dn> -w <password>
This command in addition to displaying partition and replica health also displays time difference
between servers in the replica ring.
If you observe a time difference between the server, ensure that all the servers in the replica ring are
referencing the same NTP server. After this is done, restart the NTP server using the
command.
restart
Schema is Synchronized
Ensure the schema is synchronized between all the servers in the replica ring by executing the
following command:
ldapsearch -b cn=schema -s base -x attributetypes=<schema attribute>
Substitute the schema attribute value with an attribute you have used in the schema.
For example:
This command returns the schema entry of the attribute
synchronized across all the servers in the replica ring.
Servers in the Replica Ring are Synchronized
Ensure all the servers in the replica ring are synchronized by executing the following command:
ndsstat -r
The
ndsstat
name, the fully distinguished server name, and the eDirectory version.
Permissions for Objects
When you are installing in a name-mapped setup, ensure that you have adequate permissions for the
following objects in the tree:
Container that is being provisioned
Permissions for DNS Locator and Group objects
Permissions to the Security container
Modify permissions to the NCP servers holding replica of the master server
Container Names
When you are installing DSfW, it creates few default containers. Make sure that the following
container names do not already exist under the domain partition:
cn=Computers
cn=Users
38 OES 2 SP2: Domain Services for Windows Administration Guide
ldapsearch -b cn=schema -s base -x attributetypes
utility displays information related to eDirectory servers, such as the eDirectory tree
=forcelogoff
indicating that the schema is
forcelogoff
rcntp